linux/meta-virtualization.git/recipes-containers/docker/docker-ce_git.bb, branch kirkstone

docker-ce: bump SRCREV_docker

2023-08-16T13:34:55+00:00

* fix my prevous commit where I've missed this update corresponding to SRCREV_moby change in docker-moby recipe. * also re-order the patches in SRC_URI to match docker-moby, so that they are easier to compare Signed-off-by: Martin Jansa Signed-off-by: Bruce Ashfield

docker: update to v20.10.25 + 58 commits to fix compatibility with go currently in kirkstone

2023-08-15T18:45:49+00:00

* since this backport: https://lists.openembedded.org/g/openembedded-core/message/185082 landed in kirkstone: https://git.openembedded.org/openembedded-core/commit/?h=kirkstone&id=5dc74138649ab7a2c0158a43225dc7a8fd732355 docker cannot access network and fails with: "http: invalid Host header" update to latest commit in 20.10 branch, because latest tag v20.10.25 have the fix yet: https://github.com/moby/moby/compare/v20.10.21...v20.10.25 so we need couple more commits from upstream: https://github.com/moby/moby/compare/v20.10.25...791d8ab87747169b4cbfcdf2fd57c81952bae6d5 Adjust the go version revert which was here since the upgrade to v20.10.21: https://git.yoctoproject.org/meta-virtualization/commit/?h=kirkstone&id=927537108bcf2b98859512ce3eae59a73439994d and add another revert for the go upgrades from upstream for this older patch to apply. * update cli to latest in 20.10 branch as well: https://github.com/docker/cli/compare/baeda1f82a10204ec5708d5fbba130ad76cfee49..911449ca245308472a3d34a7f1a98b918e65c8c3 Signed-off-by: Martin Jansa Signed-off-by: Bruce Ashfield

moby: update to v20.10.21

2022-12-22T15:28:09+00:00

Bumping moby to version v20.10.21, which comprises the following commits: f99cb8297b integration: download busybox-w32 from GitHub Release 3f9dc25f5c update containerd binary to v1.6.9 87ccd38cea vendor: moby/term, Azure/go-ansiterm for golang.org/x/sys/windows compatibility e83e465ae2 [20.10] vendor: github.com/moby/buildkit eeb7b65ab7d651770a5ec52a06ea7c96eb97a249 (v0.8 branch) 9c84417c1b skip TestImagePullStoredfDigestForOtherRepo() on Windows and rootless 5b5b5c6f13 builder: add missing doc comment 05e25f7892 builder: fix running git commands on Windows 2f3bf18014 [20.10] vendor moby/buildkit v0.8.3-31-gc0149372 6699afa549 registry: allow "allow-nondistributable-artifacts" for Docker Hub 4b9902bad4 Validate digest in repo for pull by digest c0d1188c14 builder: make git config isolation opt-in 9f5f3abcee builder: isolate git from local system 10db4c2db7 builder: explicitly set CWD for all git commands 8816c3c2aa builder: modernize TestCheckoutGit 11bdbf40b9 [20.10] Update to go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 66ddb7f91c Fix live-restore w/ restart policies + volume refs c003392582 contrib: make dockerd-rootless-setuptool.sh more robust 53313be0f3 docker-rootless-setuptools.sh: use context after install 9c486bd267 swagger: update links to logo fa17fab895 vendor: github.com/containerd/console v1.0.2 481bee51b5 vendor: github.com/armon/go-metrics v0.4.1 39ba2873e8 vendor: github.com/google/btree v1.1.2 c2755f40cd vendor: github.com/hasicorp/memberlist v0.4.0 5ba3208ec7 Dockerfile: Update Dockerfile syntax, switch to bullseye, add missing libseccomp-dev, remove build pack 6d6a236286 [20.10] Update uses of Image platform fields in OCI image-spec 2570784169 [20.10] vendor: github.com/moby/buildkit 3a1eeca59a9263613d996ead67d53a4b7d45723d (v0.8 branch) fcd4df906b Update some tests for supplementary group permissions 6a0186b357 Wrap local calls to the content and lease service 3d4616f943 Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190 23c7d84b84 docs: api: adjust ContainerWaitResponse error as optional 3e9e79d134 docs: api: document ImageSummary fields (api v1.39-v1.41) fdd438ae03 api: docs: improve documentation of ContainerConfig type (API v1.30-v1.41) 97014a8db5 namesgenerator: remove Valentina Tereshkova e44d7f735e AdditionalGids must include effective group ID 9e7662e4a7 [20.10] vendor: update containerd to latest of docker-20.10 branch 7dac25a3a9 vendor: update tar-split to v0.11.2 8bd86a0699 update containerd binary to v1.6.8 6c8dd6a6f2 update runc to v1.1.4 418c141e64 [20.10 backport] daemon: kill exec process on ctx cancel d127287d92 Allow different syscalls from kernels 5.12 -> 5.16 57db169641 seccomp: add support for Landlock syscalls in default policy reverted by patch: 7ba8ca042c Update golang to 1.18.5 reverted by patch: f2a3c3bcef update golang to 1.18.4 reverted by patch: a99c9cd852 update golang to 1.18.3 reverted by patch: 82939f536b update golang to 1.18.2 reverted by patch: ecd1aa081f update golang to 1.18.1 reverted by patch: 7ba67d05a8 [20.10] vendor: update archive/tar for go 1.18 reverted by patch: 0bc432241e update golang to 1.18.0 bb95d09f9a staticcheck: ignore "SA1019: strings.Title is deprecated" a7299ae72c Dockerfile: update golangci-lint v1.44.0 d97fd533cf integration-cli: SA5011: possible nil pointer dereference (staticcheck) e6aee04a88 client.NewClientWithOpts(): remove redundant type assertion (gosimple) 0523323c28 daemon/logger/awslogs: suppress false positive on hardcoded creds (gosec) adeb29c64c client/request.go:157:8: SA1019: err.Temporary is deprecated (staticcheck) 50361d91a6 registry: trimV1Address(): simplify trimming trailing slash ae3a9337dd golangci.yml: do not limit max reported issues 9820255a1c golangci.yml: skip some tests d223f37300 golangci.yml: update regex for ignoring SA1019 ec3bfba89d graphdriver: temporarily ignore unsafeptr: possible misuse of reflect.SliceHeader f2f387b131 daemon: var-declaration: should omit type bool (revive) 2fb7c9fea7 daemon/config: error strings should not be capitalized fa6954cb98 reformat "nolint" comments 45fa675a35 if-return: redundant if ...; err != nil check (revive) 9e88f8435a daemon/splunk: ignore G402: TLS MinVersion too low for now 2de90ebbe4 pkg/archive: RebaseArchiveEntries(): ignore G110 14b475d091 daemon/stats: fix notRunningErr / notFoundErr detected as unused (false positive) db7b3f4737 unused: ignore false positives b6de0ca7c5 G601: Implicit memory aliasing in for loop e8b838e99f gosec: G601: Implicit memory aliasing in for loop 2ddf6e598a gosimple: S1039: unnecessary use of fmt.Sprintf fadf8bbdff staticcheck: SA4001: &*x will be simplified to x. It will not copy x 7573e32577 client: S1031: unnecessary nil check around range (gosimple) e738a57a6d daemon/logger/journald: fix linting errors 34f6b94255 gosec: G404: Use of weak random number generator a6d7b61c8b update containerd binary to v1.6.7 b4ba1ee22f update runc binary to v1.1.3 da8828c4b3 api: swagger: fix invalid example value (API v1.39-v1.41) 9501d91e19 api: swagger: document BuildCache fields (API v1.39-v1.41) 61fdea902b api: swagger: document BuildCache fields. c77432c889 [20.10] Update golang to 1.17.13 2833aa1e4b docs: api: add missing "platform" query-arg on create (v1.41) a8c28260ad api: swagger: add missing "platform" query-arg on create cfdc075b1c Fix file capabilities droping in Dockerfile 2daa6bb6b3 Windows: Re-create custom NAT networks after restart if missing from HNS 903cd53ce4 vendor: libnetwork 0dde5c895075df6e3630e76f750a447cf63f4789 eccaf6d368 [20.10] update golang to 1.17.12 ff7feeac37 vendor: github.com/containerd/continuity v0.3.0 Bumping libnetwork to version v0.7.0-dev.3-1841-gdcdf8f17, which comprises the following commits: 5e08bdb1 Revert: Added API to set ephemeral port allocator range 563fe8e2 README.md: repo was moved to https://github.com/moby/moby/tree/master/libnetwork bea0bcf5 libnetwork: skip firewalld management for rootless af0c46d8 Apply peformance tuning to new sandboxes also Bumping docker-cli to version v20.10.21, which comprises the following commits: 3e3677e47d docs: fix links to BuildKit backend 20e3951aeb Remove "experimental" gates around "--platform" in bash completion 75d7ce92a2 fixed the plugin command docker-runc a12c535f6e [20.10] vendor docker 03df974ae9e6c219862907efdd76ec2e77ec930b (v20.10.20) d18a3e9004 [20.10] vendor moby/buildkit v0.8.3-31-gc0149372 932ca73874 [20.10] vendor: github.com/docker/docker v20.10.19 7d51e65e72 [20.10] vendor: github.com/moby/buildkit 3a1eeca59a9263613d996ead67d53a4b7d45723d (v0.8 branch) 1ea8d69d6f feat(docker): add context argument completion e82aa85741 [20.10] vendor: github.com/docker/docker v20.10.18 e9176b36cc [20.10] vendor: github.com/containerd/continuity v0.3.0 bc6ff39e42 docs/reference: run.md update confusing example name 3fa7a8654f docs: update deprecation status for "overlay2.override_kernel_check" 3e06ce8bfa [20.10] Update go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 93eead45ee Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190 45075ea08c [20.10] vendor: github.com/docker/docker v20.10.17 c2dcaecf19 make compose plugin detection in bash completion work on Mac OS 613b9362d0 Detect compose plugin b30d250320 Add completion for docker-compose plugin 6b25bc3003 fix race condition in TestRemoveForce bdac0b38d9 Update golang to 1.18.5 c70b01ec1f update golang to 1.18.4 0389090aeb update golang to 1.18.3 c904936d69 update golang to 1.18.2 386d50c2e9 update golang to 1.18.1 990186f2f6 update go to 1.18.0 86bf1966e2 staticcheck: ignore SA1019: strings.Title is deprecated b3022b91d1 [20.10] Dockerfile.lint: use go install f14ba9f5d7 [20.10] Dockerfile: use syntax=docker/dockerfile:1 c189c4dbea [20.10] vendor: github.com/json-iterator/go v1.1.12 for Go 1.18 compatibility 0c46ffc1f9 [20.10] vendor: github.com/modern-go/reflect2 v1.0.2 for Go 1.18 compatibility 6be9ce798e [20.10] vendor: github.com/google/gofuzz v1.0.0 779ed309a8 lint: update golangci-lint to v1.45.2 2f7e84be65 linting: fix incorrectly formatted errors (revive) e628209d9b linting: ignore some "G101: Potential hardcoded credentials" warnings 80a3add604 cli/command/container: unnecessary use of fmt.Sprintf (gosimple) 80fb0d575e [20.10] Update golang to 1.17.13 d72bef2088 [20.10] update golang to 1.17.12 7502d7e560 Fix dead external link 308624c3b1 fix: remove asterisk from docker command suggestions de7d866b6a [20.10] update golang to 1.17.11 240e4b5501 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 5d4776bd90 [20.10] update golang to 1.17.10 49e9c2ae3d vendor: golang.org/x/sys 63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17) 87a3ce2699 vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456 1d8abed17d vendor: update x/sys to 134d130e 31dad66f9a [20.10] update golang to 1.17.9 80f673bf9e gofmt with go1.17 3d4cc8e699 [20.10] update remaining files to go1.17.8 30277a8f80 update go to 1.17.8 cfef3a7dc1 docs: deprecated: add entry for "fluent-async-connect" log-opt 53426025c3 [20.10] docs: reformat table for compatibility 573a664639 Describe privileged mode in terms of capabilities cf0ab7ac4c [20.10] vendor: github.com/docker/distribution v2.8.1 d05fd4ffc8 [20.10] vendor: github.com/opencontainers/image-spec v1.0.2 870f138250 [20.10] vendor: github.com/docker/docker v20.10.14 198d6b8724 [20.10] circleci: update buildx to v0.8.2 55a14ec851 [20.10] update remaining Dockerfiles to go 1.16.15 1f9a0df05a e2e: update docker-compose to 1.29.2 4ae338b33a docs: reference: remove trailing space to fix yaml formatting 6380142dd4 docs: fix (table) formatting, fix some broken links 82f422fcf3 docs: build: fix minor markdown and syntax issues 80fd77903b Update the list of log drivers c3d4d623c8 Fix CMD --ignored-param1 example 2e82d11def docs: dockerd: fix broken link in blockquote area 738a6ee1cc improve cp documentation with some illustration examples 246d96bb6c docs: unify "docker create" and "docker run" reference 2fd0f17057 docs: add missing documentation for --pull flag 5fa500000a Fix incorrect pointer inputs to `json.Unmarshal` 1e6a8ce2b7 Dockerfile: update xx to 1.1 6f7a931a2d [20.10] use GO_LDFLAGS instead of LDFLAGS to prevent inheriting unrelated options 91bab605f7 [20.10] vendor.conf: don't use git:// protocol a282e0c5d2 [20.10] update to go 1.16.15 to address CVE-2022-24921 700364e304 Fix mistake with env var example in docker run docs 62d27c32ff Update WORKDIR command information c0e952cf04 Fix the (dead) link for docs for Dockerfile syntax reference 04104a04d3 Update dockerd.md b721998b7b Fixing typo (his --> its) 4065e1246e format create.md table f1002eb9fb Fix typo e97c7b240e added missing closing parenthese aa78937634 Update stats.md add example json output 40fe0573aa Update Ubuntu version number references in push.md c9737e1c37 docs/daemon: replace deprecated '-g' option for '--data-root' 5c6723d080 Correct device syntax to --gpus fd5fc61ecd [20.10] Update Go to 1.16.14 3624019d83 [20.10] update Go to 1.16.13 f3ff8e6ad6 [20.10] vendor: compose-on-kubernetes v0.5.0 to remove github.com/golang/glog ee1ac1b319 fix innocuous data-race when config.Load called in parallel 38dd744a11 [20.10] Update Go to 1.16.12 4de40a825e Update Go to 1.16.11 03fa8f92c8 Update Go to 1.16.10 9989fdbc40 Update most links in docs to use https by default 0e20c1fd21 Update Go to 1.16.9 1c0927a041 Dockerfile: update tonistiigi/xx to 1.0.0-rc.2, add XX_VERSION arg 82f9d5921b info: skip client-side warning about seccomp profile on API >= 1.42 adb01ca79d docs: some minor touch-ups in checkpoint reference 8260476a06 docs: remove trailing space to fix generated YAML format bce2e1f953 docs: create.md: typo fix 44064f51c8 Fix typo in documentation - build.md 292779add5 Add doc for BUILDKIT_PROGRESS env var f2e79b826c docs: use "console" code-hint for shell examples fa46b92361 docs: rewrite reference docs for --stop-signal and --stop-timeout 400f81089a experimental: fix broken link to "checkpoint and restore" page c72057c8db docs: move checkpoint/restore doc from experimental into reference 77db97d595 Use private network address for default-address-pools setting in daemon.json example cbf0d2b7b7 docs: fix some broken anchors d0014a86bc docs: fix description of restart-delay to mention max (1 minute) 6c1c8b55aa docs: fix search results by filterd is-official 44fdac11f5 Update Go to 1.16.8 061051c24d docs: add missing redirect, and remove /go/experimental redirect 2012fbf111 Update Go to 1.16.7 42d1c02750 registry: ensure default auth config has address 0b924e51fc Update to go1.16.6 6288e8b1ac change TestNewAPIClientFromFlagsWithHttpProxyEnv to an e2e test 1e9575e81a cli/config/configfile: various test cleanups c98e9c47ca Use designated test domains (RFC2606) in tests 8437cfefae context: deprecate support for encrypted TLS private keys 68a5ca859f cli/context: ignore linting warnings about RFC 1423 encryption 8a64739631 Update Dockerfiles to latest syntax, remove "experimental" 1d37fb3027 Deprecate Kubernetes context support 0793f96394 Deprecate Kubernetes stack support b639ea8b89 Deprecate Kubernetes stack support Signed-off-by: Adrian Freihofer Signed-off-by: Bruce Ashfield

docker/moby: use generic DOCKER_COMMIT in do_compile

2022-12-22T15:28:09+00:00

do_compile() is shared and shouldn't have been using SRCREV_moby as that is obviously only set in the moby recipe. Switch to using a generic DOCKER_COMMIT variable and set it in both docker_moby and docker-ce. Signed-off-by: Bruce Ashfield

docker: add mobyproject:moby to CVE_PRODUCT

2022-12-22T15:28:08+00:00

Add mobyproject:moby to CVE_PRODUCT to reflect where the source is coming from for both docker recipes. We keep the old 'docker' designation for compatibility. It is unclear whether or not we should also be adding the cli and libnetwork to the CVE_PRODUCT. But since they are on different SRCREVs and not vendored, we keep them out for now. Signed-off-by: Bruce Ashfield

docker-ce: update to 20.10.17

2022-12-22T15:28:08+00:00

Bumping moby to version v20.10.17-2-g3949ff121e, which comprises the following commits: ff7feeac37 vendor: github.com/containerd/continuity v0.3.0 6f3f2b6d08 update containerd binary to v1.6.6 b3bcb15da8 update containerd binary to v1.6.5 f55b030fa0 system: unbreak build for darwin 63ab12cd3a Port pkg/system/mknod.go to FreeBSD 081e538fbd vendor: libnetwork f6ccccb1c082a432c2a5814aaedaca56af33d9ea 8e9d647c01 [20.10] update golang to 1.17.11 87ead7fd2a vendor: hcsshim a11a2c44e8a4aa9d66314b1d759ef582df5ab5e8 27f8322324 vendor: libnetwork 2dab5620d4462865c6151e573b3e7fa5d3b8458b 829951ec19 docs: api: /containers/{id}/attach/ws: remove unsupported query-args < v1.42 6cbe73bfc0 Rename Reservation to Reservations in the open API d9ed3d7e28 update runc binary to v1.1.2 a15acb4bd6 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 5f2e0b79ad [20.10] update golang to 1.17.10 Bumping libnetwork to version v0.7.0-dev.3-1835-gf6ccccb1, which comprises the following commits: af0c46d8 Apply peformance tuning to new sandboxes also 23ffb31f Set ExternalPortReserved for dummy proxy 9b82e422 Bump hcsshim 9db86fb7 Only check if route overlaps routes with scope: LINK Bumping docker-cli to version v20.10.17, which comprises the following commits: 7502d7e56 Fix dead external link 308624c3b fix: remove asterisk from docker command suggestions de7d866b6 [20.10] update golang to 1.17.11 240e4b550 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 5d4776bd9 [20.10] update golang to 1.17.10 49e9c2ae3 vendor: golang.org/x/sys 63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17) 87a3ce269 vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456 1d8abed17 vendor: update x/sys to 134d130e 31dad66f9 [20.10] update golang to 1.17.9 80f673bf9 gofmt with go1.17 3d4cc8e69 [20.10] update remaining files to go1.17.8 30277a8f8 update go to 1.17.8 cfef3a7dc docs: deprecated: add entry for "fluent-async-connect" log-opt 53426025c [20.10] docs: reformat table for compatibility 573a66463 Describe privileged mode in terms of capabilities cf0ab7ac4 [20.10] vendor: github.com/docker/distribution v2.8.1 d05fd4ffc [20.10] vendor: github.com/opencontainers/image-spec v1.0.2 870f13825 [20.10] vendor: github.com/docker/docker v20.10.14 198d6b872 [20.10] circleci: update buildx to v0.8.2 55a14ec85 [20.10] update remaining Dockerfiles to go 1.16.15 1f9a0df05 e2e: update docker-compose to 1.29.2 4ae338b33 docs: reference: remove trailing space to fix yaml formatting 6380142dd docs: fix (table) formatting, fix some broken links 82f422fcf docs: build: fix minor markdown and syntax issues 80fd77903 Update the list of log drivers c3d4d623c Fix CMD --ignored-param1 example 2e82d11de docs: dockerd: fix broken link in blockquote area 738a6ee1c improve cp documentation with some illustration examples 246d96bb6 docs: unify "docker create" and "docker run" reference 2fd0f1705 docs: add missing documentation for --pull flag 5fa500000 Fix incorrect pointer inputs to `json.Unmarshal` 1e6a8ce2b Dockerfile: update xx to 1.1 6f7a931a2 [20.10] use GO_LDFLAGS instead of LDFLAGS to prevent inheriting unrelated options 91bab605f [20.10] vendor.conf: don't use git:// protocol a282e0c5d [20.10] update to go 1.16.15 to address CVE-2022-24921 700364e30 Fix mistake with env var example in docker run docs 62d27c32f Update WORKDIR command information c0e952cf0 Fix the (dead) link for docs for Dockerfile syntax reference 04104a04d Update dockerd.md b721998b7 Fixing typo (his --> its) 4065e1246 format create.md table f1002eb9f Fix typo e97c7b240 added missing closing parenthese aa7893763 Update stats.md add example json output 40fe0573a Update Ubuntu version number references in push.md c9737e1c3 docs/daemon: replace deprecated '-g' option for '--data-root' 5c6723d08 Correct device syntax to --gpus fd5fc61ec [20.10] Update Go to 1.16.14 3624019d8 [20.10] update Go to 1.16.13 f3ff8e6ad [20.10] vendor: compose-on-kubernetes v0.5.0 to remove github.com/golang/glog ee1ac1b31 fix innocuous data-race when config.Load called in parallel 38dd744a1 [20.10] Update Go to 1.16.12 4de40a825 Update Go to 1.16.11 03fa8f92c Update Go to 1.16.10 9989fdbc4 Update most links in docs to use https by default 0e20c1fd2 Update Go to 1.16.9 1c0927a04 Dockerfile: update tonistiigi/xx to 1.0.0-rc.2, add XX_VERSION arg 82f9d5921 info: skip client-side warning about seccomp profile on API >= 1.42 adb01ca79 docs: some minor touch-ups in checkpoint reference 8260476a0 docs: remove trailing space to fix generated YAML format bce2e1f95 docs: create.md: typo fix 44064f51c Fix typo in documentation - build.md 292779add Add doc for BUILDKIT_PROGRESS env var f2e79b826 docs: use "console" code-hint for shell examples fa46b9236 docs: rewrite reference docs for --stop-signal and --stop-timeout 400f81089 experimental: fix broken link to "checkpoint and restore" page c72057c8d docs: move checkpoint/restore doc from experimental into reference 77db97d59 Use private network address for default-address-pools setting in daemon.json example cbf0d2b7b docs: fix some broken anchors d0014a86b docs: fix description of restart-delay to mention max (1 minute) 6c1c8b55a docs: fix search results by filterd is-official 44fdac11f Update Go to 1.16.8 061051c24 docs: add missing redirect, and remove /go/experimental redirect 2012fbf11 Update Go to 1.16.7 42d1c0275 registry: ensure default auth config has address Signed-off-by: Bruce Ashfield

docker-ce: update to 20.10.16

2022-12-22T15:28:08+00:00

Bumping moby to version v20.10.16, which comprises the following commits: a15acb4bd6 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 5f2e0b79ad [20.10] update golang to 1.17.10 be7855fdbe vendor: update github.com/containerd/cgroups and github.com/cilium/ebpf 414a9e24a7 update containerd binary to v1.6.4 47b6a924b6 update containerd binary to v1.6.3 6d7c2b2d26 update containerd binary to v1.6.2 91708bf704 update containerd binary to v1.6.1 53ae17008e Revert "[20.10] update containerd binary to 1.5.11" 961b9a78d5 update runc binary to v1.1.1 97972dac5f update runc binary to v1.1.0 033a819714 [20.10] update golang to 1.17.9 a80884126b Jenkinsfile: add workaround for CVE-2022-24765 09d6fcdfec update to go 1.17.8 to address CVE-2022-24921 5957684b2c Update Go to 1.17.7 55b72c70ba Update Go to 1.17.6 fdf3020bd5 Update Go to 1.17.5 36e164ba80 Update Go to 1.17.4 ecfba8f588 Update Go to 1.17.3 4e14dcc125 Update Go to 1.17.2 c32b5ece31 Update Go to 1.17.1 7096508811 vendor: update archive/tar to match Go 1.17.0 a1150245cc Update to Go 1.17.0, and gofmt with Go 1.17 95cc7115fb hack/vendor.sh: allow go version to be specified with .0 949c33b1c5 vendor: golang.org/x/sys 63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17) 8392285876 vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456 4e81bcf380 Makefile: update buildx to v0.8.2 74e699c8d3 Makefile: update buildx version to v0.6.0 bc3cc2e7ac Makefile: install buildx from binary release, instead of building 492fac20af api: docs: fix indentation of HostConfig.SecurityOpt (v1.39-v1.41) 3cba2682d8 api: docs: move ContainerWaitResponse to definitions (v1.39-v1.41) 55e71450ae api: docs: move VolumeCreateOptions to definitions (v1.39-v1.41) c54362cd64 api: docs: move Volume examples inline (v1.39-v1.41) c60ff9b296 doc: server API Correct ImagesCreate - platform parameter added in 1.32 7a45f7a8cc docs: cleanup swagger API with multiple examples (v1.25-v1.41) 29bb9204bf api: docs: add IPAMConfig on IPAM (v1.41) 77f6564369 api: docs: document MountPoint fields (v1.25-v1.41) 51ea235ab8 api: docs: remove deprecated RootFS.BaseLayer (API v1.25-v1.41) 3d6b4ae572 Correct type of Mounts in ContainerSummary in docs (v1.25-v1.40) 6e8b9809b7 Correct type of Mounts in ContainerSummary in docs 621a98dac0 api: docs: fix warning about comment indentation (API v1.40-v1.41) bb9ef98060 api: docs: update docs for /images/{name}/json (API v1.39-v1.41) 88ca5cec4e daemon: fix error-message for minimum allowed kernel-memory limit 3ea996abd7 docs: add missing KernelMemoryTCP to api v1.40 and v1.41 b475bc95cd docs/api: add missing 400 response for POST /containers/{id}/wait ae07b3cc96 docs/api: update /containers/{id}/wait "condition" parameter (v1.30-v1.41) 19555fa92d [20.10] vendor: github.com/docker/distribution v2.8.1 32fe0bbb91 daemon: use RWMutex for stateCounter ed8fb00b65 errdefs: move GetHTTPErrorStatusCode to api/server/httpstatus 3bd611d7a5 log error message when receiving an unexpected type error 7dfe7a1752 [20.10] update containerd binary to 1.5.11 af953d2f38 [20.10] vendor: containerd 7cfa023d95d37076d5ab035003d4839f4b6ba791 5f9753ae73 client: remove containerd "platform" dependency 4df345e65d client: remove unused Platform field from configWrapper dd38613d0c oci: inheritable capability set should be empty 2825bf7123 Only check if route overlaps routes with scope: LINK f5c56eaca8 [20.10] bump swarmkit for config size increase ce3b6d1ae9 distribution: retry downloading schema config on retryable error Signed-off-by: Bruce Ashfield

docker-ce: update to v20.10.12

2022-03-21T21:31:28+00:00

Bumping docker to version v20.10.12-84-g906f57ff5b, which comprises the following commits: ce3b6d1ae9 distribution: retry downloading schema config on retryable error 180f3b9cc7 update containerd binary to v1.5.10 0fa0d70489 [20.10] update to go 1.16.15 to address CVE-2022-24921 4679ffd01c docs: remove HostConfig.LxcConf field from API docs fbbe1fcfd8 api: remove HostConfig.LxcConf field a5a697143d docs: fixing /exec/{id}/resize response code in API documentation 42b13c09a6 Added error codes for exec resize in API docs aa69e8ed3f Fixed exec resize success code in API docs ca5ba4890e Fix typo on the v1.41 changelog db214206e5 vendor: bump etcd v3.3.27 df6a536193 vendor: github.com/coreos/etcd v3.3.25 9502dec32f [20.10] Update Go to 1.16.14 878b9de935 daemon/graphdriver/fuse-overlayfs: Init(): fix directory permissions (staticcheck) d1b3497bfa [20.10] vendor: github.com/docker/distribution v2.8.0 f9344b45fe api/swagger: move DistributionInspect to definitions 13cb9d9723 api/swagger: rename PluginPrivilegeItem to PluginPrivilege 7f9760e10c api/swagger: fix up event-types and move to definitions e6739a2884 api/swagger: move DistributionInspect to definitions d445d24804 api/swagger: rename PluginPrivilegeItem to PluginPrivilege 5e38ae84b2 api/swagger: fix up event-types and move to definitions 012fdff916 Fix swagger docs to match the opencontainers image-spec 13cbf7fbb7 Extract PluginPrivilegeItem as explicit type definition 8fbcf0611b Use explicit object names for improved swagger based code generation b8bee972c4 Fix ContainerSummary swagger docs 7092a6091c Add "changes" query parameter for /image/create to swagger docs adf1e470a1 Add RestartPolicy "no" to swagger docs b4b469eac2 Fix swagger docs to match the opencontainers image-spec 2c38a2a635 Extract PluginPrivilegeItem as explicit type definition 621bfddd6e Use explicit object names for improved swagger based code generation 8a5240a8aa Fix ContainerSummary swagger docs 751cf68e36 Add "changes" query parameter for /image/create to swagger docs a961b76aef Add RestartPolicy "no" to swagger docs ad21bcd94e Jenkinsfile: remove Windows RS1 as it reached end of support b2684c1857 Fix for lack of syncromization in daemon/update.go 8268f70ebb daemon/logger: replace flaky TestFollowLogsHandleDecodeErr 78d0b936b8 daemon/logger: refactor followLogs to write more unit tests 39519221c2 daemon/logger: test followLogs' handleDecodeErr case ada1b01de1 daemon/logger: read the length header correctly 829f071228 update containerd binary to v1.5.9 3e5eea4192 update runc binary to v1.0.3 bd42e17284 update containerd binary to v1.5.8 3fd0b8d6eb Update containerd binary to v1.5.7 3700adb70a Update containerd binary to v1.5.6 0f37f2989b Dockerfile: update gotestsum to v1.7.0 2716336abd Dockerfile: use "go install" to install utilities b35a1707e3 Dockerfile: use version for some utilities instead of commit-sha 2a18825cdf Dockerfile: remove GOPROXY override (was for go < 1.14) 0f925d5d3d remove deprecated "nokmem" build-tag for runc fb45fe614d info: remove "expected" check for tini version fd32c70031 update containerd binary to v1.5.5 302114634c update containerd binary v1.4.8 1cd13dcb6c Update containerd binary to v1.5.3 5f09d5c76a update containerd binary to v1.5.2 23f23c99ed update containerd binary to v1.5.1 f036a34c5b update containerd binary to v1.5.0 1dd37750a6 Revert "[20.10] update containerd binary to v1.4.5" b097d29705 Revert "[20.10] update containerd binary to v1.4.6" de656f9da4 Revert "[20.10] update containerd binary to v1.4.7" 9e36f77577 Revert "[20.10] update containerd binary v1.4.8" eb2acf2fb3 Revert "[20.10] update containerd binary to v1.4.9" 4e838e50ea Revert "[20.10] update containerd binary to v1.4.10" 79fd9c1541 Revert "[20.10] update containerd binary to v1.4.11" 13de46fd4b Revert "[20.10] update containerd binary to v1.4.12" aa92e697cb [20.10] update Go to 1.16.13 f9df098e76 fluentd: Turn ForceStopAsyncSend true when async connect is used 81fc02b7e1 vendor: github.com/fluent/fluent-logger-golang v1.8.0 d6f3add5c6 vendor: github.com/fluent/fluent-logger-golang 1.6.1 660b9962e4 daemon.WithCommonOptions() fix detection of user-namespaces a621bc007b [20.10] update Go to 1.16.12 f4daf9dd08 [20.10] update Go to 1.16.11 dc015972bb vendor: github.com/opencontainers/image-spec v1.0.2 e0108db2bd [20.10] fix vendor validation d47de2a4c7 [20.10] update containerd binary to v1.4.12 da9c983789 [20.10] vendor: github.com/moby/buildkit v0.8.3-4-gbc07b2b8 c1f352c4b1 distribution: validate blob type c96ed28f2f vendor: update github.com/containerd/containerd 7677aeafd7 TestBuildUserNamespaceValidateCapabilitiesAreV2: cleanup daemon storage 34eb6fbe60 testutil: daemon.Cleanup(): cleanup more directories 0e76a0a418 info: unset cgroup-related fields when CgroupDriver == none c7edd308ad [20.10] Update Go to 1.16.10 b3456925ca vendor: update github.com/docker/distribution 6611c72b65 cmd/dockerd: create panic.log file without readonly flag 4b9a3dac46 Fix race in TestCreateServiceSecretFileMode, TestCreateServiceConfigFileMode acb4f263b3 Fix racey TestHealthKillContainer 59d2a2c397 dockerd-rootless.sh: Fix variable not double quotes cause unexpected behavior 2c6aa5aad9 Remove needless check 3285c27503 Fix log statement 'failed to exit' timeout accuracy a4bcd4c64f docker daemon container stop refactor bed624fdc9 docker kill: fix bug where failed kills didnt fallback to unix kill 80b7e8b5d7 buildkit: normalize build target and local platform c2b9a32875 vendor: Update go-winio to v0.4.20 c580a02873 [20.10] Update Go to 1.16.9 129a2000cf [20.10] update containerd binary to v1.4.11 6835d15f55 [20.10] update containerd binary to v1.4.10 5730c139f7 Bump swarmkit to get fix for rollback 59f10e3435 quota: adjust build-tags to allow build without CGO fa78afebcf Update Go to 1.16.8 567c01f6d1 seccomp: add support for "clone3" syscall in default policy 07728cd2bd update runc binary to v1.0.2 964768f200 cmd/dockerd: add the link of "the documentation" 80f1169eca chrootarchive: don't create parent dirs outside of chroot 93ac040bf0 Lock down docker root dir perms. b0c0b73798 bump up rootlesskit to v0.14.4 decb56ac89 Update Go to 1.16.7 Bumping docker-cli to version v20.10.12-22-ga22408634, which comprises the following commits: a282e0c5d [20.10] update to go 1.16.15 to address CVE-2022-24921 700364e30 Fix mistake with env var example in docker run docs 62d27c32f Update WORKDIR command information c0e952cf0 Fix the (dead) link for docs for Dockerfile syntax reference 04104a04d Update dockerd.md b721998b7 Fixing typo (his --> its) 4065e1246 format create.md table f1002eb9f Fix typo e97c7b240 added missing closing parenthese aa7893763 Update stats.md add example json output 40fe0573a Update Ubuntu version number references in push.md c9737e1c3 docs/daemon: replace deprecated '-g' option for '--data-root' 5c6723d08 Correct device syntax to --gpus fd5fc61ec [20.10] Update Go to 1.16.14 3624019d8 [20.10] update Go to 1.16.13 f3ff8e6ad [20.10] vendor: compose-on-kubernetes v0.5.0 to remove github.com/golang/glog ee1ac1b31 fix innocuous data-race when config.Load called in parallel 38dd744a1 [20.10] Update Go to 1.16.12 4de40a825 Update Go to 1.16.11 03fa8f92c Update Go to 1.16.10 9989fdbc4 Update most links in docs to use https by default 0e20c1fd2 Update Go to 1.16.9 1c0927a04 Dockerfile: update tonistiigi/xx to 1.0.0-rc.2, add XX_VERSION arg 82f9d5921 info: skip client-side warning about seccomp profile on API >= 1.42 adb01ca79 docs: some minor touch-ups in checkpoint reference 8260476a0 docs: remove trailing space to fix generated YAML format bce2e1f95 docs: create.md: typo fix 44064f51c Fix typo in documentation - build.md 292779add Add doc for BUILDKIT_PROGRESS env var f2e79b826 docs: use "console" code-hint for shell examples fa46b9236 docs: rewrite reference docs for --stop-signal and --stop-timeout 400f81089 experimental: fix broken link to "checkpoint and restore" page c72057c8d docs: move checkpoint/restore doc from experimental into reference 77db97d59 Use private network address for default-address-pools setting in daemon.json example cbf0d2b7b docs: fix some broken anchors d0014a86b docs: fix description of restart-delay to mention max (1 minute) 6c1c8b55a docs: fix search results by filterd is-official 44fdac11f Update Go to 1.16.8 061051c24 docs: add missing redirect, and remove /go/experimental redirect 2012fbf11 Update Go to 1.16.7 42d1c0275 registry: ensure default auth config has address Signed-off-by: Bruce Ashfield

global: convert github SRC_URIs to use https protocol

2021-11-02T13:57:03+00:00

github is removing git:// access, and fetches will start experiencing interruptions in service, and eventually will fail completely. bitbake will also begin to warn on github src_uri's that don't use https. So we convert the meta-virt instances to use protocol=https (done using the oe-core contrib conversion script) Signed-off-by: Bruce Ashfield

docker-ce: add SRCREV_FORMAT

2021-10-20T03:18:11+00:00

recipes that use multiple SCMs in the SRC_URI, must supply SRCREV_FORMAT or SRCPV triggers an expansion error. While this isn't fatal during the build, it can cause issues with setscene (and possibly) other tasks failing, which then leads to no sstate re-use, etc. Signed-off-by: Bruce Ashfield