linux/meta-virtualization.git/recipes-containers, branch walnascar

podman: fix CVE-2025-9566

2025-10-14T02:01:08+00:00

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file. [EOL][EOL]Binary-Affected: podman[EOL]Upstream-version-introduced: v4.0.0[EOL]Upstream-version-fixed: v5.6.1 Reference: https://security-tracker.debian.org/tracker/CVE-2025-9566 Upstream-patch: https://github.com/containers/podman/commit/ca994186f07822b9048fe711b6903e51614d3e15 Signed-off-by: Divya Chellam Signed-off-by: Bruce Ashfield

kubernetes: Upgrade to 1.32.6

2025-07-16T18:50:25+00:00

Bumping kubernetes to version v1.32.6, which comprises the following commits: 036f7ed3f1f Release commit for Kubernetes v1.32.6 66b2951498a Merge pull request #132225 from cpanato/update-go-1-32 7246ec90c1b Bump images, dependencies and versions to go 1.23.10 and distroless iptables 2aa6d7d4674 Merge pull request #131782 from rata/automated-cherry-pick-of-#131623-upstream-release-1.32 5b3e813641d Merge pull request #132099 from gnufied/automated-cherry-pick-of-#131408-upstream-release-1.32 09750267c3b Merge pull request #132010 from gnufied/automated-cherry-pick-of-#131987-upstream-release-1.32 6471cec0de5 Merge pull request #131784 from rata/automated-cherry-pick-of-#130243-upstream-release-1.32 790dc3b4fa5 Merge pull request #131652 from princepereira/automated-cherry-pick-of-#131506-upstream-release-1.32 b41aa671242 Merge pull request #131786 from rata/automated-cherry-pick-of-#130800-upstream-release-1.32 448eedf8efd Merge pull request #131875 from pohly/automated-cherry-pick-of-#131844-origin-release-1.32 de8292ad6f1 Remove warning about resizing failed for unknown reason ec4c71b7055 Add tests that validate the return value of resize operation 89d95c9713a Merge pull request #131936 from cpanato/update-go-1.32 40849d37eae Bump images, dependencies and versions to go 1.23.9 and distroless iptables 9a67ee4a707 DRA node: reject static pods which reference ResourceClaims 07011c05b71 pkg/kubelet/userns: Remove skip on windows 1d923fbc781 pkg/kubelet/userns: Wrap error to get mappings 3755f8e2f28 pkg/kubelet/userns: Provide stub implementation for windows b5d6f06fe6e pkg/kubelet: Fix userns tests on Windows 5e7201df697 Revert "Enforce the Minimum Kernel Version 6.3 for UserNamespacesSupport feature" a35311c3588 Revert "Switch hard error to a WARNING for kernel version check" 54889f05324 userns: Wrap more errors 9326fc30973 userns: Improve error returned if userns is not supported fd5862185f2 userns: Use len to handle empty non-nil slices 95c119b504e Update CHANGELOG/CHANGELOG-1.32.md for v1.32.5 9894294ef13 (tag: v1.32.5) Release commit for Kubernetes v1.32.5 3f75cae6030 Merge pull request #131524 from carlory/automated-cherry-pick-of-#131495-release-1.32 55a2f43a98f Merge pull request #131438 from gnufied/automated-cherry-pick-of-#131418-upstream-release-1.32 01aff800b63 Merge pull request #131528 from ameukam/update-go-1-23-8 9a57de0ec6f Update hnslib version in Windows KubeProxy. a624d76abdf Merge pull request #131428 from princepereira/automated-cherry-pick-of-#131138-upstream-release-1.32 7ba97788a71 Bump images, dependencies and versions 5ad726c6ef3 Handle unsupported node expansion for RWX volumes b23e637969f Manually adding fix for failing pull-kubernetes-typecheck tests which had dependency with this commit: https://github.com/kubernetes/kubernetes/commit/61863035803cc105619925a0fa23a779a9578bd4 cdbea02d39f Mark NodeExpansion finsihed without featuregate check 69e0af31000 Also change final status by removing featuregate check 0bec23c9577 Check for newer fields when deciding expansion recovery feature status 76bf5dbdc88 Fix for HNS local endpoint was being deleted instead of the remote endpoint. d5df907c3cb Update CHANGELOG/CHANGELOG-1.32.md for v1.32.4 59526cd4867 (tag: v1.32.4) Release commit for Kubernetes v1.32.4 bf1fded1f95 Merge pull request #130773 from JoelSpeed/automated-cherry-pick-of-#130450-kubernetes-release-1.32 0b7ab453ce6 Merge pull request #130684 from carlory/automated-cherry-pick-of-#130335-upstream-release-1.32 35716897a3d Merge pull request #131159 from wojtek-t/automated-cherry-pick-of-#131020-upstream-release-1.32 7b326a95116 Fix race for sending errors in watch cdc807a9e84 Merge pull request #131154 from neolit123/automated-cherry-pick-of-#131153-origin-release-1.32 b5f6d82ff5d CHANGELOG-1.32: fix release note about kubeadm upgrade phases 01b87d211f1 Fix implementation of ContainsCIDR to allow non-equal addresses a0ad8fb28a4 Update CHANGELOG/CHANGELOG-1.32.md for v1.32.3 32cc146f75a (tag: v1.32.3) Release commit for Kubernetes v1.32.3 e3daed87346 fix handle terminating pvc when kubelet rebuild dsw ef4a6f98333 fix e2e ad0c8a10e4e add e2e test to reproduce unexpected unmount after kubelet is restarted 1b7bbcf2f55 Merge pull request #130508 from cici37/automated-cherry-pick-of-#130035-upstream-release-1.32 b6fd7487faa Update status before returning err d2dbce82b9e Merge pull request #130563 from bitoku/automated-cherry-pick-of-#130097-upstream-release-1.32 b245ae997ee Merge pull request #130496 from sreeram-venkitesh/automated-cherry-pick-of-#129946-upstream-release-1.32 d18b6d9d681 Merge pull request #130461 from kariya-mitsuru/automated-cherry-pick-of-#130405-upstream-release-1.32 e6a89a28f38 Merge pull request #130313 from neolit123/automated-cherry-pick-of-#130202-origin-release-1.32 31c7235f4c5 Modify how to check the status 8636d1b4272 Add the feature gate `OrderedNamespaceDeletion` for apiserver. 8516520fffa Merge pull request #130109 from varad-ahirwadkar/automated-cherry-pick-of-#129114-upstream-release-1.32 8207fb465f2 Merge pull request #129690 from pohly/automated-cherry-pick-of-#129661-origin-release-1.32 b0554e32c76 Merge pull request #130505 from aojea/automated-cherry-pick-of-#130484-upstream-release-1.32 2a60692f5b6 conntrack reconciler must check the dst port 642b0eae3dd fix(pod/util): typos in getting pod validation options dbf78217a10 Add Additional Tests 1d3fafa1c7e Fix typo 7826934ada9 Add ControllerRoles Test 019c9b4d2dd Fix Fixture Data 549220b61ec Add Watch to controller roles 0821aa23081 Merge pull request #130165 from mimowo/automated-cherry-pick-of-#130164-upstream-release-1.32 403f0ce511b Merge pull request #130070 from mimowo/automated-cherry-pick-of-#130068-upstream-release-1.32 85ff7928f46 Merge pull request #130356 from aojea/automated-cherry-pick-of-#130348-upstream-release-1.32 53a53b7f62c Merge pull request #130392 from mrIncompetent/automated-cherry-pick-of-#129307-upstream-release-1.32 f0100b2b68e Merge pull request #130136 from AwesomePatrol/automated-cherry-pick-of-#130113-upstream-release-1.32 ea73dad5498 Merge pull request #130332 from richabanker/automated-cherry-pick-of-#129996-upstream-release-1.32 1c07a398470 fix copyright year 849aa0858f3 Generate register files for all examples 6ad91995281 add simpletype pkg in v1 for register-gen test 5fa72a8c1db Add codegen::register to hack/update-codegen.sh c05e46c1630 Add missing imports in register-gen 4c2a0b85f89 Revert "Add random interval to nodeStatusReport interval every time after an actual node status change" 99eedea5cca Remove the feature-gate check before populating serverRunOptions.Flagz a0eb3acf30e test: Add emulated-version flag verification in flagz test 8b3a93b843e fix: flagz endpoint to return parsed flags value 412c353d05b kubeadm: fix panic when no UpgradeConfiguration was found in the config file dce86010a0f Merge pull request #130034 from aroradaman/automated-cherry-pick-of-#130032-upstream-release-1.32 fdf6d464bf0 Merge pull request #130253 from fuweid/1.32-backport-130126 f5fc57e1ee8 proxy: should add PingPeriod for websocket translator 0126bb57a8f Merge pull request #130175 from liggitt/go-tools-132 1f27b75275d Honor KUBE_HACK_TOOLS_GOTOOLCHAIN 00f135bb643 Deflake the PodReplacementPolicyFeatureToggling Job integration test 1ac9e213a8d Limit ResourceQuota LIST requests to times when informer is not synced ac28939fdd6 Update CHANGELOG/CHANGELOG-1.32.md for v1.32.2 67a30c0adcf (tag: v1.32.2) Release commit for Kubernetes v1.32.2 d428c6b8fe6 kubelet: fix DRA registration test 5841717525c Merge pull request #130078 from cpanato/update-go-132 ae0ec29cbf4 Bump images, dependencies and versions to go 1.23.6 and distroless iptables d589f566578 Fix the flaky Job test: TestSuccessPolicy_ReEnabling 393ffc7d26d Merge pull request #129966 from cpanato/update-go-rel132 f0022d37526 bump netlink 80fb77ad8e4 Merge pull request #130015 from aramase/aramase/f/disable_serviceaccountnodeaudiencerestriction_1.32 b53c36d3273 Merge pull request #130010 from tallclair/automated-cherry-pick-of-#129739-upstream-release-1.32 953ac56c211 Disable ServiceAccountNodeAudienceRestriction feature gate by default in v1.32 302fab74111 Kubelet server handler cleanup 33ca8812233 Merge pull request #129928 from mimowo/fix-job-int-test-1.32 fa68823677f Bump images, dependencies and versions to go 1.23.5 and distroless iptables 45b2f1c2008 Fix the remaining flaky integration tests in Job controller 9d0179ee11d WIP: fix the flaky Job integration tests faf35b4eac9 Merge pull request #129862 from neolit123/automated-cherry-pick-of-#129859-origin-release-1.32 5cc748f3242 kubeadm: use the v1beta4 EtcdAPICall timeout for etcd calls dac2e30a730 Merge pull request #129627 from gnufied/automated-cherry-pick-of-#129618-upstream-release-1.32 ad81b22354c Merge pull request #129743 from pjsharath28/automated-cherry-pick-of-#128997-upstream-release-1.32 ce39aed39ed Merge pull request #129740 from bobsongplus/automated-cherry-pick-of-#129629-upstream-release-1.32 4ac02cbbbd9 Merge pull request #129608 from neolit123/automated-cherry-pick-of-#129594-origin-release-1.32 00faa5e7ae9 DRA CEL: skip estimating the cost in the scheduler 5648b9caa81 Merge pull request #129782 from pohly/apidiff-release-1.32 9ade604a07a hack: backport apidiff.sh 11c3bd3038d Fix: touch /dev/null permission denied on macos 643951a9622 Merge pull request #129674 from gohilankit/automated-cherry-pick-of-#129630-upstream-release-1.32 4e43ab095e8 Added check for multipath device mapper f89e4c08cfe DRA CEL: add missing size estimator 051414a53a0 Fix Portworx plugin's CSI translation to copy secret name & namespace 6473e7b6cae Update CHANGELOG/CHANGELOG-1.32.md for v1.32.1 e9c9be4007d (tag: v1.32.1) Release commit for Kubernetes v1.32.1 0bf3f03dda7 We still can't rely on first condition being fs-expansion pending condition 570f5501897 Bump CSI sidecars to fix CI issues and such Signed-off-by: Soumya Sambu Signed-off-by: Bruce Ashfield

podman: fix CVE-2025-6032

2025-07-08T17:44:03+00:00

A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-6032 Upstream-patch: https://github.com/containers/podman/commit/1569c209829530b1f42e8c2fce851de8003ab3fe Signed-off-by: Praveen Kumar Signed-off-by: Bruce Ashfield

kubernetes: rename CNI_NETWORKING_FILES

2025-06-12T14:40:57+00:00

Rename CNI_NETWORKING_FILES to 00_cni-containerd-net.conflist. According to the following k8s doc, k8s networking file will be used when both containerd-cni and kubernetes-cni both installed. "If there are multiple CNI configuration files in the directory, the kubelet uses the configuration file that comes first by name in lexicographic order." This commit can fix following issue: PACKAGE_CLASSES = "package_deb" do_rootfs failed with error: dpkg: error processing archive /path/to/oe-rootfs-repo/corei7-64/./kubernetes-cni_v1.32.0+git0+5fe148234f_release-r0.deb (--unpack): trying to overwrite '/etc/cni/net.d/cni-containerd-net.conflist', which is also in package containerd-cni v2.0.5-r0 Refer [1], "--no-force-overwrite" is set for dpkg, so above error occurred. [1] https://git.openembedded.org/openembedded-core/commit/?id=cb95ba079960411775c57ab864d266e15a6292d1 Signed-off-by: Changqing Li

docker-compose: limit the amount of data copied

2025-04-18T13:56:50+00:00

The AWS dependency includes a VERY large set of directories, which are over 9G in size. To avoid some of this data movement, we suggest shallow clones and update our vendor rsync to exclude directories over 500M. This drastically speeds up the copy and overall build time. More investigation needs to be done, and perhaps a switch away from git clones for this recipe as the data over the network during fetch is still an issue. Signed-off-by: Bruce Ashfield

podman: fix PACKAGECONFIG QA errors

2025-04-09T20:51:03+00:00

bitbake now errors if PACKAGECONFIG is used, but doesn't have entries for the possible values in the variable. podman was using PACKAGECONFIG as a local feature variable in one case (docker) and in the other, was later adding a RDEPEND that could have been done via the packageconfig directly (rootless). The docker issue is fixed by creating a PODMAN_FEATURES variable and testing on it, and the rootless one is fixed by using PACKAGECONFIG to add the rdepends Signed-off-by: Bruce Ashfield

docker-distribution: fix assignment operation whitespace

2025-04-04T14:54:03+00:00

The scripted assignement operator cleanup incorrectly caught BUILDTAGS, which breaks our build. Signed-off-by: Bruce Ashfield

cri-tools: fix assignment operation whitespace

2025-04-03T17:56:53+00:00

The scripted assignement operator cleanup incorrectly caught BUILDTAGS, which breaks our build. Signed-off-by: Bruce Ashfield

criu: update to v4.1

2025-04-03T17:56:53+00:00

Along with the new commits we adjust the following: - refreshed patches - pytoml fixes for crit plugin - debug prefix map for cuda Bumping criu to version v4.1, which comprises the following commits: b6059ff19 criu: Version 4.1 (CRISC-V) bc1415317 criu: fix log_keep_err signal deadlock 0f6470944 namespace: skip cleaning up the uid/gid map in error cases 6826ac58c ci: run tests on a nftables only system 700a8c4b5 ci: do not run tests requiring iptables if it is missing f22330ff0 test: print out logs if tests fail 29ccb5b62 test: others/rpc do not use nftables locking backend 95729ec32 docs: mark make commands with same format as elsewhere 2cd9d5ded docs: update INSTALL.md with a section about building CRIU 867c77303 make: allow setting the default network locking backend 720bf67e0 zdtm/vdso02: unmap vvar_vclock mappings 62a4a5874 vdso: correct data types for ELF hash table sizes b8553d19e test/zdtm: check that PAC keys are C/R-ed 8ae5db37b arm64: C/R PAC keys c5d46d86a restorer: Add a lock around cgroupd communication. 7748b3fe7 pstree: print clone flags in error message d85550157 vdso: Fixes in DT_GNU_HASH handling ed6374b48 lsm: use the user provided lsm label d35808f5e ci: update to latest actions for codeql CI job c298b51a6 scripts/uninstall_module: import signal module 38b9807cd coredump: enable coredump generation on arm da90b33a4 coredump: enable coredump generation on aarch64 030fa4aff criu: fix internal representation of cgroups hierarchical structure b7fa7d304 kerndat: run iptables with -n to not resolve service names 528c94c48 ci: install gawk for Fedora based tests d66bc3499 Makefile: move codespell options to .codespellrc 8a06ca27c vdso: switch from DT_HASH to DT_GNU_HASH (aarch64) 6710cfce1 zdtm/netns_sub_sysctl: add ipv4/ping_group_range sysctl check 4ca74b9af net/sysctl: c/r ipv4/ping_group_range value 9c40781c2 net/sysctl: put common multiplier outside the brackets d226bd4f6 ci: handle results from latest codespell e2dffcbc8 lib: do not set protobuf has_* field too early 82b03429b cuda: disable CUDA plugin for pre-dump 7f0d107fe seize: use separate checkpoint_devices function 02056bf41 cuda: prevent task lockup on timeout error f83931542 net: remember the name of the lock chain (nftables) 54795f174 criu: use libuuid for criu_run_id generation 815ef6884 ci: two check-commits.yml changes 061f4266e test/zdtm: add a new test to check non-periodic timers 09dc2e958 timer: Refine itimer_armed logic and improve timer value handling aad66a4f7 test: fix cmdlinenv00 on aarch64 2b7492480 files-reg: fix buffer overflow on aarch64 6fdac5081 seize: Adjust the position of the log message 97398068b net: redirect nftables stdout and stderr to CRIU's log file 6dce80c53 util: added cleanup_file attribute. 260c08418 zdtm: Check CapAmb is restored correctly after C/R 6f8efad30 cr: Task CapAmb support 94b9b3c5d freeze_processes: implement kludges for cgroup v1 82f4ecda6 freeze_processes: fix logic 99e1fbd8a criu/seize.c: clang-format it a8754905c test: run scm06 in the ns and uns flavors 15c81c126 test/java: increate the ghost file limit dc6cef0b4 cuda: Fix return value from CHECKPOINT_DEVICES hook so that dump's fail properly 8ee2eba47 vdso: handle vvar_vclock vma-s ed560a349 pidfd: add missing include 40b7f04b7 compel/arch/riscv64: properly implement compel_task_size() 399d7bdcb compel: fix gitignore and remove autogenerated code 21e5f4cfd test: add get-state to mocked cuda-checkpoint tool 28c2cb3fd cuda: enable checkpoint support for paused tasks 498bcf280 zdtm: Check many processes with common dead pidfd 7125bfc69 pidfd: one process creates a helper and opens all fds to it b1cac7a8e cuda: fix check for GPU device availability 36a53fe23 ci: test interrupt-only mode with frozen cgroup 4196268ee seize: enable support for frozen containers ff9dbef90 seize: fix error handling for check_freezer_cgroup 622b43392 criu: Initialize util before service worker starts 9052ef93c uffd: Disable image deduplication after fork 2be958d22 include: don't use GCC's __builtin_ffs on riscv64 da6b1807e ci: add workflow for riscv64 bb29067de zdtm: add riscv64 support 6d970ed04 criu: add riscv64 support to parasite and restorer 1d028ef44 images: add riscv64 core image 95359a62a compel: add riscv64 support d8f93e7ba include: add common header files for riscv64 c49eb18f9 pidfd: block SIGCHLD during tmp process creation 5ca440069 zdtm: add inventory test plugins 5335b35f7 images/inventory: add field for enabled plugins b524dab32 pycriu: fix lint errors 88aa7e2c1 make/lint: use 'ruff check ' f29e655df zdtm: Check pidfd for thread is valid after C/R 7a64004dc zdtm: Check fd from pidfd_getfd is C/Red correctly 2e6f34845 zdtm: Check dead pidfd is restored correctly 3f30ec0ed zdtm: Check pidfd can kill descendant processes 2899d4600 zdtm: Check pidfd can send signal after C/R 3096df9ea zdtm: Check pidfd fdinfo entry is consistent 1ce408ffa criu: Support C/R of pidfds 3322d1e94 images: Add protobuf definition for pidfd 4f8f6f288 Makefile.config: set CR_PLUGIN_DEFAULT variable f1d465448 amdgpu: remove exec permissions on source files c2b48ff42 criu: Version 4.0 (CRIUDA) a8cbe76d4 util: dump fsfd log messages 096c1f7a4 plugins/amdgpu - Increase maximum parameter length 60ee5ebd9 plugins/amdgpu: Zero ib_info on initialization 691899889 plugin/cuda: disable CUDA plugin if /dev/nvidiactl isn't present e1331a4b6 fault: allow to check dont_use_freeze_cgroup 651df375b criu: Allow disabling freeze cgroups 59f49c627 codespell: fix typos edb6fbb82 scripts/uninstall_module: fix package discovery b1b3c14b1 cuda: unlock on timeout error dbfa45024 ci: run aarch64 tests native via actuated 8beac656f coredump: fail on unsupported architectures early d44fc0de5 test: only run macvlan tests if macvlan devices can be created 01c65732b test: better test for SELinux tools 615ccf98c crit: do not crash on aarch64 doing 'crit x ./ rss' 21ea718f9 plugins/amdgpu: fix printf format specifiers 3e2ed1879 plugins/amdgpu: use C99-standard types d68205e91 ci: enable cross compile testing for amdgpu-plugin 2ee584441 plugins/amdgpu: fix cross-compilation 9a19cf34d scripts/ci: run tests with the mocked cuda-checkpoint tool de31abb97 criu/plugin: don't call plugin device hooks for non-alive tasks dea630591 test/zdtm: allow to run tests with the mocked cuda-checkpoint tool 67fe44e98 support user set remote mmap vma address 551cd9244 timer: fix printf specifiers for __suseconds64_t a045c874c ci: run tests with amdgpu and cuda plugins 2453ed69a zdtm: add option to run tests with criu plugins ad66c27a1 cuda: fix launch cuda-checkpoint fde0b7ac6 cuda: don't leak fds to cuda-checkpoint 4dde52a30 ci/podman: show mounts 9a85fb638 ci/podman: show criu logs in case of error 8437663cc delete redundant include header files c42b58f4f plugin: enable multiple plugins for the same hook 85050be66 seize: fix pause-devices plugin hook 21108b40d test/zdtm: mount a new tmpfs to the zdtm root /dev fcbadfbdb plugins: set executable bit on .so files 5783706d5 docs: update amdgpu-plugin man page 089345f77 Adjust to glibc __rseq_size semantic change b9081ca56 zdtm: make cgroup testcases run non-parallel 4f45572fd util: use close_range when it's supported 42b177da6 scripts/build: drop centos 7 targets 181583819 vdso: proxify the __vdso_clock_gettime64 function ac22aaf57 apparmor: get_suspend_policy must return NULL in error cases 71999d888 cgroupd: unblock SIGTERM to make stop_cgroupd actually work daed6c353 irmap: duplicate string in irmap_scan_path_add b169e3b63 plugins/cuda: fix crosscompilation ca971b7f8 compel: fix build on Amazon Linux 2 due to missing PTRACE_ARCH_PRCTL bf417dd05 criu/plugin: Add NVIDIA CUDA plugin 5f486d5ae criu/plugin: Introduce new plugin hooks PAUSE_DEVICES and CHECKPOINT_DEVICES to be used during pstree collection 1012e542e criu: Restore rseq_cs state slightly earlier in the restore sequence and run the plugin finalizer later in the dump sequence 7ac453706 readme: update link to FAQ page 4f15fe8c5 make: improve check for externally managed Python fdf546dbd ci: upgrade to Fedora 40 Vagrant images (38 is EOL) f17164926 test/dump-crash: check code path when dump crashes a252a240c zdtm: Distinguish between fail and crash of dump 6feb57a84 ci: remove CentOS Stream 8 test (EOL) 1da29f27f zdtm: add support for LD_PRELOAD tests e7276cf63 pagemap-cache: handle short reads cc88b1e1f net: Fix TOCTOU race condition in unix_conf_op 457bc6a8f criu: use proper format-specified to accommodate time_t 64-bit change 95f66d13d criu: move sigact dump/restore code into sigact.c 9c8a6927a ci: update check for SELinux b3c3422cd test/make: remove unused target 30aa8dbe4 mount: fix unbounded write 708f872a6 sk-tcp: Add test cases for TCP_CORK and TCP_NODELAY socket options 9ba9aff77 sk-tcp: Move TCP socket options from SkOptsEntry to TcpOptsEntry 1cb75c0b1 sk-tcp: Move TCP socket options from TcpStreamEntry to TcpOptsEntry 13854a988 criu: fix a fatal failure if nft doesn't work df178c7e5 sk-tcp: cleanup dump_tcp_conn_state error handling 4607b5356 mem: optimize debug logging of enqueued pages f4290868b ci/vdso01: fix typo e68a06cfd ci: update actions/checkout to v4 5aaf45021 ci: update base OS to ubuntu 22.04 1c2a3d7fa check: verify ino and dev of overlayfs files in /proc/pid/maps e07ffa04b Makefile.config: fix/improve feature warnings. af4058871 timer: fix wrapping allignment in function declaration 0fc83a79b ci: silence CircleCI warning about deprecated image 52623cca1 criu: move timers dump/restore code into separate file 231ba0cd2 zdtm/sched_policy00: use reset-on-fork flag 75fed59ef Add support for reset-on-fork scheduling flag 8f0e200e6 mem: fix some VMAs being incorrectly mapped wtih PROT_WRITE a2b018a18 ci: try to fix broken docker test a48aa33ea restorer: shstk: implement shadow stack restore 7dd583002 restore: add infrastructure to enable shadow stack f47899c9e criu: kerndat: add kdat_has_shstk() 2ebd1a4f0 criu: shstk: prepare shadow stack parameters for restorer blob 4b6dda7ec criu: shstk: premap and prepopulate shadow stack VMAs 17eda3ce5 criu: shstk: add VMA_AREA_SHSTK flag 0aba3dcfa compel: shstk: prepare shadow stack signal frame 63a45e1c8 compel: infect: prepare parasite_service() for addition of CET support 6e491a19a compel: shstk: save CET state when CPU supports it 17f4dd095 compel: always pass user_fpregs_struct_t to compel_get_task_regs() 0b8c51eaa compiler: add ALIGN_DOWN macro f590c2b63 zdtm/static: check that cgroup layout of threads is preserved a0a6ec3dc cgroup: Add support for restoring a thread in a correct v1 cgroup 835afb1b8 criu-ns: fix lint error e0b74f558 make: replace flake8 with ruff 7fd4a15e6 pb2dict: fix flake8 error e0f91e66e kerndat: check support for PAGE_IS_SOFT_DIRTY a808f09be amdgpu_plugin: fix lint errors bd17bd43e sk-inet: fix codding style in restore_ip_opts 895a16c13 zdtm: Added tests for IP_TTL restore 71102e7f7 sk-inet: Added IP_TTL socket option 0d5923c95 amdgpu_plugin: Refactor code used to implement Checkpoint 733ef9631 amdgpu_plugin: Refactor code in preparation to support C&R for DRM devices b689a6710 plugin/amdgpu: Also don't print 'plugin failed' in criu 59599dacd plugin/amdgpu: Don't print error for "No such process" during resume 92e8f9293 net: return bool with iptable_has_criu_jump_target a62f82730 criu-log: remove unused declaration d2511707f zdtm: socket-tcp-nft-nfconntrack: add a hook to the chain in nft case afc0efcf7 pagemap-cache: add an ability to run tests without PAGEMAP_SCAN cb64d73ad page-cache: use the PAGEMAP_SCAN ioctl when it is available 20628bc8a kerndat: check the PAGEMAP_SCAN ioctl 842289c7e net: add error messages for restore of nftables d94251df7 test/nfconntrack: use nft or iptables-legacy 0ab2f9e97 net: fix network unlock with iptables-nft d9c427d70 irmap: hardcode some more interesting paths b419f3dfd make: fix compilation on alpine 7b689b7a4 gitignore: remove historical left-over files 2d1f4ec71 ci: disable non-root in user namespace test in container fe8f5130c ci: fix centos-stream 9 ci errors 6679d60ff ci: do not use 'tail' for skip-file-rwx-check test f86f1b849 tty: skip ioctl(TIOCSLCKTRMIOS) if possible 8a51639e3 Makefile: Use common warnings settings for loongarch64 37d62fa47 docker-test: downgrade docker to v24.0.7 1004625fa docker-test: fix condition for max tries 088390ea8 ci: switch to permissive selinux mode during test 900909d95 test: check for btrfs in the current directory fc94b2d15 ci: fix rawhide netlink error 9f9737c80 comple: correct the syscall number of bind on ARM64 f8b14286b criu: Version 3.19 (Bronze Peacock) Signed-off-by: Bruce Ashfield

metadata: relocation.inc: add whitespace around assignments

2025-04-03T17:56:53+00:00

With: https://lists.openembedded.org/g/bitbake-devel/message/17508 there are many WARNINGs from this layer Signed-off-by: Martin Jansa Signed-off-by: Bruce Ashfield