aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
2021-05-12go-systemd: explicitly specify branchwarriorBruce Ashfield
The upstream project has removed the master branch in favour of 'main'. We were relying on the fetcher default of master previously, and now that master no longer exists, we get a fetch failure. Adding an explicit branch=main gets things working again. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-03-12lxc: adjust SRC_URI to new locationBruce Ashfield
linuxcontainers.org has moved where downloads can be found, so we adjust our SRC_URI accordingly. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2020-04-15hyperstart: refresh ↵Martin Jansa
0001-container.c-Fix-compiler-errors-that-gcc-8.1.0-repor.patch to apply cleanly ERROR: hyperstart-v0.2+gitAUTOINC+15bb718ad3-r0 do_patch: Fuzz detected: Applying patch 0001-container.c-Fix-compiler-errors-that-gcc-8.1.0-repor.patch patching file src/container.c Hunk #2 succeeded at 118 with fuzz 1 (offset 17 lines). Hunk #3 succeeded at 148 (offset 18 lines). Hunk #4 succeeded at 158 (offset 18 lines). Hunk #5 succeeded at 167 with fuzz 1 (offset 18 lines). Hunk #6 succeeded at 197 (offset 20 lines). Hunk #7 succeeded at 222 (offset 20 lines). Hunk #8 succeeded at 240 (offset 20 lines). Hunk #9 succeeded at 277 (offset 20 lines). Hunk #10 succeeded at 285 (offset 20 lines). Hunk #11 succeeded at 325 (offset 27 lines). Hunk #12 succeeded at 583 (offset 30 lines). Hunk #13 succeeded at 646 (offset 30 lines). Hunk #14 succeeded at 664 (offset 30 lines). Hunk #15 succeeded at 749 (offset 30 lines). Hunk #16 succeeded at 769 (offset 30 lines). Hunk #17 succeeded at 778 (offset 30 lines). The context lines in the patches can be updated with devtool: devtool modify hyperstart devtool finish --force-patch-refresh hyperstart <layer_path> Don't forget to review changes done by devtool! ERROR: hyperstart-v0.2+gitAUTOINC+15bb718ad3-r0 do_patch: QA Issue: Patch log indicates that patches do not apply cleanly. [patch-fuzz] Signed-off-by: Martin Jansa <martin.jansa@lge.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-11-22README: update mailing list addressBruce Ashfield
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-09-20templates/lxc-download.in: Use curl instead of wgetJoakim Roubert
When curl's MIT license is preferable to wget's GPLv3. Which it is in several situations. Change-Id: I72ee1ce66493c564557b73fae80f5219ef83af6d Signed-off-by: Joakim Roubert <joakimr@axis.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-09-09libvirt: Five security fixesArmin Kuster
Affects <= 4.9.0 This affectively moves sources to tip Fixes the following cves. CVE-2019-10132 CVE-2019-10161 CVE-2019-10166 CVE-2019-10167 CVE-2019-10168 Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-05-06ceph: set CVE_PRODUCTChen Qi
Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-05-01netns: Upgrade to v0.5.3Paul Barker
Drop obsolete patches and forward-port the remaining required patch. We also need to fix up permissions after the build so that we can clean the build directory without errors if needed. Signed-off-by: Paul Barker <paul@betafive.co.uk> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-04-18xen: make the dev86-native dependency specific to x86-64 targetChristopher Clark
Remove the requirement for x86 tools when building for ARM platforms. Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-04-18xen: upgrade to 4.12.0Christopher Clark
Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-04-18xen: remove recipes for stubdoms and dependent componentsChristopher Clark
Retiring these as the components are not in use and work on updating the recipes to build with the OE native tools rather than host tools has been discontinued. Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-04-12Revert "sysvinit-inittab_xen.inc: fix hypervisor console"Bruce Ashfield
Temporarily reverting this commit, since it has broken some Xen boot usecases. We'll revisit this in the future. This reverts commit 50cdecca7b2a0e1bb5eacbec132f26b802f950fc.
2019-04-12cri-o: build crio-config natively to generate conmon/config.hMark Asselstine
Part of building cri-o is the generation of the 'conmon/config.h' file. The content of this file is dynamic in that it has buffer sizes and a socket path which will depend on constants that are set in other parts of the code. For example the socket path can be setup for Windows or for Linux. To generate 'conmon/config.h' a small GO application is built and run called crio-config. This isn't really suitable for a -native package but we do have to run crio-config on the build host so we don't want to cross compile it. We therefor use the native GO to build this. This change allows things to work when the build host arch and the target arch don't match. A small update to the Makefile avoids mixing build host arch and target arch GO packages. Finally, We drop the crio-config binary from the install as it is only used to create the conmon/config.h as part of the build. This is consistent with the Makefile's install rule which does not install this binary as it has no use on the target. Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-04-12cri-o: fixup buildMark Asselstine
After oe-core commits 5f48939e2640 [goarch.bbclass: use MACHINEOVERRIDES and simplify go_map_arm()] 6300c4a83f7c [go.bbclass:Export more GO* environment variables] we see a build failure with cri-o: | go build runtime/cgo: attempting to install package runtime/cgo into read-only GOROOT | Makefile:112: recipe for target 'conmon/config.h' failed | make: *** [conmon/config.h] Error 1 to avoid this we should not overwrite the GO* environment being setup by the go.bbclass, so we drop most of our GO* exports here. Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-04-09kernel: drop 4.18 bbappendBruce Ashfield
4.18 has been removed from oe-core master, so we no longer need this bbappend. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-04-07container-base: Allow building with a specific kernel bindingJason Wessel
The oe-core layer sets a variable which intends that linux-dummy is set for container building. This commit would allow you to have a specific kernel and board setup as well as generate multiple containers by turrning off the linux-dummy check found in: oe-core/meta/classes/image-container.bbclass Signed-off-by: Jason Wessel <jason.wessel@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-04-02conf: add warrior to layer compatBruce Ashfield
In preparation for the spring release, we drop sumo and add warrior to the layer compat variable. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-03-24criu: upgrade to 3.11Dengke Du
Remove the following patch, because the 3.11 version already contain it. 0001-kdat-Don-t-open-run-criu.kdat-if-doesn-t-exists.patch Signed-off-by: Dengke Du <dengke.du@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-03-24sysvinit-inittab_xen.inc: fix hypervisor consoleManjukumar Matha
This commit switches over to using existing SERIAL_CONSOLES mechanism for hvc0 inittab entry generation. This then results in /bin/start_getty wrapper being used, which avoids the getty failure seen when running a xen capable rootfs natively on linux. Signed-off-by: Manjukumar Matha <manjukumar.harthikote-matha@xilinx.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-03-21docker: consolidate common depends/optionsBruce Ashfield
The split between docker-ce and docker (moby) was initially quite different, and docker-ce was more of a reference versus a supported / working package. Upstream has evolved such that both are valid options, and may be chosen due to different requirements. Rather than duplicating all the settings, we can move the dependencies, init, rdepends, users, etc, into a .inc file and share them. For now, we keep the build separate, since depending on the uprev status, they still can require different build options and packaging. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-03-21docker: fixup redepends and clean rsuggestsBruce Ashfield
With the 5.0 kernel and docker 18.09 you can run into issues pulling from docker hub due to an invalid/unknown certificate. We fix that by adding ca-certifcates as a runtime dependency. There can also be isuses setting up the network bridge, so we add bridge-utils to the rdepends. We also add some comments about this recipe and how it should be updated using moby (and why it is like it is). Finally, no one wants rt-tests and lxc when installing docker, so we drop them from the rsuggests. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-03-21docker-ce: fixup redepends and clean rsuggestsBruce Ashfield
With the 5.0 kernel and docker 18.09 you can run into issues pulling from docker hub due to an invalid/unknown certificate. We fix that by adding ca-certifcates as a runtime dependency. There can also be isuses setting up the network bridge, so we add bridge-utils to the rdepends. Finally, no one wants rt-tests and lxc when installing docker, so we drop them from the rsuggests. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-03-21containerd: remove docker/lxc RRECOMMENDSBruce Ashfield
containerd has evolved since it was introduced and it no longer makes sense for it to pull in container runtimes as RRECOMMENDS. In particular most users don't want lxc to be pulled in, and the hardcoded docker recommendation makes it difficult to vary the docker implementation. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-03-21docker-runc: drop docker RRECOMMENDSBruce Ashfield
runc shouldn't be RRECOMMENDing docker, since it is already a RDEPENDS of docker. If we have this RRECOMMEND, you cannot easily vary the docker and docker-ce packages with this runc variant. We could restore this RRECOMMEND in the future if a virtual/docker dependency is introduced. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-03-21docker: uprev docker/moby to 18.09.3Bruce Ashfield
Upreving the moby variant of the docker runtime to match the 18.09.3 updates that are in the docker-ce recipe. The signficant comments (engine), are as follows: 667e800b2c bump swarmkit to 415dc72789e2b733ea884f09188c286ca187d8ec fc01c2b481 Merge pull request #37874 from justincormack/remove-libtrust 5a7d6dcf21 Merge pull request #38820 from bynnchapu/mkimage-yum_add-new-tag-option 57c2228cc1 Add new option to specify tag information 6e86b1198f Merge pull request #38780 from thaJeztah/remove_parse_tmpfs_options 13b7d11be1 Remove Schema1 integration test suite 98fc09128b Remove the rest of v1 manifest support 8aca18d631 Merge pull request #38813 from cpuguy83/add_experimental_interface fa9df85c6a Had `HasExperimental()` to cluster backend 9c83848fc9 Merge pull request #38808 from alexellis/derek/add_pr_description_required 45eae4cb2b Merge pull request #38806 from tonistiigi/rootless-build-fixes 5c152ea10f Merge pull request #38810 from thaJeztah/network_dangling_docs 989d497d51 Merge pull request #38565 from dave-tucker/jenkinsfile f9b9d5f584 builder-next: fixes for rootless mode dc52692458 Merge pull request #38675 from thaJeztah/refactor_pkg_sysinfo ca91918dd4 docs follow-ups for networks "dangling" filter ed681c5c0d Merge pull request #38805 from thaJeztah/better_polling 3c9b9409e2 Update Derek behaviour 8df160dde7 Merge pull request #38790 from nakabonne/refactor-setting-graph-driver ba641fef28 Merge pull request #31551 from KarthikNayak/dry_run 348d793351 Merge pull request #38737 from thaJeztah/fix_stopped_restart_containers 8c0ecb6387 Fix stopped containers with restart-policy showing as "restarting" 91d934b41b Merge pull request #38791 from thaJeztah/update_api_changes 131cbaf5b7 Network: add support for 'dangling' filter 67d6f174ae Add more details to RunningTasksCount de7172b600 Merge pull request #38782 from Microsoft/fix-restart 501cb131a7 Merge pull request #38800 from dani-docker/esc-1090 4d7721cdcc Add Jenkinsfile 8073c4febd Merge pull request #38786 from gaorong/installer-shell-interpreter 3fbbeb703c set bigger grpc limit for GetConfigs api 5e77399b92 fix hack/dockerfile/install/containerd.installer test statement 19c5ff9c64 Merge pull request #38792 from thaJeztah/update_api_changelog 95faf3582c Merge pull request #38428 from thaJeztah/only_create_new_daemon_if_needed 5861a0db22 Fix container update resetting pidslimit on older API clients fc77445147 Add new PidsLimit options to API version history 894ecb24d1 Merge the divided loops dd94555787 Merge pull request #32519 from darkowlzz/32443-docker-update-pids-limit 308438c1ec Merge pull request #38783 from Microsoft/jjh/restarthypertests b3407d2029 Testing: create new daemon (only) if needed faaffd5d6d Windows:Disable 2 restart test when Hyper-V 5afe2705ac Windows: Fix restart for Hyper-V containers 144c95029c pkg/mount: remove unused ParseTmpfsOptions 74eb258ffb Add pids-limit support in docker update cbb885b07a Merge pull request #38632 from dperny/gmsa-support 0e54f5e3a9 Merge pull request #38686 from cpuguy83/remove_deprecated_newclient 9688f120a2 Merge pull request #38758 from thaJeztah/add_missing_char_device_mode c7a38c2c06 Graphdriver: fix "device" mode not being detected if "character-device" bit is set 6f1d7ddfa4 Use Runtime target 7403497573 Merge pull request #38756 from kolyshkin/fix-test-int 447ce1325d Merge pull request #38741 from Microsoft/jjh/signalname 228bc35e82 make test-integration: use correct dockerd binary c093c1e08b Merge pull request #38718 from thaJeztah/update_containerd_1.2.4 733a69e26b Windows:Update dumpstack event name fcb286895b Merge pull request #38364 from cpuguy83/fix_stale_container_on_start 5ba30cd1dc Delete stale containerd object on start failure 818d2ddf02 Merge pull request #38730 from AkihiroSuda/rootlesskit-030alpha2 206004e3a7 Merge pull request #38728 from AkihiroSuda/fix-rootless-stick-xdg f1a87919e0 bump up rootlesskit (fix CentOS failure) 56bea903ef dockerd: call StickRuntimeDirContents only in rootless mode defb2b57a7 Update containerd client to 1.2.4 26413ede57 Update containerd runtime 1.2.4 0111ee7087 Merge pull request #38717 from thaJeztah/update_containerd_1.2.3 a327428bdb Merge pull request #38716 from thaJeztah/bump_runc_cve_2019-5736 c4763e02d1 Update containerd to 1.2.3 f03698b69a Update runc to 6635b4f (fix CVE-2019-5736) 6800954050 Merge pull request #38677 from tiborvass/fix-validate f18cf23e97 Merge pull request #38692 from Microsoft/jjh/runtime-spec 98dcded647 Merge pull request #38701 from thaJeztah/bump_gorilla_mux 477eeef60c Bump gorilla/mux to 1.7.0 832ce62cb2 Merge pull request #38693 from tiborvass/fix-timeout-bug 42dcfc894a hack: Have TIMEOUT take -test.count into account when testing for flakiness 9f1b2b7031 Vendor opencontainers/runtime-spec 29686dbc e063099f91 Completely remove `d.NewClient` from testing tools e6fe7f8f29 Merge pull request #38685 from yongtang/go-vet 611b23c1a0 Merge pull request #38580 from andrey-ko/fix-restart 86312a4732 Fix go-vet issue c63a2b7619 Merge pull request #38678 from Microsoft/jjh/lcowpushspace f8e29fdd68 Merge pull request #38679 from AkihiroSuda/rootlesskit-030alpha1 6501a8ff90 Merge pull request #38684 from tonistiigi/vpnkit-restore 61da822eeb Merge pull request #38683 from tonistiigi/ptrace-seccomp-update 2c79d3520a Merge pull request #38681 from Microsoft/jjh/hcsshim086 20e8572a4c hack: restore bundling vpnkit on amd64 f091a8dd62 Merge pull request #38680 from Microsoft/jjh/dumpduterr e76380b67b seccomp: review update 07742515fb Vendor Microsoft/hcsshim @ v0.8.6 bc80e8df3e Windows CI: Dump possible panic log bcc4c03092 bump up rootlesskit (fix armv7 compilation failure) 1603af9689 Merge pull request #38137 from tonistiigi/seccomp-ptrace feb70fd5c9 hack: no need to git fetch in CI 20383d504b Add support for using Configs as CredentialSpecs in services 04995fa7c7 Add CredentialSpec from configs support 2c8522b0a3 LCOW:Enable image push when files have spaces e7a9a7cdbc Merge pull request #35355 from x1022as/unless-stop 8e06006717 Merge pull request #37296 from yusuf-gunaydin/lcow_limits 53460047e4 Refactor pkg/sysinfo 93d994e29c Merge pull request #38050 from AkihiroSuda/rootless ec87479b7e allow running `dockerd` in an unprivileged user namespace (rootless mode) 86bd2e9864 Implemented memory and CPU limits for LCOW. 50e63adf30 Merge pull request #38574 from StefanScherer/improve-no-matching-manifest-error b17188be39 Merge pull request #38673 from thaJeztah/fix_proto_capitalization 8e293be4ba fix unless-stopped unexpected behavior b462bba1b0 Bump SwarmKit to fix proto capitalization d440fea460 Merge pull request #38655 from thaJeztah/override_validate acf08532a7 Merge pull request #38520 from thaJeztah/fix_update_status_check 94429d4078 Remove use of serviceSpecIsUpdated 0e60e48134 Bump swarmkit to 1a0ebd43b2d156983a695f90e56f4ecba6ced902 87903f2fb5 Merge pull request #38609 from kwojcicki/enhancement/38518-docker_info_builder_version 8a43b7bb99 Merge pull request #38570 from thaJeztah/keep_your_head_up fc4a40b510 Merge pull request #38658 from thaJeztah/use_stable_cli 7e7e100be0 Add HEAD support for /_ping endpoint 393838ca5e Merge pull request #38569 from thaJeztah/forget_about_it 22e4f12e5f Merge pull request #38653 from sreis/38636-fix-nil-pointer-dereference 468eb93e5a Use 17.06 stable channel for CLI used in CI 5a2f15b5d5 Merge pull request #38625 from thaJeztah/remove_docs_role 2a08f33166 Allow overriding repository and branch in validate scripts 44af96c0fc Merge pull request #38634 from kolyshkin/cp-longname 3134161be3 Fix nil pointer derefence on failure to connect to containerd 0d9dc3f4b5 Merge pull request #38604 from thaJeztah/remove_deprecated_newclient 8b10292153 Merge pull request #38644 from yongtang/fatalf 5fba9b32b3 Merge pull request #38635 from JoeWrightss/patch-3 3a4bb96ab7 Remove use of deprecated client.NewClient() 5801c04345 Merge pull request #38380 from olljanat/capabilities-support 0cde75e2ea Merge pull request #38398 from RaviTezu/replace_gotty_with_aec f04e8bb075 Fatalf -> Fatal 6351619e2c Merge pull request #38606 from thaJeztah/move_client_opts 974294600f Fix some typos in ROADMAP.md f55a4176fe pkg/archive:CopyTo(): fix for long dest filename 27c7178933 Merge pull request #38629 from thaJeztah/bump_golang_1.11.5 20b34412dc Bump Golang 1.11.5 (CVE-2019-6486) e017717d96 keep old network ids de86ba27fb Merge pull request #38598 from yongtang/serviceRunningTasksCount 89ce20fa25 Merge pull request #38603 from thaJeztah/remove_deprecated_daemonhost 2cb25409c2 Remove "docs maintainers" section 528ca931e6 Merge pull request #38621 from fntlnz/fix/reviewing-merge-label c133553154 REVIEWING.md: Fix status 4 merge label 0ecba1523d Merge pull request #38422 from debayande/even-more-names-redux 80d7bfd54d Capabilities refactor - Add support for exact list of capabilities, support only OCI model - Support OCI model on CapAdd and CapDrop but remain backward compatibility - Create variable locally instead of declaring it at the top - Use const for magic "ALL" value - Rename `cap` variable as it overlaps with `cap()` built-in - Normalize and validate capabilities before use - Move validation for conflicting options to validateHostConfig() - TweakCapabilities: simplify logic to calculate capabilities f821f002e5 Adding builder version 8d7889e510 Merge pull request #38605 from thaJeztah/explicit_nilerror_check 69d9ff3455 Move deprecated client constructors to a separate file 01eb35bfb3 Move client-opts to a separate file 3449b12cc7 Use assert.NilError() instead of assert.Assert() 3105ca26dc integration-cli: remove deprecated daemonHost() utility e485a60e2b Move serviceRunningTasksCount to integration/internal/swarm 1990a3e409 replace gotty with aec, since gotty hasn't been updated since very long time and aec can drop in for gotty Signed-off-by: RaviTeja Pothana <ravi-teja@live.com> 5ec31380a5 Merge pull request #38481 from thaJeztah/run_volume_tests_remotely 64fd09bd29 Merge pull request #38553 from thaJeztah/faster_api_node_drain_pause bba833928c Merge pull request #38487 from LinuxMercedes/error-on-empty-dockerfile 0dc531243d Merge pull request #38554 from thaJeztah/check_for_errors 4b9db209fe Improve 'no matching manifest' error 5ebb679598 Merge pull request #38544 from thaJeztah/dont_sprintf cd60e8a752 Merge pull request #38547 from yongtang/waitAndAssert e21f50cbf0 Merge pull request #38572 from yongtang/assert.NilError b5be9f63eb Merge pull request #38567 from thaJeztah/use_the_skip 38015177d8 Merge pull request #38557 from thaJeztah/remove_duplicated_code a827f17306 Merge pull request #38552 from thaJeztah/improve_test_events_filter_labels 508e5f7b70 Merge pull request #37974 from thaJeztah/add_more_component_versions 834801a4e5 Merge pull request #38568 from thaJeztah/fix_ping_test 52475f8dd5 Replace t.Fatal(err) with assert.NilError(t, err) a0674481ee Merge pull request #38566 from thaJeztah/fix_task_logs_swagger 68e266ee3a Replace waitAndAssert in config_test.go with poll.WaitOn 18c7e8b927 Test: dockerfiles with no instructions are detected 64466b0cd9 Convert parse errors to more informative format d104a750f9 Update buildkit version -- improved parse errors 8472e04f79 Merge pull request #38555 from yongtang/assert.NilError ef91b404ef Merge pull request #38524 from thaJeztah/update_docker_py b8277edd9c Merge pull request #38546 from thaJeztah/wait_a_second 2137b8ccf2 Add containerd, runc, and docker-init versions to /version 5f788fbf56 Add Cache-Control headers to disable caching /_ping endpoint 46b80550c1 Fix ping-tests using wrong status-code c11be31710 TestCgroupDriverSystemdMemoryLimit: use skip.If() 5ccc0714f7 Swagger: fix "task logs" outside of "tasks" section beef00cb26 Merge pull request #38558 from thaJeztah/pass_client_instead_of_daemon a3f626d101 Merge pull request #38543 from thaJeztah/save_the_environment 56a68c15f8 Integration tests: remove some duplicated code, and preserve context 60d93aab2e Refactor TestInspectNetwork 8172edf04c GetRunningTasks: pass client instead of daemon 0e15c02465 Make TestEventsFilterLabels less flaky 32f6aeee8a Replace t.Fatal(err) with assert.NilError(err) 2e326eba70 Add missing error-check in TestAPISwarmManagerRestore ebdc9a3afc Slightly speed up TestAPISwarmNodeDrainPause ebc0750e9f Merge pull request #38459 from JoeWrightss/patch-2 1ac557c506 Merge pull request #38548 from yongtang/networkIsRemoved 28b7824caa Remove code duplication and consolidate networkIsRemoved e3c03d172e Merge pull request #38545 from thaJeztah/integration_on_swarm_nits 973ca00d60 reduce flakiness of TestSwarmLockUnlockCluster and TestSwarmJoinPromoteLocked 8f158db4ed pkg/signal.TestTrap: use a subtest c855d411bf testing: pkg/signal; remove redundant fmt.Sprintf() ead47f0a83 no need to set exec.Env to os.Environ() as it's the default b84bff7f8a Fix: plugin-tests discarding current environment ad2765b35e Merge pull request #38523 from olljanat/flaky-test-finder c7444a4f31 Merge pull request #38537 from vdemeester/update-code-owners 295413c9d0 Merge pull request #38533 from kolyshkin/derek 89e3a4af62 fix code typo f25972151b Merge pull request #38530 from SUSE/fix-config-segfault 66210fae70 .DEREK.yml: add myself 5d5798c7cc Merge pull request #38527 from thaJeztah/bash_the_bashisms c0c05affc7 Update docker-py to 3.7.0 8a8fd37f6f CI: Introduce flaky test finder 3efd75b972 Merge pull request #38529 from thaJeztah/improve_make_help 4627bc8a26 Remove myself from codeowners 😅 7f3910c92e Fix possible segfault in config reload 202c9d8c98 Makefile: make help: fix newline wrapping, and missing targets 2a5405bedd Run volume-tests again remote daemons as well 37498f009d Shell scripts: fix bare variables c3650770cc Revert "Bash scripts; use double brackets, fix bare variables, add quotes" b4842cfe88 Merge pull request #38354 from thaJeztah/fix_ipam_swagger 3f2ecb5452 Merge pull request #38515 from yongtang/01082019-oll.WaitOn cb501886db Merge pull request #38456 from thaJeztah/make_errdefs_idempotent 156b2abd0c Merge pull request #38472 from thaJeztah/remove_debugging_code 9dd43415ae Merge pull request #38499 from olljanat/change_serviceIsUpdated2 0492b0997b Use poll.WaitOn in authz_plugin_test.go b868ada474 integration: Corrected service update tests logic 77df18c24a Merge pull request #38509 from thaJeztah/bump_containerd_v1.2.2 27cc170d28 Bump containerd to v1.2.2 f9dbd383bb Merge pull request #38418 from thaJeztah/mega_power e8592828eb Merge pull request #38482 from thaJeztah/skip_consistently 263e28a830 Fix some minor wording / issues 69c0b7e476 Simplify skip checks 84224935ea Only build IPCmode tests on Linux a3948d17d3 Improve consistency in "skip" 545d00e752 Merge pull request #38416 from thaJeztah/fix_build_session_test f5238762a8 Merge pull request #38480 from thaJeztah/run_slow_test_parallel 16df93c231 Merge pull request #38497 from yongtang/go-vet 7315a2bb11 Fix go vet issue in daemon/daemon.go 8edcd4c3cd integration: wait for service update to be completed 2ee53a42db Merge pull request #38490 from kolyshkin/test-rename-anon-ct 55b5b8de79 Merge pull request #38486 from thaJeztah/dont_use_deprecated_envclient 926edd68a5 Merge pull request #38493 from thaJeztah/skip_kmem_tests_on_rhel b958b430aa Merge pull request #38417 from thaJeztah/replace_newclient 0104abf0d6 Merge pull request #38409 from innovimax/patch-1 5a718ef0f9 Merge pull request #38496 from Microsoft/jjh/dockerfile.windows 6825db8c94 Merge pull request #38450 from thaJeztah/remove_deprecated_grpc_functions 3bcf582366 Add note to Dockerfile.windows 1e1156cf67 Skip kernel-memory tests on RHEL/CentOS daemons de640c9f49 Merge pull request #38038 from AkihiroSuda/ubuntu-overlayfs 74ad4f2d2c Merge pull request #38423 from olljanat/disable-integration-tests-on-z-and-powerpc ae3ca7bb97 Run TestImportExtremelyLargeImageWorks in parallel 2ca6896aee TestRenameAnonymousContainer: fix error msg c8ff5ecc09 Remove use of deprecated client.NewEnvClient() 2b7e084dc9 Merge pull request #38473 from thaJeztah/use_testenv_client e78a3dca21 Merge pull request #38477 from yongtang/38407-follow-up 0de62d9bbc Integration: use testenv.APIClient() 4d88a95d67 Don't mix t.Parallel() wth environment.ProtectAll() 264775b52b Make errdefs helpers idempotent 3f7898cfcd Merge pull request #38451 from thaJeztah/skip_test_info_warnings 9a6b704fac Merge pull request #38464 from thaJeztah/wrap_some_errors 1930e8eb2e Merge pull request #38455 from thaJeztah/add_errdefs_nil_check 0281db99a9 Follow up to PR 38407 626022d0f6 Merge pull request #38407 from maximilianomaccanti/master f9fedf1308 TestBuildMultiStageParentConfig: remove unneeded sleep and ImageList call e0e9942dc5 Merge pull request #38419 from thaJeztah/fix_nuke_everything 27234ffe3e Merge pull request #37564 from adshmh/migrate-docker_cli_service_update_test-to-integration-service-fixed-flake 8f93a33755 Merge pull request #35894 from joninvski/improve-syslog-logger-unit-test-coverage 744940056d client/request: wrap some errors 43a8ec654b Add missing nil-check on errdefs.Unavailable() 72b0b0387d Replace deprecated grpc.ErrorDesc() and grpc.Code() calls f76d6a078d Merge pull request #38370 from farnasirim/36413-bind-dir-skip-copy 056840c2a6 Skip TestInfoAPIWarnings on remote daemons 53bb992c3b Merge pull request #38445 from thaJeztah/dont_use_deprecated_withdialer 8d3feccfa9 Replace deprecated client.WithDialer() 31348a2936 fix typo e6d7df2e5d Use BuildKit to skip source code COPY if BIND_DIR set 5ddb1d410a Merge pull request #38426 from thaJeztah/remove_unused_experimental_check c32f042e2b Merge pull request #38430 from thaJeztah/fix_prefix_double_slash a7020454ca Add options validation to syslog logger test be151a73f0 migrated service integration tests from integration-cli/docker_cli_service_update_test.go to integration/service 8fbf2598f5 Merge pull request #37940 from olljanat/replicas-max-per-node 5d5adcd898 Fix double slash after $PREFIX 3587efed6b Merge pull request #38414 from thaJeztah/minor_volume_tweaks 052a20f361 Merge pull request #38424 from thaJeztah/bash_da_bash_bash_bash 43b15e924f Remove SameHostDaemon, use testEnv.IsLocalDaemon instead 362f737e1c Remove unused ExperimentalDaemon, NotS390X, NotPausable requirement checks 9a3911ced8 Fix TestBuildWithSession, TestBuildSquashParent using wrong daemon during test 02157c638b Disabled these tests on s390x and ppc64le: - TestAPISwarmLeaderElection - TestAPISwarmRaftQuorum - TestSwarmClusterRotateUnlockKey 153171e9dd Added support for maximum replicas per node to services 297b30df5f Bash scripts; use double brackets, fix bare variables, add quotes d147fe0582 Merge pull request #38413 from slp/master e50f791d42 Makes a few modifications to the name generator. 0d6dd91e13 Move `validateOpts()` to local_unix.go as it is not used on Windows 5580b79813 PowerShell: fix "Nuke-Everything" failing to remove images 755d3057ab PowerShell: Go-version check; only select the first match 6130c89cce PowerShell: remove aliases, use their real commands instead b394d25f03 PowerShell: move $null to left-hand for comparisons 0f8b616c0c PowerShell: fix mixed tabs/spaces 11b88be247 Remove validationError type, and use errdefs.InvalidParameter 342f7a357a Use a map[string]struct{} for validOpts d5b271c155 add check for local volume option 2cb7b73a1b Test: Replace NewClient() with NewClientT() ad8a8e8a9e NewStreamConfig UTest fixes 687cbfa739 Split StreamConfig from New, Utest table driven 512ac778bf Add two configurable options to awslogs driver 2cb26cfe9c Merge pull request #38301 from cyphar/waitgroup-limits a07fbfbd15 Merge pull request #38411 from kolyshkin/dont-panic 5a52917e4d daemon: switch to semaphore-gated WaitGroup for startup tasks ab318fa6ca Merge pull request #38403 from thaJeztah/switch_to_alpine_3.8 5846db10af layer/layer_store: ensure NewInputTarStream resources are released 7e7ff2a033 integration-cli/build: don't panic c77afb700d Merge pull request #38402 from thaJeztah/bump_golang_1.11.4 92b34ec9c6 Merge pull request #38408 from josegonzalez/patch-1 a2d0de6559 Correct spelling error in roadmap 7c8dcebd30 Switch Dockerfile.e2e to alpine 3.8 3770f38647 Bump Golang 1.11.4 bcd817ee6b Merge pull request #38393 from thaJeztah/refactor_container_validation 170ed8d7e7 Merge pull request #38399 from thaJeztah/fix_govet_issues 7e220b3f83 Merge pull request #38266 from thaJeztah/logrus_formatting b33dc72523 Merge pull request #38335 from yongtang/38258-syslog-rfc5424 f81cafd12b Merge pull request #38381 from thaJeztah/unify_api_version_checks 9c83124302 Fix some go_vet issues 40f245b7c8 Merge pull request #38097 from cpuguy83/roadmap.md 1edf943dc7 Configure log-format earlier, and small refactor d1117e8e10 Merge pull request #38372 from FabianKramm/fix-darwin-compile f6002117a4 Extract container-config and container-hostconfig validation 44b360f884 Merge pull request #38391 from olljanat/derek 5fc0f03426 Extract workingdir validation/conversion to a function c0697c27aa Extract port-mapping validation to a function e1809510ca Extract restart-policy-validation to a function 6a7da0b31b Extract healthcheck-validation to a function b6e373c525 Rename verifyContainerResources to verifyPlatformContainerResources c07d79bcc2 Merge pull request #38369 from thaJeztah/bump_golang_1.11.3 e278678705 Remove unused argument from verifyPlatformContainerSettings 10c97b9357 Unify logging container validation warnings 2e23ef5350 Move port-publishing check to linux platform-check 46c713ab5a Add curators rights for olljanat 57f1305e74 Move "OOM Kill disable" warning to the daemon 419972a714 Merge pull request #38376 from crosbymichael/bump-containerd 8422e6f6fa Merge pull request #38383 from tonistiigi/exec-ctx c4c4963228 Unify API-version checks 332f134890 libcontainerd: prevent exec delete locking efba5f8565 Merge pull request #38371 from farnasirim/doc-test-fix-regex e5d9d72162 Update containerd to aa5e000c963756778ab3ebd1a12c6 eea4977d02 Fix unmount redeclaration on darwin in github.com/docker/docker/pkg/mount c46c3c1689 Update test.md doc to fix sample test regex 6b7c093b0d Bump Golang 1.11.3 (CVE-2018-16875) f711f2bdc3 Merge pull request #38360 from thaJeztah/fix_missing_import d69968d6d3 Fix missing import 56cc56b0fa Merge pull request #38126 from mjameswh/fix-1715 759ad5a981 Merge pull request #38338 from Bevisy/master f810141387 Merge pull request #38348 from Quasilyte/patch-1 f34727f704 Merge pull request #38316 from dmandalidis/xattr-fix d4a6e1c44f Merge pull request #38068 from kolyshkin/err a5dd68186c Swagger: fix definition of IPAM driver options 62d80835ab Merge pull request #38342 from crosbymichael/oci-refactor 560ac1c996 Merge pull request #38135 from moredhel/defer-container-interface 510805655b Merge pull request #38265 from AkihiroSuda/remove-migrate-v1 b940cc5cff Move caps and device spec utils to `oci` pkg a5c185b994 registry: use len(via)!=0 instead of via!=nil 4555ae59e4 Merge pull request #38294 from jaswdr/issue-38096 d0192ae154 Ignore xattr ENOTSUP errors on copy (fixes #38155) 6533136961 pkg/mount: wrap mount/umount errors 90be078fe5 pkg/mount: refactor Unmount() 2f98b5f51f aufs: get rid of mount() 77bc327e24 UnmountIpcMount: simplify 8072e62d83 pkg/system/stat_unix: wrap errors in PathError 65f669331a delete unnecessary blank lines 3e44f58966 Merge pull request #38142 from thaJeztah/fix_api_return_code ec153ccfc8 pkg/archive: add TestReexecUserNSOverlayWhiteoutConverter 037e370de1 pkg/archive: annotate tests that requires initial userns f8ed19c8b4 pkg/archive: support overlayfs in userns (Ubuntu kernel only) 6e3113f700 Merge pull request #38327 from andrewhsu/ctrd 0cd6eabeef Merge pull request #38339 from tonistiigi/update-buildkit 126f371e47 Fix mistake in docs/contributing/test.md running specific unit test (#38096) ce58fcedd8 Merge pull request #38292 from AkihiroSuda/fix-pkg-archive-xattr-test 32f4805815 vendor: update buildkit to d9f75920 7bfd8a7a72 Merge pull request #38336 from yongtang/12082018-go-vet 1082d1edf2 go vet fix for TestfillLicense fa6dabf876 Add zero padding for RFC5424 syslog format edf5134ba7 Merge pull request #38323 from nostrad/fix-deb-security-check 78045a5419 use empty string as cgroup path to grab first find 75c4b74155 vndr libnetwork to adjust for updated runc 615eecf8ac update containerd to v1.2.1 a4a816b6bb Merge pull request #38328 from andrewhsu/abbr 1014b2bb66 update just installer of containerd to 1.2.1 5a9cb68eb3 Merge pull request #38314 from gaozhenhai/master 8db540370c mkimage: Fix Debian security presence check 1895e082b6 Merge pull request #38313 from Microsoft/jjh/hcsshim08 ce67af6938 Fix log output format 05151dcc39 Windows:Bump HCSShim to v0.8.3 65d9a5dde5 Merge pull request #38267 from thaJeztah/wrap_errors 6a3d1e3e3e Unify the defer syntax ad1354ffb4 Merge pull request #38305 from OmriShiv/master 5480e74971 Merge pull request #38299 from jaswdr/issue-38285 fe1083d462 fix typo 49217e7b2d Merge pull request #37302 from cyphar/nis-domainname 64e52ff3db Masked /proc/asound f38ac72bca oci: add integration tests for kernel.domainname configuration 7417f50575 oci: include the domainname in "kernel.domainname" a8d2b29e8d Use errors.Wrap() in daemon/config a2e384682b Use idtools.LookupGroup instead of parsing /etc/group file for docker.sock ownership baab736a36 Merge pull request #38291 from tonistiigi/builder-networking-performance 9ddd6e47a9 pkg/archive: fix TestTarUntarWithXattr failure on recent kernel bcf1967dd0 builder: delete sandbox in a goroutine for performance 1ad272c7e4 builder: set exernalkey option for faster hook processing 852542b397 Merge pull request #38284 from cpuguy83/context_in_api 8391a667d6 Merge pull request #38281 from thaJeztah/kernel_memory_tcp_docs_touchups 1b22bc52fa Merge pull request #38282 from thaJeztah/kernel_memory_tcp_warnings 05390c4f6e Rely on request.Context() cancellation d5916f6393 Update gorilla/mux bb7de1f7cb Minor docs touch-ups for KernelMemoryTCP support 6f70946a27 Add warning to /info if KernelMemoryTCP is not supported d3e75e4220 Merge pull request #37043 from yongtang/37038-kernelTCP 6fa149805c Merge pull request #37638 from jterry75/devices_windows 2555344858 Merge pull request #38278 from Microsoft/jjh/busyboxstage2 561e0f6b7f Windows: Bump busybox to v1.1 ed37f60b86 Merge pull request #38263 from gaozhenhai/master ae7210f79d Merge pull request #38277 from Microsoft/jjh/busybox ee74cd777a Skip KernelMemoryTCP if version is less than 1.40 f023816608 Add memory.kernelTCP support for linux ea3ac621e3 Merge pull request #37982 from Microsoft/jjh/archive c7a3c3cd94 Merge pull request #38239 from tiborvass/filters-clone 4a74a46f44 Update roadmap to reflect reality. 56b732058e pkg/archive fixes, and port most unit tests to Windows 14c8b67e51 Windows:Tie busybox to version b466101d43 Fix log output when don't use formatted b0de11cf30 Add test for status code on conflicting service names 0b7cb16dde Merge pull request #38102 from selansen/master 1fea38856a Remove v1.10 migrator 618741ba87 Merge pull request #38171 from ZYecho/fix-multi-images-filter 32180ac0c7 VXLAN UDP Port configuration support This commit contains changes to configure DataPathPort option. By default we use 4789 port number. But this commit will allow user to configure port number during swarm init. DataPathPort can't be modified after swarm init. Signed-off-by: selansen <elango.siva@docker.com> a7ce3140f5 Vendor commit for VXLAN UDP Port configuration support This commit brings Swarmkit and Libnetwork library changes Signed-off-by: selansen <elango.siva@docker.com> 74baf62f4b Merge pull request #38245 from thaJeztah/bump_containerd_v1.2.1 5007c36d71 cli: fix images filter when use multi reference filter c58cd154f5 Merge pull request #38231 from adshmh/bump-swarmkit-tmpfs-exec-option b2d99865ea Add --device support for Windows cf5d4aa1ad Merge pull request #38204 from thaJeztah/check_for_more_ipvs_options 2483e03531 Merge pull request #38238 from tiborvass/fix-38208 e6244aa598 Merge pull request #38226 from tonistiigi/nil-credentials b1d28ee6bb Merge pull request #38244 from tonistiigi/vendor-buildkit 2fb5de68a9 Update containerd to v1.2.1-rc.0 59eacf28d6 filters: add Clone() method 6204eb0645 vendor: update buildkit to v0.3.3 62923f29f5 builder: ignore `label` and `label!` prune filters 369da264ba builder: deprecate prune filter `unused-for` in favor of `until` bce98f9a3e bump swarmkit to bc032e24784ea618044ee438fedec3458abb2ef9 to vendor exec option for tmpfs 68cbc3712c Merge pull request #38168 from crosbymichael/ctd12 04287e4934 Merge pull request #38196 from thaJeztah/fence_default_addr_pools 6c51d0707d Merge pull request #38219 from gowalking/master effb2bd9d2 builder: avoid unset credentials in containerd d13528c635 wip: bump containerd and runc version 7af4c904b3 Bump containerd binary to fix shim hang fc0038a3ed Update runc to 58592df56734acf62e574865fe40b9e53e967910 8674930c84 Update containerd to v1.2.0 287144db42 Merge pull request #38213 from thaJeztah/add_note_about_runc_vendoring 92d545552f Merge pull request #38218 from thaJeztah/fix_default_addr_pools_swagger e6b56ffed7 Merge pull request #38216 from thaJeztah/bump_sys f11b87bfca Merge pull request #37831 from cyphar/apparmor-external-templates 7c5cf58328 Fix a typos in layer_windows.go 2e8c913dbd Add missing default address pool fields to swagger 826da28efa Bump golang.org/x/sys to 90868a75fefd03942536221d7c0e2f84ec62a668 da3810d235 Add a note about updating runc / runc vendoring 44e1c6ce81 Add CONFIG_IP_VS_PROTO_TCP, CONFIG_IP_VS_PROTO_UDP, IP_NF_TARGET_REDIRECT to check-config.sh 7632ccbc66 Ignore default address-pools on API < 1.39 758255791e Merge pull request #38177 from mooncak/fix_duplicate 345d1fd089 Cleanup duplication in daemon files a5e2dd2bb1 Merge pull request #38128 from kolyshkin/runc 13e9563d42 Merge pull request #38123 from thaJeztah/bump_swarmkit 279452fedd Merge pull request #38159 from thaJeztah/bump_toml_0.3.1 1e7c43dfae Merge pull request #38161 from thaJeztah/listen_very_carefully_I_shall_say_this_only_once a7fe1ae2c2 Remove duplicate CONTRIBUTING.md 6b0b9962da Bump BurntSushi/toml to v0.3.1 06a4fd5009 Merge pull request #38141 from thaJeztah/handle_invalid_json bd224b5fe5 Merge pull request #38003 from AkihiroSuda/non-recursive-bind bb1914b195 Merge pull request #38125 from kangp3/add_scheme_override c7b488fbc8 API: properly handle invalid JSON to return a 400 status 2f902930e9 Merge pull request #38143 from thaJeztah/bump_golang_1.11.2 8972aa9350 runc.installer: add nokmem build tag for rhel7 kernel d022271796 Merge pull request #37845 from wk8/wk8/allow_arbitrary_docker_run_flags 335736fb01 Bump runc c21c9b5fad Merge pull request #38053 from tiborvass/bk-fix-filters bfc62bb1f9 Merge pull request #38145 from thaJeztah/bump_containerd_client_only_v1.2.0 596cdffb9f mount: add BindOptions.NonRecursive (API v1.40) 48620057be builder: fix bugs when pruning buildkit cache with filters 12bba16306 Merge pull request #38029 from lifubang/checkpointrm dd7799afd4 update containerd client and dependencies to v1.2.0 e80ee5206e Bump Golang to 1.11.2 22d3946d6c Merge pull request #38117 from cpuguy83/volume_docstrings b092ced7e6 Merge pull request #38122 from mjeromin/38070-go-command-detect 60ec93f7c2 Fix error handling when go command is missing 1124543ca8 seccomp: allow ptrace for 4.8+ kernels 35985ca087 Merge pull request #38133 from thaJeztah/cleanup_volume_tests be17863fb1 Merge pull request #38136 from dnephin/remove-myself-from-codeowners 60db693e48 Remove myself from codeowners of client/** 3fccc47a09 Merge pull request #38127 from kolyshkin/int-fixes e81d84971f Fix some doc strings in the volume package b334198e65 Enable volume tests on Windows 05e18429cf Integration test: use filepath.Join() to make path cross-platform 8e8cac8263 Some improvements to TestVolumesInspect 2ed512c7fa integration-cli/Test*Swarm*: use same args on restart 06afc2d1e6 TestAPISwarmLeaderElection: add some debug 24cbb98971 docker_cli_swarm_test: factor out common code 6016520162 internal/test/daemon: don't leak timers 73baee2dcf integration-cli: fix netns test cleanup 66cb1222d6 docker_cli_swarm_test.go: rm unused arg be2f7ce3ca Add an op func to override Client.scheme 46652b00ad Merge pull request #38120 from thaJeztah/bump_libnetwork be3843c8c8 Bump SwarmKit to 8d8689d5a94ac42406883a4cef89b3a5eaec3d11 87558ad4dd update libnetwork to fix iptables compatibility on debian 104cbc0780 Merge pull request #38115 from thaJeztah/fix_double_scheme 1434204647 Fix double "unix://" scheme in TestInfoAPIWarnings 547f11d84c Merge pull request #38103 from tonistiigi/cluster-grpc-limits 99a7a4dcd0 checkpoint rm fail aea6fdf3d3 Allow to override the Makefile's `DOCKER_MOUNT` variable 4822fb1e24 apparmor: allow receiving of signals from 'docker kill' Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-03-21docker-ce: update to 18.09.3Bruce Ashfield
Updating docker-ce to the latest 18.09 stable release. No significant changes are part of this update. f5e591e815 Merge component 'cli' from git@github.com:docker/cli 18.09 8845519dce Merge pull request #1734 from thaJeztah/18.09_backport_fix_test_for_go_1.12 ea47598cf6 Fix test for Go 1.12.x 70d1935665 Merge component 'engine' from git@github.com:docker/engine 18.09 8238697633 Merge pull request #170 from thaJeztah/18.09_bump_swarmkit 84c971868e Merge component 'cli' from git@github.com:docker/cli 18.09 4e69571cff Merge pull request #1729 from thaJeztah/18.09_backport_e2e_handle_alpine_bump 35a6ca7054 e2e: avoid `usermod -p` by using `useradd`'s `--password` option e0218c5780 e2e: Expand `useradd`'s `-m` otion into `--create-home` ba2b4c0c65 e2e Use `useradd`'s `--shell` option 6064691b74 Merge component 'engine' from git@github.com:docker/engine 18.09 9c47f77927 Merge pull request #169 from thaJeztah/18.09_bump_libnetwork2 4b269555e0 Merge pull request #171 from thaJeztah/18.09_backport_fix_build_session_test b9167a9818 Fix TestBuildWithSession, TestBuildSquashParent using wrong daemon during test 5421245401 [18.09] bump swarmkit to c66ed60822d3fc3bf6e17a505ee79014f449ef05 (bump 18.09) 5e4939ab2b Merge component 'engine' from git@github.com:docker/engine 18.09 465705f78f Merge pull request #164 from thaJeztah/18.09_backport_esc_1090 361573fb13 Merge pull request #166 from thaJeztah/18.09_backport_tarstream_release 6e44ea5ca3 Merge pull request #167 from thaJeztah/18.09_backport_cp_longname 006a8c7333 [18.09] bump libnetwork 4725f2163fb (bump_18.09 branch) ddb553c9c7 pkg/archive:CopyTo(): fix for long dest filename 78d7be4aeb layer/layer_store: ensure NewInputTarStream resources are released afc2d3e1e5 Merge pull request #588 from seemethere/fix_link cfc168b856 Fix link to release notes to be an actual link 53943599d3 Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 18.09 dce2ceb9af Merge pull request #306 from dave-tucker/18.09 dd0e4702ff [TAR-465] Jenkinsfile: Test the correct branch 774a1f4eee Merge pull request #587 from andrewhsu/1809ga d1cde99c16 bump ver 18.09.3 d234d63bd9 Merge component 'cli' from git@github.com:docker/cli 18.09 7e985fdbcc set bigger grpc limit for GetConfigs api eca25928d3 Merge pull request #1694 from thaJeztah/18.09_backport_nolibtool fe586e6b03 Update PKCS11 library 516e0938c4 Merge pull request #586 from andrewhsu/1809rc1 9a547e9803 Merge component 'engine' from git@github.com:docker/engine 18.09 730b7c7c36 Merge pull request #163 from thaJeztah/18.09_backport_busyboxstage2 485445e58c bump ver 18.09.3-rc1 9a1f0b6385 Windows: Bump busybox to v1.1 24d84781fd Merge component 'engine' from git@github.com:docker/engine 18.09 24e88ff12b Merge pull request #153 from thaJeztah/18.09_backport_update_containerd_1.2.4 2a10e07767 Merge component 'engine' from git@github.com:docker/engine 18.09 0fc0fbc929 Update containerd runtime 1.2.4 c5e4f537fe Update runc to 6635b4f (fix CVE-2019-5736) 1f1e19daa1 Revert "Merge pull request #240 from seemethere/bundle_me_up_1809" cdacf38efa Merge pull request #154 from thaJeztah/18.09_backport_fix_stale_container_on_start b8b285ce9b Merge component 'engine' from git@github.com:docker/engine 18.09 878b9f56bf Merge pull request #162 from thaJeztah/18.09_backport_38636_fix_nil_pointer_dereference 8af9b67ca8 Fix nil pointer derefence on failure to connect to containerd fca49318b4 Merge component 'engine' from git@github.com:docker/engine 18.09 893afbfb6f Merge component 'engine' from git@github.com:docker/engine 18.09 c835df1d14 Merge pull request #160 from thaJeztah/18.09_backport_add_missing_char_device_mode 761df7a017 Merge pull request #135 from thaJeztah/18.09_backport_xattr_fix 50e6ee21b3 Merge component 'engine' from git@github.com:docker/engine 18.09 2012f67a6d Merge pull request #143 from thaJeztah/18.09_backport_skip_kmem_tests_on_rhel fb81d8fe00 Merge pull request #158 from thaJeztah/18.09_backport_save_the_environment 1a1a62b3bf Merge pull request #157 from thaJeztah/18.09_backport_fix_test_int 6a5c5805ac Merge pull request #159 from thaJeztah/18.09_backport_even_more_names_redux 811028792b Merge pull request #161 from kolyshkin/18.09-backport-38423 d4fa1ee60f Merge pull request #155 from thaJeztah/18.09_backport_override_validate 0db790cc19 Merge pull request #149 from thaJeztah/18.09_backport_fix_restart c9de39ca94 Disabled these tests on s390x and ppc64le: - TestAPISwarmLeaderElection - TestAPISwarmRaftQuorum - TestSwarmClusterRotateUnlockKey a345ccfd0e Graphdriver: fix "device" mode not being detected if "character-device" bit is set ddcd7c106d Makes a few modifications to the name generator. 125d84fbcf Fix: plugin-tests discarding current environment f3b1a30e52 make test-integration: use correct dockerd binary c14d8be35a hack: no need to git fetch in CI 9eb15371b3 Allow overriding repository and branch in validate scripts 241a2913ec Delete stale containerd object on start failure 9f42d6f4aa Merge component 'engine' from git@github.com:docker/engine 18.09 a6fcb60427 Merge pull request #147 from thaJeztah/18.09_bump_golang_1.10.8 cedb2b83c6 Merge component 'engine' from git@github.com:docker/engine 18.09 f3d6952b68 Merge pull request #150 from thaJeztah/18.09_backport_fix_pkg_archive_xattr_test 735870ea3d Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 18.09 fc58c203b0 Merge pull request #294 from thaJeztah/18.09_backport_start_dockerd_after_containerd 6a2cf28a77 Merge pull request #298 from thaJeztah/18.09_backport_fix_containerd_race_condition 2cb298c22b Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 18.09 93dc56c138 Merge pull request #293 from thaJeztah/18.09_bump_golang_1.10.8 58654c0a23 pkg/archive: fix TestTarUntarWithXattr failure on recent kernel 242fedd184 keep old network ids 4ce3c7be9a Merge branch '18.09' of github.com:docker/docker-ce into 18.09 bd29eaad5a Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 18.09 e1aeaae20a Change back to public forks 24e4136d6c systemd: set --containerd socket patch to prevent race-condition a6dbf1f21f [18.09] Bump Golang 1.10.8 (CVE-2019-6486) 594c0469ed Ignore xattr ENOTSUP errors on copy (fixes #38155) 62479626f2 Merge pull request #475 from andrewhsu/1809ce 408de3fdc3 bump ver 18.09.2 and update changelog 41a97638d5 Merge component 'engine' from git@github.com:docker/ee-engine 18.09-ce 94f8285a9c Merge component 'packaging' from git@github.com:docker/ee-packaging 18.09-ce 3503a4d782 Switch to private forks for now e6c583ac99 Merge pull request #167 from seemethere/req_g_ce 4d35d88be8 Bump containerd.io dep >= 1.2.2-3 (CVE-2019-5736) 4f8ff9b127 Merge pull request #463 from andrewhsu/18.09-ce-tp3 28242bbbd2 bump ver 18.09.2-tp3 71adfb3f74 Merge pull request #240 from seemethere/bundle_me_up_1809 e4931e664f Apply git bundles for CVE-2019-5736 52d14c96c7 Start docker.service after containerd.service 58fb11cbab Merge component 'cli' from git@github.com:docker/cli 18.09 22e12bdcfc Merge pull request #1634 from thaJeztah/18.09_bump_golang_1.10.8 37fd1a0d0a [18.09] Bump Golang 1.10.8 (CVE-2019-6486) 1f467bcdc6 [18.09] Bump Golang 1.10.8 (CVE-2019-6486) 4c52b901c6 Merge pull request #581 from seemethere/bump_v 6caccb221d Merge component 'engine' from git@github.com:docker/engine 18.09 006734c577 If url includes scheme, urlPath will drop hostname, which would not match the auth check 0b021f6648 Authz plugin security fixes for 0-length content and path validation Signed-off-by: Jameson Hyde <jameson.hyde@docker.com> 91c5fffc4b Bump version to 18.09.1 5110db8f4f Merge component 'engine' from git@github.com:docker/engine 18.09 6cab4a9c3e Merge pull request #144 from thaJeztah/18.09_backport_bump_containerd_v1.2.2 2a881442fb Bump containerd to v1.2.2 f2977c7888 Skip kernel-memory tests on RHEL/CentOS daemons d5a7bda9e8 Merge component 'engine' from git@github.com:docker/engine 18.09 06f6e415e9 Merge pull request #142 from docker/revert-130-18.09_backport_fix_api_return_code 8c0e7ea89c Revert "[18.09 backport] API: fix status code on conflicting service names" 2e95726fa5 Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 18.09 ded83fc61b Merge pull request #286 from paddy-hack/restore-sysvinit-and-upstart-support ffc8511d04 Restore SysVinit and Upstart support 2df4905f67 Merge component 'cli' from git@github.com:docker/cli 18.09 c6a63b52bb Merge pull request #1580 from thaJeztah/18.09_backport_e2e-invocation-nit 8053e79119 Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 18.09 9da07880a0 Merge pull request #284 from thaJeztah/18.09_backport_cli_does_not_obsolete_selinux_and_engine 2b827d4782 Remove obsolete "selinux" and "engine" packages from CLI rpm f5e87b54df Merge component 'engine' from git@github.com:docker/engine 18.09 7e7a37e63e e2e: assign a default value of 0 to `DOCKERD_EXPERIMENTAL` 130caf6e0e connhelper: add e2e b274d87a12 Merge pull request #140 from andrewhsu/d dba1b4aeda libcontainerd: prevent exec delete locking b00fb7cf05 Revert "Propagate context to exec delete" af73095ae2 Merge component 'engine' from git@github.com:docker/engine 18.09 9f8d1a9995 Merge pull request #139 from andrewhsu/ctxt 4f1cf45af7 Merge pull request #138 from andrewhsu/cont b60801e6d4 Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 18.09 2eaec5333d Merge component 'engine' from git@github.com:docker/engine 18.09 3898ef4957 Merge component 'cli' from git@github.com:docker/cli 18.09 95c87c410e Merge pull request #137 from thaJeztah/18.09_bump_golang_1.10.6 f72ff31415 Propagate context to exec delete e775f2a03d Update containerd to aa5e000c963756778ab3ebd1a12c6 2f72f4ef3e Merge pull request #282 from seemethere/1_10_6_backport fe860b72c7 Merge pull request #1575 from thaJeztah/bump_golang_1.10.6 c86a836fc4 Bump Golang 1.10.6 (CVE-2018-16875) 2b2dcff273 bump to golang 1.10.6 3e105499c9 Bump Golang 1.10.6 (CVE-2018-16875) 7dd1629b20 Merge component 'engine' from git@github.com:docker/engine 18.09 29b8f24be7 Merge component 'cli' from git@github.com:docker/cli 18.09 35ae1fc05c Merge pull request #130 from thaJeztah/18.09_backport_fix_api_return_code fbe190c787 Merge pull request #132 from thaJeztah/18.09_backport_idprefix ed161fafa9 Merge pull request #136 from thaJeztah/18.09_backport_fix_panic 6e20a0f6df Merge pull request #1567 from thaJeztah/18.09_backport_fix_panic_on_update 055b2b5a9f Fix panic (npe) when updating service limits/reservations 79cbff3cd3 registry: use len(via)!=0 instead of via!=nil 6021a0fde8 Merge component 'engine' from git@github.com:docker/engine 18.09 c8cccde1d5 Merge pull request #133 from thaJeztah/18.09_backport_fix_ipam_swagger 36f2444328 Swagger: fix definition of IPAM driver options 50be23f5a1 fixes display text in Multiple IDs found with provided prefix 6176e25a23 Merge component 'engine' from git@github.com:docker/engine 18.09 b412443ed2 Merge pull request #131 from tonistiigi/1809-update-buildkit aafd3c7cec Merge pull request #129 from thaJeztah/18.09_backport_bump_containerd_vendoring e27956be04 vendor: update buildkit to d9f75920 6155a653aa Add test for status code on conflicting service names c99df606e6 Update swarmkit to return correct error-codes on conflicting names 3342cdc4ba Merge component 'cli' from git@github.com:docker/cli 18.09 6290aed85c Merge pull request #1554 from thaJeztah/18.09_backport_completion-import--platform 4dce161c07 Merge pull request #1553 from thaJeztah/18.09_backport_completion-log-driver-local 0464f48da5 Merge component 'cli' from git@github.com:docker/cli 18.09 0cbda9f762 Add bash completion for `import --platform` f0885d1fab Add bash completion for "local" log driver 72b3a61238 Merge pull request #1552 from thaJeztah/18.09_backport_fix_filter_panic c9df8f4688 use empty string as cgroup path to grab first find 42b5bd7c0f vndr libnetwork to adjust for updated runc 9f0f7c271c update containerd to v1.2.1 75d17684b1 Merge component 'engine' from git@github.com:docker/engine 18.09 1a759e5769 Fix panic when pruning images with label-filter c19e3d0b29 Merge pull request #128 from thaJeztah/18.09_backport_containerd_v1.2.1-GA 37a56d2599 update just installer of containerd to 1.2.1 bca00687d8 Merge pull request #571 from andrewhsu/rc1 fe0ed1581f bump ver 18.09.1-rc1 and update changelog 7bdb3c6b87 Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 18.09 66c694875f Merge pull request #280 from thaJeztah/18.09_backport_remove_spec 89559b9c3c Remove unused spec files 74239bfbe1 Merge pull request #570 from andrewhsu/b2 24b031ea42 Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 18.09 64e00cdf94 Merge component 'engine' from git@github.com:docker/engine 18.09 6d1bca6a6c Merge component 'cli' from git@github.com:docker/cli 18.09 129720636e bump ver 18.09.1-beta2 dce40a7ca6 Merge pull request #279 from andrewhsu/golang 11442eb1e7 bump golang to 1.10.5 679c1150b8 Merge pull request #126 from thaJeztah/18.09_backport_mask_asound 66abfda9b2 Merge pull request #1542 from thaJeztah/18.09_backport_completion_cli_experimental 46a88fbe88 Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 18.09 5efaa09256 Merge pull request #276 from andrewhsu/sock 9b0d684d7f Add docker.socket requirement for docker.service ffd5999784 Merge pull request #260 from thaJeztah/18.09_remove_telemetry_remnants d3184b7576 Merge pull request #569 from andrewhsu/b1 c5d1399959 Merge component 'engine' from git@github.com:docker/engine 18.09 23a01f3126 bump ver 18.09.1-beta1 e04edd81d4 Merge component 'cli' from git@github.com:docker/cli 18.09 be73976052 Merge pull request #1544 from thaJeztah/18.09_bump_go_to_1.10.5 3948a779cf Merge pull request #123 from tonistiigi/1809-builder-net 0e511427f5 Merge pull request #127 from thaJeztah/18.09_bump_go_to_1.10.5 5c9b82e262 Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 18.09 9ff11286df Bump Go to 1.10.5 4fa2dbdf38 Merge pull request #274 from seemethere/1809_sockles 8293f65feb Add socket activation for RHEL based distributions 67db4a25e1 Bump Go to 1.10.5 b15b31936b Masked /proc/asound 3fe8afdba7 Merge component 'engine' from git@github.com:docker/engine 18.09 498e20e77e Merge pull request #125 from thaJeztah/18.09_backport_busybox 613f303049 Windows:Tie busybox to version c2d6f2e82b Merge component 'cli' from git@github.com:docker/cli 18.09 da117f6859 Merge pull request #1540 from thaJeztah/18.09_backport_fix_flags_in_usage 6709623942 builder: delete sandbox in a goroutine for performance 71605fc317 builder: set externalkey option for faster hook processing 280488aa00 Add bash completion for `manifest` command family 42fbd93961 Add support for experimental cli features to bash completion 13b7f9fef8 Refactor usage of `docker version` in bash completion 5cd594924c Fix yamldocs outputing `[flags]` in usage output 8273d9a9de Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 18.09 b766ec9947 Merge pull request #269 from thaJeztah/18.09_backport_dont_require_containerd c9bd8ec5c6 Merge pull request #263 from thaJeztah/18.09_backport_compat 9c47bb0899 Remove containerd dependency from CLI 74513be78c Merge pull request #267 from thaJeztah/18.09_restore_requires 1355f268ee Merge pull request #266 from thaJeztah/18.09_add_seccomp_dependency 60a25b4d26 Add back requirements that were removed in the migration 85e1aa53ce Add libseccomp requirement for rpm packages 99e4130444 Change replaces/breaks to have compat with nightly b8014b87d1 Remove remnants from telemetry plugin from Fedora 27, 28 3b44842574 Merge component 'engine' from git@github.com:docker/engine 18.09 d8014103b9 Merge component 'cli' from git@github.com:docker/cli 18.09 7e016c5a84 Merge pull request #81 from thaJeztah/18.09_backport_processandiot 06d25f9c17 Merge pull request #85 from thaJeztah/18.09_backport_deprecated_storagedrivers 2eb0feaf2d Merge pull request #107 from thaJeztah/18.09_backport_bump_libnetwork ed2630b559 Merge pull request #110 from thaJeztah/18.09_backport_handle_invalid_json 1e216e2ec4 Merge pull request #112 from thaJeztah/18.09_backport_moby_37747 bf3a1002a3 Merge pull request #113 from thaJeztah/18.09_backport_detach 4d5ef4f441 Merge pull request #114 from thaJeztah/18.09_backport_limit_client_readall 62511b1be7 Merge pull request #116 from thaJeztah/18.09_backport_apparmor_external_templates 4dfe418aab Merge pull request #118 from thaJeztah/18.09_backport_fence_default_addr_pools 34a9d0e6de Merge pull request #119 from thaJeztah/18.09_backport_fix_default_addr_pools_swagger cbd6c39e45 Merge pull request #120 from thaJeztah/18.09_backport_check_for_more_ipvs_options 6947813afd Merge pull request #1454 from thaJeztah/18.09_backport_defaulttcpschema f10a3615ef Merge pull request #121 from thaJeztah/18.09_backport_containerd_v1.2.1 09cf4efc43 Merge component 'engine' from git@github.com:docker/engine 18.09 4ad68f7ef8 Merge component 'cli' from git@github.com:docker/cli 18.09 b213b03c69 Merge pull request #1532 from tiborvass/18.09-fix-system-prune-filters aae62fd361 Merge pull request #122 from tonistiigi/buildkit-18091 5e2e842819 Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 18.09 959e3a80b6 Merge pull request #254 from thaJeztah/18.09_backport_remove_old_distros c79dceaf6e Merge component 'engine' from git@github.com:docker/engine 18.09 71bb7e098b vendor: update buildkit to v0.3.3 54654abf3a builder: avoid unset credentials in containerd 079995778e builder: ignore `label` and `label!` prune filters fd572d6e86 builder: deprecate prune filter `unused-for` in favor of `until` 0b06dc8581 prune: move image pruning before build cache pruning 2aed2152c7 Merge pull request #84 from thaJeztah/18.09_backport_ovr2_index 78dccb265d Ignore default address-pools on API < 1.39 66a497c4f1 apparmor: allow receiving of signals from 'docker kill' 9baf0f2b61 Update containerd to v1.2.1-rc.0 9a2dacb99c wip: bump containerd and runc version 309dc64b35 Bump containerd binary to fix shim hang 1372540bda Update runc to 58592df56734acf62e574865fe40b9e53e967910 d9478a175e Update containerd to v1.2.0 d1211604a7 Add a note about updating runc / runc vendoring 4056fb2fc0 Update containerd to v1.1.4 fd1e90db5d Merge component 'cli' from git@github.com:docker/cli 18.09 a788be9103 Merge pull request #1531 from thaJeztah/18.09_backport_builder_docs 4f11099b2c Merge component 'cli' from git@github.com:docker/cli 18.09 30082f9418 buildkit reference docs f36ca54c74 Documenting ENTRYPOINT can empty value of CMD 3489e73a84 Merge pull request #1530 from thaJeztah/18.09_backport_add_logging_driver_example a01ddfe92a Update daemon.json example to show that log-opts must be a string bab6ed741c Merge component 'cli' from git@github.com:docker/cli 18.09 d437d33fc8 Merge pull request #1526 from thaJeztah/18.09_backport_completion_fix_service__force 2fbaf4d74c Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 18.09 1703e794fe Merge pull request #258 from seemethere/sockittome 72b2e41948 Fix bash completion for `service update --force` bcbad46784 Add CONFIG_IP_VS_PROTO_TCP, CONFIG_IP_VS_PROTO_UDP, IP_NF_TARGET_REDIRECT to check-config.sh 87524aec57 Add missing default address pool fields to swagger 8fc20c5a25 Add the docker.socket back in 8e430bdb17 Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 18.09 7429544e27 Merge component 'engine' from git@github.com:docker/engine 18.09 1ece4fbc13 Merge pull request #255 from thaJeztah/18.09_backport_cosmic 497150a448 Merge pull request #256 from thaJeztah/18.09_backport_fedora29 72b50c8f3c Merge pull request #109 from thaJeztah/18.09_backport_cleanup_volume_tests 40c17e0f1b Merge pull request #103 from thaJeztah/18.09_backport_fix_double_scheme a4d9985c38 runc.installer: add nokmem build tag for rhel7 kernel fd839bc749 Bump runc c539968eac client: use io.LimitedReader for reading HTTP error 825b77191a Windows: DetachVhd attempt in cleanup 6ad9059d36 awslogs: account for UTF-8 normalization in limits 3cd1faba5a API: properly handle invalid JSON to return a 400 status 2ccb209d78 Enable volume tests on Windows 7f84ab28cd Integration test: use filepath.Join() to make path cross-platform 0356a45a1c Some improvements to TestVolumesInspect a5a251a531 Renamed windowsRS1.ps1 to windows.ps1 36fc33af11 Enabling Windows integration tests 171a95c777 Windows: Start of enabling tests under integration/ 4d60db472b Merge pull request #568 from andrewhsu/ga 255b96feb8 added link to official release notes page f2343d1f79 bump ver 18.09.0 and update changelog aba1f6009c Merge pull request #567 from thaJeztah/18.09_fixup_changelog a725999adf Merge component 'engine' from git@github.com:docker/engine 18.09 97ead3de83 Merge pull request #74 from thaJeztah/18.09_backport_no_more_version_mismatch 26724923df Merge pull request #79 from thaJeztah/18.09_backport_bugfix_issue_37870 9e9298ef28 Merge pull request #108 from tonistiigi/copy-0.1.9 a1a6612bf9 Merge pull request #96 from thaJeztah/18.09_backport_fix-duplicate-release a78fdada01 builder: update copy to 0.1.9 550a02aa99 Merge pull request #105 from tiborvass/18.09-bk-fix-filters e2c5b23d49 [18.09 backport] update libnetwork to fix iptables compatibility on debian 90250502de update containerd client and dependencies to v1.2.0 02673c7372 bump up runc 3d605988c4 Vendor Microsoft/hcsshim @ v0.7.9 cd9d72e185 LCOW: ApplyDiff() use tar2ext4, not SVM 0c72992e43 builder: fix bugs when pruning buildkit cache with filters ac4c86d93f Fix typo in changelog 81daf7f4fb Fix double "unix://" scheme in TestInfoAPIWarnings 3cf3a6d8dd Add initial scripts for Fedora 29 c42096eff2 Add initial scripts for Ubuntu Cosmic (18.10) 8d9b4f4fd9 README: remove Ubuntu 17.10 "Artful" 6c2e70dfb4 Remove Ubuntu 14.04 "trusty tahr" build scripts 4944d0221b Remove build scripts for Debian 8 "Jessie" 5955459088 README: Remove mention of Debian 7 Wheezy ea7e1c4aaa builder: fix duplicate mount release b8f9cfd066 testing: add case for exec closeStdin 36aa32ea5b add test case TestNewAPIClientFromFlagsForDefaultSchema cbcb491714 set default schema to tcp for docker host 09de879e7a Deprecate legacy overlay storage driver, and add warning b1f3714ba1 Deprecate "devicemapper" storage driver, and add warning f3d391be68 overlay2: use index=off if possible c38ae153e0 overlay2: use global logger instance 4a29152cb9 Windows:Allow process isolation ddba35eade bugfix: wait for stdin creation before CloseIO dd03cc8be5 Remove version-checks for containerd and runc Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-03-20irqbalance: uprev to v1.5.0Hongzhi.Song
Signed-off-by: Hongzhi.Song <hongzhi.song@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-03-20docker: Set the same COMPATIBLE_HOST as containerd-opencontainers.Robert Yang
It depends on virtual/containerd which is provided by containerd-opencontainers, so set the same COMPATIBLE_HOST as the last one. Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-03-20notary: uprev to v0.6.1Hongzhi.Song
Signed-off-by: Hongzhi.Song <hongzhi.song@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-03-20netns: change build target to 'build' instead of 'static'Mark Asselstine
Attempting to build for x86-64 will result in an error: cannot find package runtime/cgo (using -importcfg) ...go/pkg/tool/linux_amd64/link: cannot open file : open : no such file or directory As a workaround we switch the build target to 'build' which results in a slightly smaller executable but does mean that several dynamic libraries are required to run the generated executable. This shouldn't be a problem as the build system will ensure the libraries are present on images where the executable will be included. This change only means the executable can't be copied as a single entity to a different machine and run. We do also patch the Makefile to allow the 'static' target to build successfully and in the patch commit log we describe the issue in full (at least in as much detail as we currently have on the issue). But since the issue isn't fully understood we don't recommend the 'static' build to be used at this time, thus default to the 'build' target. Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-03-20libvirt: place the qemu configure option to PACKAGECONFIGDengke Du
If we build libvirt with mips64 arch will fail that was not compatible with, so place the qemu configure options to PACKAGECONFIG, let the PACKAGECONFIG control the build options. qemu is in the default PACKAGECONFIG, so we are not changing the build for non-mips architectures. Signed-off-by: Dengke Du <dengke.du@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-03-18kernel: add 5.0 bbappendBruce Ashfield
Althought the bbappends are currently empty, lets stick with the versioned (versus wildcard) bbappend. They serve as an explicit reference to which kernels have been tested with meta-virt Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-03-17nagios-core: uprev to v4.4.3Hongzhi.Song
Signed-off-by: Hongzhi.Song <hongzhi.song@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-03-17nagios-nsca: uprev to v2.9.2Hongzhi.Song
Signed-off-by: Hongzhi.Song <hongzhi.song@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-03-17lxc: Correct CONFIG_CGROUP_NET_PRIO settingHe Zhe
Since af6363374cbd ("cgroup: make CONFIG_CGROUP_NET_PRIO bool and drop unnecessary init_netclassid_cgroup()"), CONFIG_CGROUP_NET_PRIO has become a bool option. Forcedly setting it to "m" would end up with "n". Change it to "y" here. Signed-off-by: He Zhe <zhe.he@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-03-17ceph: upgrade to 14.1.0Dengke Du
1. set the cross compile sysroot to find the rocksdb library 2. correct the install path for library in Distutils.cmake Signed-off-by: Dengke Du <dengke.du@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-03-08python-docker: depend on python-misc for the ntpath moduleDan Callaghan
Signed-off-by: Dan Callaghan <dan.callaghan@opengear.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-03-05docker-distribution: uprev to v2.7.1Hongzhi.Song
Signed-off-by: Hongzhi.Song <hongzhi.song@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-03-01libvirt: add hook supportDengke Du
1. Add a hook support script for libvirt Add daemon, qemu, lxc and network script when the correspond to libvirt daemon, qemu guest, lxc guest and network started or stoped, based on: https://libvirt.org/hooks.html 2. Add a qemu user and a qemu group and a kvm group Signed-off-by: Dengke Du <dengke.du@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-03-01criu: fix host gcc can't recognized option -fmacro-prefix-mapDengke Du
Generally, our host gcc version below 8.0, but cross toolchain in yocto above 8.0, now 8.3, the option "macro-prefix-map" coming from 8.0, so if the host gcc below 8.0, it can't unrecognized the option "macro-prefix-map". In criu source code, the HOSTCFLAGS coming from CFLAGS: https://github.com/checkpoint-restore/criu/blob/criu-dev/Makefile#L17 In yocto project, the CFLAGS coming from the cross toolchain, containing the "-fmacro-prefix-map" default, so we should use the BUILD_CFLAGS, it contains the flags that used for host building. Signed-off-by: Dengke Du <dengke.du@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-02-27containers: introduce sample/reference container-base image typeBruce Ashfield
container-base is a sample/reference image type that uses the newly integrated image-oci image type to directly create OCI compatible images from a build. This image type can be inherited and extended to implement more complex container types, with modified image configurations. It is inspired by / based off the samples in the presentation done by Scott Murray (Building Container Images with OpenEmbedded and the Yocto Project) at ELCe 2018. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-02-27containers: introduce image-ociBruce Ashfield
This image class creates an oci image spec directory from a generated rootfs. The contents of the rootfs do not matter (i.e. they need not be container optimized), but by using the container image type and small footprint images, we can create directly executable container images. Once the tarball (or oci image directory) has been created of the OCI image, it can be manipulated by standard tools. For example, to create a runtime bundle from the oci image, the following can be done: Assuming the image name is "container-base": If the oci image was a tarball, extract it (skip, if a directory is being directly used) % tar xvf container-base-<arch>-<stamp>.rootfs-oci-latest-x86_64-linux.oci-image.tar And then create the bundle: % oci-image-tool create --ref name=latest container-base-<arch>-<stamp>.rootfs-oci container-base-oci-bundle Or to copy (push) the oci image to a docker registry, skopeo can be used (vary the tag based on the created oci image: % skopeo copy --dest-creds <username>:<password> oci:container-base-<arch>-<stamp>:latest docker://zeddii/container-base The following image variables are available to customize the details of the constructed image (defaults as shown): OCI_IMAGE_AUTHOR ?= "${PATCH_GIT_USER_NAME}" OCI_IMAGE_AUTHOR_EMAIL ?= "${PATCH_GIT_USER_EMAIL}" OCI_IMAGE_TAG ?= "latest" OCI_IMAGE_RUNTIME_UID ?= "" OCI_IMAGE_ARCH ?= "${TARGET_ARCH}" OCI_IMAGE_SUBARCH ?= "${@oci_map_subarch(d.getVar('TARGET_ARCH'), d.getVar('TUNE_FEATURES'), d)}" OCI_IMAGE_ENTRYPOINT ?= "sh" OCI_IMAGE_ENTRYPOINT_ARGS ?= "" OCI_IMAGE_WORKINGDIR ?= "" //List of ports to expose from a container running this image: //PORT[/PROT] // format: <port>/tcp, <port>/udp, or <port> (same as <port>/tcp). OICI_IMAGE_PORTS ?= "" // key=value list of labels OCI_IMAGE_LABELS ?= "" // key=value list of environment variables OCI_IMAGE_ENV_VARS ?= "" Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-02-27containers: introduce sloci for generating OCI image directoriesBruce Ashfield
There are multiple different tools/techniques to generate OCI images. Many of these techniques are part of more complex workflows, or have many options that are needed as part of a larger system or are needed to provide flexibility in the tooling (i.e. they construct the container as well as build the OCI image, or they can push directly to a registry, etc). What we want within the build context of bitbake/oe is to not duplicate work that is done by bitbake, the other image bbclasses or the runtime part of the ecosystem. This means only the construction of an image-spec v1.x image without dependencies on build, or execution of the container within a tool. We'd also like the tool to not pull in multiple, unused dependencies that must be built native/native-sdk, etc, to support the simple use case. The requirements above exclude (for now) tools such as skopeo, umoci, buildah, img, orca-build, kaniko, scratchbuild, etc. Leading us to a from-scratch implementation .. or enter sloci-image. sloci-image is a simple CLI for packing a rootfs into a single layer OCI image. It can easily be extended, or ported to other language implementations in the future. But it brings nearly no native dependencies and is a pure/clean implementation of the image spec that integrates nicely in an oe/bitbake environment. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-02-21ipxe: Uprev and fix host compiler and linker flags.Christopher Clark
Adds patch to fix detection of the "no-pie" vs "nopie" flag, which needs to be performed for both the host and target compilers; cannot assume that one works for the other. Use EXTRA_HOST_CFLAGS and EXTRA_HOST_LDFLAGS variables for passing the host tool build parameters: BUILD_CFLAGS and BUILD_LDFLAGS. Drop unneeded 'NO_WERROR=1' from the recipe and rewrap line. Uprev commit to latest git revision. Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-02-21lxc: remove perl-module-warnings-register from RDEPENDSOleksandr Kravchuk
This module is part of the perl package now and is shipped by default. Signed-off-by: Oleksandr Kravchuk <oleksandr.kravchuk@pelagicore.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-02-15runc: address CVE-2019-5736Stefan Agner
Use git hash which addresses CVE-2019-5736. Use the same git hash used in top of Docker 18.09 branch. Changes in runc since 6635b4f0 merge branch 'cve-2019-5736' 0a8e4117 nsenter: clone /proc/self/exe to avoid exposing host binary to container dd023c45 merge branch 'pr-1972' Fixes: CVE-2019-5736 Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-02-15containerd: update to v1.2.4Bruce Ashfield
Updating containerd to 1.2.4 (and switching to the release branch for our git hash). The following commits are in this update: e6b3f563 Merge pull request #3002 from estesp/prepare-1.2.4-release 5d1443dc Prepare v1.2.4 release 2095626c Merge pull request #3014 from thaJeztah/1.2_bump_cri 78286104 Merge pull request #3013 from thaJeztah/1.2_backport_windows_changes 3cbdf9e4 [release/1.2] update containerd/cri to da0c016c830b2ea97fd1d737c49a568a816bf964 dfa19e59 Windows:NewDirectIOFromFIFOSet 84a14ae0 Update runhcs options to include CRI Sandbox support 6a8198b0 Forward ctr.exe --debug as io.containerd.runhcs.v1 options d40cc95f Implement io.containerd.runhcs.v1 shim log opts 30ca1c55 Add io.containerd.runhcs.v1 shim proto options 7908802c Fix Makefile to run protobuild on paths with spaces 583472f6 Merge pull request #2998 from thaJeztah/1.2_backport_bump_runc_cve_2019-5736 b4bf3e34 Update runc to 6635b4f0c6af3810594d2770f662f34ddc15b40d (CVE-2019-5736) 74133fa4 Merge pull request #2995 from thaJeztah/1.2_backport_remove_normalize_image_ref ed756ffd Use distribution's reference.ParseDockerRef 2fb38236 Bump github.com/docker/distribution to 0d3efadf0154c2b8a4e7b6621fff9809655cc580 7f5f1176 Merge pull request #2974 from ehazlett/release-v1.2.3 7216861d Update for 1.2.3 release 5de147d9 Merge pull request #2984 from Random-Liu/update-cri-release-1.2 f7ac34e3 Update cri plugin to c3cf754321fc38c6af5dfd2552fdde0ad192b31d. 0137339c Merge pull request #2977 from crosbymichael/io-panic 7daf0804 Fix potential containerd panic. 2fd20f11 Merge pull request #2972 from crosbymichael/exec-lock 5730c500 Add a separate lock for pid. b9b7ef32 Revert "use state machine management for exec.Pid()" dba2e5e5 Merge pull request #2965 from fuweid/remove-noop 9b6a318a metadata/gc: remove the noop-loop for snapshot reference d86a73a4 Merge pull request #2946 from fuweid/platformruntime dd29d5c3 Merge pull request #2947 from fuweid/pull-oct a0b4da71 bugfix: support application/octet-stream during pull b4d38c0f runtime: add Add/Delete method in PlatformRuntime interface af900154 Merge pull request #2955 from Random-Liu/cherrypick-#2944-release-1.2 ab2cf013 Use context.Background for `O_NONBLOCK` `OpenFifo`. fa60b5be Merge pull request #2953 from thaJeztah/1.2_backport_fix_xattr 2244a20c fix: SCHILY.xattrs should be SCHILY.xattr 8c9ede4f Merge pull request #2950 from crosbymichael/lint-release bf3c932a [release 1.2] fix: linter issue 5c38d942 Merge pull request #2932 from AkihiroSuda/runc20190115-1.2 32f10c77 bump up runc 97548718 Merge pull request #2917 from dmcgowan/release-1.2.2 ef637041 Update for 1.2.2 release 4bb2b0c3 Merge pull request #2912 from Random-Liu/update-cri-release-1.2 f30fd023 Update cri to 0d5cabd006cb5319dc965046067b8432d9fa5ef8 (branch release/1.2). 46e63338 Merge pull request #2893 from thaJeztah/1.2_revert_temp_golang_fix e71a191f Revert "Fix CI due to Golang 1.10.6 / 1.11.3 regressions (workaround)" aa5e000c Merge pull request #2878 from andrewhsu/backport-1.2-fifo-timeout 31be8649 Merge pull request #2881 from thaJeztah/1.2_backport_fix_ci_golang_1.11 27c6449c Fix CI due to Golang 1.10.6 / 1.11.3 regressions (workaround) 18f57e20 Add timeout and cancel to shim fifo open 9b32062d Merge pull request #2852 from dmcgowan/prepare-1.2.1 51134077 Update version to 1.2.1 dcc47ddd Merge pull request #2861 from dmcgowan/cherrypick-1.2-2857 4c327b8e Update runc to 96ec2177ae841256168fcf76954f7177af b65a1137 Merge pull request #2860 from Random-Liu/update-cri-release-1.2 18e453e4 Update release note. 586807a8 Update cri plugin to 0ca1e3c2b73b5c38e72f29bb76338d0078b23d6c. 4b284fa3 Merge pull request #2856 from Random-Liu/cherrypick-#2854-release-1.2 b413e843 Kill should still work in stopped state. a06cddc2 Merge pull request #2845 from nnttmm/backport_2826 176a5621 Merge pull request #2842 from thaJeztah/1.2_backport_update_runc_1.0-rc6 8dc87dd8 Merge pull request #2847 from thaJeztah/1.2_backport_mask_asound 703786c5 Add /proc/asound to masked paths c42c8952 use state machine management for exec.Pid() 93d5b4b0 Update runc to v1.0.0-rc6 de1f167a Merge pull request #2819 from dmcgowan/prepare-1.2.1-rc 27d72ba7 Update version e3840cce Add 1.2.1 release notes 940c0c06 Merge pull request #2817 from Random-Liu/cherrypick-2811-release-1.2 4598ec21 Lock `KillAll`. e429785c Merge pull request #2815 from thaJeztah/1.2_backport_shimlockwhenstdinclose 9be591e4 Merge pull request #2803 from crosbymichael/cherry-proc-lock 309973ed Merge pull request #2801 from crosbymichael/cherry-runc e4c49d70 Update runc to 10d38b660a77168360df3522881e2dc2be cd83a4e0 fix pipe in broken may cause shim lock forever for runtime v1 275f99fe fix pipe in broken may cause shim lock forever for runtime v2 39cd8634 Merge pull request #2795 from estesp/cherrypick-optimize-shim-lock 3afc3f14 Merge pull request #2796 from estesp/cherrypick-exit-ch-buffers f9323ca9 Revert v2 dropped events 4c72befe Fix process locking and state management 14dc3078 Partially revert the event discard change in #2748. 417d6941 Increase reaper buffer size and non-blocking send 7ef5285b optimize shim lock in runtime v1 040e73fd Merge pull request #2792 from estesp/cherrypick-update-hcsshim-vendor c4a256d3 Merge pull request #2790 from estesp/cherrypick-v1v2-runtime-fix 73758765 Temp: add appveyor enablement for release/1.2 branch 090e3e98 Revendor github.com/Microsoft/hcsshim 046b6c6d enhance: update v1/v2 runtime 7ff9f681 Merge pull request #2784 from Random-Liu/update-cri-release-1.2 54895c0b Update cri to 2bb57d27203d82fc79c496aea724aec593b2705a. cd0ecb78 Merge pull request #2779 from thaJeztah/1.2_backport_ignore_modprobe_failures c4acd17e Ignore modprobe failures in ExecStartPre (systemd unit) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-02-14ceph: disable ccacheDengke Du
When enable ccache for ceph, error occurs: ----------------------------------------------------- ccache: invalid option -- 'E' ... Unable to determine C++ standard library, got . ----------------------------------------------------- This is because variable "CXX_STDLIB" was null in CMakeLists.txt line: 637, The "CXX_STDLIB" come from: ----------------------------------------------------- execute_process( COMMAND ./librarytest.sh ${CMAKE_CXX_COMPILER} ${CMAKE_CXX_FLAGS} WORKING_DIRECTORY ${CMAKE_SOURCE_DIR} OUTPUT_VARIABLE CXX_STDLIB ) ----------------------------------------------------- The script librarytest.sh in ceph accept argument: compile and flags, but when enable ccache, the compile replace by ccache, so that script failed. So we disable ccache for ceph now. Signed-off-by: Dengke Du <dengke.du@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-02-11docker: Move /etc/docker to a symlink to volatilesTom Rini
The only thing which docker uses /etc/docker for is a TLS key for connecting with other TLS-enabled services. Make /etc/docker a symlink to the existing docker volatiles directory so that we can use docker on a read-only rootfs. Signed-off-by: Tom Rini <trini@konsulko.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-02-11runc: update to 1.0.0-rc6Bruce Ashfield
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>