linux/meta-virtualization.git/recipes-containers/criu, branch master-next

criu: update to v4.2-tip

2026-05-28T15:07:56+00:00

Switches the recipe from 'master' (frozen at v4.2 tag) to 'criu-dev' (active development), picking up 211 commits past v4.2 — including AMDGPU plugin work, kernel 7.0 rseq compat, protobuf 7.x compat, and a host of restore/zdtm fixes. Two recipe-side adjustments are needed for the new tree to build under OE: - Set HOSTCC=${BUILD_CC} so the compel host-tool build can find a host compiler. Upstream commit 36c63ecb5 ("make: default CC to cc instead of gcc") changed scripts/nmk/scripts/tools.mk to default HOSTCC to 'cc', which the native sysroot doesn't provide (only the prefixed x86_64-poky-linux-gcc). - Refresh 0001-plugins-cuda-pass-DEBUG_PREFIX_MAP.patch for new context: upstream added $(DEFINES) to the cuda_plugin.so build line, so the refreshed patch now inserts our $(DEBUG_PREFIX_MAP) before $(DEFINES) rather than at the (no-longer-present) original position. Bumping criu to version v4.2-211-g4d76d1acd, which comprises the following commits: 4d76d1acd ci: shard alpine-test into parallel jobs to reduce CI time da5b7bf82 zdtm: unregister rseq before zeroing the rseq area 3db4b0922 plugins/amdgpu: Fix unbalanced quotes in a warning message 3805d59cc plugins/amdgpu: Demote one more error to warning 71be2f42e plugins/amdgpu: Fix strtoul error handling eca973251 plugins/amdgpu: Fixup printf format in env handling f73bf1b05 plugins/amdgpu: Reduce scope of some globals 1961c5e0d plugins/amdgpu: Cleanup env variable handling e40e6f766 restore: add missing continue in restorer_get_vma_hint b0b89a94f zdtm: check reservation mmaps are restored correctly 7daaa11aa mem: don't PROT_WRITE on reservation mmaps 2c9ee0abd restore: update prev_vma_end after processing the last vma in a list 5039458f6 pie/restorer: normalize tv_nsec when re-anchoring absolute timerfd expiry 9a1453b38 compel: keep ELF metadata for ld.lld 36c63ecb5 make: default CC to cc instead of gcc 4bc9adf11 contrib: add tests for criu-service-client 57a92dbb3 contrib: add reference client for criu-service 14cb3c201 net: Route veth restore through usernsd for userns mode c1cea9004 pycriu: Fix FieldDescriptor.label removal in protobuf 7.x 5546c06a1 zdtm: Fix rseq01 test for kernel 7.0 rseq changes 9777d2cf0 zdtm: Skip socket_udplite test when kernel lacks UDPLITE 09d7f7a2e ci: Add vanilla next kernel test variant to Lima CI job 189ad2c6f sockets: Treat UDPLITE as optional in collect_err() f6b7fb610 plugins/amdgpu: Fix remaining wrong usages of pr_perror 543612ae4 plugins/amdgpu: amdgpu_plugin_drm_restore_file() does not need to use libdrm 4cf1e190e plugins/amdgpu: Use save_vma_updates for all call sites 93ee1c527 plugins/amdgpu: Do not try dmabuf fd restore if render restore failed 9a65f7ede plugins/amdgpu: Convert away from libc buffered file IO 909eb890f plugins/amdgpu: Use the load_img helper in drm file restore 65f7baaf0 plugins/amdgpu: Move drm file dump and restore into helpers 05961714e plugins/amdgpu: Add plugin to inventory even if process has no vmas 7041509a5 plugins/amdgpu: Check sdma operation type early and once 8315b1a7a plugins/amdgpu: Fix open_drm_render_device() a85c10c77 plugins/amdgpu: Do not eat the errno in kmtIoctl e656198ca plugins/amdgpu: Reduce amount of debug logging a little bit 59eac8cc6 plugins/amdgpu: Remove plugin_log_msg() ea080673b plugins/amdgpu: Consolidate vm_info collection 5659b3954 plugins/amdgpu: Correct offset type and add error handling for seek operations 830e6cd3b plugins/amdgpu: Flatten amdgpu_restore_init a bit b9b1600bf plugins/amdgpu: Close dma-buf image file if the read fails 19baa7c37 plugins/amdgpu: Close the directory when image probing fails 0bd0c14bd plugins/amdgpu: Propagate failure to save buffer object content e26ed5163 plugins/amdgpu: Fix logging of failures to open files during restore init b1281444a plugins/amdgpu: Fix drm pages size header c0002ed83 plugins/amdgpu: Remove unused new_minor from struct vma_metadata ae4ed06f5 plugins/amdgpu: Remove unused current_pid global variable 52faca651 plugins/amdgpu: Fix one error message 9293f14fd plugins/amdgpu: Check that image unpacking worked during plugin init 5b88d1690 plugins/amdgpu: Fix shared memory allocation and teardown 81df65929 plugins/amdgpu: Use correct sizes to unmap sdma copy objects 47ab00240 plugins/amdgpu: Fix error handling in plugin init d96a2eb29 plugins/amdgpu: Close file on failures in amdgpu_plugin_dmabuf_restore 79c347c1e plugins/amdgpu: Clarify open_img_file docstring 592f04507 files-reg: warn when external file has no inherit-fd mapping on restore 176f14019 zdtm/bpfmap: parse frozen field with SCNu32 1e200015a proc_parse: Preallocate extra space for possible option string growth 9afe2e92d zdtm/ipc: use snprintf and bounded writes for sysctl payloads 740d67749 zdtm/ipc: close sysctl fd on write error paths 712f68d49 zdtm/packet_sock_mmap: keep parser warning-free with unsigned maj/min d24bfbf7d test/bers: use size_t format specifiers for file counters 3d5eb1c14 proc_parse: use matching unsigned formats for uid/gid and tfd parsing f943d4f32 bfd: fix partial write handling in bwritev() 78a712021 bfd: Support dynamic buffer resizing 351a16cab plugin/amdgpu: validate dmabuf_fd before drmPrimeFDToHandle() call 315fbed8f plugin/amdgpu: fix resource leaks in drm dump error paths b518e768c plugin/amdgpu: fix use of uninitialized pointers on partial allocation failure c2fba65e5 plugin/amdgpu: fix device handle leak in handle_for_shared_bo_fd() 9965ede5c plugin/amdgpu: set errno in open_img_file() on read/write failure 3e8d166ab plugin/amdgpu: fix fd leak in open_img_file() on fdopen failure 8e36132ef plugin/amdgpu: fix resource leaks in drm restore error paths b8d118a75 plugin/amdgpu: fix memory leak in dmabuf restore error paths 16b252ee2 plugin/amdgpu: add missing xzalloc() NULL checks in drm af32d407a plugin/amdgpu: check posix_memalign() return value 611af0188 plugin/amdgpu: add open_img_file error handling 22c3ab6b8 proc: Fix potential buffer overflow in parse_threads e956db75f restore: Fix exit code truncation for zombies c11579493 criu: Fix garbage write to /proc files fbcc99480 restore: Fix incorrect mmap error check 2c20b0482 restore: Fix memory leak of siginfo_priv_nr b0ebc416a restore: Fix memory leaks in CoreEntry handling 128566551 ci: remove aarch64 Fedora Rawhide from Cirrus CI 81f26b6b1 ci: add aarch64 matrix build for Fedora Rawhide test 87951452f test/rpc: clean up stale pidfile and socket before starting service ab28d4466 test/rpc: add page server address test f513ac16a cr-service: fix address handling of requests b19f73467 zdtm: add pipe_owner test for pipe ownership preservation fa7918890 pipes: restore pipe ownership to fix /proc/self/fd access 711b4ebfb ci: port Vagrant Fedora Rawhide test to GitHub Actions 9d8b23d5d ci: fix podman pids limit for thread-bomb test 4bcf08ce7 compel: fix heap alignment for structs with xsave state e39ff5228 tests: it seems 30 seconds timeout is not always enough 31d941ba7 sk-queue: increase CMSG_MAX_SIZE to handle all SCM types 7539f399f coredump: enable coredump generation on riscv64 c70a4b384 zdtm: add timerslack_ns test b258d6454 criu: restore timer_slack_ns per thread dfed6f073 criu: collect and dump timer_slack_ns per thread 985e6c6dd images: add timerslack_ns field to thread_core_entry 21c14313d contributing: document AI-assisted contribution guidelines 33dca7905 zdtm: add file_lease05 test for broken read lease restore 64c8d4a11 file-lock: fix type confusion in broken lease restore 33e340bed zdtm: fix TOCTOU race creating criu.tree directory 010a346c6 feat: remove build-time patches from Nixpkgs bbcadd85f feat: specify ourselves as Nix flake source f81e46b73 ci: upgrade CodeQL actions from v3 to v4 bce0a3c75 plugin/amdgpu: Don't print error when restoring drm file bd4cd4e9e plugin/amdgpu: Check output of open_img_file af3f4be06 ci: remove mips64el-stable-cross and mips64el-unstable-cross 7582216e1 loongarch64: implement atomic_dec_and_test 65cb18af2 pycriu: Force python protobuf backend in 3.14+ c9a0190f0 ci: mark archlinux-test as continue-on-error a13ce915c zdtm: use private bind-mount as GCOV external mount target e6bea0372 ci: stabilize gcov-test coverage upload bcd66dc30 scripts: fully qualify base image references a72bf212e scripts: improve layer caching of container builds 941f9b108 readme: update reference to consolidated workflows 5e1531888 ci: use clean state before self-contained check 5add27e6c compel/infect: optimize compel_stop_tasks_on_syscall 4a67a9a46 restorer: use atomic to synchronize threads e718fac15 compel: simplify compel_stop_on_syscall 7daebbe46 compel: remove hardware breakpoint usage 869d481cf restore: parallelize task stopping in attach_to_tasks and catch_tasks 15f11e404 compel/infect: Use waitpid with specific PIDs in compel_stop_tasks_on_syscall 09134c8ca restore: read user ns from pstree ids image f5974cc32 pagemap-cache: stop filling cache on VMA_AREA_GUARD 1bcbc55eb criu: fix double-open of userns image in --stream mode 04f1b9fb6 test: libcriu: use installed headers and library 3f3acc320 scripts: rseq: fix detection of rseq_cpu_id_state 8c29a7ccd ci: Consolidate test workflows and gate them by Alpine Test 5468d4a53 plugin/amdgpu: fix pr_perror trailing newline 555b257c5 plugin/amdgpu: Catch error for failure to open drm device 50e22d80a sk-queue: Fix memory leaks in error paths 1524ffc99 sk-queue: Add missing MSG_CTRUNC check in dump_sk_queue c180188db zdtm: fix incorrect open() syscall use for file creation without mode f22c95d2d restore: move cgroup restore after creds are prepared 1a4b338ed unix: fix dangling pointers in icon hash on error path 813e1a525 sk-inet: remove trailing whitespace 39c66a704 pagemap: detect EOF on truncated pages in process_async_reads() cf2b8c4bc restorer: detect EOF on truncated pages file to prevent infinite loop 7c5b745c6 MAINTAINERS: Update maintainer roles c5b81c0d7 Add UPDATE_INETSK hook for inet address rewrite cff99dbcc fsnotify: Fix mnt_id type to avoid undefined behavior with -1 sentinel 859924c2f fsnotify: Check mntns_get_root_by_mnt_id() return value in get_mark_path() 82c09bb92 ci: Re-enable zdtm/static/binfmt_misc 5c994447a zdtm/static/binfmt_misc: make the random generation actually random 838a59087 zdtm/static/binfmt_misc: run cleanup hook before restore 577c9a0f2 zdtm.py: ignore utf-8 conversion errors in test logs e6510a338 criu: Support binfmt_misc sandboxing ecab9e357 criu: kerndat: add kerndat_has_binfmt_misc_sandboxing() 0ae3a9498 criu: Remove legacy binfmt_misc handling code 100b3087f compel/x86: probe kernel task_size at runtime c676864d4 test: Add ZDTM test for SIGEV_THREAD_ID timer on thread leader aef72658c dump: Initialize thread leader's vtid before dumping posix timers 4d293afbe page-xfer: Fix page_read resource leak in page_pipe_from_pagemap() b5d531eb4 sk-unix: fix mutex_ghost deadlock on connect failure in post_open_standalone fc2cddbdb plugin/amdgpu: Allow dump with victim unable to see all gpus cfccc8387 fsnotify: Fix memory leak in pre_dump_one_fanotify error path 90407c014 fsnotify: Fix memory leak in pre_dump_one_inotify error path 155514d34 fsnotify: Improve error messages with more context 9e2c0cc56 fsnotify: Fix file descriptor leak in restore_one_inotify() 15bd86094 github: add Copilot repository-specific instructions 9e5fbcd66 pycriu: Fix self-dump failure with explicit PID 21a675826 cr-restore/shstk: Make arch_shstk_unlock use correct pid 07af3304f restore/pie: check return value of sys_rseq on unregister fb59ae504 test: fix GCC 16 compile error b208bec12 crit: show dead task_state 9885fb3c7 crit: fix incorrect task state decoding 71fe85ec9 ci: add iproute2 to the list of packages in apt-packages.sh 36f1e9d38 amdgpu: use fseeko with large-file support instead of fseeko64 ddf7a170f infect-types: fix user_gcs redefine error 2dd66866e zdtm/cgroup_stray: fix uninitialized variable 974c1bc89 zdtm/tempfs_subns: fix uninitialized variable b1a51489d compel: fix sys_clock_gettime function signature fc1867c44 kerndat: Fix error handling for kerndat_has_timer_cr_ids() fail 2e5f9facf util: Make close_safe() reset fd to -1 even on close() failure d4e811413 readme: use a local copy of the CRIU logo 30acbabcd ci: also exclude docker version 29 f66e59ee5 cr-dump: fix error handling f78bea8d3 zdtm: gcs: add opt-in GCS test support for AArch64 d591e320e criu/restore: gcs: adds restore implementation for Guarded Control Stack 2429d49e6 criu/dump: gcs: save GCS state during dump 41ecb7ac7 images: aarch64: add user_aarch64_gcs_entry 92e6e523b compel: gcs: add opt-in GCS test support for AArch64 2f676d20e compel: gcs: set up GCS token/restorer for rt_sigreturn 6bb856b0a compel: gcs: initial GCS support for signal frames 73ca07148 gcs: add GCS constants and helper macros 501b714f7 compel/aarch64: refactor fpregs handling 90300748e tty: fix compiler error 09bb36266 restore: fix "Defect type: UNINIT" bf82389de dump: fix "Defect type: IDENTICAL_BRANCHES" 2cf8f13ca doc: update pipe/socket examples for --inherit-fd 62aadb22a amdgpu: use 64-bit offsets for parallel restore 1db7eed69 amdgpu: use local kernel headers instead of libdrm 29525f8cb codespell: skip amdgpu kernel headers e4a5e164b plugins/amdgpu: update kernel headers f56ccfd2d plugins/amdgpu: remove unused variable 6ed49894c plugins/amdgpu: add a comment for retry_needed 77e6558dd plugins/amdgpu: apply code-style fixes 690b61043 plugins/amdgpu: return 0 in post_dump_dmabuf_check ff35a9126 plugins/amdgpu: remove excessive debug messages 9e404e208 plugin/amdgpu: Support for checkpoint of dmabuf fds d43217dad plugin: Add DUMP_DEVICES_LATE callback db0ec806d plugin/amdgpu: Add handling for amdgpu drm buffer objects 5eb61e1b1 plugin/amdgpu: Add drm header 0b7ca29c1 plugin/amdgpu: Add amdgpu drm header fb02dbf68 files-ext: Allow plugin files to retry 7a4ee0ae8 restorer: Skip non-regular VMAs 920437205 plugins/amdgpu: Update `README.md` and `criu-amdgpu-plugin.txt` 4a3a695df plugins/amdgpu: Implement parallel restore 33ed774c8 plugins/amdgpu: Add parallel restore command 638614075 plugins/amdgpu: Add socket operations ddbb3dbd8 limit the field width of 'scanf' 3c7d4fa01 criu: Version 4.2 (CRIUTIBILITY) Signed-off-by: Bruce Ashfield

criu: Add CVE_PRODUCT to align with NVD CPE

2026-04-21T02:35:32+00:00

CVE_PRODUCT has been set to criu:checkpoint/restore_in_userspace to align with the product naming used in the NVD CPE database for criu. The slash-containing product token is intentional as NVD references this project under checkpoint/restore_in_userspace. Only a single CPE entry exists in the NVD for this product: cpe:2.3:a:criu:checkpoint/restore_in_userspace Signed-off-by: Himanshu Jadon Signed-off-by: Bruce Ashfield

criu: update to v4.2

2026-03-18T03:32:54+00:00

** CRIU 4.2 fails to cross-compile with: No rule to make target '/usr/include/google/protobuf/descriptor.proto' Upstream commit 7fbf7b2be removed the build-time symlink for descriptor.proto and replaced it with a Makefile rule that resolves the path via pkg-config and passes it to protoc. Both the pkg-config query and the protoc --proto_path are hardcoded to host paths. This breaks cross-compilation because pkg-config --variable=includedir returns the raw host path (/usr/include) without applying PKG_CONFIG_SYSROOT_DIR. The sysroot prefix is only applied to -I flags from --cflags, not to raw --variable queries. Add a patch introducing an overridable PROTOBUF_INCLUDEDIR make variable and pass the sysroot-prefixed path via EXTRA_OEMAKE. Remove the old do_compile:prepend symlink workaround which no longer applies. And then we pickup the following changes: 3c7d4fa01 criu: Version 4.2 (CRIUTIBILITY) 0a7e7d09d log: use sizeof(*hdr) instead of sizeof(hdr) e689d902b criu/log: properly handle truncated length from vsnprintf 6344e8d71 cr-servce: move kerndat_init after log_init a525b3c32 test/vdso-proxy: handle merged vma-s ce680fc6c Revert "plugins/amdgpu: Implement parallel restore" 1d08ff8ca coredump: fix handling of num_pages cb8e1da3f coredump: use compat_nr_pages as fallback 0fa6ff3d1 test/others: add tests for check() with pycriu 567f70ce1 test/others: add test for check() with libcriu a1dc88502 test/rpc: update errno check 3c841af2c pycriu: use explicit imports for __init__ f7ccb63bd pycriu: set RPC opts for CHECK 9371c4a78 cr-service: refactor RPC opts parsing for check() 72ca94db4 cr-service: refactor logging setup 5966ffe8a cr-service: refactor images_dir path resolution 60a731ab3 cr-service: drop images_dir from setproctitle ee4100c09 cr-service: refactor images/workdir setup 71a637923 pycriu: set default value for sk_name d2c46b92b pycriu: better socket error handling 7aad7317b lib/pycriu: changing the default behavior to use the system binary 3f97cfe87 test/libcriu: check setting of RPC config file 2878faa74 libcriu: enable setting of RPC config file 07ad2473f Use command -v instead of which afcfcd3bf ci: add which dependency in dnf packages 686018147 ci: add wheel and setuptools in dnf packages d3dfb663b make: don't install external dependencies f74e68daf ci: verify call order of action-script hooks f824dc735 ci: consolidate action-script tests d5c81f810 pycriu: prevent always appending "Unknown" to error messages 540c631dd pycriu: add missing protobuf dependency a5ae3c184 pycriu: set licence to LGPLv2.1 697c31abe zdtm: shstk: add SHSTK_ENABLE test build option 6fd71b9ee x86/criu: shstk: restore SHSTK via premap loops abf4a71d9 x86/criu: shstk: add shstk_vma_restore() 02462c19c restorer: shstk: allocate restorer shadow stack b18c07d8a restorer: shstk: add shstk_min_mmap_addr() f29cb750d x86/criu: shstk restorer memory accounting functions 3365c7c02 restorer: shstk: add restorer shadow stack stubs bb9a7202a test/others/rpc: show logs on error 9d072222e test/others/rpc: parse action-script via config c03c08d1b cr-service: refactor rpc config parsing dcce9bd0e zdtm: add a test for --allow-uprobes option f548d3af4 crtools: remove "consult documentation" aeec40bf0 docs: add documentation for --allow-uprobes bab72af9a vma: introduce --allow-uprobes option 74bf40fee crit: add VMA_AREA_UPROBES flag 0ff2e0a66 criu-coredump: add VMA_AREA_UPROBES flag 7bf402f6b vma: introduce VMA_AREA_UPROBES flag 520266d89 zdtm: add sk-unix-restore-fs-share test 790b3cf42 ci: run alpine tests on arm64 77553f07d make: prevent redefinition of 'struct sigcontext' 3379c122e page-xfer: fix incompatible pointer type on armv7 7a4b35a91 contributing: update links to mailing list 76394e93a ci: consolidate aarch64 tests on GitHub runners 0a81dc8bb ci/java: update base image from focal to jammy b25ff1d33 Remove travis-ci leftovers 25f8be0f6 ci: use package-manager dependency install scripts 67751bc11 docs: add developer overviews for AI assistants 91758a68e zdtm: Remove junit_xml leftovers 2d2168fc9 vdso: relax EI_OSABI check to support linux in ELF header 2e26b36d4 pagemap: print page regions in the format `start - end` 7e0da4d97 pagemap: use unsigned long for page counts afb2e6c3f pagemap: change PagemapEntry.nr_pages to uint64 to support huge mappings c7395f4cb files: fork helpers without CLONE_FILES | CLONE_FS a8c5e1171 lsm: use attr/apparmor/current to get apparmor label 80c280610 compel/mips: Relax ELF magic check to support MIPS libraries 053a22a23 pagemap: prevent integer overflow in pagemap_len a779417a3 zdtm: stop importing junit_xml 254ba3e8c ci: avoid Docker 28 due to regression 4b7398595 criu/sockets: Restrict SO_PASSCRED and SO_PASSSEC to supported families fa1b39906 zdtm/static/sock_opts00: use unix socket to test SO_PASSCRED and SO_PASSSEC 2ba343010 test/zdtm/static/maps12: fix pointer-to-int cast dcee5bd6f make: Disable branch-protection for PIE code on ARM64 98f2bd525 ci/vagrant: install vanilla kernel for Fedora Rawhide test 01265cfc6 test/zdtm/static/maps12: add madv guards test 9c0f725a6 criu/mem: dump: note MADV_GUARD pages as VMA_AREA_GUARD VMAs 59b4d662a criu/pie/restorer: add madvise(MADV_GUARD_INSTALL) restore logic 63c702968 criu/{mem, vdso, cr-restore}: introduce VMA_AREA_GUARD fake VMAs cc047d595 criu/mem: dump: skip MADV_GUARD pages content dump 5843cbf97 criu/mem: refactor should_dump_page helper 42580fcb1 criu/pagemap-cache: pagescan: look for PAGE_IS_GUARD pages 1873e8f50 cr-dump: warn if MADV_GUARD is supported but isn't shown in pagemap 4fc07a8a4 kerndat: add pagemap_scan_guard_pages feature check logic 2bb77daa9 kerndat: add madvise(MADV_GUARD_INSTALL) feature-detection fce491113 criu/include/mman: define MADV_GUARD_INSTALL 5f94dd71e CI: Consolidate arm64 tests on GitHub runners c6c6f6f23 zdtm/socket-tcp-closing: fill socket buffers effectivly d586b30c6 vagrant: fix tar including archive in itself 2762b21e4 vagrant: update image to fedora 42 0d1e280d0 vagrant: fix 'qemu' install 64276874d restore: flush caches during restore 95d5e2e59 compel: flush caches after parasite injection 22c83e3eb images/Makefile: use msg-gen 066bf7bf3 Keep images/google/protobuf directory 21c3b9c00 images/Makefile: fix using $(Q) 7fbf7b2be images: remove symlink for descriptor.proto 455c67739 zdtm: Add ztatic/mnt_ext_file_bind_auto test e31828ed8 mount: Fix trailing / when a file is bind-mounted 3dc865bc8 test: add static tests for ICMP socket a80c54484 sk-inet: Add support for checkpoint/restore of ICMP sockets 677a56891 zdtm/netns_sub_sysctl: skip unsupported sysctls 87bd09a0d net/sysctl: make ipv4/ping_group_range work in user namespaces 45d09ae17 net/sysctl: fix broken ipv4_sysctls_op 4f057a6ae net/sysctl: fix missprint in an error message 4c7d42f67 ipc/sysctl: fix CTL_FLAGS_IPC_EACCES_SKIP by making it a flag 922754dff rpc/log: return first error always a79b33d0c cpuinfo: show error when image is missing 99ba6db89 crtools: do a few minor cleanups fcbaac059 crtools: simplify check for cpuinfo subcommands fbfed312e feat: introduce Nix flake 5f18ca1bb test/zdtm/static: add maps11 test for MAP_DROPPABLE/MADV_WIPEONFORK dfa0ce180 test/zdtm/static/maps02: add MAP_DROPPABLE testcase 4f9dcfb9c pycriu/images/pb2dict: add MAP_DROPPABLE flag b90cfc1a8 criu/proc_parse: support MAP_DROPPABLE mappings 6476488a5 test/zdtm/static/maps02: add MADV_WIPEONFORK testcase af5412a43 criu/proc_parse: support MADV_WIPEONFORK/VM_WIPEONFORK 2b8951a9c image: use `protoc` instead of `protoc-c` 1fdff7c7a zdtm: fix check for criu binary ae1395de1 zdtm.py: add an option to change pycriu import path 7a5b3d1f4 plugins/amdgpu: Update `README.md` and `criu-amdgpu-plugin.txt` a61116fd9 plugins/amdgpu: Implement parallel restore e8ba7c103 plugins/amdgpu: Add parallel restore command 1fd1b670c plugins/amdgpu: Add socket operations e257d0497 pstree: Add `has_children` function 497109eb4 cr-restore: Move `cr_plugin_init` after `fdstore_init` 427c0dc27 criu: Introduce a new device plugin hook for restore d57d40a5a sk-inet: add MPTCP definition fddca67cc seize: fix pause devices for frozen containers 366d73a4c make: remove checks and warnings for bsd strlcat and strlcpy 1eaa870cc kerndat: check that hardware breakpoints work b458a5c1a sk-inet: add message how to disable MPTCP in Go 5a725266a zdtm: add mnt_ro_root test 6b3826a6f zdtm/lib: add "bind" desc option 88cb552f6 mount: restore root mount flags b6dca3116 aarch64/crtools: fix define for missing constants 5de61a721 net: nftables: avoid restore failure if the CRIU nft table already exist b9da95b0b s390: Fix FP reg restore after parasite code runs 74799ae02 aarch64: fix build with missing NT_ARM_PAC_ENABLED_KEYS 680584166 cuda: remove redundant goto label e7aee3c5c cuda: use pr_perror for libc function errors 5ff52326e restore: use the new kernel interface to restore timers 9a1e97966 compel: fix the stack test daa548bbf criu: Do not print failed message when there is no late stage hook 34226fd24 ci: try GitHub arm runners a44aa6d98 criu: Version 4.1.1 Signed-off-by: Bruce Ashfield

criu: update to v4.1.1

2025-10-16T16:17:18+00:00

Bumping criu to version v4.1.1, which comprises the following commits: a44aa6d98 criu: Version 4.1.1 ced15c302 test/zdtm: remove unused compiler argument 570621a48 mount-v2: enter the mount namesapce to propagation properties b6059ff19 criu: Version 4.1 (CRISC-V) Signed-off-by: Bruce Ashfield

containers: adapt to UNPACKDIR changes

2025-06-26T02:40:08+00:00

This commit updates the container recipes to the OE core UNPACKDIR changes. - We drop references to WORKDIR - We adjust destsuffix fetches to use BB_GIT_DEFAULT_DESTSUFFIX instead of 'git' - Update our GOPATH references to use UNPACKDIR - Drop S = assignemnts where possible Signed-off-by: Bruce Ashfield

criu: update to v4.1

2025-04-03T17:56:53+00:00

Along with the new commits we adjust the following: - refreshed patches - pytoml fixes for crit plugin - debug prefix map for cuda Bumping criu to version v4.1, which comprises the following commits: b6059ff19 criu: Version 4.1 (CRISC-V) bc1415317 criu: fix log_keep_err signal deadlock 0f6470944 namespace: skip cleaning up the uid/gid map in error cases 6826ac58c ci: run tests on a nftables only system 700a8c4b5 ci: do not run tests requiring iptables if it is missing f22330ff0 test: print out logs if tests fail 29ccb5b62 test: others/rpc do not use nftables locking backend 95729ec32 docs: mark make commands with same format as elsewhere 2cd9d5ded docs: update INSTALL.md with a section about building CRIU 867c77303 make: allow setting the default network locking backend 720bf67e0 zdtm/vdso02: unmap vvar_vclock mappings 62a4a5874 vdso: correct data types for ELF hash table sizes b8553d19e test/zdtm: check that PAC keys are C/R-ed 8ae5db37b arm64: C/R PAC keys c5d46d86a restorer: Add a lock around cgroupd communication. 7748b3fe7 pstree: print clone flags in error message d85550157 vdso: Fixes in DT_GNU_HASH handling ed6374b48 lsm: use the user provided lsm label d35808f5e ci: update to latest actions for codeql CI job c298b51a6 scripts/uninstall_module: import signal module 38b9807cd coredump: enable coredump generation on arm da90b33a4 coredump: enable coredump generation on aarch64 030fa4aff criu: fix internal representation of cgroups hierarchical structure b7fa7d304 kerndat: run iptables with -n to not resolve service names 528c94c48 ci: install gawk for Fedora based tests d66bc3499 Makefile: move codespell options to .codespellrc 8a06ca27c vdso: switch from DT_HASH to DT_GNU_HASH (aarch64) 6710cfce1 zdtm/netns_sub_sysctl: add ipv4/ping_group_range sysctl check 4ca74b9af net/sysctl: c/r ipv4/ping_group_range value 9c40781c2 net/sysctl: put common multiplier outside the brackets d226bd4f6 ci: handle results from latest codespell e2dffcbc8 lib: do not set protobuf has_* field too early 82b03429b cuda: disable CUDA plugin for pre-dump 7f0d107fe seize: use separate checkpoint_devices function 02056bf41 cuda: prevent task lockup on timeout error f83931542 net: remember the name of the lock chain (nftables) 54795f174 criu: use libuuid for criu_run_id generation 815ef6884 ci: two check-commits.yml changes 061f4266e test/zdtm: add a new test to check non-periodic timers 09dc2e958 timer: Refine itimer_armed logic and improve timer value handling aad66a4f7 test: fix cmdlinenv00 on aarch64 2b7492480 files-reg: fix buffer overflow on aarch64 6fdac5081 seize: Adjust the position of the log message 97398068b net: redirect nftables stdout and stderr to CRIU's log file 6dce80c53 util: added cleanup_file attribute. 260c08418 zdtm: Check CapAmb is restored correctly after C/R 6f8efad30 cr: Task CapAmb support 94b9b3c5d freeze_processes: implement kludges for cgroup v1 82f4ecda6 freeze_processes: fix logic 99e1fbd8a criu/seize.c: clang-format it a8754905c test: run scm06 in the ns and uns flavors 15c81c126 test/java: increate the ghost file limit dc6cef0b4 cuda: Fix return value from CHECKPOINT_DEVICES hook so that dump's fail properly 8ee2eba47 vdso: handle vvar_vclock vma-s ed560a349 pidfd: add missing include 40b7f04b7 compel/arch/riscv64: properly implement compel_task_size() 399d7bdcb compel: fix gitignore and remove autogenerated code 21e5f4cfd test: add get-state to mocked cuda-checkpoint tool 28c2cb3fd cuda: enable checkpoint support for paused tasks 498bcf280 zdtm: Check many processes with common dead pidfd 7125bfc69 pidfd: one process creates a helper and opens all fds to it b1cac7a8e cuda: fix check for GPU device availability 36a53fe23 ci: test interrupt-only mode with frozen cgroup 4196268ee seize: enable support for frozen containers ff9dbef90 seize: fix error handling for check_freezer_cgroup 622b43392 criu: Initialize util before service worker starts 9052ef93c uffd: Disable image deduplication after fork 2be958d22 include: don't use GCC's __builtin_ffs on riscv64 da6b1807e ci: add workflow for riscv64 bb29067de zdtm: add riscv64 support 6d970ed04 criu: add riscv64 support to parasite and restorer 1d028ef44 images: add riscv64 core image 95359a62a compel: add riscv64 support d8f93e7ba include: add common header files for riscv64 c49eb18f9 pidfd: block SIGCHLD during tmp process creation 5ca440069 zdtm: add inventory test plugins 5335b35f7 images/inventory: add field for enabled plugins b524dab32 pycriu: fix lint errors 88aa7e2c1 make/lint: use 'ruff check ' f29e655df zdtm: Check pidfd for thread is valid after C/R 7a64004dc zdtm: Check fd from pidfd_getfd is C/Red correctly 2e6f34845 zdtm: Check dead pidfd is restored correctly 3f30ec0ed zdtm: Check pidfd can kill descendant processes 2899d4600 zdtm: Check pidfd can send signal after C/R 3096df9ea zdtm: Check pidfd fdinfo entry is consistent 1ce408ffa criu: Support C/R of pidfds 3322d1e94 images: Add protobuf definition for pidfd 4f8f6f288 Makefile.config: set CR_PLUGIN_DEFAULT variable f1d465448 amdgpu: remove exec permissions on source files c2b48ff42 criu: Version 4.0 (CRIUDA) a8cbe76d4 util: dump fsfd log messages 096c1f7a4 plugins/amdgpu - Increase maximum parameter length 60ee5ebd9 plugins/amdgpu: Zero ib_info on initialization 691899889 plugin/cuda: disable CUDA plugin if /dev/nvidiactl isn't present e1331a4b6 fault: allow to check dont_use_freeze_cgroup 651df375b criu: Allow disabling freeze cgroups 59f49c627 codespell: fix typos edb6fbb82 scripts/uninstall_module: fix package discovery b1b3c14b1 cuda: unlock on timeout error dbfa45024 ci: run aarch64 tests native via actuated 8beac656f coredump: fail on unsupported architectures early d44fc0de5 test: only run macvlan tests if macvlan devices can be created 01c65732b test: better test for SELinux tools 615ccf98c crit: do not crash on aarch64 doing 'crit x ./ rss' 21ea718f9 plugins/amdgpu: fix printf format specifiers 3e2ed1879 plugins/amdgpu: use C99-standard types d68205e91 ci: enable cross compile testing for amdgpu-plugin 2ee584441 plugins/amdgpu: fix cross-compilation 9a19cf34d scripts/ci: run tests with the mocked cuda-checkpoint tool de31abb97 criu/plugin: don't call plugin device hooks for non-alive tasks dea630591 test/zdtm: allow to run tests with the mocked cuda-checkpoint tool 67fe44e98 support user set remote mmap vma address 551cd9244 timer: fix printf specifiers for __suseconds64_t a045c874c ci: run tests with amdgpu and cuda plugins 2453ed69a zdtm: add option to run tests with criu plugins ad66c27a1 cuda: fix launch cuda-checkpoint fde0b7ac6 cuda: don't leak fds to cuda-checkpoint 4dde52a30 ci/podman: show mounts 9a85fb638 ci/podman: show criu logs in case of error 8437663cc delete redundant include header files c42b58f4f plugin: enable multiple plugins for the same hook 85050be66 seize: fix pause-devices plugin hook 21108b40d test/zdtm: mount a new tmpfs to the zdtm root /dev fcbadfbdb plugins: set executable bit on .so files 5783706d5 docs: update amdgpu-plugin man page 089345f77 Adjust to glibc __rseq_size semantic change b9081ca56 zdtm: make cgroup testcases run non-parallel 4f45572fd util: use close_range when it's supported 42b177da6 scripts/build: drop centos 7 targets 181583819 vdso: proxify the __vdso_clock_gettime64 function ac22aaf57 apparmor: get_suspend_policy must return NULL in error cases 71999d888 cgroupd: unblock SIGTERM to make stop_cgroupd actually work daed6c353 irmap: duplicate string in irmap_scan_path_add b169e3b63 plugins/cuda: fix crosscompilation ca971b7f8 compel: fix build on Amazon Linux 2 due to missing PTRACE_ARCH_PRCTL bf417dd05 criu/plugin: Add NVIDIA CUDA plugin 5f486d5ae criu/plugin: Introduce new plugin hooks PAUSE_DEVICES and CHECKPOINT_DEVICES to be used during pstree collection 1012e542e criu: Restore rseq_cs state slightly earlier in the restore sequence and run the plugin finalizer later in the dump sequence 7ac453706 readme: update link to FAQ page 4f15fe8c5 make: improve check for externally managed Python fdf546dbd ci: upgrade to Fedora 40 Vagrant images (38 is EOL) f17164926 test/dump-crash: check code path when dump crashes a252a240c zdtm: Distinguish between fail and crash of dump 6feb57a84 ci: remove CentOS Stream 8 test (EOL) 1da29f27f zdtm: add support for LD_PRELOAD tests e7276cf63 pagemap-cache: handle short reads cc88b1e1f net: Fix TOCTOU race condition in unix_conf_op 457bc6a8f criu: use proper format-specified to accommodate time_t 64-bit change 95f66d13d criu: move sigact dump/restore code into sigact.c 9c8a6927a ci: update check for SELinux b3c3422cd test/make: remove unused target 30aa8dbe4 mount: fix unbounded write 708f872a6 sk-tcp: Add test cases for TCP_CORK and TCP_NODELAY socket options 9ba9aff77 sk-tcp: Move TCP socket options from SkOptsEntry to TcpOptsEntry 1cb75c0b1 sk-tcp: Move TCP socket options from TcpStreamEntry to TcpOptsEntry 13854a988 criu: fix a fatal failure if nft doesn't work df178c7e5 sk-tcp: cleanup dump_tcp_conn_state error handling 4607b5356 mem: optimize debug logging of enqueued pages f4290868b ci/vdso01: fix typo e68a06cfd ci: update actions/checkout to v4 5aaf45021 ci: update base OS to ubuntu 22.04 1c2a3d7fa check: verify ino and dev of overlayfs files in /proc/pid/maps e07ffa04b Makefile.config: fix/improve feature warnings. af4058871 timer: fix wrapping allignment in function declaration 0fc83a79b ci: silence CircleCI warning about deprecated image 52623cca1 criu: move timers dump/restore code into separate file 231ba0cd2 zdtm/sched_policy00: use reset-on-fork flag 75fed59ef Add support for reset-on-fork scheduling flag 8f0e200e6 mem: fix some VMAs being incorrectly mapped wtih PROT_WRITE a2b018a18 ci: try to fix broken docker test a48aa33ea restorer: shstk: implement shadow stack restore 7dd583002 restore: add infrastructure to enable shadow stack f47899c9e criu: kerndat: add kdat_has_shstk() 2ebd1a4f0 criu: shstk: prepare shadow stack parameters for restorer blob 4b6dda7ec criu: shstk: premap and prepopulate shadow stack VMAs 17eda3ce5 criu: shstk: add VMA_AREA_SHSTK flag 0aba3dcfa compel: shstk: prepare shadow stack signal frame 63a45e1c8 compel: infect: prepare parasite_service() for addition of CET support 6e491a19a compel: shstk: save CET state when CPU supports it 17f4dd095 compel: always pass user_fpregs_struct_t to compel_get_task_regs() 0b8c51eaa compiler: add ALIGN_DOWN macro f590c2b63 zdtm/static: check that cgroup layout of threads is preserved a0a6ec3dc cgroup: Add support for restoring a thread in a correct v1 cgroup 835afb1b8 criu-ns: fix lint error e0b74f558 make: replace flake8 with ruff 7fd4a15e6 pb2dict: fix flake8 error e0f91e66e kerndat: check support for PAGE_IS_SOFT_DIRTY a808f09be amdgpu_plugin: fix lint errors bd17bd43e sk-inet: fix codding style in restore_ip_opts 895a16c13 zdtm: Added tests for IP_TTL restore 71102e7f7 sk-inet: Added IP_TTL socket option 0d5923c95 amdgpu_plugin: Refactor code used to implement Checkpoint 733ef9631 amdgpu_plugin: Refactor code in preparation to support C&R for DRM devices b689a6710 plugin/amdgpu: Also don't print 'plugin failed' in criu 59599dacd plugin/amdgpu: Don't print error for "No such process" during resume 92e8f9293 net: return bool with iptable_has_criu_jump_target a62f82730 criu-log: remove unused declaration d2511707f zdtm: socket-tcp-nft-nfconntrack: add a hook to the chain in nft case afc0efcf7 pagemap-cache: add an ability to run tests without PAGEMAP_SCAN cb64d73ad page-cache: use the PAGEMAP_SCAN ioctl when it is available 20628bc8a kerndat: check the PAGEMAP_SCAN ioctl 842289c7e net: add error messages for restore of nftables d94251df7 test/nfconntrack: use nft or iptables-legacy 0ab2f9e97 net: fix network unlock with iptables-nft d9c427d70 irmap: hardcode some more interesting paths b419f3dfd make: fix compilation on alpine 7b689b7a4 gitignore: remove historical left-over files 2d1f4ec71 ci: disable non-root in user namespace test in container fe8f5130c ci: fix centos-stream 9 ci errors 6679d60ff ci: do not use 'tail' for skip-file-rwx-check test f86f1b849 tty: skip ioctl(TIOCSLCKTRMIOS) if possible 8a51639e3 Makefile: Use common warnings settings for loongarch64 37d62fa47 docker-test: downgrade docker to v24.0.7 1004625fa docker-test: fix condition for max tries 088390ea8 ci: switch to permissive selinux mode during test 900909d95 test: check for btrfs in the current directory fc94b2d15 ci: fix rawhide netlink error 9f9737c80 comple: correct the syscall number of bind on ARM64 f8b14286b criu: Version 3.19 (Bronze Peacock) Signed-off-by: Bruce Ashfield

metadata: add whitespace around assignments

2025-04-03T17:56:53+00:00

With: https://lists.openembedded.org/g/bitbake-devel/message/17508 there are many WARNINGs from this layer will cover src_uri.inc files in next commit. Signed-off-by: Martin Jansa Signed-off-by: Bruce Ashfield

criu: fix buildpaths QA issue for arm

2024-11-12T23:13:45+00:00

The settings of CFLAGS:arm overrides the previous CFLAGS settings, causing buildpaths QA error for arm. Use CFLAGS:append:arm instead to fix this issue. Signed-off-by: Chen Qi Signed-off-by: Bruce Ashfield

criu: patch cleanups

2024-03-15T17:17:20+00:00

Adding Upstream-Status and reformatting some of the long logs. Signed-off-by: Bruce Ashfield

criu: pycriu RDEPENDS on python3-fcntl

2024-03-15T17:17:20+00:00

Signed-off-by: Tim Orling