linux/meta-virtualization.git/recipes-containers/crun/crun_git.bb, branch kirkstone

crun: update to 1.4.3

2022-03-21T21:31:28+00:00

Bumping crun to version 1.4.3-4-g3b3061a, which comprises the following commits: 77df89b docs: update known issues with CRI and side-cars 164d753 wasm, kubernetes: support wasm for kubernetes infrastructure with side-cars 61c9600 NEWS: tag 1.4.3 040c59f chore(utils): add pointer casts to avoid C++ permissive mode 16850e4 build: fix bashism in configure.ac e094499 test: fix CI 22284a9 tests: add codespell tests 37f13e3 crun.1.md: fix typo 8fca8bf tests: add fuzzing for idmapped mounts option abfdf1f fuzzing: move chdir to Dockerfile d935d0a linux: move parsing to separate function 5c7165a centos9: enable only needed repo 160e626 centos8: enable only needed repo 648b132 tests: add tests for idmapped mounts 916c5cd tests: add check for file ownership 934e19a tests: add feature check for idmapped mounts bf06c8c linux: support options to idmap e1ee353 test, container-delete: ignore warn for cgroupv1 when cgroup cleanup fails 4355edc test: add a test for crun delete cdc4f6a utils, rmdir-all: transfer ownership and responsiblity of fd to rmdir_all_fd bb5bc67 linux: open source bind mount in the host df2fecd cgroup-destory: terminate infinite loop and relay error back to callee 44d7816 cgroup-destroy: bump delay while deleting from 0.1ms to 10ms ec9fa1c Remove ignored arguments 9854c71 Fix compilation error with seccomp 58d33b8 crio-tests: skip userns tests with auto annotation b3301ad crio-tests: use golang 1.17.6 192ff3e cri-o: remove locking to a specific commit in CI and use master f6fbc8f NEWS: tag 1.4.2 4029e63 utils: check for dup error 83668f1 linux: create_missing_devs creates /dev/console 0b09d62 utils: always create trailing file 5c47eac container: ignore EROFS when chowning std stream files 8ff9652 linux: validate sysctls before applying them 2f5be74 python: fix build da28cf1 container: attempt find_executable after setresuid 9646fde utils: drop const from find_executable 8026135 NEWS: tag 1.4.1 8711fbd utils: add a len argument to get_current_timestamp b5987ee utils: add printf attribute to xasprintf e9ba4ae libcrun: add printf attribute to error functions 2ca2d06 utils: add attribute malloc to x.*alloc.* functions ece4431 utils: add the sentinel attribute to append_paths bb57968 cgroup: do not lookup string twice d74c5e4 wasm: add docs and example for using crun wasm support on kubernetes 78384da tests/oci-validation: optimize build c7aac36 Revert "oci-validation: checkout last working commit for runtime-tools" 4cd65c3 utils: drop check for invalid path 90c6b1f tests/fuzzing/run-tests.sh: fix e65f285 ci: add shellcheck job b1c520c tests/*/*.sh: add set -e, fix shellcheck warns 1613f4e tests/cri-o: don't remove non-existing files ff3e33b tests/fuzzing: nits 28c5f89 tests/oci-validation: rename script to run-tests.sh 2bf7a93 tests/*/*.sh: rm redundant cd a51137c ci/gha: skip installing deps if Dockefile is used 209fe89 ci/gha: don't start docker 9174557 .github/workflows/test.yaml: nits b97d397 errors: use printf compiler annotation f12a5ac linux: fix lookup for namespace acc5f87 linux: skip setns_with_pidfd with explicit paths 5f924cb container: allow delete while in created state cc70b0a container: merge two if blocks 6aff973 cgroups: skip setting cpu limits if shares==0 5930bfa cgroup: append the sd error message in the error c9f0b16 gha: simplify deps install 08b621f tests/podman: exclude --ip6 test case 1da6b96 Fix some typos found by codespell fd6da89 src: rename libcrun_container_kill_all to libcrun_container_killall dfd5dae libcrun: unexport str2sig 21a8daf libcrun: let libcrun_container_kill* accept a string dd80179 libcrun: unexport append_paths eada263 tests: skip sd_notify tests without systemd 8ead30f ci: enable codeql analysis 3a1da09 .github: fix ci build a834e9b .github: test --enable-shared 95b482f src: export some symbols used by crun 7f37f2e src/libcrun/linux.c:425:77: error: 'OPEN_TREE_CLOEXEC' undeclared (first use in this function); did you mean 'OPEN_TREE_CLONE'? 3daded0 NEWS: tag 1.4 a400e8b libocispec: sync from upstream 76271c9 cgroup: initialize status d583bdc utils: fix path check 2b74dc1 handler: add support for running handlers on kubernetes with containerd 9b25f52 tests: extend checkpoint/restore test with pre-dump 587d0b2 tests: add memhog command to init fb2a7ed docs: add pre-copy migration options to the man page 0683fec checkpoint: add pre-dump support 7ecb4b0 handlers, wasm: add lost support for run.oci.handler=wasm 020ee61 tests: add tests for CPUShares/CPUWeight on systemd 58b8879 state: export systemd scope 3adb2d5 tests: allow to override cgroup manager bcbc72d cgroup-systemd: update CPUShares/CPUWeight 2ba3106 cgroup: add custom update_resources 2d7a495 update: fix shares file name ec70d28 cgroup-systemd: set CPUWeight/CPUShares on the scope cgroup 4012668 cgroup-resources: move CONVERT_SHARES_TO_CGROUPS_V2 to function 77318e4 cgroup: add function to write to the files 6457228 tests: add CRI-O integration tests to the CI d6ab372 configure.ac: mark unused variable cb4152d ebpf: fix build on 32 bits arches 2eafdff cgroup: ignore swap limit if it is not enabled 62e84d8 nix: lock nix version to last working release 1efb0f9 linux: fix join cgroup v1 f72414e crun, spec: allow override file name 5231a30 utils: retry openat2 on EAGAIN 782fb02 crun: load custom handlers e6fda97 build: define CRUN_LIBDIR af950dd handlers: support load from .so files 6d093a0 handlers: split each handler to its own file 46fb105 utils: remove hardcoded check for wasm 8f9337e crun, libcrun: move handlers behind an interface fd0e171 handler: split libcrun_configure_wasm 4eb1f03 container: move custom handlers code to new file 2063305 wasmedge: The wasmedge.h is moved to wasmedge/wasmedge.h 2b4dfef container, handler: close files marked with O_CLOEXEC 4898342 linux, exec: try setns with pidfd a14ae9e linux: move join namespaces to a new function a32286c linux, exec: use CLONE_INTO_CGROUP cb5bf95 linux: use clone3 if available 0e2eda2 tests: fail fuzzing test on crashes 74a21ed ebpf: handle missing access string c1127a3 container: propagate close for ready-fd c9c89c6 container: wait_process accepts a struct 9bf58f2 container: replace sprintf with snprintf 3191e49 container: drop argument for write_container_status 91b47f6 container: replace same failure code with a goto b5405fc linux: improve detection of /dev target dcc87a3 cgroup: move errors check to helper 0af034d cgroup: hide create/destroy behind a struct f95e56a cgroup: move cgroupfs code to new file 98e4e46 cgroup: move cgroup setup code to new file c3119e7 cgroup: move more functions to cgroup-utils 0272dae cgroup: move setting resources to new file 80925dc cgroup: move some functions to a new file 9c014c6 cgroup: rearrange code 24f6b40 cgroup: quote file names ed31849 cgroup: separate each cleanup to a different function d9eba41 cgroup: drop argument from libcrun_cgroup_destroy f47d933 cgroup: split systemd code to a new file aed4362 cgroup: drop unused function 384cf2a cgroup: drop usage of raw paths 1f313a8 libcrun: new function libcrun_container_read_pids ce7dedf cgroup: move returned data to different struct e2670b4 cgroup: drop argument delegate_cgroup 22d9dcb cgroup: drop argument systemd_subgroup a0d4d9f cgroup: drop unused argument create_if_missing dc135cf cgroup: drop cgroup_mode argument 4dcbf43 cgroup: remove unused argument 16db42f libcrun: unexport unused functions 4b18425 Also run clang-format on *.c files in tests/ abdeabf container: allow libcrun_run_linux_container to call final _exit() for handlers 2d177df container, exec: refactor to new function d78dff2 container: attempt chdir twice c9052f2 container: make chdir error clearer 78cf48b linux: use sd_notify_barrier if available 0fa6447 libocispec: sync with recent commits 40e4736 utils: move safe_openat fallback to separate function 82d2170 mounts: handle paths with multiple slashes 79699be utils: write_file truncates existing files ef37d51 linux: Enter specified cgroup namespace a36bcdd tests: disable podman unuseful test 53f2615 .github: use a bind mount for /var dirs 5566520 tests: add build test for centos:stream9 940705f tests, centos8: use centos:stream8 0e99990 Change podman branch to fix CI 1575f2f Add file-locks checkpoint/restore option d7029af linux: replace mounts lookup with gperf hashing 5511255 linux: support more recursive options 2dbce9b linux: use bool for is_user_ns 827b873 linux: new mount option "idmap" 02938ac linux: add function to send mounts from the host b5fc60e linux: provide cleanup private data callback a5a2ca5 linux: generalize opening mounts earlier 4523486 linux: silence warning a01a03a tests: update podman 3c6d57d wasmedge: fix error message if VM fails to get valid result object b48b654 crun: show if version supports wasm with configured runtime 365dc57 linux: new mount option "rro" 85c5bc9 linux: fix a race when saving external descriptors 825108e wasm: add support for wasmedge runtime 33e75d0 fix build error on ubuntu e1c7293 clang-check: refactor to suppress -Wunused-but-set-variable where needed 575c4a6 ci: use latest docker with seccomp profiles supporting clone3 8e5757a NEWS: tag 1.3 685078a tests: temporarily switch to fedora:34 9ea94e9 wasm: allow wasi modules to read args from config 76759f1 fix status.h compile error in C++ 952913b wasm: replace printf while relaying output to stdout with safe_write 152a3fc linux: bind mount the current cgroup path ce211c5 linux: fix mounting cgroup2 with --net=host e31ab81 wasm: add support for annotation module.wasm.image/variant=compat 2559696 wasm: add documentation 7407be1 wasm: add support to natively build and run wasm workload and wasm containers 6d046d6 oci-validation: checkout last working commit for runtime-tools eeae045 cgroup: fix race condition when enabling controllers fd7b3cb criu: do not override external_descriptors 979f6f0 criu: save the new descriptors after restore Signed-off-by: Bruce Ashfield

global: update licence values to SPDX values

2022-02-18T18:07:10+00:00

These changes are the result of running the convert-spdx-licenses.py oe-core script. There's no impact to the build, but we will avoid issues when interacting with core QA by the alignment. Signed-off-by: Bruce Ashfield

crun: update runtime-spec branch to main

2021-11-03T13:32:10+00:00

runtime-spec has moved to main instead of master, so we tweak our branch name to match. Signed-off-by: Bruce Ashfield

global: convert github SRC_URIs to use https protocol

2021-11-02T13:57:03+00:00

github is removing git:// access, and fetches will start experiencing interruptions in service, and eventually will fail completely. bitbake will also begin to warn on github src_uri's that don't use https. So we convert the meta-virt instances to use protocol=https (done using the oe-core contrib conversion script) Signed-off-by: Bruce Ashfield

crun: bump to version 1.2

2021-10-18T17:34:35+00:00

Bumping crun to version 1.2-16-g718b94e, which comprises the following commits: 979f6f0 criu: save the new descriptors after restore cab3d52 crun: chown std streams c68c4ce crun.1.md: fix formatting 62e9ba0 test: bump base and ubuntu to 1.16 for containerd tests 07303d8 exec: support --cgroup 9c96ca4 libcrun: allow to specify sub-cgroup for exec e32af6c cgroup: allow to create missing dirs baa786c exec: use new function 6d70af2 exec: new function libcrun_container_exec_with_options 97c2eac tests: add userns to sd_notify_proxy test 4f6c8e0 NEWS: tag 1.2 aee580f exec: fix containers being wrongly reported as paused 762269c test/criu: enable external ipc,uts,time namespaces e334260 criu: Add support for shared ipc,uts,time ns 1353be8 configure: convert indentation to tabs 44bb0b2 artifacts: add libprotobuf-c-dev for protobuf headers 5b341a1 NEWS: tag 1.1 55d293c .github: add libprotobuf-c-dev 2162435 criu: store external descriptors as JSON string 9c7d928 .github: check tests leave the working dir clean d99bb51 .github: report make check failures 0d64e1d linux: fix fix-test-mount-symlink-not-existing test 7260dc8 tests: fix number of tests b0d64b6 tests: skip caps tests if rootless a538e4e tests: disable exec_additional_gids when rootless b055575 criu: fix save of external descriptors c0f5460 criu: use has_prefix instead of strncmp 0fa5a11 criu: use write_file instead of open+write 1604c54 criu: drop \n from error messages a967d78 criu: fix fd leak f624c93 tests: disable unrelated failing Podman tests ee35311 utils: add new function safe_readlinkat ef24f0c README.md: ./configure.sh → ./configure 3e82d10 tests: add test for c/r with ext namespace 2257680 tests_utils: drop unused variable f41c979 tests: drop unused imports be18607 criu: Add support for external PID namespace 4810ac6 exec: refuse paused container/cgroup 7d35659 cgroup: drop cgroup_mode arg from libcrun_cgroup_is_container_paused 44377aa container: Set primary process to 1 via LISTEN_PID by default if user configuration is missing bc0b3d1 utils: retry openat2 on EAGAIN 8a70bcd cgroup: use cgroup.kill if available c819e9c tests: update Podman to 3.3.0 74543d3 linux: silence two false positives reported by lgtm c1798ad status: check for owner before using it 5399935 utils: NUL terminate readlinkat buffer 2557c81 NEWS: tag 1.0 dad6ef2 crun.1: regenerate 2199d10 tests: update containerd version We also bump the oci/image/runtime spec SRCREVs to ensure that we have all the source dependencies up to date. Signed-off-by: Bruce Ashfield

crun: fix offline builds

2021-10-18T17:32:43+00:00

The 'autogen.sh' script of crun was fetching dependencies that we already have in our SRC_URI. We want the OE git fetcher to manage the source, not scripts in the source of a package. We grab the two lines out of autogen.sh that we need, and use them directly in the configure_prepend. We also add yajl to the source code dependencies as the package DEPENDS is not enough as crun is explicitly building source that looks for the yajl code. Signed-off-by: Bruce Ashfield

crun: update to 0.21-latest

2021-08-27T14:50:45+00:00

Bumping crun to version 0.21-15-g360f5d0, which comprises the following commits: 2199d10 tests: update containerd version 1798d5a cgroup: chown cgroup to root b5cdeb5 cgroupv1: add support for setting memory.use_hierarchy 7cfdf09 Makefile.am: link libcrun to $(FOUND_LIBS) d4d1825 linux: treat pidfd_open EINVAL as ESRCH 62149b3 Update nixpkgs ac00581 Dockerfile: delete file c4c3cdf NEWS: release 0.21 69bd7dc Doc: cgroups v2 and RT processes unsupported 6397998 krun/kvm: crun should silently/gracefully switch to krun when needed. 92499bd container: wrap execv in retry-on-eintr b04a335 cgroup: lookup pids controller as well 448494e README.md: drop travis badge 1bbf562 Reflect #696 in crun's manpage e836219 rpm: fix license 2b88faa status: add fields for owner and created timestamp b07c389 criu: fix error check 09401bb linux: fix unitialized variable b222968 cgroup: fix a memory leak Signed-off-by: Bruce Ashfield

global: overrides syntax conversion

2021-08-02T21:17:53+00:00

OEcore/bitbake are moving to use the clearer ":" as an overrides separator. This is pass one of updating the meta-virt recipes to use that syntax. This has only been minimally build/runtime tested, more changes will be required for missed overrides, or incorrect conversions Note: A recent bitbake is required: commit 75fad23fc06c008a03414a1fc288a8614c6af9ca Author: Richard Purdie Date: Sun Jul 18 12:59:15 2021 +0100 bitbake: data_smart/parse: Allow ':' characters in variable/function names It is becomming increasingly clear we need to find a way to show what is/is not an override in our syntax. We need to do this in a way which is clear to users, readable and in a way we can transition to. The most effective way I've found to this is to use the ":" charater to directly replace "_" where an override is being specified. This includes "append", "prepend" and "remove" which are effectively special override directives. This patch simply adds the character to the parser so bitbake accepts the value but maps it back to "_" internally so there is no behaviour change. This change is simple enough it could potentially be backported to older version of bitbake meaning layers using the new syntax/markup could work with older releases. Even if other no other changes are accepted at this time and we don't backport, it does set us on a path where at some point in future we could require a more explict syntax. I've tested this patch by converting oe-core/meta-yocto to the new syntax for overrides (9000+ changes) and then seeing that builds continue to work with this patch. (Bitbake rev: 0dbbb4547cb2570d2ce607e9a53459df3c0ac284) Signed-off-by: Richard Purdie Signed-off-by: Bruce Ashfield

crun: adjust image-spec repository from master to main

2021-07-14T19:21:16+00:00

We need to change our branch to avoid parse errors. Signed-off-by: Bruce Ashfield

crun: add seccomp distro features check

2021-06-30T15:22:42+00:00

Since seccomp depends on libseccomp, and seccomp is only available when the distro feature is enabled, we add the same dependency and distro feature check to this recipe. Signed-off-by: Bruce Ashfield