linux/meta-virtualization.git/recipes-containers, branch scarthgap-5.0.5

runc-docker: upgrade 1.1.12 -> 1.1.14

2024-11-02T04:05:46+00:00

Includes fix for CVE-2024-45310 and other bug fixes Changelog: ========== https://github.com/opencontainers/runc/blob/v1.1.14/CHANGELOG.md Signed-off-by: Divya Chellam Signed-off-by: Bruce Ashfield

container-host-config: Remove centos registry

2024-11-02T04:02:53+00:00

Update registry list by removing 'registry.centos.org' entry. This registry is no longer available. Decommissioning of the registry was announced in the thread: https://lists.centos.org/hyperkitty/list/devel@lists.centos.org/thread/EHGCQUHLDQ6LI474ZAB7MPRZFJD77P3S/ Signed-off-by: Lukasz Czechowski Signed-off-by: Bruce Ashfield

docker-distribution: Use dup3 for riscv64

2024-07-22T22:24:13+00:00

Use dup3 instead for riscv64 as there is no dup2 on riscv64 linux to fix the below build failure: vendor/github.com/bugsnag/panicwrap/dup2.go:10:9: undefined: syscall.Dup2 Signed-off-by: Mingli Yu Signed-off-by: Bruce Ashfield

docker-distribution: Enable support for riscv64

2024-07-22T22:24:13+00:00

Revert [1] to enable support for riscv64. [1] https://git.yoctoproject.org/meta-virtualization/commit/?id=3626f2c9ccd56c6a3ee51304a7da7aafb395a588 Signed-off-by: Mingli Yu Signed-off-by: Bruce Ashfield

lxc: Fix meson build issue

2024-07-22T22:19:34+00:00

Build is failing during do_configure stage for lxc as meson does not support --with-systemdsystemunitdir config parameter. Error: meson: error: unrecognized arguments: --with-systemdsystemunitdir=/etc/systemd/system/ Hence, use -Dsystemd-unitdir config parameter instead. Signed-off-by: Pawan Badganchi Signed-off-by: Bruce Ashfield

podman-compose: Switch branch to main

2024-07-10T14:38:07+00:00

The podman-compose repository has no stable branch anymore and release 1.0.6 is located on main now. Signed-off-by: Daniel Schultz Signed-off-by: Bruce Ashfield

buildah: upgrade to 1.34.3

2024-05-29T13:39:29+00:00

Includes fix for: CVE-2024-1753 Changelog: ========= 2db756331 (tag: v1.34.3) [release-1.34] Bump Buildah to v1.34.3 699d1ed51 [release-1.34] CVE-2024-24786 protobuf to 1.33 4ffe07267 Merge pull request #5419 from TomSweeneyRedHat/dev/tsweeney/cve-1.34 968e8ab62 [release-1.34] Bump to Buildah v1.34.3-dev 776a1463d (tag: v1.34.2) [release-1.34] Bump to Buildah v1.34.2 afc086b65 conformance tests: don't break on trailing zeroes in layer blobs 3deda1913 [release-1.34] CVE-2024-1753 container escape fix 14d60c988 Merge pull request #5365 from edsantiago/skip_unshare_on_rhel--1.34 4f775b4a1 tests: skip_if_no_unshare(): check for --setuid dbeb097c6 Merge pull request #5352 from TomSweeneyRedHat/dev/tsweeney/buildah_1_34_1 Signed-off-by: Yogita Urade Signed-off-by: Bruce Ashfield

kubernetes: Pass -trimpath to build

2024-05-02T18:16:26+00:00

Fix following QA WARNING: WARNING: QA Issue: File /usr/bin/kubectl in package kubectl contains reference to TMPDIR [buildpaths] WARNING: QA Issue: File /usr/bin/kubeadm in package kubeadm contains reference to TMPDIR [buildpaths] WARNING: QA Issue: File /usr/bin/kube-proxy in package kube-proxy contains reference to TMPDIR [buildpaths] WARNING: QA Issue: File /usr/bin/kube-apiserver in package kubernetes-misc contains reference to TMPDIR WARNING: QA Issue: File /usr/bin/kubelet in package kubelet contains reference to TMPDIR [buildpaths] Signed-off-by: Changqing Li Signed-off-by: Bruce Ashfield

containerd-opencontainers: fix wrong version display

2024-05-02T18:16:26+00:00

* Update containerd to v2 to fix following containerd version: containerd github.com/containerd/containerd/v2 2.0.0-beta.0+unknown it should be like: containerd github.com/containerd/containerd/v2 v2.0.0-beta.2-204-gb1624c362.m b1624c3628954e769dd50783b63823040b2db38c.m * Remove CONTAINERD_PKG, it is not used * Update default PACKAGE in Makefile to v2 Signed-off-by: Changqing Li Signed-off-by: Bruce Ashfield

kubernetes: skip textrel QA warning

2024-05-02T18:00:28+00:00

-buildmode=pie need cgo is enabled, but for kubernetes, some build targets are static, and cgo is disable in build script directly, refer [1]. If we add -buildmode=pie by default, will cause these static target build failed with error "-buildmode=pie requires external (cgo) linking, but cgo is not enabled". This warning is acceptable, so just skip it. [1] https://github.com/kubernetes/kubernetes/blob/master/hack/lib/golang.sh#L811 Signed-off-by: Changqing Li Signed-off-by: Bruce Ashfield