| Commit message (Collapse) | Author | Age | Files | Lines |
|---|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Add includable configuration fragments that replace manual
DISTRO_FEATURES, CONTAINER_PROFILE, and related settings in
local.conf. Fragments are organized as a base + composable deltas:
- meta-virt-host.conf: base for all virtualization work
(virtualization, systemd, seccomp, vmsep, vcontainer, BBMULTICONFIG)
- container-host-{docker,podman,containerd,k3s,k3s-node}.conf:
container engine profiles setting CONTAINER_PROFILE and
profile-specific DISTRO_FEATURES
- xen-host.conf: Xen hypervisor support (xen, vxn distro features,
xen-image-minimal packages)
- meta-virt-dev.conf: QEMU development settings (IMAGE_FSTYPES,
QB_MEM, debug image features)
- container-registry.conf: local dev registry defaults
(insecure localhost:5000)
Profiles are pure deltas and do not auto-include the base to avoid
BitBake duplicate inclusion warnings. Users include meta-virt-host.conf
first, then add profile fragments. The BUILD_PROFILE variable enables
single-line profile switching.
Usage in local.conf:
require conf/distro/include/meta-virt-host.conf
BUILD_PROFILE ?= "podman"
require conf/distro/include/container-host-${BUILD_PROFILE}.conf
Tested with podman, docker, and xen builds.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
`CVE_PRODUCT` has been set to `linuxfoundation:containerd` to align
with the product naming defined in the NVD CPE database for
`containerd`.
Only a single CPE entry exists in the NVD for this product:
`cpe:2.3:a:linuxfoundation:containerd`
The NVD references for this CPE confirm that it corresponds to the
source code used in our recipe.
Signed-off-by: Himanshu Jadon <hjadon@cisco.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
I see a failure in netcf:
| ./bootstrap: .gnulib/gnulib-tool --import --no-changelog --aux-dir build-aux --doc-base doc --lib libgnu --m4-base gnulib/m4/ --source-base gnulib/lib/ --tests-base gnulib/tests --local-dir gl --lgpl=2 --with-tests --makefile-name=gnulib.mk --libtool --import ...
| python3: can't open file '/home/flk/bitbake-builds/poky/build/tmp/work/corei7-64-oe-linux/netcf/0.2.8+git/sources/netcf-0.2.8+git/.gnulib/.gnulib-tool.py': [Errno 2] No such file or directory
| ./bootstrap: gnulib-tool failed
Since the code hasn't been updated in over seven years, and after reading this discussion, perhaps the best solution would be to disable netcf support by default?
https://lists.libvirt.org/archives/list/devel@lists.libvirt.org/message/755CCFUFUW6OTN7CAHB77H7YXQNE5WGG/
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
| |
For ceph, libvirt and openvswitch, 9 CVEs were marked as "unpatched"
whereas they have been patched long ago compared to the versions of
the recipes, because the NVD database does not contain patched version
for those CVEs.
Reviewed-by: Enguerrand de Ribaucourt <enguerrand.de-ribaucourt@savoirfairelinux.com>
Reviewed-by: Erwann Roussy <erwann.roussy@savoirfairelinux.com>
Signed-off-by: Youenn Le Jeune <youenn.lejeune@savoirfairelinux.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
| |
RUNC_VERSION was still set to 1.3.0 from a previous update but the
recipe is now tracking the release-1.5 branch at v1.5.0-rc.1+4.
Update to match the actual upstream version.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Update yq from 4.45.1 to 4.52.5 and convert from manual vendoring
(20+ individual git SRC_URI entries) to the go-mod-vcs discovery
system using pure hybrid mode (all gomod://).
This makes future updates trivial via:
bitbake yq -c discover_and_generate
Shortlog of notable changes since 4.45.1:
- Add support for YAML 1.1 octal numbers
- Add --header-preprocess flag
- Add bitwise operators (band, bor, bxor, bnot, bsl, bsr)
- Add shuffle operator for arrays
- Add rotate operator for arrays
- Add limit operator
- Add from_props/to_props for Java properties format
- Add from_csv/to_csv improvements
- Add --csv-separator flag
- Improve JSON output formatting
- Improve error messages for invalid expressions
- Fix various edge cases in YAML/JSON/XML/TOML conversions
- Fix memory leaks in large document processing
- Performance improvements for large files
- Updated Go module dependencies
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
When a recipe uses only gomod:// fetches with no VCS (git://) modules,
GO_MODULE_CACHE_DATA is an empty list. Previously do_create_module_cache
would run with nothing to process and do_sync_go_files would fatal with
"No modules found in cache".
Detect the empty module list and return early with an informational
message in both tasks, allowing pure hybrid recipes (like yq) to
build without workarounds.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Update LXCFS from 5.0.4 to 6.0.6 (LTS branch). Existing patches
apply with offset.
Key changes across the 5.0 to 6.0 series:
6.0.x LTS (2024-2029):
- Switch to fuse3 as default (fuse2 still supported)
- Reworked cgroup2 support with improved delegation
- Improved /proc/cpuinfo virtualization for cgroup2
- Improved /proc/meminfo virtualization accuracy
- Improved /proc/stat CPU time virtualization
- Improved /proc/loadavg virtualization
- Improved /proc/uptime per-container tracking
- Improved /sys/devices/system/cpu virtualization
- Better handling of cgroup v1/v2 hybrid setups
- meson build system improvements
- Various memory leak and race condition fixes
- Multiple security hardening improvements
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
Shortlog of changes since 1.4.0:
- Implement 'up --no-recreate'
- Add support to set --route of podman network create
- Implement environment variable interpolation to YAML dictionary keys
- Properly surface errors from 'push' command
- Hide stack trace shown on YAML parse error by default
- Migrate to PEP 621 project metadata
- Migrate to SPDX identifier for the license
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Update SeaBIOS from 1.16.0 to 1.17.0.
Refresh python3.patch for shifted context.
Shortlog of changes since 1.16.0:
- ahci: Fix hangs due to controller reset
- ahci: add controller reset
- ahci: Power ON + ICC_ACTIVE into port setup code
- Add LBA 64bit support for reads beyond 2TB
- detect physical address space size
- move 64bit pci window to end of address space
- limit address space used for pci devices
- pciinit: don't misalign large BARs
- update pci_pad_mem64 handling
- fix smbios blob length overflow
- check for e820 conflict
- usb-hid: Support multiple USB HID devices via linked list
- boot: Force display of boot menu when boot-menu-wait is negative
- esp-scsi: indicate acceptance of MESSAGE IN phase data
- esp-scsi: terminate DMA transfer when ESP data transfer completes
- vbe: implement function 09h (get/set palette data)
- vbe: Add VBE 2.0+ OemData field
- vgabios: Fix generating modes list for static_functionality
- Various stdvga/vgasrc naming and interface cleanups
- kconfig: fix check-lxdialog.sh to work with gcc 14+
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Update all active Go library recipes to their latest releases:
- go-md2man: 1.0.10 → 2.0.7 (update GO_IMPORT for v2 module path)
- go-cli: 1.1.0 → 2.27.7 (moved to github.com/urfave/cli/v2)
- go-connections: 0.2.1 → 0.6.0
- go-dbus: 4.0.0 → 5.2.2 (update GO_IMPORT for v5 module path)
- go-distribution: 2.6.0 → 3.0.0 (repo moved to distribution/distribution)
- go-fsnotify: 1.5.1 → 1.9.0
- go-logrus: 0.11.0 → 1.9.4
- go-mux: unversioned → 1.8.1
- go-patricia: 2.2.6 → 2.3.3
- go-systemd: 4 → 22.7.0 (update GO_IMPORT for v22 module path)
- grpc-go: 1.59.0 → 1.79.3
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Remove Go library recipes for projects that are archived, deprecated,
or otherwise dead upstream:
- go-capability: No releases ever published, community moved to
github.com/moby/sys/capability
- go-context: Superseded by Go stdlib context.Context (since Go 1.7)
- go-libtrust: Archived on GitHub, no releases ever published
- go-metalinter: Archived and deprecated since 2019, replaced by
golangci-lint
- go-pty: Archived since 2020, moved to github.com/creack/pty
None of these are referenced as build dependencies by any recipe in
meta-virtualization. External consumers should migrate to the
upstream-recommended replacements.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping slirp4netns to version v1.3.3-6-g6be0d53, which comprises the following commits:
b02e000 Revert "CI: temporarily disable release check for PRs"
b0c346d CI: temporarily disable release check for PRs
3d01dce v1.3.3+dev
944fa94 v1.3.3
0422b01 CI: bump up deps
019cd5a bump libslirp to v4.9.1
bf1c767 CI: Enable actions/attest-build-provenance@v2
4523924 v1.3.2+dev
0f13345 v1.3.2
ead6f78 CI: update deps
e859823 bump libslirp to v4.9.0
d1a900b v1.3.1+dev
e5e368c v1.3.1
036c206 CI: bump libslirp to v4.8.0
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping passt to version 2026_01_20.386b5f5-48-gbc872d9, which comprises the following commits:
bc872d9 treewide: Spell ASSERT() as assert()
451fb76 vu_common: Move iovec management into vu_collect()
f5391ae vu_handle_tx: Pass actual remaining out_sg capacity to vu_queue_pop()
b9d076d virtio: Pass iovec arrays as separate parameters to vu_queue_pop()
47e56fd pif: Remove unused PIF_NAMELEN
b5e6ef4 doc: Fix formatting of (DEPRECATED) notes in man page
744d6df Makefile: Use $^ to avoid duplication in static checker rules
1b32bfe conf: Parse all forwarding options at the same time
ea239bf conf: Don't defer handling of --dns option
ee0e20e fwd: Always open /proc/net{tcp,tcp6,udp,udp6} in pasta mode
d460ca3 fwd: Unify TCP and UDP forwarding tables
bb2e4dd fwd: Split forwarding table from port scanning state
d30e0b7 Fix misnamed field in struct ctx comments
4fa0076 fwd: Don't initialise unused port bitmaps
d2438ef tcp: Remove stale description of port_to_tap field
0294fae conf, fwd: Make overall forwarding mode local to conf path
831e983 netlink: Allow NULL to be passed as addr parameter to nl_addr_get (again)
251e676 netlink: Return prefix length for IPv6 addresses in nl_addr_get()
045560c iov: Add iov_truncate() helper and use it in vu handlers
994bb76 tcp: Avoid comparison of expressions with different signedness in RTT_SET()
ab77097 tcp: Avoid comparison of expressions with different signedness in tcp_timer_handler()
5766fe8 migrate: Rename v1 address functions to v2 for clarity
71a0d6c vu_common: Always set num_buffers in virtio-net header
685864d clang-tidy: Don't insist on #ifdef over #if defined()
9ee7805 fwd, pif: Replace with pif_sock_l4() with pif_listen()
7d0fe08 tcp: Use flow_foreach_of_type() in tcp_{keepalive,inactivity}
adbf5c1 Add missing includes to headers
d2f7c21 tcp: Send TCP keepalive segments after a period of tap-side inactivity
a681e44 tcp: Extend tcp_send_flag() to send TCP keepalive segments
1820103 tcp: Re-introduce inactivity timeouts based on a clock algorithm
e48ce41 tcp: Remove non-working activity timeout mechanism
eb3babf tcp_vu, udp_vu: Fix comment headers for header length functions
66e5941 Fix build when HAS_GETRANDOM is undefined
8636c73 tcp_vu, udp_vu: Account for virtio net header in minimum frame size
de5b694 tcp_vu: vu_pad() expects l2 length
c320191 conf: Support CIDR notation for -a/--address option
02af38d virtio: Introduce VNET_HLEN macro for virtio net header length
812cdb8 tcp: Move tap header update out of tcp_fill_headers()
bebafa7 udp: Split activity timeouts for UDP flows
036fb87 checksum: add VSX fast path for POWER8/POWER9
af7b81b migrate: Use forward table information to close() listening sockets
768baf4 tcp, tcp_splice: Check for failures of shutdown(2)
3581ded tcp: Eliminate FIN_TIMEOUT
e992b14 tcp: Retransmit FINs like data segments
e3f70c0 tcp_splice: Force TCP RST on abnormal close conditions
cce94e9 tcp: Properly propagate tap-side RST to socket side
07390d1 doc: Add test program verifying socket RST behaviour
69ce8ee tcp: Add error checking for flow_epoll_set() in tcp_flow_migrate_target()
386b5f5 flow: Remove EPOLLFD_ID_INVALID
90287c2 tcp: Register fds with epoll at flow creation
0fbd7af tcp_splice: Register fds with epoll at flow creation
cee7eb0 conf, pasta: Add --splice-only option
4a0d507 flow, fwd: Optimise forwarding rule lookup using epoll ref when possible
fe37028 fwd, tcp, udp: Add forwarding rule to listening socket epoll references
01bcdb9 fwd: Remap ports based directly on forwarding rule
f56a822 flow, fwd: Consult rules table when forwarding a new flow from socket
a0af19f fwd: Generate auto-forward exclusions from socket fd tables
03a9c4b conf, fwd: Check forwarding table for conflicting rules
acb7a30 tcp, udp: Remove old auto-forwarding socket arrays
b223bec fwd, tcp, udp: Set up listening sockets based on forward table
0c611bc ip: Add ipproto_name() function
da49557 fwd: Make space to store listening sockets in forward table
e2633b9 conf, fwd: Record "auto" port forwards in forwarding table
9323ab9 conf: Accurately record ifname and address for outbound forwards
bd52f61 conf, fwd: Keep a table of our port forwarding configuration
016e3d7 inany: Extend inany_ntop() to treat NULL as a fully unspecified address
81c97f6 hooks/pre-push: Use mandoc(1) to get HTML anchors to command-line options
a6d92ca selinux: Enable open permissions on netns directory, operations on container_var_run_t
4296a59 igmp: Remove apparently unneeded suppression
fa765d5 epoll_ctl: Move u64 variant first for safer initialisation
4af3d83 treewide: Fix more pointers which can be const
a54274d tcp, udp: Make {tcp,udp}_listen() return socket fds
d5fd945 tcp, udp, conf: Don't silently ignore listens on unsupported IP versions
c0be730 flow: Introduce flow_epoll_set() to centralize epoll operations
23da651 tcp_splice: Refactor tcp_splice_conn_epoll_events() to per-side computation
e0fdfcc udp_flow: Assign socket to flow inside udp_flow_sock()
ab27852 udp_flow: remove unneeded epoll_ref indirection
cce0470 tcp: cleanup timer creation
5614bdc tcp: remove timer update in tcp_epoll_ctl()
faab79c apparmor: Upgrade ABI version to 4.0, explicitly enable user namespace creation
2be0e79 tcp: Fix rounding issue in check for approximating window to zero
b973f4a treewide: Fix places where we incorrectly indented with spaces
b98a2e8 tcp: Remove some no longer used includes
35f63d2 fwd: Minor cleanup to fwd_nat_from_splice()
facc736 fwd: Remove now-unnecessary handling of unspecified oaddr from splice
edac476 udp_vu: Discard datagrams when RX virtqueue is not usable
9ea9dde fwd, tcp, udp: Consolidate epoll refs for listening sockets
3b55ba8 epoll_ctl: Add missing description for flowside field of epoll_ref
ad5670a tcp: Remove unused tcp_epoll_ref
9437fc2 test: Include sshd-auth in mbuto guest image
ac77d0c test: Handle Operating System Command escapes in terminal output
accc331 treewide: Don't rely on terminator records in ip[46].dns arrays
4a0c1a6 migrate: Don't use terminator element for versions[] array
0bd2e68 util: Be more defensive about buffer overruns in read_file()
2aa6323 apparmor: Allow reading TCP RTO sysctl parameters
2ba9fd5 tcp: Update EPOLL_TYPE_TCP_TIMER fd
6292845 udp: Rename udp_sock_init() to udp_listen() with small cleanups
0f4ba61 tcp: Combine tcp_sock_init_one() and tcp_sock_init() into tcp_listen()
75dcbc3 pasta: Warn, disable matching IP version if not supported, in local mode
d2c5133 selinux: Enable read and watch permissions on netns directory as well
b40f5cd tcp: Use less-than-MSS window on no queued data, or no data sent recently
35fa86a conf, fwd: Move initialisation of auto port scanning out of conf()
5be1a22 tcp: Remove extra space from TCP_INFO debug messages (trivial)
87f1a91 pasta: Clean up waiting pasta child on failures
e6612fe treewide: Introduce passt_exit() helper
d6c5b6e tcp: Suppress new instance of cppcheck bug 14191
d04c480 pif: Correctly set scope_id for guest-side link local addresses
696709d tcp: Correct timer expiry value in trace message
c3f1ba7 tcp_splice, flow: Add socket to epoll set before connect(), drop assert
e8b56a3 fedora: Fix build on Fedora 43, selinux_requires_min not available on Copr builders
c93515c tcp: Skip redundant ACK on partial sendmsg() failure
e0f1330 tcp: Send a duplicate ACK also on complete sendmsg() failure
2b5c906 tcp: Allow exceeding the available sending buffer size in window advertisements
cf1925f tcp: Don't limit window to less-than-MSS values, use zero instead
9139e60 tcp: Acknowledge everything if it looks like bulk traffic, not interactive
28f413d tcp: Don't clear ACK_TO_TAP_DUE if we're advertising a zero-sized window
000601b tcp: Adaptive interval based on RTT for socket-side acknowledgement checks
920a479 tcp: Limit advertised window to available, not total sending buffer size
f423e12 tcp: Change usage factor of sending buffer in tcp_get_sndbuf() to 75%
6305b6c tcp, util: Add function for scaling to linearly interpolated factor, use it
5d83844 iov: Fix coding style of basic (non-IOV_TAIL) parts
0cb8f90 tcp, udp: Pad batched frames for vhost-user modes to 60 bytes (802.3 minimum)
68b0a36 tcp, udp: Pad batched frames to 60 bytes (802.3 minimum) in non-vhost-user modes
b9cd36f udp: Fix coding style for comment to enum udp_iov_idx
e3e8af7 tcp: Fix coding style for comment to enum tcp_iov_parts
1e51971 tap: Pad non-batched frames to 802.3 minimum (60 bytes) if needed
822ce09 test: Update Makefile to avoid failing on missing images
4ddd59b conf: Separate local mode for each IP version, don't enable disabled IP version
834982c vu_common: Clarify prototype of vu_collect()
7c7be67 test: Expand tmux right status bar to fit pass/fail/skipped counter and time
aa809d3 tcp: Enable SO_KEEPALIVE if we see keep-alive segments from container / guest
9e2e381 seccomp: Fix build and operation on 32-bit musl targets
fdbb4ef fwd: Preserve non-standard loopback address when splice forwarding
e3c4c41 tcp: Always populate oaddr field for socket initiated flows
cec1ca8 util: Rename sock_l4_dualstack() to sock_l4_dualstack_any()
653705c tcp, udp: Bind outbound listening sockets by interface instead of address
e77cbf0 tcp, udp: Remove fallback if creating dual stack socket fails
e6f6eb2 util: Fix setting of IPV6_V6ONLY socket option
74e6f12 udp: Move udp_sock_init() special case to its caller
c8d4683 udp: Unify some more inbound/outbound parts of udp_sock_init()
860d3b1 tcp: Merge tcp_ns_sock_init[46]() into tcp_sock_init_one()
3b8b834 util, flow, pif: Simplify sock_l4_sa() interface
b0523f6 inany: Let length of sockaddr_inany be implicit from the family
484dcfa flow: Remove bogus @path field from flowside_sock_args
f37db87 conf: More useful errors for kernels without SO_BINDTODEVICE
0ae7b8c util: Extend sock_probe_mem() to sock_probe_features()
10e850a util: Correct error message on SO_BINDTODEVICE failure
1a83487 tcp: Clamp the retry timeout
3dde0e0 tcp: Update data retransmission timeout
0e8df13 tcp: Resend SYN for inbound connections
ffecfaf util: Introduce read_file() and read_file_integer() function
785214c tcp: Rename "retrans" to "retries"
2002c7d arp/ndp: don't send messages on uninitialized tap interface
391c15a test: Fix IPv6 address/prefix mismatch error
95ab87b spec: use %selinux_requires_min macro, drop overlapping dependencies
be1583f fwd: Don't explicitly exclude reverse-direction TCP ports for UDP
fd3fc8d fwd: Exclude ports based on prior mapping state
bdbdf4e Revert "fwd: Update all port maps before applying exclusions"
2c6590d udp: Use IP_FREEBIND for flow sockets as well as listening sockets
75b8bb9 tcp: Properly remove sockets from epoll loop when connection is closed
a36031a seccomp.sh: Quote tr character ranges to prevent glob expansion
1d16439 contrib/selinux: use regex instead of SELinux template
f6b6118 tcp, udp: Don't exclude ports in {tcp,udp}_port_rebind()
81942a2 fwd: Update all port maps before applying exclusions
942bfdb fwd: Check forwarding mode in fwd_scan_ports_*() rather than caller
06c3dcc fwd: Share port scanning logic between init and timer cases
1754f61 fwd: Move port exclusion handling from procfs_scan_listen() to callers
1bc7d54 fwd: Consolidate scans (not rebinds) in fwd.c
260075b tcp, udp, fwd: Run all port scanning from a single timer
1f2c08b icmp: Remove vestiges of ICMP timer
57446ca passt: Move main event loop processing into passt_worker()
aaa8f34 udp: Use epoll instance management for UDP flows
ca93124 icmp: Use epoll instance management for ICMP flows
dd5302d tcp, flow: Replace per-connection in_epoll flag with an epollid in flow_common
05972c7 util: Move epoll registration out of sock_l4_sa()
965ea66 epoll_ctl: Extract epoll operations
8bfa47a util: Simplify epoll_del() interface to take epollfd directly
3a9dbe0 icmp: let icmp use mac address from flowside structure
ad72098 tap: change signature of function tap_push_l2h()
860a487 tcp: forward external source MAC address through tap interface
627d5f7 udp: forward external source MAC address through tap interface
5d35ac3 flow: add MAC address of LAN local remote hosts to flow
7917155 arp/ndp: send ARP announcement / unsolicited NA when neigbour entry added
e456c02 arp/ndp: respond with true MAC address of LAN local remote hosts
45869d6 fwd: Add cache table for ARP/NDP contents
3c46901 netlink: add subscription on changes in NDP/ARP table
3b9c7f8 Add reverse Christmas tree to CONTRIBUTING.md
7bb150c fwd: Fix misspelling
b2ccb6d test: Fix the escaping issue in memory/passt test
812a7c6 test: Update the threshold value for some perf tests
4fb4c31 tap: Update some function comments for accuracy
8a6def6 passt: Rename EPOLL_EVENTS to NUM_EPOLL_EVENTS
720cc0b Fix the wrong command in CONTRIBUTING.md
6d84c90 test: For missing static checkers, skip rather than failing tests
5149f34 test: Add some missing quoting in exeter runner
898cf50 test: Use ${} consistently in lib/exeter
5da0316 isolation: keep CAP_DAC_OVERRIDE initially
518d8c1 tcp: Clarify logic calculating how much guest data to ack
a947839 tcp: On partial send (incomplete sendmsg()), request a retransmission right away
b145441 tcp: Don't consider FIN flags with mismatching sequence
8efa80b tcp: Completely ignore data segment in CLOSE-WAIT state, log a message
b3217aa tcp: Fix ACK sequence on FIN to tap
2a16cdf test: Add linting of Python test scripts
81fd66a test: Don't delete exetool on make clean
2274c3a cppcheck: Suppress variable scope warnings in dhcpv6()
ee9b236 cppcheck: Suppress a buggy cppcheck warning
065d199 cppcheck: Suppress the suppression of a suppression
b4b3b08 clang-tidy: Suppress redundant expression warning
4d9c35b test: Update passt.mbuto and passt.mem.mbuto
a96a962 netlink: Don't require address to be global, just not link local
7086781 test: Fix printf error when debug is enabled
c54ef9e test: Update README.md
f4729be test: Update mbuto profile to fix the symlink of /bin
de28c20 test: Update lib/term for clearer output when DEBUG is enabled
f07d7b0 test: fix 'make assets' failure as root
e81c692 tap: Drop frames if no client connected
623dbf6 Add --stats option to display event statistics
ad4aae7 netlink: Drop nexthop state flags from routes we duplicate
080f176 Add CONTRIBUTING.md
c66be2c selinux: add missing file contexts for Podman
fd1bcc3 selinux: add container_var_run_t type transition
6f23cb9 dhcp: Fix coding style violations in dhcp() function
1f22fde Improve clarity of comment
e2920e3 Send an initial ARP and NDP request to resolve the guest IP address
142b3d8 Fix --no-icmp description and make it imply --no-ndp
07cb07d Introduce constant MAC_BROADCAST
fc0affc Show debug message whenever we observe a new guest MAC address
6cbcccc tcp: Store the owner connections for flags frames
cd2e886 Reduce tcp_buf_discard size
8d2f8c4 tcp: Don't send FIN segment to guest yet if we have pending unacknowledged data
bde1847 tcp: Fast re-transmit if half-closed, make TAP_FIN_RCVD path consistent
660cd69 tcp: Cast operands of sequence comparison macros to uint32_t before using them
25f9354 tcp: Don't try to transmit right after the peer shrank the window to zero
c62fb08 tcp: Fix closing logic for half-closed connections
e86d480 tcp: Rewind sequence when guest shrinks window to zero
1d502be tcp: Factor sequence rewind for retransmissions into a new function
2e3d93b tcp: FIN flags have to be retransmitted as well
d363fb7 test: Fix the download link for debian-11-generic-ppc64el image
c10d8c9 tcp_vu: Pass virtqueue pointer to tcp_vu_sock_recv()
ed18d4c udp_vu: Pass virtqueue pointer to udp_vu_sock_recv()
6239915 vhost-user: Fix VHOST_USER_GET_QUEUE_NUM to return number of queues
f9ee749 Add missing explicit PSH assignment
83afb88 Fix typo in doc comment
00e3580 test: Explicit specify forwarding ports for pasta in log rotation tests
3c44ef8 test: Allow exeter & podman tests to be parallel executed with BATS
ffe34d2 test: Convert build tests to exeter
a58e60e test: Run static checkers as exeter tests
a283ef4 test: Extend test scripts to allow running exeter tests.
ca38be0 packet: Add support for multi-vector packets
3e43e1a packet: Refactor vhost-user memory region handling
1602aa2 packet: remove unused parameter from PACKET_POOL_DECL()
7ae35a9 packet: remove PACKET_POOL() and PACKET_POOL_P()
2eb845a ndp: use iov_tail rather than pool
76de6f5 icmp: use iov_tail rather than pool
42a108b dhcpv6: use iov_tail rather than pool
3a261fd dhcp: use iov_tail rather than pool
c977d1f arp: use iov_tail rather than pool
7e25351 packet: rename packet_data() to packet_get()
9505908 tap: Convert tap6_handler() to iov_tail
a26c608 tap: Convert tap4_handler() to iov_tail
20cd6d0 ip: Use iov_tail in ipv6_l4hdr()
84a4d3e dhcp: Convert to iov_tail
feb3330 dhcpv6: Use iov_tail in dhcpv6_opt()
c4cad31 dhcpv6: Convert to iov_tail
54f15c6 dhcpv6: Extract sending of NotOnLink status
1932832 dhcpv6: move offset initialization out of dhcpv6_opt()
d2c33f4 tcp: Convert tcp_data_from_tap() to use iov_tail
87cc7ab tcp: Convert tcp_tap_handler() to use iov_tail
d9604f0 udp: Convert to iov_tail
e45bf13 icmp: Convert to iov_tail
f8860bb ndp: Convert to iov_tail
1fc944c arp: Convert to iov_tail
6bada9a packet: Add packet_data()
de469a3 packet: Use iov_tail with packet_add()
720d8fc tap: Use iov_tail with tap_add_packet()
70b9c0c iov: Update IOV_REMOVE_HEADER() and IOV_PEEK_HEADER()
066e6b1 iov: Introduce iov_tail_clone() and iov_drop_header().
ea3dd28 arp: Don't mix incoming and outgoing buffers
eef5bb8 build: Fix errors of TCP_REPAIR_* undeclared
b4fc6cd treewide: Flush pcap and log files, if used, before exiting
309eefd selinux: pasta accesses /etc/resolv.conf
a878286 treewide: By default, don't quit source after migration, keep sockets open
79de81e test: Deal with /bin, /sbin unification in Fedora
3757ea3 style: Add parentheses to function names in comments
9e0423e style: Fix 'Return' comment style
0293c6f fedora: Hide restorecon(8) errors in post-transaction scriptlet
98da8a9 fedora: Add container-selinux as dependency for passt-selinux
754c6d7 flow, repair: Proper error handling for missing passt-repair helper on target
a2088fe fedora: Depend on SELinux tools and policy version, drop circular dependency
d21bcd9 fedora: Call %selinux_modules_* macros only once
081df67 conf: flush stdout before early exit
bcb5596 passt-repair: Fix missing newlines in error messages
2c88349 Correct various function comment headers
515b5ee tap: Avoid bogus missingReturn cppcheck warning in tap_l2_max_len()
e019323 fedora: Separately restore context for /run/user in %posttrans selinux
7aeda16 selinux: Transition to pasta_t in containers
3262c9b iov: Standardize function comment headers
b915375 virtio: Correct and align comment headers
2fd0944 vhost_user: Correct and align function comment headers
2046976 codespell: Correct typos in comments and error message
4234ace test: Display count of skipped tests in status and summary
2d3d69c flow: Fix clang error (clang-analyzer-security.PointerSub)
0f7bf10 ndp: Fix Clang analyzer warning (clang-analyzer-security.PointerSub)
a6b9832 virtio: Fix Clang warning (bugprone-sizeof-expression, cert-arr39-c)
570e7b4 dhcpv6: fix GCC error (unterminated-string-initialization)
8ec1341 flow: close socket fd on error
92d5d68 flow: fix wrong macro name in comments
eea8a76 flow: fix podman issue #26073
587980c udp: Actually discard datagrams we can't forward
f0021f9 fwd: fix doc typo
93394f4 selinux: Add getattr to class udp_socket
11be695 flow: fix podman issue #25959
6a96cd9 util: Fix typo, ASSSERTION -> ASSERTION
ea0a124 passt-repair: Hide bogus gcc warning from -Og
aa1cc89 conf: allow --fd 0
436afc3 udp: Translate offender addresses for ICMP messages
08e617e udp: Rework offender address handling in udp_sock_recverr()
4668e91 treewide: Improve robustness against sockaddrs of unexpected family
9128f6e fwd: Split out helpers for port-independent NAT
2340bbf udp: Propagate errors on listening and brand new sockets
cfc0ee1 udp: Minor re-organisation of udp_sock_recverr()
f107a86 udp: Add udp_pktinfo() helper
0498457 udp: Deal with errors as we go in udp_sock_fwd()
3f99558 udp: Pass socket & flow information direction to error handling functions
1bb8145 udp: Be quieter about errors on UDP receive
baf049f udp: Fix breakage of UDP error handling by PKTINFO support
5024908 conf: Honour --dns-forward for local resolver even with --no-map-gw
bbff365 conf: Split add_dns_resolv() into separate IPv4 and IPv6 versions
59cc89f udp, udp_flow: Track our specific address on socket interfaces
695c623 inany: Improve ASSERT message for bad socket family
f4b0dd8 udp: Use PKTINFO cmsgs to get destination address for received datagrams
6693fa1 tcp_splice: Don't clobber errno before checking for EAGAIN
d3f33f3 tcp_splice: Don't double count bytes read on EINTR
ffbef85 conf: Add missing return in conf_nat(), fix --map-guest-addr none
06ef64c udp_flow: Save 8 bytes in struct udp_flow on 64-bit architectures
9725e79 udp_flow: Don't discard packets that arrive between bind() and connect()
9eb5406 udp: Fold udp_splice_prepare and udp_splice_send into udp_sock_to_sock
bd6a41e udp: Rework udp_listen_sock_data() into udp_sock_fwd()
159beef udp_flow: Take pif and port as explicit parameters to udp_flow_from_sock()
fd844a9 udp: Move UDP_MAX_FRAMES to udp.c
fc6ee68 udp: Merge vhost-user and "buf" listening socket paths
0304dd9 udp: Split spliced forwarding path from udp_buf_reply_sock_data()
5221e17 udp: Parameterize number of datagrams handled by udp_*_reply_sock_data()
3a0881d udp: Don't bother to batch datagrams from "listening" socket
84ab130 udp: Polish udp_vu_sock_info() and remove from vu specific code
1d7bbb1 udp: Make udp_sock_recv() take max number of frames as a parameter
d74b5a7 udp: Use connect()ed sockets for initiating side
a7775e9 udp: support traceroute in direction tap-socket
06784d7 passt-repair: Ensure that read buffer is NULL-terminated
684870a udp: Correct some seccomp filter annotations
76e554d udp: Simplify updates to UDP flow timestamp
8aa2d90 udp: Remove redundant udp_at_sidx() call in udp_tap_handler()
3d41e4d passt-repair: Correct off-by-one error verifying name
dec3d73 migrate, tcp: bind() migrated sockets in repair mode
6bfc60b platform requirements: Add test for address conflicts with TCP_REPAIR
8e32881 platform requirements: Add attributes to die() function
2ed2d59 platform requirements: Fix clang-tidy warning
3de5af6 udp: Improve name of UDP related ICMP sending functions
025a3c2 udp: Don't attempt to forward ICMP socket errors to other sockets
42a854a pasta, passt-repair: Support multiple events per read() in inotify handlers
65cca54 udp: correct source address for ICMP messages
664c588 build: normalize arm targets
77883fb udp: Add helper function for creating connected UDP socket
37d78c9 udp: Always hash socket facing flowsides
f67c488 udp: Better handling of failure to forward from reply socket
269cf6a udp: Share more logic between vu and non-vu reply socket paths
d924b7d udp_vu: Factor things out of udp_vu_reply_sock_data() loop
5a977c2 udp: Simplify checking of epoll event bits
89b203b udp: Common invocation of udp_sock_errs() for vhost-user and "buf" paths
cf4d3f0 packet: Upgrade severity of most packet errors
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
We refresh patches for context changes, and pick up the following
commits:
0d4c78e15 github: Update all the actions to prepare for Node.js 24.
c052c469b dpctl: Fix memory leak in ipf-get-status command.
f86caea06 netdev-dpdk: Fix vhost_driver_flags data race in destruct.
71dae047d coverage: Fix data race when reading idx_count in coverage_read().
b5f36a6d6 packets: Validate ND option length in packet_set_nd().
920eb244e ovs-router: Fix locking in ovs_router_rule_add().
dd4d9983a ovs-router: Fix --disable-system-route rules filter.
cd7b495e2 tests: Make routing rules checks more resilient.
a51e47506 github: Fix potential 32-bit package installations.
a7cd823a1 python: Fix discarded const qualifier in json_to_python.
00b013a64 ovsdb: raft: Don't grant a pre-vote to a server that is behind.
95473a95e ovsdb-cluster.at: Test disruptive server with outdated log and term.
f559623f9 netdev-linux: Fix IFLA_IF_NETNSID value.
0a88fdec2 Revert "python: Replace deprecated License with License-Expression (PEP 639).".
028e6268c Prepare for 3.7.1.
bdb95cc19 Set release date for 3.7.0.
c1eef6db4 ovs-router: Don't report internal route priority in json output.
8c6ebf895 bond: Fix next_rebalance offset calculation.
f43bde3d5 rhel: Avoid warning about missing .la with Fedora spec.
37e41460e rhel: Remove kernel mentions from the Fedora spec.
a47cf0e6b rhel: Don't ship network scripts on RHEL 9+ and Fedora 41+.
88f327493 rhel: Don't build network scripts package on RHEL 9+ with Fedora spec.
1d57509ef treewide: Fix discarded-qualifers warnings.
431efcdfc ovsdb-server: Fix relay remotes string check.
6d682ae53 dpif-offload: Move port manager into struct dpif_offload.
d56120f43 ofproto-dpif-xlate: Avoid mirroring on recirculation.
1d6a51917 cirrus: Use FreeBSD release images instead of stable snapshots.
97b3a3507 automake: Don't install the libopenvswitchavx512.
fcf733472 dpif-netdev: Fix per-datapath initialization using once framework.
52e740da7 dpif: Always call dpif_offload_set_config().
dbfe60a32 fedora: Fix package install on Fedora 43.
0062d99d4 ipsec: libreswan: Consider active only when child SA is established.
122e79a49 ipsec: libreswan: Silence warning about overriding auto=route in v5.3.
f3d704541 ipsec: libreswan: Fix warning for obsolete keyingtries in v5.
59c56bcf6 system-ipsec.at: Use natural sorting for SA list.
75ba627dc dpif-offload: Take a reference when dumping a collection.
a56bfa103 rconn: Fix fd leak when close monitor.
b672ea19d dpif-offload: Move provider priority to interface level.
e7d7d33f4 ovs-router: Fix JSON type for user in rules/show.
b63ec0e35 dpdk: Avoid maybe uninitialized for found_value variable.
5057e33f9 dpif-offload: Rename offload provider local functions and structures.
bcec20c86 Prepare for 3.7.0.
e03eac274 ovs-router: Fix potential integer overflow.
708c83f20 ovs-router: Fix JSON object leak in ovs/router/rule/show command.
3200111ba ofproto-dpif: Limit recirc_id to 28 bits for TC compatibility.
a9b1b6b5b netdev-offload-tc: Make sure tcf_id chain doesn't exceed upper limit.
39006533f openflow: Increase number of registers to 32.
9604659d4 tests: Fix QoS tests for tc rounding behavior change.
e6cce559c AUTHORS: Add Felix Moebius.
adc588f96 ovsdb: raft: Reset connections with incorrect cluster/server ids.
67e21fdb1 odp-util: Fixes for the set(nsh) action commit.
b21ba0834 tunnels: Don't unwildcard tunnel fields on write.
63469676d Documentation: Document Assisted-by tag.
68f7a6200 python: dns: Do not treat never accessed responses as expired.
289e9f6ba tests: Add a simple DPDK rte_flow test framework.
90b6e83be tests: Fix NSH decap header test for real Ethernet devices.
b8f6e3eee netdev-offload: Fold netdev-offload APIs and files into dpif-offload.
ca7bcdc70 dpif-offload-dummy: Add flow add/del/get APIs.
7bd1867b6 dpif-offload-dpdk: Abstract rte_flow implementation from dpif-netdev.
476123c12 dpif-offload: Move offload_stats_get() API to dpif-offload.
7f0e09ebf dpif_netdev: Fix nullable memcpy in queue_netdev_flow_put().
c443e63c1 dpif-offload: Add inline flow APIs for userspace datapaths.
ce8027140 netdev-offload: Remove the global netdev-offload API.
35b91ea98 dpif-offload: Move the netdev_any_oor() API to dpif-offload.
3792d6310 netdev_dummy: Remove hardware offload override.
fd3f56d1f dpif-offload-tc: Remove netdev-offload dependency.
e1cabfaff dpif-netlink: Remove entangled hardware offload.
98b20d8b1 dpif-offload: Add flow operations to dpif-offload-tc.
84997680f dpif: Add dpif_get_features() API.
5362e83ba dpif-netdev: Remove indirect DPDK netdev offload API calls.
fec8b4d30 dpif-offload: Add port dump APIs to dpif-offload.
9a4dd063b netdev-offload: Temporarily move thread-related APIs to dpif-netdev.
030b9dc97 dpif-offload: Add operate implementation to dpif-offload.
b6ce8be52 dpif-offload: Add API to find offload implementation type.
fba024678 dpif-netlink: Add API to get offloaded netdev from port_id.
9d61b5277 dpif-netlink: Remove netlink-offload integration.
5746e83cf dpif-offload: Move the tc flow dump netdev APIs to dpif-offload.
c766f57d4 dpif-offload: Add flow dump APIs to dpif-offload.
efdd5bf37 dpif-offload: Move hw_post_process netdev API to dpif.
8bf2658c8 dpif-offload: Move the flow_get_n_flows() netdev-offload API to dpif.
389954013 dpif-offload: Call meter netdev-offload APIs via dpif-offload.
d1d989b05 dpif-offload: Call flow-flush netdev-offload APIs via dpif-offload.
08d8a6692 dpif-offload: Introduce provider debug information API.
5c9b96ed5 dpif-offload: Allow per-port offload provider priority config.
134455376 dpif-offload: Validate mandatory port class callbacks on registration.
a23b2f421 dpif-offload-dpdk: Add port management framework.
2180857f3 dpif-offload-tc: Add port management framework.
dd69c0bca dpif-offload: Add port registration and management APIs.
bd6543466 dpif-offload: Add offload provider set_config API.
dc9724b8f dpif-offload: Move hw-offload configuration to dpif-offload.
a13db17b8 dpif-offload: Allow configuration of offload provider priority.
d9cc25e51 dpif-offload: Add provider for dpdk (rte_flow).
df26a15a4 dpif-offload: Add provider for tc offload.
7eb9ffac5 dpif-offload-provider: Add dpif-offload-provider implementation.
7c2a1c865 AUTHORS: Add yaolingfei.
a2d5d84d6 bridge: Enhancement of the validation for controller parameters.
733083653 python: Replace deprecated License with License-Expression (PEP 639).
c14bfc4b3 ovs-router: Add test for lookup with rules.
e2a241560 ovs-router: Introduce ovs/route/rule/{add, del} commands.
18de57d26 ovs-router: Add 'src=src_ip' parameter in ovs/route/lookup.
160e0dca7 ovs-router: Add 'table=id' parameter in ovs/route/{add, del}.
664494694 ovs-router: Add system test for tables and rules.
5c30756a3 ovs-router: Introduce ovs/route/rule/show command.
5a6a2ebb8 ovs-router: Drop 'local' and add 'user' flag to ovs_router_entry.
884567668 ovs-router: Add 'table=id' parameter in ovs/route/show.
e1c267c38 doc: Fix font formatting in ofproto-tnl-unixctl.man.
dc14e92bc route-table: Introduce multi-table route lookup.
d4798b5e7 ovs-router: Add infrastructure for multi-table routing.
ed0f34a17 dp-packet-gso: Fix segment count helpers sign.
b5e6e609c packets: Rework outer checksum helper for Coverity.
921628ff7 NEWS: Deprecate support for AVX512-optimized features.
c34c21bb0 ovsdb: raft: Actually suppress the disruptive server.
f77513b47 netdev-afxdp: Fix impossible typo.
f06d64b84 extract_ofp_fields: Check the OXM extension field range.
4e44e51d1 tunnel: Avoid matching on df and csum flags.
d0f074dec netdev: Use HW segmentation without outer UDP checksum.
ef762327f dp-packet-gso: Refactor software segmentation code.
d88363024 dp-packet: Optimize outer checksum for nested checksums.
9d9f17af8 dp-packet: Strip tunnel info when unneeded.
f8cd315bd dp-packet-gso: Request UDP checksum when needed.
9943a5977 dpif-netdev: Enhance checksum coverage for tunnels.
9d28a3245 dpif-netdev.at: Add helpers for checksum tests.
8813cc6c0 dpif-netdev.at: Rename checksum offloads tests.
4c83fae88 netdev-dpdk: Fix TSO packet length check for tunnels.
63c08daa9 netdev-dpdk: Enforce mono-segment mbufs.
970d9eb94 netdev-dpdk: Fix rx queue fill level with QoS.
40120c91e classifier: Remove leftover bits of classifier partitioning.
5f12cd410 ovsdb: raft: Discard pre-vote replies during the actual election.
167a16a1a netdev-afxdp: Require kernel v5.4+ and need-wakeup.
875d26158 ofproto-dpif-xlate: Log clarification for dp_hash method.
5ee7057fa dpdk: Update to use v25.11.
6a21414f2 NEWS: Deprecate running user-space with OOT Kernel module.
6b5f3d0b8 dpif-netlink-rtnl: Tighten probe for OOT Kernel tunnels.
4727452c2 NEWS: Deprecate Windows support.
5be77f1ec ovsdb-idl: Fix returning non-existent rows from uuid lookup.
fc406ea5d ovsdb: transaction: Fix logging order of duplicate index rows.
0b29edb5c dns-resolve: Do not treat never accessed responses as expired.
5debc2272 AUTHORS: Add MJ Ponsonby.
7f33eed25 dpif: Maintain upcall_pid, mtu and hash.
3fe7c5d32 dpif-netlink: Fix probing for broken meters on Linux v5.10+.
b4c158d97 dpif-netlink: Fix potential leak of a malformed meters netlink reply.
5148ef286 windows: Fix absolute-header.m4 for newer msys2 appearing as cygwin.
5fdcc4518 netdev: Remove legacy duplex API.
d44849b7a netdev: Fix full duplex capability for 25G ports.
ce0eec8f0 netdev-bsd: Cache features and speed.
3edde97a2 netdev-linux: Fix compatibility with older kernels.
12eb60759 netdev: Fix reported rate for Linux and BSD ports.
de6e3ade7 ipf: Work around thread safety warnings with clang 21.
3fa11d1b0 ipf: Fix potential deadlock with the clean thread on exit.
5d0c98d1c dpif-netlink: Fix memory leak when re-add vport channel.
28ec95972 configure: Disable clang 21 warning for uninitialized const fields.
77203b455 thread: Convert init/destroy lock functions to use non-const arguments.
7fb1f600a treewide: Fix clang 21 thread-safety warnings for init/create/destroy.
fb5871eb2 treewide: Remove OVS_GUARDED from RCU-based structure fields.
9bfe33e12 ssl: Support for SNI extension in clients for ssl/tls.
367ddc098 stream-ssl: Fix missing OPT_SSL_CIPHERSUITES in STREAM_SSL_CASES.
ad0d646a3 odp-execute: Fix null pointer dereference on null nlattr.
1577bfe40 netdev-vport: Free error string from str_to_u8() in tunnel config.
9434a69e0 github: Add a job to build on ubuntu-14.04.
efb2c5581 test-psample: Fix missing field initializer warnings on older GCC.
67e5e1998 test-netlink-policy: Fix missing field initializer warnings on older GCC.
367d59960 test-lib-route-table: Add missing RTPROT_BGP definition.
f83d2e4d5 netlink: Fix build on kernels < 4.1 due to missing RTA_VIA.
7fb51c4fd m4: Don't add -mno-avx512f if compiler doesn't support it.
42d99eb38 ovsdb-idl: Add a way to assert IDL txn as read only.
2e28fe3a5 offload-dpdk: Don't use 24bit value as 32bit.
56db5a267 compiler: Avoid 'returns_nonnull' attribute warnings on older GCC.
396ed84b7 treewide: Fix unused result warnings in NDEBUG builds.
1231108f6 ofproto-dpif.at: Wait for logs in select group tests.
0f8202e60 dpif-netdev: Optimize rwlock in port query API.
719c616a2 AUTHORS: Add Ivan Burnin.
c8d2017e2 checkpatch: Set explicit encoding in do_authors_exist.
8ddc9416d AUTHORS: Add Ihar Hrachyshka.
d2622ad07 tests: Remove unnecessary revalidator/wait's.
49d0be1d3 tests: Revalidate on flow change in tunnel-push-pop.
c9e43f319 tests: Ignore no tunnel port error on vswitch stop.
4f68c1ca2 tests: Don't fail when test path contains 'p2' string.
3b17f003c tests: Gracefully handle EADDRINUSE string from musl.
735967610 tests: Handle duration= with no fractional part.
9bd249369 dpdk: Use DPDK 24.11.3 release.
57d62cfd4 AUTHORS: Add Aleksandr Smirnov.
79db89c4b id_pool: Prevent requested ID range overflows uint32.
af403a464 Documentation: Add section about AI assistants.
2c4596732 appveyor: More robust OpenSSL installation wrt path changes.
ca8d92b9c appveyor: Temporarily move to previous image to unblock CI.
cd2ff530d dpdk: Convert dpdk-lcore-mask to DPDK lcore args.
7bf5a8b83 dpdk: Clean up dpdk option map.
f028ba719 vswitch.xml: Update docs for dpdk-lcore-mask.
310fe3224 netdev-dpdk: Remove workarounds for fixed checksum bugs.
0efebaf86 odp-execute: Fix packet length check for TSO packets.
99cac28f7 netdev-dpdk: Fix IP checksum with net/virtio.
c3e16065b netdev-native-tnl: Fix DF bit not being extracted into tunnel flags.
4fe10a771 MAINTAINERS: Move Russell to emeritus status.
9a2169a3f bond: Do not flag a revalidation when adjusting time.
1a8e0153b cirrus: Only update the main FreeBSD repository.
609526ca2 ovsdb: transaction: Silence dereference after null check warning.
7d691c6ea ovsdb: raft: Silence dereference after null check warning.
faca0cc47 ovsdb: relay: Silence dereference before null check warning.
3a5ea5f28 ovsdb: trigger: Silence dereference after null check warning.
1856bfa4d ovsdb: monitor: Silence dereference after null check warning.
fe90fb3ce ofproto: Fix missing lock when reading oftable->vacancy_up/down.
5deb96425 netdev-offload-dpdk: Fix memory leak for matching fragments.
df3703410 AUTHORS: Add Linda Wang.
b1e295d46 netdev-offload-dpdk: Fix vport hw-offload stat.
e0ee785b1 tests: system-traffic: Fix flaky floating IP test.
6e83dafc4 conntrack: Add support for IPv4 EPRT and EPSV.
8c8d16964 AUTHORS: Add Eli Oliver.
d2f1ca089 checkpatch: Add simple python comment spell checking.
e141dc9ae Set release date for 3.6.0.
3ffb1c401 ipf: Complete l4 checksum before frag out.
00dcc546a Documentation: Use @development-tools on dnf5.
270de5dfb ofproto: Move group-modify to mod_start instead of mod_finish.
f8d457ea2 Prepare for post-3.6.0 (3.6.90).
4a2c90ad8 Prepare for 3.6.0.
eeb7d7d99 checkpatch: Separate out the built-in spelling words.
b5f898cc3 AUTHORS: Add Alexandra Rukomoinikova.
6f2ca3fb2 db-ctl-base: Added filter option in show command.
943f9096e ovs-vsctl: Exit with error if postdb checks report errors.
0add983b3 ovsdb: Use table indexes if available for ovsdb_query().
5c4d60671 dpif: Fix infinite netlink loop in dpif_execute_helper_cb.
50e1e57f8 utilities:gdb: Add GDB function to dump Netlink attributes.
6d4044899 docs: Specify retis dependency on USDT probes.
0d9dc8e9c dpif-netlink: Provide original upcall pid in 'execute' commands.
0d5eece55 mcast-snooping: Properly check MLD packet length.
22732c0e6 tests: Add support for running system tests under retis.
049197282 seq: Fix deadlock with the time_init.
1210864a6 netdev-dpdk: Remove unused macro for TSO offloads.
3d2f64e5d ovsdb-idl: Add new functions to check the column type on the server.
f5819e699 json: Store short arrays in-place.
1de4a08c2 json: Use functions to access json arrays.
9669b50f5 json: Store short strings in-place.
6c48b29f5 json: Always use the json_string() method to access the strings.
41a4a3723 sparse/socket.h: Add AF_BRIDGE definition.
83af8ee6f tests: ipsec: Adjust status checks for upcoming Libreswan 5.3.
83de251fa ipsec: libreswan: Remove old certs before importing new ones.
80d723736 cirrus: Update to FreeBSD 14.3 and 13.5.
609060370 netdev-dpdk: Remove limit on maximum descriptors count.
edecb7404 python: idl: Don't notify the application on _Server database updates.
ab062d3cb netdev-dpdk: Adjust IPv4 checksum capability for vhost-user.
dd443c1a7 netdev-dpdk: Stop relying on vhost-user Tx flags.
b8032fac2 dp-packet: Remove direct access to DPDK offloads.
cf7b86db1 dp-packet: Rework TCP segmentation.
e36793e11 dp-packet: Resolve unknown checksums.
2956a6126 dp-packet: Rework L4 checksum offloads.
3daf04a4c dp-packet: Rework IP checksum offloads.
67abd5154 dp-packet: Rework tunnel offloads.
e2200485c dp-packet: Expand offloads preparation helper.
d29ba0abd dp-packet: Add OVS offloading API.
19ef1b1f0 dp-packet: Remove DPDK specific IP version.
52fdeda11 dp-packet: Remove Linux specific L4 offloads.
a86ae3c86 python: Add uuid/convert references to uuid for Row.__str__.
8ee7ecb8a db-ctl-base: Allow retrieving rows of type OVSDB_TYPE_UUID.
8a1a0ea7c AUTHORS: Add Changliang Wu.
aea473429 lldp: Fix out of bound write in chassisid_to_string.
614029aac conntrack: Allow inner NAT of related fragments.
ca9e67c80 daemon-unix: Handle potential negative values from sysconf().
99af7f379 ovsdb: Fix Coverity leak warning by marking code as unreachable.
2c634482f raft: Fix resource leak from ignored ovsdb_log_write_and_free() error.
b90304bfe ovsdb-server: Fix potential memory leak in parse_options().
d1bd62dae ofproto-dpif-upcall: Check odp_tun_key_from_attr() return value.
88737f02e ofproto-dpif-xlate: Fix memory leak in xlate_generic_encap_action().
8fca3f99c lldp: Fix Coverity warning about resource leak in lldp test.
d28382947 sparse: Define new AVX10 includes added in GCC >= 15.
0e419d1b4 sparse: Add workaround for OpenSSL configuration.
8224cd47f tests: tunnel-push-pop: Fix occasional failure of the drop test.
e99ce7d5d flow: Fix checksum offloads with simple match.
48ce3a5a5 dpdk: Use DPDK 24.11.2 release.
b42f9fde4 netdev-dpdk: Fix possible memory leak in vhost stats.
7e3a0b496 AUTHORS: Add Yang Yang.
60a219300 perf-counter: Enable exclude_guest by default.
2df25f970 util: Remove include of itself.
37848e218 util: Ignore return code from str_to_uint().
e180c431b tests: classifier: Add a stress test for prefixes reconfiguration.
6a61a70fc classifier: Fix race for prefix tree configuration.
9234b9b40 tests: classifier: Fix the rule number check during trie verification.
f7711efc9 ovs-router: Fix potential resource leak in JSON output.
5603b869a netdev-linux: Fix offloads for IPv6 UDP packets.
c852a8c76 netdev-native-tnl: Do not validate already checked checksum.
71f3dd3e9 conntrack: Fix embedded checksums in ICMP errors.
4b00509ea conntrack: Do not validate already checked checksum.
8a7f1292d ipf: Consider checksum only for fragmented packets.
585c8088e dpif-netdev: Enhance checksum coverage.
d49994634 flow: Fix bad IP checksum flag.
261f02ba3 ovs-ctl: Allow to set custom core file size for ovs daemons.
d000ff1cd ovs-router: Add JSON output for 'ovs/route/show' command.
6fc522174 ipsec: libreswan: Fix premature reconciliation of just added tunnels.
1b2eff486 github: Add a permanent workaround for malformed /etc/hosts.
28064e9fa AUTHORS: Add Dmitry Porokh.
421c94ee1 ovsdb: Introduce and use specialized uuid print functions.
94500f9bb tests: Run IPv6 ct fragmentation tests in different zones.
8aa649c7b NEWS: Note that OOT kernel module documentation has been removed.
6bd931716 docs: issues: Update for removal of OOT kernel module.
ef6cfc0a0 docs: configuration: Don't document OOT kernel module wrt connecting bridges.
aea939b24 docs: faucet: Remove references to OOT kernel module.
89e8c1249 docs: general: Remove references to kernel module.
68d742e84 debian: Remove documentation of OOT kernel module.
2b9aca477 docs: debian: Remove references to installing kernel module.
e03ccbce6 docs: backporting-patches: Remove documentation of OOT kernel module.
e0c07a8a7 docs: release: Remove documentation of OOT kernel module.
1015b13f0 ofproto-dpif-xlate: Add a drop action for native tunnel failure.
a53d67bf9 python: idl: Clear rows without losing indexes.
f1f214e5c ipsec: libreswan: Fix detection of loaded IPv6 connections.
e017142d1 python: Add example usage section to README.
79be51b9c python: Populate README with minimal context.
816f30b06 python: Add 'long_description' to 'setup.py'.
3e63999f9 python: Don't leave file handles open.
8fffcfcf6 AUTHORS: Add Martin Morgenstern.
8c9e7631c jsonrpc: Maximize receive buffer size.
ca8c27b7c jsonrpc: Add coverage for incomplete receives.
4443433d2 uuid: Fix a warning about zero byte truncation in the template.
fe53b478f dpdk: Fix main lcore on systems with many cores.
20fd9d480 AUTHORS: Add Vasyl Saienko.
96ee23a21 ovs-vtep: Fix vlan binding.
484208bd1 ipf: Maintain packet zone and direction.
056a37d6d ipf: Don't send expired frags.
effb2bb28 Documentation: Use mail-archive.com URLs for openflow-discuss ML links.
88ee8ae05 Documentation: Update links to DPDK documentation.
1e577cfb2 AUTHORS: Add Jay Ding.
6f33ac632 netdev-dpdk: Fix device info return value check.
ae6b778ab utilities: usdt-scripts: Retry on dp cache miss.
340c574e4 utilities: upcall_monitor: Add extra info to pcap.
c2deabc00 utilities: monitor_upcalls: Print ports from drops.
acd6d21e3 utilities: upcall_monitor: Print port names.
93ccf58a9 utilities: upcall_cost: Refactor port mapping cache.
ca804a7be utilities: upcall_monitor: Allow filtering on result.
c40a7ff9b utilities: upcall_monitor: Monitor dropped upcalls.
441407895 utilities: usdt-scripts: Remove sleep in loop.
9d15da43b ovsdb: raft: Fix cluster break down on leaving with some nodes down.
27315463b ovsdb: raft: Add debug logs for role transition.
cae3ff452 ovsdb: raft: Fix multitasking overrun warning when there is no leader.
1724a293d ofproto: Log bond rebalancing stats once in rebalance run.
ce77927bf ofproto-dpif-xlate: Embed support check in put_drop_action.
50dfd1ce3 AUTHORS: Update email for Ian Stokes.
7f4ee4395 python: Disable check for globals with never reassigned names (F824).
ba675897e ofproto-dpif: Fix spelling in comments and the support field macro.
f141b7c35 checkpatch.py: Don't run subject checks in source-file mode.
6403a49f3 rhel/systemd: Change owner recursively and also on /etc/openvswitch.
f3036be65 utilities: Add long poll statistics to the kernel_delay.py script.
2100a0454 tests: ovsdb-idl: Fix flaky insert and delete tests.
0d21dbc24 python: stream: Fix unlink attempt for ptcp IP address.
0b686a29b ofproto-dpif: Fix dp_hash mapping after select group modification.
3dea4e0fc checkpatch.py: Load multiple codespell dictionaries.
a824a6bb2 ovs-tcpdump: Improve 'mirror-to' option.
2d82a431f tests: Disable rate limiting for tests parsing flow dumps from logs.
15b6c25c8 rtnetlink: Add forward declaration of RTPROT_OVN.
defb8f33f datapath-windows: Fix possible null reference in _MapNlAttrToOvsPktExec
69f0acc9a tests: Fix 'ICMP related with SNAT' test case in offload scenario.
b65f324a7 AUTHORS: Add Dima Chumak.
1898112c8 ofproto: Add JSON output for 'fdb/show' command.
69826ad63 appveyor: Fix python PATH for a new pywin32-309.
0bdca8bf5 tests: system-traffic: Remove unnecessary bash dependency.
472847e69 AUTHORS: Add Frank Wagner.
a68887e1f windows: Fixed MSYS detection in CCCL.
caa2c8c77 github: Get sparse from the official GitHub mirror.
b83d3f51e netdev-offload-dpdk: Clean up vlan_push action function.
008759411 route-table: Rename bridge-related variables/arguments to netdev.
71a9720b7 netdev-offload-tc: Add missing comment from commit 273a4fce951a.
d56a5bacd python: ovsdb-idl: Fix persist_uuid references.
5ee2a3892 python: ovsdb-idl: Handle inserts w/o changes.
7b4d3137a stream-ssl: Remove support for deprecated TLSv1 and TLSv1.1.
19b894162 tunnels: Remove support for deprecated STT and LISP.
410e0f519 ofproto-dpif-xlate: Fix source IP lookup for non-bridge ports.
5292eb50a netdev-offload-tc: Only install recirc flows if the parent is present.
0fb370bdc flow: Explicitly pad tcp_flags for TCP and tp_dst for IGMP.
cb9e21dc3 netdev-offload-dpdk: Support offload of clone push_vlan action.
365c2e504 Set release date for 3.5.0.
fd021c97e tests: Use correct arguments to curl.
ac32bbe2c dpif-netdev: Fix Auto Load Balance debug log.
9f7eb58f7 miniflow_extract: Push ct_tp_{src, dst} for later frags.
c77175824 dpif-netdev: Preserve inner offloads on recirculation.
4baddffd5 ovsdb-server: Do not use filename after free.
b9be72920 netdev-vport: Ignore ipsec_ tunnel option prefix for all tunnels.
ce20ca063 ofproto-dpif-xlate: Fix memory leak in xlate_generic_encap_action().
f7c85a730 ofproto: Fix potential NULL pointer dereference in ofproto_type_xx().
9e784ed6c ofproto: Fix potential null-ptr dereference in meter_insert_rule().
5f6b8faca ofproto-dpif-ipfix: Add NULL check to dpif_ipfix_set_options().
68245b0c4 tests: Fix multiple Coverity warnings in test programs.
de39a5587 ovs-vsctl: Fix missing ovs_scan() return checks.
1936de256 nx-match: Fix potential integer underflow.
f2fac92e3 github: Update fedora image to 41.
35f49a595 documentation: Fix Sphinx program directive.
885e117fd documentation: Fix ovs-flowviz warnings on older Sphinx.
ed133507f fedora: Don't generate network-scripts-openvswitch for ver > 40.
481bc0979 route-table: Allow parsing routes without nexthop.
c5b3ac72d vlog: Add user command to inject log message.
cde106949 sparse: Remove wrappers for some DPDK headers.
f0e6638cf netdev-offload-tc: Fix ignore of dl type mask when installing flows.
8011f9ff9 faq: Update DPDK releases for older branches.
3e100bd93 AUTHORS: Add Markus Linnala.
ec8fe88d7 utilities/bashcomp: Do not run ovs-vsctl when not possible.
2472845c3 general: Use ovs_get_program_version().
ad59bb851 ovs-ctl: Allow to set oom-score for ovs daemons.
ae8dafe6b dpdk: Add ovs-appctl dpdk/get-memzone-stats command.
1594c5086 ofproto-macros.at: Fix hex matching in the strip_recird() macro.
a3c06c309 route-table: Use ofpbuf_use_const() for multipath attributes.
be5b46564 route-table: Fix potential memory leak.
f74777da0 route-table: Avoid potential NULL ptr dereference.
e16db1230 ofp-ct: Add missing struct declaration.
caed64d16 Prepare for post-3.5.0 (3.5.90).
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping cni to version v0.8.0-340-g7c27007, which comprises the following commits:
f1cb561 docs: Fix broken link to "Version considerations" in SPEC.md
77b1001 spec: update number of specifically defined terms
Bumping cni-plugins.git to version v1.1.0-395-g6d8f05b8, which comprises the following commits:
6d8f05b8 Bump go version to 1.26
f9f86fdf fix revive linter
b2f23299 Update go.mod to Go 1.25.
adc3e6b5 bridge: include attempted IP address in AddrAdd error message
4161e445 build(deps): bump golangci/golangci-lint-action from 8 to 9
dada84a9 CVE-2025-52881: Bump selinux to 1.13.0
dfb1f9ac fix(test): use shorter veth peer name
ccc8314d vrf: fix route filtering to preserve IPAM-configured routes
8c4a6b3b bandwidth: handle nil bandwidth in CHECK
9b3772e1 portmap: ensure nftables backend only intercept local traffic
Bumping flannel-cni-plugin.git to version v1.9.0-flannel1-12-g09e4c7f, which comprises the following commits:
09e4c7f Bump google.golang.org/grpc from 1.69.0 to 1.79.3
99c8f33 Bump golang from 1.25.6-alpine3.22 to 1.25.7-alpine3.22
a1f477f Bump github.com/onsi/ginkgo/v2 from 2.27.5 to 2.28.1
9d9dbae Bump github.com/onsi/gomega from 1.39.0 to 1.39.1
122c4fd Bump alpine from 3.23.2 to 3.23.3
f5fdb63 Bump golang from 1.25.5-alpine3.22 to 1.25.6-alpine3.22
e70badd Bump github.com/onsi/ginkgo/v2 from 2.27.3 to 2.27.5
b84eef9 Bump github.com/onsi/gomega from 1.38.3 to 1.39.0
a10ad00 Bump alpine from 3.23.0 to 3.23.2
8b6781f Bump github.com/onsi/ginkgo/v2 from 2.27.2 to 2.27.3
be2d572 Bump github.com/onsi/gomega from 1.38.2 to 1.38.3
0940aaf Bump github.com/containernetworking/plugins from 1.8.0 to 1.9.0
521b4f6 Bump alpine from 3.22.2 to 3.23.0
dfcb1ec Bump golang from 1.25.4-alpine3.22 to 1.25.5-alpine3.22
5d45388 Bump golang from 1.24.9-alpine3.22 to 1.25.4-alpine3.22
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Update from 1.21 to 1.27. Notable changes across versions:
- Add detection for Alibaba Cloud (ARM and x86)
- Add detection for AWS (baremetal, KVM, Xen)
- Add detection for Google Cloud
- Add detection for Nutanix AHV
- Add detection for UpCloud
- Add detection for OCI (Oracle Cloud Infrastructure)
- Add detection for bhyve, VMM (OpenBSD)
- Add detection for illumos lx-branded zones
- Add detection for Xen on ARM
- Add detection for ESX on ARM
- Add detection for Hyper-V on ARM
- Add detection for CRI-O and Podman containers
- Add detection for LDOM (Oracle/Sun)
- Add detection for z/VM (IBM)
- Improved QEMU/KVM detection via SMBIOS
- Support for --root-dir option for offline analysis
- Various bug fixes and test suite improvements
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping virt-viewer to version v11.0-100-ge07dbc9, which comprises the following commits:
e07dbc9 remote-viewer: Simplify oVirt username setting
16dab63 remote-viewer: Update govirt requirement
6557319 ovirt: Remove unused declaration ovirt_foreign_menu_get_gtk_menu
093212d Hide the header bar in full-screen mode.
9f3b839 Don't schedule unreveal timer if not active
6fcd5f4 feat: fix kiosk mode previous toolbar grab mouse cursor
17d8b9f Translated using Weblate (Russian)
bbba3d3 rpm: disable -Werror on Fedora / ELN
c596813 Translated using Weblate (Japanese)
29e7778 Translated using Weblate (Spanish)
a5ce69d Translated using Weblate (Chinese (Traditional) (zh_TW))
cd9b430 Translated using Weblate (Telugu)
f4bc61e Add Ctrl+Alt+Shift+Esc key command for logind's SecureAttentionKey
107f60c data: Add x-scheme-handler/vnc to desktop file
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping virt-manager to version v5.1.0-81-gb2b32ccc7, which comprises the following commits:
b2b32ccc7 tests: properly skip win11 aarch64 test on old osinfo
19f18e9f5 cli: add --boot firmware.enrolled-keys=,firmware.secure-boot=
e5c731787 domain: os: add set_firmware_feature helper
08ec19204 man: virt-install: remove some obscure --boot scearios
3eebb61b7 man: virt-install: change `--boot secure-boot=` docs
09ecf1cfd ci: Install `acl` to get more code coverage
48c9076d5 ci: add `workflow_dispatch` to more workflows
91f506f06 testdriver: add more complete zfs XML
2c87e485e uitests: createvm: add Customize->Add Hardware->TPM case
20d375a04 details: Fix TPM label from `Customize` wizard
23d6f9088 tests: cli: fix aarch64-win11 with latest osinfo-db
d306fb6b2 uitests: Add coverage exclusions
198778dfb uitests: cover NVME disks and controller
98921c4dc uitests: cover USB startup policy
9681c3d43 ui: add USB startup policy mnemonics
b3daef7ef testmock: add --test-options=disable-name-validation
ba532d3ed uitests: relax alert lookup naming
eba62e983 uitests: fix snapshot name validation test
5d7c66378 man: secure-boot: don't mention entrolled-keys
23dd48ae9 cli: add --boot secure-boot option
9ab2918fa virtinst: add support for iommufd
d13271422 virtinst: fix locale when running in flatpak
90e425b59 ui: Show NVMe Controller details
08b547366 virtManager: Add NVMe disk type
97505a9fe virtinst: implement NVMe disk target generation
605b3d807 virtinst: Add NVMe Controller
6f1adcc92 virtinst: Add serial controller option to cli
206e79d50 tests: use Node.path when available
711275b92 tests: handle "collection_path" and "path" for pytest_ignore_collect()
a5a540369 tests: port pytest_ignore_collect() to pathlib
10014e150 addhardware: Add usb as a recommended sound device
606633249 Translated using Weblate (Swedish)
04ab5617a Translated using Weblate (Indonesian)
7fd958770 Translated using Weblate (Estonian)
9a9267470 Translated using Weblate (Turkish)
2af8e00c8 Translated using Weblate (Romanian)
ff0e401ee Translated using Weblate (Chinese (Simplified) (zh_CN))
fe5e1ea17 Translated using Weblate (Portuguese (Brazil))
a91f48faa Translated using Weblate (Portuguese)
0fbc02c6e Translated using Weblate (English (United Kingdom))
0881c9c64 Translated using Weblate (Italian)
4afe2b71e Translated using Weblate (Turkish)
74d5b0f9e Translated using Weblate (Chinese (Simplified) (zh_CN))
cc2bb397e Translated using Weblate (Chinese (Simplified) (zh_CN))
39791b73c Translated using Weblate (Kabyle)
e9bf0bc12 Translated using Weblate (Chinese (Simplified) (zh_CN))
984d20203 Translated using Weblate (Finnish)
d150bab3f Translated using Weblate (German)
43f4c7859 Translated using Weblate (Polish)
7c2bebaee Translated using Weblate (Russian)
f5b56cdec Translated using Weblate (Korean)
904f95291 Translated using Weblate (Swedish)
bc9e5dc15 Translated using Weblate (Spanish)
015fb0b7f Translated using Weblate (Georgian)
3a66f48e2 Translated using Weblate (Ukrainian)
a5553cb91 Translated using Weblate (Romanian)
87298b9c9 Translated using Weblate (Czech)
35ad9057f virtinst: Fix XDG_DATA_HOME handling
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping rootlesskit to version v3.0.0-alpha.2-2-ga313ce8, which comprises the following commits:
3135d58 v3.0.0-alpha.2+dev
48a2131 v3.0.0-alpha.2
cc21afb Build(deps): Bump golang.org/x/sys from 0.39.0 to 0.40.0
0c54ba3 Build(deps): Bump github.com/containers/gvisor-tap-vsock
c62a145 fix(testsuite):fix flaky by ensure port is free to use
bac9c12 Build(deps): Bump golang.org/x/sys from 0.38.0 to 0.39.0
e814ea0 Build(deps): Bump github.com/containernetworking/plugins
d95fa30 Build(deps): Bump golang.org/x/sync from 0.18.0 to 0.19.0
45ea529 Build(deps): Bump actions/setup-go from 5 to 6
8b0d41e Build(deps): Bump actions/checkout from 5 to 6
64d4cd5 v3.0.0-alpha.1+dev
7ae0e6b v3.0.0-alpha.1
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Update oath-toolkit from 2.6.2 to 2.6.14. Drop patches and
workarounds that are no longer needed:
- 0001-oath-fix-macro-definition-error.patch (file removed upstream)
- EXTRA_AUTORECONF m4 workaround (AM_PATH_XML2 dropped in 2.6.7)
- Stale md5sum checksum
Upstream changes since 2.6.2:
2.6.14 (2026-01-27):
- pam_oath: Support null_usersfile_okay parameter
- Build fixes for glibc 2.43
2.6.13 (2025-07-29):
- liboath/libpskc: Fix _FORTIFY_SOURCE build problem
- liboath: Fix --with-openssl builds
- Git hosting moved from gitlab.com to codeberg.org
2.6.12 (2024-10-03):
- pam_oath: Drop privs for usersfile with ${HOME} (CVE-2024-47191)
- liboath: Don't follow symbolic links for usersfile updates (CVE-2024-47191)
- oathtool: Fix test suite on 32-bit big-endian platforms
- libpskc: Fix linker warning with mold, musl implicit declaration
2.6.11 (2024-01-11):
- liboath: Handle invalid base32 encoded secrets
2.6.10 (2024-01-03):
- Build fixes for Windows and Arch Linux
2.6.9 (2023-07-09):
- Improve compatibility with recent libxmlsec
2.6.8 (2023-07-09):
- libpskc: Fixes for recent libxmlsec releases
- pam_oath: Provide fallback pam_modutil_getpwnam implementation
- liboath: Builds on Windows
2.6.7 (2021-05-01):
- pam_oath: Support variables in usersfile string parameter
- build: Drop AM_PATH_XML2 in favor of pkg-config
2.6.6 (2021-01-20):
- oathtool: Handle HOTP --counter values > 0x7FFFFFFFFFFFFFFF
2.6.5 (2020-12-29):
- oathtool: Support reading KEY and OTP from stdin or filename
2.6.4 (2020-11-11):
- Fix libpskc memory corruption bug
- pam_oath: Fail gracefully for missing users
2.6.3 (2020-11-07):
- oathtool: Support TOTP with hash SHA512
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
We add gettext as a dependency to fix:
ERROR: libvmi-0.14.0+git-r0 do_configure: QA Issue: AM_GNU_GETTEXT used but no inherit gettext [configure-gettext]
ERROR: libvmi-0.14.0+git-r0 do_configure: Fatal QA errors were found, failing task.
ERROR: Logfile of failure stored in: tmp/work/x86-64-v3-poky-linux/libvmi/0.14.0+git/temp/log.do_configure.3722649
ERROR: Task (recipes-extended/libvmi/libvmi_git.bb:do_configure) failed with exit code '1'
NOTE: Tasks Summary: Attempted 3936 tasks of which 3928 didn't need to be rerun and 1 failed.
Bumping libvmi to version v0.10-1148-g82bbee6, which comprises the following commits:
82bbee6 Fix pointer mismatches, which GCC complains about (#1120)
77a677a Add vmi_map_guest_pfns() function (#1118)
b196d72 Remove old debian from ci (#1119)
872ccc6 Fix NtBuildNumber read (#1114)
f02aeb7 implement Windows PTE resolving (#1074)
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
We update our python checksum and drop a patch that is no longer needed.
Bumping libvirt to version v12.1.0-107-g9fa6beff05, which comprises the following commits:
9fa6beff05 qemuxmlconftest: Update 's390x' tests using 'virt-4.2' machine type
4537c0b870 qemuMigrationSrcBeginPhase: Don't call 'qemuBlockNodesEnsureActive' with offline VM
59fde80f39 qemuMigrationSrcBeginXML: Don't call 'qemuMigrationSrcBeginPhaseBlockDirtyBitmaps' with offline VM
623844bf2a virsh: migrate: Add support for VIR_MIGRATE_PARAM_MIGRATE_DISKS_TARGET_ZERO
f5fc45efea qemu: migration: Introduce 'VIR_MIGRATE_PARAM_MIGRATE_DISKS_TARGET_ZERO'
6670924a0d virsh: Add support for 'VIR_DOMAIN_BLOCK_COPY_TARGET_ZEROED' as '--dest-is-zero'
aa7d3142aa qemu: Add VIR_DOMAIN_BLOCK_COPY_TARGET_ZEROED flag for virDomainBlockCopy
b7e51e875a qemu: monitor: Add support for 'target-is-zero' option of 'blockdev-mirror'
aba64fc539 qemu: capabilities: Introduce QEMU_CAPS_BLOCKDEV_MIRROR_TARGET_IS_ZERO
f7ae47274a qemuMigrationSrcPerformTunnel: Remove 'migrate_disks' argument
7abfcef53c qemuTranslateSnapshotDiskSourcePool: Use proper error code
d9e2db9445 qemu: conf: Don't use VIR_ERR_INTERNAL_ERROR for config file parsing errors
42ef9a200a qemu: backup: Move setup of VIR_STORAGE_NET_HOST_TRANS_FD to qemuBackupPrepare
231ae15e97 qemuxmlconftest: Add missing test for <readonly> attribute of p9-fs devices
20ecc25b91 qemuBuildFSStr: Properly format 'readonly' attribute
2b03d26471 qemuBuildFSStr: Drop code for VIR_DOMAIN_FS_DRIVER_TYPE_HANDLE
b05fc0eabf qemu: capabilities: Don't advertise support for VIR_DOMAIN_FS_DRIVER_TYPE_HANDLE
df3f46c28c qemu: validate: Reject configs with VIR_DOMAIN_FS_DRIVER_TYPE_HANDLE
954036635a scripts: dtrace2systemtap: Fix argument name extraction regex to avoid '*' in names
95d29b66b4 hyperv: Remove unnecessary hash table size query.
85fdb72ac0 hyperv: use constants for xml namespaces
a561883abf qemu: add automatic port allocation for pull-mode backup NBD servers
36cf50f85b qemu: driver: Setup 'virPortAllocator' for backup NBD server ports
d1c6f0edc1 qemu: conf: add setup for automatic port allocation for pull-mode backup NBD servers
406b7fb0bd tests: Add iommufd fdgroup test
0a83b28795 qemu: Implement iommufd fdgroup
58875a6df6 conf: Add iommufd fdgroup support
fc516031ed qemu: Implement iommufd
c03b8f0804 conf: Introduce domain iommufd element
c1d38e9428 src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD
d1fb5cf127 qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD
c89b2bf1a8 qemu: Expand call to qemuDomainNeedsVFIO
ffa8020d36 hypervisor: Fix virHostdevNeedsVFIO detection
d0afa0a842 conf: Refactor virHostdevIsPCIDevice
f89e3dbce8 conf: Move and rename virStorageSourceFDTuple object
1a528a4d29 network: Don't enable ip_forward for VIR_NETWORK_FORWARD_OPEN
70b3053057 qemuhotplug: Introduce interface-network-hostdev
685f359eaf qemuhotplugtest: Use fake drivers
605112c584 virnetworkportxml2xmldata: Use different PCI address in plug-hostdev-pci.xml
b01baffbb2 qemuxmlconftest: Separate fake drivers into a separate file
6d6da1cbac tests: Drop WITH_QEMU from qemu specific tests binaries/libraries
cd6a1ba222 networkxmlconftest: s/fail/cleanup/
d9b34ad12b network: Format <ip/> element using virXMLFormatElement()
05cdfcf568 src: Drop NULL check before calling virBufferEscapeString()
54f5032e57 hyperv: Implement virDomainSnapshotGetParent()
1a5f2ad4c8 hyperv: Implement virDomainSnapshotCurrent()/virDomainHasCurrentSnapshot()
09c0b24424 hyperv: implement virDomainSnapshotGetXMLDesc()
00ccf5b2a8 hyperv: implement virDomainListAllSnapshots()/virDomainSnapshotNum()
6abb988fd1 hyperv: Implement domainSnapshotLookupByName()
293bb59e75 viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged
1fd9f5a3db qemu: Enable AMD IOMMU XTSUP by default
e1b8853e48 conf: support >255 vcpu w/ amd-iommu xtsup
d47de9e8b9 conf: fix error log for passthrough and xtsup attributes
2842d89706 conf: fix virDomainIOMMUDefEquals for amd_iommu
2e25854933 util: implement virHostCPUGetOnlineBitmap() for FreeBSD
88b5e33b4e rpc: free saved close error in virNetClientDispose
e25b82c5f8 tests: Create fake root dirs later
0b54c9d535 docs: Clarify host-model description in domain capabilities
57e5bb55ce virsh: Add --expand-cpu-features option for domcapabilities
3215fee349 qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES
8aa13d1b16 Introduce EXPAND_CPU_FEATURES flag for domain capabilities
f552faab53 docs: storage: Note that refreshing the storage pool is needed on outside modification
1ee7d7147b util: Move 'virProcessLimitResourceToLabel' into same preprocessor if-block as only caller
97f3fcd294 qemu: monitor: Use 'flat' mode of 'query-block'
3ae6de95f2 qemu: capabilities: Introduce QEMU_CAPS_QUERY_BLOCK_FLAT
e7d959a87f qemucapabilitiestest: Update 'caps_11.0.0_aarch64' to 'v10.2.0-2062-g084a6c6e73"aarch
75edc7ae98 qemucapabilitiestest: Update 'caps_11.0.0_x86_64' to 'v10.2.0-2062-g084a6c6e73"
837463f83f qemu: processShutdownCompletedEvent: Remove inactive VM object after shutdown
89d2948a16 qemu: hotplug: Don't access disk definititon after it was freed after media change
bed561c07a qemuDomainAttachDeviceDiskLive: Remove 'disk' variable
25662b3700 qemu_hotplug: Fix crash when attaching network inteface with hostdev network
2f25afba55 util: extend virHostCPUGetInfo() for FreeBSD
4cb677df95 docs: bhyve: add arm64 guest example
9c304e5cc6 docs: bhyve: fix typo in version number
d760c5c12e docs: bhyve: document NUMA domains configuration
3f3cb3ab51 hyperv: report whether guests have TPM enabled
83621dcb33 qemuhotplugtest: Run "interface-hostdev" test cases only on Linux
f9bb819fc4 qemuhotplugtest: Introduce interface-hostdev test case
662b1f4eb3 virnetdevmock: Mock virNetDevSaveNetConfig() and virNetDevSetNetConfig()
e9798b8397 virpcimock: Create net/ subdir for devices
542230251b virpcimock: Create sriov_totalvfs file and virtfnN symlinks
d8c70c8988 tests: stop mocking virGetUserRuntimeDirectory()
79d97d2b4f tests: point $HOME and $XDG_* into usable fake root directory
f83c0a5e6e consistently use glib g_getenv() instead of libc getenv()
52806b89d6 util: make completely separate functions for WIN32 versions of virGetUser*Directory()
5b1c8c8b86 util: rename virGetUserDirectory(ByUID) to virGetUserHomeDirectory(ByUID)
2dd4298339 remote: reduce scope of userdir in remoteGetUNIXSocketHelper()
86a68ee852 util: reduce scope of rundir in virPidFileConstructPath()
65cd851e57 util: reduce scope/autofree-ify rundir in virDaemonUnixSocketPaths()
331d9fe3ba qemu: support setting default route for passt interfaces inside the guest
acd8e9595f conf/util: fix non-specification of IP route destination address
21c8588683 util: make the route arg to virNetDevIPRouteGetPrefix const
1468f995e7 qemu: only limit IPv4 prefix for slirp
4b5c555e97 qemu: reorganize qemuValidateDomainDeviceDefNetwork()
0ae2dde5a8 qemu: delete passt "repair" socket when appropriate
3ea1550c64 test: Default to ROM type for loader
82b09f105a bhyve: support NUMA configuration for domains
e4b0fdb72f hyperv: implement virDomainDefineXMLFlags()
e62e777d3f hyperv: fix flags passed to virDomainDefParseString()
7aed06b055 hyperv: ensure we don't define multiple domains with the same name
bf27594575 hyperv: improve error message when redefining domain
fa016baf0a util: json: fix memory leak in virJSONValueFromJsonC()
d7b3be8ca3 secret: install service file only if init_script is 'systemd'
03f2672ab4 qemu: Fix IOMMUFD and VFIO security labels
b7483e6558 security: Cleanup hostdev label error logic
75f698c77f security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel
d704458b31 Post-release version bump to 12.2.0
6f0df1af01 Release of libvirt-12.1.0
496cccf47f news: Mention latency histogram support and (managed) save fixes
4a0424e2f3 Translated using Weblate (English (United Kingdom))
39b3b2eb37 fdstream: fix EOF handling when reading data
774241017a fdstream: don't set return value if looping to read more data
656f51dd20 news: document bhyve changes for 12.1.0
b0e57a2b35 NEWS: Document features/improvements/bug fixes I've participated in
2c6fe784ac news: document new hyperv features
4374dbbbf0 qemu_hotplug: enter monitor in order to rollback passed FD
fe782ed334 domain_conf: initialize network hostdev private data
10d5a41231 util: fix use-after-free in virIdentityGetSystem
633ac90d2b vmx: log full .vmx content
3d1e6d92de qemu: Fix job handling when domain dies in post-copy migration
634b40ccab po: Refresh potfile for v12.1.0
dbf3d81d24 Translated using Weblate (Chinese (Simplified) (zh_CN))
82512796fe Translated using Weblate (Spanish)
e943aff795 Translated using Weblate (Spanish)
8a1bd82f50 Translated using Weblate (Spanish)
29a53e39c0 Translated using Weblate (Czech)
92cbb0fcd7 Translated using Weblate (Greek)
f88910b713 Translated using Weblate (Romanian)
e39ce22996 Translated using Weblate (Greek)
b713afcebd Translated using Weblate (Greek)
42eb8b6d0b Translated using Weblate (Swedish)
ce5e429171 Translated using Weblate (Swedish)
d507c85f93 Update translation files
aa48051095 Added translation using Weblate (Chinese (Traditional Han script))
5b6adb61c8 Translated using Weblate (Georgian)
6085f809ad bhyve: Default to ROM type for loader
f051939111 news: Document support for uefi-vars device and firmwares
0151db88c2 virsh: Update for varstore handling
31e40b6229 include: Mention varstore where applicable
bcda5b2efd qemu_command: Use uefi-vars device where appropriate
0ea04024ef tests: Add firmware descriptors for uefi-vars builds
bcbb2667e2 security: Handle varstore file
a32b4a6037 security: Mark ROMs as read only when using AppArmor
5dc97de2c4 qemu: Create and delete varstore file
41fe1199bb qemu: Introduce qemuPrepareNVRAMFileCommon()
0dd118ccee qemu_firmware: Generate varstore path when necessary
df3121d21e qemu: Introduce varstoreDir
da7eb72148 qemu_firmware: Fill in varstore information
fa74aae490 qemu_firmware: Allow matching stateful ROMs
ffe37c6989 qemu_firmware: Use of NVRAM implies stateful firmware
500c010df2 qemu: Fill in varstore element in domcaps
3d6987914b conf: Include varstore element in domcaps
a440ada214 qemu_firmware: Report NVRAM template path for ROMs
cab5b6532d qemu_firmware: Support extended syntax for ROM firmware descriptors
d0c6aa084f qemu_firmware: Consider host-uefi-vars feature in sanity check
91337ee06d qemu_firmware: Split sanity check
83679d7338 qemu_firmware: Parse host-uefi-vars firmware feature
38c4c3f654 tests: Add firmware-auto-efi-enrolled-keys-aarch64
0653a2eae2 tests: Add firmware-auto-efi-varstore-aarch64
d8e0e9c3ce tests: Add firmware-auto-efi-varstore-q35
71d6399068 tests: Add firmware-manual-efi-varstore-aarch64
77b44120c5 tests: Add firmware-manual-efi-varstore-q35
bd35046517 qemu: Validate presence of uefi-vars device
12cdd61383 qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS
1c2dbdf3ac conf: Update validation to consider varstore element
3feee6d0ab conf: Parse and format varstore element
b5da97c5b9 schema: Introduce osnvram define
ccdff699ac tests: Rename custom JSON firmware descriptors
1504b7f687 conf: Move type=rom default for loader to drivers
375c82a0f8 qemu_firmware: Only set format for custom loader if path is present
a03a820572 docs: Improvement related to firmware selection
38379f59c0 docs: Rename "BIOS bootloader" section to "guest firmware"
4d0c5bc5be hyperv: Add basic domainGetBlockInfo() API implementation
95d8909283 hyperv: Add resource subtype definitions
331a392b96 conf: support windows paths in virDomainDiskByName()
9b5831910f hyperv: add support for secure boot configuration
82ccd68755 hyperv: Clean up unnecessary header includes
c07b4e91e3 qemu: saveimage: Use 'virFileWrapperFd' when loading non-sparse saveimage
0e2ab42778 qemu: driver: Merge 'qemuDomainRestoreInternal' and 'qemuDomainObjRestore'
72a65c6944 qemuSaveImageCreateFd: Handle case when 'virQEMUFileOpenAs' doesn't return a file fd for 'sparse' format
6a2a77b747 virfile: Introduce 'virFileFDIsRegular'
19d684706d qemuMonitorMigrateToFdSet: Drop 'flags' argument
0d3290d152 qemuSaveImageOpen: Remove wrong ATTRIBUTE_NONNULL
e9b931d3e4 virpci: Report an error if virPCIGetVirtualFunctionIndex() fails
edb3350c64 bhyve: implement domainGetVcpuPinInfo
387543c57f bhyve: support vcpu pinning
3ea0a44f7a qemu: Report error aborting stopped postcopy migration
6c2c9e21ac virstorageobj: Make virStoragePoolObjAddVol() report an error on failure
dbdaf22b63 virsh: report "unknown" for autostart when API query fails
da815a6a7b virsh: return failure exit code when UUID fetch fails
f09d02bf0f news: Mention firmwareFeatures element for domaincaps
cf4dfcf795 docs: Document firmwareFeature element for domaincaps
87c072c08b qemu: Fill in firmwareFeature element for domaincaps
928bdc3e67 conf: Add firmwareFeatures element for domaincaps
463322ec48 schema: Add firmwareFeatures element for domaincaps
f335c578d1 tests: fix mocking on macOS
f37e14119c iommufd: fix FD leak in case of error
75db232f90 tests: properly mock VFIO and IOMMU checks
63434db800 qemu: Fill iommufd domain capability
855f8fe9e2 conf: Introduce iommufd enum for domaincaps
5d16bef1a6 qemu_hotplug: Add support to hotplug host device with IOMMUFD
3f7ad3a8a5 qemu_command: Extract building IOMMUFD props to function
300ebf01b8 qemu_hotplug: Remove iommufd object if no longer needed
b21b6dcc72 qemu: Save IOMMUFD state into status XML
f67e4ac4d0 qemu_command: Don't use host property if IOMMUFD is used
4611f227c7 qemu: Convert vfioDeviceFd to qemuFDPassDirect
df59beed37 qemu: Convert IOMMUFD to qemuFDPassDirect
4a80a0468e qemuxmlconftest: Set fake FD for IOMMUFD
15ad45758b qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData
cb23831c02 qemuxmlconftest: Refactor host device preparation
c83b4f367f qemu_process: Refactor qemuProcessOpenVfioFds
d194f362f3 qemu_process: Fix FD leak with multiple host devices using IOMMUFD
7c062bfc4f qemu_domain: Add missing IOMMUFD cleanup
4b176cfc38 conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD
97eed30948 conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD
3365bff598 util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath
76b720168b qemu_process: Refactor qemuProcessOpenVfioDeviceFd
22c666097c util: Move openning VFIO device to virpci
ff2848827f qemu_process: Refactor qemuProcessOpenIommuFd
c684b83a68 util: Move openning IOMMU device to viriommufd
0c1af67be5 qemu: Move IOMMUFD validation to qemu_validate
4a0ea9bcf1 qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD
cb33103c4a scripts: avoid matching 'char **' as string for systemtap
5787326541 qemu: Setup disk latency histograms on startup/hotplug/update
b874c944bd Introduce support for disk operation latency histogram collection
ad65b00c13 docs: formatdomain: Reword section about the '<statistics>' element under disk driver
7da1a83914 docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element
ad4830ce68 qemu: monitor: Add handlers for 'block-latency-histogram-set'
237e49127a Expose latency histograms via 'virConnectGetAllDomainStats'
1c77d396ea qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats'
42a39d703d qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks'
1789a0f8a3 qemu: Extract disk setup done via QMP into a separate helper
11057abfd1 qemu: Wire up new hyperv host-model mode behavior
380fb89390 conf: Parse hyperv features even for host-model
79b05df9f8 bhyve: improve loader handling on arm64
e23fd0b7fd In virFDStreamRead(), fill buffer from this and next messages
caf74fab50 bhyve: add capability probing for ACPI
fc52d176ce bhyve: do not use deprecated IOAPIC option
eaf1f15173 util: remove duplicate logging of firewall command
53d43ee5da docs: secret: Add documentation of secret encryption feature
eb0b65e07a secret: Add functionality to load and save secrets in encrypted format
bd6c201f9a secret: Rename virSecretObj structure attribute from base64File to secretValueFile
1c86748cf1 secret: Add secret.conf configuration file and parse it
97758bc9a0 secret: Set up default encryption secret key for the virtsecretd service
ffc316e99a util: Add support for GnuTLS decryption
73a52dc108 qemuProcessRefreshDisks: Don't bother to refresh disks on cold boot
536646deaf qemuProcessUpdateVideoRamSize: Remove 'driver' argument and adjust callers
40b7e2a39b qemu: Refactor tray_status handling
b9b9092c9c qemuDomainAttachDiskGeneric: Avoid unneeded disk property refresh after hotplug
bc939353d9 qemuDomainDiskPrivate: Remove unused 'tray' field
8ae3835079 conf: domain: Add VIR_DOMAIN_DISK_TRAY_NONE state for devices without tray
fac54e0d73 qemuDomainDiskInfo: Use proper type for 'io_status'
a94d2b9871 qemuMonitorJSONGetBlockInfo: Don't fail if 'io-status' field gets new values
4666d19617 qemuMonitorJSONHandleMemoryFailure: Simplify error case and value extraction
25922c1fcb qemu: monitor: Add test validating that 'eventHandlers' are properly sorted
6f372d526f qemuMonitorJSONHandleMigrationStatus: Simplify error case
ed94a8336a qemu: Drop 'removable' field from 'qemuDomainDiskInfo'
1292e757c6 qemu: process: Unexport 'qemuProcessRefreshDisks'
5b392ec976 qemuMigrationSrcBegin: Drop disk refresh step
52e09a7875 qemu: Drop 'empty' filed from 'qemuDomainDiskInfo'
56f7dd88d4 qemuProcessRefreshDiskProps: Drop code to remove disk source
074f7fba94 qemu: Remove 'removable' field from 'qemuDomainDiskPrivate'
861be1078e qemuDomainDiskInfo: Drop 'nodename' field
0d3ef7cb71 qemu: Implement support for persistent reservation migration control
b0edb7eb9b qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR
fb8d697554 qemucapabilitiestest: Update 'caps_11.0.0_aarch64' to 'v10.2.0-1114-gb3abdfa486'
5f5a2b0c8c qemucapabilitiestest: Update 'caps_11.0.0_x86_64' to 'v10.2.0-1114-gb3abdfa486'
06e7fee707 network: add comment to table that it belongs to libvirt
aa802b8723 hyperv: Implement virDomainInterfaceAddresses()
a422ebb178 hyperv: Move MAC parsing into a separate function
7fdc9111d2 virsocketaddr: Introduce virSocketAddrSubnetToPrefix()
fb317b296d datatypes: Declare autofree func for virDomainInterface type
8e377728c5 nwfilter: move shared nwfilter driver functions into nwfilter_tech_driver.c
6e101ad0c7 nwfilter: remove redundant sys/utsname.h include
a82cc0c435 nwfilter: rename generic names to virNWFilter* and CamelCase
7136e9155a docs: add description for USB port matching
f0cdc0fca4 nodedev: add USB port to nodedev XML
b97afe28f5 tests: validate an XML config with USB bus/port set
53e8f30dc8 schema: add USB port attribute
7a888d722c conf: add support for host USB port matching
73677f062f util: implement support for finding host USB devices by port
4b97cdd1a5 util: generalize the host USB device search APIs
93e1f5ee96 virusb test data: add devpath files for port addressing
fc5840b498 qemu: Ignore cmp_legacy CPU flag
afe6e5d260 virsh: Switch cmdDomIfAddr() to vshTable
9373d8da6a qemu_command: Generate granule prop for virtio-iommu
2eea8e3829 qemu_validate: Check whether granule of virtio-iommu is supported
43892d9915 conf: Introduce granule attribute for virtio-iommu
17693931e6 qemu_command: Generate aw_bits prop for virtio-iommu
2fccdda851 conf: Allow aw_bits for virtio-iommu
befdd44bf8 qemu_capabilities: Introduce QEMU_CAPS_VIRTIO_IOMMU_AW_BITS
e1c6e3fef0 conf: Teach virDomainParseMemory() new retval
b4c792313a hyperv: Avoid memleak in hypervDomainDefParsePhysicalDisk
090223d01a src/esx/esx_vi.c: Debug path element comparisons
29aa558642 bhyvexml2xmltest: Avoid leaking driver caps
720f71c1da bhyvexml2argvtest: Avoid leaking firmwareDir
210cae66e0 bhyvexml2argvtest: Don't leak parts of driver config
f0af542077 bhyvexml2argvtest: Avoid leaking driver caps
fcc5910557 bhyvexml2argvmock: Provide virCPUProbeHost()
2f1421d83b bhyve_command: Avoid memleak in bhyveBuildNetArgStr()
df2cb810a3 bhyve_command: Avoid leaking @buf in virBhyveProcessBuildBhyveCmd()
1ce8c35c29 bhyve: Avoid leaking @addrs in bhyveDomainAssignPCIAddresses()
1779a8600f bhyve: Avoid memleak in bhyveParsePassthru()
bf34b90bb4 qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps
a4f610ff3f qemu: migration: Always offer block dirty bitmaps during migration
0c75fc1747 qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps
b2fe3465de qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data
71643c197e qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps'
864a70114f rpcgen: Pass XDRPROC_T_3ARGS to test_demo.c
2c66b6d72c build: add detection of xdrproc_t arguments count
74fc02d792 tests: qemuxmlconfdata: provide iommufd sample XML and CLI args
7d2f91f9cb qemu: Update Cgroup, namespace, and seclabel for iommufd
2f0999a161 qemu: open iommufd FD from libvirt backend
f623080472 qemu: open VFIO FDs from libvirt backend
f91a07d0c8 qemu: Support per-process memory accounting for iommufd
1043e04e17 qemu: Introduce privateData for hostdevs
fd113055bb qemu: Implement support for associating iommufd to hostdev
203002249b tools: Fix chown syntax in virt-pki-validate.c (dot -> semicolon as owner and group separator)
b9d9ff39d3 qemu: introduce the "virtualization" feature
ca98f39e64 networkxmlconftest: Expect success for "hostdev" case only on Linux
e7c6f06747 ci: regenerate with 'lcitool manifest'
240deda72c tests: Rename networkxml2xmltest to networkxmlconftest
8f5e0903d6 tests: Drop networkxml2conftest
c26c7b1cd3 networkxml2xmltest: Do conf test
ee8381e729 networkxml2xmltest: Sync test cases with networkxml2conftest
369020180a networkxml2xmltest: Store parsed def for future tests
2d6a376ec0 networkxml2xmltest: Dynamically allocate testInfo struct
5b2ed0d137 networkxml2xmltest: Move path generation into testRun()
c24157056f networkxml2xmltest: Introduce testRun()
04034eeb34 networkxml2xmltest: Don't recreate xmlopt object
eff3431dca networkxml2conftest: Allow regenerating more in one run
30baa49454 networkxml2conftest: Allow regenerating hosts file
319bbb5c84 networkxml2conftest: Avoid potential leak
ecb2e06bdf test: wire up networkValidateTests()
4b98a649b3 network: Introduce networkValidateTests()
7c9b883eb3 networkxml2xmltest: Update couple of test cases
d07d7a6842 networkxml2conftest: Fail tests where no dnsmasq would be spawned
82040ddce7 networkxml2conftest: Drop routed-network-no-dns test case
794338569d network: Move decision on dnsmasq need into a separate function
e047ae9ec3 network: Separate private APIs declaration to bridge_driver_priv.h
9d6f5ac1f3 tests: Avoid crossdir inclusion for networkxml2* tests
13889feb14 esx: Switch to creating URLs using virURIFormat
e013d5b5ca esx: Abstract all URL-creation code into one function
38c952d893 esx: Debug URL just before opening with curl
6bb982178b qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails
f1ad521936 virDomainSnapshotDefAssignExternalNames: Improve error message
6bcdf4ee59 qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata'
452c281aee qemuSnapshotUpdateBackingStore: Remove stale comment
b43aee9cc9 qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument
65c7369107 qemu: Connect NVMe devices to PCIe bus
27fd2e97b8 Fix printf style used with virDomainIOMMUDef::aw_bits
4009126f17 src: Use device alias when ifname is unset in virDomainInterfaceAddresses()
3a10f435b7 libvirt-domain: Fix documentation of virDomainInterfaceAddresses()
6f07a8e6fc util: Remove @masked argument from virSocketAddrFormatWithPrefix
adcc14e153 qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice
0cd13906dc qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument
fa06437566 qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop
abcdc9511b qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length
27141859f1 qemucapabilitiestest: Add data for the qemu-11.0 dev cycle (aarch64)
2425a570e3 qemucapabilitiestest: Add data for the qemu-11.0 dev cycle (x86_64)
a1476a5afc qemuxmlconftest: Prepare 'fd-memory-numa-topology4' for removal of 'pc-i440fx-5.0'
be58c0eaa2 qemuxmlconftest: Remove specific machine type from 'devices-acpi-index'
f9cec072c4 qemuxmlconftest: Freeze 'cpu-numa-memory-oldstyle' case to qemu-10.2
70d7458186 virnetdevtap: Produce more helpful error message in virNetDevTapCreate()
845210011a esx: Allow connecting to IPv6 server
e0dcf278af bhyve: workaround for the lack of UTC clock on ARM64
7b889af2d2 virt-aa-helper: Ask for no deny rule for readonly disk elements
28482f2630 syntax-check: Introduce sc_prohibit_local_with_subshell rule
2442030856 libvirt-guest.sh.in: Fix logical error in guest_is_on()
8f0cf96b66 libvirt-guests.sh: Declare and assign separately to avoid masking return values
7a0c2fba91 scripts: don't import shutil in meson-warnings.py
50ad6026ad ci: regenerate with 'lcitool manifest'
43358229fe meson: write all warning flags to 'c-warnings.txt'
50640d35ae src: remove some -D defines from compiler args
a643671150 util: Fix max socket calculation
dcffd15520 conf: simplify check for vlan tagging support in virDomainActualNetDefValidate()
91a2d813cb conf: validate that specified interface type supports vlan tags
3190150ebd qemu: use actual/effective vlan when updating OVS-based interface vlan tag
b5a406a768 qemu: update vlan tag of macvtap (direct) passthrough devices during update-device
17976f6b2a qemu: forbid modifying network device portForwards with update-device
2e4abf4479 conf: new function virDomainNetPortForwardIsEqual()
878c5d2fa3 util: fix equivalence of AF_UNSPEC virSocketAddrs
be9885c274 nwfilter: rename ebiptables unit tests and data files
289e4cbc67 domain_logcontext: Don't assume remote driver is always available
5b080bc580 qemucapabilitestest: Add 'caps_10.2.0_aarch64' test data
095e133645 qemucapabilitiesdata: Regenerate 'caps_10.2.0_x86_64' replies
d917bf662b qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices
37d51c0d27 qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type
badb0a8526 Align help text of virt-aa-helper with actual expectated input
05a2ad8321 syntax-check: Introduce sc_prohibit_g_autofree_const rule
adb19c902b network: Drop const for forwardIf in pfAddNatFirewallRules()
973aa66571 hyperv: Drop const for resourceType in hypervDomainAttachSerial()
b3a491284a rpm: disable -Werror on ELN builds
bdcf0c35bb Post-release version bump to 12.1.0
4d93728466 Release of libvirt-12.0.0
0ad017a6de NEWS: Mention shared FS detection race
b84e6d1b31 NEWS: Document features/improvements/bug fixes I've participated in
10a523c62a NEWS: Mention JSON nesting bug and TPM migration quirk with NFS
98329e4f12 Translated using Weblate (Korean)
49b8f0a814 Translated using Weblate (Swedish)
abe668561d Translated using Weblate (Portuguese)
8d5fdea287 news: document bhyve new features for 12.0.0
c44aecc40d Update translation files
0355b2d05a po: Refresh potfile for v12.0.0
e361469ebb Translated using Weblate (Spanish)
981ffc65af Translated using Weblate (Spanish)
80879c113f Translated using Weblate (Spanish)
a1c93eab00 Translated using Weblate (English (United Kingdom))
9ad5974ecb Translated using Weblate (Spanish)
2657b10746 Translated using Weblate (Spanish)
b08fe254d2 Translated using Weblate (Georgian)
c91c477648 Translated using Weblate (Spanish)
e8e555b625 Translated using Weblate (Czech)
855527bab5 Translated using Weblate (Georgian)
20b0880ab6 Translated using Weblate (Czech)
92b77582d4 Translated using Weblate (Swedish)
d557623281 news: Mention improvements and fixes to firmware selection
563a47ea7f qemu_firmware: Allow matching both UEFI and BIOS for ROM loader
9a041e61ec qemu_firmware: Don't skip autoselection for ROM
1b78d647da qemu_firmware: ROM firmware is always in raw format
8d1bfa69b2 tests: Add firmware-manual-efi-tdx
f65ef07dcf tests: Add firmware-manual-efi-sev-snp
0aa3fa2d62 qemu_firmware: Remove NVRAM to loader format copy hack
798528d2b6 qemu_firmware: Take NVRAM format into account when matching
623fc1b4b5 qemu_firmware: Take templateFormat into account when matching
91b6dee6d1 qemu_firmware: Retain user-specified NVRAM format
a92c140956 qemu_firmware: Prefer template format to loader format
ab8efe6fd0 qemu_firmware: Refactor setting NVRAM format
ee4c619b09 qemu_firmware: Simplify handling of legacy paths
3e1c110a4d qemu_firmware: Set templateFormat for custom paths
3acdcd2eb7 qemu_firmware: Introduce qemuFirmwareFillDomainCustom()
9ec9bdc8dc tests: Add firmware-auto-efi-format-mismatch-nvramtemplate
935879fb91 tests: Add firmware-auto-efi-format-nvramtemplate-qcow2
a4f33d7228 tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path
ab92d77339 tests: Add firmware-auto-efi-format-nvram-raw-loader-path
c8536599f2 tests: Add firmware-auto-efi-format-nvram-raw
13ce34e646 tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths
17979f08b9 tests: Add firmware-manual-efi-nvram-template-nonstandard-format
2bd0499294 schemas: Allow templateFormat without template path
876a5d34d4 qemu_firmware: Drop fallback for absent nvramTemplateFormat
3463e543fe qemu_firmware: Ignore stateless/combined when NVRAM is configured
c74adb33e4 domain_validate: Reject ROMs with format other than raw
5bae6e3640 tests: Add firmware-auto-efi-format-loader-qcow2-rom
a5ae34aa74 domain_validate: Reject read/write ROMs
26035762a9 tests: Add firmware-manual-bios-rw
07bcd51bcb tests: Add firmware-auto-bios-rw
46970217a8 domain_validate: Reject NVRAM with read/write firmware
27313799ba tests: Add firmware-manual-efi-rw-nvram
4df091dea4 qemu_firmware: Move copying of nvram.format to loader.format
5b374c5e3f qemu_firmware: Move format=raw compat exception
aaa0db64b4 qemu_firmware: Drop 'nvram' local variable
3f7eea0e17 qemu_firmware: Drop support for kernel descriptors
86a4ede0ec qemu: capabilities: Update 'caps_10.1.0_x86_64+inteltdx' after release
28015f020c qemu: capabilities: Update 'caps_10.2.0_x86_64+mshv' after release
1be917837e qemu: capabilities: Update '10.2' capabilities on x86_64 after release
380764992d qemucapabilitiesdata: Re-generate 'caps_10.2.0_x86_64'
0bdf8188d6 esx_util: Drop extra spacing
6c9d2591c6 esx: URI encode inventory objects twice
ffe74c7c55 esx_util: Introduce esxUtil_EscapeInventoryObject()
871a8f872d qemu: fix locking in qemuProcessHandleMemoryFailure
32749427de network: fix memory leak in leaseshelper.c
d50de61f34 bhyve: report domain capabilities for arm64
1b0c9d21b7 bhyve: tests: add xml2xml arm64 tests
eaeb1712a7 bhyve: tests: prepare for arm64 xml2xml tests
8c971cdce1 bhyve: command: handle arm64 bootloader
24be4b8c0c bhyve: command: make -H and -P args amd64-only
90df4b6795 bhyve: command: handle arm64 console
c3c8c7e8cc bhyve: domain: require ISA controller on x86_64 only
35b99f4994 bhyve: tests: support arch-dependent tests
c957dea309 bhyve: capabilities: fix for arm64
ca3cbae5af virQEMUSaveDataNew: Refactor cleanup
ccf008b85f qemu: snapshot: Check earlier if memory snapshot is possible
ac8d241620 qemuSaveImageCreate: Remove 'driver' argument
a8a62682fd qemuSaveImageCreateFd: Remove 'driver' argument
d4a5183674 qemuMigrationSrcToFile: Remove 'driver' argument
5d0d55f238 qemuMigrationSrcToSparseFile: Remove 'driver' argument
073306b4ad qemuDomainEventEmitJobCompleted: Remove 'driver' argument
256ce775d9 qemuMigrationSrcToLegacyFile: Remove 'driver' argument
c6988fdb2f qemuHotplugAttachDBusVMState: Remove 'driver' argument
a175096c37 qemu: snapshot: Don't overwrite 'ret' in qemuSnapshotCreateActiveExternal
d86259d5a7 docs: bhyve: document virtio-scsi support
790719be6b bhyve: add virtio-scsi support
1001371fba conf: introduce CTL storage type
6df374fefc qemu_validate: Drop VIR_DOMAIN_HYPERV_STIMER dependency on VIR_DOMAIN_HYPERV_VPINDEX
8e9a9f86b0 qemu_validate: Drop VIR_DOMAIN_HYPERV_SYNIC dependency on VIR_DOMAIN_HYPERV_VPINDEX
40f8bed857 libvirt-guests.service: use Type=exec
b3ede6618d tools: check for failure decoding secret base64 value
2d65cdeba8 docs: fix broken UUID example
16804acf14 virjsontest: Add test for nesting depth
b49d41b7e9 util: json: Increase JSON nesting limit when parsing to 300
bfd1a1a885 bhyve: rework capabilities probing
d3735f71ec tests: Remove temporary TZ parsing workaround
a54cafa62b news: Fix indentation
e727c8afad network: Propagate DNS forwarder port into dnsmasq config
72e4efbfa6 network: Introduce port for DNS forwarder
dad8b0fc52 bhyve: bhyvexml2argvtest: fix SLIRP tests
437c135671 docs: drvbhyve: document SLIRP networking
ffa6b2e892 bhyve: implement SLIRP networking
2df30bca10 tests: add capabilities for QEMU v10.1.0 on s390x
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
| |
vgabios 0.8a depends on dev86-native which was removed in a previous
commit (upstream repo deleted). vgabios is a legacy VGA BIOS from 2008
that has been superseded by SeaBIOS which is already a Xen dependency.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
| |
Bumping irqbalance to version v1.9.5-5-gcd9212f, which comprises the following commits:
8929e4d Reset banned_cpus explicitly for IRQBALANCE_BANNED_CPULIST
2804ba1 Change warnings about un-affine-able irqs to LOG_DEBUG
cf76396 Update configure.ac/meson.build for irqbalance 1.9.5
907b65f meson: force systemd-service installation with a seperate option
4f53f8c Fix irqbalance for Xen virtual event interrupts
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Update ipxe for compatibility with the current OE toolchain:
- Add coreutils-native to DEPENDS for cksum (used by build system
to generate checksums embedded in binary images)
- Drop syslinux and cdrtools-native from DEPENDS, remove
ISOLINUX_BIN from EXTRA_OEMAKE
- Skip ISO and USB image generation from the ALL target - only ROM
files are needed for Xen HVM and the ISO tools
(genisoimage/xorrisofs) are not compatible with cdrtools' mkisofs
- Drop patches applied upstream: gcc-10 warning fix, golan type
casts, fcommon directive, xenver.h typo, old-style function
definition, C23 reserved words, and unsafe function wrapper
- Refresh ipxe-fix-hostcc-nopie-cflags.patch for new line numbers
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping ipxe to version v2.0.0-13-ga0bf3f1cc, which comprises the following commits:
a0bf3f1cc [cloud] Omit uploading empty blocks to EBS snapshots
5921e6b45 [cloud] Add utility to read INT13CON partition in Alibaba Cloud
619b1db1b [bnxt] Update conditions for invoking short commands
c3560072e [cloud] Add utility for importing images to Alibaba Cloud
7b3eb3c86 [undi] Drag in PCI-specific configuration
88d396719 [efi] Add a dummy SBOM PE section
847e09850 [ci] Add a workflow to import images to Google Cloud
013a4a93d [cloud] Specify Google Cloud project explicitly for storage client
e180aa85e [test] Assign unique MAC addresses for test network devices
5edffb26b [ci] Fix family name used for AWS image imports
e9b80ee54 [ci] Add a workflow to import images to AWS EC2
c44d5f96e [cloud] Add ability to upload AMI list to an S3 bucket
33ca177cf [release] Update version number after release
12798ec29 [release] Release version 2.0.0
616506924 [doc] Update change log in preparation for release
94138656d [efi] Do not unconditionally raise back to internal TPL
cbeda2012 [efi] Allow creating an image device handle with no parent device
5a17d8daf [efi] Install protocols onto a dedicated device handle
910d9c5a9 [efi] Allow executing images even with no open network devices
3df8f9c37 [efi] Try all supported autoexec protocols
b677399da [efi] Treat a URI device path as higher priority than a cached DHCP packet
8df45c2f3 [github] Add organization to sponsorship links
608dde2ad [doc] Add contribution guidelines
f7fe2b319 [cachedhcp] Set current working URI to cached DHCP filename
027d0fe24 [ci] Include Secure Boot ISO and USB images in release artifacts
559282d5a [build] Use Markdown consistently within release notes
3680a4ae5 [build] Add support for including a UEFI shim in filesystem images
1fbc3bca7 [efi] Automatically open network device matching loaded image device path
a69afd743 [tftp] Use TFTP server URI only if no other working URI is set
fa993d524 [tls] Transmit a closure alert when closing the connection
4d0b0cd4c [tls] Respond to received closure alerts
efe812637 [cachedhcp] Automatically open network device matching cached DHCPACK
879549da3 [dynui] Allow for duplicate shortcut keys
f00d2079d [doc] Add release process documentation
ad748f0d9 [bnxt] Update link speed definitions
7ce5dbd76 [efi] Allow for the existence of multiple shim lock protocols
596c84ce7 [efi] Support the EFI_PXE_BASE_CODE_TFTP_GET_FILE_SIZE operation
b48965ae5 [xferbuf] Silently discard data written to a void data transfer buffer
3194c8ad0 [xferbuf] Record maximum required size
7948ffe32 [ci] Remove now-redundant "netboot" job
9250a9091 [build] Create util/gensrvimg for building network boot server images
f0ceb70cb [bnxt] Fix memory leak in probe()
a6d393ecc [bnxt] Skip unnecessary calls for VFs
9443f7a2a [tls] Remove current time from client random bytes
1b6d88d64 [ipv6] Obtain MTU setting from NDP
1eb571cef [bnxt] Remove access of deprecated link speed variables
a5e4bb98b [bnxt] Fix typo in function declaration
df5957ccc [bnxt] Fix coding style
9d6831bb0 [bnxt] Correct port index usage
2012ab71d [pxeprefix] Add a minimal iPXE NBP metadata header
47467538f [build] Use little-endian word values in genfsimg
0854850d0 [ci] Add a job to automatically create releases
179366d72 [ci] Remove redundant duplicate creation of version.txt
9e0057a86 [build] Allow for generation of all release information
a82e0b41a [doc] Fix header levels in Markdown files
df2ef86d1 [doc] Update README
53a3365be [doc] Add an initial changelog
8fb90cb40 [build] Allow for construction of a text file containing the version
0cde7ce6d [build] Mark system logger as permitted for UEFI Secure Boot
2184bfdb0 [ci] Create a network bootable files archive as a build artifact
d98278a17 [ci] Include latest iPXE shim in build artifacts
80639a6ca [ci] Use ipxe-builder-utils container for combined BIOS/UEFI images
93fc2123c [ci] Include CA certificate file alongside signed binaries
a956c5fea [ci] Allow for manually triggered workflow runs
21b5bd840 [ci] Add support for building UEFI Secure Boot signed binaries
1d23d5a03 [ci] Schedule Coverity Scan run via GitHub Actions
2161e976c [build] Include USB drivers in the all-drivers build by default
ae8e23a45 [build] Handle all driver list construction via parserom.pl
c9158cb32 [build] Mark Xen HVM files as permitted for UEFI Secure Boot
7caee4489 [ci] Include Linux userspace build artifacts
6dc991d07 [slirp] Disable warnings for uncleanly deprecated libslirp functions
25429d952 [build] Include PCI drivers only in BIOS and UEFI builds
3f12b8b1c [build] Include devicetree drivers in the SBI all-drivers build
81da1a1b6 [dt] Add DT_ROM() and DT_ID() macros
5669c4d52 [build] Include Xen and Hyper-V drivers only in x86 BIOS and UEFI builds
0992d9b56 [build] Include Linux network drivers in the Linux all-drivers build
6e56f7ff2 [linux] Remove unused can_probe field from driver definition
8a1dd5850 [build] Include ISA drivers only in 32-bit BIOS builds
cc4a9df97 [ci] Include Secure Boot build artifacts
cf350b8eb [build] Filter out non-permitted drivers for UEFI Secure Boot
7a2817bbd [build] Drag in Xen and Hyper-V support via network device drivers
99a9e6e43 [build] Construct driver rules for USB devices
e783adcfd [build] Construct driver lists for each bus type
152351219 [build] Allow PCI_ROM() and ISA_ROM() to span multiple lines
4d6c8ab44 [usb] Add USB_ROM() and USB_ID() macros
481e04311 [librm] Work around two errata in the 386's "popal" instruction
cd9b44e57 [syslog] Allow port number to be specified for encrypted syslog server
362b704f8 [ci] Include supported network device list in build artifacts
18fab8dd8 [loong64] Fix error identifier generation for LoongArch64
12b279b4c [ci] Include error identifier list in build artifacts
95e756569 [pci] Ignore invalid subordinate bus numbers
aa06a76eb [ci] Show rolling release publication URL
c18d89570 [efi] Cache identified PCI root bridge I/O protocol handle
30d162ddd [uri] Ensure "##params=" separator is correct
59c67e111 [ci] Run tests on pull requests
5abbcab90 [build] Mark MS-CHAPv2 as permitted for UEFI Secure Boot
9106130f6 [build] Ensure dependencies of version.c are always rebuilt as expected
a565e18f3 [build] Exclude local named config headers from annotation checks
b05a045b4 [ci] Publish rolling release binaries via https://boot.ipxe.org
74e0551ac [ci] Publish rolling release build artifacts with stable URLs
e855c4c64 [ci] Produce combined BIOS/UEFI ISO and USB images
8e10974c8 [ci] Upload a selection of build artifacts from each run
dee71adda [build] Exclude external files from annotation checks
301b1ecf2 [build] Mark compressed image tools as permitted for UEFI Secure Boot
c07fb71a9 [build] Mark FDT management tools as permitted for UEFI Secure Boot
6b17d320d [build] Mark core arm64 files as permitted for UEFI Secure Boot
f1bcd160a [xen] Update to latest stable release headers
8e31ac9fc [build] Mark dummy architecture headers as permitted for UEFI Secure Boot
40c2db9d6 [build] Mark direct kernel loading as forbidden for UEFI Secure Boot
4db03054d [build] Mark GDB stub as forbidden for UEFI Secure Boot
03a906a9f [build] Mark Realtek driver as permitted for UEFI Secure Boot
b7e7f62b8 [efi] Avoid dragging in IPv4, IPv6, and DNS support unconditionally
e31dc79d4 [build] Mark EFI SNP/MNP driver wrappers as permitted for UEFI Secure Boot
641ea020f [prefix] Make unlzma.S compatible with 386 class CPUs
d0ea2b1bb [ci] Use prebuilt containers to build and test iPXE
207c99a47 [build] Allow GITVERSION to be specified as an environment variable
0abef79a2 [build] Do not use "git log" to construct build timestamp
faa42c850 [build] Do not use "git describe" to construct version number
a42a15ae9 [build] Allow for per-architecture sysroots
6eab3dbcd [ci] Update to ubuntu-24.04 GitHub actions runner
05cb93046 [build] Extend default configuration for non-BIOS builds
4157afc12 [usb] Drag in USB commands only when USB support is present
f3abf2b9d [pci] Drag in PCI commands only when PCI support is present
f7f685f8c [build] Canonicalise console type configuration
ce6f574a9 [build] Canonicalise USB configuration
6ad6af198 [build] Canonicalise settings sources configuration
ff80a1758 [build] Sort general configuration in order of approachability
360c0f336 [build] Canonicalise remaining portions of general configuration
d27cf68e0 [build] Canonicalise SAN boot protocol configuration
464916f99 [build] Canonicalise download protocol configuration
f869132d6 [build] Canonicalise network protocol configuration
e72c331aa [build] Canonicalise command list configuration
9f4b9f60f [build] Canonicalise image type configuration
c7403e7e5 [build] Mark more reviewed files as permitted for UEFI Secure Boot
1d5b1d924 [build] Fail Secure Boot builds unless all files are permitted
46510f36a [build] Mark MD4 and MD5 as forbidden for UEFI Secure Boot
adcaaf9b9 [build] Mark known reviewed files as permitted for UEFI Secure Boot
6cccb3bdc [build] Mark core files as permitted for UEFI Secure Boot
1996e214e [build] Check for standalone FILE_LICENCE() and FILE_SECBOOT() declarations
49f700a25 [console] Mark generated keymaps as permitted for Secure Boot
30948987f [build] Mark existing files as explicitly forbidden for Secure Boot
b09af00fa [efi] Mark imported EDK2 headers as permitted for Secure Boot
c5ae9ec99 [efi] Update to current EDK2 headers
e61c636bf [build] Define a mechanism for marking Secure Boot permissibility
9c01c5a5d [neighbour] Treat delayed transmissions as pending operations
2110afb35 [tcp] Report TCP statistics via the "ipstat" command
a8c89276c [malloc] Increase heap size to 4MB
8e557f1ab [tcp] Discard packets that lie immediately before the receive window
ff6d612e7 [neighbour] Add the ability to artificially delay outbound packets
33c832b0d [neighbour] Split out deferred transmission from discovery completion
aabfb8a94 [neighbour] Use discovery protocol field to identify incomplete neighbours
d0e01bb3f [neighbour] Always use network device's own link-layer address
7c39c04a5 [crypto] Allow for zero-length big integer literals
01038893a [test] Update big integer tests to use okx()
383214794 [crypto] Fix identification of non-wrapped elliptic curve identifiers
5aab6b7a3 [crypto] Add ECDSA-based TLS cipher suites
f1e23b53a [test] Add test cases for X.509 certificates with ECDSA signatures
d6eeb9039 [crypto] Add OID-identified algorithms for ECDSA with SHA2 hash family
d14066e92 [crypto] Allow ecPublicKey to be identified as a public-key algorithm
f3147b42a [test] Ensure OID-identified algorithms are present for X.509 tests
aa247f6e3 [x509] Correct debug message
4e3cbeef8 [crypto] Add support for ECDSA signatures
948677fe5 [test] Test verification of constructed signature
cfbf0da93 [crypto] Allow for an explicit representation of point at infinity
af99310f5 [test] Test signature verification independently of signing
3d5cd3d79 [intel] Add PCI ID for I219-V and -LM 24
86c40a8b1 [efi] Retry calls to GetRNG() as needed
fb1188936 [crypto] Generalise rsa_parse_integer() to asn1_enter_unsigned()
c7f129fed [crypto] Allow for addition of arbitrary Weierstrass curve points
1e353ff36 [crypto] Split out Weierstrass point initialisation and finalisation
d3adea838 [crypto] Expose the (prime) group order as an elliptic curve property
80e98dc0d [crypto] Verify that weierstrass_multiply() result is not point at infinity
b362f77bd [test] Allow for elliptic curve tests other than multiplication
e50e30a7f [crypto] Expose the base point as an explicit elliptic curve property
88c3e68df [http] Abort connections after a long period of inactivity
1a789c1da [http] Rename connection retry timer
64f936d5d [crypto] Allow for OID-identified elliptic curve algorithms
e6610b793 [test] Include key matching in existing public-key tests
3e566818f [crypto] Remove obsolete maximum output length method
1ccc320ee [crypto] Construct asymmetric ciphered data using ASN.1 builders
d4258272c [crypto] Construct signatures using ASN.1 builders
8cd963ab9 [crypto] Pass signatures for verification as ASN.1 cursors
c9c028259 [crypto] Restructure handling of ASN.1 bit strings
d73981aec [intel] Add PCI IDs for I225 and I226 chipsets
19dffdc83 [efi] Allow for creating devices with no EFI parent device
dfea3bbfa [pci] Use runtime selectable PCI I/O API for EFI cloud builds
9c1ac48bc [pci] Allow probing permission to vary by range
ff1a17dc7 [pci] Use linker tables for runtime selectable PCI APIs
0cf2f8028 [pci] Allow PCI configuration space access mechanism to vary by range
81496315f [arm] Avoid unaligned accesses for memcpy() and memset()
338347465 [efi] Wrap a selection of runtime services calls
925af2b4d [efi] Allow SAN-booted images to be traced via DEBUG=efi_wrap
0a8e34657 [efi] Add image security database GUID definition
5c135240b [efi] Add Microsoft vendor GUID definition
5154b6fcc [efi] Add storage security command protocol header and GUID definition
27ec3c76a [efi] Update to current EDK2 headers
3a2f75b78 [efi] Mark Arm/ProcessorBind.h as a non-imported header
f0d978d8b [efi] Mark Ip4Config.h as a non-imported header
f9b9ef578 [efi] Mark UgaDraw.h as a non-imported header
c0ac23fc5 [efi] Switch back to VA_START() etc macros for EFIAPI functions
360aa7064 [efi] Skip including the EDK2 ProcessorBind.h header for 32-bit RISC-V
df7f59d47 [pci] Move ECAM pci_can_probe() definition to correct header file
b41bda441 [spcr] Accept alternative type value for a 16550-compatible UART
6d9374e5a [acpi] Allow acpi_ioremap() to map a port I/O address
bd3982b63 [ioapi] Allow iounmap() to be called for port I/O addresses
f2ea97102 [spcr] Use the serial port defined by the ACPI SPCR by default
595ff2403 [spcr] Add support for the ACPI Serial Port Console Redirection table
8fd5e2772 [acpi] Add acpi_ioremap() to map an ACPI-described address
08d4d7fe9 [uart] Make baud rate a property of the UART
a786c8d23 [uart] Support 16550 UARTs accessed via either MMIO or port I/O
f7de1b53d [ioapi] Provide combined MMIO and port I/O accessors
fde35ff00 [pci] Disable decoding while setting a BAR value
606e87ec7 [cloud] Display instance type in AWS EC2
0336e2987 [ena] Leave queue base address empty when creating a low latency queue
0ddd83069 [riscv] Correct page table stride calculation
426c721e3 [librm] Correct page table stride calculation
c8f088d4e [cloud] Display build architecture in AWS EC2
416a2143a [cloud] Remove AWS public image access block only if not already unblocked
ba1846a0d [cloud] Remove AWS public image access block automatically if needed
b2e846821 [ena] Limit receive queue size to work around hardware bugs
846c505ae [ena] Increase transmit queue size to match receive fill level
0ae5e25de [ena] Add memory barrier after writing to on-device memory
c296747d0 [ena] Increase receive fill level
c1badf71c [ena] Add support for low latency transmit queues
0d15d7f0a [ena] Record supported device features
e5e371f48 [ena] Cancel uncompleted transmit buffers on close
dcc5d36ce [ena] Map the on-device memory, if present
510f3e5e1 [ena] Add descriptive messages for any admin queue command failures
3538e9c39 [pci] Record prefetchable memory window for PCI bridges
04a61c413 [ena] Use pci_bar_set() to place device within bridge memory window
94902ae18 [pci] Handle sizing of 64-bit BARs
e80818e4f [tls] Disable renegotiation unless extended master secret is used
57504353f [tls] Refuse to resume sessions with mismatched master secret methods
ab64bc5b8 [tls] Add support for the Extended Master Secret
d6656106e [tls] Generate master secret only after sending Client Key Exchange
4f44f6240 [gve] Rearm interrupts unconditionally on every poll
f5ca1de73 [gve] Use raw DMA addresses in descriptors in DQO-QPL mode
1cc1f1cd4 [gve] Report only packet completions for the transmit ring
d2e1e591a [gve] Use dummy interrupt to trigger completion writeback in DQO mode
c2d7ddd0c [gve] Add missing memory barriers
543829964 [intelxl] Use default dummy MSI-X target address
4224f574d [pci] Map all MSI-X interrupts to a dummy target address by default
ce30ba14f [gve] Select preferred operating mode
74c9fd72c [gve] Add support for out-of-order queues
0d1ddfe42 [gve] Cancel pending transmissions when closing device
cf5349754 [bnxt] Handle link related async events
4508e1023 [gve] Allow for descriptor and completion lengths to vary by mode
20a489253 [gve] Rename GQI-specific data structures and constants
86b322d99 [gve] Allow for out-of-order buffer consumption
b8dd3c384 [gve] Add support for raw DMA addressing
9f554ec9d [gve] Add concept of a queue page list base device address
91db5b68f [gve] Set descriptor and completion ring sizes when creating queues
048a34670 [gve] Add concept of operating mode
610089b98 [gve] Remove separate concept of "packet descriptor"
ee9aea789 [gve] Parse option list returned in device descriptor
6464f2edb [bnxt] Add error recovery support
969ce2c55 [efi] Use current boot option as a fallback for obtaining the boot URI
c10da8b53 [efi] Add ability to extract device path from an EFI load option
5bec2604a [libc] Add wcsnlen()
61b4585e2 [efi] Drag in MNP driver whenever SNP driver is present
a53ec4493 [bnxt] Update CQ doorbell type
8460dc4e8 [dwgpio] Use fdt_reg() to get GPIO port numbers
88ba01176 [fdt] Provide fdt_reg() for unsized single-entry regions
9d4a2ee35 [cmdline] Show commands in alphabetical order
332241238 [digest] Treat inability to acquire an image as a fatal error
6fa901530 [digest] Add "--set" option to store digest value in a setting
f5467d69d [github] Extend sponsorship link
f45782f9f [digest] Add commands for all enabled digest algorithms
2e4e1f7e9 [dwgpio] Add driver for the DesignWare GPIO controller
90fe3a292 [gpio] Add a framework for GPIO controllers
5f10b7455 [fdt] Use phandle as device location
f7a1e9ef8 [dwmac] Show core version in debug messages
01b1028d4 [bnxt] Remove unnecessary test_if macro
6ca7a560a [bnxt] Remove unnecessary I/O macros
be551d420 [serial] Explicitly initialise serial console UART to NULL
a814c4605 [riscv] Place explicitly zero-initialised variables in the .data section
5bda1727b [riscv] Allow for poisoning .bss section before early initialisation
e3a6e9230 [undi] Assume that legacy interrupts are broken for any PCIe device
65b8a6e45 [pxeprefix] Display PCI vendor and device ID in PXE startup banner
fb082bd4c [fdt] Add ability to locate node by phandle
e01e5ff7c [dwusb] Add driver for DesignWare USB3 host controller
6c42ea127 [xhci] Allow for non-PCI xHCI host controllers
eca97c2ee [xhci] Use root hub port number to determine slot type
8a8904aad [efi] Check only the non-extended WaitForKey event
8701863a1 [efi] Allow compiler to perform type checks on EFI_EVENT
1e3fb1b37 [init] Show initialisation function names in debug messages
7ac4b3c6f [efi] Assume that vendor wireless drivers are unusable via SNP
c3376f864 [efi] Drop to external TPL for calls to ConnectController()
c01c3215d [efi] Provide efi_tpl_name() for transcribing TPLs in debug messages
434462a93 [riscv] Ensure coherent DMA allocations do not cross cacheline boundaries
d539a420d [riscv] Support the standard Svpbmt extension for page-based memory types
2aacb346c [riscv] Create coherent DMA mapping of 32-bit address space on demand
0611ddbd1 [riscv] Use 1GB pages for I/O device mappings
c2cdc1d31 [dwmac] Add driver for DesignWare Ethernet MAC
bbabde8ff [riscv] Invalidate data cache on completed RX DMA buffers
634d9abef [riscv] Add optimised TCP/IP checksumming
101ef74a6 [riscv] Provide a DMA API implementation for RISC-V bare-metal systems
22de0c4ed [dma] Use virtual addresses for dma_map()
06083d267 [build] Handle isohybrid with xorrisofs
e223b3251 [riscv] Support explicit cache management operations on I/O buffers
6a75115a7 [riscv] Add support for detecting T-Head vendor extensions
19f1407ad [iobuf] Ensure I/O buffer data sits within unshared cachelines
c21443f0b [uaccess] Allow for coherent DMA mapping of the 32-bit address space
d75d10df1 [riscv] Create coherent DMA mapping for low 4GB of address space
3fd54e4f3 [riscv] Construct invariant portions of page table outside the loop
6bc55d65b [bnxt] Update supported devices array
002062777 [bnxt] Update device descriptions
126366ac4 [bnxt] Remove VLAN stripping logic
4262328c1 [github] Add sponsorship link
54392f0d7 [bnxt] Increase Tx descriptors
e5953ed7e [build] Disable use of common symbols
8df3b9640 [build] Allow for the existence of small-data sections
d3e10ebd3 [legacy] Allocate legacy driver .bss-like segments at probe time
6ea800ab5 [legacy] Rename the global legacy NIC to "legacy_nic"
d0c02e0df [legacy] Allocate extra padding in receive buffers
97f40c5fc [pxe] Use a weak symbol for isapnp_read_port
c33ff76d8 [fdtcon] Add basic support for FDT-based system serial console
9ada09c91 [dwuart] Read input clock frequency from the device tree
0ed1dea7f [uart] Wait for 16550 UART to become idle before modifying LCR
2ce1b185b [serial] Allow platform to specify mechanism for identifying console
5d9f20bbd [dwuart] Add "ns16550a" compatible device ID
d1823eb67 [riscv] Inhibit SBI console when a serial console is active
25fa01822 [riscv] Serialise MMIO accesses with respect to each other
53a3befb6 [dwuart] Add a basic driver for the Synopsys DesignWare UART
cca1cfd49 [uart] Allow for dynamically registered 16550 UARTs
71b4bfb6b [uart] Add support for MMIO-accessible 16550 UARTs
6c8fb4b89 [uart] Allow for the existence of non-16550 UARTs
60e167c00 [uart] Remove ability to use frame formats other than 8n1
5783a10f7 [riscv] Write SBI console output to early UART, if enabled
41e65df19 [riscv] Maximise barrier effects of memory fences
7e96e5f2e [fdt] Allow paths and aliases to be terminated with separator characters
1de3aef78 [bnxt] Remove TX padding
3e8909cf5 [fdtmem] Limit relocation to 32-bit address space
c4a3d438e [dt] Allow for creation of standalone devices
b5fb7353f [ipv4] Add support for classless static routes
e648d23fb [ipv4] Extend routing mechanism to handle non-default routes
96f586466 [ipv4] Add self-tests for IPv4 routing
1ae75a3bd [test] Add infrastructure for test network devices
5b3ebf8b2 [riscv] Support T-Head CPUs using non-standard Memory Attribute Extension
817145fe0 [riscv] Do not set executable bit in early UART page mapping
7df005c4c [riscv] Add fences around early UART writes
88cffd75a [riscv] Zero SATP after any failed attempt to enable paging
bb2011241 [dt] Locate parent node at point of use in dt_ioremap()
1762568ec [fdt] Provide ability to locate the parent device node
d64250918 [fdt] Add tests for device tree creation
3fe321c42 [riscv] Add support for a SiFive-compatible early UART
2e27d772c [riscv] Support mapping early UARTs outside of the identity map
98fdfdd25 [riscv] Add support for writing prefix debug messages direct to a UART
2e8d45aee [riscv] Create macros for writing characters to the debug console
6eb51f1a6 [riscv] Ignore riscv,isa property in favour of direct CSR testing
192cfc3cc [image] Use image name rather than pointer value in all debug messages
eae9a2754 [riscv] Support mapping I/O devices outside of the identity map
6af4a022b [fdtmem] Ignore reservation regions with no fixed addresses
56f5845b3 [riscv] Include carriage returns in libprefix.S debug messages
09140ab2c [memmap] Allow explicit colour selection for memory map debug messages
8d88870da [riscv] Support older SBI implementations
036e43334 [memmap] Rename addr/last fields to min/max for clarity
cd38ed4fa [lkrn] Support initrd construction for RISC-V bare-metal kernels
c713ce5c7 [initrd] Squash and shuffle only initrds within the external heap
4a39b877d [initrd] Split out initrd construction from bzimage.c
11929389e [initrd] Allow for images straddling the top of the reshuffle region
029c7c417 [initrd] Rename bzimage_align() to initrd_align()
9231d8c95 [initrd] Swap initrds entirely in-place via triple reversal
11e01f065 [uheap] Expose external heap region directly
e05604107 [uheap] Prevent allocation of blocks with zero physical addresses
b9095a045 [fdtmem] Allow iPXE to be relocated to the top of the address space
a53456334 [riscv] Speed up memmove() when copying in forwards direction
20d2c0f78 [lkrn] Shut down devices before jumping to kernel entry point
969e8b546 [lkrn] Allow a single initrd to be passed to the booted kernel
9bc559850 [fdt] Allow an initrd to be specified when creating a device tree
c1cd54ad7 [initrd] Move initrd reshuffling to be architecture-independent code
d15a11f3a [image] Use image replacement when executing extracted images
e2f4dba2b [lkrn] Add support for EFI zboot compressed kernel images
ecac4a34c [lkrn] Add basic support for the RISC-V Linux kernel image format
d0c35b682 [bios] Use generic external heap based on the system memory map
140ceeeb0 [riscv] Use generic external heap based on the system memory map
4d560af2b [uheap] Add a generic external heap based on the system memory map
490f1ecad [malloc] Allow heap to specify block and pointer alignments
c6ca3d3af [malloc] Allow for the existence of multiple heaps
83449702e [memmap] Remove now-obsolete get_memmap()
624d76e26 [bios] Use memmap_describe() to find an external heap location
79c30b92a [settings] Use memmap_describe() to construct memory map settings
c8d64ecd8 [bios] Use memmap_describe() to find a relocation address
dbc86458e [comboot] Use memmap_describe() to obtain available memory
d0adf3b4c [multiboot] Use memmap_describe() to construct Multiboot memory map
25ab8f462 [image] Use memmap_describe() to check loadable image segments
a353e7080 [memmap] Use memmap_dump_all() to dump debug memory maps
3812860e3 [bios] Describe umalloc() heap as an in-use memory area
4c4c94ca0 [bios] Update to use the generic system memory map API
3f6ee9573 [fdtmem] Update to use the generic system memory map API
bab3d7671 [memmap] Define an API for managing the system memory map
f6f11c101 [tests] Remove prehistoric umalloc() test code
e0c4cfa81 [fdtmem] Record size of accessible physical address space
64ad1d03c [bios] Rename memmap.c to int15.c
1dd9ac13f [bnxt] Use updated DMA APIs
08edad7ca [bnxt] Return proper error codes in probe
4d39b2dcc [crypto] Remove redundant null pointer check
d1c1e578a [riscv] Add a .pf32 build target for padded parallel flash images
6fd927f92 [riscv] Perform a writability test before applying relocations
4566f5975 [riscv] Avoid potentially overwriting the scratch area during relocation
8e38af800 [riscv] Add a .lkrn build target resembling a Linux kernel binary
17fd67ce0 [riscv] Relocate to a safe physical address on startup
3dfc88158 [riscv] Construct page tables based on link-time virtual addresses
c45dc4a55 [riscv] Allow apply_relocs() to use non-inline relocation records
420e475b1 [riscv] Return accessible physical address space size from enable_paging()
6fe9ce66a [fdtmem] Add ability to parse FDT memory map for a relocation address
2e45106c0 [riscv] Ensure that prefix_virt is aligned on an xlen boundary
95ede670b [riscv] Hold virtual address offset in the thread pointer register
f988ec09e [fdt] Generalise access to "reg" property
3027864f1 [riscv] Use load and store pseudo-instructions where possible
134d76379 [build] Formalise mechanism for accessing absolute symbols
1d58d928f [libc] Display assertion failure message before incrementing counter
8fe3c68b3 [riscv] Add support for disabling 64-bit and 32-bit paging
5b19ddbb3 [riscv] Return virtual address offset from enable_paging()
5e518c744 [riscv] Restore temporarily modified PTE within 32-bit transition code
0279015d0 [uaccess] Generalise librm's virt_offset mechanism for RISC-V
e8a6c2657 [build] Constrain PHYS_CODE() and REAL_CODE() to use i386 registers
12dee2dab [riscv] Add debug printing of hexadecimal values in libprefix.S
72c81419b [riscv] Move prefix system reset code to libprefix.S
764183504 [riscv] Add basic debug progress messages in libprefix.S
9445a9ff4 [riscv] Provide a millicode variant of print_message()
dc9e6f0ed [riscv] Move prefix debug message printing to libprefix.S
b3cbdc86f [riscv] Place prefix debug strings in .rodata
4bef4c806 [riscv] Use compressed relocation records
8f7aa292a [riscv] Place .got and .got.plt in .data
e37e3f17e [riscv] Discard ELF hash tables
70bb5e5e6 [zbin] Allow for constructing compressed dynamic relocation records
98646b9f0 [build] Allow for 32-bit and 64-bit versions of util/zbin
4c11737d5 [riscv] Add support for enabling 32-bit paging
a32f3c2bc [riscv] Add support for enabling 64-bit paging
dad206026 [riscv] Allow for a non-zero link-time address
a4b5dd63c [riscv] Split out runtime relocator to libprefix.S
1534b0a6e [uaccess] Remove redundant virt_to_user() and userptr_t
a169d7359 [uaccess] Reduce scope of included uaccess.h header
05ad7833c [image] Make image data read-only to most consumers
cd803ff2e [image] Add the concept of a static image
330391001 [image] Move embedded images from .rodata to .data
2d9a6369d [test] Separate read-only and writable CMS test images
b6f9e4bab [uaccess] Remove redundant copy_from_user() and copy_to_user()
a69c42dd9 [image] Clear recorded replacement image immediately after consuming
9962c0a58 [bofm] Remove userptr_t from BOFM table parsing and updating
080072384 [bofm] Allow BOFM tests to be run without a BOFM-capable device driver
4e909cc2b [build] Remove some long-obsolete unused header files
6c9dc063f [peerdist] Remove never-used peerdist_msg_blk() macro
54c4217bd [peerdist] Remove userptr_t from PeerDist content information parsing
837b77293 [xferbuf] Simplify and generalise data transfer buffers
43fc51629 [prefix] Remove userptr_t from command line image construction
c9fb94dba [comboot] Remove userptr_t from COM32 API implementation
f001e61a6 [comboot] Remove userptr_t from COMBOOT API implementation
ef9711958 [comboot] Remove userptr_t from COMBOOT image parsing
0b45db397 [uaccess] Remove redundant UNULL definition
6ccb6bcfc [bzimage] Remove userptr_t from bzImage parsing
412ad5601 [initrd] Use physical addresses for calculations on initrd locations
ef3827cf1 [bzimage] Use image name in debug messages
083e273bb [efi] Add ability to reboot to firmware setup menu
7eaa2daf6 [reboot] Generalise warm reboot indicator to a flags bitmask
ba2135d0f [multiboot] Remove userptr_t from Multiboot and ELF image parsing
c8c5cd685 [multiboot] Use image name in Multiboot and ELF debug messages
3befb5eb5 [linux] Enable compiler warnings when building the linux_api.o object
024439f33 [linux] Add missing return statement to linux_poll()
bd4ca67cf [build] Disable gcc unterminated-string-initializer warnings
15c1111c7 [build] Remove unsafe disable function wrapper from legacy NIC drivers
7741756af [build] Prevent the use of reserved words in C23
b816b816a [build] Fix old-style function definition
58e6729cb [build] Fix typo in xenver.h header guard
4c8bf666f [pnm] Remove userptr_t from PNM image parsing
d29651dde [png] Remove userptr_t from PNG image parsing
76a17b098 [fbcon] Avoid redrawing unchanged characters when scrolling
aa3cc56ab [fbcon] Remove userptr_t from framebuffer console drivers
4cca1cadf [efi] Remove userptr_t from EFI PE image parsing
338cebfee [pxe] Remove userptr_t from PXE file API implementation
8b3b4f245 [pxe] Remove userptr_t from PXE API call dispatcher
c1b558f59 [cmdline] Remove userptr_t from "digest" command
0edbc4c08 [nbi] Remove userptr_t from NBI image parsing
3cb33435f [sdi] Remove userptr_t from SDI image parsing
d7c94c4aa [pxe] Remove userptr_t from PXE NBP image parsing
2f11f466e [block] Remove userptr_t from block device abstraction
2742ed5d7 [uaccess] Remove now-obsolete memchr_user()
4f4f6c33e [script] Remove userptr_t from script image parsing
8923a216b [ucode] Remove userptr_t from microcode image parsing
605cff4c8 [ucode] Remove userptr_t from microcode update mechanism
f18c1472e [thunderx] Replace uses of userptr_t with direct pointer dereferences
8ac03b4a7 [exanic] Replace uses of userptr_t with direct pointer dereferences
e8ffe2cd6 [uaccess] Remove trivial uses of userptr_t
945df9b42 [gve] Replace uses of userptr_t with direct pointer dereferences
839540cb9 [umalloc] Remove userptr_t from user memory allocations
0bf0f8716 [smbios] Remove userptr_t from SMBIOS structure parsing
0b3fc48fe [acpi] Remove userptr_t from ACPI table parsing
c059b3417 [deflate] Remove userptr_t from decompression code
b89a34b07 [image] Remove userptr_t from image definition
e98b84f1b [crypto] Remove userptr_t from CMS verification and decryption
3f8937d2f [crypto] Remove userptr_t from ASN.1 parsers
04d0b2fdf [uaccess] Remove redundant read_user()
050df80bb [uaccess] Replace real_to_user() with real_to_virt()
8c31270a2 [uaccess] Remove user_to_phys() and phys_to_user()
4535548cb [uaccess] Remove redundant user_to_virt()
89fe78868 [uaccess] Remove redundant memcpy_user() and related string functions
ef0384918 [uaccess] Remove redundant userptr_add() and userptr_diff()
b65f67d44 [uaccess] Change userptr_t to be a pointer type
71174e19d [uaccess] Add explicit casts to and from userptr_t where needed
63d27c631 [uaccess] Rename userptr_sub() to userptr_diff()
453acba7d [time] Use currticks() to provide the null system time
423cdbeb3 [riscv] Map DEL to backspace on the SBI debug console
1291dc39f [cgem] Add a driver for the Cadence GEM NIC
0c482060d [undi] Work around broken ASUSTeK KNPA-U16 server PXE ROM
758a50486 [efi] Inhibit calls to Shutdown() for wireless SNP devices
b07cc851f [netdevice] Add the concept of an insomniac network device
c88ebf2ac [efi] Allow for custom methods for disconnecting existing drivers
eeec6442d [dt] Provide dt_ioremap() to map device registers
99322fd3b [fdt] Add fdt_cells() to read cell-based properties such as "reg"
2c406ec0b [netdevice] Add missing bus type identifier for devicetree devices
424839c58 [crypto] Allow for explicit control of external trust sources
37e9f785b [dt] Add basic concept of a devicetree bus
d462aeb0c [fdt] Remove concept of a device tree cursor
b1125007c [fdt] Add basic tests for reading values from a flattened device tree
db4934617 [fdt] Avoid temporarily modifying path during path lookup
c887de208 [fdt] Provide fdt_strings() to read string list properties
69af6f0c3 [fdt] Allow for trailing slashes in path lookups
96dfaa7e7 [crypto] Switch to using python-asn1crypto instead of python-asn1
7e64e9b67 [fdt] Populate boot arguments in constructed device tree
d85344888 [fdt] Identify free space (if any) at end of parsed tree
0a48bb321 [x509] Ensure certificate remains valid during x509_append()
a289b4b8c [tls] Support fragmentation of transmitted records
f115cfcf9 [tls] Send an empty client certificate chain if we have no certificate
5818529f3 [iobuf] Limit automatic I/O buffer alignment to page size
7fe467a46 [tls] Encrypt data in place to reduce memory usage
d92551a32 [xfer] Use xfer_alloc_iob() for transmit I/O buffers on stream sockets
3937c893a [isa] Disable legacy ISA device probing by default
4a7f64bf4 [efi] Allow for fact that SNP device may be removed by executed image
18dbd05ed [efi] Check correct return value from efi_pxe_find()
4bcaa3d38 [efi] Disconnect existing drivers on a per-protocol basis
7737fec5c [efi] Define an attachment priority order for EFI drivers
be3322475 [efi] Show all drivers claiming support for a handle in debug messages
ea5762d9d [efi] Return success from Stop() if driver is already stopped
7adce3a13 [efi] Add various well-known GUIDs encountered in WiFi boot
b20f506a7 [efi] Install a device tree for the booted OS, if available
761f43ce1 [fdt] Provide the ability to create a device tree for a booted OS
666929e31 [efi] Create a copy of the system flattened device tree, if present
3860313dd [fdt] Allow for parsing device trees where the length is known in advance
2399c7998 [fdt] Allow for the existence of multiple device trees
09fbebc08 [fdt] Add the "fdt" command
cfd93465e [fdt] Add the concept of an FDT image
98f86b4d0 [efi] Add support for installing EFI configuration tables
f0caf90a7 [efi] Add flattened device tree header and GUID definitions
ec8c5a5fb [efi] Add ACPI and SMBIOS tables as well-known GUIDs
0b606221c [undi] Ensure forward progress is made even if UNDI IRQ is stuck
4134280bc [pxeprefix] Ensure that UNDI IRQ is disabled before starting iPXE
e8365f7a5 [pxeprefix] Work around missing type values from PXENV_UNDI_GET_NIC_TYPE
32a940821 [efi] Allow use of typed pointers for efi_open() et al
37897fbd4 [efi] Eliminate uses of HandleProtocol()
bac318743 [efi] Use efi_open() for all ephemeral protocol opens
5a5e2a1da [efi] Use efi_open_unsafe() for all explicitly unsafe protocol opens
9dd30f11f [efi] Use efi_open_by_driver() for all by-driver protocol opens
4561a0376 [efi] Use efi_open_by_child() for all by-child protocol opens
358db1561 [efi] Create safe wrappers for OpenProtocol() and CloseProtocol()
48d168012 [efi] Remove the efipci_open() and efipci_close() wrappers
328388532 [efi] Avoid function name near-collision
331bbf507 [efi] Remove spurious close of SNP device parent's device path
8249bbc09 [efi] Use driver name only from driver binding handles in debug messages
02ecb23d1 [efi] Get veto candidate driver name via either component name protocol
756e3907f [efi] Get veto candidate driver name from image handle
be5bf0aa7 [efi] Show image address range in veto debug messages
5d64469a9 [efi] Prefer driver name to device path for debug messages
7cda3dbf9 [efi] Attempt to retrieve driver name from image handle for debug messages
1a602c92a [efi] Allow wrapping the global boot services table in situ
f68c8b09e [efi] Fix debug wrappers for CloseEvent() and CheckEvent()
37ea181d8 [efi] Ignore path separator characters in virtual filenames
6e4196baf [efi] Prescroll the display after a failed wrapped ExitBootServices() call
8ea8411f0 [efi] Add EFI_RNG_PROTOCOL_GUID as a well-known GUID
42a29d568 [crypto] Update cmsdetach to work with python-asn1 version 3.0.0
829e2d1f2 [rng] Restore state of IRQ 8 and PIE when disabling entropy gathering
8840de409 [pic8259] Return previous state when enabling or disabling IRQs
d1133956d [contrib] Update bochsrc.txt to work with current versions
ddc2d928d [efi] Accept and trust CA certificates in the TlsCaCertificates variable
aa49ce5b1 [efi] Add TLS authentication header and GUID definitions
2a901a33d [efi] Add EFI_GLOBAL_VARIABLE as a well-known GUID
da3024d25 [cpio] Allow for the construction of pure directories
d6ee9a924 [cpio] Fix calculation of name lengths in CPIO headers
5f3ecbde5 [crypto] Support extracting certificates from EFI signature list images
26a8fed71 [crypto] Allow for parsing of DER data separate from DER images
011c778f0 [efi] Allow efi_guid_ntoa() to be used in non-EFI builds
8706ae36d [efi] Add EFI_SIGNATURE_LIST header and GUID definitions
a3ede1078 [efi] Update to current EDK2 headers
32d706a9f [build] Use -fshort-wchar when building EFI host utilities
82fac5162 [efi] Mark UsbHostController.h as a non-imported header
be3a78eaf [lkrnprefix] Support a longer version string
12ea8c407 [cpio] Allow for construction of parent directories as needed
e7595fe88 [menu] Allow a post-activity timeout to be defined
ccd620054 [crypto] Start up RBG on demand if needed
b35300fc6 [efi] Increase download timeout for autoexec.ipxe
8e6b914c5 [crypto] Support direct reduction only for Montgomery constant R^2 mod N
5056e8ad9 [crypto] Expose shifted out bit from big integer shifts
bd90abf48 [bnxt] Allocate TX rings with firmware input
77cc3ed10 [malloc] Ensure free memory blocks remain aligned
6f076efa6 [malloc] Clean up debug messages
c85de315a [crypto] Add definitions and tests for the NIST P-384 elliptic curve
bc5f3dbe3 [crypto] Add definitions and tests for the NIST P-256 elliptic curve
be9ce4907 [crypto] Add support for Weierstrass elliptic curve point multiplication
66b5d1ec8 [crypto] Add a generic implementation of a Montgomery ladder
c2f21a218 [test] Add generic tests for elliptic curve point multiplication
c9291bc5c [tls] Allow for NIST elliptic curve point formats
df7ec3176 [crypto] Generalise elliptic curve key exchange to ecdhe_key()
cc38d7dd3 [crypto] Add bigint_ntoa() for transcribing big integers
d88eb0a19 [crypto] Extract bigint_reduce_supremum() from bigint_mod_exp()
83ba34076 [crypto] Allow for relaxed Montgomery reduction
c0cbe7c2e [efi] Add EFI_TCG2_PROTOCOL header and GUID definition
8816ddcd9 [efi] Update to current EDK2 headers
97079553b [crypto] Calculate inverse of modulus on demand in bigint_montgomery()
24db39fb2 [gve] Run startup process only while device is open
5202f8334 [crypto] Remove obsolete bigint_mod_multiply()
83ac98ce2 [crypto] Use Montgomery reduction for modular exponentiation
4f7dd7fbb [crypto] Add bigint_montgomery() to perform Montgomery reduction
96f385d7a [crypto] Use inverse size as effective size for bigint_mod_invert()
7c2e68cc8 [crypto] Eliminate temporary working space for bigint_mod_invert()
9cbf5c4f8 [crypto] Eliminate temporary working space for bigint_reduce()
167a08f08 [crypto] Expose carry flag from big integer addition and subtraction
da6da6eb3 [crypto] Add bigint_msb_is_set() to clarify code
e9a23a5b3 [efi] Ensure local drives are connected when attempting a SAN boot
8fc11d8a4 [build] Allow for per-architecture cross-compilation prefixes
19f44d299 [riscv] Check if seed CSR is accessible from S-mode
e0e102ee2 [sbi] Add support for running as a RISC-V SBI payload
7ccd08dbf [build] Allow default platform to vary by architecture
d9c0d26e1 [pci] Provide a null PCI API for platforms with no PCI bus
06a933000 [riscv] Add missing volatile qualifiers on timer and seed CSR accesses
be0c9788a [riscv] Add support for the seed CSR as an entropy source
cd54e7c84 [riscv] Add support for RDTIME as a timer source
b0a8eabbf [riscv] Add support for checking CPU extensions reported via device tree
74710b831 [fdt] Add ability to parse unsigned integer properties
cc45ca372 [pci] Drag in PCI settings mechanism only when PCI support is present
abfa7c3ab [uaccess] Rename UACCESS_EFI to UACCESS_FLAT
33d80b1cd [smbios] Provide a null SMBIOS API for platforms with no concept of SMBIOS
21940425c [riscv] Add support for reboot and power off via SBI
b23204b38 [riscv] Add support for the SBI debug console
fa1c24d14 [crypto] Add bigint_mod_invert() to calculate inverse modulo a power of two
c69f9589c [usb] Expose USB device descriptor and strings via settings
c219b5d8a [usb] Add "usbscan" command for iterating over USB devices
2bf16c6ff [crypto] Separate out bigint_reduce() from bigint_mod_multiply()
f78c5a763 [crypto] Use architecture-independent bigint_is_set()
7e0bf4ec5 [crypto] Rename bigint_rol()/bigint_ror() to bigint_shl()/bigint_shr()
3f4f84392 [crypto] Eliminate temporary carry space for big integer multiplication
8844a3d54 [arm] Support building as a Linux userspace binary for AArch32
e0282688c [arm] Check PMCCNTR availability before use for profiling
5f7c6bd95 [profile] Standardise return type of profile_timestamp()
3def13265 [crypto] Use constant-time big integer multiplication
59d123658 [gve] Allocate all possible event counters
9bb206863 [efi] Remove redundant EFI_BOOT_FILE definitions
c215048dd [riscv] Add support for the RISC-V CPU architecture
68db9a3cb [linux] Allow a sysroot to be specified via SYSROOT=...
670810bed [efi] Use standard va_args macros instead of VA_START() etc
1d43e535f [test] Add tests for 64-bit logical and arithmetic shifts
c85ad1246 [efi] Centralise definition of efi_cpu_nap()
5de5d4626 [libc] Centralise architecture-independent portions of setjmp.h
a1830ff43 [cloud] Add ability to delete old AMI images
49f9e036f [cloud] Add family and architecture tags to AWS snapshots and images
f88761ef4 [ena] Change reported operating system type to "iPXE"
2b8200757 [gdb] Allow CPU architectures to omit support for GDB
804f35cb5 [build] Centralise dummy architecture-specific headers
c7f2e7551 [aqc1xx] Add support for Marvell AQtion Ethernet controller
7f75d320f [etherfabric] Fix use of uninitialised variable in falcon_xaui_link_ok()
301644ab4 [test] Add CMS decryption self-tests
5e69cf08d [crypto] Allow cms_decrypt() to be called on unregistered images
72316b820 [image] Add the "imgdecrypt" command
486b15b3c [crypto] Support decryption of images via CMS envelopes
49404bfea [image] Split image_strip_suffix() out from image_extract()
748cab774 [crypto] Add cmsdetach script for detaching encrypted data from CMS messages
b053ba198 [test] Update CMS self-test terminology
4b4a362f0 [crypto] Allow for extraction of ASN.1 algorithm parameters
bdb5b4aef [crypto] Hold CMS message as a single ASN.1 object
46937a9df [crypto] Remove the concept of a public-key algorithm reusable context
acbabdb33 [tls] Group client and server state in TLS connection structure
c9cac76a5 [tls] Group transmit and receive state in TLS connection structure
be2784649 [gve] Add missing error codes in EUNIQ() list of potential errors
ab5743efc [contrib] Remove obsolete rom-o-matic code
633f4f362 [test] Generalise public-key algorithm tests and use okx()
53f089b72 [crypto] Pass asymmetric keys as ASN.1 cursors
950f6b586 [efi] Allow discovery of PCI bus:dev.fn address ranges
7c82ff0b6 [pci] Separate permission to probe buses from bus:dev.fn range discovery
9d9465b14 [crypto] Fix debug name for empty certificate chain validators
97635eb71 [crypto] Generalise cms_signature to cms_message
998edc6ec [crypto] Add OID-identified algorithms for AES ciphers
3b4d0cb55 [crypto] Pass image as parameter to CMS functions
96fb7a0a9 [crypto] Allow passing a NULL certificate store to x509_find() et al
d85590b65 [crypto] Centralise mechanisms for identifying X.509 certificates
59e2b03e6 [crypto] Extend asn1_enter() to handle partial object cursors
0e73b48f7 [crypto] Clarify ASN.1 cursor invalidation behaviour
309ac8fd2 [crypto] Do not return an error when skipping the final ASN.1 object
a064d3976 [cpuid] Allow hypervisor CPUID leaves to be accessed as settings
121d96b90 [cpuid] Allow reading hypervisor CPUID leaves
c117e6a48 [smbios] Allow reading an entire SMBIOS data structure as a setting
60d682409 [smbios] Avoid reading beyond end of constructed SMBIOS setting
0dc8933f6 [cloud] Add utility to read INT13CON partition in Google Compute Engine
d2d194bc6 [gve] Increase number of receive buffers to reduce packet loss
c7b76e3ad [gve] Add driver for Google Virtual Ethernet NIC
5a9f476d4 [cloud] Add utility for importing images to Google Compute Engine
b66e27d9b [ipv6] Expose router address for DHCPv6 leased addresses
77acf6b41 [ipv4] Support small subnets with no directed broadcast address
821bb326f [hci] Remove the generalised widget user interface abstraction
162cc51b6 [form] Reimplement the "login" user interface
f417f0b6a [form] Add support for dynamically created interactive forms
1c3c5e2b2 [dynui] Add concept of a secret user interface item
039019039 [dynui] Allow for multiple flags on a user interface item
c8e50bb0f [dynui] Generalise mechanisms for looking up user interface items
5719cde83 [dynui] Generalise the concept of a menu to a dynamic user interface
122777f78 [hci] Allow tab key to be used to cycle through UI elements
76e0933d7 [hci] Rename "item" command's first parameter from "label" to "name"
bf98eae5d [hci] Split out msg() and alert() from settings UI code
bb4a10696 [hci] Draw all widgets on the standard screen
e965f179e [libc] Add stpcpy()
dc118c536 [hci] Provide a general concept of a text widget set
d7e58c5a8 [test] Add test cases for editable strings
b01781a2b [hci] Fix semantics of replace_string() to match code comments
cb95b5b37 [efi] Veto the Dhcp6Dxe driver on all platforms
40b511244 [hci] Use dynamically allocated buffers for editable strings
27ecc36c0 [efi] Do not attempt to download autoexec.ipxe without a valid base URI
59f27d693 [netdevice] Add "linktype" setting
165995b7e [efi] Restructure handling of autoexec.ipxe script
b940d5423 [cachedhcp] Allow cached DHCPACK to apply to temporary network devices
b66f6025f [efi] Add the ability to create a temporary MNP network device
b52b4a46d [efi] Allow for allocating EFI devices from arbitrary handles
764e34f15 [http] Add error table entry for HTTP 404 Not Found error
afae88178 [tftp] Add error table entry for TFTP "file not found" error code
43deab89c [efi] Add error table entry for local filesystem EFI_NOT_FOUND error
19f39bc07 [efi] Report local file errors during download, rather than on opening
f39b48d5f [image] Allow opaque URI component to provide image name
37850e0e8 [build] Fix build failures with random versions of gcc
9bbe77669 [efi] Extract basic network settings from loaded image device path
170bbfd48 [efi] Add efi_path_mac() to parse a MAC address from an EFI device path
dcad73ca5 [efi] Add support for driving EFI_MANAGED_NETWORK_PROTOCOL devices
da5188f3e [efi] Allow for drivers to be located via child handles
ca483a196 [efi] Add helper functions for service binding protocols
a15ce0018 [efi] Match chainloaded device by uppermost matching handle
390bce951 [efi] Set current working URI from our own device path URI, if present
1a84facf1 [efi] Add efi_path_uri() to parse a URI from an EFI device path
88c2a01e1 [settings] Expose current working URI and directory URI via settings
926816c58 [efi] Pad transmit buffer length to work around vendor driver bugs
c11734eee [golan] Use ETH_HLEN for inline header size
fa4bda617 [build] Fix building on older versions of gcc
bac967d51 [snp] Allocate additional padding for receive buffers
17882e76a [ucode] Add support for updating x86 microcode
1344e13a0 [bios] Provide a multiprocessor API for BIOS
a67f913d6 [librm] Add support for installing a startup IPI handler
89bb926a0 [efi] Provide a multiprocessor API for EFI
1ab4d3079 [mp] Define an API for multiprocessor functions
df2f23e33 [efi] Update to current EDK2 headers
226531ed3 [ci] Update action versions to silence GitHub warnings
06e229590 [efi] Do not report return status from efi_block_local()
24a855f1f [block] Allow SAN boot device to be identified by filesystem label
62b6d3633 [block] Allow SAN boot device to be identified by an extra filename
cea22d76e [block] Allow SAN boot device to be identified by UUID
c4471e340 [efi] Add efi_path_guid() utility function
636ccb4ca [block] Allow for additional SAN boot parameters alongside filename
b1c13cc43 [efi] Allow booting from local disks via the "sanboot" command
8da22a59e [block] Allow for iteration over SAN device list in drive number order
37edfea72 [efi] Generalise block device boot to support arbitrary EFI handles
eb720d222 [efi] Use file system protocol to check for SAN boot filename existence
75c790448 [block] Use drive number as debug message stream ID
1b23d4de2 [efi] Use long forms of device paths in debug messages
7cd73884e [parseopt] Add parse_uuid() for parsing UUID command-line arguments
0eb8fbd0b [settings] Add parsing for UUID and GUID settings types
da7b26628 [uuid] Add uuid_aton() to parse a UUID from a string
182ee9093 [efi] Work around broken boot services table manipulation by UEFI shim
43e385091 [eap] Add support for the MS-CHAPv2 authentication method
25ffcd79b [eap] Allow MD5-Challenge authentication method to be disabled
834f319f8 [eap] Add progress debug messages
ee6185dcf [efi] Ignore new LoongArch PC-relative relocations and relaxations
e5f3ba0ca [drivers] Sort PCI_ROM() entries numerically
582132fe3 [crypto] Force inlining of trivial wrapper functions
075292cc2 [crypto] Add implementation of MS-CHAPv2 authentication
929f06a76 [crypto] Allow for multiple cross-signed certificate download attempts
943d75b55 [crypto] Add x509_is_self_signed() helper function
3e721e0c0 [crypto] Add x509_truncate() to truncate a certificate chain
e10dfe5dc [list] Add list_for_each_entry_safe_continue()
88b291d64 [list] Add list_is_head_entry()
94b39fbe9 [build] Fix build failures with older versions of gcc
0f5abd8b1 [libc] Allow build_assert() failures to be ignored via NO_WERROR=1
a846c4ccf [bnxt] Add support for BCM957608
e7ae51b0d [crypto] Add implementation of the DES cipher
af4583b21 [test] Remove dummy initialisation vector for ECB-mode AES tests
36a27b22b [crypto] Fix stray references to AES
0cc0f4744 [tls] Tidy up error handling flow in tls_send_plaintext()
65d69d33d [efi] Fix hang during ExitBootServices()
963ec1c4f [tls] Add ECDHE cipher suites
8f6a9399b [tls] Make key exchange algorithms selectable via build configuration
a881a2606 [crypto] Add X25519 OID-identified algorithm and TLS named curve
b234226db [tls] Add support for Ephemeral Elliptic Curve Diffie-Hellman key exchange
8e2469c86 [tls] Split out Diffie-Hellman parameter signature verification
989dbe0bc [tls] Generate key material after sending ClientKeyExchange
6f70e8be8 [tls] Restructure construction of ClientHello message
17135c83f [crypto] Add an abstraction of an elliptic curve
27398f136 [crypto] Check for all-zeros result from X25519 key exchange
de8a0821c [bnxt] Add support for additional chip IDs
2eea04c02 [crypto] Add X25519 key exchange algorithm
908174ec7 [loong64] Replace broken big integer arithmetic implementations
bac13ba1f [crypto] Add bigint_swap() to conditionally swap big integers
13e390d54 [crypto] Add bigint_copy() as a convenient wrapper macro
26d3ef062 [crypto] Allow multiplicand and multiplier to differ in size
4b7d9a6af [libc] Replace linker_assert() with build_assert()
6d29415c8 [libc] Make static_assert() available via assert.h
6ca597eee [build] Fix building with newer binutils
e66552eee [build] Remove unnecessary ".text" directives
08fcb0e8f [eap] Add support for the MD5-Challenge authentication type
c6226f104 [eap] Add support for sending an EAP identity
0abb3e85e [eap] Ignore any received EAP responses
4ed7a5718 [build] Reduce scope of wildcard .gitignore rules
fa6221323 [smbios] Support scanning for the 64-bit SMBIOS3 entry point
119c415ee [intel] Add PCI ID for I219-LM (23)
9e92c3989 [efi] Add potentially missing relocation types
3fc1b407d [efi] Fix Coverity warning about unintended sign extension
0958e0146 [efi] Add relocation types generated by clang
337880dea [build] Use SOURCE_DATE_EPOCH for FAT serial number if it exists
f22879ca9 [efi] Allow compiling elf2efi with clang
98dd25a3b [efi] Avoid modifying PE/COFF debug filename
a147245f1 [efi] Extend PE header size to cover space up to first section
c3dd3168c [efi] Fix dependency list construction in EDK2 header import script
b829b1750 [efi] Maximise image base address
03ff1bb99 [efi] Do not assume canonical PE section ordering
18582a05f [efi] Treat 16-bit sections as hidden in hybrid binaries
6714b20ea [efi] Place PE debug information in a hidden section
b37d89db9 [efi] Fix recorded overall size of headers in NT optional header
cc858acd3 [efi] Write out PE header only after writing sections
b30a0987e [efi] Use load memory address as file offset for hybrid binaries
3d8a61465 [efi] Mark PE images as large address aware
a9e89787d [efi] Set NXCOMPAT bit in PE header
678a60f61 [efi] Treat writable sections as data sections
8c8ead253 [efi] Update to current EDK2 headers
77b07ea4f [cloud] Add utility script to read iPXE output from INT13CON partition
d8f9c221e [cloud] Add ability to overwrite existing AMI images
595b1796f [eapol] Limit number of EAPoL-Start packets transmitted per attempt
1bd01b761 [eapol] Delay EAPoL-Start while waiting for EAP to complete
5524bb983 [pci] Require discovery of a PCI device when determining usable PCI APIs
36e1a559a [pci] Check that ECAM configuration space is within reachable memory
1f3a37e34 [pci] Cache ECAM mapping errors
74ec00a9f [pci] Handle non-zero starting bus in ECAM allocations
f88320313 [pci] Force completion of ECAM configuration space writes
115707c0e [iphone] Add missing va_start()/va_end() around reused argument list
ff0f86048 [libc] Use wall clock time as seed for the (non-cryptographic) RNG
8b14652e5 [eapol] Send EAPoL-Start packets to trigger EAP authentication
56cc61a16 [eap] Define a supplicant model for EAP and EAPoL
cac3a584d [fcoe] Use driver-private data to hold FCoE port structure
8cbf24819 [vmware] Use driver-private data to hold GuestInfo settings block
8b1d34bad [ipv6] Use driver-private data to hold link-local IPv6 settings block
cc1e27e52 [lldp] Use driver-private data to hold LLDP settings block
ae4e85bde [netdevice] Allocate private data for each network upper-layer driver
eeb7cd56e [netdevice] Remove netdev_priv() helper function
0aa2e4ec9 [librm] Use explicit operand size when pushing a label address
9e99a55b3 [virtio] Fix implementation of vpm_ioread32()
c1834f323 [dhcp] Request NTP server option
d5c08f78b [ntp] Define NTP server setting
c30b71ee9 [console] Restore compatibility with "--key" values in existing scripts
f3036fc21 [linux] Set a default MAC address for tap devices
59d065c9a [linux] Fix error control flow in af_packet_nic_probe()
48ae5d536 [linux] Fix error control flow in tap_probe()
6701d91c5 [netdevice] Stop link block timer when device is closed
b5b60ea33 [interface] Fix debug message values for temporary interfaces
824441069 [build] Inhibit more linker warnings about an implied executable stack
daa9e54ab [build] Silence the "creating blib.a" message
3ef4f7e2e [console] Avoid overlap between special keys and Unicode characters
cc07ed7c7 [console] Avoid overlap between remapping flags and character values
6f57d9193 [build] Use separate code segment if supported by linker
e17568ad0 [build] Inhibit linker warnings about an implied executable stack
2524a6055 [build] Avoid using multiple target patterns in pattern rules
280942a92 [loong64] Add support for building EFI binaries
6d98e0ca4 [loong64] Add CPU sleeping API for EFI LoongArch64
0c67a3632 [loong64] Add I/O API for LoongArch64
c57887bfc [ioapi] Centralise definitions for dummy PIO
18af66970 [arm] Add missing arch/arm/core source directory
cfe65aa82 [arm] Remove redundant inclusion of io.h
ae435cb4c [efi] Process veto objects in reverse order of enumeration
f8a0d1c0b [efi] Check for protocols opened by vetoed driver and image handles
f0b102550 [efi] Unload vetoed drivers by image handle rather than driver handle
c832580f1 [efi] Pass more detailed driver information to veto methods
9a118322a [efi] Show manufacturer in veto debug output
2689a6e77 [efi] Always poll for TX completions
4fa4052c7 [efi] Provide read-only access to EFI variables via settings mechanism
25a3d3aca [efi] Veto the VMware UefiPxeBcDxe driver
8ab9bdca4 [efi] Include protocol interface address in debug output
12776acce [efi] Add UefiPxeBcDxe module GUID
367e022b5 [efi] Add HttpBootDxe module GUID
b9a60fb0b [efi] Add new IScsiDxe module GUID
a64764d10 [efi] Add HTTP header and GUID definitions
bc75bbaf1 [efi] Add DNS headers and GUID definitions
e7adf5701 [efi] Add Ip4Config2 header and GUID definition
92ab2de3a [efi] Add IPv6 versions of existing IPv4 headers and GUID definitions
3184ff74e [efi] Update to current EDK2 headers
9cb0a4b8e [efi] Disable static assertions in EFI headers on non-EFI platforms
b0093571f [crypto] Add support for PKCS#8 private key format
6a7f560e6 [efi] Implement "shim" as a dummy command on non-EFI platforms
5b4318143 [efi] Support versions of shim that perform SBAT verification
d2e1601cf [efi] Separate GetMemoryMap() wrapper from shim unlocker
95b8338f0 [efi] Add "shim" command
28184b7c2 [efi] Add support for executing images via a shim
3c214f046 [efi] Add definitions for the UEFI shim lock protocol
ce2200d5f [efi] Add efi_asprintf() and efi_vasprintf()
c4a8d9038 [image] Generalise concept of selected image
79d85e29a [efi] Attempt to detect EFI images that fail Secure Boot verification
d27cd8196 [ci] Work around Ubuntu packaging metadata issues
03eea19c1 [efi] Allow currently selected image to be opened as "grub*.efi"
0bb0aea87 [efi] Allow currently executing image to be opened via virtual filesystem
f9beb20e9 [image] Allow for images to be hidden from lists of all images
f93e6b712 [efi] Show original filenames in debug messages
22cc65535 [efi] Allow downloaded images to take precedence over constructed files
bd1369744 [efi] Allow for sections to be excluded from the generated PE file
9fb28080d [efi] Allow elf2efi to be used for hybrid binaries
1e4c3789e [efi] Shrink size of data directory in PE header
0d04635ef [efi] Remove redundant zero padding in PE header
1d1cf74a5 [tls] Handle fragmented handshake records
aa368ba52 [tls] Pass I/O buffer to received record handlers
2c6a15d2a [tls] Clean up change cipher spec record handling
09e8a1540 [efi] Claim fixed device paths by uninstalling device path protocol
bf25e23d0 [intel] Add workaround for I210 reset hardware bugs
8f1c12011 [dhcp] Unregister ProxyDHCP and PXEBS settings on a successful DHCPACK
54fcb7c29 [efi] Use image name instead of pointer value in debug messages
9e1f7a365 [image] Always unregister currently executing image
e51e7bbad [image] Consistently use for_each_image() to iterate over images
523788ccd [intelx] Add PCI IDs for Intel 82599 10GBASE-T NIC
96bb6ba44 [params] Allow for arbitrary HTTP request headers to be specified
33cb56cf1 [params] Rename "form parameter" to "request parameter"
60531ff6e [http] Use POST method only if the form parameter list is non-empty
04e60a278 [efi] Omit EFI_LOAD_FILE2_PROTOCOL for a zero-length initrd
471599dc7 [efi] Split out EFI_RNG_PROTOCOL as a separate entropy source
7d71cf318 [rng] Allow for entropy sources that fail during startup tests
6625e49ce [tables] Allow any lvalue to be used as a table iterator
9f17d1116 [rng] Allow entropy source to be selected at runtime
2733c4763 [iscsi] Limit maximum transfer size to MaxBurstLength
cff857461 [rng] Add RDRAND as an entropy source
6a004be0c [efi] Support the initrd autodetection mechanism in newer Linux kernels
cf9ad00af [efi] Fix debug message when reading from EFI virtual files
76a286530 [image] Check delimiters when parsing command-line key-value arguments
3c83843e1 [rng] Check for several functioning RTC interrupts
be8ecaf80 [eisa] Check for system board presence before probing for slots
62a1d5c0f [loong64] Add initial support for LoongArch64
84cb77439 [test] Include build architecture in test suite banner
bfa5262f0 [ci] Cache downloaded packages for GitHub actions
ef0a6f479 [ioapi] Move PAGE_SHIFT to bits/io.h
c6901792f [build] Allow for per-architecture unprefixed constant operand modifier
a2bed4393 [xen] Allow for platforms that have no Xen support
7cc305f7b [efi] Enable NET_PROTO_LLDP by default
dc16de320 [lldp] Add support for the Link Layer Discovery Protocol
6c0335adf [ci] Update to ubuntu-22.04 GitHub actions runner
8450fa4a7 [dhcp] Ignore DHCPNAK unless originating from the selected DHCP server
4e456d992 [efi] Do not attempt to drive PCI bridge devices
d405a0bd8 [util] Add support for LoongArch64 binaries
49c13e81b [ci] Update to actions/checkout@v3 to silence GitHub warnings
8b645eea1 [xen] Update to current Xen headers
6f250be27 [efi] Allow autoexec script to be located alongside iPXE binary
b6304f298 [realtek] Explicitly disable VLAN offload
aa85c2918 [efi] Update to current EDK2 headers
66a2ff442 [tests] Verify ability to sleep the CPU
3bcd0d327 [dhcp] Add IANA-defined values for all current EFI client architectures
4bb521a8c [efi] Accept a command line passed to an iPXE image via LoadOptions
b9be45401 [la64] Import LoongArch64 ProcessorBind.h from EDK2 headers
e3d543437 [efi] Update to current EDK2 headers
137ca5d87 [efi] Mark ConsoleControl.h as a non-imported header
900379594 [efi] Remove deleted directories from EDK2 header import script
91944c634 [efi] Allow for whitespace before #include in imported EDK2 header files
dac41fc4e [efi] Detect SPDX licence identifiers in imported EDK2 headers
5220bdc52 [legal] Add missing FILE_LICENCE declaration to efi_path.c
38f54fb41 [legal] Add support for the BSD-2-Clause-Patent licence
5bf8b1152 [efi] Build util/efirom as a host-only binary
2d180ce23 [tcp] Update maximum window size to 2MB
4bffe0f0d [pxe] Discard queued PXE UDP packets when under memory pressure
c5426cdaa [golan] Add new PCI ID for NVIDIA BlueField-3 network device
e72670ad7 [pxe] Avoid drawing menu items on bottom row of screen
68734b9a4 [efi] Bind to only the topmost instance of the SNP or NII protocols
2fef0c541 [efi] Extend efi_locate_device() to allow searching up the device path
1cd0a248c [efi] Add efi_path_prev() utility function
204d39222 [efi] Add efi_path_terminate() utility function
fcfb70bfb [arm] Inhibit linker warnings about an implied executable stack
c5e1f007a [arm] Use -mfloat-abi=soft only for EFI builds
9de6c45dd [arm] Use -fno-short-enums for all 32-bit ARM builds
8f59911b2 [arm] Support building as a Linux userspace binary for AArch64
2061d658b [dhcp] Simplify platform-specific client architecture definitions
2ef5f5e05 [build] Move -Ulinux to common Makefile
475c0dfa8 [linux] Centralise the linker script for Linux binaries
a99e435c8 [efi] Do not rely on ProcessorBind.h when building host binaries
6b977d125 [ena] Allocate an unused Asynchronous Event Notification Queue (AENQ)
08740220b [netdevice] Ensure consistent interpretation of "netX" device name
2dcef4b7a [efi] Create VLAN autoboot device automatically
f07630c74 [vlan] Support automatic VLAN device creation
5a2fa6040 [autoboot] Include VLAN tag in filter for identifying autoboot device
c4c03e5be [netdevice] Allow duplicate MAC addresses
47af48012 [netdevice] Separate concept of scope ID from network device name index
ab1954638 [efi] Disable receive filters to work around buggy UNDI drivers
7147532c3 [cachedhcp] Retain cached DHCPACK after startup if not already consumed
60b5532cf [cachedhcp] Include VLAN tag in filter for applying cached DHCPACK
b9571ca12 [efi] Add efi_path_vlan() utility function
099e4d39b [efi] Expose efi_path_next() utility function
0f3ace92c [efi] Allow passing a NULL device path to path utility functions
d879c8e4d [efi] Provide VLAN configuration protocol
5e62b4bc6 [vlan] Allow external code to identify VLAN priority as well as tag
b0ded89e9 [build] Disable dangling pointer checking for GCC
54c4c1d40 [build] Disable array bounds checking for GCC
563bff472 [intel] Add PCI ID for I219-V and -LM 16,17
2ae535532 [pci] Backup and restore standard config space across PCIe FLR
ca2be7e09 [pci] Allow PCI config space backup to be limited by maximum offset
688646fe6 [tls] Add GCM cipher suites
f5c829b6f [tests] Verify ability to perform in-place encryption and decryption
4acded7e5 [crypto] Support in-place decryption for GCM ciphers
63fdd9b58 [tests] Verify ability to reset cipher initialisation vector
63577207a [crypto] Ensure relevant GCM cipher state is cleared by cipher_setiv()
7256a6eb2 [tls] Allow handshake digest algorithm to be specified by cipher suite
51ecc0549 [tls] Always send maximum supported version in ClientHello
54d83e92f [tls] Add support for AEAD ciphers
186306d61 [tls] Treat invalid block padding as zero length padding
634a86093 [tls] Allow for arbitrary-length initialisation vectors
c453b4c28 [tls] Add MAC length as a cipher suite parameter
b6eef1485 [tls] Abstract out concept of a TLS authentication header
6a360ebfd [tls] Ensure cipher alignment size is respected
30243ad73 [crypto] Add concept of cipher alignment size
d1bc872a2 [tls] Formalise notions of fixed and record initialisation vectors
f8565a655 [tls] Remove support for TLSv1.0
7b60a4875 [efi] Clear DMA-coherent buffers before mapping
f48b01cb0 [bzimage] Fix parsing of "vga=..." when not at end of command line
8fce26730 [crypto] Add block cipher Galois/Counter mode of operation
da81214ce [crypto] Add concept of authentication tag to cipher algorithms
0c383bf00 [crypto] Add concept of additional data to cipher algorithms
8e478e648 [crypto] Allow initialisation vector length to vary from cipher blocksize
52f72d298 [crypto] Expose null crypto algorithm methods for reuse
2c7824273 [tls] Add support for DHE variants of the existing cipher suites
6b2c94d3a [tls] Add support for Ephemeral Diffie-Hellman key exchange
ea33ea33c [tls] Add key exchange mechanism to definition of cipher suite
80c45c5c7 [tls] Record ServerKeyExchange record, if provided
028aac99a [tls] Generate pre-master secret at point of sending ClientKeyExchange
1a7317e7d [tls] Generate master secret at point of sending ClientKeyExchange
18b861024 [crypto] Add Ephemeral Diffie-Hellman key exchange algorithm
007d3cb80 [crypto] Simplify internal HMAC API
88419b608 [test] Add HMAC self-tests
081b3eefc [ena] Assign memory BAR if left empty by BIOS
3aa6b79c8 [pci] Add minimal PCI bridge driver
649176cd6 [pci] Select PCI I/O API at runtime for cloud images
9448ac544 [bios] Allow pcibios_discover() to return an empty range
be667ba94 [pci] Add support for the Enhanced Configuration Access Mechanism (ECAM)
ff228f745 [pci] Generalise pci_num_bus() to pci_discover()
56b30364c [pci] Check for wraparound in callers of pci_find_next()
8fc3c26ea [pci] Allow pci_find_next() to return non-zero PCI segments
6459e3b7b [linux] Add missing PROVIDE_PCIAPI_INLINE() macros
8f5fc1614 [ipv6] Ignore SLAAC on prefixes with an incompatible prefix length
bc19aeca5 [ipv6] Fix mask calculation when prefix length is not a multiple of 8
131daf1aa [test] Validate constructed IPv6 routing table entries
a80124456 [ena] Increase receive ring size to 128 entries
3b81a4e25 [ena] Provide a host information page
9f81e97af [ena] Specify the unused completion queue MSI-X vector as 0xffffffff
6d2cead46 [ena] Allow for out-of-order completions
856ffe000 [ena] Limit submission queue fill level to completion queue size
c5af41a6f [intelxl] Explicitly request a single queue pair for virtual functions
04879352c [intelxl] Allow for admin commands that trigger a VF reset
491c075f7 [intelxl] Negotiate virtual function API version 1.1
b52ea2084 [intelxl] Show virtual function packet statistics for debugging
cad1cc6b4 [intelxl] Add driver for Intel 100 Gigabit Ethernet NICs
6871a7de7 [intelxl] Use admin queue to set port MAC address and maximum frame size
727b034f1 [intelxl] Use admin queue to get port MAC address
06467ee70 [intelxl] Defer fetching MAC address until after opening admin queue
d6e36a2d7 [intelxl] Set maximum frame size to 9728 bytes as per datasheet
99242bbe2 [intelxl] Always issue "clear PXE mode" admin queue command
faf26bf8b [intelxl] Allow expected admin queue command errors to be silenced
f0ea19b23 [intelxl] Increase data buffer size to 4kB
fb69d1400 [intelxl] Separate virtual function driver definitions
c220b93f3 [intelxl] Reuse admin command descriptor and buffer for VF responses
67f8878e1 [intelxl] Handle admin events via a callback
9e46ffa92 [intelxl] Rename 8086:1889 PCI ID to "iavf"
ef7066755 [intelxl] Increase receive descriptor ring size to 64 entries
9f5b9e3ab [intelxl] Negotiate API version for virtual function via admin queue
b4216fa50 [intelxl] Use non-zero MSI-X vector for virtual function interrupts
1b61c2118 [intelxl] Fix invocation of intelxlvf_admin_queues()
a202de385 [intelxl] Use function-level reset instead of PFGEN_CTRL.PFSWR
0965cec53 [pci] Generalise function-level reset mechanism
9dfcdc04c [intelxl] Update list of PCI IDs
d8014b180 [intelxl] Include admin command response data buffer in debug output
319caeaa7 [intelxl] Identify rings consistently in debug messages
814aef68c [intelxl] Add missing padding bytes to receive queue context
725f0370f [intelxl] Fix bit width of function number in PFFUNC_RID register
5d3fad5c1 [intelxl] Fix retrieval of switch configuration via admin queue
d3c8944d5 [acpi] Expose system MAC address via ${sysmac} setting
d72c8fdc9 [cachedhcp] Allow cached DHCPACK to override a temporary MAC address
87f1796f1 [ecm] Treat ACPI MAC address as being a non-permanent MAC address
70995397e [cloud] Allow aws-import script to run on Python 3.6
f58b5109f [acpi] Support the "_RTXMAC_" format for ACPI-based MAC addresses
614c3f43a [acpi] Add MAC address extraction self-tests
1e1b9593e [linux] Add stub phys_to_user() implementation
27825e555 [acpi] Allow for the possibility of overriding ACPI tables at link time
dd3547543 [efi] Support Unicode character output via framebuffer console
ba93c9134 [fbcon] Support Unicode character output
2ff3385e0 [efi] Support Unicode character output via text console
7e9631b60 [utf8] Add UTF-8 accumulation self-tests
3cd3a7326 [utf8] Add ability to accumulate Unicode characters from UTF-8 bytes
2acdc9299 [dns] Always start DNS queries using the first configured DNS server
bc5c612f7 [console] Include mappings for AltGr-Shift-<key>
304333dac [console] Support changing keyboard map at runtime
674963e2a [settings] Always process all settings applicators
11e17991d [console] Ensure that US keyboard map appears at start of linker table
252cff5e9 [xsigo] Avoid storing unused uninitialised fields in gateway address
04288974f [pci] Ensure that pci_read_config() initialises all fields
5d22307c4 [image] Do not clear current working URI when executing embedded image
419b2e71d [console] Fix definition of unreachability for remapped keys
4a37b0500 [console] Add Swedish "se" keymap
5aee6b81d [build] Avoid invoking genkeymap.py via Perl
510f9de0a [console] Ensure that all ASCII characters are reachable in all keymaps
429d4beb8 [console] Remove "az" keymap
a7a79ab12 [console] Fix unreachable characters in "mt" keymap
164db2cc6 [console] Fix unreachable characters in "il" keymap
c7d781929 [console] Treat dead keys as producing their ASCII equivalents
e1cedbc0d [console] Support AltGr to access ASCII characters via remapping
f2a59d597 [console] Centralise handling of key modifiers
871dd236d [console] Allow for named keyboard mappings
115032159 [tables] Add ability to declare static table start and end markers
0bbd89678 [console] Handle remapping of scancode 86
3f05a82fe [console] Update genkeymap to work with current databases
0979b3a11 [efi] Support keyboard remapping via the EFI console
eb92ba0a4 [usb] Handle upper/lower case and Ctrl-<key> after applying remapping
468980db2 [usb] Support keyboard remapping via the native USB keyboard driver
fa708015e [console] Avoid attempting to remap numeric keypad on BIOS console
f51a62bc3 [console] Generalise bios_keymap() as key_remap()
64113751c [efi] Enable IMAGE_GZIP by default for AArch64
bc35b24e3 [prefix] Fix use of writable code segment on 486 and earlier CPUs
6ba671acd [efi] Attempt to fetch autoexec script via TFTP
ec746c000 [efi] Allow for autoexec scripts that are not located in a filesystem
e814d3390 [uri] Allow for relative URIs that include colons within the path
f4f9adf61 [efi] Include Secure Boot Advanced Targeting (SBAT) metadata
fbbdc3926 [build] Ensure version.%.o is always rebuilt as expected
53a5de364 [doc] Update user-visible ipxe.org URIs to use HTTPS
91c77e259 [efi] Do not align VirtualSize for .reloc and .debug sections
f43c2fd69 [settings] Support formatting UUIDs as little-endian GUIDs
9062544f6 [efi] Disable EFI watchdog timer when shutting down to boot an OS
562c74e1e [efi] Run ExitBootServices shutdown hook at TPL_NOTIFY
0f4cc4b5a [build] Include EFI system partition table entry in isohybrid images
a046da21a [efi] Raise TPL during driver unload entry point
3ad27fbe7 [intel] Add PCI ID for Intel X553 0x15e4
b6045a8cb [efi] Modify global system table when wrapping a loaded image
51612b6e6 [efi] Do not attempt to use console output after ExitBootServices()
236299baa [xhci] Avoid DMA during shutdown if firmware has disabled bus mastering
1844aacc8 [uri] Retain original encodings for path, query, and fragment fields
85eb961bf [xhci] Allow for permanent failure of the command mechanism
f24a2794e [virtio] Update driver to use DMA API
2265a6519 [readline] Extend maximum read line length to 1024 characters
05a76acc6 [ecm] Use ACPI-provided system-specific MAC address if present
91e147213 [ecm] Expose USB vendor/device information to ecm_fetch_mac()
0cc4c42f0 [acpi] Allow for extraction of a MAC address from the DSDT/SSDT
02ec659b7 [acpi] Generalise DSDT/SSDT data extraction logic
e09e1142a [efi] Record cached ProxyDHCPOFFER and PXEBSACK, if present
db6310c3e [efi] Use zero for PCI vendor/device IDs when no applicable ID exists
b33cc1efe [build] Fix genfsimg to work with FATDIR with space
4d180be51 [cloud] Retry DHCP aggressively in AWS EC2
c64dfff0a [efi] Match signtool expectations for file alignment
8d08300ad [libc] Allow for externally-defined LITTLE_ENDIAN and BIG_ENDIAN constants
2690f7309 [uri] Make URI schemes case-insensitive
4aa037582 [rdc] Add driver for RDC R6040 embedded NIC
5622575c5 [realtek] Work around hardware bug on RTL8211B
0688114ea [cloud] Show ifstat output after a failed boot attempt
9b6ad2d88 [peerdist] Assume that most recently discovered peer can be reused
51c88a4a6 [build] Fix building on broken versions of GNU binutils
bf4ccd426 [build] Ensure build ID is deterministic
3c040ad38 [efi] Veto the Itautec Ip4ConfigDxe driver
3dd1989ac [libc] Match standard prototype for putchar()
52300ccf9 [base64] Include terminating NUL within base64 character array
92807f575 [rndis] Fix size of reserved fields
065dce8d5 [ath5k] Avoid returning uninitialised data on EEPROM read errors
f3f568e38 [crypto] Add memory output constraints for big-integer inline assembly
74c54461c [build] Use SOURCE_DATE_EPOCH for isohybrid MBR ID if it exists
0d68d7151 [build] Use SOURCE_DATE_EPOCH for .iso timestamps if it exists
e5f025517 [efi] Provide an "initrd.magic" file for use by UEFI kernels
ef9953b71 [efi] Allow for non-image-backed virtual files
bfca3db41 [cpio] Split out bzImage initrd CPIO header construction
fc8bd4ba1 [x509] Use case-insensitive comparison for certificate names
661093054 [libc] Add strncasecmp()
059c4dc68 [bnxt] Use hexadecimal values in PCI_ROM entries
adb2ed907 [intel] Add PCI ID for I219-V and -LM 10 to 15
d7bc9e9d6 [image] Support archive image formats independently of "imgextract" command
62f732207 [image] Propagate trust flag to extracted archive images
191f8825c [image] Allow single-member archive images to be executed transparently
a6a8bb1a9 [undi] Read TSC only when profiling
05fcf1a2f [rng] Check for TSC support before using RTC entropy source
13c1abe10 [prefix] Specify i486 architecture for LZMA decompressor
866fa1ce7 [gzip] Add support for gzip archive images
d093683d9 [zlib] Add support for zlib archive images
5c9c8d2b9 [image] Add "imgextract" command for extracting archive images
de4f31cdc [image] Provide image_set_len() utility function
106f4c539 [cloud] Allow multiple images to be imported simultaneously
1dfc05622 [cloud] Attempt to include CPUID_SETTINGS only for x86 builds
438513f6f [cloud] Autodetect CPU architecture from AMI disk image
6dad316e6 [cloud] Use a sortable default AMI name
e994237c0 [cloud] Add ability to generate Dokuwiki table of AMI images
323af9ee8 [settings] Add --timeout option to "read" command
b2501dd12 [readline] Add an optional timeout to readline_history()
56f7d44fd [efi] Show ACPI address space descriptor ranges in debug messages
3efdbef2f [efi] Always map full length of coherent DMA buffer allocation
e4afaa224 [build] Fix genfsimg to build ISO with long filenames
614d99eba [xen] Avoid infinite loop on allocation failure in xenstore_response()
85d179f2c [xen] Support scatter-gather to allow for jumbo frames
8ca43ccbc [int13] Do not report INT 13 extension support for emulated floppies
3ae83222c [cloud] Enable "poweroff" command in cloud images
78749542f [netdevice] Ensure driver transmit() and poll() will not be re-entered
0be8491b7 [pci] Avoid scanning nonexistent buses when using PCIAPI_DIRECT
c0346dbb4 [intel] Add additional PCI device ID to table
94245624e [efi] Mark PE .reloc and .debug sections as discardable
f1e9e2b06 [efi] Align EFI image sections by page size
1cc875651 [efi] Discard .pci_devlist.* sections for EFI images
1192edf39 [dhcp] Handle DHCPNAK by returning to discovery state
7c8fc2cae [linux] Fail at link time if building slirp.linux without libslirp
65bd5c05d [linux] Do not assume that stat() works on sysfs files
1c4917b6a [linux] Validate length of ACPI table read from sysfs
50d13907c [linux] Place -lslirp at end of linker search list
69ecab263 [linux] Use fstat() rather than statx()
2a2909cd1 [linux] Use generic sysfs mechanism to read SMBIOS table
681600680 [linux] Use generic sysfs mechanism to read ACPI tables
5c8a9905c [linux] Add a generic function for reading files from sysfs
976839ae4 [linux] Free cached ACPI tables on shutdown
3a5840012 [dns] Reduce debug verbosity for DNS server list
7b963310a [linux] Allow arbitrary settings to be applied to Linux devices
8055d5c48 [linux] Add missing pci_num_bus() stub
3b8aff94b [build] Fix building on older versions of gcc
2b5d3f582 [slirp] Add libslirp driver for Linux
916ebef19 [build] Allow __asmcall to be used as a type attribute
c09b62797 [linux] Provide ACPI settings via /sys/firmware/acpi/tables
9776f6ece [acpi] Allow for platforms that provide ACPI tables individually
d175936b7 [acpi] Eliminate redundant acpi_find_rsdt() in acpi_sx()
0956fb52c [acpi] Use a fixed colour for debug messages
f309d7a7b [linux] Use host glibc system call wrappers
040cdd0c6 [linux] Add a prefix to all symbols to avoid future name collisions
16d95227a [bitops] Provide an explicit operand size for bit test instructions
b76281a88 [efi] Compress EFI ROM images
900f1f98d [librm] Test for FXSAVE/FXRSTOR instruction support
e63b8c330 [librm] Add missing __asmcall on init_idt()
22bb29eab [prefix] Add a generic raw image prefix
8446a439b [initrd] Allow for zero-length initrd files
4039b54ba [cloud] Do not enable serial console on EFI platforms
cd3de55ea [efi] Record cached DHCPACK from loaded image's device handle, if present
d562339fc [efi] Defer autoboot link-layer address and autoexec script probing
e39cd79a0 [efi] Split out autoexec script portions of efi_autoboot.c
057674bb1 [pxe] Split out platform-independent portions of cachedhcp.c
19d0fab40 [ath5k] Add missing AR5K_EEPROM_READ in ath5k_eeprom_read_turbo_modes
fa012dd02 [cloud] Enable IPv6 and HTTPS in cloud boot images
d16535aa4 [cloud] Add utility for importing images to AWS EC2
1b99ba2a9 [build] Work around stray sections introduced by some binutils versions
83516ba7f [cloud] Use PCIAPI_DIRECT for cloud images
004924336 [ena] Switch to two-phase reset mechanism
c160fb259 [build] Use .balign directive instead of .align
b539e9a7e [build] Remove support for building with the Intel C compiler
df16df2c8 [build] Report detailed errors when unable to find a usable mkisofs
d79f504c0 [ci] Disable redundant scheduled execution of Coverity Scan
831f17f66 [ci] Disable Travis CI
1259580dd [ci] Add GitHub action for Coverity Scan
eeca29a1e [ci] Add GitHub action for build testing
e8393c372 [build] Work around distros that use -fcf-protection=full by default
e80299c56 [build] Work around -fPIE patched versions of gcc on all architectures
bfb72ec23 [build] Avoid spurious "make clean" when building for the first time
885c6d6e9 [efi] Fix erroneous comparison of a pointer against userptr_t
5bdb75c9d [contrib] Update bochsrc.txt to work with current versions
1af0fe04f [hermon] Add support for ConnectX-3 based cards
0c94659a8 [autoboot] Avoid closing and immediately reopening network device
6f1cb791e [hermon] Avoid parsing length field on completion errors
8747241b3 [hermon] Make hermon_dump_xxx() functions no-ops on non-debug builds
410566cef [hermon] Minimise reset time
7b2b35981 [hermon] Throttle debug output when sensing port type
299c671f5 [hermon] Add a debug notice when initialization is complete
8b07c88df [hermon] Add support for port management event
d948ac6c6 [hermon] Adjust Ethernet work queue size
e62c3e351 [hermon] Use reset value suitable for ConnectX-3
2e3d5909e [hermon] Clean up whitespace in hermon.c
79031fee2 [iscsi] Update link to iBFT reference manual
def46cf34 [hermon] Limit link poll frequency in DOWN state
ba20ba427 [build] Avoid using awk to format build ID as hexadecimal
3a2411b43 [build] Avoid using sha1sum when calculating build ID
82dbca493 [build] Allow BIOS linker script to be used with FreeBSD linker
1fea8ce06 [build] Check for broken elftoolchain version of objcopy
fe52f8e8b [build] Avoid modifying load addresses when stripping .zinfo section
d8dc06fbf [build] Replace random build ID with a deterministic one
bc4979e2c [build] Use $(shell ...) to invoke BUILD_ID_CMD
9d000c9fd [build] Use SOURCE_DATE_EPOCH if it exists
6c91eebd0 [build] Use recursive deletion for "make clean"
5e260c73f [build] Avoid shell brace expansion in "make clean"
f034ae59f [build] Allow elf2efi.c to build on FreeBSD
25b675c3d [build] Ensure that isolinux.bin is modifiable
9557497e7 [build] Add syslinux search locations used on FreeBSD
f4fcd000a [build] Drop timestamps from .a file
43d72d008 [hermon] Perform clean MPT unmap on device shutdown
699b9f1d1 [hermon] Use Ethernet MAC as eIPoIB local EMAC
6cb12ee2b [hermon] Increase polling rate for command completions
7d32225b5 [hermon] Add event queue debug functions
7c40227e1 [hermon] Increase command timeout from 2 to 10 seconds
cd126c41b [hermon] Add assorted debug error messages
ce45c8dc2 [hermon] Show "issuing command" messages only at DBGLVL_EXTRA
a2893dc18 [hermon] Reorganize PCI ROM list and document well-known product names
0e788c8ed [golan] Backport typo fix in nodnic_prm.h: s/HERMON/NODNIC/
36a892a7c [arbel] Clean up whitespace in MT25218_PRM.h header
414c842f0 [hermon] Clean up whitespace in MT25408_PRM.h header
a08244ecc [efi] Use EFI_SIMPLE_TEXT_INPUT_EX_PROTOCOL if available
8488c989c [image] Implicitly trust first embedded image
b9de7e6ed [infiniband] Require drivers to specify the number of ports
4f9fbe6c1 [efi] Fix misleading debug message
f4c3a0147 [ifmgmt] Make "ifstat" show the link-layer protocol for each netdev
42db0bd04 [cmdline] Expose "iflinkwait" as a command
ade4d2b4f [efi] Fix use of uninitialised variable
a3f1e8fb6 [efi] Automatically load "/autoexec.ipxe" when booted from a filesystem
989a7a803 [image] Provide image_memory()
ffc41ae9d [travis] Update to current default build environment
68469d1b1 [build] Report a meaningful error message if isolinux.bin is missing
7c3d186a1 [build] Check that mkisofs equivalent supports the required options
8ef22d819 [tftp] Allow for profiling of client and server turnaround times
b99477b3f [image] Add the "imgmem" command
99ac69b8a [image] Provide image_set_data()
ae73fb5aa [build] Allow an initrd script to be provided via genfsimg
34f51a0dc [build] Fail gracefully when no input files are given to genfsimg
05d7591a7 [build] Use explicit disk geometry for generated FAT filesystem images
a2a6618d4 [build] Fix genfsimg incompatibility with dash shell
565ca3eab [build] Set volume name "iPXE" on FAT filesystem images
117353815 [build] Allow genfsimg to be used on third party UEFI binaries
3a9621a6f [ipv6] Defer router discovery timeout while link is blocked
9a341203d [dhcp] Allow for links that remained blocked for up to three minutes
9c2e8bad1 [eap] Treat an EAP Request-Identity as indicating a blocked link
274ad6901 [eapol] Replace EAPoL code
860620459 [dhcp] Continue transmitting DHCPDISCOVER while link is blocked
0fb37a48a [build] Include xorrisofs as a viable mkisofs equivalent
8e3826aa1 [build] Inhibit spurious array bounds warning on some versions of gcc
a5fb41873 [isa] Add missing #include <config/isa.h>
79c0173d6 [build] Create util/genfsimg for building filesystem-based images
c42f31bc8 [xhci] Avoid false positive Coverity warning
5aa389593 [efi] Leave asynchronous USB endpoints open until device is removed
7ce3b8405 [xhci] Show meaningful error messages after command failures
017b345d5 [xhci] Fail attempts to issue concurrent commands
988d2c13c [efi] Use segment and bus number to identify PCI root bridge I/O protocol
dced22d6d [smbios] Add support for the 64-bit SMBIOS3 entry point
485f8ce55 [efi] Allow for longer device paths in debug messages
da491eaae [sfc] Update email addresses
68f1914aa [x509] Clarify debug message for an untrusted X.509 issuer
ce841946d [golan] Add new PCI IDs
47098d7cb [efi] Allow EFI_USB_IO_PROTOCOL interfaces to be nullified and leaked
6769a7c3c [efi] Skip interface uninstallation during shutdown
fb91542f2 [efi] Nullify interfaces unconditionally on error and shutdown paths
f47a45ea2 [iphone] Add iPhone tethering driver
f43a8f8b9 [crypto] Allow private key to be specified as a TLS connection parameter
6a8664d9e [tls] Include root of trust within definition of TLS session
3475f9162 [x509] Make root of trust a reference-counted structure
e3eedb0be [efi] Avoid using potentially uninitialised driver name in veto checks
39f529349 [x509] Record root of trust used when validating a certificate
6e92d6213 [ocsp] Remove dummy OCSP certificate root
be47c2c72 [http] Hide HTTP transport-layer filter implementation details
1b112e9d1 [asn1] Define ASN1_SHORT() for constructing short tagged values
e4b6328c8 [asn1] Rename ASN1_OID_CURSOR to ASN1_CURSOR
e33f52108 [asn1] Add constant for UTF-8 string tag
25b53afa5 [tls] Allow provision of a client certificate chain
2b6b02ee7 [tls] Use intf_insert() to add TLS to an interface
09fe2bbd3 [interface] Provide intf_insert() to insert a filter interface
cb0ba2f82 [interface] Ignore any attempts to plug in the null interface
b6e2ea03b [efi] Veto the HP XhciDxe Driver
63625b43e [efi] Allow vetoing of drivers that cannot be unloaded
354c252ee [efi] Provide manufacturer and driver names to all veto checking methods
be49380f5 [efi] Split out dbg_efi_opener() as a standalone function
13a6d1729 [xhci] Update driver to use DMA API
6e01b74a8 [dma] Provide dma_umalloc() for allocating large DMA-coherent buffers
a8442750e [efi] Avoid requesting zero-length DMA mappings
a2e5cf1a3 [netdevice] Fix misleading comment on netdev_rx()
9ff61ab28 [netdevice] Do not attempt to unmap a null I/O buffer
8d337ecda [dma] Move I/O buffer DMA operations to iobuf.h
70e6e8324 [dma] Record DMA device as part of DMA mapping if needed
cf12a4170 [dma] Modify DMA API to simplify calculation of medial addresses
24ef74377 [intelxl] Configure DMA mask as 64-bit
9e280aecb [intel] Configure DMA mask as 64-bit
0b5467b65 [efi] Report correct error when failing to unload a vetoed driver
1295b4acf [efi] Allow initialisation via SNP interface even while claimed
03314e8da [intelxl] Update driver to use DMA API
76a7bfe93 [intelxl] Read PCI bus:dev.fn number from PFFUNC_RID register
b6eb17cbd [intelxl] Read MAC address from PRTPM_SA[HL] instead of PRTGL_SA[HL]
e10a40d41 [efi] Avoid dropping below TPL as at entry to iPXE
062711f1c [intel] Use physical addresses in debug messages
810dc5d6c [realtek] Use physical addresses in debug messages
fc5cf18da [efi] Use casts rather than virt_to_bus() for UNDI buffer addresses
83b8c0e21 [efi] Do not populate media header length in PXE transmit CPB
5439329c9 [intel] Update driver to use DMA API
0e2622090 [efi] Rename efi_blacklist to efi_veto
580d9b00d [realtek] Update driver to use DMA API
38a54bd3b [efi] Provide DMA operations for EFI PCI devices
dda03c884 [dma] Define a DMA API to allow for non-flat device address spaces
be1c87b72 [malloc] Rename malloc_dma() to malloc_phys()
36dde9b0b [efi] Retain a long-lived reference to the EFI_PCI_IO_PROTOCOL instance
f560e7b70 [realtek] Reset NIC when closing interface if using legacy mode
9b25f6e5c [efi] Fall back to assuming identity mapping of MMIO address space
16873703d [efi] Avoid dragging in USB subsystem via efi_usb_path()
e5e2f3fba [efi] Fix memory copy length used in efi_nullify_name2()
5b41b9a80 [efi] Nullify interfaces and leak memory on uninstallation failure
86c6c79fc [efi] Allow block devices to provide their own EFI device paths
a2e44077c [infiniband] Allow SRP device to be described using an EFI device path
bf051a76e [fcp] Allow Fibre Channel device to be described using an EFI device path
e6f9054d1 [iscsi] Allow iSCSI device to be described using an EFI device path
334f0074b [efi] Show block device ACPI table contents only at DBGLVL_EXTRA
04cb17de5 [aoe] Allow AoE device to be described using an EFI device path
2d49ce6f0 [efi] Provide utility function to concatenate device paths
6154b1fb2 [efi] Split efi_netdev_path() out to a separate function
b50ad5f09 [http] Allow HTTP connection to be described using an EFI device path
f2c826179 [efi] Provide efi_uri_path() to construct a URI device path
1e8648f61 [usbblk] Allow USB block device to be described using an EFI device path
87e39a9c9 [efi] Split efi_usb_path() out to a separate function
2091288ea [efi] Define an interface operation to describe using an EFI device path
2bf0fd39c [efi] Split device path functions out to efi_path.c
bcf858c56 [efi] Provide EFI_INTF_OP for EFI-only interface operations
c504c1d69 [interface] Allow for the definition of an unused interface operation
49fd66a8c [build] Provide a testable platform macro alongside -DPLATFORM
6ccd5239b [ipv6] Reduce time spent waiting for router discovery
0c25daad3 [efi] Enable NET_PROTO_IPV6 by default
388d65708 [lacp] Ignore (and do not echo) trailing padding on received packets
3d4378991 [lacp] Detect and ignore erroneously looped back LACP packets
02748d0a5 [efi] Defer local download process until file has been opened
6d680bdec [usbblk] Add support for USB mass storage devices
88288407a [usb] Move usbio driver to end of USB driver list
e30c26d01 [usb] Allow endpoints to be refilled to a specified upper limit
ebf016608 [usb] Allow device halt to be cleared independently of host controller
c70b3e04e [efi] Always enable recursion when calling ConnectController()
fbb5989fd [efi] Connect controllers after loading an EFI driver
eede697ec [ncm] Treat a zero divisor as indicating no alignment requirements
022014171 [efi] Fix reporting of USB supported languages array
02280dc64 [efi] Avoid integer underflow on malformed USB string descriptors
7c6fdf57e [usb] Avoid integer underflow on malformed string descriptors
7151fa3ff [efi] Allow DEBUG=efi_wrap to be used independently of a loaded image
8344803c9 [efi] Disconnect controllers before uninstalling EFI_USB_IO_PROTOCOL
8eb19a178 [usb] Show debug message on device removal
627b0ba2a [efi] Report any USB errors as EFI_USB_ERR_SYSTEM
fbb776f2f [efi] Leave USB endpoint descriptors in existence until device is removed
f42ba772c [usb] Reset control endpoints immediately after failure
27e886c67 [efi] Use address offset as reported by EFI_PCI_ROOT_BRIDGE_IO_PROTOCOL
eecb75ba4 [pci] Update drivers to use pci_ioremap()
371af4eef [pci] Define pci_ioremap() for mapping PCI bus addresses
ccfffc797 [efi] Provide a single implementation of efipci_root_close()
fe6993419 [efi] Show memory map returned by wrapped calls to GetMemoryMap
e08ad61bf [efi] Add debug wrappers for all boot services functions of interest
4bd064de2 [build] Fix building on older versions of gcc
ef2c844d0 [efi] Attempt NII initialisation both with and without cable detection
c63e61df7 [efi] Use device path to locate filesystem from which we were loaded
fd47fa8fe [efi] Match EDK2 numbering for USB ports
70b1a641c [comboot] Fix stack pointer retrieval after COM32 binary returns
b76052335 [efi] Check the status code from AllocatePool()
a08ee6e72 [cmdline] Add "--timeout" parameter to "ifconf" command
145311c62 [intelx] Added PCI_ROM entry for Intel x553/x557-AT and x553 (SFP+) NICs
afaf4272b [intel] Set INTEL_NO_PHY_RST on i218v
c4d1ae0fc [intel] Add INTEL_NO_PHY_RST for I218LM
8bc85ec6f [deflate] Fix typo in comment describing length codes
8d243e65c [build] Fix a GNUism that FreeBSD's sed(1) cannot deal with
ee2dc525b [wpa] Fix erroneous debug message in wpa_derive_ptk
0de5e6014 [libc] Fix memcmp() to return proper values
6ec33b8d6 [pcbios] Take alignment into account when checking for available space
45a0ca6de [pcbios] Fix "out of memory" detection when expanding bottom area
cede0c5ba [libgcc] Change __divmoddi4 from int64 [unknown] to int64_t
4277942ac [build] Fix default target in sdsk image
366206517 [dns] Use all configured DNS servers
a95a2eafc [xfer] Remove address family from definition of a socket opener
78ca890c3 [sfc] Add PCI ID for Solarflare SFC9120 and Solarflare SFC9140
1832f8a9b [efi] Claim SNP devices early in efi_download_start()
b6eecb182 [efi] Ensure NUL byte is at lowest address within stack cookie
fcdd9c098 [efi] Distribute available entropy within stack cookie
f7ddda435 [libc] Add bit-rotation functions for unsigned long values
98d49e460 [efi] Avoid setting direction flag on EFI platforms
2f032c84a [libc] Provide an unoptimised generic_memcpy_reverse()
d2fb317fe [crypto] Avoid temporarily setting direction flag in bigint_is_geq()
586b72373 [usb] Leave port enabled after a failed device registration
f727ed8a1 [axge] Reapply USB device configuration when opening network device
0f5d23433 [xhci] Increase link state settling delay to 100ms
e87760183 [usb] Avoid unnecessary calls to usb_hub_set_drvdata()
18d4be8aa [xhci] Set link state to RxDetect after disabling USB3 root hub port
761ed4365 [usb] Do not attempt to disable USB3 hub ports
8ff5babb4 [usb] Add missing usb_recycle() for completed hub interrupt transfers
5d6fb7282 [usb] Clear device endpoint halt before resetting host endpoint
d5874c9f2 [axge] Handle non-gigabit link speeds
2ae5d4338 [efi] Raise TPL during driver entry point
a87537d44 [efi] Detect and disable seriously broken EFI_RNG_PROTOCOL implementations
decee20ec [build] Disable position-independent code for ARM64 EFI builds
8a1d66c7a [golan] Add explicit type casts for nodnic_queue_pair_type
28cf9806d [intel] Avoid spurious compiler warning on GCC 10
f982a7129 [build] Be explicit about -fcommon compiler directive
3f637d746 [ocsp] Accept SHA1 certID responses even if SHA1 is not enabled
a61b27b97 [efi] Enable stack protection where possible
8830f2f35 [parseopt] Treat empty integer strings in user input as invalid
200029701 [util] Treat empty integer strings as invalid
770a7bd43 [snp] Retry initialisation if link is reported as down
7f2006a9a [crypto] Disable MD5 as an OID-identifiable algorithm by default
bb74f0051 [crypto] Ensure that test code drags in required ASN.1 object identifiers
bd7a5e4b9 [crypto] Allow algorithms to be included without being OID-identifiable
dc785b0fb [tls] Default to supporting only TLSv1.1 or above
2dac11eb1 [tls] Allow a minimum TLS protocol version to be specified
9ee70fb95 [efi] Attempt to connect our driver directly if ConnectController fails
6a6def775 [uri] Avoid appearing to access final byte of a potentially empty string
ac28bbb7e [efi] Work around UEFI specification bug in LoadImage for SAN boot
18d2162f6 [efi] Work around UEFI specification bug in LoadImage
d68befef1 [png] Fix potential integer overflow
ebff21a51 [bnxt] Add driver support for Broadcom NetXtreme-E Adapters
bdf0e029a [efi] Disambiguate errors returned by ConnectController
efc1ae5ab [int13con] Create log partition only when CONSOLE_INT13 is enabled
49319f1bc [bios] Define macros for constructing partition table entries
e3ca21107 [iscsi] Eliminate variable-length stack allocation in URI parsing
e2e29e7ae [iscsi] Eliminate variable-length stack allocations in CHAP handlers
446e8f14e [settings] Eliminate variable-length stack allocation
0a7432191 [slam] Allow for the possibility of IPv6 multicast addresses
c5306bcfa [slam] Eliminate variable-length stack allocation
6248ac396 [infiniband] Eliminate variable-length stack allocation
c625681ca [tftp] Eliminate unnecessary variable-length stack allocation
18dc73d27 [travis] Ensure that most recent tag is always available
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping fuse-overlayfs to version v1.16-17-g51108ae, which comprises the following commits:
be604bb man: regenerate
a030601 man: uniformly apply bold attributes
9da0832 man: restore hard word wrapping
da57ec7 man: reformat additions from e58fb12
a1ef9a0 man: rephrase description and other parts
93b3f7e man: refactor fuse-overlayfs.1.md
fe0525a Plugin test
e58fb12 Manpage updates for xino and ino32_t
1f60815 st_ino needs to be unique for all inodes on a device
b2e4dc1 Minor cleanups
eb988de Dockerfile: use ubuntu:<LTS>-<yyyyMMdd> for reproducibility
f3db78e configure.ac: new development release
9ad6545 NEWS: tag 1.16
0f7e9bb Containerfile.cross: update deps
4266f68 main: fix incorrect directory entries due to unstable iteration order
0ea1677 configure.ac: prepare new release cycle
c5f3ef1 NEWS: tag 1.15
6a1040f main: lookup upperdir only for created directories
d5b2cec main: fix layer lookup in make_ovl_node
b88a093 main: use hash_remove instead of hash_delete
ce8d185 lib: update hash module from gnulib
27cabd5 main: Allow escaped colons in directory paths
b31d82f main: use parsed upper layer directory
02a3582 refactor: Remove unnecessary upperdir realpath
5e7f7d7 github: update checkout action
4761dd0 github: update uraimo action
fc6a2b9 github: update upload-artifact action
e1aae5a github: enable unprivileged user namespaces
efb6149 Update AC_INIT to 1.15-dev
6bbd62b main: use extended override xattr
8d33894 github: update run-on-arch-action
cf8269b github: update ubuntu version
af77bb6 tests: bump fedora version
e107b0b Remove unsupported option "lazytime"
33cb788 NEWS: tag 1.14
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
| |
Bump the lua max-version check from 5.5 to 5.6 in the pkg-config
patch to allow lua 5.5.0 from OE-core.
Add -Wno-error=discarded-qualifiers to CFLAGS to work around gcc 15
being stricter about const qualifiers in strchr return values. The
upstream code uses -Werror which makes this fatal.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping diod to version v1.1.0-22-ga8c55f0, which comprises the following commits:
2e67f42 diodcli: drop unused variable
71aa8e9 MAINTAINERS.md: add file
4d0b2e9 diodcli: add issue reference comments
2dc8a32 libdiod: simplify qid.type initialization
b8aee49 libnpfs: improve qid trace formatting
c7951da libnpfs: decode dentries in Rreaddir trace
de73632 libnpfs: print ... when trace buffer overflows
9cfed43 libpnfs: fix inconsistent whitespace
583f453 libnpfs: reduce protocol trace truncation
b5294cb libnpfs: simplify Npsrv->logmsg() signature
43cc75a testsuite: fix allsquash mkdir test on alpine
10a39c8 testsuite: fix alpine stat -f portability
768e61d testsuite: fix umount option portability
662e24c testsuite: fix alpine compilation issue
221e0ec sharness: use doas(8) if sudo(8) is unavailable
2813a8f sharness: set SUDO to preserve environment
9029fbf diod: fix alpine AF_UNIX getnameinfo failure
c2f5ede diodcli: fix alpine compilation issue
c3b4602 protocol.md: fix document links
3d6b0a5 update README.md for 1.1.0
5692025 scripts: add missing debian dependency
9caed75 NEWS.md: add release notes for 1.1.0
df149d7 add script to generate release notes
f63991e testsuite: fix test output typo
93d454c reorganize project metadata
b2e5c85 testsuite: temporarily disable security XATTR test
a7032c1 diodcli: fix compliation issue on aarch64
9597b2d git: drop check in tests/kern
840ae1c .gitignore: remove ancient paths
32117dd testsuite: drop third party tests
f24b4ae testsuite: drop duplicate mode test
0ad5a8a testsuite: drop duplicate fsync test
1f53fb1 testsuite: migrate atomic create test to sharness
2ac320c testsuite: migrate create test to sharness
7514217 testsuite: migrate xattr tests to sharness
2e00434 testsuite: migrate flock tests to sharness
de0f09f testsuite: drop duplicate rename test
e3acbbb testsuite: migrate sgid dir test to sharness
e5111ab testsuite: drop unused suppl groups test program
c895daa testsuite: drop duplicate stat test
c335d42 testsuite: migrate pathwalk test to sharness
1eb3281 testsuite: drop duplicate statfs test
5a3ae78 testsuite: update mount options
fdc1ae5 mount.diod(8): update mount options
11fdb15 mount.diod: use access=client as the default
a3b561f diod(8): add SECURITY description
30fee89 testsuite: convert POSIX ACL test to sharness
f9bb613 testsuite: fix POSIX ACL test
7d3c5d6 demote diodload to an internal test program
27413d3 dioddate: drop old command
8706fac diodcli(8): add date subcommand
73def41 diodcli: add date subcommand
1bbc8b2 diodshowmount: drop old command
48f389c diodcli(8): add showmount subcommand
13e94a7 diodcli: add showmount subcommand
bccd37a diodls: drop old command
a3d1cbb testsuite: use diodcli ls
94c8317 diodcli(8): add ls subcommand
7a3f980 diodcli: add ls subcommand
1b5f569 diodcli(8): fix typo
ddab136 diodcli(8): add man page, drop diodcat man page
df54c93 diodcat: drop redundant utility
d6d0413 testsuite: use diodcli read instead of diodcat
c46d515 sharness: export DIOD_SOCKET in diod_start()
8c9d633 diodcli: use "ctl" as the default aname
dc69a6b diodcli: add --trace option
f0c0588 diodcli: use DIOD_SOCKET, if set
04618a0 diodcli: make test-only subcommands invisible
b9d469f diodcli: drop sysgetattr subcommand
1e00d19 diodcli: drop sysstat subcommand
61435aa libnpclient: add NPC_TRACE flag
7b73c7e diodcli: rename from npclient test program
6e12930 scripts: update install-deps-deb.sh
916e583 diodrun: call setsid() in client fork
9c43728 libdiod: clean up inconsistent tab use
d56a2ea fix typo in sharness scripts
f346d9e testsuite: add self-hosting test
a77bf99 drop diod.conf, auto.diod
a6a077e mount.diod: rename from diodmount
6e24298 diod.spec: drop RPM spec file
385b92f testsuite: cover mount helper
09c5b5e diodmount(8): update v9fs mount options
7fab3f0 diodmount: allow more control over mount options
9f88bb2 libnpfs: fix access denied message
bd947a2 diod: drop incorrect assertion
479491a libnpclient: implement npc_rename()
e6962ba libnpclient: drop NPC_MULTI_RPC
9be4457 testsuite: drop old tests
2707b09 github: add new test dependencies
64b01bb testsuite: add dbench, postmark, scrub, rsync tests
d4cf855 testsuite: cover v9fs + diod in multiuser mode
faa533e testsuite: cover v9fs + diod in allsquash mode
4073d64 testsuite: cover v9fs + diod in runasuser mode
4370f1b testsuite: define built-in prerequisites
658e4e2 testsuite: add diodrun --socketpair
c83538d testsuite: add method argument to test_under_diod
c44ccd0 libnpfs: fix unallocated free error
5578a90 drop extra comment from test script
f33018a mergify: disable temporary PR branches
dc28dc9 ci: run tests with minimal config
23bfc25 ci: get test results on failure
5e41034 testsuite: remove old "user" test
5ba9c81 testsuite: add t0006-npclient-issues.t
242aa01 testsuite: add t0005-npclient-xattr.t
a683d14 testsuite: add t0004-npclient-basic.t
e43267e testsuite: add sharness test_under_diod()
6150ba0 testsuite: make tattach look like other test progs
a3b5f32 testsuite: relocate tattachmt test program
18a45fb testsuite: make tflush look like other test progs
2298152 testsuite: relocate tflush test program
d658828 testsuite: add npclient test program
19fb16b testsuite: add diodrun test program
c600bb8 ci: allow the nobody user into home directory
3e72fe4 testsuite: add t0003-basic-multiuser.t
0f90992 testsuite: add t0002-basic-allsquash.t
d3bf2a1 testsuite: add t0001-basic-runasuser.t
59a8192 testsuite: create t1000-valgrind from old test
d521172 testsuite: add diod-specific helper script
ad63d49 diod: add --version option
9dfac9e testsuite: add sudo prereq
b530c74 testsuite: add sharness test driver
66585b0 Fix autogen if autoconf-archive > 2023.02.20 (#142)
07326e2 diod: Implement Trenameat and Tunlinkat
4aa71a2 libnpfs: Fix assert failure when receiving R-type messages
b91d74b diod: Fix uint32 overflow when Tread/Twrite count > UINT32_MAX-IOHDRSZ
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
| |
The upstream repository (github.com/jbruchon/dev86) has been deleted.
dev86 provided 8086 assembler tools (as86/ld86/bcc) used only for
building rombios, which has been disabled in Xen in the previous
commit. No other recipe depends on dev86.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
| |
dev86 (as86/ld86/bcc) was only needed to build rombios, the legacy
BIOS for HVM guests. The upstream repository (jbruchon/dev86) has
been deleted from GitHub.
SeaBIOS is already in DEPENDS and is the modern replacement — no Xen
HVM guest uses rombios in practice. Disable rombios explicitly and
remove the dev86-native dependency.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping cloud-init to version 26.1-7-g0052a66df, which comprises the following commits:
0052a66df fix(bsd): correct the _ROOT_TMPDIR path for *BSD system (#6794)
724e085ad fix(azure): catch import error as reportable (#6714)
5c685d629 WSL: Subprocess cmd.exe with /U to output UTF-16LE (#6717)
7132625c6 feat(util): fail early when hostname is not resolvable in is_resolvable (#6772)
4db78c97a feat(azure): introduce experimental skip_ready_report for Azure (#6771)
a2209a9e1 test: apt tests need to wait_for_cloud_init on potentially slow VMs
76df57457 test: use rmadison form devscripts to determine hello pkg version
8bf356753 Release 26.1 (#6776)
36736c30e test: update hello package tested using rmadison (#6774)
da854b999 test: add details about failing package status to aid in debug (#6775)
3ad28be2f test: rust-coreutils date command breaks if positional args before options (#6773)
9d8943431 ci: resolute rust-based gpg-sq rejects short GPG keyids (#6710)
e8a9170bc chore: fix pytest hypothesis-jsonschema warnings (#6761)
080ddb433 chore: silence deprecation warning for strptime (#6762)
dd7e41727 ci: disable daily jobs on fork branches
e80c0899a ci: reorder gh actions jobs
52ef4d17d chore: silence crypt warnings
402ae54a3 test: fix pytest.raises error text warnings
e171b68ab chore: make jsonschema remote retrieval explicit
656565558 test: fix mocker warnings during tests
b990f8d28 chore: fix untyped-defs (#6760)
2f8566cc8 test: provide snap commands to trigger wait semaphore on jammy (#6759)
bb2f6b9ef doc: fix various conventions (#6757)
180feb270 chore: move conftest to test directory (#6758)
9416e6639 doc: replace Red Hat bugzilla with Red Hat jira (#6751)
e2aa5010a doc: fix YAML indentation and wording in examples (#6750)
fd2f115fc ci: restrict build-package upload-artifact and test to cloud-init-base
a452a6650 ci: bddeb only create symlink to cloud-init-base for testing
4e3a920ea ci: update PR actions to test questing and runs-on to ubuntu-latest (#6753)
417da89f1 ci: feature values should be read from client under test (#6738)
67d8e2375 ci: use branches inclusion instead of branches-ignore exclusion (#6741)
92a9858f7 doc: fix mermaid diagram (#6743)
de5c45185 chore: remove unused pylint suppressions (#6726)
944c5c975 chore: remove unmaintained python tools (#6724)
9a3b627e9 docs: correct network-config filename in NoCloud heading (#6735)
090026a3d fix: do not write meson version twice in version.py (#6729)
961fc8490 doc: make doc hierarchy more focused (#6694)
72809f804 fix: DNS resolution performance regression during local stage (#6707)
afd0c6c5e chore: pin full SHA commits for all workflows (#6711)
580b21bd3 fix(azure): round duration field in FinishReportingEvent to four decimal places (#6709)
567cfe896 ci: install missing distro-info-data dependency to test devel series resolute (#6701)
26c7d38de fix: datasource initialization order in stages (#6700)
402038314 docs: security company policy updates (#6677)
8c4c59a05 ci: add shared workflow for lxd_container integration tests
8a5234705 doc: clarify CLA check (#6692)
9c2faf8ef feat(dhcp): enable --debug option for dhcpcd (#6693)
feaf14716 doc: clarify verbose language (#6688)
78f6f15ec fix: migrate from ntp client package installed from ntp to ntpsec (#6684)
b7b625627 chore(stages): enable type checking (#6672)
d9834a30c fix: respect SSH key options for the root user (#6585)
0686791aa fix: cloud-init clean --logs should not remove non-files (#6568)
d2bf88393 fix(cloudstack): Improve domain-name DHCP lease lookup (Cloudstack) (#6554)
f0659039b doc: document socket protocol change
9e6151a26 ci: retain system packages for TICS workflow due to virtualenv version errors
306d66cf6 ci: run and source pylint tox target used by TICS checkers
54a58e6d0 ci: add actionlint.yml ignores
328031893 ci: export python path to GITHUB_ENV from tox venv
5531de252 feat(lxd): add s390x virtio-ports detection for LXD (#6597)
e7f970b5f test: pytestified test_cc_growpart.py (#6625)
ac729abb9 ci: add reviewdog workflow lint for github actions (#6662)
fb44d8d9f docs: fix broken external documentation links (#6664)
f8a7c8c4c ci: fix cross-distro test failures, various maintenance (#6663)
2d4519d49 feat: support Tilaa cloud (#6658)
5803e8448 docs: fix broken documentation links (#6660)
9934bbec9 ci: typo duplicated run declaration in tics workflow (#6661)
6901be5d7 ci: quote workflow names to avoid invalid YAML (#6659)
064019ec0 test: add gh workflow for tiobe TICS static analysis reporting (#6654)
449552508 chore: type cloudinit/sources/__init__.py (#6647)
7af9d0a62 fix(ec2): check elastic NICs for metadata server first (#6651)
974646e6f feat(azure): add vm_id to KVP telemetry event keys (#6551)
4810cc646 ci: exercise TMPDIR now that it works (#6652)
7cc31f585 chore: rename workflow files for organization
6880d3497 ci: reword action and workflow names for clarity
78da9db19 ci: add Python 3.15
e02b739fc fix: Pass interface string to get_newest_lease() (#6648)
b5080b987 test: Skip Azure openssl tests on non-Linux
3139e9437 test: skip Linux-specific test on non-Linux
e346b5104 test: use realpath for tmp directories
4e45baa3a fix: ensure mount type is used if passed
818a261ad test: Replace 'echo -n' with 'printf'
d8d5a477e test: ensure symlinks are resolved in certain tests
528a712d5 test: add a socket fixtures and mocks
ec10d36d3 test: hardcode passlib usage in Azure test
45c755567 test: mock chown to account for distro grp differences
2024036f6 test: bring back fake tmpdir creation
c3bf2079f test: ensure we don't actually rename ntp.conf in test
3d7b54525 fix: ensure timestamp timezone encoded correctly in status.py
1ae202766 test: ensure TMPDIR parents exist
70b8771c9 fix: don't traceback when using BSD date
ec44db261 fix(azure): ensure ephemeral networking uses primary NIC (#6556)
a19f958c7 chore: drop dscheck maas (#6638)
fad68ab5c chore: enable type checking cloudinit/distros/__init__.py (#6646)
85c463890 chore: use curl instead of wget (#6610)
9813bb84f fix(distros/freebsd): set home_dir to /home (#6637)
07173578c chore: Remove multiple entries in spec file (#6599)
07922ae05 chore: add scheduled job for py3-fast (#6634)
3067c2561 tests: convert test_cc_rsyslog.py to pytest (#6622)
0400ac624 chore(mypy): check sysconfig now that it passes (#6635)
f83187388 chore: update pin and silence a valid mypy warning (#6633)
851dc9ae0 tests: convert test_cc_power_state_change.py to pytest (#6624)
b117d244b fix: install lxd snap only when snap list lxd reports absent (#6626)
5efa2c631 feat(cloudstack): fetch vm password using url_helper instead of wget (#6593)
7f84ece2a chore: sync gh workflow/shellcheck-debian-scripts.yml to main
df0c1036c feat(reporting): report duration on finish events (#6552)
aa1794941 feat(scaleway): add AZ and region fields to DataSourceScaleway (#6616)
0f09ed190 refactor(scaleway): remove private_ip handling (#6617)
fcb98b034 chore: drop support for Python 3.8 (#6607)
e6955e618 tests: skip azure ssh-keygen unittests when ssh-keygen not installed (#6612)
ff1b0d217 chore: no CLA workflow on downstream ubuntu package branches (#6620)
78a748808 doc(examples): remove datasource configuration (#6609)
d7bc16295 feat(raspberry-pi-os): Disable fallback netcfg + remove apt mirror cfg (#6482)
78c68f593 fix(raspberry-pi-os): adjust systemd network ordering; drop obsolete deps (#6459)
a7c16dff2 chore: fix logs with too few arguments (#6591)
849fb062c docs: eliminate unnecessary information from first development page (#6566)
890756015 feat(net): render vlan, bond, bridge for v1 network state (#6538)
009c0ec1b fix(rhel): Do not override changes in disable-sshd-keygen-if-cloud-init-active.conf (#6587)
583c2ebe5 fix(ssh_util): typo in exception message (#6590)
0cb642727 docs(reference): include openstack bond change (#6581)
e68bb6ea3 fix(network_state): add some missing keys to V2 key filter list (#6555)
baedc33ac test(azure): run pubkey extraction and certificate parsing tests (#6572)
7c684160e fix: support bond names in network_data.json (#6546)
7b400e43b fix(schema): allow accept_ra for bond/bridge/VLAN devices (#6545)
af454f257 test: convert test__init__.py from unit test to pytest (#6537)
62bc0ec17 doc(network v1): fix list of required keys for bond interfaces (#6544)
5e1d8f630 fix(oracle): handle null metadata field in oracle data source (#6549)
ec1a7b023 Add retry logic to 500 errors for reprovision data (#6563)
57685d147 fix(eni.py): correct resultant dns entries in eni file (#6535)
c66d5cf04 fix: distros link in README (#6574)
f3975e401 Fix URL scheme in deprecation message (#6565)
f63bbbfa7 test: fix bug in tmp_path used as a callable for path join operation
3d495284e test: replace unittest.skip decorators with pytest equivalents
cbad4501e fix: typos in cloud-init clean --help (#6559)
3830ed665 test(sources): Convert test_openstack.py from unittest to pytest (#6530)
afe32c023 test(config): Convert test_cc_mcollective.py from unittest to pytest (#6531)
ef7d34807 doc: readthedocs.yaml needs to generate meson_version.py for cloud-init (#6550)
10a0af061 fix: use correct tox testenv in PR template (#6543)
d65c7dfd6 feat(ca_certs): add rocky to supported distros (#6540)
9f971c472 delete openEuler in cc_rh_subscription (#6494)
9e4c9d2fd test: convert test_util.py from unit test to pytest (#6536)
0ffc297bf doc: update specific support docs for sru
979561e8b doc: migrate ubuntu_test_prerelease content into development/testing
5acf5247e test: update regex for rust-coreutils stat -c output using double quotes (#6500)
1b3625140 chore: packages SPEC files provide downstream_version instead of sed
1934004c7 chore: runtime version set by meson build artifact cloudinit.meson_versions
599c1f324 chore: update packages/brpm to avoid dependency on read-version
224eb50a3 chore: update packages/bddeb to avoid dependency on read-version
a88c7002f doc: update meson build example options
bde544c98 test (config): Convert test_apt_conf_v1.py from unittest to pytest (#6520)
586ff7e4d test(distros): Convert test_user_data_normalize.py from unittest to pytest (#6518)
e2ed42256 test: Convert test_schema.py to pytest (#6519)
7b70ce1d0 doc: fix obvious spelling errors (#6506)
9a78efcff test(distros): Convert test_ifconfig.py from unittest to pytest (#6517)
24c395028 test(config): Convert test_cc_ca_certs.py from unittest to pytest (#6516)
9db1cc8ef test(config): Convert test_cc_spacewalk.py from unittest to pytest (#6515)
eb43d8e2d fix: Fix misspelled domain in landscape.canonical.com
1c44cffd8 test: Convert test_alpine.py from unittest to pytest (#6514)
bc966042d test(distros): Convert test_sysconfig.py from unittest to pytest (#6510)
c64fce382 test(distros): Convert test_hostname.py from unittest to pytest (#6511)
92421c1dd test(sources): Convert test_common.py from unittest to pytest (#6512)
28f011422 feat(cc_raspberry_pi): Replace rpi-connect with usb-gadget support (#6466)
94f533587 fix(raspberry-pi-os): keymap handling on Trixie-based images (#6483)
e2715ef78 test: Convert test_resolv.py from unittest to pytest (#6504)
c6a1d1f15 docs(cc_raspberry_pi): Better phrasing of config descriptions (#6488)
83defe9e7 fix: install doc files that were previously installed pre-Meson (#6501)
25e94e7c4 test: add regex to cope with stat link output double/single quotes (#6497)
da47f5f21 feat(bsd): add FreeBSD support to Meson build (#6458)
eb2a559b7 docs(cc_timezone): Replace US/Eastern with America/New_York (#6496)
743d1920a fix: Fix typos again (#6490)
cb12e00e2 Release 25.3 (#6486)
89c956c8c feat(CI): new workflow to shellcheck debian package scripts (#6371)
69521d03f chore(cc_rh_subscription): deprecate hyphenated fields, remove self.log (#6470)
10a5fdc52 feat(eni): support "ip route" if available instead of "route" (#6460)
016abc02a test(distros): Convert test_hosts.py from unittest to pytest (#6481)
4c094b490 fix: preserve special permission bits (#6467)
41c8ae128 test: Convert test_registry.py from unittest to pytest (#6479)
1b0cb0b85 test: fix integration for PROPOSED to run apt update prior to install (#6477)
b04c475f3 feat(schema): add support for the not keyword (#6469)
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping aardvark-dns to version v1.17.0-58-gb36c4cc, which comprises the following commits:
2158073 release v1.17.0
8e8db13 release notes for v1.17.0
809f652 update MSRV to 1.86
188db02 run cargo update
aace910 fix download artifact action
728a48c [skip-ci] Update GitHub Artifact Actions
14aede7 fix(deps): update rust crate clap to ~4.5.51
b0a32c0 rotate key of imgt for meta_task
83f6934 rotate aws creds
e760751 fix(deps): update rust crate tokio to 1.48.0
91421f4 fix(deps): update rust crate clap to ~4.5.48
60cf016 fix(deps): update rust crate libc to 0.2.177
b2ff8a8 Update nameservers when resolv.conf is modified.
7a5c566 chore(deps): update rust crate chrono to 0.4.42
2c95552 fix(deps): update rust crate log to 0.4.28
32deed9 update CI images
071143f rpm: tests require socat instead of ncat now
50d7366 test: replace ncat with socat
e42b343 Packit: fetch copr rpm version from Cargo.toml
1c25e4f bump to v1.17.0-dev
56db1e0 release v1.16.0
2cdc994 release notes for v1.16.0
0c392ba [skip-ci] Update actions/checkout action to v5
5d34b0f fix(deps): update rust crate libc to 0.2.175
254c6d1 test: Remove empty user= directive in dnsmasq.conf to avoid SIGSEGV
b8a6c4c [skip-ci] Update actions/download-artifact action to v5
52cf09a fix(deps): update rust crate tokio to 1.47.1
ef89561 fix(deps): update rust crate tokio to 1.47.0
83b2433 coredns: fix typo in debug message
cdcaf7c coredns: process more than one message per tcp connection
5061851 fix(deps): update rust crate tokio to 1.46.1
fece9be fix(deps): update rust crate tokio to 1.46.0
57e60fa fix new rust 1.88 lint errors
7706847 fix(deps): update rust crate clap to ~4.5.40
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
| |
libibverbs has been superseded by rdma-core in OE-core since 2017.
The only consumer was ceph, which builds with -DWITH_RDMA=OFF making
the dependency unnecessary. Remove the recipe and its vruntime bbmask
entry.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Update ceph to v20.3.0 with the following changes:
- Update SRCREV to c1f7de9e4e6e92622aaff0d2173c65f83bb56e2e
- Update LICENSE to add BSL-1.0 and Zlib (new upstream deps)
- Refresh 0001-delete-install-layout-deb.patch for changed context
- Drop 0001-cepth-node-proxy-specify-entrypoint-executable.patch
(applied upstream)
- Add -DWITH_CATCH2=OFF (new, uses CPM to download at configure time)
- Add -DWITH_BREAKPAD=OFF (new, uses ExternalProject_Add)
- Use ${PYTHON_BASEVERSION} instead of hardcoded python version
- Remove libibverbs from DEPENDS (RDMA is disabled)
- Add CMP0167 patch to use FindBoost instead of Boost cmake config
- Symlink CMakeConfigureLog.yaml to /dev/null to prevent 100GB+ logs
KNOWN BROKEN: cmake 4.2 hangs indefinitely during configure after
processing src/extblkdev. The cmake process spins at 99% CPU with
28MB RSS, never producing CMakeCache.txt. This appears to be a cmake
4.2 regression with large projects (567 CMakeLists.txt files). The
hang is not Boost-related (FindBoost completes successfully) and
occurs with both Ninja and Unix Makefiles generators. Needs
investigation at the cmake/OE-core level.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
| |
Bumping umoci to version v0.6.0-53-gf5d1219, which comprises the following commits:
f5d1219 keyring: remove asarai@suse.de key
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping skopeo to version v1.22.0-1-gfd3ba47e, which comprises the following commits:
23dddaad [release-1.22] Bump Skopeo to v1.22.0
0b40dee0 [release-1.22] Update tests for a changed error message
3b6f2539 [release-1.22] Document the default of --retry-times
99298b6a [release-1.22] chore: fix function name in comment
d0289b25 [release-1.22] Bump common 0.67.0, image 5.39.1, storage 1.62.0
dec587b4 Packit: use `post-modifications` hook to update downstream TMT plan
8bd9c541 Bump to 1.21.0
399adc0e Packit: Do not notify on podman-next copr build failure
b7856d6b Support empty sigstore passphrases, for cosign compatibility
db81e690 Make TestSharedCopyOptionsCopyOptions table-driven
fe086dae Use retries in more cases of copying from external registries
8181f14e Makefile: remove stale target
85a14032 Makefile: use hack/test-system.sh for test-system-local
7ae3e0bc Recreate hack/test-system.sh
f3e66b8f chore(deps): update dependency golangci/golangci-lint to v2.6.1
f399e1d0 fix(deps): update github.com/opencontainers/image-spec digest to 26647a4
f23b6fb8 chore(deps): update dependency golangci/golangci-lint to v2.6.0
53f96121 main: Add support for overriding HTTP User-Agent
f9d4a402 fix(deps): update module go.podman.io/common to v0.66.0
ff539443 fix(deps): update module go.podman.io/image/v5 to v5.38.0
7a9cea1b fix(deps): update module go.podman.io/storage to v1.61.0
144e9151 Add missing newline to the output of (skopeo generate-sigstore-key)
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
| |
Bumping runc to version v1.5.0-rc.1-4-ge1c1378f, which comprises the following commits:
d5db4a59 CHANGELOG: move "better errors from runc init" to 1.4.0
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping podman-tui to version v0.9.0-662-g84a58100, which comprises the following commits:
84a58100 Bump to v1.11.1
c7873bea Packit fix downstream build
7d30d3d1 Bump github.com/containers/podman/v5 from 5.8.0 to 5.8.1
47773fa5 Bump to v1.11.0
e31488e1 Github action update go version
85541d48 Github action update go version
1e51a67f Remove unused release scripts
4cc3344f Packit for fedora downstream release
14abad8d Running codespell
73cb5a93 Github action for auto draft release
60cfd80d Bump github.com/containers/podman/v5 from 5.7.1 to 5.8.0
f712bf84 Bump golang.org/x/crypto from 0.47.0 to 0.48.0
5a5cff1c Bump golang.org/x/crypto from 0.46.0 to 0.47.0
71957a80 Bump github.com/sirupsen/logrus from 1.9.3 to 1.9.4
ed135a0e Feature - adding UID and GID for volume create dialog
94761cb0 Feature - podman volume import
7992628f Feature - podman volume export
874e9a97 Bump github.com/gdamore/tcell/v2 from 2.13.4 to 2.13.5
c557889c Bump to v1.11.0-dev
d92c0afe Bump to v1.10.0
a19fd028 Fixbug for exec terminal del and delete key input
fad70254 Bats skip tests feature
d5751074 Fixbug for exec terminal enter key input
b95c6ebe Bump github.com/spf13/cobra from 1.10.1 to 1.10.2
784a1937 Bump podman to v5.7.1
f7b35c29 Bump github.com/gdamore/tcell/v2 from 2.12.1 to 2.13.4
3d059e84 Bump golang.org/x/crypto from 0.43.0 to 0.46.0
a0bbf287 Bump github.com/gdamore/tcell/v2 from 2.10.0 to 2.12.1
c10d66bd Bump actions/checkout from 5 to 6
0539d87f Bump github.com/gdamore/tcell/v2 from 2.9.0 to 2.10.0
2dbed834 Update README.md to include docs on running the socket on non systemd distros
a0e1f21d Update install.md to include Nix installation
53b6f897 Bump golang.org/x/crypto from 0.42.0 to 0.43.0
0a5dc08b Bump to v1.10.0-dev
0b3baef6 Bump to v1.9.0
67c9f0ea Bump github.com/navidys/tvxwidgets from 0.4.1 to 0.12.1
170845d0 Bump golang to 1.24.7 - CVE-2025-47910 - CVE-2025-47906
657ef703 Bump github.com/containers/podman/v5 from 5.6.1 to 5.6.2
4155eab6 Doc update - Adding Windows installation via WinGet package manager
7ad6db31 Bump golang.org/x/crypto from 0.41.0 to 0.42.0
20d88eb5 Golang update v1.24.0
4124d737 Windows style use default colors
4a1d5db0 Bump to v1.9.0-dev
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping netavark to version v1.17.2-1-g3ea50b5d, which comprises the following commits:
bd7a4644 release v1.17.2
3d75166c release notes for v1.17.2
1fc09bab netlink_route: remove NLM_F_ACK from dump requests
bd47eafc netlink: validate buffer length
16d0c425 netlink: zero out buffer before sending
5e1ff21b netlink: socket read logic
3a74a29a bridge: read mtu from vrf table if set
10ad944c only consult main routing table for default interface
7ffb8ec4 release v1.17.1
0acc3dde release notes for v1.17.1
a815933c bump mozim to v0.3.1
53a710a5 release v1.17.0
35e1f235 release notes for v1.17.0
6cd4a15a sync release notes from v1.16.1
b83903b0 refactor(netlink): Generalize socket for multi-protocol support
0b5a12c4 run cargo update
b50a0439 test-dhcp: use /24 subnet for bridge
ec06f112 update serde and serde_json
d8fd16dd varktables: remove use of private serde type
560b00d2 fix(deps): update rust crate iptables to 0.6.0
fdeb9550 fix(deps): update rust crate clap to ~4.5.51
cd8d1bf7 fix download artifact action
ed733e5d Upgrade to mozim 0.3.0
0d7867ed rotating aws metadata task key
0f3b7905 [skip-ci] Update GitHub Artifact Actions
ddf7e320 rotate aws keys
6cd1b44b fix(deps): update rust crate zbus to 5.12.0
c2313bb3 fix(deps): update rust crate tokio to 1.48.0
80ff3a5a chore(deps): update rust crate tempfile to 3.23.0
cdb8c0a6 fix(deps): update rust crate netlink-packet-core to 0.8.1
09ddeb83 fix(deps): update rust crate hyper-util to 0.1.17
27814a2b fix(deps): update rust crate serde_json to 1.0.144
33a4eeeb chore(deps): update rust crate tempfile to 3.22.0
4aefcbbd update netlink-package-{core, route}
a501d661 fix(deps): update rust crate zbus to 5.11.0
642242b5 feat(dhcp): Send DHCPRELEASE on container teardown
cbc038f1 bump MSRV to 1.86
1db5fd2e update tonic and prost to 0.14
c858457b chore(deps): update rust crate chrono to 0.4.42
0450f4b4 fix(deps): update rust crate log to 0.4.28
4b36d199 fix(deps): update rust crate zbus to 5.10.0
b31bc38f Revert "[skip-ci] Update actions/download-artifact action to v5"
b79bdd73 chore(deps): update rust crate tempfile to 3.21.0
5314be52 Packit: fetch copr rpm version from Cargo.toml
8655e628 bridge: bind ip for aardvark-dns in unmanaged mode if gateway ip is not on the host
4d102f77 fix(deps): update rust crate serde_json to 1.0.143
34397533 feat: Add firewall-reload command for nftables systems
a690ea15 test: coverage for firewalld's StrictForwardPorts configuration feature.
9a306b8a update nftables to v0.6.3
766a7488 fix(deps): update rust crate mozim to 0.2.7
ccd0d48e bump to v1.17.0-dev
99f73d4e release v1.16.0
97ee174d release notes for v1.16.0
ebe61f21 sync release notes from 1.15 branch
38b098ff fix new lint warnings on rust 1.89
e6ef79ef [skip-ci] Update actions/checkout action to v5
9b3e3328 [skip-ci] Update actions/download-artifact action to v5
e5a773ac fix(deps): update rust crate tokio to 1.47.1
6c72a585 fix(deps): update rust crate clap to ~4.5.42
8bc9a2d1 fix(deps): update rust crate serde_json to 1.0.142
6eed183c fix(deps): update rust crate tokio to 1.47.0
9002adc3 fix(deps): update rust crate hyper-util to 0.1.16
f7c38830 exec_netns macro: update comment
dbc92003 test: add new test program for connection checks
c984a9fd add .cargo/config.toml to runs tests via unshare -rn
43e979da fix(deps): update rust crate rand to 0.9.2
2369c96d fix(deps): update rust crate serde_json to 1.0.141
1614fafe fix(deps): update rust crate zbus to 5.9.0
2fee8443 log default route mtu
57e37bbe get_mtu_from_iface_attributes: return error without mtu
fbedef91 make get_default_route_interface return the full LinkMessage
38cbf3a8 bridge: early break out of loop
047ef703 change exec_netns macro to return result
cd4d1ffb Set bridge MTU to match default route.
5c396928 fix(deps): update rust crate zbus to 5.8.0
c40ee944 fix(deps): update rust crate hyper-util to 0.1.15
4c5833d4 fix(deps): update rust crate tokio to 1.46.1
e2d1f6e2 fix(deps): update rust crate tokio to 1.46.0
e5b23f0b fix new rust 1.88 lint errors
083e525c fix(deps): update rust crate clap to ~4.5.40
7e93c15e fix(deps): update rust crate hyper-util to 0.1.14
7105bee1 make more use of NetavarkError
bc1eeda1 drop DhcpProxy error type from NetavarkError
81889849 update nix to v0.30.1
6a08cd64 fix(deps): update rust crate clap to ~4.5.39
204dc49f fix(deps): update rust crate zbus to 5.7.1
060f55dc write bridge sysctl to config file
b67d91b0 extract systemd path check to core_utils
35f1db6b move sysctl code into separate module
1d5ee4e7 wrap sysctl name in error
cdf73024 drop sysctl dependency
f6604ebf update MSRV to v1.83
acd39495 dhcp_proxy: set timeout_sender only if required
769a2ac5 cargo: bump mozim to 0.2.6
b6e12b2f fix(deps): update rust crate hyper-util to 0.1.13
03f12695 Revert "remove search domain from response"
0a6db8de fix(deps): update rust crate tokio to 1.45.1
fca86bbb update netlink-packet-route to v0.23.0
35140070 update nix to v0.30.1
23ba475c remove unused nispor from Cargo.toml
ecb32b3b fix(deps): update rust crate zbus to 5.7.1
c24391b6 fix(deps): update rust crate hyper-util to 0.1.12
a1046af2 rpm: update description
8f6f84d0 bump to v1.16.0-dev
c3828405 fix(deps): update rust crate zbus to 5.7.0
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping nerdctl to version v2.2.1, which comprises the following commits:
38507f9b chore: improve the visibility of orphaned containers in logs
7ba0ae28 build(deps): bump actions/attest-build-provenance from 3.0.0 to 3.1.0
4a8e9d0e build(deps): bump docker/setup-buildx-action from 3.11.1 to 3.12.0
59b65692 update kind (0.31.0)
017436cd update Kubo (0.39.0)
86228374 update soci-snapshotter (0.12.1)
5fb35451 update RootlessKit (2.3.6)
f7e5bc5a update imgcrypt (2.0.2)
32f9ae12 update BuildKit (0.26.3)
3f62767b update CNI plugins (1.9.0)
14b8fa49 update runc (1.4.0)
d46dec33 update containerd (2.2.1)
f5c1822c build(deps): bump github.com/rootless-containers/rootlesskit/v2
300c75fd build(deps): bump github.com/containerd/nydus-snapshotter
a7d9fb0f build(deps): bump github.com/containerd/containerd/v2
aa98f6cb Fix `'C:\\Program Files\\Linux Containers\\kernel' not found`
5db35e0d nerdctl image prune -f means --force, not --filter
bc45754a (feat): Default net.ipv4.ip_unprivileged_port_start to 0 inside containers
e5d183ff Revert "Fix SOCI image convertion regression for 0.12.0 release"
8221594a test: refactor compose_up_linux_test.go to use Tigron
deb3bff4 build(deps): bump github.com/docker/cli in the docker group
b7853787 build(deps): bump actions/cache from 5.0.0 to 5.0.1
7c2a81da docs: add additional nerdtest `Requirement`
a3411d2f build(deps): bump actions/cache from 4.3.0 to 5.0.0
151623b1 --help: fix output
6fd5210f build(deps): bump the golang-x group with 6 updates
d5feed79 build(deps): bump github.com/containernetworking/plugins
a853c646 build(deps): bump github.com/containerd/nydus-snapshotter
025f455c Refactor container_exec_test.go to use Tigron
f4991ec2 fix: support tmpfs long syntax in compose volumes
7e68e602 Refactor container_list_test.go to use Tigron
ec41209c build(deps): bump tonistiigi/xx from 1.8.0 to 1.9.0
d9bfe485 build(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2
e6aa885d build(deps): bump github.com/containerd/nydus-snapshotter
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Some upstream Go module repositories get deleted from GitHub (e.g.,
github.com/vtolstov/go-ioctl). While the Go module proxy still serves
cached archives, VCS mode cannot git clone a deleted repo. This causes
both do_fetch failures and generator verification failures.
Add GO_MOD_VCS_EXCLUDE recipe variable (space-separated module path
prefixes) and corresponding --exclude-module CLI flag. Excluded modules
are filtered out before verification and SRC_URI generation. Recipes
must provide a gomod:// SRC_URI entry for excluded modules as fallback.
Usage in recipe:
SRC_URI += "gomod://example.com/deleted-repo;version=v1.0.0;sha256sum=..."
GO_MOD_VCS_EXCLUDE = "example.com/deleted-repo"
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping kubernetes to version v1.35.2-20-gb6f632ba56e, which comprises the following commits:
b57e146aec7 cmd/kubeadm: ignore EINVAL error during unmount
af6488c9d55 Use localhost image reference in PodObservedGenerationTracking test
61003ad140a drop publishing rules from dependencies.yaml on release branch
b9be60a8c53 start scheduler after creating binding/non-binding slices
659d489e8dd dra: stabilize DeviceBindingConditions BasicFlow by creating without-binding slice first
02115b6ee1f Update CHANGELOG/CHANGELOG-1.35.md for v1.35.2
fdc9d74cbf2 Release commit for Kubernetes v1.35.2
1c0c911c3ca kubeadm: do not add learner member to etcd client endpoints
d05c5065395 Fix flake TestDeviceTaintRule test by adjusting event hanlder status update logic Co-authored-by: Pohly <patrick.ohly@intel.com>
69d9b9ba0c4 Bump images and versions to go 1.25.7 and distroless iptables
2371267d2f2 add dockerized go cache to `make clean`
de51841dbf7 Update CHANGELOG/CHANGELOG-1.35.md for v1.35.1
8fea90b4524 Release commit for Kubernetes v1.35.1
bd399917375 fake client-go: un-deprecate NewSimpleClientset
9bfc5ec55a7 Apparently some EC2 images we use do not have /proc/net/nf_conntrack
33b34518bae test: cleanup from review
9aad4027810 test: Fix KubeProxy CLOSE_WAIT test for IPv6 environments
701cf03e7bb test: Read /proc/net/nf_conntrack instead of using conntrack binary
f12bff04ab6 csi: raise kubelet CSI init backoff to cover ~140s DNS delays
0ac5e229e14 test(ut/dra): add unit test for pod requesting prepared and new claims
fe7f31bdcb1 test(e2e/dra): add test for pod requesting allocated and new claims
261b29aaa2f DRA integration: more pods per node, more parallelism
4885212b5b9 DRA integration: add "uses all resources" test
82b2a9d543f DRA scheduler: fix another root cause of double device allocation
f296d4a9a46 DRA scheduler: fix one root cause of double device allocation
a1f4382971f fix(kubelet): convert V().Error() to V().Info() for verbosity-aware logging
a77bd451173 fix(expansion):Resolve the issue of UTF-8 characters being truncated, resulting in invalid UTF-8
06a4889419e Bump images and versions to go 1.25.6 and distroless iptables
1d79222fd52 kubelet(dra): fix multiple claims handling
0a9d14b01c4 Fix flaky TestApplyCRDuringCRDFinalization test
6d23c3f5403 Fix for preferred dualstack and required dualstack in winkernel proxier.
ecc28f9d84a kubeadm: waiting for etcd learner member to be started before promoting during 'kubeadm join'
72a5892dca9 kubectl: Fix panic in exec terminal size queue
353648793e1 bump go to 1.25.6 for CVE fixes
41e2e598dc9 kubeadm: fix a bug where kubeadm upgrade is failed if the content of the `kubeadm-flags.env` file is `KUBELET_KUBEADM_ARGS=""`
870c561aeea Fixes the flaky test (Issue #132953)
646e656a561 Switch ipvs and winkernel back to more regular forced syncs
69e322920ef mark QuotaMonitor as not running and invalidate monitors list
923cb5be10e Add unit test with CSIDriver.SELinuxMount=false
1f001b78805 Added e2e tests with disabled SELinux
2aeedbd767b Use only enqueuePod to add pods to the controller queue
44b1306e553 Fix policy of Pods with unknown SELinux label
b1c7820806d selinux: add e2e test with a completed pod
7d9af54b956 Add new unit tests
6edce1ddecb Rework unit tests to builder pattern
b84206f5af2 selinux: Do not report conflits with finished pods
9993d83107f refactoring: use a common function to enqueue Pod
802ed9eaa9f add StatefulSetAvailabilityCheck test
04da1f09e5d replace "k8s.io/klog/v2/ktesting" with "k8s.io/kubernetes/test/utils/ktesting"
f8578e8d8b7 schedule pod availability checks at the correct time in StatefulSets
e7c2ecf799f wire now (time) to the availability checks in the StatefulSet controller
c52a5384b91 Fix race condition in DRA health e2e test pod status update
28fffe71c46 kubeadm: always retry Patch() Node API calls
2a663d9a3a2 Disable SchedulerAsyncAPICalls in v1.35 due to performance issues
62b0580535f kubeadm: do not sort extraArgs alpha-numerically
778b9a97713 Update vendored hnslib to v0.1.2
624047b4f31 refactor: Ensure metricIdentifier uses scheme for kind resolution
b9d3560f7ea Fix apiserver_watch_events_sizes metric.
5345aa5a9b4 hack/lib/util.sh: support uutils' `date` command
e63eccd82f1 Update CHANGELOG/CHANGELOG-1.35.md for v1.35.0
66452049f3d Release commit for Kubernetes v1.35.0
ea0dce1df19 CHANGELOG: Update directory for v1.32.11 release
f58f81d9175 local-up-cluster.sh: support more recent containerd like 2.2
04d87a4b6e7 CHANGELOG: Update directory for v1.33.7 release
f887a29fe22 CHANGELOG: Update directory for v1.34.3 release
612122f1d79 CHANGELOG: Update directory for v1.35.0-rc.1 release
91b0dfb7a49 Update CHANGELOG/CHANGELOG-1.35.md for v1.35.0-rc.1
08b536721bb Release commit for Kubernetes v1.35.0-rc.1
8d4237fde8a kubelet: Fix nil panic in podcertificatemanager
2c811fdd3a1 etcd: Update etcd to v3.6.6
dede2886a84 update publishing rules
eae2a1bd5f5 Bump images and versions to go 1.25.5 and distroless iptables
3f42ca14011 downgrade reflector watchlist fallback log to V(4)
91e221b0471 DRA upgrade/downgrade: roll over only after -alpha.0
91368adbb55 Use transformer in consistency checker
76da8d6de02 Add unit tests for Data Consistency Detector
88c20d46a4e [client-go #1415] Embed proper interface in TransformingStore to ensure DeltaFIFO and RealFIFO are implementing it
c6fa10dbb7c add release-1.35 publishing bot rules
03066850f63 remove TestEtcdSupportedVersionLength, no longer relevant
aa54ffa485a fix etcd versions after rotation
4a944d1a3fa add skew -2 version in SupportedEtcdVersion
51f614a1562 ipallocator: handle errors correctly
de1b8e076a3 Fix MAP failure on objects with duplicate list items
76b76c2d523 CHANGELOG: Update directory for v1.35.0-rc.0 release
496077da56d Release commit for Kubernetes v1.35.0-rc.0
f8be8d320f3 drop rules for release-1.31 as it is EOL
7e3e9b6a64b update publishing rules
5302b929ae5 Bump golang.org/x/crypto to v0.45.0
fcdc4e24950 Remove TestWatchStreamSeparation from storage/cacher related tests
3661554f872 Bump images and versions to go 1.25.4 and distroless iptables
dae1dbc1ff1 KEP-5311 - Revert RelaxedServiceNameValidation promote to beta
6bf802807b7 Make unique signerName per pod certificate test
d80e73c0a9f cleanup: removed uncached client plumbing, keeping the sequencing fix for quota validation
c33c0464db3 DRA: Fix flaky integration test
950dfd612b4 test: add test for Ingress Update
ac90e6a809a Fix: Check defaultBackend in allowRelaxedServiceNameValidation
5ed9501d3cc Fallback to live ns lookup on admission if lister cannot find namespace
4cf195304ca CHANGELOG: Update directory for v1.35.0-beta.0 release
3e19cc51601 Address review comments
04eb121d32e Fix failing scheduler_perf test cases that don't set any feature gate
f60f5b24605 Refactor: Contextualize CRDFinalizer to fix goroutine leak
e08c1e4ce35 Fix alpha API warnings for patch version differences
a66c025dc9e test/e2e_node: Update procMount test to use Restricted PSA level
f76d0e5aa48 test/e2e: replace forbidden gomega.BeTrue usage with Eventually(...).Should(Succeed())
216aaf76cba vendor: update vendor and license metadata after replacing BeTrue usage in csi tests
cee5b837da9 Resolve lint restriction on BeTrue by introducing Succeed() with contextual error messages
854e67bb51e KEP 5598: Opportunistic Batching (#135231)
c68b35c4c75 Update vendored dependencies
1ce140d1055 update github.com/opencontainers/selinux to v1.13.0
f33a6e5a925 CHANGELOG: Update directory for v1.32.10 release
ea83385231f CHANGELOG: Update directory for v1.31.14 release
b6e83d29fc6 CHANGELOG: Update directory for v1.33.6 release
4b20e5c3fe3 CHANGELOG: Update directory for v1.34.2 release
71ddb98ae4d Remove image volume e2e test because CI has containerd < 2.1
5ac2ffcc1e3 Enabling NodeDeclaredFeatures in unit tests
0e883083bf9 Add InPlacePodLevelResourcesVerticalScaling declared feature.
10b73f8ef9f Test fixes
21920bb37e9 Test fixes
0f88a9a17e4 verioned_feature_list update
8920eb91077 Unit test for AddPod with PLR resources
66248c262c3 Unit tests for allocation manager
1733d8fc8c8 e2e tests
edc3b77cf8a Kubelet changes and unit tests
11ff4efcdeb Kubelet changes to support IPPR + PodLevelResources
7645eb70e92 Scheduler changes to support pod level resources in place resize
84776abaff4 Modifying validation logic and pod strategy for PodResize to accommodate for Pod Level Resources resize
b8777c32633 Generated files from API changes
efc3126b768 Adding Resources and AllocatedResoures fields to the list of expected fields in PodStatus in admission test
69c1fd72aa0 API changes for Pod Level IPPR related PodStatus fields
6d301342569 Adding InPlacePodLevelResourcesVerticalScaling feature gate
d26b44540e3 move Ensure Secret-Pulled Images feature to beta
805eb885e3e node e2e: add tests for Ensure Secret Image Pulls default policy
0b47a378611 Keep pod in running state and prune past container status from runtime
2f55207dffd Fix volume performance tests with performance constraints
094b1bf0188 fix [sig-node] Container Runtime blackbox test when running a container with a new image [Serial] should be able to pull from private registry with secret [NodeConformance]
2c81b6e8adc fix: replace BeTrue with BeTrueBecause for better failure message
bb822259984 ImagePulledRecord API: don't serialize nulls
99ceb201738 kubelet/image-manager: pulled images records storage version migration
6fd9878056c kubeletconfig: copy ImagePullIntent, ImagePulledRecord to v1beta1
aceb89debc2 KEP-5471: Extend tolerations operators (#134665)
aac951d9022 Add dependency for NodeDeclaredFeatures
97c3f575b98 Refactor validation
2eb1eeeabf0 add disruptive tests
83c5cd5526f Implement restartPod action
fab280950da Add client-go credential plugin to kuberc
d979816a40d Fix e2e test cases for EnvFiles
d82fa1eb98c test: use localhost and HostNetwork for registry, mark test as disruptive
8d0fb17a18f e2e test registry: force IPv4 localhost IP
ad0a3de152c node-conformance-e2e: restart the kubelet after loading credential config
1225ce509e6 scheduler: KEP-5007 add integration tests
368e699ed2e scheduler: KEP-5007 move BindingConditions integration tests to separate file
e88aa1e04d7 Integration tests for setting and clearing NominatedNodeName
9c5959e9de8 Fix failing test for pod group scheduling timeout on Windows
3b3e4dd2c48 fix missing major.minor in golang: upstream version
e6d95a7b381 Promote NominatedNodeNameForExpectation and ClearingNominatedNodeNameAfterBinding feature gates to beta
b5dae0ffaa0 DRA: Update e2e tests for Partitionable Devices
4d29f88c886 DRA: Update integration tests for Partitionable Devices
7861714e6cc DRA: Add validation in resourceslicecontroller for Partitionable Devices
38b5750e33a DRA: Update allocator for Partitionable Devices
c7b277a32e1 KEP 4639: Move ImageVolume to on by default beta
6689fa7b006 DRA: Update ResourceSlice max size tests for Partitionable Devices
93fc7422ee8 DRA: Update validation for Partitionable Devices
ef3f6a25075 Run make update
e73fd4204d8 DRA: Update types for Partitionable Devices
f8ccc4c4d78 dra scheduler plugin: refactor extendeddynamicresources.go for readibility
b9e59e8ea9a test: Add integration tests for peer-aggregated discovery
8f2c0a9a60f kube-apiserver: Enable peer proxy and peer-aggregated discovery
2f5f1749e5d apiserver: Add peer proxy and peer-aggregated discovery support
c72f9f73d92 discovery/aggregated: Add invalidation callback support
6b8f7938889 discovery/aggregated: Add peer-aggregated discovery handler
d6907457723 peerproxy: Refactor into separate files and add exclusion filter
6a07342d37a discovery: Add profile-based content negotiation
3b89deb6b37 util/sort: Add MergePreservingRelativeOrder for topological sorting
3be9af427fa Fix revert conflict
e6574b416fd Revert "Unit test for emulated storage version selection"
e8176f6f9f4 Revert "Don't pick versions that have a replacement as storage version"
2d3e0639230 mark device manager as haelthy before it started for the first time
da9f1d8eed7 dra scheduler plugin: move extended resources functions into separate file
b07c8698b9f test: add retry to getMetricsFromNode
fbe8d4c63cf upgrade go to 1.25.4
1c4cab9dda8 DRA scheduler unit test: fix race with ResourceSlice informer
789f06544de DRA allocator: fix result logging
fc404b6a3d8 Cache DRA state for scoring extended resources
f86a456ea3d Switch kube-proxy/server.go to context-aware logging APIs (HandleErrorWithContext, UntilWithContext)
e986000e6a7 KEP-5607: Allow hostNetwork pods to use user namespaces
54702182c2d graduate PodTopologyLabelsAdmission feature gate to Beta and on by default
d25c5251f94 Fix the DRA extended quota test
bf7dbb129fb DRA: test performance for scoring extended resources
a9dcc8e2c94 Fix sending OnFinish to in-flight async API calls in scheduler
6b764d555f1 test: update MutableCSINodeAllocatableCount tests for the new attacher
da1981248e3 test: update CSI manifests
049cb8558e8 Add integration test for gang scheduling
4a067cc022e Add read Workload permissions to kube-scheduler
c086bdeaa22 Add integration tests for gang queueing
8d67173de0d Implement Gang scheduling in kube-scheduler
5d1f9107ef8 test: fix sed in update-hostpath.sh
a3093a95f26 test: don't remove group snapshot script
54b6ab67479 e2e: Add tests for Workload API
02acdd60574 kubectl: Add Workload to kubectl describe pod
078f462a955 api: Workload API and Pod WorkloadReference generated files
96392746769 api: Create Workload API
9677ac4c0be api: Add WorkloadReference to Pod spec
b6006528e1e Add feature gates
dfaed0586f2 test: skip snapshot-metadata sidedcar in update-hostpath.sh
6da8d6e94d4 remove deprecated Ingress api from describe
edbc32fa602 DRA: implement scoring for extended resources
fc9f02e2541 refactor: rename and suitable docstring
8be985d4fab kubelet: fix concurrent map write error when creating a pod with empty volumes when the LocalStorageCapacityIsolationFSQuotaMonitoring feature-gate is enabled
a02748c1243 kubelet: delay looking up pod image pull credentials until necessary
95a59d0cfb5 DRA scheduler_perf: write JSON where perf-dash expects it
1499524e8e9 E2E node: temporarily disable flaky "pull from private registry"
78a8c2e6a35 mention MutablePVNodeAffinity in the API doc
3882f0cf177 allow PV.Spec.NodeAffinity update
b622363659b add feature gate MutablePVNodeAffinity
ee481b97e0b fix sorting logic after after normalizing errors
71c02338df3 Fix the failing e2e test case in Standalone mode.
a2dfa0fd731 run gofmt to fix formatting issue
6b949e79931 Add integration test for admission controller.
c06297b3298 Add integration test for kube-scheduler plugin.
540ffbd7230 feat(usecase): Introduce IPPR with static CPU policy support to use node declared features framework.
e7a42e8e8e0 feat(admission): Add NodeDeclaredFeatures admission plugin
649d9c532a5 feat(scheduler): Add NodeDeclaredFeatures scheduler plugin.
192d93f7cb9 add e2e tests for static pod and standalone mode
879d81ff062 promote EnvFiles to beta
0976b6ada37 Improve env file syntax
47fb373c317 run update-codegen.sh
a5a2cfdb353 fix(validation-gen): Correct ratcheting for uncorrelated old values
c30b75b0085 feat: Implement node declared features reporting and validation.
3c22291a4b0 autogenerated files from "make update"
e1f181e3632 feat: Add common library for declared feature discovery, inference and matching.
c9327d00b11 feat: Add NodeDeclaredFeatures feature gate and API fields.
801de96635b DRA: ConsumableCapacity update allocating and registry test cases
870062df4f1 adjusts DRA extended resource quota to include devices usages from regular resource claims
66769823160 fixed non-sidecar init container device requests and mappings
4eb0d39bf51 emit more events when the pod resize status changes
481f30bd645 hack/update-conformance-yaml.sh
30965ea3ce6 drop MinimumKubeletVersion for unsupported kubelet versions
da6d15adf6b Fix NPE in CEl accessors of additionalProperties=true objects
030d72959e8 feat(validation-gen): Refactor testscheme and add ratcheting bug tests
499bff4ca46 Revert "controller: duplicate utility method cleanup"
5a7c90fb767 Allow mutable scheduling directives for suspended Jobs
60744fc8b9c DRA device taint eviction: track evicting rules
95279872936 DRA device taint eviction: use NOP queue during simulation
eaee6b6bce0 DRA device taints: add separate feature gate for rules
8d823b65236 add minimum kubelet version for ippr tests
eea7c1403fa [DRA] Add ShareID to kubelet plugin API
3f8444210cb Add e2e tests, metrics and events for podcertificaterequests v1beta1
53df4f9be69 CHANGELOG: Update directory for v1.35.0-alpha.3 release
fbfeb33231f DRA: Add scoring for Prioritized List feature
374baacf92c Check HealthCheckTimeout in updateHealthInfo comparison
a49bc6f2fbb kube-proxy/winkernel: fix stale RemoteEndpoints due to premature clearing of terminatedEndpoints map.
79dc7908ff3 Fix potential dryrun failure when NodeLocalCRISocket reaches GA
7db53119521 feat: Add MutablePodResourcesForSuspendedJobs feature gate
949be1d132b fixed comments due to switch from class name to class for GetDeviceClass
c77a39c06fe Address review comments and fix failing tests
320987ead3a Addressed comments
902c2e0c150 Fix lint errors in dynamicresources_test.go
396a7c1a12a test/e2e/node: add minimum kubelet version to some pod tests
c5b14939253 Add test case for claim creation failure in DRAExtendedResources
ea7561b243a Implement scheduler_resourceclaim_creates_total metrics for DRAExtendedResources
5102591a6b9 Refactor resource claim metrics to use structured labels and add "source" dimension.
9cad3f87876 Introduce kuberc view/set commands under kubectl alpha (#135003)
326b7eaa526 e2e/storage: deflake CSI Mock volume expansion quota validation
18967f53ddd enable commentstart check on adminssion API group
3b0913c8666 fix test case
693f42bfc16 KEP-3619: deleted unused SupplementalGroupsPolicy in e2e/feature
120bcee0578 KE-3619: fix emulation version in unit tests
d12663248d5 KEP-3619: fix removal version for SupplementalGroupsPolicy feature
0aea256ef96 revert of 8f0a6583ca81a64475e69a8b6b4d06bbe0c2ac67
4acafd92452 [DRA] Fix unexpected errors on ResourceClaim strategy update
9ca74a33595 test: register kube features in unit tests
024382658b6 controller/volume/vacprotection: Improve goroutine mgmt
e08d03b1b5c controller/volume/selinuxwarning: Improve goroutine mgmt
1e6ad423bf1 controller/volume/pvprotection: Improve goroutine mgmt
0caae6f7041 controller/volume/pvcprotection: Improve goroutine mgmt
ed74779a0f9 controller/volume/persistentvolume: Improve goroutine mgmt
8eab454e38e controller/volume/expand: Improve goroutine mgmt
27774052abd controller/volume/ephemeral: Improve goroutine mgmt
12205df76de controller/volume/attachdetach: Improve goroutine mgmt
9d4ff6ecf2b controller/tainteviction: Improve goroutine mgmt
d2a443db75e controller/serviceaccount: Improve goroutine mgmt
c641df792b6 controller/resourcequota: Improve goroutine mgmt
d908a470a55 controller/garbagecollector: Improve goroutine mgmt
90f0fd09f20 provision 10G disks for testing pvc instead of 1 byte or 1GB
90d32919ee5 chore: cleanup unneeded imports
2a3f66d3f6b KEP-5284: Implement Constrained Impersonation
8200f9a22c7 add missing apiversion to run_group_snapshot_e2e.sh
3f45a675fc7 DRA integration: test eviction through DeviceTaintRule
bbf8bc766e3 DRA device taints: DeviceTaintRule status
0689b628c7d generated files
f4a453389d2 DRA device taint eviction: configurable number of workers
256591520a5 feat: add OWNERS files for flagz server and api with approvers and reviewers
09dfeeb9881 test: add integration test for /flagz endpoint in scheduler
ba059168c35 test: add integration test for /flagz endpoint in KCM
16db8e2375f feat: add integration test for /flagz kube-apiserver endpoint
2422bc0bb8c feat: Implement structured /flagz endpoint
b3222498fdb added comments, and refactoring to make it explicit and easier to understand.
a181fd2eb81 removed NodeAffinity in the test cases as it is not needed
336a3e92757 Update pkg/scheduler/framework/plugins/nodevolumelimits/csi_manager.go
611b4c1408f Adding batch handling for popping items from RealFIFO
c67937dd352 switched from storing name to storing a pointer to the device class.
c438f8a983c scheduler: Add BindingTimeout args to DynamicResources plugin
a9ff1b19c18 remove deprecated IngressClass api from describe
372328f2814 reverted the inititial device class change
2e479e00f4e refactored the hint function, added test cases
ed62db7acf3 e2e registry: run as pods even in seemingly in-cluster pull tests
a275785bd4f node conformance e2e: log fake registry creds on test failure
fba24a8e715 node-conformance-e2e: finite wait for pod status
5cdb983c2e3 fetch node synchronously on node affinity failure
27a81144b22 Add checkpoint for groupsnapshot data consistency (#134637)
002774c3157 Address review comments
bbbe23dac7c Reapply "prepare DRA kind config for kubeadm v1beta4"
f1bd4f509eb refactor updateUnfinishedWork into separate function to use defer unlock
9113013eb89 Introduce --as-user-extra persistent flag in kubectl (#134378)
82d3c07f0ed test/e2e/apimachinery/watchlist: run WatchList test on most jobs
ca8847149e3 client-go/features: enable WatchListClient for 1.35 release
0639f7f40e0 Allow PSA controller tests to handle failure cases as errors
a079e1ed256 kubeadm: add 'HTTPEndpoints' field to 'ClusterConfiguration.Etcd.ExternalEtcd' that can be used to configure the HTTP endpoints for etcd communication
a92b987b3dc comments
d132afc87ee DRA scheduler_perf: benchmark baseline test cases with different allocators
191ab8d78d8 Integration test verifying that in case a preemptor pod with higher priority arrives while preemption is ongoing, the lower priority preemptor does not get stuck in unschedulable
9640da54524 Verify if pod has ongoing async preemption before evicting pods
3dabd4417d9 KEP-4368: Job Managed By; Promote to GA
c98804b77f3 Fix existing integration tests for NominatedNodeName
81448febcf4 KEP-5278 Clear NominatedNodeName upon scheduling failure
257ff6edcd6 kubelet/app/server_bootstrap_test: fix Test_buildClientCertificateManager
1fc389c43f8 Revert "prepare DRA kind config for kubeadm v1beta4"
cdbe3401431 KEP-3619: remove e2etestskipper in e2e tests for SupplementalGroupsPolicy GA
b3aeead3e22 KEP-3617: Graduate SupplementalGroupsPolicy feature gate to GA and lock to default
9b95eaf5937 Fix pod resize validation when adding non-resizable resources
0631a66d528 address feedback - refactor validateSlice and validateSet to use validateItems
1e8fc543cc7 Fix report health for templated and renamed DRA claims
14f17a3809a addressed review feedback
713b7231d82 Merely check for presence of CSIdriver object
fa31a593b9f Clean up event messages for errors in Portworx in-tree driver
979c4427749 Fix spurious workload rollout due to null creationTimestamp in controller revisions
7d186d870f9 Remove unused and fragile revision hash comparisons
94e085e15ca Add unit test detecting spurious statefulset rollout
a22b3d031fe address feedback
b609d4713c2 added integration test case
7aa849160a8 added queue hint function
3b905ae4b5c added device class add/update events to noderesources plugin when DRAExtendedResource feature is enabled
fe3722dfa9a Address review comments
4bbe8f0cfb1 Add test that verifies scheduler behaviour
b9118183cf1 Fix the boilet plate
39ad8278e23 feat: update DRA to short-circuit on maxSize checks, add a declarative validation test related to this case
eb1a5b6ddfb remove pod resize endpoints from pending eligible endpoints
bdb2e37781a Fix queue to gracefully shutdown
b83a6a83f0f pick the device class created latest, or with name alphabetically sorted earlier
96edaa43d2e Set KubeletCrashLoopBackOffMax feature gate to default enabled for beta.
a3bf2abddb2 Move a comment about ginkgo to code that runs ginkgo
3e33e61968e Enable group snapshot tests
f9ef0049160 E2E framework: start slow tests first
321c1e37c06 Update group snapshot tests to v1beta2
de9138f4fa9 Promote IPPR e2e tests to conformance
c13c5814597 Add given namespace in dryrun=client output of HPA
762b458700b Lock AggregatedDiscoveryRemoveBetaType to true
3eab698884a fixed unit test and integration test failures
363407c500d Re-enable SchedulerAsyncAPICalls feature in v1.35
6dd086536ff DRA E2E: stop labeling tests as ConformanceCandidate
5e0d06082d6 DRA allocator: partial support transition between nodes, fix "is incomplete"
a0e500ace39 Revert "DRA: Allow AllocationMode: All from multi-node resource pools"
30de4235970 Revert "added WithFlaky() to the device plugin test case: supports extended resources together with ResourceClaim"
d3c2115441e Clean NewDefaultKubectlCommandWithArgs for readability
ac9120f6076 Move PluginHandler to separate file
c832203707d pkg/controller/garbagecollector/garbagecollector_test: wrap kubeClient with a client that doesn't support WatchList semantics.
36510ccf56f devicemanager: fix cleanup of healthy and unhealthy devices
12a0c8ce17f DRA extended resource: chain event handlers
d8c66ffb63c Add a global cache to support DRA's extended resource to the device class mapping
34021d451d3 Revert "E2E framework: start slow tests first"
59e075e8d35 Promote PodCertificateRequests to v1beta1
7c47b91ed2c Limit CONNECT proxy response header size
2be8c36dba5 fix: additional nil check for workqueue shutdown
ecbda22ea54 chore: more precise resync comment
a85a9e13aa7 chore: cleanup outdated comment
956964d6e58 fix: register feature gate dependencies
36e6b9075e5 chore: move golang.org/x/time to required
806cf9ef512 style: alphabetic ordering
b68fd5e5336 docs: cleanup docstrings
abf60333adb feat: add feature gate to kube features
c2044c8d390 fix: feature gate min version
0c775eec7ce fix: rate limit route reconciles
9af329151a4 feat: minimal route resync period interval
9e612f107a1 feat: update routes on resync
0b41218ed4f fix: missing update of feature gates
be7e0ddb74b fix: spelling
8ef9e53ce5d fix: check error of AddEventHandler
a5055cc407b feat(ccm): watch based route controller
cff07e75519 E2E framework: start slow tests first
6034321603b dependencies: ginkgo v2.27.2, gomega v1.38.2
308a53dfa6d Add validation options for static pod
264eab46db9 Remove unused delete reactor
acdf891478a add e2e tests
c99145805f1 [DRA] Fix DistinctAttributeConstraint match comparision with value
97587e951b0 oidc: fix jwks metric name in comment
2b0bfbfb8e6 removed unused functionality from run_group_snapshot.sh and prepare for kubeadm v1beta4 config
a3ce49a11ea prepare kms kind config for kubeadm v1beta4
a1ce4bb4686 Check for CSIDriver object before stopping pod scheduling
d17ed9be174 prepare DRA kind config for kubeadm v1beta4
2f0a84af1af Add csidriver lister to CSI scheduler plugin
85d7626d2dc Do not schedule pods if CSI driver is not ready
8b2babcbff6 PSA: fix lint with older policies
d9ddd5c59b0 Allow PSA pass scenarios to be informed by the policy level
e8bd3f629d4 drop UserNamespacesPodSecurityStandards feature gate
f2d075ea655 Address review comments
c69259cb713 DRA device taints: switch to workqueue in controller
e5fcd20a264 DRA device taints: tighten controller test
6ebd853f170 DRA: implementation of none taint effect
75c91867928 generated files
e4dda7b282e DRA device taints: fix DeviceTaintRule + missing slice case
fee14ffca20 DRA API: device taints 1.35
11e3147fdd2 kubelet: add a test to verify that dra plugin enforces timeout
c71e45c7352 Implement a csimanager for managing storage related assets
d4c6e0bfd04 change client go default features to versioned
344df7835cd refactor dra fake grpc server
1951e8dd887 kubelet/config/apiserver_test: expose IsWatchListSemanticsUnSupported on fakePodLW
05f5051be3a kubelet/userns: Print podUID on errors
35423364e2f apiserver/pkg/admission/plugin/policy/test: wrap trackers with ToListWatcherWithWatchListSemantics
5993782d653 dependencies: various minor updates
9e462123d64 client-go/tools/watch/test: wrap the LW with toListWatcherWithUnSupportedWatchListSemantics
ae201951a8a k8s.io/client-go/tools/cache/test: wrap the LW with toListWatcherWithUnSupportedWatchListSemantics
f2257059d7a node: cm: fix linter failures
1055d8541e6 k8s.io/client-go/testing/fixture: does not support WatchList semantics
1ca34bd0d2d apiserver/pkg/storage/cacher/lister_watcher: pass RV for request from the watchlist consistency checker
040516a6e76 fix linter changes
67280d4df99 node: cm: update mocks for contextual logging migration
bd11e52bfc1 Drop locked StrictCostEnforcementForVAP and StrictCostEnforcementForWebhooks feature gates
b3415bfdfe2 kubeadm: added container runtime version check to preflight
d80ac77d985 feat(dra): add k8s:optional for all DV migrated optional fields
cde15e6450c Add ObservedGeneration to CRD conditions
02289d08f6c refactor scheduler_perf test for extended resources by dra to have 10-50 device classes
67143028e78 Add --min-compatibility flag.
05f67d834ab node: cm: migrate container manager to contextual logging
7bbec73192a Add a interface for sharing CSINode objects between scheduler and CAS
d99d3c0b69d refactor ippr tests
c1a95eb7e2f Structured statusz
1d9c646892c fix unit tests for ippr ga
2e543d151b6 DRA device taints: convert unit test to synctest
2e534d6da10 DRA: Allow AllocationMode: All from multi-node resource pools
fda069a5d62 update kal to fix markdown table bug
9cc3a06f0b4 enable duplicate tags for kal and add exceptions
0fac370625b sig-auth: fix KAS options OWNERS
428be46ba25 node conformance e2e: move registry cleanup to ginkgo.DeferCleanup
8d3bc085ce4 DRA integration: refactor helper functions
89f1edd5169 kubelet/image_manager: rename EnsureImageExists arguments at the interface level
01d1cb96793 test: fix flake in DRA DeviceBindingConditions by waiting for reallocation before status update
79df44ca529 scheduler: KEP-5007 allocator test - devices w/wo BindingConditions
7bc354e15d5 kubelet: add metrics for in-memory stored image-pull-related records
ae7c6e8080e kubelet/imageManager: add metrics for MustAttemptImagePull
429a96eda6e kubelet: add metric for the number of stored image-pull-related records
7a9d718cdf5 Benchmark SharedIndexInformer
9b80964efd2 add integration tests for pod replacement during scaling and
b1942ae6b12 [DRA] Add dropDeviceBindingConditionsFields and fix immutable field on DeviceBindingConditions strategy test
df3f5dd493b test(validation): add cases for validating maxItems in status.devices.networkData.ips
2713803c78d feat(dra): migrate NetworkDeviceData.IPs maxItems to declarative validation
a8c9bb1f168 test(validation): add cases for validating maxItems in status allocation requests
0d6d2aa6a58 feat(dra): migrate DeviceAllocationConfiguration.Requests maxItems to declarative validation
91614613170 test(resourceclaim): add unit test for unique DeviceAllocationConfiguration.Requests in status
a553ac0e92a feat(dra): migrate DeviceAllocationConfiguration.Requests uniqueness to declarative validation
a4e8b54dee7 test(validation): add case for handling duplicate request names in ResourceClaim status update
cc0012b4502 Add Declarative validation unit test for duplicate IPs in NetworkDeviceData
9bbf28e2f4e feat(dra): migrate NetworkDeviceData.IPs uniqueness to declarative validation
1d2b87c2e9a updated nodeswap description only
4f647b3f3df removed BlockOwnerDeletion
2a217a9bfd2 promote pod generation tests to conformance
3b72759d1bc Update SVM to Beta
24a53fa6384 add JWKS fetch metrics for jwt authenticator
ad2c6b443dd controller/validatingadmissionpolicystatus: Improve goroutine mgmt
a51285e1f27 controller/servicecidrs: Improve goroutine mgmt
63c15cbe83e controller/resourceclaim: Improve goroutine mgmt
5f423d7ba8d controller/podautoscaler: Improve goroutine mgmt
51ef94c5472 controller/nodelifecycle: Improve goroutine mgmt
34e688eb3dc controller/nodeipam: Improve goroutine mgmt
a265769245a controller/ttlafterfinished: Improve goroutine mgmt
821a3f5affb controller/storageversionmigrator: Improve goroutine mgmt
7240649e4f6 controller/ttl: Improve goroutine mgmt
3ee8c53e537 controller/podgc: Improve goroutine mgmt
1635a139b88 controller/storageversiongc: Improve goroutine mgmt
502186ca933 controller/statefulset: Improve goroutine mgmt
91cf8253a2a controller/replicaset: Improve goroutine mgmt
5f48a52bf86 controller/namespace: Improve goroutine mgmt
cb4ad791023 controller/endpointslicemirroring: Improve goroutine mgmt
cd73e8777b3 controller/endpointslice: Improve goroutine mgmt
ccd35f7c5ee controller/endpoint: Improve goroutine mgmt
d9ba92ba3bb controller/disruption: Improve goroutine mgmt
6e0a4da2f6a controller/deployment: Improve goroutine mgmt
e8b0f274561 controller/daemon: Improve goroutine mgmt
575e9eb64c7 controller/job: Improve goroutine mgmt
7bf52d74d02 controller/cronjob: Improve goroutine mgmt
d1eccb2377c controller/clusterroleaggregation: Improve goroutine mgmt
5f3f39edc12 controller/certificates: Improve goroutine mgmt
3a50f28ff80 controller/bootstrap: Improve goroutine mgmt
c9825b8d279 kubeletplugin: clarify DRAPlugin comment about driver-specific claims
4a991bbbd9c fix unit tests for pod gen GA
e06abce75f1 node: mm-mgr: Refactor to use logger parameter instead of context
d2f780e277f promote ippr to ga
21c832b47dc promote pod generation to GA
9bf2363333d restarting kubelet does not change pod status
842cd0ea777 node conformance e2e: don't recreate test container on an error
135b46974af e2e registry: have SetupRegistry() return registry address
ee777bef916 test/utils: remove GcAuthenticatedRegistry from RegistryList
bb1b23a34ee e2e fake registry: add function docs
fc81e22735a fix Node Conformance Container Runtime test with fake registry
a0e64c21f2f Use fake registry in Node's container runtime image pulling tests
b29fdd1551f Forget pod from scheduler's cache immediately when it's deleted or has DeletionTimestamp set
15029967870 Refactor scheduler event handlers for pods to handle binding event in one place
a42581c7d39 Don't preempt pods with DeletionTimestamp set
37ba7bb454c Address feedbacks
94101ba6e0c Add new method to validate C Identifier
ec8c2246b2c Use k8s-resource-fully-qualified-name format to validate MatchAttribute
2de03899dae Add k8s-resource-fully-qualified-name format in valdiation-gen
4a9a010c537 adding back v1alpha1
68710ce086b add declarative validation test
2e257dffd80 update code-gen for new tags and ignore v1alpha1
8f0a6583ca8 Use eachKey DV in DRA resources.
03e337cfb7a ktesting: support for synctest
aad6cec749b DRA internal API: add JSON tags
679ccee1938 reverting changes that were unrelated to me pr
08b1b1d5a47 Do not log untolerated taint in pod status updates.
9c32e488db1 use tweak pattern
1dd384c44d4 Fixing unit test flakes in pkg/kubelet/winstats TestCollectMetricsData
f82a139dc08 Promote KUBECTL_COMMAND_HEADERS to stable
a3f242676cd Revert "remove failing test that depends on expired credential, remove credential, add TODOs"
973779a398f kubelet/image_manager: add metrics for EnsureImageExists
b1a8d8849ee Update OWNERS to sig-apps owned registry packages (batch & policy)
b72c9e41792 Improve CEL Policy admission test
51beeb26762 dynamic-resource-allocation/client: expose IsWatchListSemanticsUnSupported
4fd41778b87 watchlist: wrap remaining LW with ToListWatcherWithWatchListSemantics
fb228c47048 Fix DRAConsumableCapacity to be able to allocate the same device that previously consumed the counterSet
86bfcd5eec1 oopsie missed two, should fix failing tests
11f9d32a0ea kept sidecar feature to enable default FeatureGate. will clean up in separate effort
a277269159c updating sidecar feature to node conformance
92663144b98 Graduate a few soaked alpha tags to beta
bda0e6a83c5 remove deprecated EndpointSlice api from describe
1e903a4b5a8 DRA: e2e: test extended resources after device plugin uninstall
7b2acb74c07 DRA: fix admit logic for extended resources
1cb45e2a27f DRA: fix scheduling of pods with extended resources
62b23aeb0cf Remove FromName for VAC external tests
b40df46b0ba test/e2e: remove unused v1beta.VolumeAttributesClass field
04fb0931aec test: remove usage of storage v1beta1 APIs
65dcb4ce2cd refactor(kubeadm): including dns addon version to signature
816eee64e80 cpumanager: hack: add golang ci config for contextual logging
fd5b2efa76e node: cpumanager: migrate to contextual logging
2cd69e0d0e6 Rewrite claim with extensions in allocator test
a35785c0331 Drop loopback clients if unused
bbd44717c15 fix: allow job startTime updates on resume from suspended state
d10f4f39503 DRA allocator: Add the requests corresponding to the config FromClass
f8ca585b666 test/images: Update tf-wide-deep container image with Python 3.11 and TensorFlow 2.20.0
36654a9ecbc --no-edit
cff8bc86865 fix the unknown flag: --logtostderr error
b2571fe170a Add WithNodeConformance to KubeletPSI test context
8a6b3caaa0d use union member DV in the DRA
97f9819f7e7 address feedback
f64797580a8 DRA internal API: remove unnecessary types
294ff153426 kubeadm: improve the etcd version mapping
8b87df028d8 avoid Stop() racing with sync()
8b6f98b06ea DRA: lock to default-on
30a6d4b389a Add CSI driver opt-in for service account tokens via secrets field
0e7d42dd456 Clean up OWNERS for all api machinery owned controllers
167ccbc8ec0 Improve cmd tests for kubectl events
fcef697a45a kubelet: add nil check for ContainerStatus in GetContainerStatus
715228f4789 Remove LoadBalancerIPMode feature gate
b5297b18ab2 Remove AllowServiceLBStatusOnNonLB feature gate
c403fd44811 kubeadm: validate the KubeletVersion for cgroups v1
5f083e3b9f5 controller: duplicate utility method cleanup
5d4d6cc980f Test: Add unit test for PreStartContainer
491f7f9ba89 Add a preshutdownhook to cleanup apisever identity lease
c247514f47f Remove year from copyright header boilerplate
f0e88857f7b Return error in case of discovery client failure
8a331a59d13 test: Fix data race on policy refresh interval
78796239cf0 feat(validation): add k8s:optional tag to InterfaceName and HardwareAddress in NetworkDeviceData across all versions
9ba536c2e44 feat: add subfield +k8s:format=k8s-long-name validation for DeviceClass ObjeMeta.Name field
9e5b6ad7488 fix error checks
c764de03dc6 vendor: update system-validators to v1.12.1
724cdb5cf38 feat: migrate off deprecated NewSimpleClientset to NewClientset
1b863d81c92 kubectl: Add support for tracing
9d369f32a3d kubectl: Refactor profiling helpers
1e3a6e18d08 node: e2e: update podresources check post fix of kubernetes#119423
28507d0e921 [test] Add case for existing driver on old csi node
a14230ae82d [test] Validate migration annotation are still applied
1e2817d5890 Avoid no-change lambdas
2061ec2be9d Enable DV for resourceslice
f851bc7ce5a test(validation): add cases HardwareAddress length in ResourceClaim status
833c026435b feat(dra): add k8s:maxLength tag on HardwareAddress in NetworkDeviceData
c3006a9bb96 test(validation): add cases for valid and invalid NetworkDeviceData.InterfaceName length
6fa8cb4a993 feat(dra): add k8s:maxLength on NetworkData.InterfaceName
2b4495f66a0 feat(dra): add k8s:optional on AllocatedDeviceStatus.NetworkData
8124b22f903 feat(validation-gen): add k8s:maxLength tag
e762d9fc441 dra: Use context-aware client-go informer functions
196d3abcd53 CHANGELOG: Update directory for v1.35.0-alpha.2 release
fa59ed7f82e pkg/controller: Use informer.RunWithContext in tests
70ac573619b adopt consistent way to set feature gate based on emulation version for kcm and scheduler test server.
d764e81a66b Revert "Implement validation-gen lint for CI"
7d1500bb1ea feat: Add exceptions for conflicting markers in kube-api-linter
12b5106809d bump kube-api-linter tool to latest and go mod tidy
5fc2f3e5a93 feat: Enable conflicting markers linter to detect mutually exclusive field markers
c49bdda383f kubeadm: remove the GA WaitForAllControlPlaneComponents FG
a99a5c4bdc0 avoid updating when endpoint subsets are merely sorted differently
764918a4ddf remove deprecated CertificateSigningRequests api from describe
3fbd1a17871 etcd: bump etcd to v3.5.24 for k8s v1.32, v1.33, v1.34
7f99d6672f7 etcd: bump etcd sdk to v3.6.5
804708df532 /test: use a different image for hostname override e2e tests
5bfc9aba9f0 Disable unwanted gocritic checks instead of filtering them
9d48e7d2d40 fix missing involvedObject.apiVersion in event
38373335cd1 kubeadm: adjust the etcd version map for release 1.35
81e3dbdc33f Fix DRAConsumableCapacity to schedule more than one devices
8fc99212944 Delete dead code
8346bed9e7a Introduce pod queuing in endpoint/slice controllers
f2a4ffd5b8b Promote ContainerRestartRules to beta
0a301490f61 Fixing k8s.io/kubernetes/pkg/kubelet/kuberuntime unit tests on Windows
4e29dcdf756 remove deadcode HashObject from k8s.io/kubectl/pkg/util
6cb2849928b switch endpointslice hashing from md5 to fnv-1a
edbc0dc2587 switch endpoints hashing from md5 to fnv-1a
dba6c30e964 switch kubelet static pod internal UID to fnv
b3373320daf switch volumemanager reconciler tests to fnv-1a
797d3165191 mark remaining md5 usage TODO and exclude from lint
b0a15b9163c switch storage e2e tests from md5 to sha256
e0df6b178a0 migrate kubeadm static pod hashing to fnv-1a
886fdeefaea forbid new use of md5
448584e1c8b feat: add step field and clarify comment for volume expansion
d54f3b56ed9 Add OWNERS for controller/storageversionmigrator
413c34f3192 Added feature gate and tests
b1c85ef2fe3 golangci-lint: no need to enable deprecatedComment
9902ae73872 apiserver/pkg/storage/cacher/lister_watcher: exposes WatchList semantics
339dba881fe Add synthetic create authz check to pods/exec, pods/attach, pods/portforward
229b33c4409 Address feedbacks
95c42b99515 Fix rebase issues
cf96486aed8 Add format validator for DeviceClass.ExtendedResourceName
adbea00238b Add new format k8s-extended-resource-name
3968f7ec5d6 apis/apps/fuzzer: add missing MaxUnavailable defaulting
efeda8b0fd8 Use fast policy refresh interval for TestParamRef
579579138c9 reformat
b95439f6d1a docs: EphemeralContainerCommon.ResizePolicy: This field cannot be set on ephemeral containers
26bbea8c071 Add RealFIFOOptions struct to provide structured configuration for RealFIFO
6b82a823b1a client-go/clients: improve TestWatchListSemanticsSimple
bd6fb65f833 Reduce fuzz test runs by 10x to avoid timeouts
13511897bda node: e2e: extend wait for resources exported by sample device plugin
c2e1fdeb7ad node: e2e: Ensure device plugin pod is Running/Ready before registration
da80b554a7b DRA API: unify dropped field logic for ResourceClaim and ResourceClaimTemplate
49e4fe9d2ba kubelet: fix kubeletconfig.cgroupDriver in configz
ad2832977c7 fix(kubelet_node_status): remove the node.Spec.Unschedulable check, after remove the register schedulable
dbb3941cfe4 Declarative validation coverage for RoleRef.Name and Subject.Name in RoleBinding#
2e0319181de address feedback
a817e2b923f test(validation): Mark bindingConditions and bindingFailureConditions errors as covered by declarative
ce93309f4c9 test(validation): Add tests for bindingFailureConditions maxItems validation
2a116e29ce6 feat(dra): Add maxItems tag on DeviceRequestAllocationResul.BindingFailureConditions field
2ad5127a793 test(validation): Add tests for bindingConditions maxItems validation
ab08274be10 feat(dra): Add maxItems tag on DeviceRequestAllocationResul.BindingConditions field
9eb7750d7f9 features: bump image gc max age feature to stable
7336f53439b remove usage o ExecProbeTimeout
da77cf84baa pkg/kubelet/watch_base_manager: wraps the LW with WatchList semantics
f8868e9cace client-go/kubernetes_test/clientset_test: intro TestUnSupportWatchListSemantics
f3d1fd23c57 Fix comments and reformat import statements
ba6074dd0b8 Promote HostnameOverride feature gate to beta stage
8f2d7581eb1 client-go/dynamic/dynamicinformer: wrap the LW with WatchList semantics
f6e2ea7b968 build/common.sh: fix support for Rootless Docker
78fcb4475f4 client-go/metadata/metadatainformer: wrap the LW with WatchList semantics
0613fdeccb5 kubeadm: add missing cluster-info context validation
47e9686b4db feat(validation-gen): add +k8s:format=k8s-long-name-caseless declarative validation for DeviceRequestAllocationResult.Driver
0cf91027638 feat: add +k8s:enum declarative validation to ResourceClaim DeviceTolerationOperator and DeviceTaintEffect
44a268e2723 KEP: 5495 - Add deprecation warning for ipvs
d7b83193c42 docs: quote PowerShell completion script path ($HOME may contain spaces)
0f6bc57d118 docs: dot-source kubectl completion script in PowerShell profile
d07b769418d Replace feature label with WithFeatureGate for KubeletPSI test
2072acb3ba5 Add listType=map and listMapekeys on ResourceClaimStatus.Devices
4bd3d17e4aa Allow pointers for list keys
03c7962d175 usernamespace and procmount are tightly coupled. Disable them together
1f803aa314a Use DV for long name validation of spec.devices.requests[%d].firstAvailable[%d].deviceClassName
af173926308 Setting the default feature-gate ExecProbeTimeout value to TRUE
d0a2a0d22e7 e2e: find and fix reuse of test names
51fc3c744a0 bump etcd to v3.5.23 for release v1.31, v1.32, and v1.33
9864c29861e Lock SystemdWatchdog feature gate
6ae916a577c rbac: Remove PolicyRule.Verbs from declarative validation migration
2ea3d3815cd feat(validation-gen): Add declarative validation support for rolebinding(v1,v1alpha1,v1beta1)
4e660cc05b9 feat(validation-gen): Add declarative validation support for ClusterRole(v1,v1alpha1,v1beta1)
70a8babb09e test: move kubelet GC tests to node conformance
41cb2378b42 update publishing rules
f23f716af46 drop support for policyv1beta1.PodDisruptionBudget
5594d94e671 ./hack/update-codegen.sh
f076736206c code-generator/cmd/informer-gen/generators: wrap the LW with WatchList semantics
778ff5d5ab4 update after review
d15b2893341 ./hack/update-codegen.sh
4d9fcfeeca8 client-go/kubernetes_test/fake_client_test: TestDoesClientSupportWatchListSemantics
2fd727bf923 address feedback - comment on declarative defaulting gap w/ DV
c284201b711 generators/fake/generator_fake_for_clientset: intro IsWatchListSemanticsUnSupported
4bb2bd05322 client-go/tools/cache/reflector: supports watchlist.DoesClientNotSupportWatchListSemantics
26cba8ee03d ensure permissions are consistent on dockerized binaries
9d83f71cdec fix validation_test.go to use path normalization
a77f845141a address feedback - remove origin for enum as NotSupported handles this
6e95412c432 address nit
77d87a0e633 fix normalization rule post-rebase
f84423813bd address feedback
9a7dace7347 feat: add +k8s:enum declarative validation to ResourceClaim DeviceAllocationMode
91d135f3445 Include relevant dimensions in pod controller indexing
5b9b8ec732b make localtime mount readonly
1877809f59c cleanup unused rsync related env vars
feeeb4aa19f switch from rsync to cp, drop rsync requirement
e71aa02f96f we no longer need to delete old docker images as we don't build a build-image anymore, we use pre-built kube-cross
ff0a5fff382 cleanup lingering references to kube-build
b3ad67739a8 delete build-image
4eead9306d5 add coverage for pod resize 'read' and 'replace' endpoints
ae3605d1093 mark aggregator test LinuxOnly
bec583bc3dd Enable MutableCSINodeAllocatableCount by default in Beta
8324fc3e034 client-go/metadata/fake: expose IsWatchListSemanticsUnSupported
82e516200a4 client-go/dynamic/fake: expose IsWatchListSemanticsUnSupported
fface8ebfc9 Bump coredns version 1.13.1
c7eb3751b9e Fix volume mount changePermissions test flake
9763935518e Refine: VolumeGroupSnapshot tests
9020a177318 feat: add enum validation for AllocationConfigSource
7825b2fc766 drop go-socks5 from build/tools.go
30c3c990d0e prevent shellcheck warning
563919c6858 don't update _output/bin symlink in dockerized builds
78830afba89 Enable external VolumeGroupSnapshot tests
debe026b211 Fix unit tests to work with explicit depndencies
605f402d44a use relative symlink for output path
54f39033f03 Test status update for all APII versions
36e3a8f2691 Record and require all kube-feature dependencies
20af32e5c11 Stop serving alphas removed in 1.35
33321022f83 Regenerate openapi with unserved 1.35 APIs
bec429cd96f Review fixes
ac5046786e0 DRA API: implement ResourceClaim and ResourceClaimTemplate strategy for DRADeviceTaints
8a43852c35f build: build by running kube-cross directly should leverage a potential KUBE_GIT_VERSION_FILE
2a488616bfa tests/e2e_node: Add test for userNamespaces.idsPerPod
b38d7028075 userns: Return nil manager if feature disabled
0b5aa1d491c userns: Use better defaults if idsPerPod are used
db6a2b2318a kubelet: Don't ignore idsPerPod config
97861325ae3 KEP-4622: node: topomgr: max-allowable-numa-nodes to GA
cccb66bfbc2 test: topologymanager: handle panic in test
00a8ddce91b node: topologymanager: don't leak options in tests
96a9fe5f7b1 update debian-base and setcap
15154374bca Bump images, dependencies and versions to go 1.25.3 and distroless iptables
476824c2a1e [PodLevelResources] Add more comprehensive test cases to kubelet
bf88ae7d737 Fix DisableAllocatorDualWrite dependency on MultiCIDRServiceAllocator
d0f482129da Add stability level in the tags doc.
678b79a173b Properly account APF seats for legacy watches that compute init-events
6f820481d36 bump to go 1.25.3
84b78307e28 fix: the failed unit test
4c8b4347797 DRA: Fix socket binding error in unit tests
6a455c669b5 fix panic for the crd with status subresource but lose openAPIV3Schema fileds
da338ba1fff Warn on use of deprecated PreferClose
3176ef27602 Update TrafficDistribution docs for PreferSame* GA
c6a86d125f2 Merge the two TrafficDistribution integration tests
02926c9563d Update PreferSameTrafficDistribution to GA
b13564a63c3 Belatedly remove references to PreferSameTrafficDistribution being Alpha
7ed61cfde16 chore(kubelet): migrate topologymanager to contextual logging
c48a16ebd8e fix issue
e9f66ea507f fix
dfb02e7581e add TestUpdateStatusWithOldVersion integration case
0554102ab33 test: Add CIDR allocator metrics test with multiple CIDRs
3c2c64a7f65 Add integration test for invalid SAN certificate handling
9292f1e82b6 refactor(resourceclaim): generalize tweakDuplicateRequestName to tweakAddDeviceRequest
2260c9b9837 test(validation): Add unit tests for DeviceAllocationResult.Config maxItems
b3eb152db43 feat(dra): Migrate DeviceAllocationResult.Config maxItems validation to declarative
8c7a338afe8 test(validation): Add tests for status.allocation.devices.results maxItems validation
a05fce7c228 feat(dra): Add maxItems tag on AllocationResult.Results
f70142a6a90 feat(validation-gen): migrate ResourceClaimStatus.Allocation NoModify validation to declarative validation
331ea387696 feat: add +k8s:update tag and associated tests
86d06973197 remove blank line between comments and entry
19311b932fb reorder kube-cross to be under go version and dedupe it from the go version
39d37a1e926 Remove invalid SAN certificate construction
ced2a40b9e9 kubeadm preflight checks: fix host URL construction
1c950080155 Log when automatically disabling dependent features
e669ccda0f4 update build/README.md to reflect removal of rsync/data containers
7d2309f0591 cleanup unused rsync utilities
faa62c8ce61 cleanup KUBE_RSYNC_CONTAINER*, KUBE_DATA_CONTAINER*, DOCKER_MOUNT_ARGS
36526c38158 delete more now-unused shell functions
5a05c062c3c delete now unused kube::build::copy_output and kube::build::build_image
7ed65b466d7 remove defunct comments about updating copy_output
dee429c1659 remove unused scripts
eaeed1a5345 remove calls to kube::build::build_image and kube::build::copy_output
581012fe063 build by running kube-cross directly
52c734f1e6d kubeadm: print errors during control-plane-wait retries
0a05490e08d fix broken gce jobs
19a29de5ec9 style(kuberuntime-container): clean up redundant if branches
4d61ba787d5 test(validation): Add tests for status.ReservedFor maxItems validation
b0a511d3090 feat(dra): Add maxItems tag on ReservedFor field
9ae5039b7f4 e2e: skip the reboot node test case
e8d512d8221 extract build vars setup into reusable function
6c9f2793ef7 Stop mentioning the removed gate CSIDriverRegistry
5362c2858de Remove mentioning of the APISelfSubjectReview gate
3b93755c0c0 client-go/tools/cache/listwatch: intro ToListWatcherWithWatchListSemantics
83eebc22902 fix: Add CIDR filtering and overflow protection to IP allocator
dc686f240be Remove deprecated pod-infra-container-image flag
3f8a5219e2c Enable validation-gen on rbac/v1,v1alpha1,v1beta1
20dafe678bd test: Add failing tests for IP allocator CIDR filtering and overflow protection
d5ae324fb6b don't require build tools to clean
dd3a713f6c4 fix ReplicaSet and Deployment tests for DeploymentReplicaSetTerminatingReplicas FG enablement
2bf467170e7 make update
b0e47a88f74 promote DeploymentReplicaSetTerminatingReplicas to Beta
8b5cf608fd5 Add k8s-label-key format for toleration key
b738e8c3caf fix panic in cron.ParseStandard
7b4d4f72c90 fix lint error
f27346db6c5 update warning to reflect kep changes
4f8757b4c01 Remove flaky HPA deletion assertion in TestMultipleHPAs
d6dec0b345a Revert "Merge pull request #134178 from HirazawaUi/remove-RootlessControlPlane"
400f8eccc55 Remove the --pod-infra-container-image flag from kubeadm
233ad2071ca refactor(serviceaccount-tokens-controller): Change the secret's MutationCache to SecretLister
efda517d93f speed up make clean by narrowing recursive chmod
9c2520b6334 test: mark duplicate device requests as covered by declarative validation
4616d749a3d feat: Improve the robustness of SVM
ebc4768ff3b Increase time out for verifying metrics
861e397b054 Using processStart time to handle execution delays during stress tests
4f7e9ff1efd bump cos-gpu-installer to support cos 121
514b93d7e13 test: add validation test for duplicate DeviceClaimConfiguration requests
ed932547cf5 feat: migrate DeviceClaimConfiguration.Requests to declarative validation
c81fc12900b test: add validation test for duplicate DeviceConstraint.Requests
63f8c0a4fe2 feat: migrate DeviceConstraint.Requests uniqueness to declarative validation
0fa441f962b Promote KEP-5311 (Relaxed validation for Services names) to beta
2341b3bcc86 test: add validation test for duplicate FirstAvailable names
3ad7b189b70 feat: migrate DeviceRequest.FirstAvailable uniqueness to declarative validation
d045a9dd3cd test: add validation test for duplicate device request names
ca9e09b7d30 feat: migrate DeviceClaim.Requests uniqueness to declarative validation
3ec711f91ee cluster/gce/gci: revert PATH change when using custom runc
8e4cd1f3b60 address feedback
d77cb206a09 feat: migrate k8s:format=k8s-long-name-caseless validation on OpaqueDeviceConfiguration.Driver to declarative validation
7f58bb9abdf Regenerate vendor
2fe6220968d Regenerate protobuf
6d8adfe4025 Isolate generated ProtoMessage() methods in build-tagged files
5fb0e16be6f Drop runtime use of gogo packages
caea56f3847 Fix controller setup in storage version unit testcases
cf099f4fc90 Update --chunk-size flag, dropping the beta information
8dc51e11eff improve kubeup env parameters
67c29eaafcd CHANGELOG: Update directory for v1.35.0-alpha.1 release
b8670cbc31c reduce dependencies to apiextension objects
6f51446802f DRA device taints: fix toleration of NoExecute
9702a2dca2b E2E framework: enable data race detection only if needed
5e216ae34d0 Replace HandleCrash and HandleError calls to use context-aware alternatives
7eb7894dada refactor(apiextensions-apiserver): Make APIApproval controller context-aware
f99d0e9759f Mark API server errors as transient in csi raw block driver
2fa703bfb69 address feedback
b4fa5794efa generate
1c0f0add8a5 feat: add +k8s:immutable tag to ResourceClaim.spec and associated tests
dfd7b230b4d feat: make it so that all ShortCircuit validators are run for short circuiting check
10473da4f70 chore: add +k8s:immutable tag implementation and test
c189e9d82f5 Split Endpoints controller and EndpointSlice controller conformance tests
7b7145a5940 Update kubernetes.default endpoints test a bit
e627b3b2bff Move some network conformance tests around.
d46f15bd12f Fix some linter errors before splitting out code
07959fd1680 Remove redundant test of "empty EndpointSlice for Service with no Pods"
ff83235f352 Fix up EndpointSlice conformance test descriptions
dd8d0e65d4e Dedicated package for scheduler interaction with DRA structured types
1fb86743872 Add listType=map and listMapekey=uid for ResourceClaimStatus.ReservedFor
01264d3970b With new changes we will also have a VolumeModifying condition
cb01a28df40 Ensure CSINode is owned by node when installing CSI drivers
13cd40d718b E2E volume: fix restarting of watch
328f9da729d Add current and old nodeIDs in log messages
111fc04e1d3 fix: update pkg/apis/resource validateDeviceRequest to short-circuit on the oneOf check
e62523e1f56 address feedback
fd12fc00c9f fix: remove unnecessary ValidateResourceClaim call from resourclaim ValidateUpdate
4ca286819a9 Add DV for uids in resourceClaim Status
d9fb647515d fix overlapping client CA and requestheader CA validation with proper certificate checking
6965075ebd8 Address feedback: simpliy errormatcher instantiation
6138a68f4e8 fix(validation): Mark covered errors in TestValidateClaim for better clarity
763c01ef68f feat(validation): Add normalization rules for ResourceClaim validation
32e64ec0e9a simplify getNodeAnyway func
c82f2caaa46 DRA E2E: promote CRUD tests to conformance
2b220dffa76 add integration test for endpointslice controller headless services
d03fab555f1 kubectl config set-context: Add -n flag
09ef1e08e96 Fix storage version test flake
f9a893be37b Fix incorrect error messages
d1767c10c01 fix: typo in internalversion printers
ae8ea8994ef feat(validation): Enhance validation tests with normalization rules support
7bbc7228aca run update-codegen.sh
7366031541a feat(dra): Add maxItems validation tags for ResourceClaim fields
4568ac300c1 changelog for 1.34
b2073c3325d reordered changelog for cri api
5b7e96219f8 remove cpuSharesToCPUWeight that is not used any longer
84431876888 Warn when quota request > limit
79678dd3935 feat: add resourcequota WarningsOnCreate request less than limits
100cd47acbc Update SIG Scheduling leads in feature-approvers
1137d51b358 Disable SchedulerAsyncAPICalls feature gate due to a known regression
2ddc9555582 correct metrics function comments
070d4c1846b bump etcd to v3.6.5
7c596722137 Fix in code and integration test that verifies that when victim pod is stuck in binding, preemptor pod remains waiting in unschedulable queue until deletion of the victim pod is completed
e9f61ce511d Move stats updates to getList
4b3e562dc8c client-go/util/watchlist/watch_list: intro DoesClientNotSupportWatchListSemantics
0b0a5974f82 integration test: webhook proxy behavior
26c7846e6dd Use lock-free for unguarded isHidden/isDeprecated fields
52dec274b36 add TODO to migrate when new metrics mature and old metrics are deprecated
7c529f25f4d add apiserver_validation_declarative_validation_panic_total invariant
84ce0f57f27 add test to verify invariants are fully specified
41ae5cdf4b0 check invariant metrics after e2e tests
748510b8ee0 refactor and increase coverage for pod resize tests
e4a34ce343e KEP-4540: StrictCPUReservationOption moved to GA, modified unit tests to reflect this
ae259797903 Use a dedicated delete channel in HPA test
f79fb9e59e0 Fix rebase issues
03da38a8023 feat: add path normalization support to error matcher
f95d531b0ae DRA: CRUD conformance tests
545526cfe09 DRA E2E: only check ResourceClaims in the test namespace
2ac9ff1c1fb test: format unstructured as YAML
a7b720ad5b8 upgrade to cos 121
5af28702540 fix nested map segmentation fault
d71e7e78595 fix typo for `AnonymousAuthConfigurableEndpoints` error
6d3d7553fbe Lock all mutable fields when printing gc node
940a2a7f070 Update hostpathplugin image version in DRA test driver manifest
6e7762ef0ee Update cluster/addons/ip-masq-agent/ip-masq-agent.yaml
b5805f28e72 Update cluster/addons/kube-network-policies/kube-network-policies.yaml
c4c7efc4f95 apply feedback
515b579945a feat(resource): Add maxItems validation for DeviceClass configs
e693da72906 feat(resource): Add maxItems validation for DeviceClass selectors
4986abe0b86 Automated refactoring to use SetFeatureGatesDuringTest
6e574cabdd0 test/e2e_node: mark MirrorPod update tests as [NodeConformance]
d4c5b8817ef Set test feature gates as a group, and auto-disable dependents
46c15a1844a fix typo in comment for namespace validation to appease verify-spelling
2fd76c8ed18 fix: Comment out ipSloppyValidator
51f02aa58a2 fix: Update error origin in ValidateDNS1123Label to use k8s-short-name format
6b11e6433cc run update-codegen to for ReplicationController
0a26ff5cb47 Update CSR DV test to match RC style
2d48dae391e Eliminate public ValidateReplicationControllerName
229c6b13ca7 Validate ReplicationController.metadata.name
7cf99892224 Add ValidateObjectMetaWithOpts() to apimachinery
b00e0f30208 Add cohort support to +k8s:item
975df59fcd5 Add cohort support to +k8s:subfield
efe4d17d15e Add support for validation cohorts
8105dbe5bce Revert "Omit type names of emitted slice elements to appease gofmt"
07991f41f00 Fix: Correct timestamp for node swap metrics
5d067af5e1b Prefactor: Fix some bad tests
7b938513956 Fix ReplicationControl double validation
04d632dd050 fix: Adjust validation for pool names to ensure proper coverage in device requests
c36c927d189 DRA ResourceSlice: nicer log output
af9facf7bad Fix passing runtime.Object to HaveValidResourceVersion check
af9b314fb45 Propagate backoff duration for crashloop backoff.
5ae2372f1b6 Remove a "helper" function that doesn't really help much
0cb916d4dcd Move metrics calculations to getList
fc19fcfb73c improve httpstream handshake error logging
89b975c6d36 Add comments
199c9ac77ab Remove ExpectInvalid()
8b08c8e59ce Remove ExpectRegexpsByPath()
b922fd9db43 Make ErrorMatcher more strict about multi-match
a51fb72c7f4 Simplify tests wrt ratcheting
054ab36c913 Fix field path for embedded fields in root types
9757d8d8efe Document 0 as a special case in RV comparison
84f85712beb feat: Add matcher and conformance tests ensuring that RV is uint128
02a51e3712d DRA ResourceSlice tracker: explain test a bit better, fix -run
c524a5fba28 fix(cordonhelper): Avoid mutating local node before API call
7c24e62d7cb Add additional types for resource version comparison testing
68205ff40c5 DRA scheduler_perf: run with specific allocator implementations
5832c915ace scheduler_perf: apply feature gates in deterministic, alphabetical order
60eeaa6ebda DRA scheduler: add unit test for allocator selection
7f57730ba4a DRA scheduler: fix selection of "incubating" allocator implementation
b5bcac998d0 DRA scheduler: clean up feature gate handling
723d1555a72 test: update CSI sidecar images to latest versions
b0460eedbac Make legacytokentracking controller context aware
37fcfcd29e9 feat: Add conformance tests for all resources for comparable resource version
fe681cfd8f6 update comments
83163d0b4a9 update comments on beta apis
11291fb6c59 update featureflag list
b656027b936 Update MaxUnavailableStatefulSet feature gate to beta
2cef54c1450 feat: Add helper function for client-go to compare resource version
f5e65af1737 add getters for event User and ImpersonatedUser on AuditContext
8a03067211e fix resource claims deallocation for extended resource when pod is completed
2c12d5731e4 fix validation_resourceclaim_test.go with MarkCoveredByDeclarative
9380248ad69 generate
ef2b68388ea add +k8s:maxItems tag logic and tests
b6afe986c62 kubeadm: rework the FetchInitConfigurationFromCluster node flags
03a1a22478b Add declarative validation tests, use tweak pattern, and additional test structure changes
11df50453fc Add maxItems limits to ResourceClaim
212a9c6a60c test/e2e/apimachinery/watchlist: select only wellknown secrets for table test
a20b34aa82e devicemanager: fix golangci-lint errors
bb91913017e Migrate sample-device-lugin to contextual logging
7e27b9c241f change default for failCgroupv1
6a5d0ef4230 gce: fix etcd manifest
1cfc29a179b cluster/addons: update container images to latest versions
574ac5b4978 disruption: remove unused pdb parameter from getExpectedScale method
574b09b7de4 nodelifecycle: fix ComputeZoneState method comment
2b3f1877bee Update NPD to v1.34.0
c4ec18b58a6 pkg/volume: improve code style and readability
b40b67b9cff Deprecate caseless driver name validation and enforce lowercase warnings
7af3377900b Add desired_replicas histogram metric to HPA controller
96349a46088 chore: Move declarative validation featuregates to staging apiserver
06c47136fef implement KEP-5573 by not starting kubelet on cgroup v1 by default
e6e6c6fdfbb Remove unused WithTakeover and WithValidationIdentifier
9a7e2291d1f refactor: Remove Validate(Update)Declaratively and improve error handling
d2ec0308c7f simplify scale subresource testing and document expectations
713cb97a850 test: Add unit tests for metricIdentifier function
2d7dd9164fa Refactor: Centralize declarative validation and migration logic
d559a4afe7f Add configurable tolerance e2e test.
4a76cd84055 Remove configmaps related rules from the kube-controller-manager and kube-scheduler leader election roles
d45a4557c1b Migrate device manager to contextual logging
4347d4be812 Update coredns to v1.12.4
5119b869668 refactor(DRA validation): Add granular controls to ValidateCSIDriverName for declarative validation migration
2c78bc981c2 Introduce API to codify and validate feature gate dependencies
7efc77f493a Apply feedback
7bab54a7c8b emit comment for uniqueness is disabled by k8s:customUnique
059d1794e61 test(validation-gen): Enable uniqueness validation tests for listmap
71797498f9c test(certificates): Add ratcheting test for CSR conditions
3da0a255f7f Enable listmap uniqueness & run codegen
3015e58e40f Improve tests devex for DV tests.
adf0a916930 update autoscaling leads
bd075eb98cb kubeadm: use JoinHostPort in WaitControlPlaneClient
ad8f91fb0f5 Fix error messages in volume path handler
53b81011e25 fix: add +enum tag to resource DeviceAllocatoionMode
8138390e51d feat(certificates): Add k8s:customUnique tag to CertificateSigningRequestStatus
09e96ae3f1d chore(validation-gen): Update output_tests for k8s:customUnique
81e2d211767 feat(validation-gen): Add k8s:customUnique tag for disabling uniqueness validation
6031ff29c14 make containerd download more robust
051b29bde38 Add nil scheme check in GetReference
0010d3992ac kubeadm: ensure waiting for apiserver uses a local client
a96ac3a2766 update publishing rules for 1.33/1.34 to set go1.24.7
2ffc06e09ae Make APIServerLeaseGC controller context-aware
2b110c138ec Add RunWithContext method for debugsocket
a28e452b44f refactor(apiextensions-apiserver): Make NonStructuralSchema controller context-aware
90bd84798c8 refactor(apiextensions-apiserver): Make NamingConditionController fully context-aware
409ad3944f7 added unit test for /statusz endpoints
56eb9a1a960 [126379] [go-client] chore: use WithContext functions: do not use SleepWithContext inside Sleep, use CalculateBackoff inside CalculateBackoffWithContext
dbe4143de68 generate
7019a088c39 Add declarative validation tests for ResourceClaim status
8606fa03dc7 Add declarative validation of ResourceClaim status pool field
e8f243dac2a Add output tests
83cf6358189 Add k8s-long-name-segments format
697113f5f07 Add utility function to errors to allow format composition
273912fb7f6 Improve BenchmarkSerializeObject benchmark
d2e6be440c6 Revert "Merge pull request #133213 from sanposhiho/second-trial-conor"
c1e74a1a982 Promote HPAConfigurableTolerance gate to beta
bc7ea997a0c deflake e2e: ensure pod with sidecars restarts in correct order after node reboot
a87068c685d Clean up gogo dependency tracking
b7567b980b9 Remove non-generated use of gogo dependencies
840aa4722e9 Drop unnecessary gogo dependencies
7930c2db4c0 Fix SELinux e2e tests waiting for "container created" event
48d56644308 update kube-cross image
ac35a0a99a9 Remove some unused bits of verify-golangci-lint.sh
911e46c08b4 fixed the CRD statusResetFields init issue
784b842a44f Remove the --pod-infra-container-image flag from cluster/gce
37592a026be bump gengo
22551e56a65 Fix IPv6 allocator for /64 CIDRs
51c525a1402 [126379] [go-client] chore: use WithContext functions
1e4e6e10c19 Use context.Background() directly in kubeadm polling API calls
c8138546201 Update comments around an old bug workaround
a8a21aaf853 Add hpa object count metric (#134140)
25893cb579a Promote regression-issue-74839 to 1.4
fefcbdcff23 Bump image version
d957c90153a Track connection using IP+port in server to fix conntrack test flakes
ea914d8077f Remove unused WaitForServiceEndpointsNum function
01f7de46f6c Replace deprecated WaitForServiceEndpointsNum call with WaitForEndpointCount
12db1e28dce remove unused file
15b16e0090d Remove RootlessControlPlane feature gate
343a5db9658 DRA E2E node: fix cleanup of tests using separate registrar
89b75e998d3 expand coverage for resource quota and limit ranger tests
4e719939170 Enable SSATags linter to enforce +listType on lists in APIs
883b9e570af Wait the readiness of pods for all the containers generate logs
4275b8b759d Don't limit the number of goroutines dispatched by the API Dispatcher
736f7b9a1b5 update to latest sigs.k8s.io/json
9d5ddd9faca change klog to log volume name instead of entire spec in GetDeviceMountPath
19356ad1182 refactor(cloud-provider): Use WaitForNamedCacheSyncWithContext
f44279647bf refactor: Use WaitForNamedCacheSyncWithContext in core components
9d4b91dbd80 kubeadm: cleanup after ControlPlaneKubeletLocalMode
c3a26a066d8 Bump golangci-lint to 2.4.0
36e3adf318c Add e2e test for MaxUnavailable StatefulSet RollingUpdate (#133717)
9382fa8b70b Remove KUBECTL_OPENAPIV3_PATCH feature gate as the feature is stable
7028ba09dbb fix: duplicated 'the' in comment
d7a2793fa65 bump system-validators to v1.11.1
f8bfcfc8857 Drop utiliptables.NewDualStack()
88d6e6c465a drop automaxprocs hacks now that go 1.25 handles this built in
563d4d651ca bump go language version to 1.25
f8d2df0f74b refactor: skip re-validating for unchanged resource claim specs
9ca4ddf9699 add go.work.sum to dep-approvers file list
c8d3b3fdd33 add go.work to dep-approvers file list
4b0eeeb6184 Make pod-security-admission honor emulation version
7f4ee652eaa Delete temporary ProbeHostPodSecurityStandards feature gate
55419eca7a2 Plumb effective version into admission initializer
67632f8229d Add support for k8s-long-name-caseless format.
17665a39cf5 feat(validation-gen) enable declarative validation for resource.k8s.io DeviceClass
871f87eaec6 e2e_node: test DRA plugin gRPC connection reuse
6d5aece4d81 Ensure keys used in storage and cacher start with resourcePrefix
0b10735cd72 Extract the prepareKey function
709280ef6e7 Test requests send to etcd for all LIST requests
56a4306fed7 kubeadm: graduate ControlPlaneKubeletLocalMode to GA
fa9071302f8 Adding metrics for Maxunavailable feature in StatefulSet (#130951)
f58d1e101ff refactor(controller): Use WithContext variants in cloud node controllers
d12eeb98d0c Replace HandleError with HandleErrorWithContext
69aca29e6de Update kitten base image from agnhost:2.33 to agnhost:2.57 (#133818)
6dbc13fd134 Bump to go1.25.1 based images
af231d2153c Replace WaitForNamedCacheSync with WaitForNamedCacheSyncWithContext in pkg/controller/
eca1cfb259f chore(validation): add validation identifier for declarative validation in ResourceClaim
c0fcb10acfa fix(tests): update fake client initialization and add resource version handling in validation tests
7c45b1aa3b7 refactor: simplify declarative validation tests for ResourceClaim
380c4c222ee feat(validation-gen): Add declarative validation support for ResourceClaim/(v1,v1beta1,v1beta2)
3fc0498d6ec Bump distroless-iptables to v0.7.8
fb184a9ff42 Update pkg/api/testing/OWNERS
c51a8734b12 Update documented metrics list
aefd2effc5e test: automatically lower Ginkgo parallelism when using race detection
479d78851ab feat(apiextensions-apiserver): Add WithContext variant to EstablishingController
7a62519b364 E2E: treat data races in e2e suite as failures
f5cd1a16646 Address tests grouping comment
50ea1f870ea fix incorrect warning whenever headless service is created/updated
92dcd02459f Add helpers for declarative validation tests
74faf1527fd Unify directory protection for recursive requests in storage
cbb7b29bc24 print the current kubectl command encapsulated by kuberc on V(1)
3799b8bf6a7 Add reviewers and approvers to api/testing
1c41cb0550b fix gofmt
842d6d29fc0 test/e2e/node: promote ConfigMap update test to Conformance
1a5e77135b2 Add fine grained metrics to narrow down DV mismatches and panics
4db49d0f4e9 feat(validation): enhance slice validation with declarative options
4074be896bd Record SyncTerminatingPod error and set error status on span when non-nil err returned
f99cb99a1b9 Wait for quota to report used before creating pvc
8817dd65296 Update cmd/kubeadm/app/cmd/upgrade/node.go
91a3a30eb5c Ensure consistent key schema requirements between cacher and etcd3
938b23879a2 test/e2e/node: add [NodeConformance] label to ConfigMap update test
5dac4ee1695 Improve dry-run error messages for clarity
a825c72697e Update agnhost to version 2.57
e39ed4a4b4b scheduler/volumebinding: add test for PVAssumeCache
bbee7b9d6b1 scheduler/volumebinding: rename passive_assume_cache_test.go
4b0eff59c07 scheduler/volumebinding: target AssumeCache UT generic passiveAssumeCache
872981a2055 Rename CLE test directories
1ce12710ec1 refactor(controller): Use context-aware WaitForNamedCacheSync in resourcequota and HPA tests
d2ba13dac92 Add exceptions for existing issues for conditions linter
894d724f98a Enable conditions linter for Kube API Linter
e3b08f98713 Update KAL to latest and add shadow config for new options
af6b3ed1f51 Add support for k8s-label-key
aa0c5960edc Add support for k8s-label-value format.
8fed05c5b78 DRA E2E node: fix test cleanup
b81e87c02f9 fix: use iifname for input interface name matches
5a708a7ff0d scheduler/volumebinding: remove Get[API]{PV,PVC}
ed19492dc2b scheduler/volumebinding: passive assume cache
09ab06b423c Remove container name from container event messages
bbf896c35bb build: automatically choose a suitable base image
4e907fad15d Explicitly set TerminationGracePeriodSeconds for mirror pod
1e742f01ba6 Fix cacher resource prefix not having a "/" at the end in tests
c385a229d4b scheduler/volumebinding: introduce testInformer
1baa7936d89 Fix flaking RunTestDelayedWatchDelivery
eaf87d59077 scheduler/volumebinding: pass testing.T to helper
dce23dac036 scheduler/volumebinding: use subtest
90109b21af7 Wrapper for DeleteLabelValues
455a4376742 node_e2e: fix kubelet configuration setup
c08b9ab3b5c Replace deprecated sets.String with sets.Set for Index type
476325f6e5f Specify the deprecated version of apiserver_storage_objects metric
cbedde7ef50 [client-go] [cli-runtime] [133916]: handle properly config override logic when override provides ClientKey, ClientCertificate: also empty TokenFile if Token is set in ConfigFlags
41307203ba4 Add additional test for root level, ignore mutation lint error
029d314e150 Replace NewIndexerInformerWatcher with NewIndexerInformerWatcherWithLogger
46cc610e6fe Drop PodIndexLabel after the feature GA-ed in 1.32
16fa1501826 scheduler_perf: run garbage collection before measurement
c52e3aafb32 skip creating storages for unserved versions
74cf1db218e sort the device requests in the extended resource claim spec. removed the sortClaim in the unit test.
bb21080626d standardize not found error message of kubectl scale
ecff35e2fb4 deflake e2e tests: set cpu requests to avoid out of cpu
0c0acbc5351 Disable too short scheduler_perf workloads
9f31b009081 scheduler_perf: KUBE_CACHE_MUTATION_DETECTOR=false in docs
4f6598e8a31 Fix tests not using proper resource paths
6e5a5abb86c Fix version bump to follow semantic versioning
97cd1c24085 replace fmt.Printf with fmt.Fprintf
96463c1e9a7 kubeadm: fix the KUBEADM_UPGRADE_DRYRUN_DIR environment variable doesn't work forthe upgrade phase when it writes kubelet config files to disk
9f49e3b9e16 deflake unit test: TestIsConnectionReset
86028eecf2a Add ratcheting of selectableFields
a89a36061c8 fix lint errors
3da372354d6 add fake-registry-server command to agnhost
480fad996d5 kmsv2: run TestKMSv2ProviderKeyIDStaleness in parallel
dfcadb4f896 Replace WaitForNamedCacheSync with WaitForNamedCacheSyncWithContext in pkg/controller/garbagecollector
5e66bb69720 ./hack/update-codegen.sh
fe1aedd0bf7 applyconfiguration-gen: remove "Experimental!" comment as the code has been stable for several releases
c911747f240 applyconfiguration-gen: preserve struct and field comments in generated code
8dafb98e916 Update sample-apiserver and examples
fc091d93d53 Update tests that depend on internal model names
e9daf55b56a Add tests
3fc59ee9a70 stop using util.ToRESTFriendlyName in favor of declared model names
0dd2056045a Update violation exceptions
5647c07179d generate
e910c181cb9 Add model name generator tags
cfbe326e3a2 Enable openapi model name accessor generator
8b63ace66c5 Bump kube-openapi
dd9917ddce8 Fix flaky resource claim metrics test
3df195633a8 Add support for UUID format.
7e6aafe1577 fix intergation test
9e60e3593ec kcm/app: Add proper goroutine management
79f8d1b1c5d fixed bug such that implicit extended resource name can always be used, no matter the explicit extendedResourceName field in device class is set or not.
1ac067ae0e6 Fix tests to to only accesses keys from under resourcePrefix
31e035ec39e Use increaseRV in TestWatchStreamSeparation to imply external RV increase
83273e21b91 DRA scheduler_perf: clean up usage of steady-state pod scheduling
9af3e868102 scheduler_perf: detect testcases with no pods scheduled
3dfcda9afdb Fix minor inconsistencies in scheduler
bf0429ed07c migrate kubelet/certificate to contextual logging
edc8dafc699 Cleanup enabling resource size estimate
5483c52e101 DRA: Fix ConsumableCapacity shceduler perf test (simplified)
05fc3f65d82 CHANGELOG: Update directory for v1.31.13 release
70af7708fcc CHANGELOG: Update directory for v1.34.1 release
d884ed5e97b CHANGELOG: Update directory for v1.33.5 release
6d0138d3f12 modify etcd data for integration test
587f67052dd modify api version hash
7184ac5a733 make v1 resource version first priority in resource
f89e73a3038 CHANGELOG: Update directory for v1.32.9 release
9ca3159e34c Fix fake runtime's image pull
a77fc586c75 Fix negative pod startup duration
bbdd27d91e5 Add tests for unique tag combo & update-codegen
62662e3a08e feat(validation-gen): support unique tag on list
a5b29fa812e refactor(validation-gen): move list-related validators to list.go
81cb5b7df22 DRA: Fix PrioritizedList scheduler perf test
c4d8c9b5440 Re-disable listmap uniqueness (for now)
6fb020b1942 Temporary: Re-enable listmap uniqueness checks
3e15dded75d Pass equiv func to subfield, like item and eachVal
0d5e374da93 Don't ratchet-check inside type functions
b6fdbe4a6ab Emit ratchet check for fields with a type func
229954d1138 Revert "protect against race between deletion and adding finalizers"
e2e7fa17990 switch our usage of expfmt.TextParser
bdfca587f48 update prometheus' client_golang and common packages
2d71a0d72b2 Refactor ItemTagValidator.GetValidations a bit
8f679c74020 Make item validation just use a TagValidator
c047bdf58fe Sort item criteria to match listmap key order
26283acfb14 Clarify that union has field- or item-members
3f068c7c64d Parse path early, clean up getDisplayFields()
77c1ac6320b Improve error reporting in item tag
1f61a8b814d Rename "fields" to "members"
1417e56dffd Break processFieldMemberValidations into 2 funcs
023c026d6fd Add ListSelector in validation Context
3e2e2195ed8 Unions: replace `[2]string` with a type
8130cf82b59 run "hack/update-codegen.sh valid"
348d576c9f7 validation: Use JSON names in paths
f51d57042e5 Update Context comments and fix some usage
9e71a07abf5 Minor validator name-string fix
fd3fcfe121a Add comments to generated code
471256619f6 Put the nfacct e2e test back under the "KubeProxy" label
9b696ff58cd build: also support KUBE_RACE for test binaries
90c9a932d49 fix race condition in kubelet's PodCertsManager
8b50c77eb6d scheduler_perf: measure DRA setup time
bc8ce679984 delete v1.32.0 testdata
d59d48e64a3 Add v1.34.0 API testdata
b276c96ef86 Migrate kubelet/server to contextual logging
1e3c3934cb9 e2e_node kubelet configuration: merge feature gates and system-reserved items
c5882e38fff Fix ClusterIP load balancer disappearing when InternalTrafficPolicy: Local is set.
e3c9c277c33 fix CI failure: update pod image using the same one
55700685bd0 Revert "Add retries to node's crictl test"
801ee441630 Validate kubelet serving cert in local-up-cluster
82eb8bd23a2 Populate memory requests from actuated resources at pod status generation time
8ff5cec2617 scheduler_perf: block after creating ResourceSlices
af6da561dd8 scheduler_perf: reset and stop testing.B metrics
5170982540d chore(kubelet): migrate eviction to contextual logging
39170e2ed63 chore: Clean up duplicate logs
cfeeff7aced chore(kubelet): migrate stats to contextual logging
5ed98e97e1c Remove getLocalNode to fix GracefulNodeShutdown e2e.
b42b96f518f add paths section to scheduler statusz endpoint
06c5eb992e8 DRA kubelet: avoid deadlock when gRPC connection to driver goes idle
6b908c192cc [client-go] [cli-runtime] [133916]: handle properly config override logic when override provides ClientKey, ClientCertificate: use values from overrides when one of the field (file or data) is present in inverrides
d38c1df3f36 chore(kubelet): migrate metrics to contextual logging.
cd343aaf1e3 Fix OWNERS_ALIASES entry for SIG Docs
7aa6cabd634 fix typo for forceDetachTimeoutExpired
fc8907da38d [client-go] [cli-runtime] [133916]: handle properly config override logic when override provides ClientKey, ClientCertificate
8118636321a Close container runtime connections after use
1a0813598b7 Update SVM Discovery checks in response to jpbetz and stlaz
bf851e8bcfa Apply feedback
7d14367f57c Change WaitForNamedCacheSync to WaitForNamedCacheSyncWithContext.
80e6f9e20a2 chore(kubelet): migrate container to contextual logging
f1b28b0d1f7 chore(kubelet): migrate watchdog to contextual logging
98f81fc2910 Remove redundant experimental prefix in wait command
d75d4860e7f kubelet: migrate module `logs` to contextual logging
9c1cf79d74c kubelet: migrate utils to contextual logging
62cadde688c Fix incorrect description of feature PodObservedGenerationTracking
c88f2f3142b Add k8s-long-name, k8s-short-name format validation tags
c8681531abd fix typo for sattsfied
4e200ca00e8 fix: Only warn for unrecognized formats on type=string
cee1ea7225a Update client-go compatibility matrix to include releases up to 1.34
ddb015f023b Resolve confusing use of TooManyRequests error for eviction (#133097)
86e3ad233f7 Revert trapping TERM for podWithCommand
21359d7b1f4 Switch to resourceVersion controller
21ff3c196c2 kubelet/metrics: fix multiple Register call
98c62936230 kubelet/metrics: misc optimization
43c3b03685c Lock AllowOverwriteTerminationGracePeriodSeconds
fbd33bd6b39 hpa: prevent integer overflow in external metrics sum
09548c6bdf3 Move actuated resources state to kuberuntime.Manager
683a76dd159 Enforce that all resources set resourcePrefix
954ac21c6c8 Add Kubelet stress test for pod cleanup when rejection due to `VolumeAttachmentLimitExceeded` (#133357)
3e84e16315a Disable estimating resource size for resources with watch cache disabled
73cf278883a Mark some aliases as deprecated
5f4b4a68249 Bump gengo
7e9b228ff09 apply integration test: fix ordering test flake
07faaec2c42 scheduler-perf: fix data race in createPodsSteadily
c8f8f66e6de Increase termination timeout for `evicted pods should be terminal` test
ef7cee89bf2 add events.events.k8s.io to clusterrole view/edit/node default
8d31237c334 kubelet: poll after reloading logind conf
c7ddceb8cb4 client-go/dynamic/fake: Stop ignoring options
5e59c658d6c Organize enum tests
f971ad76af2 Only pass type args when needed in enum init
fa1f9d444cc apiserver: avoid default toleration seconds data race for all tests
ad9ae3ab9d9 test: fix data race in test/integration/controlplane/transformation
e32adad6570 apiserver: fix PriorityClasses creation data race
a67468717c3 Omit value type from validation rule failures
d6068db62ec CLI: log info about race detection
23362e001c4 build: support -race in binaries
9fb1ef4dd0d fix kubectl exec command in cmd test
da0e7384d5e - Update Nautilus test agnhost images from 2.33 to 2.56 - Update VERSION to 1.8 - Addresses issue #131874 for updating outdated base images
4babdf80264 Fix race in movePodsToActiveOrBackoffQueue
fadb40199f1 Move interfaces: Handle and Plugin and related types from kubernetes/kubernetes to staging repo kube-scheduler
82896feebbd cli-runtime: Return defined error from Builder
f0be916f7a9 Update CNI plugins to v1.8.0
584a9da5940 Use golang protobuf for etcd version monitor
a41de8771af Bump github.com/spf13/cobra v1.10.0
137d56c1c24 add paths section to kubelet statusz endpoint
6ddf6261d44 Update to spf13/pflag to prevent CI break
1fd7f308fc0 ci: remove httpd usage while using agnhost instead
588276255ba Disable collecting stats for resources not setting prefix to prevent error logs
9b47a096f4b Update to CentOS Stream 9 based on reviewer feedback
ea02ce5b603 Update protobindings scripts to drop gogo paths
70cd76c5cf2 DRA e2e node: skipping resource health disabled test
1578267ebef Update volume/iscsi base image from fedora:38 to fedora:42
73127eb86d0 Update volume/nfs base image from centos:7 to centos:8
72847ee1f75 Replace deprecated strings.Title with cases.Title
8a6f1736523 lock DisableAllocatorDualWrite
158e4e82615 generate
b6927088c83 Use consistent documentation of aliases in the API
b159d2ca597 self nominate natasha41575 to be a sig-node reviewer
799312a402c Update pod resize test to accept new cpu.weight conversion.
bf13cd1b81d added resourceClaimModified to bindClaim to decide whether to update assume cache
1ba96db35b5 ./hack/update-codegen.sh
8b0d7efb43d applyconfiguration-gen: add ExtractFrom with subresource support
f1d0c5dbc39 return an error in case nil selectors are passed to matcher functions
81cec6df1d0 Bump to mockery v3
7685612b9c2 refactor(event): simplify conditional logic in event handling for both v1 and eventsv1 APIs
faa0f33b8be remove v1beta3 flowcontrol from rest storage
fd2d2fd66ff Convert `k8s.io/kubelet/pkg/apis/dra` from gogo to protoc
d1946199792 Fix linter
36cf7282814 Drop SizeMemoryBackedVolumes after the feature GA-ed in 1.32
9f8d9432e20 bump gopkg.in/evanphx/json-patch.v4
f3d278e75d1 Fix completion of resource names
233384d4e47 deflake e2e test: Services should implement NodePort and HealthCheckNodePort correctly when ExternalTrafficPolicy changes
d85ce5310de Appease linters
e6ae04e02ca generate
15b29a0fa20 Add +k8s:ifEnabled and +k8s:ifDisabled tags
243f47f3b33 Omit type names of emitted slice elements to appease gofmt
5c955edfe04 Add support variable initialization using any literal type
e8186d06790 Add output tests
8435fbab983 Add +k8s:enumExclude and options support to +k8s:enum
64d9ddcf9dc Add enumExclude support to enum validator
ed170c1c0aa Add constant discovery, ScopeConst and StructLiberal. Remove ScopeAny.
e1218922db0 Add unit tests to isResourceUpdatable
aea27237443 populate pending and ineligible endpoints
e5f4caf62a6 drop spammy xtrace from hack/test scripts
f1d980adf91 separate resource-quota and limit-ranger resize tests
541ff7cd169 DRA: Add configurable health check timeout per device
f336f4c75a0 Close response body after the conn is closed
2608a38d475 Increase port-forward broken connection detection client timeout
2f356d02e29 make update
09e357d31fd Drop StatefulSetAutoDeletePVC after the feature GA-ed in 1.32
bf6a55cd062 e2e: node: address linter errors
9aed0813e66 e2e: node: cpumgr: replace old testsuite
c4f7272f621 e2e: node: cpumgr: keep only scaffolding
37d678e098f e2e: node: cpumgr: remove old sidecar container tests
666dec8c2f6 e2e: node: cpumgr: remove old reserved cpus tests
d98069e22c8 e2e: node: cpumgr: remove old distribute-cpus tests
e2624d0cce4 e2e: node: cpumgr: remove old smt alignment tests
9e6073304fb e2e: node: cpumgr: remove old cfs quota tests
bf9511eda63 Remove GA feature gate ComponentSLIs
c35d5473ddd Remove the otel semantics override
684473af623 Bump cadvisor to 0.53
12a784b46bd cleanup: remove redundant type conversions in podautoscaler
c16d72c4140 e2e: case for multiple volumes reference one PVC
0e6b22b5c80 test: add assertion to check OuterVolumeSpecNames
4abd40f6e3d kubelet: multiple volumes reference one PVC in one Pod
7910cbb8842 kubelet/volumeManager: remove outerVolumeSpecName from ASW
146f0c93453 remove MountedVolume.OuterVolumeSpecNames from logs
52b7d035f96 cache: do not allocate chan for nothing (#133500)
f1ceec70a68 feat(apis/batch): PodFailurePolicyOnPodConditionsPattern.Status can be omitted (#133479)
66fdbe10583 fix using stale pod when evict failed and retry (#133461)
5af2b732bee Change KYAML gate to on-by-default
b9a8dffa51e Fix replicaCount calculation exceeding max int32 (#126979)
7cf39066b34 Remove sleepAfterExecuting param from diskConsumingPod
388046c3ea9 ImageGCTerminatedPodsContainersCleanup e2e node test
c9ccbae0d9e Remove terminated pods eviction code
2cad51f6c0d Add ImageGCTerminatedPodsEviction e2e node test
a59ce54d79f TerminatedPodsEvictionOnDiskPressure e2e node test
df54470e9b8 Test terminated pods are evicted on disk pressure
146357aa395 Evict terminated pods on disk pressure
ad8afd3ab09 add generated files
ff37d8c3394 Drop experimental prefix from kubectl wait command
388aaebbd7b Add HirazawaUi as a reviewer for sig-node
b012e16b47e Remove use of pkg/scheduler/framework.NodeInfo in node_ports.go
731e6def042 Fix the spelling error of grpc in the log
b83e933d6a9 doc comments
6dff95db798 CHANGELOG: Update directory for v1.34.0 release
ac802de9f54 update openapi spec
5a718ca28cb remove stale Godeps filter from rsync
8512862161d cleanup tempdirs on exit in kube::verify::generated
d4e1d134801 add note about not adding to rsync invocations
33a58e4bef5 stop excluding GOPATH from rsync
7a43f8bd273 Omit values from validation rule error expressions
56e2f15c1a8 Show simple values in validation rule errors
00c30b354df Reduce nested conditionals around validation rule errors
d838611d6db api: Remove +listType marker for non-list field
ae2d50cf1a8 Update MAP storage version to use v1beta1.
2dc6f7501ee kubelet: fix error message for EnableNodeLogQuery
3c00c3cb29d Move GetAffinityTerms functions from pkg/scheduler/framework to staging repo
75d04e6c7b6 Add a note about Conflicts return value
83da6f1a87c fix(controller/podautoscaler): do not print panic when .status.lastScaleTime is not set
1c336e3fc6f Fix flaking readyz check in scheduler integration tests
4fa6c70604b hack/logcheck.conf: add several converted packages
63f304708a0 client-go leader-election: structured, contextual logging
46e10103ff0 Take activeQ lock for part of the Update method
a0a43e5f80e Drop CronJobsScheduledAnnotation after the feature GA-ed in 1.32
09954ce369d Drop unused tests, after KEP-2599 graduated to GA
f2bc8bdea5e Drop unused tests, after KEP-3335 graduated to GA
9c8e03a40b2 gofmt cleaner.go
3bf684b4ed0 fix: parsing the patch directly
ac1f9fb73f2 util/sets: benchmark List()
48399b1af14 util/sets: simply List() by using slices.Sort
16d4f9ea1f6 kubeadm: clarify the comments for a few API fields
3b7475c5226 kube-proxy: list available endpoints in /statusz
8a95e8a71ca DRA E2E: clean up class creation for extended resource tests
4a597f50b4b Fix panic in PodResources API test when FeatureGates is nil
7debab65049 Apply feedback
8b0b0df431a Don't run PreEnqueue when pod is activated from backoffQ
8b760704fc6 fix(cleaner.go): exit early on check of CSR issue state
6cefbb65d0f Apply feedback, minor cleanups
2fc66ddaf25 update gofmt
e1c586eb00f Add doc.go, example_test.go and ARCHITECTURE.md to apiserver
3f5b678e980 Update nfacct_linux_test.go
e792dcb8100 Update cri-tools to v1.34.0
accdd9e27e7 Add doc.go and ARCHITECTURE.md to client-go
08bd33e0dc1 clean up outdated in-place pod resize todo
3bdaeea2155 feat: Add discovery check to SVM to ensure migration doesn't get stuck
bb6a0ea6b2c HPA: optimize calculatePodRequests for specific container lookups
94d3dc40b23 kubectl: include container fieldPath in event messages
f6b3f916b1f scheduler_perf: fix data race warning around klog flush
df64d3f8826 Remove rbd image and storage class
f920b064d00 Promote VAC API test to conformance
ebf3d814f4c Fix(cleaner.go): Add GC to handle Approved-Unissued CSRs
770b749436d feat: Require SVM to use RealFIFO
b46a5cceeff Fix missing control plane health check timeout
dec23d58e4c Add remote runtime/image `Close()` API
97a146d47df Refactor error handling: reuse `err` inside closures and avoid re-shadowing
5c8f26f4803 kubectl: fix expose --selector help text
2180b441dd7 gofmt and review feedback
b9d5edd4445 remove stray strailing tabs from gocritic settings
535b4e07e94 enable gocritic deprecatedComment check to help lint for malformed deprecation comments
0b647319c44 hack: more output about running tests
38da6d767db DRA: Fixed ResourceClaim UpdateStatus to wrap with RetryOnConflict to automatically retry in the event of a conflict.
76e5929d1a1 chore: update CronJob casing for create job help
c97f08793cb Fix startup probe worker termination for sidecar containers
d4f8bebda08 Fix label selector parsing for consecutive commas
8d4108bf935 fix: Update unit test to catch actual nil Labels case and fix functionality to handle nil Labels
189d6d726bf fix formatting of deprecation warning in test/e2e/framework.WaitForServiceEndpointsNum
db5dd2fe8f8 update-codegen
2b47e8e5b5a fix deprecation comment in register-gen
668b3fe4afc update-codegen
ef1878c6013 Update `sharedInformerFactoryInterface` context initialization example
80071d16e18 fix deprecation comment in informer fatory generator
fa5792a4664 fix k8s.io/component-base/metrics deprecation formatting
1dd428d4c01 fix deprecation formatting for k8s.io/kubectl/pkg/cmd/config.NewCmdConfigSetAuthInfo
9fabccd24c9 fix deprecation formatting for k8s.io/apimachinery/pkg/api/errors.NewGone
30f4fc9ca38 update-codegen
8c139fbe942 use correct deprecation comment in clientset fake generator
a405844e66d scheduler_perf(fix): correct typos, clarify comments, and minor tweaks
d3ba41467db set default log flush frequency in kube-proxy config validation tests
69b3876fd17 set default flush frequency in kubeletconfiguration tests
f9dcd5f7135 validate that flush frequency must be positive
3995b6cf72b Register apiserver_resource_objects in TestDeleteStoreStats
b77f4f2425a Align metrics hiding with deprecation policy
0b16f0ae3cb Test that auth{z,n} hook clients honor Kubelet's request encoding.
f0e52c1c476 add known example API group suffix to avoid race
cb1d04655fa test-integration: set KUBE_PANIC_WATCH_DECODE_ERROR to false
aa819af85a1 chore: update CoreDNS to v1.12.3
e1dd085ffe2 Add retries to node's crictl test.
7f4462398ab e2e/watchlist: normalize dynamic 'Age' column in Table test to prevent test flake
3eb69eb8522 Fix DaemonSet misscheduled status not updating on node taint changes
39e7b2ce5e4 Migrate pkg/credentialprovider to structured logging
ddffd8e3893 Allow IfNotPresent to be used in node e2e tests Currently the node e2e tests overrides the image pull policy to PullNever, if the policy is not PullAlways.
d4bd007d3b8 adds a list of available HTTP endpoints for the kube-controller-manager component under the /statusz page
ea9d7ff8656 PSI test: add a CPU limit of 500m to cpu-stress-pod
8612c57d216 e2e: node: linter fix
e839adafb7c e2e: node: cpumanager: move shared code in topology manager tests
af53d97786a e2e: node: cpumanager: move specific helpers
d86d798eae4 e2e: node: trivial rename
30ca634386e e2e: node: cpumanager: push utilities in util.go
bb7cff161c5 e2e: node: split utilities to learn machine properties
1a4e289cfac e2e: node: split kubeletconfig utilities
a28eda435f2 Add sig-instrumentation as OWNERS for apiserver/pkg/storage/etcd3/metrics
1ea47202688 Add e2e test for SELinuxMount to CSI drivers
97edb4d5e43 Fix SELinux label comparison
76bbaa9d47a test: Standardize labels for ResourceHealthStatus e2e tests
9a6db5ad0ba remove allocationManager's reference to containerManager
9a8a4a3b440 Add missing cases to SELinuxMount tests
3fc91586a71 Fix metrics test
993ba324cd4 Bump BV to 1.35
29eb19e4228 Address feedback
bd900111a8e Move ContainerRuntimeOptions flags to cmd/kubelet/app/options
ff6f4e1f633 Move kubelet config code to kubeletconfig
30b34fbcca3 Don't read AllocatedResources from PodStatus during admission
dc0343c2f79 Split preemption integration tests to mitigate the timeout
0c91e28360d Clean up service account print and describe
aa59f930b35 Add lock to TestAsyncPreemption to prevent races
c5ef7208373 Fix race in scheduler integration tests
70794c4568e Add newline to fix owners fmt
7242ddd9370 Add jefftree to OWNERS
cf8ab1c3e7c component-base/metrics: add concurrent WithContext unit test
45f61b5bc06 component-base/metrics: store WithContext ctx in a wrapper to avoid race
1d792b00e65 move timeout to only cover the line under test
640dabd58b0 Decouple term and remotecommand packages
a2061e97f45 install appropriate version
50fec6fc577 kubelet/volumeManager: (Get -> Has)PossiblyMountedVolumesForPod
c20b105ac28 kubelet/volumeManager: GetMountedVolumesForPod() returns desired and actually mounted volumes
09131604046 kubelet/volumeManager: verifyVolumesMountedFunc checks both desired and actual
eac9da061dd Bugfix: DeleteOptions decode errors should return 400 instead of 500
62dcfe3bc06 Added WithOrigin within apis/core/validation with adjusted tests
b080dba14ec Add utam0k to SIG Scheduling reviewers
6c56d2fd1bc Replace usage of deprecated ErrWaitTimeout with recommended method across all Pkgs
d959186056f kubeadm: simplify error handling in getAPIEndpointWithRetry
0a987f8f578 ServiceCIDR ValidationAdmissionPolicy for backkwards compatible behavior
81e680e6d98 defaultservicecidr controller no shutdown eventbroadcaster on start
efcf97f98c7 authz tests: delay response in context cancelled scenario
d0816f84f9c feat: increment an internal metric when duplicate validation errors
66f7e30c653 conversion-gen: use custom conversions for slices and maps of pointers
a4763ee3cb8 conversion-gen: add test for custom conversion functions for maps and slices of pointers
f154d43739d conversion-gen: avoid attempting to read or set unexported fields
808f837c310 conversion-gen: add test for conversion of unexported fields
531fdc67e28 Replace deprecated WaitForServiceEndpointsNum
3b0a85170a7 Make kubectl auth reconcile retry on conflict
25fee618fd9 Add helper command for comparing protobuf files
78c9672deb7 migrate tracing tests to use the new otelhttp semantic conventions
6852abc73c4 WIP: Use the tool directive instead of tools.go without sharing dependency
ffa084f8112 kubectl: Fix current-context being written to wrong file
c11759bdbfc golangci: Disable staticcheck QF1008 in hints
391967c7b6a Report actionable error when GC fails due to disk pressure
584eb8464cf Pod Certs: Fix flaking integration test
3a86a4eb0dd fix: fix failed ci
7c1d133dff7 Fix sidecar containers flaky tests
bf088c12ff0 chore(kubelet): migrate images to contextual logging.
b6f6731ab61 chore(kubelet): migrate prober to contextual logging.
065899e95da chore: use ptr.Deref to replace int deref utils
cd4771d7371 fix up types for 1.34 release - remove GA feature gates
925bce297e4 Fix help for set selector
908fb0266de Fix gocritic issues
b04222a41c7 Fix non-existing PCI device hierarchy scenario in TestGetPCIeRootAttributeByPCIBusID
c4e8e8310b8 Fix typo in test case name
64d452d3b61 Fix non-existing PCI device hierarchy example in GoDoc for resolvePCIeRoot(pciBusID)
725b17067a6 Do not remove PVC ClaimRef to fix flaky VAC test
aa077145377 chore(kubelet): migrate userns to contextual logging
ec9f0d55360 chore(kubelet): migrate nodestatus to contextual logging
2b1f38a83b5 chore(kubelet): migrate config to contextual logging.
cc4666cc94b kubectl/logs: Add LogOptions.RunLogsContext
904ba748f12 fix(kubelet-windows): Typo in structured log user display name
086a5add02d test: code coverage increase for kubelet/preemption
a375b0aa367 Ensure CSINode belongs to current node on init
ed07efbc579 Configure JSON content type for generic webhook RESTClient.
5d20dc55bfd chore(kubelet): migrate pluginmanager to contextual logging
ad47298caa6 Fix a typo in fake clientset generator
53e7b175524 Fix CEL library doc string whitespace
ba46831c87a bug: Remove duplicate storage resources update validations
176ee0c2452 bug: Remove duplicate RBAC resources update validations
1dd33c8e6de protect against race between deletion and adding finalizers
49ebabb54e6 verify: additional validation of e2e.test --list-images output
73627dd663b verify: improve output of verify-e2e-images.sh
a352bf8815d Remove redundant MilliValue call in GetRawMetric for podautoscaler, which has no functional impact.
7c1d0c93a2b added changelog for CRI API 1.33
e7d76f37a45 flag: fix nil-ptr panic & typo messages
dd37ad1bc2c metrics: don't record apiserver_request_sli_duration_seconds for dryRun requests
6f1abad18e5 metrics: add dry_run label to apiserver_request_sli_duration_seconds
9f1704dd9a1 pull mounter from dl.k8s.io
e7cfbc6e14a gocritic: simplify bool expression
a79865c0016 Added contribution info to sample-controller README
a325cb42115 try order sandbox by attempt or create time
947de3d0a49 Bump addon manager image to v9.1.8
fe02b543aac Fixes pod status error when it has an error container
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
We drop one patch that is no longer needed, and pick up the following
commits:
13563febb4 Update to v1.35.2 (#13707)
b7a5ea520a Bump Traefik to v3.6.9
5505935bd5 Improve resilience of datastore bootstrap reconcile from etcd
6a11814e1e Install binutils-gold only for arm64 builds
971abd7839 Bump kine to v0.14.12
ef3352b33a Fix rootless test to work with -local flag
25fe4279fe Revert "Move to rootlesskit v2 (#13486)"
a3f1ddbc62 Bump rancher/systemd-node version for docker tests
6043b5c5b9 Fix support for E2E commit installs
50fa2d70c2 Update to v1.35.1 (#13637)
3d825d02bd Fix removal of init node
cf8b2aba13 Bump klipper-helm and klipper-lb images
57a9ba0151 Add registry prefix to image-list file (#13602)
2e474257cd Bump metrics-server to v0.8.1
1e853f688f chore: Bump rancher/mirrored-coredns-coredns image version
eb44ad66dc chore: Bump rancher/mirrored-coredns-coredns image version
a2e38967f6 Fix VPN node IP not being applied to kubelet (#13560)
bc8ee0e64d Bump kine for list/watch revision fixes
4044d9a886 Add helper function for including stack trace with error message
24a60f8e70 Handle empty token file as nonexistent
70a776fb46 Add IPv6 loopback to kubelet-serving cert
5d394478f5 Fix filter for wildcards
c9be8a6180 Explicitly close mvcc backend
cfad6a6a67 Bump scorecard checkout to match all other versions
bba659457c Use channel.yaml instead of curling for stable for kubectl install (#13531)
9ccb98edf7 Update install tests with new images, add alma10 (#13489)
05d985ac44 Move to rootlesskit v2 (#13486)
c8ae7d1beb Prevent caching on PR of golangci-lint entries (#13487)
323b952450 Fix restart of control-plane-only nodes attempting to reconcile from local datastore
312c2388cf Update to v1.35.0 (#13523)
69c0aad6c2 Bump etcd to v3.6.7
1869c121ba Add sudo to go coverage in CI
084963abc6 Update Traefik version to v3.6.7
f03b0e91bd Bump to coredns 1.14.0
2efebf2379 Remove download/generate from vulncheck
c6e9ccb101 Fix setup-go cache issues
f028f773d5 Bump kine for NATS conformance fixes
9dfce1de28 Update longhorn version in integration test from v1.4.0 to v1.10.1
89949bc0f6 Add deferred store implimentation
f56a11018f Bump spegel to v0.6.0
179bc20bc7 Bump expr-lang/expr
69bd545420 Fix atomic write in WriteSubnetFile
f35890692e Drop use of deprecated docker reexec package
5326e4845c Bump CNI plugins
e271b600f1 Remove flannel external-ip annotations when disabled
93e5cdc665 Add tests for etcd local reconcile
14d0946392 Fix etcd reconcile with empty TLS dirs
35325987e3 Replace temporary etcd server with raw mvcc store access
17be721d99 Don't enforce use of wg.Go instead of Add/Done
b3b4b64a31 Bump stable to 1.34 and add 1.35
74afe498d0 Fix PR lint checkout depth
344a1bfd1f lint: nested-structs
3816096e46 lint: unnecessary-format,use-errors-new
09484feb7c lint: unhandled-error
05f0cdf080 lint: identical-switch-branches
c45212f932 lint: useless-break
6964eca111 lint: unnecessary-stmt
2b9f2f465c lint: unexported-return
b43f4a90cb lint: unexported-naming
43c58a897c lint: unchecked-type-assertion
44bb326fcc lint: superfluous-else
d2bbcb8ce2 lint: struct-tag
d27b113d58 lint: redefines-builtin-id
986915c381 lint: indent-error-flow
dd97235fc1 lint: import-alias-naming
035a60f295 lint: if-return
7506516bfa lint: exported
c290d10a57 lint: empty-lines
b32993713c lint: duplicated-imports
313966fbee lint: defer,get-return
a005161b4b lint: bool-literal-in-expr
d360faf2b3 lint: bare-return
5c7c49e36d lint: deep-exit
3c0ed0293b lint: comment-spacings
7f1a90166f lint: dot-imports
08918b90a6 lint: use-any
b80668fc2d lint: redundant-build-tag
a9b96775dc lint: file is not properly formatted
2ccbe1f844 Add lint/validate job
e1ef30f0ef Bump golangci-lint for go1.25
5dddbc8a66 Bump actions/cache from 4 to 5 (#13347)
5a793c4cff Bump actions/download-artifact from 6 to 7 (#13346)
26217f45bf Push GA images to staging registry (#13437)
b54634c463 Bump local path provisioner to v0.0.34 (#13426)
14c744d013 Bump coredns to 1.13.2
625139da72 Bump traefik to 3.6.6
4a49c0a04a chore: Bump Local Path Provisioner version (#13387)
591dda9fa6 Fix upgrade test eventually
8e7b3caa5c Allow k3s secrets-encrypt enable on existing clusters
01795824eb Bump rancher/systemd-node to v0.0.7 (SLES 16.0)
519317e02e Use Get, not Head for channel page
25dc06d9a9 Replace legacy ReplicationController with Deployment
4b2777b55f Expand docker upgrade test, sunset E2E upgrade test
cf90ac502d Add firewall section to check-config.sh (#13390)
a6c6cd15c0 Fix panic in test cleanup when client is unset
6840e435cd Fix event strings
2ac57a7e2c Fix prometheus metrics parsing
3943327933 Bump kubernetes v1.35.0 and golang v1.25.5
e060c0b18f Bump actions/upload-artifact from 5 to 6
650fed932d Validate collected files for release
7806fa6b9c Move sha256sum from workflow to script
d3732ec3fc Combine airgap and binary publishing steps
7c6c338e2f Fix release workflow
b27276dc81 Add job to lint all workflows on change
61e248b04c Reduce image pull spew
a5ab12b82c Reuse airgap workflow in release
d0052281a9 Fix arm airgap platforms
4116b53e86 Override DefaultHelmJob at build time (#13351)
c0b1314d15 Bump kine to v0.14.9
463678586d [main] Update to v1.34.3-k3s1 and Go 1.24.11 (#13308)
f223247d63 Pass platform option to `docker save`
b4b33afbde Bump kube-router to v2.6.3-k3s1
764e98cbb4 Bump kine to v0.14.8
613a5e4787 Bump runc to v1.4.0
aaa7fa237b Bump kine and etcd
d337570de1 Fix inconsistent curl flags in tests
c3ca02aa75 Move embed into separate package from executor
d582a0da84 Reorganize flannel consts and fields
d1989567ea Use patch helper for secrets-encryption labels and annotations
1cb80fbe75 Use patch helper for spegel annotations and labels
57210b87cc Use patch helper for node labels and annotations
713cf8fbde Use patch helper for etcd labels and annotations
2b39b6808a Use patch helper for etcd member controller
785cfad963 Use patch helper for etcd snapshot annotation patch
ceebaade3e Add JSON patch helper
efcf8eb7ac Move embedded flannel and vpn config setup into embedded executor
ec3cc04214 Move CNI execution into executor
b7ca944774 Move etcd metrics to separate package
543b6307a6 Define DefaultHelmJobImage in K3s, overriding what helm-controller defaults to. (#13258)
0d39c86b5c Move from ranchertest to mirrored-busybox
cd08e731f6 Fix naming convention for docker test import
572cc8e2bf Consolidate RunCommand between Docker and E2E tests
e3cc61c43c Update kube-router to v2.6.2
8e0676ad46 update busybox image version to 1.37.0 (#13237)
68749aac76 Bump actions/checkout from 5 to 6 (#13256)
96ed4393c1 Remove remaining references to drone
1262649fda update channels to 1.33.6 (#13246)
3de08883f7 Bump opencontainers/selinux
f726966062 Clean tools from runners before tests
74088f5175 Use docker containerd snapshotter for stable image digests
f783052df2 Fix airgap-extra-registry flag
af441c29a0 Add test for sharing imported images by digest
1037dcbff4 Add digests and source labels for imported images
9806524a48 Fix spegel ready checks to give server more time to find a peer
f0d54528d0 Stop waiting on CRI ready if context is cancelled
871094b5c6 Add multus e2e test
913005658c tunnel: handle pod IP reuse (#13212)
ed57fb5e61 Fix windows build os (#13201)
c86b66d05c Add id-token (#13209)
3cdb5f8cf5 Update to v1.34.2-k3s1 and Go 1.24.9 (#13204)
8215b940e3 Bump klipper-helm and helm-controller (#13187)
3530ab5915 Fix tailscale setup in case of an already running configuration
7146e2000e Fix apiserver starting before remote etcd is up
8f781acff4 [main] Add Prime assets upload (#13160)
858b109b92 Fix adding OwnerReferences to Nodes seen from initial list
e438a3c1a0 Bump containerd to v2.1.5
a2663f8884 Bump remotedialer to fix deadlock on connection close
fdc356a9ce Bump runc to v1.3.3
b8f6f958c8 Streamline E2E startup test (#13137)
b9e90d3e51 Don't look at head for upgrade channel (#13130)
2459bf7c84 Bump actions/upload-artifact from 4 to 5 (#13104)
72ca761529 Migrate Docker Image publishing to GitHub Actions
19e8f83d1d Only run arm64 and amd64 test stage on drone tags
e1238095f0 Bump kine to 0.14.6
9e1003029c Bump actions/download-artifact from 5 to 6
602d43081e Migrate dispatch pipeline into GitHub Actions (#13105)
d8790220ff Move node password secrets into dedicated controller
139d64c129 Create node-password secrets with custom Type
d622b18c20 Remove node password file migration code
0d9ef273d8 Remove node addresses from filter when node is deleted
171644cf0c Replace raw ListWatch with NewListWatchFromClient
d50a4a894e Fix invalid replaced versions
92a0b7eec2 Bump helm-controller/klipper-helm
cfcc9ef65e Add docker dualstack test (#13070)
5aca8e24b1 Update dispatch script (#13079)
6381cad10f rootless ports: add support for udp
517df31f65 Fix postgres DB container args for nightly conformance (#13069)
481cd6002a Bump ossf/scorecard-action from 2.4.2 to 2.4.3 (#13026)
65932372c7 Bump github/codeql-action from 3 to 4 (#13065)
989c07f6a2 Bump actions/stale from 10.0.0 to 10.1.0 (#13025)
24dda29fb8 Cleanup wording and decisions on various ADRs (#13068)
0e5bc29d34 Bump kine for idle progress fix
e8e76e3cf3 move to 1.13.1
1511d362a4 Bump coredns to v1.12.4
701cc35b7a Bump kine=v0.14.4, etcd=v3.6.5
6ba8efd7a1 create policy hint only when all variables defined
09762a57df Update flannel, kube-router and cni plugins
ef6d6f4c36 Bump kine for postgres object count fix
89adabb672 Drop calls to rand.Seed
3190f30de8 Update stable channel to v1.33.5+k3s1 (#13017)
7a41cce152 Fix ability to rotate server token to an invalid format
565d50a3b1 Create dynamic-cert-regenerate file in CA cert rotation handler
6edbae331b Fix bootstrap charts
9a6f602c75 Fix handling of vendored dependencies in version script
39d89153da fix: default forward after override imports
59b4a9d738 Bump kine to v0.14.2 for schema fix
09845c9f00 Bump traefik to 3.5.1 (#12948)
d6e84ba2d1 Fix kine metrics registration without --kine-tls
a26fd3ba4d Disable metrics test pending resolution of upstream issue
1026725896 Enable debug logs for embedded mirror e2e
8347597031 Bump spegel to v0.4.0
ade82387f7 Inclusive naming proposal (issue: #12110, Orlin Vasiliev) (#12383)
1e45f1de72 Bump actions/stale from 9.1.0 to 10.0.0 (#12878)
908a0b91dc Fix install script raspi cmdline message (#12842)
3854eb56d4 Run upgrade test in dedicated drone step
5b19165e9e Fix pods readiness tests
a0ce2aaeaf Add sequential split-server test
bfdcc7bcc8 Fix etcd member promotion
626178624f Bump aquasecurity/trivy-action from 0.32.0 to 0.33.1 (#12879)
14e919804d Fix garbled CLI (#12899)
4974fc7c24 Use sync.WaitGroup to avoid exiting before components have shut down
7e028854e7 Fix signal handling when pid 1
274498fb4d Add pkg/signals for signal handler setup
b61d6f3b81 Transfer cluster leadership before removing leader member
659f2a7014 Fix perpetual etcd member removal
a7d3c8559f Fix IPv6 handling for loadbalancer addresses
07d0711e5a Update hardened script for cis-1.11 (#12912)
0136cf2589 Remove NetworkManager check for nm-cloud.service
2f6283a92c chore: Bump Klipper Helm and Helm Controller version
9c6d0eb5cd Bump actions/github-script from 7 to 8 (#12881)
1b98629b2c Bump actions/setup-go from 5 to 6 (#12880)
bdb92296a5 Bump dynamiclistener for secret sync fix
67c23a20e3 Update to v1.34.1 (#12897)
7e253dbf02 Fix netpol fatal error when changing node IP
b3ac144e2d Move data dir into position before creating CNI symlinks
857412ae58 Add 1.34 release channel
a64d872c13 Add opencontainers/runc pin
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping distribution to version v3.0.0-157-gbd213792, which comprises the following commits:
33240507 chore: fix typo in comment
33bb5f60 build(deps): bump docker/bake-action from 6 to 7
6b6081e3 build(deps): bump docker/setup-buildx-action from 3 to 4
d56f9dae build(deps): bump docker/metadata-action from 5 to 6
887c2272 build(deps): bump docker/login-action from 3 to 4
d1f8bd9c build(deps): bump github/codeql-action from 4.32.2 to 4.32.5
021b69d5 fix: nil-check scheduler in `proxyingRegistry.Close()`
2957c891 fix: set MD5 on GCS writer before first `Write` call in `putContent`
fca6b9f8 build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0
eba1fb48 vendor: github.com/docker/go-events 605354379745
01a853e4 go.mod: remove outdated comment
2a52e901 vendor: github.com/go-jose/go-jose/v4 v4.1.3
3e841a3d vendor: github.com/spf13/cobra v1.10.2
10e0e8e4 vendor: github.com/bshuster-repo/logrus-logstash-hook v1.1.0
d2398c56 vendor: github.com/klauspost/compress v1.18.4
c4a0bd3f vendor: github.com/opencontainers/image-spec v1.1.1
f18b8d70 fix "prealloc" linting
775d3734 modernize code
abc9debf vendor: github.com/docker/docker-credential-helpers v0.9.5
b4f2af3f fix: sync parent dir to ensure data is reliably stored
5ddf7898 use filepath instead of path
9b79cf51 vendor: golang.org/x/oauth2 v0.35.0
ae7c498d vendor: golang.org/x/time v0.14.0
87a9711c vendor: golang.org/x/crypto v0.48.0, golang.org/x/net v0.50.0
aebf0612 vendor: golang.org/x/text v0.34.0
3e3e1539 vendor: golang.org/x/sys v0.41.0
00464063 vendor: github.com/sirupsen/logrus v1.9.4
f5d656e6 drop support for go1.23
60d2cd5c update to go1.25.7, alpine 3.23
efd7ffb9 Dockerfile: update tonistiigi/xx v1.9.0
f5e1a893 update golangci-lint to v2.9 and fix linting issues
9e377670 build(deps): bump github/codeql-action from 4.31.10 to 4.32.2
abcf7ebe fix: prefer otel variables over hard coded service name
3658dc56 build(deps): bump actions/checkout from 6.0.1 to 6.0.2
a89f0a40 build(deps): bump github/codeql-action from 4.31.3 to 4.31.10
0db7f0ce fix(ci): Fix broken Azure e2e storage tests
31a63333 Add Cloudfleet Container Registry to adopters
33dab393 Expose `useFIPSEndpoint` for S3
75a14d4d Add boolean parsing util
1ad03da6 fix: Logging regression for manifest HEAD requests
a260baf2 build(deps): bump actions/checkout from 6.0.0 to 6.0.1
b256f39b build(deps): bump actions/upload-artifact from 4.6.2 to 6.0.0
f1e4ae3d add return error when list object
d2b3a1fe build(deps): bump actions/checkout from 5.0.1 to 6.0.0
f7d65991 build(deps): bump actions/checkout from 5 to 6
c7da31eb "should" -> "must" regarding redis eviction policy
64f4511a refactor: remove redundant variable declarations in for loops
e0cb1712 build(deps): bump github/codeql-action from 4.30.9 to 4.31.3
ce3fa7fc Fix notification filtering to work with actions when mediatypes is empty
f1323c5b fix(proxy): sanitize challenge URL logs using Redacted()
6f719029 build(deps): bump github/codeql-action from 4.30.8 to 4.30.9
edde36cd feat(registry): Make graceful shutdown test robust
2f1a51dc client: add Accept headers to Exists() HEAD
b1c0fc55 Incorrect warning hint * Fix incorrect (old) warning hint
864a3212 build(deps): bump peter-evans/dockerhub-description from 4 to 5
8a5addfc Update the docs with correct information
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Go's module cache .info files store Origin.Ref as the "nearest tag"
used to derive pseudo-versions (e.g., v0.0.0-20190215142949-d0b11bdaac8a
stores Ref: "refs/tags/v0.3.0"). This ref is NOT a tag pointing to the
pseudo-version's actual commit - it's just metadata about the base version.
The generator was blindly using this ref as tag=v0.3.0;shallow=1 in
SRC_URI entries. BitBake resolves the tag to one specific commit, finds
it doesn't match the rev= parameter, and fails with:
FetchError("The revision the git tag 'v0.3.0' resolved to didn't match
the SRCREV in use...")
This caused multiple SRC_URI entries for the same repo (e.g.,
go.googlesource.com/sys) to all claim tag=v0.3.0 but with different
rev= values - only one could possibly be correct.
Fix by detecting pseudo-versions via parse_pseudo_version_tag() and
clearing the ref_hint so these entries use nobranch=1 without a tag,
falling back to full clone by commit hash. Tagged versions (real
releases) correctly retain their tag= parameter for shallow clones.
The docker-compose .inc files are regenerated with the fix applied.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping compose to version v2.26.1-948-ge8c214349, which comprises the following commits:
e8c214349 build(deps): bump github.com/moby/moby/client from 0.2.2 to 0.3.0
0ffb17117 build(deps): bump golang.org/x/sync from 0.19.0 to 0.20.0
eb6afa8d3 build(deps): bump github.com/containerd/containerd/v2
79d4fe3c1 build(deps): bump golang.org/x/sys from 0.41.0 to 0.42.0
d7ec1eca9 update to go1.25.8
ffa8576d9 build(deps): bump github.com/moby/moby/api from 1.53.0 to 1.54.0
4915b775e fix: only pass ConsoleSize to ExecAttach when TTY is enabled
85d6770b7 Fix panic when watch rebuilds without up
81d7d3c60 fix: execute post_start hooks in docker compose run
f9828dfab modernize some code
da691c7cc pkg/compose: un-export consts
fefdc9522 pkg/compose: defaultNetworkSettings: slight refactor
08c32e903 pkg/compose: defaultNetworkSettings: return early for unsupported feature
bdb630fb8 pkg/compose: format layer push progress
3697b128a pkg/compose: format layer pull progress
b285e4897 pkg/compose: remove unused consts
8193d86d2 pkg/bridge: remove uses of go-connections
bfb5511d0 go.mod: bump github.com/moby/moby/api v1.53.0, moby/client v0.2.2
7abaa0661 build(deps): bump go.yaml.in/yaml/v4 from 4.0.0-rc.3 to 4.0.0-rc.4
3b0e8f538 build(deps): bump golang.org/x/sys from 0.40.0 to 0.41.0
af376603c update to go1.25.7
7f8814f4c Fix invalid path error when using OCI artifacts on Windows
af0029afe ci: use bin-image edge tag directly for e2e tests
b76feb66e ci: fix missing dependency on bin-image job
9dc7f1e70 ci: use docker/github-builder to build, sign and push bin image
03205124f ci: use docker/github-builder to build, sign binaries
8b769bad6 pkg/compose: remove dependency on github.com/docker/buildx/driver
671507a8b fix panic
56ab28aef compose: recreate container when mounted image digest changes Until now, mustRecreate logic only checked for divergence in TypeVolume mounts but ignored TypeImage mounts. This inconsistency caused containers to erroneously retain stale images even after the source image was rebuilt. This commit updates ensureImagesExists to resolve image volume sources to their digests using the official reference package. This enables ServiceHash (config hash) to naturally detect underlying image digest changes, triggering recreation via the standard convergence logic. An E2E test case is added to verify this behavior. Fixes #13547
e7d870a10 update to go1.25.6
d5bb3387c Fix potential nil pointer dereference in container event monitoring
d91fc6381 Upgrade GitHub Actions to latest versions
c51b1fea2 replace some uses of strings.Split(N) for strings.Cut
fa7549a85 Dockerfile: update golangci-lint to v2.8.0
a061c1773 fix: emit container status events after network reconnection
c5e7d9158 update to go1.24.12
3783b8ada fsnotify is set in Dockerfile
c428a7711 set fsnotify build tag when building for OSX
04b4a832d chore(lint): add forbidigo rules to enforce t.Context() in tests
27faa3b84 test: replace os.MkdirTemp with t.TempDir()
bcc0401e0 test: replace os.Setenv with t.Setenv()
093205121 test: replace context.Background()/context.TODO() with t.Context()
b92b87dd9 fix: robustly handle large file change batches in watch mode
06e128748 fix: update github.com/moby/term to indirect dependency
d7bdb34ff refactor(attach): remove unused stdin from getContainerStream
79d7a8acd refactor(attach): simplify attachContainerStreams signature
abd99be4f refactor(attach): remove unused detach watcher and keep attach behavior
2672d3421 Improve error handling in attach.go
27bf40357 Bump compose to v2.10.1
c8d687599 Fixed progress UI to adapt to terminal width
2f108ffaa handle healthcheck.disable true in isServiceHealthy
0a07df0e5 build(deps): bump github.com/sirupsen/logrus v1.9.4
02b606ef8 use go-compose instead Signed-off-by: tensorworker <tensorworker@proton.me>
985680294 fix: expand tilde in --env-file paths to user home directory
63ae7eb0f Replace tabbed indentation in sdk.md
f17d0dfc6 build(deps): bump github.com/go-viper/mapstructure/v2
ef14cfcfe build(deps): bump google.golang.org/grpc from 1.77.0 to 1.78.0
b760afaf9 refactor: extract API version constants to dedicated file
a2a5c86f5 build(deps): bump golang.org/x/sys from 0.39.0 to 0.40.0
98e82127b build(deps): bump github.com/containerd/containerd/v2 to v2.2.1
03e19e4a8 go.mod: remove exclude rules
b2c17ff11 build(deps): bump github.com/klauspost/compress to v1.18.2
ec88588cd Removed build warning when no explicit build has been requested.
7d5913403 add service name completion to down command
d95aa57f0 fix: avoid setting timeout when waitTimeout is not positive
ee4c01b66 fix: correctly use errgroup.WithContext
d7a65f53f fix: correct typo in isSwarmEnabled method name
4520bcbaf fix: clean up temporary compose files after conversion
327be1fcd add unit test
59f04b85a remove duplicated version field
b4574c8bd do not strip build metadata
29d6c918c use github.com/docker/docker/api/types/versions for comparing versions and store plugin version obtained by pluginManager in newModelAPI
58403169f Only append RuntimeFlags if docker model CLI version is >= v1.0.6
6aee7f837 gets back runtime flags when configuring models
c89b8a2d6 warn user no service has been selected to build
aec9f5417 check model plugin is successfully loaded and store version
232197d36 build(deps): bump github.com/moby/buildkit from 0.26.2 to 0.26.3
81ba889be build(deps): bump tags.cncf.io/container-device-interface
8e5b25c0f Restored support for BUILDKIT_PROGRESS.
d4c198763 Prevented incorrect progress metrics to break compose display.
1297f97ae prefer aec library over raw ANSI sequences
55cded180 Avoid reassigning err variable
6c043929a Fix missing error handling in setEnvWithDotEnv
275033056 doc: do not mention v2 on README
e22426443 Introduced fsnotify build tag to select watcher implementation
6599f8ad8 add 'configured' event at the end of model configuration phase Currently when using models, the final message is 'confugiring' which could let users think the DMR configuration is still pending
3853ad391 prefer *task for memory efficiency updating tasks
02008a009 Restored image layer download progress details on pull.
4f419e509 build(deps): bump golang.org/x/sync from 0.18.0 to 0.19.0
b62cbed87 Fixed status alignment in progress UI.
aa9a71f37 run finalization synchronously
ac211e6e5 build(deps): bump github.com/docker/cli-docs-tool from 0.10.0 to 0.11.0
778a627b8 Set Go min version to absolute minimum version required
359d2f076 ci: use .go-version file for actions/setup-go
c9e0d83e1 ci: upgrade actions/setup-go from v5 to v6
3e206fdcc build(deps): bump golang.org/x/sys from 0.38.0 to 0.39.0
d12947e9f Fixed broken run --quiet.
0878c59a7 chore: fix grammatical errors and improve clarity in code
c0345e4f4 restore support for COMPOSE_COMPATIBILITY
9fada6cc2 Bumped build images: tonistiigi/xx:1.9.0, crazymax/osxcross:15.5
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping moby to version docker-v29.3.0-46-g1da6517e1a, which comprises the following commits:
da4a6385e6 client: New: ignore nil-Opt instead of panicking
fd8c58b1dc chore(deps): update docker/buildx-bin docker tag to v0.32.1
4e3929c00c fix "make validate"
ed24fb9f77 client: fix "gosec" linting false positives
571080854b client: go fix
7a2c307dee daemon: fix QF1012: Use fmt.Fprintf(...) instead of WriteString(fmt.Sprintf(...))
2058a7e917 golangci-lint: ignore "G120: Parsing form data without limiting request body" in tests
64cd0966df golangci-lint: ignore "G101: Potential hardcoded credentials' in tests
aecf26ec02 client: go.mod: remove patch version
df294b20dd api: go.mod: remove patch version
44e1ccd0a3 client: add missing doc comments to config, secret, and node types
63fcb9ff6f client: add missing doc comments to container copy types
e0e4afd325 client: add missing doc comments to image tag, build cancel, and info types
a722b68f5c api/types/network: use blackbox testing for ports
91f3ec65e6 api/types/network: Port, PortRange: update godoc for "String()"
19ef53a52f api/types/network: add Port.Port()
4c24542e95 api/types/network: Port,PortRange: don't panic on zero values
d2bfe414bd client/internal/mod: also consider main module
835a376948 client: set default user-agent based on module version
1bb13378c5 client: update examples
6c0524748e vendor: github.com/containerd/containerd v2.2.2
011c4451b4 go.mod: add back replace rules
143022931e Dockerfile: update containerd to v2.2.2
c266b4fe9b update to go1.25.8
2f457226ae hack/test/unit: avoid unbound pkg vars with set -u
588e5adf41 bugfix: handle duplicate exit events via task status
e064824bbf ci: module-replace: ignore Dockerfile for api changes
fe8c9d94c4 vendor: github.com/containerd/ttrpc v1.2.8
5af43607b0 vendor: github.com/moby/moby/client v0.3.0
36771868a6 vendor: github.com/moby/moby/api v1.54.0
4569055e13 Drop replace rules
2fa6029be4 network/connect: Support MacAddress
5db1685516 daemon: add regression test for getSourceMount
71c48150eb gha/labeler: Remove *_test.go from area/testing label
13a8626eeb daemon/devices: Turn RegisterGPUDeviceDrivers into func
561a5a9b36 Use CDI for GPU injection for AMD devices for --gpus
23b30dc35d vendor: update buildkit to v0.28.0
e5a54400b5 chore(deps): update crazy-max/ghaction-github-runtime action to v4
36b2266e75 internal/testutil: drop semconv dependency
5e87fcdc73 Update cloudflare/circl to v1.6.3
17aa4f26e7 client: remove WithAPIVersionNegotiation from example
7bf688478b client, api: add back replace rules
e04bd2649e Rename disk usage properties in v1.54.yamlBackport c07043e36f11c060992fb11b2ca3aa8200c393b4 to api/docs/v1.54.yaml.
5272ef1422 Backport c07043e36f11c060992fb11b2ca3aa8200c393b4 to api/docs/v1.53.yaml.
076100ddcc Backport c07043e36f11c060992fb11b2ca3aa8200c393b4 to api/docs/v1.52.yaml.
c07043e36f Fix /system/df in swagger.yaml.
425bc6efcb integration/image: pull ppc64le and s390x in TestSaveAndLoadPlatform
36a89adc82 integration/capabilities: Switch to debian:trixie-slim
5f63e8548e integration/container: use page-aligned shm size to fix test on ppc64le
f966ff43e3 vendor: github.com/moby/moby/client v0.2.3-rc.1
6e4c253e04 vendor: github.com/moby/moby/api v1.54.0-rc.1
badfa8b3ae Drop replace rules
74ad89c189 api: Cut v1.54
57e197fd21 chore(deps): update github artifact actions
be312cbe79 fix(deps): update module golang.org/x/net to v0.51.0
4e606a0154 gha/vm: Limit to cgroup-related integration packages
1433bee87d image: refresh identity cache entries before expiry
59bf6b30c1 image: add identity cache backend walk and prune expired support
ab58f4fa4a vendor: update buildkit to v0.28.0-rc2
3aef780b0a image: identity unit and integration tests
fae834d543 image: warm identity cache on image changes
2ba7c77be1 image: cache image identity signature lookups
e22eb8cb2d image: move image identity logic to dedicated file
6d133c5ec6 image: add opt-in identity support to image list API
434b8a2a51 chore(deps): update docker/compose-bin docker tag to v5.1.0
dbc13e8e43 fix(deps): update module github.com/containerd/cgroups/v3 to v3.1.3
b6073b1016 fix(deps): update aws-sdk-go-v2 monorepo
205266169b fix(deps): update module github.com/godbus/dbus/v5 to v5.2.2
90b19dc740 fix(deps): update opentelemetry-go monorepo to v1.40.0
40f06bf418 Reapply: daemon/command: add support for sd_notify "reload" notifications
2ac82f44af container/prune: Don't fail early on layer size errors
989e590f52 vendor: update buildkit to v0.28.0-rc1
0e7c8176e8 api/types: add MediaType pseudo-type, and touch-up docs
0d4d067f68 client: fix some comments
2283e0351c daemon/server/httputils/logstream: Write: tidy-up stream handling
b55842c85f daemon/server/httputils/logstream: Write: handle context cancellation
d593a7b427 daemon/server/httputils: move WriteLogStream to its own package
f9a213ffc4 client: Client.Events: prefer json-lines, ndjson over json-seq
41e7a3de0a client: container, service logs: skip "tail" parameter if not needed
35fdcb802c api: improve, fix content-negotiation for /events endpoint
dff0d87430 daemon/server/httputils: contenttype package and MatchAcceptStrict utility
99add78b1f daemon: send systemd READY=1 after API serve loops start
320b010add api/docs: add "platform" param for `GET /image/{name}/json` (API v1.49-v1.53)
927d7d1045 api: swagger: document "platform" param for `GET /image/{name}/json`
71b5e2cc7d daemon: CDI: fix missing error in logs
aa011fc482 daemon: fix spurious "ShouldRestart failed" warning on shutdown
5f3c4002bd daemon: fix "Daemon shutdown complete" log arriving too early
be32017b9d daemon/containerd: don't log warning for stopped containers on startup
a436529bbc libnetwork: nftabler.Cleanup: pass context and make logs more useful
78d8942c66 daemon/logger: cleanup some tests
a2edf4798d client/pkg/streamformatter: refactor
81414a6eb1 client/pkg/streamformatter: use blackbox testing
5f10e5fdfa client/pkg/streamformatter: add TODO for NewLines option
dee810c0dc client/pkg/streamformatter: jsonProgressFormatter: remove unused code
fe6838cf4c client/pkg/streamformatter: optimize appendNewline
71025997bc client/pkg/streamformatter: remove redundant nil check
cf4d504c29 client/pkg/streamformatter: fix faulty TestNewJSONProgressOutput
e3e1167c00 client/pkg/streamformatter: remove redundant cmp-opts in test
21706fb5cd client/pkg/progress: reduce some wrapping
8b4edd73b3 client/pkg/jsonmessage: make DisplayJSONMessages accept a iter.Seq2
eb14c7bfd8 daemon: Daemon.getInspectData: unify platform-specific fields
d71f8560e4 daemon: remove obsolete warning for legacy "overlay"
f96921e5e5 api: lower default minimum API version to v1.40
e2fad779f7 api: restore support for API v1.41, v1.42, and v1.43
225a61e5f0 integration: raise timeout for "vm" tests
9eb56a9225 client/internal: export stream type
e30b1d5495 daemon: Fix DNS config corruption on reload
c5a0bfd9ff client/pkg/jsonmessage: fix typo in godoc
bdede35717 api/types/jsonstream: add sanity-check for Message marshaling
d00882aff2 api/types/jsonstream: prevent panic on nil-Error
02c0f96405 hack/dockerfile: fix tini build with newer CMake versions
254158991a daemon: remove deprecation warning for "windows-dns-proxy" feature flag
9d77f4a0e4 daemon/container: Container.TrySetNetworkMount: use switch
9a9106b71a api/types/swarm: PortConfig: add Compare method
7cfe94a34e daemon/libnetwork/osl: don't chain "WithXXX" for logs
b7a404d94d migrate TestSwarmCAHash to Integration Test
fadc29b86f libnetwork: send neighbor advertisements on restore
21d383fca5 modernize: waitgroup
9e093be715 daemon: Daemon.loadContainers: use WaitGroup.Go
62f1a1772c daemon/internal/metrics: CleanupPlugin: use WaitGroup.Go
cc5d36b2db daemon: Daemon.restore: use WaitGroup.Go
c6ca7d49f9 Revert "daemon/command: don't make notifyReady(), notifyStopping() asynchronous"
5bdfdc0919 Revert "daemon/command: send notifyReady, notifyStopping synchronous"
ddb636c2bd Revert "daemon/command: add support for sd_notify "reload" notifications"
538c494d2b daemon/containerd: singlePlatformImage: remove contentStore arg
a85d62fdfa Makefile: fix DOCKER_LDFLAGS example
34653f13ee daemon/libnetwork: update go:generate import paths
786528f38f integration/daemon: remove stray "import" comment
c59fad9140 fix(deps): update github.com/moby/policy-helpers digest to 824747b
fea88ec7da daemon/internal/metrics: CleanupPlugin: minor cleanup
eda57913fc daemon: NewDaemon: update log that chained "WithField"
f3fae5d18c daemon: Daemon.restore: pass through context to daemon.register
53232b1319 daemon: Daemon.restore: use correct logger
3ba816f747 daemon: Daemon.restartSwarmContainers(): reduce nested if
107724f022 Remove direct dependency on code.cloudfoundry.org/clock
146c702f24 Fix missing error check in ContainerTop on Windows
381ca65f34 vendor: golang.org/x/oauth2 v0.35.0
9db7dfa93b vendor: golang.org/x/tools v0.42.0
fa509b5b4a vendor: golang.org/x/mod v0.33.0
05918ae874 vendor: golang.org/x/net v0.50.0
873288917c vendor: golang.org/x/crypto v0.48.0
a464d5ce05 vendor: golang.org/x/term v0.40.0
c69b6a1ea1 vendor: golang.org/x/text v0.34.0
641cf3c34e vendor: golang.org/x/sys v0.41.0
8e5c906a3c daemon/internal/builder-next: add executorOpts struct
52c122b7f1 Dockerfile: update docker CLI to v29.2.1
39d5be178b builder-next: prevent "invalid IP" used for DNS
9e172b47d4 builder-next: remove some intermediate vars
f758cf5f00 builder-next: close boltdb instances on error
83b04feb86 daemon/volume: cleanup some logs
7fef0b66f6 daemon/volume: don't print warnings for non-volume directories
d9f16785f9 daemon: warn for unmet system requirements after service registration
8ba81896fb daemon: CheckSystem: use sync.OnceValue
b8c6046f74 daemon: allow service registration on Windows with missing system dependencies
5bb55365c5 forwardExtDNS: Don't cancel context then use it
b29dbcf5ca migrate to github.com/pelletier/go-toml/v2
c50290185f vendor: github.com/mistifyio/go-zfs/v4 v4.0.0
52836336a9 daemon/container: Container.Reset: use early return
80bfc74230 daemon/container: Container.Reset: use structured logs
7378207260 daemon/container: Container.Reset: remove "lock" argument
1b9e1c8add daemon: fix getSourceMount to handle multiple mounts at same path
Bumping docker-cli to version v29.2.1-10-gdf016a3a9, which comprises the following commits:
5eb91665d docs: fix typos
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping crun to version 1.26-160-g393509db, which comprises the following commits:
0a3e929f utils: fix memory leak and missing cache in libcrun_initialize_apparmor()
63ce25da container: delete the container on poststart hooks failures
b0847b3e Document error handling
cf27a14b fix(utils): use parent dir fd for bind on long socket paths
aca98960 fix(hooks): log warning when poststop hooks fail
115ac2e6 cgroup: preserve errno on errors in rmdir_all_fd
4db1709f libcrun: check setenv failure
8feac6b9 fix(utils): retry fgetpwent_r() on EINTR
52b7016f pass cgroup2 mount options to the kernel
30426104 tests/podman: exclude --tls-details tests
6e43ff33 tests/podman/run-tests.sh: fix ginkgo args
fa7a5561 tests/podman/run-tests.sh: untangle -skip arg
3a1addc7 fix(python): initialize error variable to NULL in Python bindings
00206a80 channel_fd_pair: fix CPU busy loop when output pipe is blocked
dbd02baa criu: show excerpt from log file on c/r error
34143735 hooks: allow ignoring chdir permission errors for container hooks
11af5b2d crui: simplify criu_check_mem_track error message.
8d0ef603 container: remove dead code in setup_terminal_socketpair
6c5c957e container: fix createRuntime hooks not receiving bundle path
d24d0283 criu: check for criu_check_version error
3ade23f4 plans: install iptables-legacy on CS9
3e41e53b Packit/TMT: re-enable centos-stream-10-x86_64 tests
c46a44a8 restore: fix memory leak
7cec3cb2 build(deps): bump actions/upload-artifact from 6 to 7
4e0e2679 mounts: fix error message argument
be231d3c ci: bump shellcheck to v0.11.0
b36ec403 ci: fix go-md2man installation
35648b9b tests: switch from docker hub to quay for Fedora
5002665f tests/clang-check: install clang-analyzer
bdf9c902 status: drop unnecessary strtoll
11701f43 criu: fix missing umount() in error path
314c2efa utils: refactor set_home_env
aecd620a libcrun: document vfork shared error
04d7a341 cloned_binary: do not close file descriptor twice
3f72f325 ci: simplify codespell job
47c36ca5 linux: do not use errno after success
a278c6d1 linux: drop unnecessary xasprintf result check
3e313388 linux: do not leak error
434d77cb cgroup-systemd: do not use errno after success
335792b1 scheduler: add diagnostic messages for SCHED_DEADLINE
4db170c5 criu: do not ignore errors with ret != -1
036132e2 cgroup: do not clobber errno
1649a4d3 container: do not use bogus errno
2e527065 linux: do not use errno without failure
a0be577a tests/podman: exclude ever failing test case
e38674bc linux: fix copy_from_fd ownership
8fa73419 linux: drop unnecessary code
60d8a60e linux: do not leak error
9a232317 utils: do not use errno after success
d5b20987 container: do not use errno after success
e2c09bfd ci: use git diff --exit-code
f1c6ca6a ci: fix test (check) flake
69d39045 linux: create error from uidgidmap_helper
1492e83c cgroup: fix read_pids_cgroup skipping child cgroups
c5879bab container: make return clearer
a154b398 container: return the error from cgroup_killall
899b9faa seccomp: fix n_plugins calculation
463e277a krun: Rename nitro module to awsnitro
b32f895b container: fix exit code return
a6023b10 container: add missing crun_make_error
52294f84 libcrun: standardize error code after yajl_gen_alloc
59da15f3 container: add missing yajl cleanup
5082e02d container: do not leak error
a83a4cf9 container: improve error handling after libcrun_copy_config_file call
6733e20c linux: use crun_error_wrap
0f367791 container: do not use errno after successful calls
29bb32d8 linux: do not use errno after successful calls
e7ffed11 krun: fix error arguments
34c1e098 krun: avoid redundant crun_error_release() call
dedcdd67 krun: do not release error when *err is uninitialized
671740dd krun: fix error code
1644fb0e container: fix error leak
649d568a krun: fix error return
41a14fe8 krun: Propagate crun log level to libkrun
2bff1297 libcrun: add `krun.` as a potentially unsafe annotation
41941f2c krun: parse annotations for krun.{cpus, ram_mib}
625226de krun: parse annotations for krun.variant
f311dc07 Add handler phase HANDLER_CONFIGURE_BEFORE_USERNS, and move krun setup to it
488f301d linux: check for def->linux
b1a71725 linux: check for [ug]id_mappings before accessing them
df771204 krun: Set exec args when running nitro variant
b78e9868 krun/nitro: Redirect enclave VM output to stdout
bf288342 krun: Remove specific function for nitro config
8e8186b3 hooks: exit immediately if poststart hooks fail
88f55126 AGENTS.md: new file
71077a22 utils: flush gcov data before closing files
3241e671 NEWS: tag 1.26
5bee6a06 utils: handle NULL container passed to libcrun_open_proc_file()
4df0d339 cgroup: rename enter_cgroup_subsystem
6c98db0b tests: add tests for crun custom annotations
29a39ebf tests: add cgroup unit tests for coverage
3ef2a77f tests: add more utils unit tests for coverage
87997df0 tests: add seccomp_notify unit tests for coverage
890fff10 tests: add chroot_realpath unit tests for coverage
440e3b09 tests: add mount_flags.perf unit tests for coverage
869343fb tests: add signals.perf unit tests for coverage
2a3193ab tests: add logger info to checkpoint_restore
72793562 tests: add linux.c integration tests for coverage
1407bb39 tests: add linux.c unit tests for coverage
638266c7 tests: add error handling coverage tests for linux.c
b18734b5 tests: add namespace coverage tests for linux.c
8a26d6ba tests: add comprehensive tests for custom-handler.c
a968a262 tests: add more unit tests for error.c coverage
935eb0c7 tests: improve error logging and add more coverage tests
035f2a07 tests: ignore profiling output in test_simple_delete
b9781954 tests: fix memory-high test to use unified resources
1bbe7e22 tests: add more seccomp tests for coverage
07d6400b tests: add error handling tests for coverage
422f4b87 tests: skip mount-bind-to-rootfs in rootless mode
5cad31a4 tests: improve sd-notify-proxy test error handling
bc91dd35 tests: fix checkpoint/restore tests for stability
f5e6c330 tests: add Linux features tests
58e00a52 tests: add I/O priority tests
ae06b46c tests: add create command tests
1e5f7ec5 tests: add cgroup setup tests
89b124e0 tests: add namespace isolation tests
14dcfea1 tests: add scheduler policy tests
7543b013 tests: add comprehensive OCI lifecycle hook tests
1404ccaa tests: add terminal tests for coverage
5ce5ad6d tests: add comprehensive update command tests
6a3fdc16 tests: add command tests for pause, unpause, kill, list, ps, spec
2959911b tests: skip resources-cpu-weight-systemd when systemd cgroup fails
90d6390c tests: skip bpf-devices-systemd when eBPF installation fails
cfe9a063 tests: fix variable names in test_bpf_devices logger calls
3f73b0f2 tests: add more seccomp tests for coverage
ec0f5cf8 tests: add network device tests for coverage
24f2491c tests: add more BPF device filter tests for coverage
360406d7 tests: add cgroup resources tests for coverage
ba669d8e tests: add cgroup manager env var support
06541b69 tests: add multi-environment coverage script
f9385a6c tests: remove unused Makefile
bab81968 tests: add exit command to init
49e080a1 coverage: add _safe_exit macro to flush gcov data before _exit
26900326 criu: fix error release
2805abde container: fix error release
1b8e2a39 crun.1: add documentation for criu config files
ec7325a3 tests: add tests for criu config set via rpc
17f23ac2 criu: enable setting of RPC config file
de8d3288 krun: do not leak handles on error
0b3c673f build(deps): bump actions/cache from 4 to 5
456dd8e2 build(deps): bump actions/upload-artifact from 5 to 6
d833dac0 libocispec: sync
4798015e build: add tests coverage
b4db5d32 tests: use hide_stderr=True to avoid coverage output interference
bfbb68eb tests: do not call function twice
a1d5168d tests: replace all sys.stderr.write calls with proper logging
11a43732 tests: improve TAP skip reason reporting with specific explanations
0be79fe8 tests: add slow test detection and warnings to TAP output
8e9ef557 tests: enhance TAP error reporting with more diagnostic information
6d4cd432 tests: add writable /tmp tmpfs mount to base test configuration
7ca36e36 tests: remove debug print statements in test_hooks
6607eb2f linux: run createContainer hooks before making root RO
baec9675 libocispec: sync from upstream
c5d5f185 tests: install honggfuzz from sources
d2b00600 linux: handle openat error
b106e250 container: fix error release
156ae065 NEWS: tag 1.25.1
60a9183e build(deps): bump actions/checkout from 5 to 6
332c2188 utils: invalidate proc_fd on open_proc_file
50e9898f utils: use fsopen to open reference to proc
2e86c95a src: move syscall wrappers to new file
c2fa3c6a cgroup-systemd: use open_proc_file to get cgroup path
8e9ae3d4 cgroup: use open_proc_file to get cgroup path
1aeac1e8 linux: use open_proc_file to setup namespaces
0f200e55 linux: use open_proc_file to setup net devices
4be73c6d linux: use open_proc_file to initialize security
30c575e5 utils: use open_proc_file for mark_or_close_fds_ge_than
da40063a linux: use open_proc_file to open current mountns
7172631e linux: use open_proc_file to setup oom score
8822a5e6 linux: use open_proc_file to setup sysctls
b66a8990 linux: use open_proc_file to setup timens_offsets
3f5258a0 linux: use open_proc_file to setup userns mappings
064bbfe4 container: use open_proc_file in resolve_rootfs_path
58856b56 utils: add functions to open files under /proc
d9a0adce NEWS: tag 1.25
d94659a3 podman: disable artifact test
0fc276cc cgroup-systemd: enable all accounting properties to ensure stats are readable
9feec597 libcrun/cgroup: always enable TasksAccounting for systemd
078e2d6d build(deps): bump actions/upload-artifact from 4 to 5
6b12c6a8 Libcrun/container: Fix double allocation of 'err'
b718483c Libcrun/seccomp: fix double allocation of 'err'
65532fc5 build(deps): bump github/codeql-action from 3 to 4
a9187097 Reset the inherited cpu affinity
crun/ocispec: update to
5a0e037 source: fix ByteArrayHandler nested array parsing
03bae1d source: add missing emit_clone() to BasicMapArrayHandler
dbb5155 source: fix invalid else() syntax in byte array generation
692b0b6 source: fix typo in ByteArrayHandler nested array parsing
2acd6dc source: fix mapStringObject clone to copy len and keys
c7ce09d ci: print test-suite.log on test failure
8cff3b9 tests: add test-12 and test-13 for better coverage
16a30ff source: add NULL check to generated clone functions
507cf52 source: fix BasicMapType.emit_clone() to handle NULL maps
2c8d0f8 gitignore: update
a425a84 source: rename doublearray to nested_array
7d7e02c source: add struct-level methods to TypeHandler classes
dc24f9a source: refactor ArrayType using ArraySubtypeHandler classes
fed6acc source: add BooleanPointerType.emit_generate() and emit_json_value()
81ff1fa source: document ObjectType.emit_clone() design decision
d91d34a source: add emit_gen_key_with_check() helper
11b951f source: extract get_compound_children() helper
4ff4117 source: inline c_file_map_str() into make_c_free()
e59b696 source: inline c_file_str() into ArrayType.emit_free()
337925c source: inline trivial wrapper functions
73e8f9e source: inline array functions into ArrayType handler
df11b0a helpers: rename judge_* functions to clearer names
45a1b35 source: skip handler for object type in make_clone()
31824dc source: remove dead code in read_val_generator()
b49928d source: remove dead code in make_c_free()
20de7a4 source: add emit_clone() to MapStringObjectType and BasicMapType
971a65b source: add ArrayType handler for array operations
633c0b5 source: add ObjectType, MapStringObjectType, and BasicMapType handlers
141fa50 source: use TypeHandler in make_c_free() and make_clone()
2fc8679 source: use TypeHandler.emit_parse() in parse_obj_type()
c3686db source: add TypeHandler classes for type-specific C code generation
c174b06 source: remove superfluous else after return
858f199 source: remove dead code in make_clone()
6ae8e2d source: consolidate numeric type conversion with helper function
a23b40c source: apply emit_gen_key() helper to get_obj_arr_obj()
717d035 source: apply YAJL helpers to get_c_epilog_for_array_make_gen()
6dcd043 source: apply YAJL helpers to get_c_json()
a2cc69b source: apply YAJL helpers to get_obj_arr_obj_array()
7f5fcb5 source: apply YAJL helpers to get_map_string_obj()
aa9271c source: add YAJL generation helper functions
3366b93 source: add emit_invalid_type_check() helper for YAJL validation
05ee4de source: add emit_value_error() helper for error wrapping
7a62656 source: add emit_asprintf_error() helper to reduce boilerplate
4d2f6e5 source: add do_read_value() helper to reduce boilerplate
d37383d source: convert parse_obj_type() to multi-line f-strings
39fa66d source: convert make_c_free() to multi-line f-strings
d62a55f source: convert make_c_array_free() to multi-line f-strings
112ab7f source: convert c_file_str() to multi-line f-strings
41596b9 source: convert c_file_map_str() to multi-line f-strings
a2fd73f source: complete get_obj_arr_obj_array() conversion to f-strings
66e333d source: convert get_obj_arr_obj_array() to f-strings (object branch)
47e7dc5 source: convert get_map_string_obj() to multi-line f-strings
ae23175 source: convert parse_obj_type_array() to multi-line f-strings
002af18 source: convert parse_map_string_obj() to multi-line f-strings
e80d362 source: extract check_gen_status() helper pattern
46ce297 source: extract calloc_with_check() helper pattern
cc817ed source: continue null_check_return() pattern extraction
419526a source: extract null_check_return() helper pattern (partial)
064fcbb source: extract free_and_null() helper pattern
7579c03 source: add emit() helper function for code generation
c8a5437 gitignore: update
b355817 runtime-spec: update
819972d image-spec: update
ea4906b Check 'src' before dereferencing
345279c runtime-spec: update from upstream
Bumping runtime-spec to version v1.3.0-11-g6f7b71c, which comprises the following commits:
53abf18 ci: bump golangci-lint to v2.10
90a6479 Fix an error in the docs
4361740 schema: fix definition for array type
04836b1 schema: fix path for uint32 type
c668b01 config-linux: allow empty strings in memory policy nodes field
9d0d4bc version: v1.3.0+dev
9224913 version: release v1.3.0
4df3d11 Mention FreeBSD platform
a257beb Add minimum supported Go version to CI (#1303)
afdbcb8 Add FreeBSD as a platform
75d79ee ci: use oldstable and stable Go versions
9efd9f2 schema/defs-linux.json: fix max for FileMode
09ec668 config-linux,schema: fix FileMode description
Bumping image-spec to version v1.1.1-28-ga4c6ade, which comprises the following commits:
fccd049 Fix: Make the config field optional
b71c0df Add missing backtick
431b3be Update OCI Image Implementations list
02ba6e2 Descriptor size cannot be negative
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
