linux/meta-virtualization.git/recipes-containers/crun, branch nanbield

crun: update to v1.9.2

2023-11-06T16:21:12+00:00

Bumping crun to version 1.9.2-12-g8af8ee2, which comprises the following commits: bdb95d6 features: export intelRDT status e2f9853 update: support update of Intel RDT 05bc600 libcrun: support update of Intel RDT 41ae2a2 libcrun: plug Intel RDT support 52d5faa libcrun: add Intel RDT support functions a7a1af9 container: fix early return 122f8ae linux: open mounts before setgroups if in a userns 64105d9 Use overlay and single nix derivation 35274d3 NEWS: tag 1.9.2 8f6b76f tests, podman: enable more tests 255268d Reset the inherited cpu affinity after moving to cgroup 745b6d9 tests, podman: run tests on overlay f42e279 tests, podman: get more information on the environment 379b17c tests, podman: avoid deprecated options bd251c9 rpm: do not special case krun man fe4e15d build: install krun.1 only if krun is enabled 0cabf0c rpm: fix manpage installation 67ee730 Packit: notify @containers/packit-build team on failed tasks 1f2769e linux: fix fallback mechanism in a userns a0b7e18 NEWS: tag 1.9.1 bb4e975 utils: partially rewrite improve error message patch 14afa8a utils: fix ignore ENOTSUP when chmod a symlink 0acb237 oci-validation,test: lock tap to @16.3.8 bbb1c87 tests: install device-mapper-devel 75dd83c podman, test: disable more tests failing in the CI 98db1d2 utils: improve error message for ensure_dir 57262a2 utils: ignore ENOTSUP when chmod a symlink 523eed3 linux: add new fallback when mount fails with EBUSY 2239c50 linux: teach MS_MOVE to do_mount c9a1a12 Add man page for krun 8645d1a Fix CentOS 7 Build by Checking if FSOPEN_CLOEXEC exists a538ac4 NEWS: tag 1.9 1e2f0c4 fix: correctly handle unknow signal string 41fa779 crun delete: call systemd's reset-failed 76b80ae fix random errors Signed-off-by: Bruce Ashfield

crun: update to v1.8.7

2023-09-15T17:30:40+00:00

Bumping crun to version 1.8.7-32-gf8fa497, which comprises the following commits: 76b80ae fix random errors d602fc0 build(deps): bump actions/checkout from 3 to 4 d348000 linux: fix check for oom_score_adj 382edc9 wasmer: inherit_stdout instead of capture 5057f98 wasmer: use latest wasix API f60a903 linux: do not join already joined namespaces 46ef792 lua: fixed luarocks package directory structure 0e506e5 linux: add support for ridmap mount option 44e51fa linux: honor rbind f6f92b8 utils: tighten check in check_fd_under_path() 58fa192 fix typos in comments 9e66109 linux + cgroup-systemd: fix error return values 668f5d5 features: Support mountExtensions 1836bed lua: rename variable to fix spelling 2779f02 linux: support arbitrary idmapped mounts 08def0a linux: move function definition forward 53a9996 NEWS: tag 1.8.7 a867e35 lua: fix missing dereference of pointer c90c3ca cgroup-systemd: fix error return value b6c8708 tests: Update expected features output 7c524e7 features: Fix annotations formatting f0054ea src/libcrun: Mark we implement up to OCI 1.1.0 59e2b84 build(deps): bump uraimo/run-on-arch-action from 2.5.0 to 2.5.1 3a50988 use just enough arg_unused to silence -Wunused-parameter 9864f09 Packit: enable eln builds, enable wasmedge on all non-eln builds cf72f8b container: fix error return value 88441d9 linux: simplify setns with pidfd 261a4fa mount_flags.c: regenerate f9f4e06 mount_flags.perf: add get_mount_flags_from_wordlist 387d3ac packit: Build PRs into default packit COPRs 907d032 libcrun: handle SIGWINCH by resizing terminal_fd 57a252b nix: rename `default-nix` to `default-amd64.nix` 5224aa2 build-aux: simplify `release.sh` a7102e8 github: simplify `release.yml` 8908248 Add support for riscv64 arch 31eeb19 cgroup: fix error return value fec9b0f RPM: include criu dependencies 02ee7c4 linux: do not create error twice c786d4c linux: simplify error handling c972772 linux: do not write twice errors 74a3874 linux: use helper functions instead of custom read/write 35a0166 linux: define helper to ack on the sync socket c3e518e libcrun: drop symbol for crun_make_error Signed-off-by: Bruce Ashfield

crun: update to v1.8.6

2023-08-24T01:38:21+00:00

Bumping crun to version 1.8.6-11-gd7ee549, which comprises the following commits: c786d4c linux: simplify error handling c972772 linux: do not write twice errors 74a3874 linux: use helper functions instead of custom read/write 35a0166 linux: define helper to ack on the sync socket c3e518e libcrun: drop symbol for crun_make_error 080e560 features: use exported function libcrun_make_error 5c2dedc Make the spec file parseable without copr_username defined 73f759f NEWS: tag 1.8.6 26ef1e0 linux: add sync before sending mounts 71c53b0 RPM: Set Epoch only for Copr builds ee0e405 tests: install procps-ng for podman tests 6a3d7a7 Packit: initial enablement 58bb52c tests: fix cpu-weight-systemd test under a user manager ee111ae tests: skip test_uid_tty if no tty is attached 74dd5f9 tests: use get_crun_path() in oci_features b160e2c cgroup-resources: allow setting swap to 0 19cd8aa ps: fix segfault with pids=NULL Signed-off-by: Bruce Ashfield

crun: update to v1.8.5-tip

2023-08-01T18:42:25+00:00

Bumping crun to version 1.8.5-40-g56d9d9a, which comprises the following commits: 19cd8aa ps: fix segfault with pids=NULL d006733 features: add wasm annotation 935f4fe tests: add test for oci_features 366af73 src/*: implement features 21b1733 Makefile.am: update clang-format command 9e5a749 libcrun: report when status file not found 84a6599 libcrun: crun_path_exists distinguish ENOENT ef224f9 docs: remove module.wasm.image/variant=compat annotation Signed-off-by: Bruce Ashfield

crun: fix compilation with musl

2023-07-11T19:11:30+00:00

Requires either libargp or argp-standalone. Signed-off-by: Renato Caldas Signed-off-by: Bruce Ashfield

crun: update to v1.8.5

2023-06-15T21:42:31+00:00

Bumping crun to version 1.8.5-30-g7da99fb, which comprises the following commits: ef224f9 docs: remove module.wasm.image/variant=compat annotation 38f29c2 ci, wasmedge: use --platform wasi/wasm 62e68e2 ci,wasmedge: use latest instead of rawhide 5c9dbca libcrun: return with no-op when io_priority is NULL 755b47a lua: added luarocks packing 1d5748e src: define symbol for /proc/self/timens_offsets c56e556 src: replace /proc/sys/kernel/cap_last_cap with symbol db9274f src: define PROC_SELF_CGROUP and use it 1eeba46 src: quote more strings 8ca1f68 build: add check for atomic_bool e542666 build: add explicit check for atomic_int 43fc74c src: uniform the quoting style 3839e6e src: add missing quotes 0ca1f0b container: do proper cleanup on errors ee3e6f6 tests: add tests for ioprio 63a4f97 src: fix macro check e6306b8 tests: reorder includes edfd0c9 container: support io_priority from the OCI specs 478f047 libocispec: sync b6f80f7 NEWS: tag 1.8.5 a1f9b7d tests: update ubuntu to lunar 026f249 tests: update containerd 6494b69 cgroup: set the memory limit on the system scope 4d2d5b3 cgroup: move code to an utility function c56c3c4 cgroups: fix creating cgroup under "domain threaded" bbee4bc More informative error message for the case where dlopen fails 1ad17f8 Refactor: Restore serial settings for incorrect serial 087db89 scheduler: use definition from OCI 0135eb1 libocispec: update 76ed8df criu: fix memory leak 7a45ba8 ci: temporarily disable cri-o tests a717db7 criu: fix segfault if CRIU_JOIN_NS_SUPPORT is defined 3f972e1 github: try not loading kernel modules bca0b3b linux: check the PID is valid before kill(2) 62b149b tests: skip slow cri-o tests 7bbacf9 fix clang-format c0eb006 src: make clang-format 6639649 lua: fix typo 906142d linux: do not precreate devs with euid > 0 f40d974 Improve whitespace in generated `crun spec` ed25b47 tests/test_exec: don't fail on PIDs < 10000 909ae4d tests: abstract tests/init to get_init_path() df8ee48 criu: check if the criu_join_ns_add function exists 5a8fa99 NEWS: tag 1.8.4 898ffb5 tests: fix idmap mount test a2ac2b9 tests: install irqbalance 6b33ec5 tests: drop cri-o tests instead of deleting file 6824924 cgroup: workaround cpu quota/period issue with v1 fc276e6 cgroup: fix set quota to -1 58b394a build(deps): bump lumaxis/shellcheck-problem-matchers from 1 to 2 bf79b09 src: wire the runtime spec time namespace bfa4f48 linux: create PID namespace as part of the last step 4320b5d libocispec: sync 39bf623 criu: drop loading unused functions 59f2beb NEWS: tag 1.8.3 ae18930 update: initialize the rt_scheduler only on cgroupv1 crun/rspec: update to 1.1.0-rc.2 1beaf68 CODEOWNER: Add Toru Komatsu(@utam0) to sync with MAINTAINERS d46c8b2 schema: fix definition for ioPriority 504f70e Add I/O Priority Configuration for Process Group in Linux Containers 05563ea features: update Example d89ef1e glossary: s/features document/Features structure/g 39bd2ef MAINTAINERS: add Toru Komatsu (utam0k) f66aad4 Update ociVersion in config-linux.md example 206251f releases: use +dev as in-development suffix 8947849 spec: add scheduler entity 4ee185a version: v1.1.0-rc.2-dev a5b4da4 version: release v1.1.0-rc.2 54f948c ChangeLog: Document changes since v1.1.0-rc.1 6152be4 schema: remove duplicate keys 9d7c878 Clarify I/O throttling differences between cgroup v1 and v2 b6980b0 schema: fix schema for timeOffsets 689874f Add `features.md` to formalize the `runc features` JSON 167ffb4 Add Go 1.20 support to CI 15d2a5a Switch Go linting to use golangci-lint c9b5d0e Remove references to deprecated io/ioutil package 77c37f1 Update config-linux.md fix time_namespaces url error. 6c638b1 config: clarify Linux mount options 72efacb runtime: remove `When serialized in JSON, the format MUST adhere to the following pattern` c42f9ae version: v1.1.0-rc.1-dev 3e013c2 version: release v1.1.0-rc.1 f790b68 ChangeLog: Document changes since v1.0.2 36bb632 Add support for time namespace f225699 config: change prestart hook spec to match reality d931d4b config-linux: add CFS bandwidth burst 9e658bc config-linux: add memory.checkBeforeUpdate 3565df5 config-linux: Clarify where device nodes can be created a650533 config-linux: add support for rsvd hugetlb cgroup crun/ispec: update to 1.1.0-rc.3 32036d8 Apply version change from #1050 f3f0906 Specify the content of the scratch blob 29a1380 Remove special guidance around wasm 2720969 Update descriptor.go a68ca3e Remove artifact media type reference 428b1e5 releases: use +dev as in-development suffix 2f691e8 version: bump HEAD back to -dev 085b884 version: bump for release of v1.1.0-rc.3 fd45b6b Add scratch descriptor and scope layer limits 63b8bd0 Remove artifact manifest 23c4647 Define image manifest artifactType and guidance 5751791 Add Tianon as maintainer f4fc83a Fix unused variable linting error d09d13d Update Jon Johnson's email 4136bec descriptor schema: add missing data and artifactType definitions 729a03e manifest, specs-go/: provide guidance on SCRATCH config descriptor 31de013 manifest schema: add tests for the subject field 7a9efbd manifest schema: add the missing `subject` field f2f1956 descriptor: clarify artifactType field must have compliant values 98f35df Update image spec and conversion to clarify groups 336b02c Require IANA mediaType for image config.mediaType and layers.mediaType 1f60184 Add Go 1.20 support f99b121 Remove filtersApplied from image-spec b5998ba specs-go/v1/*.go: align the deprecation style 6687119 Chore: fix go.mod - split direct/indirect dependencies ccb86b9 mention deprecation in media-types.md 9b4e6c0 even fewer words 2cdbef2 Deprecate non-distributable layers 265874e Note an exception to the platform.os recommendation for wasi 0a97fe7 docs: Added artifact.md to docs and spec.md 293f064 Reverting json schema to well known value crun/libocispec: update to -tip b085839 runtime-spec: update 553cfb4 image-spec: update 384a230 runtime-spec: update 2c9fb39 libocispec: write _present tags together dc7412b image-spec: update 2e11380 runtime-spec: update e7b7344 rust: sync runtime-spec and image-spec df3036c runtime-spec: sync 8a0ee41 image-spec: sync 70826dc clean: remove unwanted diff file 4d1d608 add redefine for stdin stdout stderr when using musl 02f231b Move header files under ocispec/ Signed-off-by: Bruce Ashfield

crun: fix REQUIRED_DISTRO_FEATURES

2023-04-12T17:10:11+00:00

* features_check was inherit twice and REQUIRED_DISTRO_FEATURES was set twice as well but both with ?= so the 2nd one was ignored * seccomp was added in: commit b8f2edd39af6b7ac4461158b0d0382e88e93d6f1 Author: Bruce Ashfield Date: Wed Jun 30 11:22:42 2021 -0400 Subject: crun: add seccomp distro features check but there was already systemd from: commit 144d1ae8973e8c67709d7b544dc53b80bf924754 Author: Bruce Ashfield Date: Fri Apr 23 10:32:24 2021 -0400 Subject: crun: use REQUIRED_DISTRO_FEATURES to indicate systemd dependency Signed-off-by: Martin Jansa Signed-off-by: Bruce Ashfield

crun: update to v1.8.3

2023-04-05T20:03:55+00:00

Bumping crun to version 1.8.3-5-gd2ff390, which comprises the following commits: 59f2beb NEWS: tag 1.8.3 ae18930 update: initialize the rt_scheduler only on cgroupv1 5855e70 [1.8.2][CentOS 7] Missing `#include ` a4393f2 docs: add a tryout example with podman bf70c97 NEWS: tag 1.8.2 ba6c957 cgroup: cgroupfs attempt new sibling cgroup 74dc9b4 cgroup: libcrun_get_current_unified_cgroup can return relative path b7b5265 cgroup: drop duplicated variable 11bdc13 linux: set label for pre-created devices 4b04b01 linux: refactor code in a new function 770ad48 linux: extend fsopen_mount to specify label 7578a1a wasm, wasmedge: add current directory to preopen paths 90dd7b7 test_mount: fix incorrect comment 51aba04 linux: readonlyPaths should inherit flags from parent mount 5ad1507 lua: add Lua bindings 5d54a85 scheduler: use sched_setattr 6a132c3 libcrun_container_create(): fix memory leak 6ba6a00 container: add custom annotation to specify the scheduler 5bdd930 cgroup: systemd initialize rt limits 8b18fc7 cgroup: add new function openat_with_alias e914059 libcrun: add alias argument to function a4aebb9 libcrun: new function write_cgroup_file_or_alias d36c1a2 test: remove irqbalance tests 56a2550 cgroup: fallback to blkio.bfq files 34950dc crio: skip test 710d8dd libcrun: chown tty to the exec user e067714 python: fix create() referencing container_run() 11d1baf build(deps): bump actions/upload-artifact from 2 to 3 Signed-off-by: Bruce Ashfield

crun: update to v1.8.1

2023-03-08T22:08:01+00:00

Bumping crun to version 1.8.1-3-ga09ab72, which comprises the following commits: 11d1baf build(deps): bump actions/upload-artifact from 2 to 3 f8a096b NEWS: tag 1.8.1 4748543 utils: drop magic number 4096 b022227 utils: use mempage size buffer to read /proc/mounts 2da0773 linux: always use direct mapping 6cdf51c container: delete cgroup on errors fba646e cgroup: rmdir the entire systemd scope 3221684 crun.1.md: fix typo 31bcf8f crun.1.md: fix markup 5007784 build: delete .version file on make clean 46fbeee cgroup: reset systemd unit if start fails 7e7a4db cgroup: do not add default dependencies 4bd4c4e test: run codespell on the correct directory 8b46c45 src: run codespell b841b71 Support passing an attribute to change the mount_context_type 2ca4233 test: fix path for crictl ce66b2e Revert "Support passing an attribute to change the mount_context_type" 87b69c3 Support passing an attribute to change the mount_context_type d23a94a krun: create /dev/sev as part of the OCI configuration 84092f6 handlers: add hook for exec 83f3ab2 handlers: rename exec_func to run_func 93a8e2f krun: always allow /dev/kvm 675e87c handlers: update uses modify_oci_configuration 1efd61a update: move json parsing to container c9b230a handlers: provide cleanup function bd22751 handlers: move cookie data under the same struct 71bf884 handlers: add new hook to modify the OCI configuration b3e167d crun: set handler for all commands f0f7b8c handlers: initialize handler in the parent process cfec5ce NEWS: tag 1.8 957796e libcrun: remove unused intprops.h 8363deb linux: move PR_SET_DUMPABLE after userns creation 83de960 dist: do not include binary tests 188e0ce nix: add gcrypt dependency f7c715d nix: remove protobuf dependency 765161c nix: refactor same command line 98898d2 nix: update image to nixos/nix:2.12.0 bcae634 Add support for ppc64le 9b287dd README.md: add CodeQL badge ed7598d README.md: drop lgtm badges 1a61b4d utils: shrink read buffer if necessary 2a5cc1d nix: update packages 7d9fa03 tests, centos8-build: add safe.directory /crun 822ca4a utils: add utils to access /proc/$PID/fd/$FD paths 0554b0a utils: change initial size for buffer 742e8fc utils: reallocate only if needed 4e379c6 cgroup: support cpuset mounted with noprefix 58166e6 linux: set PR_SET_DUMPABLE 908bfc4 linux: mount cgroup ro on /sys bind mount fallback cd1cf0b linux: add two new arguments to get_bind_mount b84bde9 linux: mount the source cgroup if cgroupns=host 03d2969 linux: refactor out helper function 75f5c1a linux: fix error message 234d77c linux: precreate devices on the host f23cd15 utils: add functions to read overflow IDs 85767be linux: remove duplicate slash 1e29136 linux: generalize fsopen_mount a186e8a linux: add dirfd argument to get_bind_mount 7e42a18 linux: add infra to send devices mounts a6c9453 linux: generalize receive_mounts b0fe2e4 linux: refactor code in a separate function 05f1298 contrib, seccomp-notify-plugin: free args on error to prevent leak a34dd94 cri-o,test: skip failing test unrelated to crun 78cf10f crun: fix clang format 278b9b4 src/crun.c: fix build without dlfcn.h 0ebf4e7 build(deps): bump uraimo/run-on-arch-action from 2.3.0 to 2.5.0 4832ca4 Don't clone self from read-only mount 9df7442 tests, wasmedge: copy libraries under /usr/lib64 2044720 tests, wasmedge-build: install which 6f0d03c tests, crio: skip checkpoint/restore tests d406a97 tests, centos9-build: add safe.directory /crun 81b4ba0 tests, cri-o: add criu-libs rpm ca41c80 cloned_binary: use cleanup_close e1c3906 tests, cri-o: update go to 1.19 a83001b cgroups v1: fix legacy mode mount. 26fe138 utils: fix applying AppArmor profile 1cfaf54 tests: disable some CRI-O failing tests 5e3ef32 crun: write setgroups=deny when mapping a single uid/gid da84be0 github: fix cri-o CI on cgroupv2 cdf7864 tests: disable test that requires io.bfq.weight c54fc6f github: fix running on cgroupv2 0356bf4 NEWS: tag 1.7.2 d389308 criu: hardcode to libcriu version 2 3880f04 cgroup: always enable controller 258c237 crun: fix compile time check for CRIU 6ce11e8 copr: enable wasmedge on all active envs ada59b2 tests: fix podman tests d068462 NEWS: tag 1.7.1 9893e99 utils: Improve debug message db08071 linux: include terminal \0 when copying mapping 67f58c6 utils: fix creating default userns 5689bd1 krun: disable libkrun's collection of env vars 6b8da56 krun: copy the OCI configuration file 92db973 configure.ac: do not link libcriu dynamically f6a5109 criu: add check at runtime for the version 8c3fc12 criu: load libcriu dynamically b3189ef src: run make clang-format be6c22c fix timestamp format, tv_usec is microsecond not nanosecond ff95309 copr: enable wasmedge on epel9 40f66c0 seccomp: initialize libgcrypt 9bff00a Add setlinebuf() when --debug and --log=file: are used. cb6ae27 handlers: set selinux/apparmor profile 0efbe56 utils: change AppArmor profile for the current proc f1f286a utils: change SELinux label for the current proc a1cd1a6 handlers: use only the handler name if needed Signed-off-by: Bruce Ashfield

crun: update to v1.7

2022-12-07T21:12:33+00:00

Bumping crun to version 1.7-6-gbebd67f, which comprises the following commits: cb6ae27 handlers: set selinux/apparmor profile 0efbe56 utils: change AppArmor profile for the current proc f1f286a utils: change SELinux label for the current proc a1cd1a6 handlers: use only the handler name if needed 40d996e NEWS: tag 1.7 3239c52 container: do not leak container status ab73033 utils: do not leak error fe21bee cgroup: fix memory leak 10c1fcc handlers: add an alias field 92e67d7 wasm: check pointers before dereferencing cc2ab3b copr: enable wasmedge support for f36 and higher 9c5ad48 container: rewrite argv when using a handler a81b115 libcrun: propagate argc and argv 0a94c5b linux: create parent dir with 0755 5308c49 copr: crun-wasm subpackage 8743809 crun: automatically pick handler from argv0 ddb614b crio,test: skip unrelated seccomp notifier with * 6feeff4 wasmtime: add support for compiling .wat format 7b49b79 NEWS: fill data for old releases baa98f4 container: use clone3 to join directly the target cgroup 37a438d cgroupfs: implement precreate cgroup c4af47e cgroup: new interface to preload a cgroup Signed-off-by: Bruce Ashfield