linux/meta-virtualization.git/recipes-containers/containerd, branch nanbield

containerd-opencontainers: Use RDEPENDS:${PN} instead of RDEPENDS:${BPN}

2024-02-01T14:17:20+00:00

The original purpose of using BPN vs PN in the RDEPENDS was due to 32bit multilib issues. Those problems are no longer present, so we can adjust this recipe to use the standard PN in rdepends. This change avoids the following warning: WARNING: .../containerd-opencontainers_git.bb: Variable key RDEPENDS:${PN} (...) replaces original key RDEPENDS:containerd-opencontainers ( ${VIRTUAL-RUNTIME_container_runtime}). if, e.g., RDEPENDS:${PN}:append = " ..." is used in a bbappend or bbclass. Signed-off-by: Peter Kjellerstedt Signed-off-by: Bruce Ashfield

containerd: update to 1.7.7

2023-11-06T16:21:12+00:00

Bumping containerd to version v1.7.7-5-g5e21abb18, which comprises the following commits: d0a1fedb5 *: add runc-fp as runc wrapper to inject failpoint 04491240a containerd-shim-runc-v2: avoid potential deadlock in create handler 6982a0df5 containerd-shim-runc-v2: remove unnecessary `s.getContainer()` 0e2320398 Uncopypaste parsing of OCI Bundle spec file a34fa5681 Prepare release notes for v1.7.7 6ca0aebf0 Allow for images with artifacts to pull 7df492a95 remotes/docker: Fix MountedFrom prefixed with target repository 7779ce64e remotes: always try to establish tls connection when tls configured b3db314a5 Bump x/net to 0.13 a83c66813 Require plugins to succeed after registering readiness 171d76849 cri: call RegisterReadiness after NewCRIService 6013b5e03 cri: stop recommending disable_cgroup 3d27bc738 Handle unexpected shim kill events 4ffa3ed29 Build binaries with 1.21.1 5756f6064 [release/1.7] vendor: github.com/Microsoft/hcsshim v0.11.1 09633b539 deprecate logs package, but disable linter (for transitioning) cb201519f alias log package to github.com/containerd/log v0.1.0 a5024e6dd vendor: github.com/stretchr/testify v1.8.4 7bd976af3 vendor: github.com/sirupsen/logrus v1.9.3 3ca015e55 nri: update mock plugin handlers 4cd208c1f vendor: update github.com/containerd/nri@v0.4.0 8cd2d33c2 [release/1.7] remotes/docker: Add MountedFrom and Exists push status 3e09c65b2 Prepare release notes for v1.7.6 5ebf05d97 push: inherit distribution sources from parent d206896dd content: add InfoProvider interface 423693d7b [release/1.7] update to go1.20.8 c7a35ccdc Fix transfer service dependencies: 38d4e506d Invoke Stable ABI compatibility function in windows platform matcher ddffc7c9a Update hcsshim tag to v0.11.0 b449440a4 CRI: Support Linux usernames for !linux platforms Signed-off-by: Bruce Ashfield

containerd: update to 1.7.5

2023-09-15T17:30:39+00:00

Bumping containerd to version v1.7.5-8-g86dc86e62, which comprises the following commits: ed4bac11e Blockfile: Enlighten blockfile copy on Darwin 4d1cfbbdd Revert "log: define G() as a function instead of a variable" a34e93241 make repositories of install dependencies configurable b449440a4 CRI: Support Linux usernames for !linux platforms 503ab21bf go.mod: github.com/containerd/continuity v0.4.2 93b23eb10 Prepare release notes for v1.7.5 fb1292c8d Bump version to v1.7.4 7a0cae3ca [release/1.7] Prepare release notes for v1.7.4 537d7526e integration: issue7496 case should work for runc.v2 only 0f4885c16 Add configurable mount options to overlay 8804a27d7 feat: make overlay sync removal configurable 5add172be Vagrantfile: add strace tool 207e28f36 integration: add ShouldRetryShutdown case based on #7496 b4f480fb3 pkg/cri/sbserver: fix leaked shim issue for podsandbox mode 88ff575c5 pkg/cri/server: fix leaked shim issue 9f61dfb7c integration: add case to reproduce #7496 2a9ae3c51 log: swap logrus functions with their equivalent on default logger 01445bb73 log: add package documentation and summary of package's purpose 932795f45 log: make Fields type a generic map[string]any 707ca94d8 log: add log.Entry type 0a79e67e4 log: define OutputFormat type dbbe28b7d log: define G() as a function instead of a variable 93b6cb784 log: add all log-levels that are accepted e8e086e02 log: group "enum" consts and touch-up docs 7aa4f8fdc log: WithLogger: remove redundant intermediate var bfdce4ce4 log: SetFormat: include returns in switch 6621e0888 log: remove testify dependency df76aaede removes/docker: remove unnecessary conversion (unconvert) 1c2dd5198 Remove temporary replace 2bf6bd143 vendor: update github.com/containerd/continuity 30a163086 snapshots|pkg: umount without DETACH and nosync after umount c9eebe3d1 mount: support direct-io for loopback device 1c2977db0 Modify loopback size cf9c78d2d snapshots/blockfile: fix lint issue b823b4f54 snapshots/blockfile: deflaky the testsuite 6daeceb11 snapshots/blockfile: use passed in dst in scratchGenerator 99b61aee3 snapshots/blockfile: use loop if options is empty fd39769ac Add mount options to blockfile snapshotter 8d732c6c2 Add sync before unmount on snapshotter layer test 8472a407e Add blockfile snapshotter to snapshotters doc 6740d77ca Add blockfile as a builtin 07cc24b32 Add blockfile snapshotter 32e3b76ee Add diffservice to contrib 661e505c8 Add proxy differ af79c07fd update runc binary to v1.1.9 c0b1c8f74 fix ci Linux Integration test fail 4e97a115f cri: Don't use rel path for image volumes 34a5d0330 fix: allow attaching to any combination of stdin/stdout/stderr c5e7b84c0 update to go1.20.7, go1.19.12 2eaeb3205 Fix ro mount option being passed Signed-off-by: Bruce Ashfield

recipes/classes/scripts: Drop SRCPV usage

2023-08-24T01:38:21+00:00

bitbake has been enhanced such that SRCPV is no longer needed in PV to handle updating git hashes and task signatures. We can simplify our PV by dropping SRCPV Signed-off-by: Bruce Ashfield

containerd: update to 1.7.2

2023-08-24T01:38:21+00:00

Bumping containerd to version v1.7.3-2-g98e8e05b6, which comprises the following commits: 2eaeb3205 Fix ro mount option being passed 4cb2f1515 [release/1.7] Add release notes for v1.7.3 b461ecacf cri: memory.memsw.limit_in_bytes: no such file or directory 14328ae03 migrate to community owned bucket b985f7ef1 update runc binary to v1.1.8 f7a20e17c Move logrus setup code to log package 7353c0286 ctr: update WritePidFile to use atomicfile ae7021300 shim: WritePidFile & WriteAddress use atomicfile 186eb64b7 cri: write generated CNI config atomically on Unix 64c3dcd8e atomicfile: new package for atomic file writes 083f57160 capture desc variable in range variable just in case that it run in parallel mode a9440ce6b Use t.TempDir instead of os.MkdirTemp eea3440d8 use strings.Cut instead of strings.Split for parsing imageConfig.User eace67180 fix userstr for dditionalGids on Linux 973778193 Update Go to 1.20.6,1.19.11 60a6db9c2 Cirrus CI: configure apt-get to wait for locks 6b6b0c828 bugfix(port-forward): Correctly handle known errors 898eca21e Change http.Header copy to builtin Clone fa2efc406 Resolve docker.NewResolver race condition 241514815 pkg/cri/server: Test net.ipv4.ping_group_range works with userns 801e8c806 pkg/cri/server: Fix net.ipv4.ping_group_range with userns d5639a5a8 vendor: github.com/containerd/zfs v1.1.0 403033e52 update go to go1.20.5, go1.19.10 15d65709e ci: remove libseccomp-dev installation for nightly a08ae718c [release/1.7] go.mod: Update cgroups to 3.0.2 c2c54af9d Update ginkgo to match cri-tools' version 6281d46df seccomp: always allow name_to_handle_at 3bf3996d9 integration/client: add timeout to `TestShimOOMScore` 699d6701a Pinned image support 18c6503d9 runtime/v2/runc: handle early exits w/o big locks dafbeb5b1 No more nondistributable layers in MS registry Signed-off-by: Bruce Ashfield

containerd: update to 1.7.2

2023-07-25T18:54:20+00:00

Bumping containerd to version v1.7.2-13-ga766dc550, which comprises the following commits: dafbeb5b1 No more nondistributable layers in MS registry e5b2a0131 task: don't `close()` io before `cancel()` a6a15afe3 move to CRI-TOOLS v1.27.0 58b6b99cd Add a check to skip stats for containers that are not running 0b2b96479 RELEASES.md: de-deprecation of CNI conf_template will be v1.7.3 a24267b28 Remove cni conf_template deprecation 89415fe36 Fix issue for HPC pod metrics e134b6393 Fix panic when remote differ returns empty result 0e41daaea [release/1.7] Prepare release notes for v1.7.2 99582fb1a fix: cio.Cancel() should close the pipes eeda70fb0 remotes/docker: ResolverOptions: fix deprecation comments 313c226b8 Update continuity to a tagged version e21c8beee Post cherry-pick fixes 246240f71 Move PLEG event back to CRI 16f3726dd Generate sandbox exit events from CRI 0c8cfb1a7 Move pod sandbox recovery to podsandbox/ package 91d9f5c64 Publish sandbox events 4b77683b4 Add sandbox events protos 8dd16285a UnmountAll is a no-op for missing mount points acff3eefa Improve error messages and remove check b4dd3bf4e Make ReadOnly() available on all platforms 08d8baf3f Increase integration test tmieout to 20m 1f0dbd011 Remove bind code path in mount() 8f37b1c63 Remove "bind" code path from diff 9139208b3 Properly mount base layers e61e7b312 Skip parent layer options on bind mounts e4307926f Add ReadOnly() function 0277b9b01 Remove escalated privileges d5c18dfb7 Use DefaultSnapshotter 853179366 use t.Fatal if we cannot enable process privileges 5b3ee413f Update continuity 375172604 Fix go.mod, simplify boolean logic, add logging 600abd137 Ignore ERROR_NOT_FOUND error when removing mount df7295dcd Update continuity, go-winio and hcsshim 0db78c482 Remove unused function 219058766 Grant needed privileges for snapshotter tests 96fbe5bc8 Fix layer comparison and enable read-only checks 279e0d3c9 Use bind filer for mounts 93e94da40 Enable TestSnapshotterClient on Windows 3a3da693a Run Windows snapshotter through the test suite e7b62322f Fix misspelling of 'Native' as 'Naive' e1f999a18 Add paired 'mount' log for 'unmount' 5788d6e52 Don't use all-upper-case filenames in snapshot tests 3cdcb2f10 Skip tests that do not apply to WCOW on Windows b0968b8bb Ensure mounts are unmounted before leaving the test b57424851 Unify testutil.Unmount on Windows and Unix b9a8aad45 Implement Windows mounting for bind and windows-layer mounts 1a64ee183 Implement WCOW parentless active snapshots and view snapshots 7851b0a9f CRI: Make stats respect sandbox's platform 8d7c340ca [sbserver] handle missing cpu stats d08b2a088 [sbserver] Refactor usageNanoCores be to used for all OSes 2c38cad77 notify readiness when registered plugins are ready 08de6e7b8 Update volume-ownership image with latest hashes 6a5e54c15 Get CDI devices from CRI Config.CDIDevices field Signed-off-by: Bruce Ashfield

containerd: fix HOMEPAGE

2023-06-26T22:50:56+00:00

The previous HOMEPAGE has been archived. Use the active one. Signed-off-by: Chen Qi Signed-off-by: Bruce Ashfield

containerd: update to 1.7.1

2023-06-07T20:40:22+00:00

Bumping containerd to version v1.7.1-4-g835383b17, which comprises the following commits: 6a5e54c15 Get CDI devices from CRI Config.CDIDevices field 9e60300ea snapshots/testsuite: Rename: fix fuse-overlayfs incompatibility 7b288e2d7 Update ttrpc to v1.2.2 27a0d957b Prepare release notes for v1.7.1 0e0532eb2 bump typeurl to v2.1.1 35e86f96c [transfer] avoid setting limiters when max is 0 f7233811f Update transfer configuration 4510eac00 Fix image pulling with Transfer service aaa65e8c1 Update hcsshim tag to v0.10.0-rc.8 95ef67e19 Fix umarshal metrics for CRI server 3ef5b689a runtime/shim: fix the nil checkpoint options 021bba28b update go to go1.20.4, go1.19.9 6b3ae0129 Remove entry for container from container store on error c0e128624 skip TestContainerStartWithAbsRuntimePath if the runtime is v1 aa3c63c15 integration: add container start test using abs runtime path d2d9eedb1 WithRuntimePath uses the TaskInfo.RuntimePath field fae4b6223 update runc binary to v1.1.7 571715a9d cri: Vendor v0.27.1 a6d336c1f Fix argsEscaped tests 1bbf98e53 oci: partially restore comment on read-only mounts for uid/gid uses 8f6e86fec go.mod: add comment explaining go-fuzz-headers replace rule 1ece0cb50 go.mod: remove replace for github.com/opencontainers/runtime-tools e9f962187 go.mod: integration: use non-pre-release of containerd 84393b005 go.mod: integration: move indirect dependencies to the right group dec2595af update runc binary to v1.1.6 7de8629be cri: Throw an error if idmap mounts is requested 75ac7e0d8 cri: Vendor v0.27.0-beta.0 for mounts uid/gid mappings 54d12b872 oci: Use WithReadonlyTempMount when adding users/groups 624327651 update go to go1.20.3, go1.19.8 1d6641b7c export: add test for WithSkipDockerManifest 0e0d84f6b archive: consistently respect value of WithSkipDockerManifest 9b4935d86 Update sbserver to add noexec nodev and nosuid to /etc/resolv.conf mount bind. 5e953cfa6 Test to ensure nosuid,nodev,noexec are set on /etc/reolv.conf mount. 0aad93f08 Add noexec nodev and nosuid to sandbox /etc/resolv.conf mount bind. 1a64f1b43 ctr/tasks: fix unmarshal the task metrics for cgroups v1 17c52a26d Keep linux mounts for linux sandboxes on Windows/Darwin d81fc15af update runc binary to v1.1.5 755efbe64 go.mod: github.com/opencontainers/runc v1.1.5 Signed-off-by: Bruce Ashfield

containerd: update to 1.7.0

2023-04-05T20:03:55+00:00

Bumping containerd to version v1.7.0-11-g6ea9bc57f, which comprises the following commits: d81fc15af update runc binary to v1.1.5 755efbe64 go.mod: github.com/opencontainers/runc v1.1.5 90591db47 Defer uid lookups on Darwin b7d87b190 Add `WithReadonlyTempMount` to create readonly temporary mounts 1c1b6bcb2 CRI: Don't always close netConfMonitor channel cf2e454bf Sandbox: Correct/add some fields to Status() ce68e8e0d Sandbox: Cleanup shim on Start failure e13a9165e Prepare release notes for v1.7.0 625217d5f RELEASES.md: describe the deprecated config properties 703e2ba4b docs: link docs/managed-opt.md to client.Install f2bb9c9b0 Go 1.20.2 56354c7de Update ttrpc to v1.2.1 5144ba9c4 sandbox: create sandbox with network namespace path dd3eedf3c labels: Add LabelDistributionSource 5c9c630c3 use uppercase letters for flag usage 0efc498d3 Prepare release notes for v1.7.0-rc.3 ff4acdc42 metadata: add comments about Image.CreatedAt 6d46bb410 go.mod: go.opentelemetry.io/otel/* v1.14.0 d26587c72 archive: disable looking up usernames and groupnames on the host 535ef5054 go.mod: github.com/stretchr/testify v1.8.2 2b4f830ed go.mod: github.com/opencontainers/selinux v1.11.0 6bfc82daf go.mod: github.com/opencontainers/runtime-spec v1.1.0-rc.1 7c70185ae go.mod: github.com/klauspost/compress v1.16.0 8e67b2731 go.mod: github.com/imdario/mergo v0.3.13 6afec5558 go.mod: github.com/emicklei/go-restful/v3 v3.10.1 c4f928f88 go.mod: github.com/containerd/ttrpc v1.2.0 5630d6a84 go.mod: github.com/containerd/fifo v1.1.0 6d9513231 go.mod: github.com/containerd/cgroups/v3 v3.0.1 da1ffdd75 go.mod: github.com/Microsoft/hcsshim v0.10.0-rc.7 60738e31d Update imgcrypt to v1.1.7 8a4d409b9 Add release notes for v1.7.0-rc.2 d602c9aec docs: fix typo of shim.RunManager's function comment f70657650 feat: tag image using Transfer api f7eb86ef3 Sandbox: Delete shim+shutdown sandbox on create failure 6b4b6956e Sandbox: Fix/enhance error messages for Create 8ce3e4e15 epoch: fix unit test when SOURCE_DATE_EPOCH is set 32ed559c8 Add Windows Sandbox Stats (sbserver) 08aa576a9 Add Windows Sandbox Stats 8137e41c4 Add ArgsEscaped support for CRI 5946c1051 *: fix code style issue 98cb6d7eb cri/sbserver: ignore the NOT_FOUND error in exec cleanup 01671e9fc cri: add config ut for invalid drain io timeout value 55e25f164 integration: add testcase to drain exec IO in time ffebcb122 cri: disable drain-exec-IO if it is empty timeout 791f137a5 *: update drainExecSyncIO docs and validate the timeout 13bf5565e [transfer] update export to use image store references e2283edef [transfer] update export API types f6491b004 feat: export images using Transfer api b9d7eae1a feat(api): add fields to ImageExportStream 3c18decea *: add DrainExecSyncIOTimeout config and disable as by default a9cbddd65 *: fix typo and skip exec-io-drain-testcase in win b91f42a14 ctr/tasks: support remapped UID/GID 2e96ba95e Create config struct to take user input f25ec98d0 Fix linting error `sets.String is deprecated` 8145b15f0 Bump k8s.io deps 04dfd6275 pkg/cri/sbserver: add timeout to drain exec io 82c0f4ff8 pkg/cri/server: add timeout to drain exec io 43d36a254 Add experimental section to RELEASES.md cd84f752c Prepare release notes for v1.7.0-rc.1 ae42f836f Update mailmap 4522ad886 Update CRI guide link 57fb2d30f Add max shim version environment variable 5c6e9f83d Fix streaming manager deadlock on collection acf6e9411 Update README with location of security audits 30883d831 Increase CI workflow timeout on Windows. af7477e43 docs: fix typos in historical/design/data-flow.md 6b589a89f releases: mark 1.5 as EOL dba6f9db1 Add version to shim protocol 36ae2f6b9 bump go-cni to v1.1.9 cf46d3c6f Treat sandboxes as root gc resources and scan referenced objects 35d42b47f Add Linux arm64 arch to install-protobuf script 727f8530c Prepare release notes for v1.7.0-rc.0 2e9aaf094 docs: update instructions for enabling NRI. 310be5ce6 pkg/nri: update NRI configuration. 8a47c6910 Add a leading space after the comment sign f53417921 Add unit test to getSupportedPlatform a6ad9e04e Rewrite install-protobuf script 3769b4840 Rewrite install-protobuf script 47305392c Add configuration options to local transfer service bd0a2a927 CRI: remove duplicated snapshotters code 49abbe4f2 fix failing TestCDIInjections 30e4a1409 update CDI version to v0.5.4 4728800ab runtime/v2: Get rid of last logrus.Fields usage 4278fbbc7 runtime/v2: Call onCloseWithShimLog for grpc shims 06e085c8b Add Fields type alias to log package 0ecdd341d docs: add more comment to logging.LoggerFunc ea83632a8 docs: Show how to select GRPC for shims 369339897 Migrate from k8s.gcr.io to registry.k8s.io a48dbefc1 Fix concurrent writes for UpdateContainerStats dc27cc0a2 Add macOS build notes 56274749c sandbox: start sandbox with options 2716fd041 dependency: bump go.etcd.io/bbolt to v1.3.7 979a74412 runtime/v2: Log BootstrapParams 4baa1876b contrib/apparmor: remove code related to apparmor_parser version 0ced6ac64 Prepare release notes for v1.7.0-beta.4 90d004ae8 Go 1.20.1 281f89a9d go.mod: go 1.19 d8b68e3cc Stop using math/rand.Read and rand.Seed (deprecated in Go 1.20) a9ac5f9cb lint: remove `//nolint:dupword` that are no longer needed 9b510e9a8 lint: silence "SA1019: tar.TypeRegA has been deprecated... (staticheck)" 8bf975b4f lint: silence "type `HostFileConfig` is unused (unused)" 4b9fd6ba5 golangci-lint v1.51.1 ac31c9a53 Clean up repeated package import 39bac0dbe error strings should not be capitalized 9a9cfe85e Go 1.19.6 0166783c7 cni: pass in the cgroupPath capability argument d14758b60 go.mod: bump to go-cni main e855a5998 cmd/ctr/commands/images: support usage subcommand 9c82e929f release: xx v1.2.1 844252164 Add fallback for windows platforms without osversion 081601f52 Update imagestore interface to support multiple references 646bc3a94 CRI: Create DefaultCRIAnnotations helper 5aab634e1 CRI: Pass sandbox annotations to _other platforms 2b24af8d1 Use options to pass PodSandboxConfig to shims ebbcb57a4 pkg/cri/sbserver: experimental NRI integration for CRI. 8a1dca0f4 pkg/cri: split out NRI API from pkg/cri/server. a8bb1ad2a loadConfig pre-inspection in advance 36e7dbdcb ctr version: add args check, prohibit incoming args 750d18ace Extract CRI instrument package 60d04b0b0 pkg: rename {blockio,rdt}_default.go -> nonlinux.go b61988670 go.mod: github.com/containerd/typeurl/v2 v2.1.0 74b371b98 CRI: Mirror generic toml runtime config under server 8ef298d86 Add transport credentials GRPC opt 77fc0948c Use switch when creating TTRPC/GRPC client a82e37a5a Add shim bootstrap params fc2e761e2 Initial GRPC client support 9e5c207e4 Wire up client bridges 4b1ebef3c Add Sandbox service GRPC bridge 47cb5f64b Add Task Service GRPC bridge 51a8db233 Send container events with nil PodSandboxStatus 27c8f4085 Move PLEG event generation back to sbserver to avoid missing pod sandbox status 7cf556075 test: add hostNetwork tests for both windows and linux d33a43cc2 pkg/apparmor: clarify Godoc a3265102d Revert "Don't check for apparmor_parser to be present" c990e3f2e contrib/apparmor: remove version-dependent rules fe0116ec2 CI: skip some jobs when `repo != containerd/containerd` 3eda46af1 oci: fix additional GIDs ef2560d16 oci: fix loop iterator aliasing 52f82acb7 btrfs: depend on kernel UAPI instead of libbtrfs 62df35df6 *: introduce wrapper pkgs for blockio and rdt 6cdc221f5 'go routine' should be 'goroutine' b0e97c0f9 Use multierror for cleanup error 34314717b Remove sandox store and controller service type a788f6c79 Move local sandbox controller under plugins package 2717685da Refactor sandbox controller interface 0b33a45fa cri: fix Mirrors deprecation comment 5bc3fea62 update fuzz function names in docs with golang naming convention 904a87d26 docs: fix function names in fuzzing test documentation 9e4acc028 importer: stream oci-layout and manifest.json Signed-off-by: Bruce Ashfield

containers: use VIRTUAL-RUNTIME variable to allow container runtime flexibility

2023-03-08T22:08:02+00:00

Rather than using virtual-runc (which choses between the old docker and opencontainer variants), use the newly added VIRTUAL-RUNTIME_container-runtime variable, which allows switching betwen runc and crun. Signed-off-by: Bruce Ashfield