| Commit message (Collapse) | Author | Age | Files | Lines |
|---|
| ... | |
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping containerd to version v2.0.0-rc.2-12-g5d2c988a5, which comprises the following commits:
446e63579 remove uses of platforms.Platform alias
22f2af40c update pause image to 3.10
65024e6fd core/image: fix usage of "unknown" platform
8b3060717 Provide runtime options in plugin info
332caf1a1 Provide ability to set lo up without CNI
288f0592e Prepare release notes for v2.0.0-rc.2
f24a95185 build(deps): bump github.com/prometheus/client_golang
8b2a69c19 build(deps): bump golangci/golangci-lint-action from 5 to 6
96ff18d37 build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3
1cae3dc9b update ttrpc to 1.2.4
e2251f948 Update instrumentation fuzzer with new flag
ef76a90e9 Update platforms package to v0.2.0
0b113d78d doc: add the description of sandboxer and io_type
7cead8800 cri: restart created container with correct io type
42f778fc1 modify streaming io url form
25c2f690a Update toolchain to Go 1.22.3
681a083fa Update unpacker to always fetch all
2788604e4 Update ctr image pull all platforms
58be88189 sandbox: do retry for wait to remote sandbox controller
059731775 Preserve CL_UNPRIVILEGED locked flags during remount of bind mounts
9a9a8c46a Don't require vagrant tests in merge queues
d9dc2811a fix: delete sockets on shim exit
41dc94ee1 CI: bump up golangci-lint to v1.58.0
9ecfac7f6 Integration: Change to grpc.NewClient
8c6183d74 Add lease test for metadata snapshotter
c7fb8a925 Update metadata snapshotter to lease on exists
b8dfb4d8f cri: support io by streaming api
3b065cddd CI: skip test in arm64 CI
6c3c5376f critools-version: v1.30.0
b488e76db build(deps): bump google.golang.org/protobuf from 1.33.0 to 1.34.1
a6e417dc6 build(deps): bump go.etcd.io/bbolt from 1.3.9 to 1.3.10
4401c3cb7 build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.1 to 2.2.2
42e02c6c0 build(deps): bump golang.org/x/sys in the golang-x group
88b52119c Update api version to v1.8.0-rc.0
1c9c64f31 Update release procedure to mention api replace
e69efd56d Add go mod replace when proto changes happen
678137199 sandbox: remove PID() in sandbox client
13f2fa1de remove go1.21.9 from CI matrix
f0363a7f6 Chore: Simplify some syscall error checks
99ad11a00 core/metadata: failfast on content.Commit
3fb84403b CI: bump up crun to 1.15
55fcebffc Prepare release notes for api/v1.8.0
b811a8879 Add API release action
b8060d641 Update ctr shim subcommand to task v3
f1e265b13 core/runtime: Check shim PluginInfo to enforce idmap support
05a3171bb Update transfer proxy to support ttrpc
ec04e4f63 Add streaming proxy
fe01cad20 Cleanup local transfer interface
171fc1434 Update release doc to mention API versioning
2ac2b9c90 Make api a Go sub-module
e1b94c0e7 Move protobuf package under pkg
3e9cace72 Move runtimeoptions to api directory
4a4550777 Move runc options to api directory
25a288662 Fix v2 migrate for testutil package
fb1f15d30 docs: correct the typo in the documentation
2df04b403 build(deps): bump the otel group with 8 updates
950db7eb7 build(deps): bump the k8s group across 1 directory with 4 updates
93690baf4 build(deps): bump github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus
4c753d124 go.mod: k8s.io/cri-api v0.30.0
de38490ed sandbox: merge address and protocol to one url
c3b306240 add task api endpoint in task create options
72fe47b2a add task api endpoint in oci proto
b1fefccc7 sandbox: store endpoint in cri sandboxStore
f6e0cf189 sandbox: add address info in Start and Status response
15782881e go.mod: go 1.22
2d5689434 CI: use Go 1.22 by default
fef78c102 install-runc: pin Go to 1.21
11d8beff8 optimize error logs by providing absolute file paths
81a9df625 build(deps): bump github.com/urfave/cli/v2 from 2.27.1 to 2.27.2
c001a7056 build(deps): bump lycheeverse/lychee-action from 1.9.3 to 1.10.0
6df759e24 build(deps): bump golangci/golangci-lint-action from 4 to 5
b7c977414 container.Checkpoint(), WithRestoreImage(): use ocispec.AnnotationRefName
8a8c3e221 pkg/cri/server/base: log CRI config as embedded JSON
f62edda5a pkg/cri/server/base: use structured log for CRI plugin startup
e07b63d84 document usage and design of blockfile snapshotter
b6bd12f13 Add Syself Autopilot to adopters
7bc476001 ADOPTERS.md: Fix Actuated italics
416741675 Perform file sync outside of lock on Commit
c27bcdc56 cri: introspectRuntimeFeatures: fix nil panic
dfdfa206f Update for latest updates to release tool
53c9e6f86 Update release process after 1.7
a12acedfa sandbox: make a independent shim plugin
9ee3bfaba images: tests: Fix typos in the tests
c51463010 docs: update registry config guide
7bd4d348e add info of exited event
218e2cf7c Return correct error if CRIU binary is missing
bb9d923aa content: add a BlobReadSeeker func to allow multipart blob streaming
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping buildah to version v1.36.0, which comprises the following commits:
6ceba8838 Bump to v1.36.0
c09e08b53 build: be more selective about specifying the default OS
3fa5531ca Bump to c/common v0.59.0
4d1690bc3 Fix buildah prune --help showing the same example twice
208b7111e fix(deps): update module github.com/onsi/ginkgo/v2 to v2.18.0
c7937cd1d fix(deps): update module github.com/containers/image/v5 to v5.31.0
183582f03 bud tests: fix breakage when vendoring into podman
de8510c9d Integration tests: fake up a replacement for nixery.dev/shell
d9191e17c copierWithSubprocess(): try to capture stderr on io.ErrClosedPipe
97382f928 Don't expand RUN heredocs ourselves, let the shell do it
864a40cbd Don't leak temp files on failures
97d44ab9c Add release note template to split dependency chores
4a524737f fix CentOS/RHEL build - no BATS there
420949a5a fix(deps): update module github.com/containers/luksy to v0.0.0-20240506205542-84b50f50f3ee
bbab575ff Address CVE-2024-3727
6a48ae700 chore(deps): update module github.com/opencontainers/runtime-spec to v1.2.0
d5b2e3c41 Builder.cdiSetupDevicesInSpecdefConfig(): use configured CDI dirs
da4e2d7ad Setting --arch should set the TARGETARCH build arg
6f1f687c3 fix(deps): update module golang.org/x/exp to v0.0.0-20240416160154-fe59bbe5cc7f
cd1960725 [CI:DOCS] Add link to Buildah image page to README.md
f6d49125a Don't set GOTOOLCHAIN=local
a04741d9f fix(deps): update module github.com/cyphar/filepath-securejoin to v0.2.5
53f2dc231 Makefile: set GOTOOLCHAIN=local
e0077e8c6 Integration tests: switch some base images
fdfd2237d containerImageRef.NewImageSource: merge the tar filters
f2825bf7b fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.2
2c1c73169 fix(deps): update module github.com/containers/luksy to v0.0.0-20240408185936-afd8e7619947
7688d880d Disable packit builds for centos-stream+epel-next-8
7425f6f8f Makefile: add missing files to $(SOURCES)
fbd2b7db4 CI VMs: bump to new versions with tmpfs /tmp
89ee4f4b0 chore(deps): update module golang.org/x/net to v0.23.0 [security]
c01061e47 integration test: handle new labels in "bud and test --unsetlabel"
f86c2748e Switch packit configuration to use epel-9-$arch ...
14d964d92 Give unit tests a bit more time
8bb87aefa Integration tests: remove a couple of duplicated tests
3e756d507 Integration tests: whitespace tweaks
8ee7bebd7 Integration tests: don't remove images at start or end of test
c7f088142 Integration tests: use cached images more
b213c5e7a Integration tests _prefetch: use registry configs
8bdd6a66d internal: use fileutils.(Le|E)xists
441bdc927 pkg/parse: use fileutils.(Le|E)xists
705338379 buildah: use fileutils.(Le|E)xists
9dcd1cc9a chroot: use fileutils.(Le|E)xists
358814f69 vendor: update containers/(common|storage)
be74b733f Fix issue/pr lock workflow
a99fe1513 [CI:DOCS] Add golang 1.21 update warning
77400c4fc heredoc: honor inline COPY irrespective of ignorefiles
ff13a08c9 Update install.md
5b414ad08 source-push: add support for --digestfile
d9129b463 Fix caching when mounting a cached stage with COPY/ADD
58579ba65 fix(deps): update github.com/containers/luksy digest to 3d2cf0e
2cd31a069 Makefile: softcode `strip`, use it from env var
f812c8949 Man page updates
5198af7d7 Add support for passing CDI specs to --device
14bf3db27 Update comments on some API objects
2a7ff9905 pkg/parse.DeviceFromPath(): dereference src symlinks
c1b43b57b Makefile - instead of calling `as` directly, use it from env var
23b8d9767 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.1
c1119f886 CI: bump VMs
2c47fdccd fix(deps): update module github.com/docker/docker to v25.0.5+incompatible
f95b7a188 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.0
9cf83d8f8 Change RUN to comment in bud.bats
5808b9603 Stop rebasing renovate PRs automatically
37994356f Update renovate validation image
4304d618f CVE-2024-1753 container escape fix
516f9e9a2 correctly configure /etc/hosts and resolv.conf when using network
9db5a16f7 buildah: refactor resolv/hosts setup.
8c1fee7e7 rename the hostFile var to reflect the value better
f8a7841cc vendor latest c/common
26da74d54 [skip-ci] rpm: use go-rpm-macros supported vendoring
547d9bf0e Update docs/buildah-add.1.md
80f9f7cb0 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.16.0
5cf05ac08 fix(deps): update module github.com/docker/docker to v25.0.4+incompatible
c355679d3 fix(deps): update module github.com/containers/ocicrypt to v1.1.10
550139916 chore(deps): update module gopkg.in/go-jose/go-jose.v2 to v2.6.3 [security]
1a6d3513f chore(deps): update module github.com/go-jose/go-jose/v3 to v3.0.3 [security]
bf3263ec1 Bump google.golang.org/protobuf to v1.33.0
e635558d2 fix links to containerignore doc
e53e50f7a [skip-ci] Makefile: update rpm target
87ef84d3a pr-should-include-tests: use GitHub label, not commit text
d50122aeb tests: enable pasta tests
1bc5dd692 [CI:DOCS] Migrate buildah container image
7c88bb372 Update .gitignore
da81d2e2b Bump to v1.36.0-dev
fedbd7967 Bump v1.35.0
3164076e2 Bump c/common v0.58.0, c/image v5.30.0, c/storage v1.53.0
b2504c263 conformance tests: don't break on trailing zeroes in layer blobs
a2f0ebef6 Add a conformance test for copying to a mounted prior stage
e504df188 fix(deps): update module github.com/stretchr/testify to v1.9.0
951dccd3f cgroups: reuse version check from c/common
bbea3eb54 Update vendor of containers/(common,image)
6474279ed fix(deps): update github.com/containers/storage digest to eadc620
f9d603608 fix(deps): update github.com/containers/luksy digest to ceb12d4
53f230e2b fix(deps): update github.com/containers/image/v5 digest to cdc6802
8a1bcd51c manifest add: complain if we get artifact flags without --artifact
d0ffb9d37 Use retry logic from containers/common
e9c3c1666 Vendor in containers/(storage,image,common)
5047a3566 Update module golang.org/x/crypto to v0.20.0
26d5b84b1 Add comment re: Total Success task name
4853c0042 tests: skip_if_no_unshare(): check for --setuid
63975b541 Properly handle build --pull=false
836b9384d [skip-ci] Update tim-actions/get-pr-commits action to v1.3.1
5748595ae Update module go.etcd.io/bbolt to v1.3.9
fee705081 Revert "Reduce official image size"
aee02318a Update module github.com/opencontainers/image-spec to v1.1.0
cdb1a4ff8 Reduce official image size
eb6269d8c Build with CNI support on FreeBSD
98f870753 build --all-platforms: skip some base "image" platforms
d73e21120 Bump main to v1.35.0-dev
90c0d9794 Vendor in latest containers/(storage,image,common)
1def7d6de Split up error messages for missing --sbom related flags
aca884a89 `buildah manifest`: add artifact-related options
07057917d cmd/buildah/manifest.go: lock lists before adding/annotating/pushing
a0852e994 cmd/buildah/manifest.go: don't make struct declarations aliases
4f0b619dd Use golang.org/x/exp/slices.Contains
e202d62cc Disable loong64 again
e99960085 Fix a couple of typos in one-line comments
302a798ad egrep is obsolescent; use grep -E
e6d179476 Try Cirrus with a newer VM version
04847f57f Set CONTAINERS_CONF in the chroot-mount-flags integration test
56e6ef854 Update to match dependency API update
5d58b88c7 Update github.com/openshift/imagebuilder and containers/common
a20d5b2a5 docs: correct default authfile path
9d58d1382 fix(deps): update module github.com/containerd/containerd to v1.7.13
533aac2d4 tests: retrofit test for heredoc summary
1bfd3336f build, heredoc: show heredoc summary in build output
811ee6797 manifest, push: add support for --retry and --retry-delay
1a8cbc185 fix(deps): update github.com/openshift/imagebuilder digest to b767bc3
9d516e22e imagebuildah: fix crash with empty RUN
e14f46f2e fix(deps): update github.com/containers/luksy digest to b62d551
a7aec1941 fix(deps): update module github.com/opencontainers/runc to v1.1.12 [security]
f1f0d9d4d fix(deps): update module github.com/moby/buildkit to v0.12.5 [security]
79fb3c213 Make buildah match podman for handling of ulimits
13fd5bd2c docs: move footnotes to where they're applicable
011736e12 Allow users to specify no-dereference
34dff20da Run codespell on code
86afc1ffd Fix FreeBSD version parsing
32b8ceeb6 Fix a build break on FreeBSD
e3d043ebf Remove a bad FROM line
f6f6da8f0 fix(deps): update module github.com/onsi/gomega to v1.31.1
4b5caebd7 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc6
f157be843 docs: use reversed logo for dark theme in README
cf69e8a18 build,commit: add --sbom to scan and produce SBOMs when committing
b3af07dab commit: force omitHistory if the parent has layers but no history
de7c1e1f7 docs: fix a couple of typos
89f50af21 internal/mkcw.Archive(): handle extra image content
4cc811f4f stage_executor,heredoc: honor interpreter in heredoc
339839d4b stage_executor,layers: burst cache if heredoc content is changed
dd186ee0f fix(deps): update module golang.org/x/crypto to v0.18.0
a42bfd019 Replace map[K]bool with map[K]struct{} where it makes sense
905551f51 fix(deps): update module golang.org/x/sync to v0.6.0
efe76552b fix(deps): update module golang.org/x/term to v0.16.0
d371fc7b9 Bump CI VMs
53c65dd36 Replace strings.SplitN with strings.Cut
b5ee4fb34 fix(deps): update github.com/containers/storage digest to ef81e9b
114bb6f0c fix(deps): update github.com/containers/image/v5 digest to 1b221d4
fd0899f1f fix(deps): update module github.com/fsouza/go-dockerclient to v1.10.1
59ea8af1b Document use of containers-transports values in buildah
b2c80f9a3 fix(deps): update module golang.org/x/crypto to v0.17.0 [security]
b283c48db chore(deps): update dependency containers/automation_images to v20231208
4a9dba647 manifest: addCompression use default from containers.conf
041388f87 commit: add a --add-file flag
81435aadc mkcw: populate the rootfs using an overlay
5b9141887 chore(deps): update dependency containers/automation_images to v20230517
de0c3cdaf [skip-ci] Update actions/stale action to v9
2ab21c666 fix(deps): update module github.com/containernetworking/plugins to v1.4.0
29d945f38 fix(deps): update github.com/containers/image/v5 digest to 7a40fee
4276a735b Bump to v1.34.1-dev
471460018 Ignore errors if label.Relabel returns ENOSUP
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping crun to version 1.15-13-g700e2ed, which comprises the following commits:
c6c1c7f crun run --help: say --no-subreaper is ignored
8801bc4 github: disable CentOS 10 tests
5f0643c github: fix running tests on CentOS 10
d795081 tests: build on CentOS 10 without yajl
f00fa22 libocispec: sync from upstream
dd9428b blake3: initialize chunks_array
8c80ab9 utils: initialize fd
81b8f45 linux: fix mount of special files with rro
e6eacaf NEWS: tag 1.15
08b5e78 Packit: Enable c10s downstream sync, rhel / centos separation in tests
4618d50 status: rmdirfd: try harder to remove mount points
c72bf7f linux: cgroups: cleanup unused mount if move failed
ff321e1 tests: install slirp4netns
a946f04 utils: fix a compiler warning
aa72cc4 Packit/TMT: add centos-stream-10, cleanup tests
f39bc4a tests, oci-validation: use perl tap driver
f5548f2 tests, oci-validation: use tap-18
18e84a1 tests, oci-validation: use git clone
49090f2 Build s390x binaries using musl libc
307d35e Fix clang format test
4b8f7c9 build(deps): bump uraimo/run-on-arch-action from 2.7.1 to 2.7.2
e6a8d51 libocispec: update
1809973 tests: use npm-18
475a3fd features: add support for potentiallyUnsafeConfigAnnotations
4f5479e src/libcrun/handlers: add option to load wasi-nn plugin for wasmedge
631e767 release: use zstd instead of xz
0722689 release.sh: generate .zst release instead of .xz
3ad68ed linux: fixup libcrun_safe_chdir
699564b rpm: remove eln macro
f50da23 Packit: reuse non-RHEL failure message notification on RHEL
0b7fc08 packit: podman reverse dependency tests
820471a libocispec: use runtime-spec v1.2.0
9eea9ff cgroup: make error clearer
59ad70a container: validate option flags
7918dca container: split create and run options
8894495 crun: add option --keep to run
35dccc3 libcrun, run: add option to not delete containers
a220ca6 NEWS: tag 1.14.4
6cd74cb Add support for s390x
5884fd4 linux: fix mount of file with recursive flags
b9e87e7 tests: test bind mounts of files
crun/ocispec: update to latest
2236d50 github: test with the embedded yajl library
bed19ad configure.ac: --enable-embedded-yajl skips check for yajl
b633f89 Makefile.am: distribute the src/yajl symlink
86650dc fix compilation error with clang++17
20d3936 helpers.py: remove __str__()
afed951 generate.py: fix some typos
daeb197 runtime-spec: use version v1.2.0
66f6f71 optimize writefile
e9a99a8 Optimize headers writefile
7a5f2b6 Refresh strings format sources
210f4d3 Refresh strings format headers
b085839 runtime-spec: update
crun/ispec: update to v1.1.0
535d657 Fix a typo in the annotations spec
89fee07 MAINTAINERS: move jonboulle to EMERITUS
f17d647 CODEOWNERS: remove vbatts
818209a MAINTAINERS: move vbatts to EMERITUS
652ec7c Add note about `ImageID` to the `config` section of `manifest.md`
2d95dde Reformat "Platform Variants", especially to add amd64, ppc64le, riscv64
e191267 Update Go versions in release scripts
4da0cfc Update GitHub Actions packages to resolve warnings in CI
a32e6c3 Pin golangci-lint for Go v1.20
8baa69b media-types: Fix broken links
0a41c19 version: bump back to +dev
e7f7c0c version: release v1.1.0
d0f90e6 Clarify that subject references a separate DAG
8b1e951 version: bump back to +dev
6c2b5fa version: release v1.1.0-rc6
53d9855 new section for projects no longer maintained
b391bc0 fix: SPDX licenses URL
dd66b54 Test older versions of Go with toolchain=local
93f6e65 Makefile: remove stray trailing space (#1126)
d881fa8 deps: remove deprecated github.com/pkg/errors (#1125)
072574d add ORAS to implementations.md
9954739 specs-go: group MediaTypes
344b098 fix markdown table formatting
c7a064f Update supported Go range to 1.19 - 1.21
f0ef80e version: bump back to +dev
1e54f01 version: release v1.1.0-rc5
061cba3 Fix golangci-lint install on older versions of Go
a2a5750 Add step to update website after a release
0c1622e Add `riscv64` arch to `check{Architecture|Platform}`
e6a75e6 Provide a decision tree for artifacts
9ac8f92 Quote lint-md wildcard expression
a6af2b4 Add a markdown linter and fix linting issues
af9c838 OCI has a distribution-spec
37bac87 Create artifacts guidance
ddf2dfd chore(descriptor.md): correct canonicalization reference
d36ccf1 MediaType is required in the descriptor
f6c60b5 Clean up the markdown in considerations
da8994a Cleanup broken links and markdown spacing
56877ad Remove deprecated golangci lint checks
b29a06c Hacking markdown and Makefile cleanup
73aca56 Cleanup markdown in governance
fd95ded Fix label schema link
aed07a8 Test subject field in index
8620a49 version: bump HEAD back to +dev
82e8329 version: bump for release of v1.1.0-rc.4
988df0a specs-go: remove artifact prefixed annotations
a845c7a image-index: add artifactType to specs and schema
73f386c Add constants for "index.json" and "blobs"
25fc553 Switch from scratch to empty
749ea9a Add artifactType to image index
32036d8 Apply version change from #1050
e13840d Add language from artifacttype field to forbid allowlists of media types
77efc6e spec: clarify descriptor, align with de facto artifact usage
c6854a6 image-index: add the `subject` field
crun/rspec: update to v1.2.0
b983fbf CODEOWNERS: remove vbatts
bf698d0 MAINTAINERS: move vbatts to EMERITUS
12b653d Update golangci-lint to v1.56.1 in CI
8547911 Add Go v1.21 and v1.22 to GitHub Actions CI matrix
1a729af Update GitHub Actions packages to resolve warnings in CI
65cd1f8 Back to +dev
36852b0 version: release v1.2.0
021ba94 config.md: allow empty mappings for [r]idmap
5e98fec features: add potentiallyUnsafeConfigAnnotations
cabeea7 specs-go: mark LinuxMemory.Kernel as deprecated
4005c81 specs-go: add missing deprecation comment for Hooks.Prestart
2f6b090 config: improve bind mount and propagation doc
0ec4e6b fix link to hooks in features
6ffddf6 mount: Allow relative mount destinations on Linux
f329913 features-linux: Expose idmap information
7b8eb69 config: add reference to mount_setattr(2) for idmapped mounts
2547bb0 config: add idmap and ridmap mount options
3f552ce version: release v1.1.0+dev
0625254 version: release v1.1.0
d56ba70 ChangeLog: squash v1.1.0-rc.1...v1.1.0
5430e36 ChangeLog: Document changes since v1.1.0-rc.3
2bd22fa features.md: add a note to avoid confusion about annotations
5612d21 Remove outdated meeting.ics
085728a README.md: update chat information
8b4cadd version: v1.1.0-rc.3+dev
ae35e39 version: release v1.1.0-rc.3
d8be1e3 ChangeLog: Document changes since v1.1.0-rc.2
1beaf68 CODEOWNER: Add Toru Komatsu(@utam0) to sync with MAINTAINERS
fccfb09 config: add support for org.opencontainers.image annotations
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
Fixes:
# ./run-ptest
/tmp/bats-run-ELGGaA/bats.18820.src: line 5: To: command not found
1..1
not ok 1 bats-gather-tests
# (in test file test/README.md, line 5)
# `To run the tests locally in your sandbox, you can use one of these methods:' failed with status 127
Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
| |
While the WORKDIR references seem to work, they may not continue
to work. We switch to using UNPACKDIR which is where the SRC_URI
referenced elements / files will be placed by the fetcher.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
| |
While the WORKDIR references seem to work, they may not continue
to work. We switch to using UNPACKDIR which is where the SRC_URI
referenced elements / files will be placed by the fetcher.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
| |
While the WORKDIR references seem to work, they may not continue
to work. We switch to using UNPACKDIR which is where the SRC_URI
referenced elements / files will be placed by the fetcher.
The remaining WORDIR references are to a secondary git repository
with artifacts and should be safe.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
| |
While the WORKDIR references seem to work, they may not continue
to work. We switch to using UNPACKDIR which is where the SRC_URI
referenced elements / files will be placed by the fetcher.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
| |
While the WORKDIR references seem to work, they may not continue
to work. We switch to using UNPACKDIR which is where the SRC_URI
referenced elements / files will be placed by the fetcher.
We also explicitly set S to point to the UNPACKDIR to avoid a
build warning.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
| |
While the WORKDIR references seem to work, they may not continue
to work. We switch to using UNPACKDIR which is where the SRC_URI
referenced elements / files will be placed by the fetcher.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
| |
While the WORKDIR references seem to work, they may not continue
to work. We switch to using UNPACKDIR which is where the SRC_URI
referenced elements / files will be placed by the fetcher.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
| |
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork
of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this
variable in our go recipes.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
| |
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork
of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this
variable in our go recipes.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
| |
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork
of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this
variable in our go recipes.
We also adjust our WORKDIR reference to use UNPACKDIR instead
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
| |
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork
of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this
variable in our go recipes.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
| |
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork
of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this
variable in our go recipes.
We also adjust our WORKDIR reference to UNPACKDIR, and the destination
for vendor'd source.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
| |
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork
of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this
variable in our go recipes.
We also adjust our S directory, and references to WORKDIR to
fix the build for the new source layout.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
| |
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork
of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this
variable in our go recipes.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
| |
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork
of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this
variable in our go recipes.
We also adjust our paths to the new source location and drop references
to WORKDIR.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
| |
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork
of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this
variable in our go recipes.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
| |
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork
of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this
variable in our go recipes.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
| |
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork
of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this
variable in our go recipes.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
| |
Alternatively, we could add it to RRECOMMENDS. But I would say, given
its name, managing pods is part of podman's core functionality and that
requires catatonit, which is currently only pulled in for the ptest:
root@qemux86-64:~# podman pod create
Error: building local pause image: finding pause binary: exec: "catatonit": executable file not found in $PATH
Signed-off-by: Patrick Wicki <patrick.wicki@siemens.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
Podman does not require skopeo to run. They are both independent tools.
In distros like Debian, Fedora and Arch they don't depend on it either.
Skopeo also seems to be used in some of podman's tests, so it makes
sense to keep it around for the ptest.
We do require skopeo's libdevmapper dependency, so include that
directly. And inherit container-host to make sure the container configs
are present on the device.
Signed-off-by: Patrick Wicki <patrick.wicki@siemens.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping runc to version v1.1.12-14-ge8bb71e1, which comprises the following commits:
6379b58d libcontainer: force apps to think fips is enabled/disabled for testing
265e7371 Vagrantfile.fedora: bump Fedora to 39
59056a02 silence security false positives from golang/net
452bf88e build: update libseccomp to v2.5.5
3fada6ec tests/int: fix flaky "runc run with tmpfs perm"
aae41a4b Fix integration tests failure when calling "ip"
82a8b979 update go version to 1.21 in cirrus ci
03271050 ci/gha/cross-i386: pin Go to 1.21
29d6d873 VERSION: back to development
51d5e946 VERSION: release 1.1.12
e9665f4d init: don't special-case logrus fds
683ad2ff libcontainer: mark all non-stdio fds O_CLOEXEC before spawning init
b6633f48 cgroup: plug leaks of /sys/fs/cgroup handle
284ba305 init: close internal fds before execve
fbe3eed1 setns init: do explicit lookup of execve argument early
0994249a init: verify after chdir that cwd is inside the container
506552a8 Fix File to Close
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping containerd to version v2.0.0-rc.1-8-g0426e3c2e, which comprises the following commits:
c27bcdc56 cri: introspectRuntimeFeatures: fix nil panic
c5ba71d11 Makefile: update default PACKAGE to v2
094bafe2a apparmor: Allow confined runc to kill containers
e461a59ae fix migrateConfig for io.containerd.cri.v1.images
eb5a0c04b apparmor: add `signal (receive) peer=/usr/local/bin/rootlesskit,`
5e470e1ca Update HTTPFallback to handle tls handshake timeout
a37b451cd build(deps): bump tags.cncf.io/container-device-interface
888fd315f Update CNI to v1.2.0
13e6b2b68 update to go1.21.9, go1.22.2
42e4de9c5 Prepare release notes for v2.0.0-rc.1
4a31bd606 chore: use errors.New to replace fmt.Errorf with no parameters will much better
a6a82c102 Update hcsshim to v0.12.3
7e60d5a07 Account for ipv4 vs ipv6 localhost in windows port forwarding
a153b2cd3 mod: bump github.com/containerd/nri@v0.6.1
77512e2d7 build(deps): bump the golang-x group with 3 updates
c8d9eba7c build(deps): bump github.com/klauspost/compress from 1.17.7 to 1.17.8
1c0f73aa0 build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.0 to 2.2.1
32caaee48 Snapshotters: Export the root path
b82ced57f fix: close profile
c7ea06a69 fix default working directory `hostProcess`
1040c7b98 build(deps): bump the otel group with 8 updates
b50e9eae4 Refactor spots to make use of sys.IgnoringEintr
3ea69db8e Add helper to ignore eintr
1b6222418 Bump tags.cncf.io/container-device-interface to v0.7.1
ad584ebec Replace direct waitid syscall with unix.Waitid
7c5078459 Remove empty default tls configuration in ctr
b6e361694 cri: add pause image name to annotations
0ec14fdf8 core/diff/apply: use unix.Syncfs
739659a4b build(deps): bump google.golang.org/grpc from 1.62.1 to 1.63.2
433279438 Transfer: Registry: Enable plain HTTP
88b4cc659 address review comments
f20c49311 Update tracing documentation to add details about manual instrumentation
63d5573a3 remote: Fix HTTPFallback fails when pushing manifest
2474a99c3 Add IsNotFound case to ListPodSandboxStats
3830f8167 fix(cri): fix unexpected order of mounts since go 1.19
cbb644182 build(deps): bump github.com/Microsoft/hcsshim from 0.12.0 to 0.12.2
362fcf2d2 build(deps): bump github.com/distribution/reference from 0.5.0 to 0.6.0
5b6ae0f79 Use different containerd sock address in tests
ab2c569fb ctr: fix parsing mount options
b97ef91fb Change port forwarding on windows
ea681afba docs: fix typo
6d00c3ada runc-shim: only defer init process exits
da4ca4949 build(deps): bump github.com/pelletier/go-toml/v2 from 2.1.1 to 2.2.0
dd72fb3b2 build(deps): bump github.com/intel/goresctrl from 0.6.0 to 0.7.0
e41e9e11b transfer: Platform matcher should match multiple platforms
d0d35f0d0 core/images/archive: normalizeReference: remove outdated TODO
26158609b pkg/seutil: move to internal/cri
33732bc13 pkg/systemd: move to internal/cri
0d0850af1 Prepare v2.0.0-rc.0
f5abb63c0 Update mailmap
30813f646 build(deps): bump github.com/containernetworking/plugins
0fafc0c50 build(deps): bump github.com/checkpoint-restore/go-criu/v7
7c1fca096 Update migration script based on usage
45e425ccc vendor: github.com/golang/protobuf v1.5.4
4aa6fedd5 CRI: postpone removal of deprecated config properties
34c545824 Automatically decompress archives for transfer service import
df26c189a Clean cri options and useless parms
88421068f Fix invalid event filter in podsandbox
357c59b79 Update github actions ci to run on forks
4b719cc4b build(deps): bump google.golang.org/grpc from 1.62.0 to 1.62.1
10c7f03b3 build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0
21d3fedf4 build(deps): bump softprops/action-gh-release from 1 to 2
228aa42a6 build(deps): bump the otel group with 8 updates
47d13767f Clean typos in plugins.
7ac9d6909 Use the Go toolchain in CI matrix to build binaries
6a96e4501 Move shim package to pkg
f25770e48 Wire through CRI ContainerCheckpoint RPC
7ecdebff9 update to go 1.21.8, 1.22.1
723306d0e Disable OOM set score unpriv test temporarily
994fdd74e Don't create new scratch VHD per image for CimFS
016b588a9 build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0
d9409c461 Update hcsshim to v0.12.0
00d714e90 build(deps): bump the golang-x group with 2 updates
ab4de3e4c build(deps): bump azure/login from 1 to 2
713dd8f8d go.mod: k8s.io/cri-api v0.30.0-alpha.3
d9b9160ae mv internal/testutil pkg/testutil
752917c0f build(deps): bump github.com/prometheus/client_golang
7a3b7fba5 Transfer: Registry: Enable to use registry configuration diretory
1bf781d8e Cleanup introspection interface
5bd204109 Remove grpc from Client connection interface
347346e3c Add ttrpc support to content proxy
9104e6a24 Add events proxy interface
892dc54bd runc-shim: process exec exits before init
9128ee0a9 Move nri packages to plugin and internal
d0da3d1ca sandbox: make event monitor in CRI independent
17ea3959b adds mediatype to oci index record
c5ef8a2c2 fix(docs): fix duplicate instructions for windows installation
87e8e9c7f Add Go client stability in releases for 2.0.
72f21833b Move events to plugins and core
caa9e2075 add k8s 1.29 and 1.30preview to support table
154ed26a7 vendor: go.etcd.io/bbolt v1.3.9
6d1dfe55f cri: ensure the pause image loaded in older versions is pinned
2884b318f build(deps): bump github.com/klauspost/compress from 1.17.6 to 1.17.7
bd44df8a1 refactor code - clean switch and if statements
a60e52f58 sandbox: add struct tags for PinnedImages
a0b73ae11 sandbox: optimize the lock in PodSandbox
0f1d27412 sandbox: add methods to sandboxService
a2768f19d plugins/sandbox: move local plugin into services
d651cb743 mediatypes: support zstd compression
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
| |
We no longer need the split between container-docker and
containerd-opencontainers and dependent layers have been
given over a year to adapt.
We do keep the provides and rprovides around for a bit
longer, but those will also be removed in the future.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
| |
Fix following QA WARNING:
WARNING: QA Issue: File /usr/bin/kubectl in package kubectl contains reference to TMPDIR [buildpaths]
WARNING: QA Issue: File /usr/bin/kubeadm in package kubeadm contains reference to TMPDIR [buildpaths]
WARNING: QA Issue: File /usr/bin/kube-proxy in package kube-proxy contains reference to TMPDIR [buildpaths]
WARNING: QA Issue: File /usr/bin/kube-apiserver in package kubernetes-misc contains reference to TMPDIR
WARNING: QA Issue: File /usr/bin/kubelet in package kubelet contains reference to TMPDIR [buildpaths]
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Update containerd to v2 to fix following containerd version:
containerd github.com/containerd/containerd/v2 2.0.0-beta.0+unknown
it should be like:
containerd github.com/containerd/containerd/v2 v2.0.0-beta.2-204-gb1624c362.m b1624c3628954e769dd50783b63823040b2db38c.m
* Remove CONTAINERD_PKG, it is not used
* Update default PACKAGE in Makefile to v2
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
-buildmode=pie need cgo is enabled, but for kubernetes, some build
targets are static, and cgo is disable in build script directly, refer
[1]. If we add -buildmode=pie by default, will cause these static target
build failed with error "-buildmode=pie requires external (cgo) linking,
but cgo is not enabled".
This warning is acceptable, so just skip it.
[1] https://github.com/kubernetes/kubernetes/blob/master/hack/lib/golang.sh#L811
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
| |
When converting to use {systemd_user_unitdir}, the closing brace was
omitted
Signed-off-by: Theodore A. Roth <theodore_roth@trimble.com>
Signed-off-by: Theodore A. Roth <troth@openavr.org>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
| |
The value of USERSYSTEMDDIR is currently set to
${systemd_unitdir}/user, which might not be present in user unit
search path.
Use dedicated bitbake variable ${systemd_user_unitdir} instead.
Signed-off-by: Lukasz Czechowski <lukasz.czechowski@thaumatec.com>
Cc: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
| |
Upstream dropped cgroup handling in lxc-test-usernic lxc-test-unpriv and
lxc-test-apparmor-mount to fix the broken cases.
Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping runc to version v1.1.12-2-ga9833ff3, which comprises the following commits:
29d6d873 VERSION: back to development
51d5e946 VERSION: release 1.1.12
e9665f4d init: don't special-case logrus fds
683ad2ff libcontainer: mark all non-stdio fds O_CLOEXEC before spawning init
b6633f48 cgroup: plug leaks of /sys/fs/cgroup handle
284ba305 init: close internal fds before execve
fbe3eed1 setns init: do explicit lookup of execve argument early
0994249a init: verify after chdir that cwd is inside the container
506552a8 Fix File to Close
d0b1a374 keyring: update AkihiroSuda key expiry
d561e5da keyring: update cyphar@cyphar.com key expiry
7887736f VERSION: back to development
4bccb38c VERSION: release 1.1.11
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping libpod to version v5.0.1-4-gbb81e85a4, which comprises the following commits:
63f6a78eb Packit: Enable CentOS Stream 10 update job
e22c9dd65 Bump to v5.0.2-dev
946d055df Bump to v5.0.1
131f3d089 Add release notes for v5.0.1
2967eb9a2 [v5.0] libpod: restart always reconfigure the netns
92b3cda79 [v5.0] use new c/common pasta2 setup logic to fix dns
b1dbd477e [v5.0] Bump Buildah to v1.35.3
ebe3f395b hyperv: error if not admin
4b54d1824 libpod: don't warn about cgroupsv1 on FreeBSD
312313872 Use built-in ssh impl for all non-pty operations
70fe2a1c9 fix remote build isolation on client side
bfc63cc32 fix remote build isolation when server runs as root
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping compose to version v2.24.7-21-g33712277, which comprises the following commits:
33712277 chore(desktop): revised feature detection for file shares
e9dc8201 Add Navigation Menu to compose up
39504607 Add support for volume Subpath option
3b541b07 Bump docker v26.0.0
25671ae6 introduce config --variables to list compose model variables
0191e69d Fix docs on default build image name
897d239f Bump compose-go to v2.0.2
c5a760ce add support for annotations
26f687a1 Revert "Bump compose-go to v2.0.1"
ad414613 Bump compose-go to v2.0.1
db4ed895 feat(desktop): synchronized file share integration (#11614)
1b5fa3b9 feat(experiments): add experimental feature state (#11633)
4f97edf3 reduce timeout of the Otel tracing command
bc5fc6ba fix `compose config --format json`
f937e42a Bump compose-go v2.0.0
f46ca459 services shell completion bugfix
b2d4c1b8 fix TestBuildPlatformsWithCorrectBuildxConfig
5a1ba0ef only use ToModel when --no-interpolate is set
17d4229e feat(desktop): add Docker Desktop detection and client skeleton (#11593)
4efb8970 chore(deps): upgrade go to 1.21.8 (#11578)
f35449a6 ci(deps): bump moby/moby & docker/cli to v25.0.4 (#11566)
34b11c4f Add test summary for test jobs in ci
c525373a make code simpler
e99b8ace avoid duplicated "xx exited with code 0" message
8ab8df86 introduce --watch
de178267 move code into small functions for better readability
1680f9a8 restore support for `config --no-interpolate`
5c4f3370 remove docker cli step in ci.yml
58ec0e9f get log to manage `attach`
349d9f34 bump compose-go to version v2.0.0-rc.8
697a48af use an dedicated compose file --quiet-pull e2e test
9b0d1ffc Add a fallback check of Watch pid on Windows False positives were detected when checking the previous watch process state
d10a179f add support of QuietOption to create command
94246f3c pass QuietOption when starting dependencies from run command
9630cc58 when ran with ANSI disabled, force progress=plain
6c175548 Issue-11374: Modified compose up command to respect COMPOSE_REMOVE_ORPHANS environment variable
9b0e3d53 ci: bump engine version to `25.0.3`
de3da829 sort containers to optimize scale down
c79aabde discard stdout for laaarge log test
0aad3221 use listeners to collect include metrics
b1c06770 docs: update cli reference link
e330f590 docs: unify no trailing dots in docstrings and help (#11301)
16c8099c Use listener for file metadata
07bda596 fix deadlock collecting large logs
d2034029 chore(watch): remove old `docker cp` implementation
894ab41c ci(deps): bump docker/cli to v25.0.3 (#11481)
3ba66453 pass All option to backend api.Service when length statuses is not equal to zero
2eca9313 Add OTEL specs: build, depends_on, capabilities (gpu/tpu)
1fea7c1b build(deps): bump github.com/opencontainers/image-spec
acf2ffb0 feat(tracing): add project hash attr
0d48a93f chore(load): ensure context passed to load
aaa7ef6d Include all networks in ContainerCreate call if API >= 1.44
6ef55a53 bump compose-go to v2.0.0-rc.4
a553db33 CI: docker engine version matrix
05bec55d build(deps): bump github.com/docker/cli
8fdd45cd chore(e2e): fix flaky test & standalone behavior (#11382)
a0954dc5 ci(deps): replace buildkit to fix fsutil issues on Windows (#11426)
05820018 Fix canonical container name
da1a34a8 don't check external network existence when swarm is enabled
8b023ae0 build(deps): bump github.com/docker/cli
8c80297c build(deps): bump github.com/docker/docker
7e991515 Add support for storage_opt
d9791156 ci(deps): update DOCKER_CLI_VERSION to v25.0.1
71bebc16 bump compose-go to v2.0.0-rc.3 which fixes multiple compose files merge issues
25d16d1f build(deps): bump actions/upload-artifact from v3 to v4
ab97dcc7 update MAINTAINERS file
a8bd3b7a Fix load .env from project directory when project file is set by COMPOSE_FILE
811364b4 use a custom version of fsutils that fixes a bug on Windows causing all Compose builds to fail
1551fcb4 introduce stopAndRemoveContainer to share logic scaling down
eb4249ec bump compose-go to v2.0.0-rc.2
1e8241f6 ci(deps): upgrade to Moby v25.0.0 GA (#11381)
053a5604 docs: update link to use canonical URL for command
34ba0bc9 go.mod: github.com/moby/sys/mountinfo v0.7.1
56e38260 go.mod: github.com/google/uuid v1.5.0
c28bf522 bump version of compose-go to v2.0.0-rc.1
51c113b6 build(deps): bump github.com/docker/docker
7cdc7e15 remove watch command from the alpha command
fb026543 build(deps): bump github.com/docker/cli
d688d3bf fix(tracing): batch span exports to prevent blocking
898e1b60 signals/utils: always handle received signals
f414bf78 fix engine version require to use healthcheck.start_interval
3c4593f2 Stop the resource timer after last expected event
d2562029 build(deps): bump github.com/containerd/containerd from 1.7.11 to 1.7.12 (#11347)
26ed1051 build(deps): bump github.com/docker/docker from 25.0.0-rc.1+incompatible to 25.0.0-rc.2+incompatible (#11349)
191c10b9 build(deps): bump github.com/docker/cli from 25.0.0-rc.1+incompatible to 25.0.0-rc.2+incompatible (#11348)
5d05df6e update compose-go to version using immutable Project functions
b621948c feat(cli): report more useful User-Agent on engine API requests
f5c53c2d ci(deps): bump golangci-lint to v1.55.2
1cfeda71 ci(deps): bump golang to version v1.21.6 (#11331)
2bf2b22f Add source policies for build
575f2ed7 watch: remove requirements for tar binary and for sync target to be rw
5f4b22ed make docs
dcf6bd77 make mocks
80823b77 go ahead and wire up sig-proxy and no-stdin for consistency with underlying docker container attach
2c16e16d docker compose attach via RunAttach (from docker/cli's docker container attach)
d1be9caf build(deps): bump golang.org/x/sys from 0.15.0 to 0.16.0
c3c0cf3d build(deps): bump golang.org/x/sync from 0.5.0 to 0.6.0 (#11317)
27987415 gha: update DOCKER_CLI_VERSION to v24.0.7
566d2207 go.mod: github.com/docker/cli v25.0.0-rc.1
d09c39dc go.mod: github.com/docker/docker v25.0.0-rc.1
a1d36379 go.mod: github.com/klauspost/compress v1.17.4
0c55998b go.mod: github.com/felixge/httpsnoop v1.0.4
2f6ec9b7 go.mod: github.com/docker/go-connections v0.5.0
dcbf005f up: gracefully teardown when command ctx cancelled
e105f165 introduce `stats` command
ce5a0c65 Fix cancellable context detection in `AdaptCmd`
f58f23a6 remove ServiceProxy which was introduced for archived compose-cli
9aa52326 go.mod: docker/docker and docker/cli v25.0.0-beta.3
ccd83b8a go.mod: github.com/gorilla/mux v1.8.1
9e57850c go.mod: github.com/docker/distribution v2.8.3
35d3a7ca go.mod: golang.org/x/crypto v0.17.0
6c998602 go.mod: golang.org/x/crypto v0.16.0
402f3688 go.mod: golang.org/x/text v0.14.0
30dd3e66 go.mod: golang.org/x/term v0.15.0
0c4fa017 Bump compose-go v2-beta.2
b12e23b0 build(deps): bump go.uber.org/mock from 0.3.0 to 0.4.0
17da54da introduce build --with-dependencies
1baa4f44 up: fix write/close race condition in logPrinter
7781b7c9 deps: update docker/cli to fix go version selection issue
785835b1 Add support for endpoint-specific MAC address
e4fb5545 build do not require environment to be reslved
74cc0912 github.com/golang/mock is deprecated
5e61c62e collect services to build using WithServices
fb3868ff add support for start_interval
bdbda790 include disabled services for shell completion
ae4fd791 bump golang to version 1.21.5
26aca867 avoid use of service.Name when iterating on project.Services
138facea project.Services is a map
cda04f28 adopt compose-go/v2
85a1aec1 regen docs
9c29d223 use custom config type for OCI v1.0
df6fe59f tweak help message on oci version flag
07df9cc4 fix typo
7c8ff36d move around OCI logic, auto fallback/retry 1.1 -> 1.0
111ad3b0 fix(publish): add OCI 1.0 fallback support for AWS ECR
8026d0e2 adopt container.RestartPolicy*
df1533a1 [lint] don't use deprecated types
8639fbae go mod tidy
56e2ad9e update to v1.25 for RunAttach
ce1ddb6c fix combination of --pull always --no-build
c5824702 build(deps): bump golang.org/x/sys from 0.14.0 to 0.15.0
1f148244 send out a cancel event on SIGINT/SIGTERM
9faef4ae Update README.md to use standard compose.yaml file name
59f11ecb Fix configs are mounted under /<id>
750553c8 introduce compose logs --index to select a replica container
8c964f5a Update E2E test
90ca13b7 Fix E2E test to have index in the correct position
f9946127 Fix docs
ddda59a1 Add index option to compose logs command
e981c358 Add failing test
16c4241c log we don't expose service ports when --verbose
9025d63a bump ddev
a1de0b96 Restore `Project` is ps json output
caa0cbbc Introduce ps --orphans so user can include/exclude services not declared by project
29e9fdba let contributor know we might close unanswered issues
c665c53c bump buildx to v0.12.0 and adapt code to changes
a39cf75e build(deps): bump github.com/compose-spec/compose-go
46ba9c99 build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0
5c5d30c6 build(deps): bump github.com/docker/cli
36fa8d4e build(deps): bump github.com/docker/docker
2384635e build(deps): bump github.com/moby/buildkit from 0.12.2 to 0.12.3
2ba5e4c1 in watch mode force pull policy to build for services with both build and develop attributes This default behaviour will force a rebuild of the service images at watch process startup and be sure containers will be in sync with the local source code
b1a26dac Assume /src/pkg/compose/testdata absolute workingdir to make tests reproducible
5e77ae92 avoir use of []types.ServiceConfig
f5572201 identify services to build and don't display 'building' if none
8e1b3236 fix --remove-orphans not to consider disabled services as orphaned
7cb1f8ba introduce RuntimeVersion for code to check container runtime supports required features
cb01186c push also consider build.tags
9c4efbdd Strip project prefix from docker-compose up output
8ea7c9e0 Make it context aware and add test skipping options
c1694360 render quiet after filtering applied
254a94b0 bump golang to version 1.21.4
cf608fa9 bump compose-go to v1.20.1
426377a4 reject compose file using `secrets|configs.driver or template_driver`
493f6c80 skips flaky e2e tests on watch and attach
646a8fc0 fix docker/compose#11170 add newline in cmd/compose/build.go fmt.Fprint
2945532f fix --pull documentation
e5cd265a improve watch configuration logging Add action associated to each managed path
d646d757 lint
71237ef6 do not resolve cache dir until remote resource is in use
0d905a89 add a copyright notice with original author
b847c7f5 implement runtime file selection
5e3d8f67 re-implement cache folder detection
67279088 introduce --resolve-image-digests for publish to seal service images by digest
4cd61957 fix build
0d4cbbdb fix
9631a49d ENGDOCS-1764
328ca3f2 add docs upstream validation workflow
e1bbfc63 build(deps): bump go.uber.org/goleak from 1.2.1 to 1.3.0
616bba0a linter errors fixed
ee6e3c2a NetworkList to NetworkInspect for ID search
c7e31a3c Squashing feature branch commits in order to add signoff message.
704a9fd3 Use project.ServiceNames() if no service specified in hash
d9e0e42d Add branch configuration for pull_request trigger
c48e3c4a Initial codeql.yml commit
dd0803db fix SIGTERM support to stop/kill stack
39008c53 align with OCI artifact best practices
6c345b37 refactor(cmd/compose/run): remove redundant `len` check
1ffa194e fail start if depependency is missing
b9298101 check that the pull policy provided is a valid one or is not missing when --pull is used
3d0207eb remove uncessary return value of pullComposeFiles function
16a7c209 enable profile when down is ran with explicit service names
818bc3c3 add sync+restart action to watch attribute
38bc6d5d build(deps): bump github.com/containerd/containerd from 1.7.6 to 1.7.7
0b6ce6ee build(deps): bump github.com/google/go-cmp from 0.5.9 to 0.6.0
ae16bbbf build(deps): bump google.golang.org/grpc from 1.58.2 to 1.59.0
d13ad1f9 build(deps): bump golang.org/x/sync from 0.3.0 to 0.4.0
9b4d577c remove refrecence docs generation
14b43c1a remove cucumber tests as we haven't added new ones for a while
9dd081b9 add support of COMPOSE_ENV_FILES env variable to pass a list of env files
2c0b0232 add dry-run support for publish command
599e4b24 extract method to reduce cyclomatic complexity
fe8c2780 warn user remote resource is disabled
a345515f Don't delete dependent services
8967df7a Apply platform before hashing
4f694919 deps: remove deprecated github.com/pkg/errors
6ecab957 Include image name in error message
12e0ac89 pkg/compose/publish: use empty config descriptor mediaType
a6b7d785 pkg/remote/oci: check artifactType instead of config.mediaType
991901f2 pkg/remote/oci: refer to the manifest as manifest
2d971fc9 update the watch warning message when no services with a develop section
78f33619 ci: enable verbose output for e2e tests (#11045)
44d21280 truncate command by default, introduce --no-trunc flag to get the full command
ff2ff18c build(deps): bump google.golang.org/grpc from 1.58.1 to 1.58.2
ab81db5b config --xx don't need `env_file` being parsed
61c8be11 remove --timeout=0 flag to cleanup function of watch e2e test compose down command need the watch process to be killed to succeed
6be5f300 move watch from alpha to main command
c34c306c TestWatch to use new `develop` section
5ca35c88 implement publish
805541be watch: use official `develop` section (#11026)
8f489d6d build(deps): bump github.com/opencontainers/image-spec
9ea8fbc6 build(deps): bump github.com/moby/buildkit from 0.12.1 to 0.12.2
76f150e4 build(deps): bump gotest.tools/v3 from 3.5.0 to 3.5.1
f447c809 build(deps): bump google.golang.org/grpc from 1.58.0 to 1.58.1
4587d4ba build(deps): bump github.com/containerd/containerd from 1.7.3 to 1.7.6
a697a069 introduce pull --missing flag to only pull images not present in cache
8af49ff3 resolve service reference into container based on observed state
f6e31dbc don't rely on depends_on to resolve volume_from, better use observed state
6d5eb6fd update to go1.21.1
9d7e0ad6 correct scale error messages formatting
1a98a70b add scale command
19bbb12f ci: tweak restricted imports in linter (#10992)
7a134578 deps: upgrade Moby to v24.0.6 and gRPC to v1.58.0 (#10991)
13115468 cli: fix `--build` flag for `create` (#10982)
e1aa4f77 otel: add args & flags to cli traces (#10974)
d7b0b2bd watch: build & launch the project at start (#10957)
e0f39ebb pull OCI remote resource
c9d54f09 introduce publish (alpha) command
52e54ef9 doc: updated README.md to remove broken link
f4f2e934 migrate to github.com/distribution/reference
32c3d0a3 Enable service explicitly requested to be restarted
1fdbcb62 build: pass BuildOptions around explicitly & fix multi-platform issues
407a0d5b up: fix various race/deadlock conditions on exit (#10934)
8caa6f1f pkg/api: replace uuid for basic random id
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
| |
Testing podman + netavark without kernel-modules installed
in the image shows some are missing from the rrecomends.
It could be argued that they belong in netavark, but since
podman + netavark are almost always used together, we group
them here.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Tested with cni:
root@qemux86-64:~# podman version
Client: Podman Engine
Version: 5.0.1-dev
API Version: 5.0.1-dev
Go Version: go1.22.0
Git Commit: 177ea856f579914e0047655f32eb4f9fbc3ddbc4-dirty
Built: Thu Mar 21 17:59:57 2024
OS/Arch: linux/amd64
root@qemux86-64:~# rpm -qa | grep cni
cni-v1.2.0+rc0+gitb62753aa2bfa365c1ceaff6f25774a8047c896b50+b62753aa2b_b6a0e0bc96-r0.core2_64
root@qemux86-64:~# rpm -qa | grep neta
Tested with netavark:
root@qemux86-64:~# podman version
Client: Podman Engine
Version: 5.0.1-dev
API Version: 5.0.1-dev
Go Version: go1.22.0
Git Commit: 177ea856f579914e0047655f32eb4f9fbc3ddbc4-dirty
Built: Thu Mar 21 17:59:57 2024
OS/Arch: linux/amd64
root@qemux86-64:~# rpm -qa | grep netavark
netavark-1.10.3-r0.core2_64
Bumping libpod to version v5.0.0-4-g177ea856f, which comprises the following commits:
bfc63cc32 fix remote build isolation when server runs as root
f32338dfc bump version to v5.0.1-dev
e71ec6f1d New release: v5.0.0
6b93d9e11 Update RELEASE_NOTES.md with CVE-2024-1753
eb2b16d6d [v5.0] Bump Buildah to v1.35.1
43b9ea8b9 Adjust to the standard location of gvforwarder used in new images
4a84f39b3 Switch to 5.x WSL machine os stream using new automation
a03de4c14 rpm: use macro supported vendoring
069439820 Bump to v5.0.0-dev
f8888a13b Bump to v5.0.0-RC7
2e387df07 Add release notes for v5.0.0-rc7
d36ce9c2b fix invalid HTTP header values when hijacking a connection
8891d592b Use faster gzip for compression for 3x speedup for sending large contexts to remote
59512272b pkg/machine: make checkExclusiveActiveVM race free
51eee609c pkg/machine/wsl: remove unused CheckExclusiveActiveVM()
412648207 pkg/machine: CheckExclusiveActiveVM should also check for starting
1ca93f3fb pkg/machine: refresh config after we hold lock
71320df8e rpm: update containers-common dep on f40+
e58cb97de Change API socket to be machine name isolated
dbf38779b Makefile: drop tests-included from validate target
0fdd83173 Add release notes for v5.0.0
d7bc7b7b4 do not require policy.json
82597144b Machine decompress.go refactoring follow-up
abaa179aa Add target win-gvproxy in winmake.ps1
4c5d26f6f Add final machine endpoint
068ddfd19 update API doc version to 5.0.0
f2af295e4 Bump to 5.0.0-dev
d26113ca8 Bump to 5.0.0-rc6
52ed774c2 docs: generate-systemd: add clarification statement
3d6758a61 docs: quadlet: improve docs on root/rootless dirs
885dd2add [CI:DOCS] performance: fix URL and kernel version requirement
e6ac569a1 [CI:DOCS] Remove outdated references
364813da6 Add note for RHEL 8.5
e220d1ce6 Update module gopkg.in/go-jose/go-jose.v2 to v2.6.3 [SECURITY]
f91b8e77b Update module github.com/go-jose/go-jose/v3 to v3.0.3 [SECURITY]
9b21a5b79 Bump to v5.0.0-dev
bbad09bb0 Bump to v5.0.0-rc5
432f4fbf9 Fix Mac CI
d54a37399 Complete policy.json inclusion
b234bb55e Bump Buildah to v1.35.0
5d3a19f8d podman compose: enable machine socket connection
6f4ee16d9 [CI:DOCS] Add farm command to commands list
25f3a8ce7 podman machine start/stop do not write config unlocked
75fa38d52 [CI:BUILD] Build universal Podman binary for Mac installer
7a7591492 podman machine init: do not write config unlocked
7bfe5e700 Fail on failures to close the file descriptors, and especially the SparseWriter
5e0b7e54c Avoid reliance on fs.ErrClosed in SparseWriter users
4c6505be5 Fix the logic for detecting an unexpected close error
81906081e vendor libhvee-0.7.0
3c9c5be7d podman machine set: change options only locked
a65b546c6 Remove copySparseFile
2ba3a2d56 pkg/machine: fix relative DefaultPolicyJSONPath
724c5a06b Don't read full VM File before decompressing
ff81cf7c7 [CI:DOCS] Fix windows installer action
4d2fc293c machine: make more use of strongunits
92b67a69a Fix wrong units size return
79012795a fix(deps): update github.com/containers/libhvee digest to 7cee23c
d6d260174 [CI:DOCS] Migrate podman container image
a349f8d10 fix(deps): update module google.golang.org/protobuf to v1.33.0
39851a0b9 CI: try to fix more flakes
835cfbc05 [CI:BUILD] rpm: Put the podmansh(1) manual in the podmansh sub-package
945995be1 e2e: fix potential race in file-locks test
02403c2e6 Makefile: podman should have correct selinux label
9ee96a956 properly implement pull-error event status
155cd463d fix(deps): update module golang.org/x/tools to v0.19.0
6272abbbb Resurrect auto-port reassignment, but for all providers
ef7727238 Refactor env dir and port functions into new leaf pkgs
eabf0acfa fix(deps): update module golang.org/x/net to v0.22.0
3b72f9178 Revert "Expose as-tested Mac/Windows repository state"
24516f3ef fix(deps): update module golang.org/x/term to v0.18.0
e8bf9a323 Update podman-for-windows.md
8c9222848 fix(deps): update github.com/containers/libhvee digest to 0ff33af
e09444327 machine init: print output to improve UX
530782e11 logformatter: fixes for Macintosh
ebce0e71d test/e2e: check for stderr errors in cleanup()
ef6d38752 Bump to FreeBSD 13.3 (13.2 vanished)
fc4e16366 Bump to v5.0.0-dev
bce14b1e6 fix(deps): update module github.com/stretchr/testify to v1.9.0
cfc5b8e0f Bump to v5.0.0-RC4
185981fa5 Copy past golang/expansion form ks8.io/kubernetes
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
| |
We should ensure that cni is built as part of podman if
that's the configured virtual runtime.
Although cni is not a primary networking backend for
podman, this also allows it to be skipped if netavark is
used.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
| |
One of the vendor components has deleted a commit that docker-compose
is using (and has listed as a replacement in go.mod). Until
docker-compose comes up with a solution, we temporarily revert to
and older compose.
We'll update to the latest 2.23.x if this isn't resolved in 2.24+
before release.
This reverts commit 29ec8e5ceacdf20bd1f836268cf01a6a12484ba3.
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
In a similar way we package check-config.sh for docker, we package
the contrib script for k3s.
root@qemux86-64:/# ./usr/share/k3s/check-config.sh [48/4924]
Verifying binaries in ./usr/share/k3s:
- sha256sum: sha256sums unavailable
- links: link list unavailable
System:
- /usr/sbin iptables v1.8.10 (legacy): ok
- swap: disabled
- routes: ok
Limits:
- /proc/sys/kernel/keys/root_maxkeys: 1000000
info: reading kernel config from /proc/config.gz ...
Generally Necessary:
- cgroup hierarchy: cgroups V2 mounted, cpu|cpuset|memory controllers status: good
- CONFIG_NAMESPACES: enabled
- CONFIG_NET_NS: enabled
- CONFIG_PID_NS: enabled
- CONFIG_IPC_NS: enabled
- CONFIG_UTS_NS: enabled
- CONFIG_CGROUPS: enabled
- CONFIG_CGROUP_PIDS: enabled
- CONFIG_CGROUP_CPUACCT: enabled
- CONFIG_CGROUP_DEVICE: enabled
- CONFIG_CGROUP_FREEZER: enabled
- CONFIG_CGROUP_SCHED: enabled
- CONFIG_CPUSETS: enabled
- CONFIG_MEMCG: enabled
- CONFIG_KEYS: enabled
- CONFIG_VETH: enabled
- CONFIG_BRIDGE: enabled
- CONFIG_BRIDGE_NETFILTER: enabled
- CONFIG_IP_NF_FILTER: enabled (as module)
- CONFIG_IP_NF_TARGET_MASQUERADE: enabled (as module)
- CONFIG_NETFILTER_XT_MATCH_ADDRTYPE: enabled (as module)
- CONFIG_NETFILTER_XT_MATCH_CONNTRACK: enabled (as module)
- CONFIG_NETFILTER_XT_MATCH_IPVS: enabled (as module)
- CONFIG_NETFILTER_XT_MATCH_COMMENT: enabled (as module)
- CONFIG_NETFILTER_XT_MATCH_MULTIPORT: enabled (as module)
- CONFIG_IP_NF_NAT: enabled (as module)
- CONFIG_NF_NAT: enabled (as module)
- CONFIG_POSIX_MQUEUE: enabled
Optional Features:
- CONFIG_USER_NS: enabled
- CONFIG_SECCOMP: enabled
- CONFIG_BLK_CGROUP: enabled
- CONFIG_BLK_DEV_THROTTLING: enabled
- CONFIG_CGROUP_PERF: enabled
- CONFIG_CGROUP_HUGETLB: enabled
- CONFIG_NET_CLS_CGROUP: enabled
- CONFIG_CGROUP_NET_PRIO: enabled
- CONFIG_CFS_BANDWIDTH: enabled
- CONFIG_FAIR_GROUP_SCHED: enabled
- CONFIG_RT_GROUP_SCHED: enabled
- CONFIG_IP_NF_TARGET_REDIRECT: enabled (as module)
- CONFIG_IP_SET: enabled (as module)
- CONFIG_IP_VS: enabled
- CONFIG_IP_VS_NFCT: enabled
- CONFIG_IP_VS_PROTO_TCP: enabled
- CONFIG_IP_VS_PROTO_UDP: enabled
- CONFIG_IP_VS_RR: enabled (as module)
- CONFIG_EXT4_FS: enabled
- CONFIG_EXT4_FS_POSIX_ACL: enabled
- CONFIG_EXT4_FS_SECURITY: enabled
- Network Drivers:
- "overlay":
- CONFIG_VXLAN: enabled (as module)
Optional (for encrypted networks):
- CONFIG_CRYPTO: enabled
- CONFIG_CRYPTO_AEAD: enabled
- CONFIG_CRYPTO_GCM: enabled
- CONFIG_CRYPTO_SEQIV: enabled
- CONFIG_CRYPTO_GHASH: enabled
- CONFIG_XFRM: enabled
- CONFIG_XFRM_USER: enabled (as module)
- CONFIG_XFRM_ALGO: enabled
- CONFIG_INET_ESP: enabled (as module)
- CONFIG_INET_XFRM_MODE_TRANSPORT: missing
- Storage Drivers:
- "overlay":
- CONFIG_OVERLAY_FS: enabled
STATUS: pass
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
k3s will refuse to start if the golang version it was built
with doesn't match the VERSION_GOLANG linker variable.
As an example: https://gitlab.alpinelinux.org/alpine/aports/-/merge_requests/61668
We query our version of the compiler and set it in the binaries
to ensure they match.
Note: this may cause issues if you bump the golang compiler, but
k3s doesn't rebuild. We'll worry about that when it happens.
With this change, k3s starts and the node becomes ready.
root@qemux86-64:~# uname -a
Linux qemux86-64 6.6.20-yocto-standard #1 SMP PREEMPT_DYNAMIC Sun Mar 3 16:28:22 UTC 2024 x86_64 GNU/Linux
root@qemux86-64:~# kubectl get nodes
NAME STATUS ROLES AGE VERSION
qemux86-64 Ready control-plane,master 10m v1.28.7-k3s1
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
| |
Adding Upstream-Status and reformatting some of the long logs.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
| |
Signed-off-by: Tim Orling <tim.orling@konsulko.com>
|
| |
|
|
| |
Signed-off-by: Tim Orling <tim.orling@konsulko.com>
|
| |
|
|
| |
Signed-off-by: Tim Orling <tim.orling@konsulko.com>
|
| |
|
|
| |
Signed-off-by: Tim Orling <tim.orling@konsulko.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Inherit python_setuptools_build_meta instead of setuptools3, as
this is the build-backend declared in the pyproject.toml
We seem to need python3-protobuf-native as a DEPENDS, but
then the dependency check complains because our version in meta-python
is python3-protobuf_4.25.bb
Workaround this (for now?) by telling python3 -m build to --skip-dependency-check
This allows criu to _build_. Whether it is functional and proper is a different
story.
Signed-off-by: Tim Orling <tim.orling@konsulko.com>
|
| |
|
|
|
|
|
|
|
|
|
| |
Mimic what we do with python_pep517.bbclass in do_compile (python3 -m build) and
do_install (python3 -m install) to build and install wheels and avoid the heavy
handed pip install usage.
FIXME: even though lib/pycriu/version.py is properly being dynamically generated,
setuptools/config/expand.py is failing to detect the __version__ attr.
Signed-off-by: Tim Orling <tim.orling@konsulko.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping criu to version v3.19, which comprises the following commits:
f8b14286b criu: Version 3.19 (Bronze Peacock)
f104b3d6d Makefile: introduce ARCHCFLAGS for arch specific cflags
0b62f4267 lib: use separate packages for pycriu and crit
97b8b659c zdtm: cgroup_ifpriomap: Improve skip check's robustness.
e076c11e2 ci: fix codespell errors
41938f14b zdtm/static: test the offset migration of ELF files
29026496d zdtm/lib: add missing signal.h header
a77185dae files-reg: don't change the file pos in get_build_id
5d4179ddb criu/proc_parse: refactor the eventpoll parser
cfaacfb58 zdtm/thread_different_uid_gid: remove the redundant check
36a84751e zdtm/cow00: fix typo
48d6a59a2 arch/x86: remove the redundant check
45670b655 apparmor: remove the redundant check
5e8d7dc94 tun: don't parse buffers that have not been filled with data
4c9d23d33 util: allow to run criu under strace
c9fdd355f pie: Mark __export_*() functions as externally_visible
5d6c8bc58 clang-format: disable column limit constraint
81a30c320 zdtm/memfd04: check execveat on memfd that has memory mappings
e86e8dac0 memfd: don't reopen file descriptors for memory mappings
28e854d66 amdgpu: fix clang warnings
ba168ab78 ci: enable build with amdgpu plugin
aa38a5989 amdgpu: print an error if the dup syscall fails
940a05c0b amdgpu: don't leak fd on an error path in open_img_file
a68975c06 plugins: the UPDATE_VMA_MAP callback returns fd with the full control
66f39adf1 criu: change the comment about magic numbers
9b4e8292c vma: Add !VVAR condition to vma_entry_can_be_lazy
28adebefb Return page size as unsigned long
00f8a56b6 zdtm: check userns once
ba48ceb57 zdtm: socket_udp_shutdown: Make the test fail instead of timing out.
f6e820bed zdtm: Treat ESRCH from kill() as success.
c29c5a1df zdtm: cgroup04: Improve skip check's robustness.
131e464a0 zdtm: cgroup04: Improve error messages.
785d97a61 zdtm: If ignoring kernel taint, also ignore taint changes.
5e544dc44 ci: stop testing ubuntu overlayfs
7a2910f89 py/cli: add --version option
61d9cf6f9 crit/setup.py: use __version__ from pycriu
8adefc90d lib/pycriu: generate version.py
59fcfa80d compel: Add support for ppc64le scv syscalls
d06c9b5cd criu/plugin: Add environment variable to cap size of buffers.
8caf460b9 zdtm: test MEMBARRIER_CMD_GLOBAL_EXPEDITED migration
2ba872782 dump: use MEMBARRIER_CMD_GET_REGISTRATIONS when available
32241b00d vagrant: run tests with fedora 38
862cb5c1c vagrant: update to version 2.3.7
d2a0d1fa6 lint: don't fail workflow on indent fail
08f286ed9 CONTRIBUTING.md: improve coding-style related sections
38bf7f42e CONTRIBUTING.md: don't mention ctags
b7a8bb088 zdtm: test execveat(memfd)
c9b2633ca memfd: return original memfd fd for execveat()
480565437 kerndat: check_pagemap: close(fd) on error path
d5284313f kerndat: Make errors from clone3() check more precise.
badf8060c proc_parse: Log smaps entry while dumping VMA.
1800018bc test/other: add test for action-script
ea05b06ac proc_parse: remove trivial goto from vma_get_mapfile_user()
f7d7dc9c0 compel/infect: include the relevant pid in "no-breakpoints restore" debug message
b56a9cef3 kerndat: Make pagemap check more robust against swapped out pages.
86ad52bc2 ci/loongarch64: compile tests before running zdtm.py
0085f992c memfd: don't set fd attributes not needed for vma mapping
8c17535f3 loongarch64: fix syscall_64.tbl
6ea60d6ef github: auto-remove `changes requested` and `awaiting reply` labels
620e8c0a6 Put a cap on the size of single preadv in restore operation.
2547ac8ac zdtm: membarrier: test migration of membarrier() registration
e07155e19 dump+restore: Implement membarrier() registration c/r.
5b790aa18 loongarch64: reformat syscall_64.tbl for 8-wide tabs
d1096e3b3 lib/py: add VMA_AREA_MEMFD constant
d3b955e57 ci/docker: install all required packages
9477354de scripts/apt: don't hide apt output
a4b49c46f amdgpu_plugin: remove duplicated log prefix
69200bec7 irmap: scan user-provided paths in order
2a131167b page-xfer: Pull tcp_cork,nodelay().
6ed50ea49 apparmor: fix incorrect usage of sizeof on char ptr
3628589b5 zdtm/memfd00: test memfd file mode
dfa541095 memfd: dump and restore permissions.
ac1219f4e sk-inet: Extend 'TCP repair off' failure log.
25d033080 restore: Skip dropping BSET capability if irrelevant.
fe4be19de prctl: test prctl(NO_NEW_PRIVS) setting
a605cc9f3 prctl: Migrate prctl(NO_NEW_PRIVS) setting.
7df3f6595 restore: Fix capability migration requirements between different kernels.
7ab02639f restore: Skip setgroups() when already correct.
4998b724e restore: Avoid need for CAP_SETPCAP if not changing uids.
99188cfbe tty: Avoid EPERM for no-op chown().
113957270 memfd: Avoid EPERM for no-op chown().
96fa42b79 cgroup: Replace restore_perms() with cr_fchperm().
b074f92f9 files-reg: Avoid EPERM in ghost_apply_metadata() for no-op changes.
f985d9f44 sk-unix: Avoid restore_file_perms() EPERM error for no-op changes.
21560270d util: Implement fchown() and fchmod() wrappers.
e25a243b2 ci: add workflow for loongarch64
788e1e92e zdtm: add loongarch64 support
ae0811475 criu: add loongarch64 support to parasite and restorer
ec6dc2d5c images: add loongarch64 core image
c9df09eea compel: add loongarch64 support
b304106e6 include: add common header files for loongarch64
8a24d4872 ci: add workflow to ensure self-contained commits
23313080a kerndat: don't leak a socket file descriptor
b2d74fbfd zdtm: replace NR_fstat with NR_statx
8ee35bebb kerndat: bind ipv6-socket only if ipv6 is enabled
6b8107cd1 irmap: Reduce error log severity to warning.
4eb6cc319 mount: Demote fsnotify logs for ignored failures.
3e428a1de log: Remove error logs for ignored or otherwise logged subprocess exits.
804c0ba82 soccr: Log name of socket queue that failed to restore.
4018b7877 soccr: Log offset when failed to restore socket's queued data.
1cb791652 sk-unix: Log both peer names when failing on an external stream unix socket.
5a723937a compel: Log the status word with "Task is still running" errors.
664598dc7 files-reg: Debug "open file on overmounted mount" error.
a5fe99d2c cgroup: Propagate error on cgroup mount failure.
056cac474 zdtm: drop python 2 compatibility
002f2372a lib/py: drop python 2 compatibility
d388b91de test/others: drop setup_swrk() py2 compatibility
ee9983d4a test/criu-ns: drop python 2 compatibility
ede018176 make: remove checks for python 2 binary
642fd99bf remove python-future dependency
376f3d180 crit: add requirements.txt for pip>=20.1
f5d06571c crit: drop python 2 support
7825f4ebf coredump: drop python 2 support
05f0535de ci: clean up CentOS 7 related tweaks
362d8fa5c ci: disable CentOS 7 test in Cirrus CI
94c9e4787 readme: refactor asciinema link for video playback
7bda5e656 zdtm: Update netns purpose comment in zdtm_ct.
9ad59f58f util: Make CRIU run_id machine-level unique.
eecc53d05 kerndat: Don't fail on NETLINK/nsid support missing.
bf8446ae5 kerndat: unexport kerndat_nsid()
f2011e1c7 util: Downgrade ignored errors to warnings.
2aa9cb933 rpc: Support setting images_dir by path.
439b52243 rpc: Support gathering external file list after freezing process tree.
82a0db036 docker/podman: test c/r with action-script
28d005638 action-scripts: allow shell scripts in rpc mode
3e0a8ffd6 build: libnfnetlink: Remove nla_get_s32().
f043cb22a build: Guard against libbsd's version of `__aligned`.
c5142104a build: Use make-provided AR for building libzdtmtst.
88f8fdda8 build: Fix LIBS vs LDFLAGS order.
cbbe6c683 build: Debug system feature tests.
1a1fa439c build: Remove HAS_MEMFD test
2bf10c8d2 restore: remove unused `secbits` field.
e5c9bc4d0 kerndat: Make socket feature probing work on IPv6-only host.
eea0d6ede pipes: Plug pipe fd leak in "Unable to set a pipe size" error case.
ffa1e47fd sockets: Increase the size of sockets hashmap to 16K.
304a309ae test/thp_disable: fix lint
c97cc6a6c Allow skipping iptables/nftables invocation.
d0ac547b3 zdtm: sock_opts00: Improve error messages.
6bc00fcb8 zdtm: Implement test sharding.
1fb5c410c zdtm: Allow --keep-going for single test.
ed88e3241 zdtm: Add timeouts for test commands.
516fade93 zdtm: Allow overriding /tmp.
4b764a9dc Allow passing --log_to_stderr via RPC.
1e5ebec39 Allow passing --display_stats via RPC.
0e88a91ff Allow passing --leave_stopped by RPC.
4455444ee compel/test: Return 0 in case of error in fdspy
4c1409b8f Fill FPU init state if it's not provided by kernel.
93ad8d40d zdtm: thp_disable: Verify MADV_NOHUGEPAGE before migration
01238d270 zdtm: thp_disable: Verify prctl(THP_DISABLE) migration
a0c78a790 zdtm: thp_disable: Output a single failure message
2364c963c Log if prctl(SET_THP_DISABLE) doesn't work as expected.
21ce76263 Restore THP_DISABLE prctl.
9943dcde1 Fix mount(cgroup2) for older kernels.
0218b1e8f Fix dumping hugetlb-based memfd on kernels < 4.16.
a638043a7 cgroup/restore: split prepare_task_cgroup code into two separate functions
2ac15e3ad action-scripts: Add pre-stream hook
c6ac396aa timers: improve and fix posix timer id sequence checks
fc08fa907 criu-ns: Update shebang line to python
9cd09f586 criu-ns: Install Python pathlib module in CentOS 7
9c9e8ea3f criu-ns: Add tests for criu-ns script
e4b6fb2d1 criu-ns: Add support for older Python version in CI
733f16551 criu-ns: Add --criu-binary argument to run_criu()
36709536e lib/c: add empty_ns interfaces to libcriu
b665dce3c docs: rename amdgpu_plugin.txt to criu-amdgpu-plugin.txt
cc607f810 criu-ns: make --pidfile option show pid in caller pidns
50e17a1cf scripts: make newer versions of shellcheck happy
df7b897a2 ci: fix new codespell errors
727d79650 compel: support XSAVE on newer Intel CPUs
fa6af25e7 dump: increase fcntl call failure judgment
1c0f8787b zdtm: Add tests for ip tos restore
04cdbd610 sk-inet: Add IP TOS socket option
4c1a2ac41 criu: Version 3.18 (Silver Sandpiper)
b689bcc35 cr-check: remove excess kerndat_has_nspid from check_ns_pid
9b3496043 log: fix timestamp logging when tv_sec>=100
94ac9ee3c proc_parse: fix while condition in parse_pid_status
45e4a6b27 netlink: fix netlink fd flags dump/restore failed
6c728df1d zdtm: modify rseq01 to include a thread
f8da250bb cr-dump: properly apply rseq fixup for all threads
78c4e2c0f cr-dump: move rseq functions before dump_task_thread
85e46c44d dump: extend parasite_thread_ctl lifetime to dump_task_thread
9683097f2 zdtm: don't ignore rseq_cs mismatch in rseq01 test
0c5239932 ci: cancel preceding workflows run
5c8cdceec sk-unix: rework unix_resolve_name
de39bd2bd sk-unix: simplify error handling in unix_resolve_name_old
d93409cf1 sk-unix: remove bogus xfree from unix_resolve_name_old
ccc790d54 zdtm/lib: fix cwd path freeing
8e6fa9c3b net: Add net log prefix
7f0f07599 crit: fix compatibility with Python 3.12
bd0f209c2 pstree: improve id intersection detection in prepare_pstree_for_shell_job
66fd45d51 sk-unix: add some missed error printing
a0158e692 zdtm: add MNTNS_ZDTM macro to fix initialization
12423abdb mount: allow bindmounts for external fuse mounts
65407616e ci/archlinux: initialize machine ID
34e2b0221 Optimized shell code with <'s (instead of cat + |)
7cae16e97 mount: do collect_mntinfo of external mount namespace with no for_dump
69befdde1 cgroup-v2: make new field cg_set optional
529f29891 cgroup-v2: make new field is_threaded optional
6e681afb6 net: fail restore if nftables isn't supported but image is present
156c8da33 make: disable '-Wdangling-pointer' warning with gcc 12
4930c9802 x86/xsave: Set only used XFEATURE_* in xstate_bv
3f8e3220b CONTRIBUTING.md: document make lint / indent
42c4be2a9 net: use get_legacy_iptables_bin also on restore
298286718 pie/restorer: Fix fd leaking on error path
1d4777e45 test: add long command-line to coredump test
edaec5d76 coredump: report missing files without a backtrace
3ca979f9a coredump: handle long command-lines
a0cc95c03 lib/py: reduce code duplication
85b5c1e45 ci/podman-test: drop crun installation script
91ff24b47 ci: disable c/r of cgroups with podman
e7ab6fe63 restore: don't miss futex abort in restore_task_with_children
676b4579f zdtm/transition/epoll: don't rely on errno in case of zero return
7b8035344 mailmap: update my email
1ae9bac54 dump: improve error printing and readability of task_comm_info
11c71656b ci: add test for crit info
9b919ab74 crit: fix empty string comparison
fa4af0430 dump: Show task comm early
fd7e97fcf lint: exclude tags file from codespell
50e42c9dd Add documentation for --ghost-fiemap
4a8c02d63 zdtm: Add tests for IP_PKTINFO and IP_FREEBIND sock options
bd9b66c8c sk-inet: support IP_PKTINFO and IPV6_RECVPKTINFO options
7d4d4915a sk-inet: save IP_FREEBIND option for SOCK_RAW sockets also
f1c8d386b kerndat: check if setsockopt IPV6_FREEBIND is supported
14e883656 proc_parse: Handle btrfs files when map_files is not accessible
d7da4a69a ci: Add maps00 test in unprivileged mode in user namespace
d2abc9817 shmem: Close fd when VMA is copied from /proc/$pid/mem
144b467a0 shmem: pr_err -> pr_perror
6d7c0d007 compel/mips: fix parasite with GCC 12
7280e96a7 clang-format: use IndentGotoLabels to get rid of goto label indentation
fcdb753ed namespaces: cleanup switch_mnt_ns and restore_mnt_ns
63159c14c mount: simplify code around mount_cr_time_mount
43fa4e76d remap: refactor goto jumping to a while loop
757a2b46c remap: Fix typo
3837d31b5 ci/lint: make push action have at least too commits depth
cec43025a criu(8): Add info about unprivileged mode limitations
80528dbf7 proc_parse: Don't bail out on is_memfd() VMAs
95e590b51 shmem: Fall back to /proc/$pid/mem if no map_files
951c56917 proc_parse: Set VMA_AREA_REGULAR where needed
a92dfb61f string: define wrapers __setproctitle and __setproctitle_init to hide bsd headers
0a7c5fd1b string: use our own __strlcpy and __strlcat to remove bsd headers
8cfda2748 log: remove all uses of %m specifier in pr_* functions
7459d0204 lint: prohibit to use %m specifier in pr_* functions
f73ba7726 ci: switch from lgtm to codeql
0bddecead restorer: add logging on prctl PR_SET_MM_MAP failure
fb66727a2 zdtm: add mntns_compare check to mount_complex_sharing
ba09fad39 zdtm: add mountinfo topology compare to test lib
2837a13ef zdtm: add mountinfo parsing to test lib
543501d5f zdtm/lib: copy xmalloc.h
d800ef658 zdtm/lib: copy list.h
be61624f4 clang-format: rework make indent to check specific commits
a918093ce scripts/ci: use Fedora 37 for vagrant based tests
1bb84f96f tty: fix codding-style around for_each_bit call
abfe0b5d2 clang-format: add for_each_bit macros to ForEachMacros
c8b4fb9ba autofs: fix a frankenstein auto-created by clang-format
aab709b60 log: Write more details in write_pidfile
7c6eb0b85 asm: fix for_each_bit macro
bb3f7bef6 crtools: fix help message alignment for --network-lock
a302b3694 zdtm: fix 'zdtm.py list' command
21f5be91a cgroups: ignore EOPNOTSUPP on setting memory.kmem.limit_in_byte
9686693aa test/javaTests: update org.testng:testng (Maven)
5c60d35be sockets: tiny style fix
5a19c3432 non-root: Don't dump socket option SO_MARK if 0
2180e03b9 non-root: Rework socket bufs for unprivileged mode
e5ccfbb24 Fix typo in comment
bdbccc315 zdtm: add two tests for highly sparse ghost file
f3fdce81a files-reg.c: fiemap algorithm for ghost file
14b9ec195 ci: fix make indent
d0c64b7b3 ci/alpine: remove symlink for /usr/bin/python
095b3e84b ci/lint: install ShellCheck with dnf
c48b5290d Fix warnings from -Wstrict-prototypes in clang 16.0.0
fa2c585c2 amdgpu: define __nmk_dir if missing
c7211f52d Remove execute bit from source file
f5e0f641a cgroup: Remove redundant code that handles zombie tasks
c1ae880eb kerndat: Mark memfd_create(MFD_HUGETLB) unavailable when ENOSYS is returned
153614cb1 ci: move cgroup unmounting to run-ci-tests.sh
516ebc4f5 ci: Do not fail if latest epel repository definition is already installed
2ebce9233 ci: Make cpuset move to cgroup-v2 hierarchy
07d538cef zdtm: Check threads are restored into correct threaded controllers
20ea8a064 cgroup-v2: Restore threads in a process into correct threaded controllers
17d1d8810 cgroup-v2: Dump cgroup controllers of every threads in a process
ad3936e81 zdtm: Add test to check global properties of cgroup-v2 are preserved
d7e874659 zdtm: Add write_value/read_value helpers into zdtm library
167cfd366 cgroup-v2: Checkpoint and restore some global properties
8a336ab22 Switch aarch64 builds to Cirrus CI
840735aa0 ipc_sysctl: Prioritize restoring IPC variables using non usernsd approach
3db8d1a6c cgroup: add a comment to restore_cgroup_prop about path argument requirements
1cba559da non-root: add non-root test case to cirrus runs
6743d608c non-root: extend zdtm.py to be able to run tests as non-root
251939992 Documentation: add details about --unprivileged
47b07d011 non-root: Introduce unprivileged mode to kerndat
6a30c7d1e non-root: enable non-root checkpoint/restore
ce01f70d9 non-root: add functions to work with capabilities
4b4bf0421 non-root: add infrastructure to run as non-root
4c7f91aff ci: enable EPEL for CentOS 7
a39d41656 compel: Fix ppc64le parasite stack layout
17ec53913 compel: Add test to check parasite stack setup
556ab0dea compel: Fix infect test to not override failures
461fa7271 compel: Add APIs to facilitate testing
debc9c16c seize: do not overwrite exit code from failpath
16f1c147c test/others/crit/test.sh: use bash array
0a872ccf1 scripts/protobuf-gen.sh: fix (not ignore) shellcheck warnings
75b859f23 scripts/ci: rm shellcheck disable annotations
aeb6961f3 scripts/ci/run-ci-tests: use bash arrays
b1fb9f2f0 Fix, not ignore, shellcheck SC1091 warnings
9d2948b23 scripts/ci/asan.sh: fix, not ignore, shellcheck warning
968eec0d5 scripts/ci/apt-install: fix (not ignore) shellcheck warning
86ac0f05e ci/gha/lint: install a recent shellcheck
2039d7320 files-reg: skip failed mount lookup for shell-job's tty
9e91e62a7 criu-ns: capture controlling tty
40e1aaf56 mount: add definition for FSOPEN_CLOEXEC
7bc24688d ci: Clean up and improve Java testing
0178f2f99 ci: Add Dockerfile for openj9 on Ubuntu
39b3de60b ci: Rename openj9 Dockerfiles to hotspot
f78d3d821 gitignore: Ignore top-evel build dir only
aeaff6445 test/unix: check C/R of unix listen queues
83c606e02 zdtm: return 1 from pr_err, pr_perror, fail
dca55d281 criu: fail migration if data was sent to an in-flight socket
dfe9d006a breakpoint: enable breakpoints by default on amd64 and arm64
bb73e1cf5 breakpoint: implement hw breakpoint for arm64 platform
b7953c6c7 compel: switch breakpoint functions to non-inline at arm64 platform
719fea2fc compel: clear a breakpoint right after it's been triggered
d7477dac0 compel: set TRACESYSGOOD to distinguish breakpoints from syscalls
c089159a4 ci/cirrus: centos 8 job nits
a202ec271 ci/cirrus: add CentOS Stream 9
2642b657d docker-test: handle race condition error
49319cd57 Add Alexander Mikhalitsyn to maintainers
f7972a3f0 cr-restore: rseq: use glibc-specific way to unregister only as fallback
cacddf19d cr-restore: rseq: dynamically handle *libc with rseq
1f9bd82a5 cr-check: optimize check for apparmor stacking
a1262f55f cr-check: fix check for apparmor stacking
f9bc0a750 docker-test: use containerd installed from package
750acec25 Revert "ci: Switch to non overlaysfs tests"
e8a6765d1 criu: fix conflicting headers
eb4ecb3cf ci: unset XDG_RUNTIME_DIR when invoking podman
da4803bea MAINTAINERS: Add Radostin (myself) to maintainers
e62d541bd zdtm: add two tests for large ghost sparse file
2d34b5602 unlink_largefile.desc: remove crfail, since criu now can support unlink_largefile test
fbded7978 files-reg.c: modify the check of ghost_limit to support large sparse files
01b8d40ce zdtm/mnt_root_ext: don't allow propagation from test mntns to criu mntns
d12e2364c zdtm: make root mount private in criu mntns
70a9cd6fb vdso-compat: Increase the reserved buffer for compat vdso
b30f3ee3d zdtm: Remove permission part check for skipping vsyscall vma
c502d480f x86/compel/fault-inject: fixup mxcsr for PTRACE_SETFPREGS
e30d18f43 rseq: fix headers conflict on Mariner GNU/Linux
ad58553d9 Add --skip-file-rwx-check opt test
18fba4125 config/files-reg: Add opt to skip file r/w/x check on restore
6cef6e726 zdtm: add tests for SIGTSTP
c7858ba42 infect: add SIGTSTP support
49caf85b2 config: fail on --track-mem option if dirty tracking is not available
91e971c4d hugetlb: don't dump anonymous private hugetlb mapping using memfd approach
dd0217976 amdgpu: Add gitignore
b117b211a zdtm/scm: add scm09 test with closed sender fd
5cd7092fd sk-unix: make add_fake_unix_queuers earier and rework find_queuer_for
28358db13 Fix the check for mnt namespace in criu-ns
295dc85ca github: use git-clang-format instead of make indent
ced4ab4b0 zdtm: skip zdtm/static/shm-hugetlb when hugetlb is not supported
c830643d8 Revert "ci: skip new hugetlb maps09/maps10 tests for pre-dump"
b26e1fdbf mem: Skip pre-dumping on hugetlb mappings
9066f8741 cr-dump: do not report success to logs if post-dump script failed
d46f40f4f criu: Version 3.17.1
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
