linux/meta-virtualization.git/recipes-containers/docker-distribution, branch kirkstone

docker-distribution: fix CVE-2025-24976

2025-03-06T17:41:51+00:00

Backport patch to fix CVE-2025-24976. Signed-off-by: Chen Qi Signed-off-by: Bruce Ashfield

docker-distribution: Use dup3 for riscv64

2024-07-22T22:24:22+00:00

Use dup3 instead for riscv64 as there is no dup2 on riscv64 linux to fix the below build failure: vendor/github.com/bugsnag/panicwrap/dup2.go:10:9: undefined: syscall.Dup2 Signed-off-by: Mingli Yu Signed-off-by: Bruce Ashfield

docker-distribution: fix for CVE-2023-2253

2023-07-25T18:53:37+00:00

A flaw was found in the `/v2/_catalog` endpoint in distribution/distribution, which accepts a parameter to control the maximum number of records returned (query string: `n`). This vulnerability allows a malicious user to submit an unreasonably large value for `n,` causing the allocation of a massive string array, possibly causing a denial of service through excessive use of memory. References: https://github.com/distribution/distribution/security/advisories/GHSA-hqxw-f8mx-cpmw https://github.com/distribution/distribution/commit/521ea3d973cb0c7089ebbcdd4ccadc34be941f54 Signed-off-by: Narpat Mali Signed-off-by: Bruce Ashfield

docker-distribution: upgrade to 2.8.1

2022-06-20T16:09:51+00:00

v2.8.1 is the latest stable version. Signed-off-by: Chen Qi Signed-off-by: Bruce Ashfield

docker-distribution: fix build error on new hosts

2022-06-20T16:09:51+00:00

Fix settings for GOROOT, CGO_CFLAGS and CGO_LDFLAGS. The previous setting for GOROOT is no longer valid as the directory does not exist for now. So adjust the GOROOT setting. Currently CGO_CFLAGS is set to use BUILDSDK_CFLAGS, and this is incorrect. We need target flags instead of SDK related flags. Such setting happens to work for some hosts. However, when building on newer hosts, we get QA error like below: ERROR: docker-distribution-v2.7.1-r0 do_package_qa: QA Issue: /usr/sbin/registry contained in package docker-registry requires libc.so.6(GLIBC_2.34)(64bit), but no providers found in RDEPENDS_docker-registry? [file-rdeps] The above error was found on hardknott on host Fedora 35. Tracking down the error and I found it's using host stuff which is likely to be caused by using incorrect CGO_CFLAGS. As the master branch is using the same settings, it has the same issue. Signed-off-by: Chen Qi Signed-off-by: Bruce Ashfield

docker-distribution: fix the inehrit and systemd settings

2022-06-20T16:09:51+00:00

In order for systemd variables such as SYSTEMD_AUTO_ENABLE to have effect, we need to inherit the systemd class. We also need to specify the package which contains the service. As go.bbclass already inherits goarch.bbclass, we only need to inehrit go.bbclass. Signed-off-by: Chen Qi Signed-off-by: Bruce Ashfield

docker-distribution: update to 2.8.0

2022-03-21T21:31:28+00:00

Bumping docker-distribution to version v2.7.1-42-g3b7b5345, which comprises the following commits: 97f6dace [release/2.7] vendor: github.com/opencontainers/image-spec v1.0.2 10ade61d manifest: validate document type before unmarshal c5679da3 [release/2.7] vendor: github.com/golang-jwt/jwt v3.2.1 Signed-off-by: Bruce Ashfield

docker-distribution: update to 2.7.1-latest

2021-11-22T16:20:14+00:00

Bumping docker-distribution to version v2.7.1-38-gf7365390, which comprises the following commits: 97f6dace [release/2.7] vendor: github.com/opencontainers/image-spec v1.0.2 9a3ff113 fix go check issues 19b573a6 Change should to must in v2 spec d836b23f [release/2.7] update to go1.16 Signed-off-by: Bruce Ashfield

global: convert github SRC_URIs to use https protocol

2021-11-02T13:57:03+00:00

github is removing git:// access, and fetches will start experiencing interruptions in service, and eventually will fail completely. bitbake will also begin to warn on github src_uri's that don't use https. So we convert the meta-virt instances to use protocol=https (done using the oe-core contrib conversion script) Signed-off-by: Bruce Ashfield

docker-distrubution: update to 2.7-latest

2021-08-27T14:50:45+00:00

Not much of an update, but we pickup the latest compatibility restrictions: Bumping docker-distribution to version v2.7.1-32-g61e7e208, which comprises the following commits: d836b23f [release/2.7] update to go1.16 cc341b01 Added flag for user configurable cipher suites Signed-off-by: Bruce Ashfield