aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
2022-04-26containerd-opencontainers: add CVE_VERSION settinghardknottChen Qi
The NVD database uses version without a prefixing 'v' for containerd. e.g. https://nvd.nist.gov/vuln/detail/CVE-2022-23648 So we need to explictly set CVE_VERSION. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-04-20containerd-opencontainers: bump to v1.4.13Chen Qi
Bump from v1.4.12 to v.1.4.13, which solves CVE-2022-23648. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-04-13libvirt: fix CVE-2022-0897Changqing Li
Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-03-24xen-tools: Load xen related kernel modules during system bootKamil Dziezyk
This patch changes the location of xen.conf file, that contains list of kernel modules to be loaded during system boot, to "${nonarch_libdir}". This is done by removing '--with-systemd-modules-load=' flag from EXTRA_OECONF variable. Previous path based on "${systemd_unitdir}" was not considered by default by systemd-modules-load.service. Reviewed-by: Bertrand Marquis <bertrand.marquis@arm.com> Acked-by: Christopher Clark <christopher.w.clark@gmail.com> Signed-off-by: Kamil Dziezyk <kamil.dziezyk@arm.com> [BA context adjusted for overrides syntax] Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-02-04libvirt: fix CVE-2021-3975Changqing Li
Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-02-04openvswitch: uprev from v2.15.0 to v2.15.3He Zhe
Drop the following backported patch. 0001-ofp-actions-Fix-use-after-free-while-decoding-RAW_EN.patch commits short logs: e4d2df62e (tag: v2.15.3) Set release date for 2.15.3. b8baa1141 python: Add cooperative_yield() API method to Idl. 7834abc66 ofproto-dpif-xlate: Snoop ingress packets and update neigh cache if needed. 833c02daa tnl-neigh-cache: Do not refresh the entry while revalidating. e2182eca8 tnl-neigh-cache: Include expected array sizes in prototypes. 566fe4372 tnl-neigh-cache: Read/write expires atomically. d477f6000 compat: handle NF_REPEAT error on nf_conntrack_in. 0590e8838 flow: Consider dataofs when parsing TCP packets. 7266042d8 tests/flowgen: Fix packet data endianness. d2e0632db ofproto: Fix resource usage explosion due to removal of large number of flows. 0a7e66e37 ofproto: Fix resource usage explosion while processing bundled FLOW_MOD. 68466efed tests/flowgen: Fix length field of 802.2 data link header. 2a2185f9e ovs-lib: Backup and remove existing DB when joining cluster. fcbc29c6f docs/dpdk: Fix install doc. a5d97d420 ovs-save: Save igmp flows in ofp_parse syntax. 1cbd1f0f5 faq: Update OVS/DPDK version table for OVS 2.13/2.14. 01bc910e5 ofproto-dpif-xlate: Fix check_pkt_larger incomplete translation. 08a270dda datapath-windows: Reset flow key after Ipv4 fragments are reassembled eca2d50d4 datapath-windows:Reset PseudoChecksum value only for TX direction offload case 031cf67e0 netdev-offload-tc: Verify the flower rule installed. 952e85150 ci: Make linux-prepare trust system installs. 2cf63851a Prepare for 2.15.3. 63f9a7c5d (tag: v2.15.2) Set release date for 2.15.2. b7d9c491e datapath-windows: add layers when adding the deferred actions 3f718857e ofproto-dpif-xlate: Fix zone set from non-frozen-metadata fields. ea2ca0af1 dpif-netdev: Fix use-after-free on PACKET_OUT of IP fragments. 9f964354e tunnel-push-pop.at: Mask source port in tunnel header. 58397f222 dpdk-stub: Change the ERR log to DBG. 2a963fc31 python: idl: Avoid sending transactions when the DB is not synced up. 9efa2ea61 ipf: release unhandled packets from the batch f8274b78c datapath-windows:adjust Offset when processing packet in POP_VLAN action a2f860aa2 cirrus: Reduce memory requirements for FreeBSD VMs. 7788f1579 netdev-linux: Fix a null pointer dereference in netdev_linux_notify_sock(). dd32deba6 pcap-file: Fix memory leak in ovs_pcap_open(). 9f2f66c8e odp-util: Fix a null pointer dereference in odp_flow_format(). 02b0c265c odp-util: Fix a null pointer dereference in odp_nsh_key_from_attr__(). 031eff456 netdev-dpdk: Fix RSS configuration for virtio. 09cd9570d ipf: Fix only nat the first fragment in the reass process. ef8ca3e19 dpif-netdev: Fix crash when PACKET_OUT is metered. d3ff41d60 tc: Set action flags for tunnel_key release. 079a4de72 netlink-socket: Replace error with txn->error when logging nacked transactions. f8cc5aa35 dynamic-string: Fix a crash in ds_clone(). 64d1bba91 dpif-netdev: fix memory leak in dpcls subtable set command 90b219275 dpif-netdev: Do not flush PMD offloads on reload. b29b04f85 dpif-netdev: Fix offloads of modified flows. 1d0b89ea7 dpif-netdev: Fix flow modification after failure. 8d84a4b16 netdev-offload-dpdk: Fix IPv6 rewrite cast-align warning. f3f7849cb daemon-unix: Fix leak of a fork error message. 8aa0f0374 ovsdb-cs: Perform forced reconnects without a backoff. ee4e034dc datapath-windows:Correct checksum for DNAT action 72132a940 bond: Fix broken rebalancing after link state changes. aa84cfe25 dpif-netlink: Fix report_loss() message. aec05f7cd ovsdb-server: Fix memleak when failing to read storage. 05bdf11fc conntrack: Init hash basis first at creation. 94e3b9d9c netdev-linux: Ignore TSO packets when TSO is not enabled for userspace. 842bfb899 conntrack: Handle already natted packets. ab873c1af conntrack: Document all-zero IP SNAT behavior and add a test case. 86d6a9ee1 python: Fix Idl.run change_seqno update. 1ba0c8365 bridge: Use correct (legacy) role names in database. 7e5293ea5 Prepare for 2.15.2. b855bbc32 (tag: v2.15.1) Set release date for 2.15.1. 007a4f48f dpif-netdev: Apply subtable-lookup-prio-set on any datapath. c93358a56 netlink: removed incorrect optimization 31626579f ovs-actions.xml: Add missing bracket. 30596ec27 netdev-offload-tc: Use nl_msg_put_flag for OVS_TUNNEL_KEY_ATTR_CSUM. 728980291 conntrack: Increment coverage counter for all bad checksum cases. 881d71ea2 datapath-windows: Specify external include paths 934668c29 Remove Python 2 leftovers. aaa596705 ipf: Fix a use-after-free error, and remove the 'do_not_steal' flag. bc0aa785a ovsdb-idl: Fix the database update signaling if it has never been connected. 559426d2b ofproto: Fix potential NULL dereference in ofproto_ct_*_zone_timeout_policy(). f31070e27 ofproto: Fix potential NULL dereference in ofproto_get_datapath_cap(). 8995d5311 dpif-netlink: Fix send of uninitialized memory in ct limit requests. 0c056891c ofproto-dpif: Fix use of uninitialized attributes of timeout policy. 121a67cad netdev-linux: Fix use of uninitialized LAG master name. 5f27ff1cf ofp_actions: Fix set_mpls_tc formatting. e87adce83 dpif-netdev: Remove meter rate from the bucket size calculation. a3ee3258e ovs-ofctl: Fix coredump when using "add-groups" command. c5d2a6275 raft: Transfer leadership before creating snapshots. 553d52392 ovsdb-cs: Consider all tables when computing expected cond seqno. 8d0aebcc4 dpdk: Use DPDK 20.11.1 release. 21452722b github: Fix up malformed /etc/hosts. 90d1984b9 doc: automake: Add support for sphinx 4.0. 38a8bed70 cirrus: Look up existing versions of python dependencies. 255c38c74 ofp-group: Use big-enough buffer in ofputil_format_group(). f2c0744d2 ofproto/ofproto-dpif-sflow: Check sflow agent in case of race ab157ef34 dpif: Fix use of uninitialized execute hash. b1fded020 odp-util: Fix use of uninitialized erspan metadata. f473ee568 dpif-netlink: Fix using uninitialized info.tc_modify_flow_deleted in out label. 2721606bd netdev-offload-tc: Probe for support for any of the ct_state flags. 091bc48d9 compat: Add ct_state flags definitions. 1307e90e3 Add test cases for ingress_policing parameters d184c6ce6 netdev-linux: correct unit of burst parameter cab998e50 ipsec: Fix IPv6 default route support for Libreswan. b9ab7827e ovsdb-idl: Mark arc sources as updated when destination is deleted. c82d2e3fb ovsdb-idl: Preserve references for deleted rows. 9a24ecbc2 ovsdb-idl.at: Make test outputs more predictable. 8d71feb1b ovs-ofctl: Fix segfault due to bad meter n_bands. 3a716b1d9 dpif-netdev: Refactor and fix the buckets calculation. 73ece9c87 dpif-netdev: Fix the meter buckets overflow. d5dc16670 python: Send notifications after the transaction ends. 556e65e17 ovs-ctl: Allow recording hostname separately. 3982aee45 dpif-netdev: Fix crash when add dp flow without in_port field. 02096f1b3 Documentation: Fix DPDK qos example. 8f1dda316 raft: Report disconnected in cluster/status if candidate retries election. 79e9749da raft: Reintroduce jsonrpc inactivity probes. 2e84a4adb ovsdb-cs: Fix use-after-free for the request id. d2c311dce connmgr: Check nullptr inside ofmonitor_report(). 7307af690 ovsdb-client: Fix needs-conversion when SERVER is explicitly specified. 2a7a63571 windows, tests: Modify service test. 9b48549c6 netdev-linux: Fix indentation. 861a9f3b4 ofproto-dpif-upcall: Fix ukey leak on udpif destroy. 339044c3c ci: Use parallel build for distcheck. 38744b1bc ofp-actions: Fix use-after-free while decoding RAW_ENCAP. 33abe6c05 Prepare for 2.15.1. The ptest results BEFORE uprev: ERROR: 2231 tests were run, 27 failed unexpectedly. 62 tests were skipped. Failed tests: checkpatch - sign-offs checkpatch - parenthesized constructs checkpatch - parenthesized constructs - for checkpatch - comments checkpatch - whitespace around operator checkpatch - whitespace around cast ovs-ofctl snoop tunnel - table version tunnel_push_pop - erspan tunnel_push_pop - action tunnel_push_pop - packet_out tunnel_push_pop_ipv6 - ip6gre tunnel_push_pop_ipv6 - ip6erspan tunnel_push_pop_ipv6 - action PMD - non pmd device ofproto-dpif - recirculation after resubmit ofproto-dpif - sFlow packet sampling - IPv4 collector ofproto-dpif - sFlow packet sampling - IPv6 collector ofproto-dpif - sFlow packet sampling - LACP structures ofproto-dpif - sFlow packet sampling - tunnel set ofproto-dpif - sFlow packet sampling - tunnel push ofproto-dpif - sFlow packet sampling - MPLS bridge - multiple bridges share a controller bridge - add port after stopping controller mcast - check multicasts to trunk ports are not duplicated ptap - triangle bridge setup with L2 and L3 GRE tunnels ptap - L3 over patch port The ptest results AFTER uprev: ERROR: 2266 tests were run, 27 failed unexpectedly. 65 tests were skipped. Failed tests: checkpatch - sign-offs checkpatch - parenthesized constructs checkpatch - parenthesized constructs - for checkpatch - comments checkpatch - whitespace around operator checkpatch - whitespace around cast ovs-ofctl snoop tunnel - table version tunnel_push_pop - erspan tunnel_push_pop - action tunnel_push_pop - packet_out tunnel_push_pop - packet_out debug_slow tunnel_push_pop_ipv6 - ip6gre tunnel_push_pop_ipv6 - ip6erspan tunnel_push_pop_ipv6 - action PMD - non pmd device ofproto-dpif - sFlow packet sampling - IPv4 collector ofproto-dpif - sFlow packet sampling - IPv6 collector ofproto-dpif - sFlow packet sampling - LACP structures ofproto-dpif - sFlow packet sampling - tunnel set ofproto-dpif - sFlow packet sampling - tunnel push ofproto-dpif - sFlow packet sampling - MPLS bridge - multiple bridges share a controller bridge - add port after stopping controller mcast - check multicasts to trunk ports are not duplicated ptap - triangle bridge setup with L2 and L3 GRE tunnels ptap - L3 over patch port Signed-off-by: He Zhe <zhe.he@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-01-27runc: change branch to mainBruce Ashfield
The upstream project has renamed master -> main, so we change our SRC_URI to match. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-01-14go-fsnotify: switch to main branchBruce Ashfield
The upstream project has changed from master -> main, so we update our branch to match .. otherwise, we fail the fetch! Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-01-10busybox-initrd: oe-core has upgraded to 1.33.2Ross Burton
Signed-off-by: Ross Burton <ross.burton@arm.com>
2022-01-03cloud-init: switch branch to mainBruce Ashfield
Cloud-init has removed the master branch, and has switched to using main. So we adjust our recipe accordingly to avoid fetcher errors. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-03global: convert github SRC_URIs to use https protocolhardknott-nextMartin Jansa
* apply the same also for recipes using PKG_NAME starting with github.com which the conversion script doesn't update automatically Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-03oci-runtime-spec: update branch specification to mainBruce Ashfield
master has become main in the runtime spec, so we update our recipe to match. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-03global: add explicit branch to all SRC_URIsBruce Ashfield
As introduced in the oe-core post: https://lists.openembedded.org/g/openembedded-core/message/157623 SRC_URIs without an explicit branch will generate warnings, and eventually be an error. We run the provided conversion script to make sure that meta-virt is ready for the change. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-01dev86: don't require dev86-native to build dev86Ross Burton
Instead of installing binaries and patching the makefiles to run external commands, simply build ifdef using BUILD_CC instead of CC. This patch is now upstreamable, the recipe is less complicated, and nativesdk works. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-01dev86: work on all hosts, other cleanupsRoss Burton
Remove COMPATIBLE_HOST, whilst this is an x86 assembler there's nothing to stop you building it on or for arm64 and assembling x86 code. Override INEXE so that binaries are not stripped and remove INSANE_SKIP. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-01dev86: remove the pre-generated token[12].h and force gperf to generate them ↵Martin Jansa
in do_compile Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-01dev86: fix compatibility with gperf-3.1Martin Jansa
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-01dev86: depend on dev86-native for ifdefgMartin Jansa
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-01dev86: switch to still maintained fork of dev86Martin Jansa
* as mentioned in: https://github.com/lkundrak/dev86/pull/17 the original lkundrak repo is no longer maintained * pass only BASE_PV as VERSION in EXTRA_OEMAKE to prevent: | version.h:4:20: error: ‘gitAUTOINC’ undeclared (first use in this function) | #define VER_PAT 21+gitAUTOINC+e254e0b196 | ^ * there are many new commits, we need at least that fix for newer gperf git log --oneline v0.16.21..jbruchon/master e254e0b (jbruchon/master) Merge pull request #21 from tkchia/master 3473bde [libc] update _signal syscall semantics, per ABI change in ELKS at https://github.com/jbruchon/elks/pull/629 d74e90d Merge pull request #20 from tkchia/tkchia/update-syscalls 541a8d5 [libc] update syscall list & ino_t type, per ELKS tree 710e852 Merge pull request #16 from spacerace/master b215454 Merge pull request #17 from mfld-fr/master 870635e Move EMU86 & MON86 to standalone projects 84e3d00 [mon86] Latest touch before moving c2f288c [emu86] Latest touch before moving f7449f3 libc tests for MSDOS target (far away from complete ;)) 6cbd64d fixing problem in string.h introduced by myself -.- 39e04cd Merge branch 'master' of https://github.com/spacerace/dev86 b44e43d Added OpenBSD's timingsafe_bcmp() and timingsafe_memcmp() 857c30e Added BSD's strlcat() and strlcpy(), safe string copy/cat 0764e09 typo in string.h 2fb6a3a swab() 4e09d08 strupr() 2bd985f strset() 5a7bb33 strrev() 56be26a strnset() c919b2d strlwr() b63f295 h+Mf bzero() strnset() strset() strlwr() strupr() strrev() swab() 5985246 removed old implementation of strstr. if anyone needs this file => remains in git history 7b481c0 added bzero() 776929c Merge pull request #15 from spacerace/master 8206ed2 stdlib.h + Makefile changes for getenv() and system() b995d1e getenv() implementation 60466fe system() implementation 12439ac note on __mkenv (related to getenv commits from me) aae041a removed empty line on top of file 6d6d91f removed uneeded empty file (see sound.c) ff7d37e formatting (tabs) 246418a formatting in one line fixed 4ff1f48 Merge pull request #14 from mfld-fr/emu86 1b8f8db Add data & suspicious opcode breakpoints 798c4a2 Merge pull request #13 from rdebath/jbruchon 2eb4d82 Add .travis.yml for running "make distribution" tests. 2ea54e1 Merge pull request #12 from mgorny/makez f14f78e build: Always use $(MAKE) to spawn sub-make dfb9b42 Merge pull request #11 from mfld-fr/emu86 6ae2b54 Make dev86 working "in tree" 224843f Merge pull request #10 from mfld-fr/emu86 e56a958 [emu86] Test against ELKS - Round 3 0099ec8 Merge pull request #9 from mfld-fr/emu86 32865c8 [emu86] Test against ELKS - Round 2 e1aa9bd Merge pull request #8 from mfld-fr/emu86 c7ebb2a [emu86] Optimize execution lookup 57019a7 [emu86] Complete decoding optimization de516a5 [emu86] Fix mfld-fr#21 : opcode 90h (NOP) 40f7c99 [emu86] Optimize decoding < C0h 91d4c61 [emu86] Fix mfld-fr#16 : add pcat timing options d519caf [emu86] Fix mfld-fr#14 : trace support 3a479e7 [emu86] Check vector before interrupt 7eec401 Optimize decoding < 80h 98334d3 Fix mfld-fr#8 and warning cleanup 0579c82 Merge pull request #7 from mfld-fr/master 49492b9 [emu86] Add option for tiny model da6a960 [emu86] fix #19 : remove PT1 test e3b465f [dis88] Move back from ELKS f2ea895 Merge pull request #6 from mfld-fr/master b0700f4 [mon86] First stage removal after second validated 6ef705d [mon86] Fix #18 : Complete host tool 1fa5a70 Fix #10 and #11 : Target specific code 22c7770 Merge branch 'bug86' e25c996 [mon86] Tune host tool for read & write 47aadb5 [mon86] Fix #15 : Cleanup in host tool ae7c628 [mon86] Makefile for host part + more testing ae6c84a [mon86] New host tool + fix context parsing c9205ac Add missing void types to libc/misc/qsort.c 7a4f074 unproto: fix macOS Sierra compilation error reported by scontini76 ac6d924 unproto: better CFLAGS f86ad57 bcc: if EOF is hit before end of comment, report it as an error fcdbcd7 limits.h: add PATH_MAX 7239fea include: Add a skeleton for inttypes.h f3e88f9 Remove accidental ignoring of "include" 0ac417a Merge branch 'master' of https://github.com/jbruchon/dev86 74753fa Fix size_t declaration, add ssize_t declaration 4be53b7 Merge pull request #5 from mfld-fr/master d5ecd9c [mon86] Second stage tested on real SBC 81b0ab2 [mon86] Second stage monitor completed b55cbbc [mon86] Trace & break interrupt support 18a5ba8 Merge pull request #4 from mfld-fr/master 77f028b [mon86] First stage monitor completed 07689d4 Merge remote-tracking branch 'upstream/master' e043007 Revert accidental bcc changes in commit 3c83dee 495b99a [emu86] Test against ELKS - Round 1 5508efa Merge pull request #3 from mfld-fr/master 8aa3313 [emu86] Testing against a real ROM - Round 1 d8ac93e [emu86] Fixed #7 : segment selection & override 5b521d6 [emu86] Test against a real POST - Round 2 3c83dee [emu86] Test against a real POST - Round 1 b45a3d2 [emu86] Command line options 345513c [emu86] Fixed #6 : simplified variable size 2d7d316 [emu86] Fixed #2 + FAR call & ret 8ac48bf Import MON86 standalone project needed by EMU86 1da15c0 Bug fixes after EMU86 testing 1dc5fd3 Merge pull request #2 from mfld-fr/master 24935c0 [emu86] Final touch before the weekend 9090120 [emu86] Fixed #5 : redirect serial I/O to PTS 96dfb1a [emu86] Added memory and stack dumps 4fbcead [emu86] Fixed #1 : move reg num out of val struct 205e47d Improved EMU86 for MON86 testing 377ed40 Merge branch 'master' into emu86 fd3cf7e Added partial ZF and CF flags support c758426 Merge pull request #1 from mfld-fr/master 72ad336 Merge branch 'master' of git://github.com/jbruchon/dev86 into emu86 2d8398b More support of 8086 instruction set b2eadba EMU86 second draft 9a8e116 EMU86 first draft fb3b436 Revert "fix linker alignment for .bss segment" bf19066 Merge https://github.com/anchorz/dev86-1 4e8476e Revert "copt: fix a minor glitch in copt/rules.86" 1bcc185 Merge remote-tracking branch 'upstream/master' b0426b2 Force output of initial segment directive a44b267 fix linker alignment for .bss segment c0832c8 under CYGWIN bcc requires -o option to compile an .o file otherwise it ends up as .exe and cannot link 80d485b (origin/master, origin/HEAD) Add stdint.h header to recognize some C99 types 29dbfca libc/msdos: program name missing in argv[0] b0e9b25 libc/msdos: __mkargv es register changed 4a350d3 ar: rename of temporary libary fails on some platforms cf72284 copt: fix a minor glitch in copt/rules.86 ce888f6 Allow copt rules with empty outputs; fix minor glitch in copt/rules.86 4ed1997 bcc/dbprintf.c: ix implicit declaration warnings 9de6f00 Make a.out.h portable to 64 bit systems 7eae1c0 Change strstr() to Jody's two-way implementation 2f53e83 Add a .gitignore file c21e14a initial version with minimal routines fa9c32e Add stdint.h header to recognize some C99 types 6e8432b Minor style cleanups b7a191c Add "make distclean" and make it really clean everything dab04fb bootblocks: long -> int32_t for proper building on 64-bit hosts 0d9ee41 bootblocks requires as86_encap to build Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-01dev86: add dependency on gperf-nativeMartin Jansa
* fails to build on hosts without gperf: /bin/sh: gperf: command not found Makefile:27: recipe for target 'token2.h' failed * normally this isn't triggered, because token[12].h are included in git repo, but regenerating them fails: tmp-glibc/work/x86_64-linux/dev86-native/0.16.21-r0/git/cpp$ touch token1.tok tmp-glibc/work/x86_64-linux/dev86-native/0.16.21-r0/git/cpp$ make bcc-cpp gperf -aptTc -N is_ctok -H hash1 token1.tok > tmp.h /bin/sh: gperf: command not found Makefile:23: recipe for target 'token1.h' failed make: *** [token1.h] Error 127 * unfortunately this isn't enough, because new gperf 3.1 from oe-core isn't compatible, we need to upgrade to different dev86 fork which contains: https://github.com/jbruchon/dev86/pull/19 Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-01xvisor: set PVMartin Jansa
* use something more reasonable than default 'git' from filename * there wasn't a new tag for a long time, so this is quite far from 0.3.0 as git describe shows: v0.3.0-231-g6b23764a but 0.3.0 is still the closest release I've found and matches PROJECT_VERSION in Makefile: https://github.com/avpatel/xvisor-next/blob/6b23764a1439f9d08b2ed2f363da522460d8a22b/Makefile#L29 Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-01xvisor: uprev to latest master and fix python referenceBruce Ashfield
Bumping to the latest xvisor tip. We drop one patch that is now part of the upstream, and we add another to remove /usr/bin/python from scripts called during build, since it breaks the build on hosts without /usr/bin/python. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-01uxen-guest-tools: fix -DMODULE not working when building uxenhc moduleMartin Jansa
* undo the unnecessary and incomplete changes from 0001-vm-support-fix-build-for-kernel-s-5.4.patch because with 5.15 it was still failing with: ERROR: modpost: missing MODULE_LICENSE() in uxen-guest-tools/4.1.8-r0/uxen-4.1.8-72a4af9/vm-support/linux/uxenhc/uxenhc.o fix it properly in 0004-uxenhc-fix-DMODULE-not-working-on-module-build-comma.patch Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-01uxen-guest-tools: fix build against kernels 5.15+Martin Jansa
This is a compile only fix to update the uxen kernel modules to work against newer kernels. Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-01uxen-guest-tools: fix build against kernels 5.4+Bruce Ashfield
This is a compile only fix to update the uxen kernel modules to work against newer kernels. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-01uxen: update guest tools to 4.1.8Bruce Ashfield
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-11-24libvirt: fix CVE-2021-3667Xu, Yanfei
Backport a fix for CVE-2021-3667. The CVE discription: An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It occurs in the storagePoolLookupByTargetPath function where a locked virStoragePoolObj object is not properly released on ACL permission failure. Clients connecting to the read-write socket with limited ACL permissions could use this flaw to acquire the lock and prevent other users from accessing storage pool/volume APIs, resulting in a denial of service condition. The highest threat from this vulnerability is to system availability. Refer to: https://bugzilla.redhat.com/show_bug.cgi?id=1986094 Signed-off-by: Yanfei Xu <yanfei.xu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-11-24containerd-opencontainers: bump to v1.4.12Chen Qi
Bump from v1.4.4 to v.1.4.12 so that some CVEs are resolved, e.g. CVE-2021-41103. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-10-20crun: fixup backport breakageBruce Ashfield
do_configure_prepend was duplicated during the backport of bbed941 crun: fix offline builds Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-10-19cni: add SRCREV_FORMATBruce Ashfield
recipes that use multiple SCMs in the SRC_URI, must supply SRCREV_FORMAT or SRCPV triggers an expansion error. While this isn't fatal during the build, it can cause issues with setscene (and possibly) other tasks failing, which then leads to no sstate re-use, etc. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-10-19yq: add SRCREV_FORMATBruce Ashfield
recipes that use multiple SCMs in the SRC_URI, must supply SRCREV_FORMAT or SRCPV triggers an expansion error. While this isn't fatal during the build, it can cause issues with setscene (and possibly) other tasks failing, which then leads to no sstate re-use, etc. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-10-19kubernetes: add SRCREV_FORMATBruce Ashfield
recipes that use multiple SCMs in the SRC_URI, must supply SRCREV_FORMAT or SRCPV triggers an expansion error. While this isn't fatal during the build, it can cause issues with setscene (and possibly) other tasks failing, which then leads to no sstate re-use, etc. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-10-19docker-moby: add SRCREV_FORMATBruce Ashfield
recipes that use multiple SCMs in the SRC_URI, must supply SRCREV_FORMAT or SRCPV triggers an expansion error. While this isn't fatal during the build, it can cause issues with setscene (and possibly) other tasks failing, which then leads to no sstate re-use, etc. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-10-19docker-ce: add SRCREV_FORMATBruce Ashfield
recipes that use multiple SCMs in the SRC_URI, must supply SRCREV_FORMAT or SRCPV triggers an expansion error. While this isn't fatal during the build, it can cause issues with setscene (and possibly) other tasks failing, which then leads to no sstate re-use, etc. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-10-18crun: fix offline buildsBruce Ashfield
The 'autogen.sh' script of crun was fetching dependencies that we already have in our SRC_URI. We want the OE git fetcher to manage the source, not scripts in the source of a package. We grab the two lines out of autogen.sh that we need, and use them directly in the configure_prepend. We also add yajl to the source code dependencies as the package DEPENDS is not enough as crun is explicitly building source that looks for the yajl code. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-10-13image-spec: explictly reference main branchBruce Ashfield
The oci-image-spec repository has dropped its master branch, so the fetcher default no longer works. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-10-12k3s: Bump to v1.20.11+k3s2Diego Sueiro
Signed-off-by: Diego Sueiro <diego.sueiro@arm.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-09-30openvswitch: Security fix for CVE-2021-36980Xu, Yanfei
Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact_decode and ofpacts_decode) during the decoding of a RAW_ENCAP action. Reference: https://nvd.nist.gov/vuln/detail/CVE-2021-36980 Patches from: format-patch from ovs v2.15.1 Signed-off-by: Yanfei Xu <yanfei.xu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-09-16libvirt: Security fix for CVE-2021-3631Armin Kuster
Source: https://libvirt.org/git/libvirt.git MR: 112956 Type: Security Fix Disposition: Backport from https://gitlab.com/libvirt/libvirt/-/commit/15073504dbb624d3f6c911e85557019d3620fdb2 ChangeID: 314727e329e5b1351326737eb9c9232f465db184 Description: Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-09-16libvirt: Security fix for CVE-2020-25637Armin Kuster
Source: https://libvirt.org/git/libvirt.git MR: 105864 Type: Security Fix Disposition: Backport from https://libvirt.org/git/libvirt.git ChangeID: 99bb9b4fc1b608e4e9a56b9d2308bfa54d9ba33c Description: * https://libvirt.org/git/?p=libvirt.git;a=commit;h=955029bd0ad7ef96000f529ac38204a8f4a96401 * https://libvirt.org/git/?p=libvirt.git;a=commit;h=50864dcda191eb35732dbd80fb6ca251a6bba923 * https://libvirt.org/git/?p=libvirt.git;a=commit;h=e4116eaa44cb366b59f7fe98f4b88d04c04970ad * https://libvirt.org/git/?p=libvirt.git;a=commit;h=a63b48c5ecef077bf0f909a85f453a605600cf05 Affects <= 6.3.0 Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-09-16conf: restrict hardknott compaitbility to hardknottBruce Ashfield
The busybox bbappend causes problems, and now that we aren't in transition, no one is testing compatibility for anything but matching release branches. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-09-08python3: remove the no-longer required bbappendRuslan Babayev
It has been carried over from python2 and is no longer required. More importantly it breaks the python3-native build due to ${STAGING_DIR_TARGET} being "" for native recipes. Signed-off-by: Ruslan Babayev <fib@cisco.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-08-01k8s: update to v1.20.9sakib.sajal@windriver.com
Upgrading kubernetes to version 1.20.9 release, which includes the following commits: 7a576bc3935 Release commit for Kubernetes v1.20.9 c553357e334 Merge pull request #103677 from puerco/go-11514 57f38e4e5bb Bump to golang 1.15.14 in build/** 2cb44e0f167 Bump to golang 1.15.14 in cluster/** and staging/** d5d4b638925 Bump to golang 1.15.14 in test/** 9bdbdaa89a7 Merge pull request #103490 from thejoycekung/automated-cherry-pick-of-#103235-upstream-release-1.20 66e6d5ee1fa Merge pull request #103171 from tkashem/automated-cherry-pick-of-#96966-release-1.20 2d0456982ed Merge pull request #103139 from sbangari/automated-cherry-pick-of-#103138-upstream-release-1.20 2e94d9010bc Merge pull request #103278 from marwanad/automated-cherry-pick-of-#103133-upstream-release-1.20 449b9314e0f Merge pull request #102390 from CaoDonghui123/automated-cherry-pick-of-#99680-upstream-release-1.20 86c8e960eea Merge pull request #103320 from jpbetz/fix-102749-1.20 103ff842129 Update debian-iptables image to buster-v1.6.5 a833cba11c6 Update debian-base image to buster-v1.8.0 a67405b9434 Bump SMD to v4.1.2 to pick up #102749 fix bd5c54805d4 generate scheduler merge patches on the pod status instead of the full pod d80e3d104c1 Merge pull request #102999 from gnufied/automated-cherry-pick-of-#102892-upstream-release-1.20 96924ca6e66 p&f e2e test: log response header for better troubleshooting b445dc60b73 Loadbalancer IngressIP policy should be configured as non-DSR to enable routing mesh by default e09055bf5ce Merge pull request #102995 from alculquicondor/automated-cherry-pick-of-#102925-upstream-release-1.20 a5e231aad73 Merge pull request #102035 from pacoxu/automated-cherry-pick-of-#101595-upstream-release-1.20 169bed9c3b7 Do not throw error when we can't get canonical path 411bd654498 Fix Node Resources plugins score when there are pods with no requests a003964b8d1 Merge remote-tracking branch 'origin/release-1.20' into release-1.20 a1892cea1a7 Merge pull request #102853 from gnufied/automated-cherry-pick-of-#102845-upstream-release-1.20 1889d52d73c Update CHANGELOG/CHANGELOG-1.20.md for v1.20.8 fae91cad6d0 Release commit for Kubernetes v1.20.9-rc.0 5575935422c Release commit for Kubernetes v1.20.8 382e93e46cf Merge pull request #102786 from thejoycekung/go-11513 f46525aa743 Remove error wrap from logs 1e97120d353 Merge pull request #101813 from melnikalex/automated-cherry-pick-of-#101592-upstream-release-1.20 66612c8c554 Merge pull request #102704 from jackfrancis/automated-cherry-pick-of-#102673-upstream-release-1.20 9bcd24dcc42 staging/publishing: Set default go version to go1.15.13 9710d085c83 build: Update to k/repo-infra@v0.1.8 (supports go1.15.13) 24c35ec5eef Use go-runner:v2.3.1-go1.15.13-buster.0 image (built on go1.15.13) 836cf3f8d5e Update to go1.15.13 88ad9ae6baf Merge pull request #102703 from aojea/automated-cherry-pick-of-#102683-upstream-release-1.20 d5eb450f1b7 Merge pull request #101886 from nilo19/automated-cherry-pick-of-#101739-upstream-release-1.20 68ec9e01490 Merge pull request #101543 from jingxu97/automated-cherry-pick-of-#101495-upstream-release-1.20 2b49e69455c Merge pull request #102580 from jingxu97/automated-cherry-pick-of-#96843-upstream-release-1.20 3d5750d0b53 feat: remove ephemeral-storage etcd requirement b8f83843a1f endpointslicemirroring controller mirror address status 76167c6ebf6 Merge pull request #102547 from nilo19/automated-cherry-pick-of-#102516-upstream-release-1.20 38c41a774fd Merge pull request #102674 from Huang-Wei/automated-cherry-pick-of-#102498-upstream-release-1.20 dcec9a80597 Merge pull request #102515 from ahg-g/automated-cherry-pick-of-#102306-#102465-upstream-release-1.20 70bfeab1816 Merge pull request #102499 from jsturtevant/automated-cherry-pick-of-#98510-upstream-release-1.20 15faec3cf79 Merge pull request #102350 from gnufied/speedup-vsphere-pv-provisioning-120 4050a40c7be Merge pull request #102164 from andyzhangx/automated-cherry-pick-of-#102083-upstream-release-1.20 bf0f8cb339f Merge pull request #102118 from feiskyer/automated-cherry-pick-of-#102005-upstream-release-1.20 f646410eb16 Merge pull request #101896 from aheng-ch/automated-cherry-pick-of-#101615-origin-release-1.20 9c5dee066d8 Merge pull request #101861 from marseel/automated-cherry-pick-of-#101652-upstream-release-1.20 9e001aa9208 Merge pull request #101796 from wzshiming/automated-cherry-pick-of-#100326-upstream-release-1.20 9aae7d8e385 Merge pull request #101826 from feiskyer/automated-cherry-pick-of-#100948-upstream-release-1.20 252474585f1 Merge pull request #102457 from timebertt/automated-cherry-pick-of-#102176-origin-release-1.20 aec7df7af4f sched: fix a bug that a preemptor pod exists as a phantom 449505fd852 Merge pull request #102586 from saschagrunert/release-1.20 208f301b60e Revert "Cleanup portforward streams after their usage" 067c3e7ef13 Remove unnecessary snapshot ability check 706b995869d serviceOwnsFrontendIP shouldn't report error when the public IP doesn't match bd3ce3ada0a Merge pull request #102313 from cheftako/automated-cherry-pick-of-#102213-upstream-release-1.20 a3f3695137f Fix VolumeAttachment garbage collection for migrated PVs ef655bda8ce Return UnschedulableAndUnresolvable when looking up volume-related resources returns NotFound error e160aa082f9 Return UnschedulableAndUnresolvable instead of Error when failing to lookup pvc or storageclass in VolumeZone plugin 668e97e2033 Ignore transient errors when gather stats 4940e1bba04 Speed up PV provisioning for vsphere driver 266cc3eba11 fix error of setting negative value for containerLogMaxSize 5f6b1faa3fc Merge pull request #102341 from cpanato/automated-cherry-pick-of-#102302-upstream-release-1.20 d74b99b351f Upgrade konnectivity-client for GRPC connection fixes 2e04c1984ec Update etcd image revision 3b1851700be Update debian-base to buster-v1.7.0 b81177ad5a8 Update debian-iptables to buster-v1.6.1 b6b4b974eb9 Merge pull request #102043 from gjkim42/automated-cherry-pick-of-#102027-upstream-release-1.20 6fd22ceadfc Merge pull request #102183 from julianvmodesto/automated-cherry-pick-of-#102105-upstream-release-1.20 0c8a940bb52 Respect annotation size limit for SSA last-applied. 1ddb11ab1a0 Remove unnecessary quotes from get-kube scripts 8ae534aed1b Merge pull request #102226 from liggitt/automated-cherry-pick-of-#102224-upstream-release-1.20 629f7b2380f Fix expired unit test certs 1259f1374d6 Merge pull request #102000 from sbangari/automated-cherry-pick-of-#101358-upstream-release-1.20 64e5538a211 fix: delete non existing disk issue 5c0f874a4c5 Azure: avoid setting cached Sku when updating VMSS and VMSS instances fa5f52ab4bf Merge pull request #101981 from liggitt/automated-cherry-pick-of-#101950-upstream-release-1.20 0943471406b Merge pull request #101802 from Jiawei0227/automated-cherry-pick-of-#101737-upstream-release-1.20 8507827ef72 Update cos-gpu-installer image 9fd63310788 Merge pull request #100587 from Joseph-Goergen/automated-cherry-pick-of-#99592-upstream-release-1.20 811726df61c Ref counting is only applicable to Remote endpoints a561f961442 Make watch order conformance test reliable c86ea8108c3 Update CHANGELOG/CHANGELOG-1.20.md for v1.20.7 213f20b0c84 Release commit for Kubernetes v1.20.8-rc.0 132a687512d Release commit for Kubernetes v1.20.7 d7f7c6bacee fix removing pods from podTopologyHints mapping ed19f8dba13 fix: avoid nil-pointer panic when checking the frontend IP configuration 20dafb7d5c0 Use CSI driver to determine unique name for migrated in-tree plugins d656d408467 Merge pull request #101845 from cpanato/go11512 9e227f1352a Add jitter to lease controller 7ff67fd04bf staging/publishing: Set default go version to go1.15.12 c0b28f220f3 build: Update to k/repo-infra@v0.1.7 (supports go1.15.12) 9bc73e31a99 Use go-runner:v2.3.1-go1.15.12-buster.0 image (built on go1.15.12) e62db8cd84c Update to go1.15.12 516dfa59e61 Merge pull request #100952 from saschagrunert/automated-cherry-pick-of-#99839-upstream-release-1.20 bf13a7e598c Avoid caching the VMSS instances whose network profile is nil cc8a07f2510 Merge pull request #101818 from nilo19/automated-cherry-pick-of-#101752-upstream-release-1.20 7cfe069cd6d fix: not tagging static public IP c4abedfce91 chunk target operatation for aws targetGroup 6c9e3d8d2cf Merge pull request #101498 from ialidzhikov/automated-cherry-pick-of-#100944-upstream-release-1.20 5149a75fb5f Fix watchForLockfileContention memory leak 47e2caa226c Merge pull request #101550 from andyzhangx/automated-cherry-pick-of-#100731-upstream-release-1.20 30d205ff416 Merge pull request #101519 from andyzhangx/automated-cherry-pick-of-#101398-upstream-release-1.20 c28b41d542e Merge pull request #101769 from eddiezane/automated-cherry-pick-of-#101005-upstream-release-1.20 097a895cf73 Merge pull request #101354 from andyzhangx/automated-cherry-pick-of-#101235-upstream-release-1.20 04723692052 Merge pull request #99705 from andyzhangx/automated-cherry-pick-of-#99550-upstream-release-1.20 fee056fe3e0 Merge pull request #101763 from aojea/automated-cherry-pick-of-#100103-upstream-release-1.20 f757b3e8443 Merge pull request #101158 from serathius/automated-cherry-pick-of-#100013-upstream-release-1.20 61e659964b4 Add test create service with ns 0f2adadf432 Set namespace when using kubectl create service fe7d8068809 Automated cherry pick of #101377: Fix validation in kubectl create ingress (#101428) 715fad26086 Updating EndpointSlice controllers to avoid duplicate creations 5bd3ebfe860 Merge pull request #101545 from verult/automated-cherry-pick-of-#101347-upstream-release-1.20 78bac86a978 Merge pull request #101503 from JornShen/cherry-pick-100913-1.20 a04915a3946 Merge pull request #101224 from wzshiming/automated-cherry-pick-of-#101093-upstream-release-1.20 680e537dbd3 Merge pull request #101345 from neolit123/automated-cherry-pick-of-#99336-origin-release-1.20 6e0f1fe0ff3 Merge pull request #101103 from p0lyn0mial/automated-cherry-pick-of-#100959-upstream-release-1.20 5f4013145da Update pkg/volume/azure_file/azure_provision.go 749b68f779d Normalize share name to not include capital letters f701e3847d4 Extend pod start timeout to 5min for storage subpath configmap test d3758764782 Fix cleanupMountpoint issue for Windows a37f62b1490 fix: set "host is down" as corrupted mount 708b441434a Merge pull request #101363 from xmudrii/automated-cherry-pick-of-#96882-upstream-release-1.20 e91d9d51934 no watch endpointslice in userpace mode 56a13cd9bf1 Ensure service deleted when the Azure resource group has been deleted 4361731e73d Merge pull request #101386 from robscott/automated-cherry-pick-of-#101084-release-1.20 dd95bba6cd1 Updating EndpointSlice validation to match Endpoints validation d21188fcf11 Make parallel build memory threshold configurable 9b8b8282f54 Merge pull request #101126 from jackfrancis/automated-cherry-pick-of-#100200-upstream-release-1.20 47442df6cc9 fix: azure file namespace issue in csi translation 3cfd001c7b7 pkg/kubelet: improve the node informer sync check 6cc5466e406 Merge pull request #101326 from joelsmith/automated-cherry-pick-of-#101306-upstream-release-1.20 0fed52d2ed6 Additional CVE-2021-3121 fix 75fcfc359b8 Merge pull request #101038 from AliceZhang2016/automated-cherry-pick-of-#100762-upstream-release-1.20 91908ac2108 Fix startupProbe behaviour changed bfff15f5684 Fix test 7e0a8fce3ac Merge pull request #101192 from cpanato/go11511-release-120 1978727df23 staging/publishing: Set default go version to go1.15.10 4c53c2f556a build: Update to k/repo-infra@v0.1.6 (supports go1.15.11) 2881a64df51 Use go-runner:v2.3.1-go1.15.11-buster.0 image (built on go1.15.11) 4d31b65d944 Update to go1.15.11 0d404c0decd add duration encoder to structured logger c1bb92f1502 Merge pull request #101112 from tkashem/automated-cherry-pick-of-#100678-upstream-release-1.20 b0641413768 Update CHANGELOG/CHANGELOG-1.20.md for v1.20.6 f371f8b5de8 Release commit for Kubernetes v1.20.7-rc.0 8a62859e515 Release commit for Kubernetes v1.20.6 113ae8b06f2 exec test should not run in Parallel as feature gate is not locked bb636525375 hack/update-bazel.sh cb9f51ccb77 respect ExecProbeTimeout 5ec5885eaef apf: exempt probes /healthz /livez /readyz e9372dcd113 DelegatingAuthenticationOptions TokenReview request timeout fcca48ecf76 list pod list once to avoid timeout 148445452de Merge pull request #100525 from matthyx/automated-cherry-pick-of-#98571-upstream-release-1.20 c9b9e61c263 Merge pull request #97012 from towca/patch-6 24f6ab9b438 Cleanup portforward streams after their usage 0cd35945de3 Merge pull request #100912 from nilo19/bug/cherry-pick-100690-1.20 54b62e189be Merge pull request #100075 from ialidzhikov/automated-cherry-pick-of-#99169-upstream-release-1.20 6edb1ecaa5e Merge pull request #100714 from kevindelgado/automated-cherry-pick-of-#100341-#98576-upstream-release-1.20 47d338f422f Merge pull request #100722 from cici37/automated-cherry-pick-of-#98210-upstream-release-1.20 aed6b74e944 Merge pull request #100691 from nilo19/bug/cherry-pick-574-1.20 2ac4f20d916 Merge pull request #100414 from kishorj/automated-cherry-pick-of-#97431-upstream-release-1.20 1f147c9daf3 Merge pull request #100379 from prameshj/automated-cherry-pick-of-#99595-upstream-release-1.20 24e3fdde9d1 Merge pull request #100312 from freehan/automated-cherry-pick-of-#99858-upstream-release-1.20 ca5eb11c513 Merge pull request #100084 from mborsz/automated-cherry-pick-of-#97009-#97480-#98257-upstream-release-1.20 373d9d72f78 azure: fix node public IP not able to fetch issues from IMDS 7b6a5f61871 Merge pull request #100157 from vteratipally/automated-cherry-pick-of-#95655-upstream-release-1.20 b8f7e215eaa Fix test now that empty struct are tracked in mangaed fields be4e5045bf9 Merge pull request #100228 from sbangari/automated-cherry-pick-of-#99958-upstream-release-1.20 593cd4db7a3 make generated_files edc823e71c9 Merge pull request #100399 from andyzhangx/revert-97449-automated-cherry-pick-of-#97417-upstream-release-1.20 2448db42431 Update bazel and dependencies. c23ef1b8501 Update to use cliflag.NamedFlagSets 27f793607fb Address comments. b33400139bf Update NodeIPAM wrapper 3f67eb336bd Delete build file based on latest changes. 8f86b0d6f8b Update extension mechanism and related sample. 9f62b6e3e42 Address review comments 92ad1ac4e93 Address review comments ebab94c722d Modify integration test to fill CCM test gap 4f221deb97d Update test b832be3aec3 Move initialize cloud provider with client builder reference inside controller start func f8f5f8dc89d Separate example func and add README.md 54815679578 Separate func 5fba2668446 Add demonstration of wiring nodeIPAMController config object 8e00b7ba1e7 Remove cloud provider name as input parameter. 6a1c8c46a18 Fix flag passing in CCM. 95714c2fe69 Use apply to create objects in TestApplyStatus beeeb1a8f0d Stop skipping APIService in apply test 02c3a6373fc Stop clearing OpenAPIConfig for kube-aggregator c85828aed7b Declare TCP default for service port protocol bb59042ab9f Add ability to skip OpenAPI handler installation 27b378ad88e do not tag user created public IPs 7483d6fa733 Merge pull request #100667 from tkashem/automated-cherry-pick-of-#100638-upstream-release-1.20 3b41bef385d apf: fix test flake 7849986db90 Merge pull request #100443 from aojea/automated-cherry-pick-of-#98116-upstream-release-1.20 67f7cc9db9f Merge pull request #100501 from joelsmith/automated-cherry-pick-of-#98477-upstream-release-1.20 c7c94eab10d Merge pull request #100524 from tkashem/automated-cherry-pick-of-#100254-upstream-release-1.20 0e5ae49894c Fixed the Dockerfile for the build-image to build from KUBE_BASE_IMAGE_REGISTRY c4ddcc9fb22 update gogo/protobuf to v1.3.2 a8fea204700 Merge pull request #100111 from pacoxu/automated-cherry-pick-of-#100056-upstream-release-1.20 5ec39ba3a65 Merge pull request #100541 from eddiezane/automated-cherry-pick-of-#100505-upstream-release-1.20 50bfd4da078 Merge pull request #99038 from apelisse/update-smd-1.20 5c2ee78eb7a Fixed describe ingress causing SEGFAULT cb2690d5c57 Update sigs.k8s.io/structured-merge-diff to v4.0.3 372b41856ae Stop probing a pod during graceful shutdown 1e316e6f90b apf: handle error from PollImmediateUntil 939168c1530 Merge pull request #100375 from cpanato/go11510 1211cc0faef staging/publishing: Set default go version to go1.15.10 a7c878739f7 Merge pull request #100493 from roycaihw/automated-cherry-pick-of-#95783-upstream-release-1.20 c5d2c88bf40 Merge pull request #100315 from deads2k/automated-cherry-pick-of-#99946-upstream-release-1.20 5c928ab8791 Merge pull request #100380 from robscott/automated-cherry-pick-of-#99795-release-1.20 a2ff92207dd webhook config manager: HasSynced returns true when the manager is synced with existing webhookconfig objects at startup 6b618501f9c Merge pull request #100461 from liggitt/automated-cherry-pick-of-#98336-upstream-release-1.20 140e9dd72de update metadata-concealment to 1.6 for removing legacy checking a53e27fb1a8 slice mirroring controller mirror annotations 2a614fa45e1 additional subnet configuration for AWS ELB 9f3bf75675f Revert "Automated cherry pick of #97417: fix azure file secret not found issue" 9c6fb88d52e Use the correct volum handle format for GCE regional PD. 7cb1061ad5d Increasing maximum number of ports allowed in EndpointSlice 55fcfd708cc Support > 5 ports in L4 ILB. 6e776670797 build: Update to k/repo-infra@v0.1.5 (supports go1.15.10) a822ae86400 Use go-runner:v2.3.1-go1.15.10-buster.0 image (built on go1.15.10) 8dc4509e7d6 Update to go1.15.10 6d41a9990f3 Update CHANGELOG/CHANGELOG-1.20.md for v1.20.5 bd0426f32b9 Release commit for Kubernetes v1.20.6-rc.0 6b1d87acf3c Release commit for Kubernetes v1.20.5 16afd5e714b fix a bug where only service with less than 100 ports can have GCE load balancer f9583ca6d19 bazel 487b07c5afb deepcopy statefulsets 82cf2d8ca41 full deepcopy on munged pod spec 6a1fff67539 remove pod toleration toleration seconds mutation bc25538854b add markers for inspected validation mutation hits 4ae0cd194b1 move secret mutation from validation to prepareforupdate 873af486957 remove unnecessary mutations in validation e1e4c5e89f4 tweak validation to avoid mutation 7e48dab334a Merge pull request #100037 from gjkim42/automated-cherry-pick-of-#99600-upstream-release-1.20 8d7f96f7d4e For LoadBalancer Service type don't create a HNS policy for empty or invalid external loadbalancer IP 4b39e92880a Merge pull request #100060 from bobbypage/automated-cherry-pick-of-#95301-upstream-release-1.20 3090d5ba861 Merge pull request #99207 from iwankgb/cadvisor_0.38.8 989d96d6abe Merge pull request #100143 from robscott/automated-cherry-pick-of-#99756-release-1.20 82a10c26a4d Merge pull request #99493 from Nordix/automated-cherry-pick-of-#99464-upstream-release-1.20 6a21ad7c0ae Merge pull request #100113 from robscott/automated-cherry-pick-of-#99345-release-1.20 6776ccfe7c6 Merge pull request #99091 from wzshiming/automated-cherry-pick-of-#98200-upstream-release-1.20 24ab133b43d Merge pull request #98930 from huffmanca/automated-cherry-pick-of-#96021-upstream-release-1.20 a1b0301da35 Merge pull request #99255 from wzshiming/automated-cherry-pick-of-#98088-upstream-release-1.20 c1ee348e6b7 Merge pull request #99254 from wzshiming/automated-cherry-pick-of-#98005-upstream-release-1.20 5fea98b4f95 Merge pull request #99744 from jingxu97/automated-cherry-pick-of-#99463-#99723-upstream-release-1.20 feae2a5b775 Merge pull request #98811 from damemi/1.20-balance-nodes-ubernetes 0796e6ca0d8 Moving docker options to daemon.json 74d3baa6c23 Merge pull request #99826 from feiskyer/automated-cherry-pick-of-#99825-upstream-release-1.20 1bc820511b8 Merge pull request #99008 from yujuhong/automated-cherry-pick-of-#98830-upstream-release-1.20 4e4aea62b37 Merge pull request #99438 from yue9944882/automated-cherry-pick-of-#97957-upstream-release-1.20 2cda9734a15 Updating EndpointSliceMirroring controller to wait for cache to be updated 28263260b11 Merge pull request #99253 from wzshiming/automated-cherry-pick-of-#97950-upstream-release-1.20 c4ebd758613 Updating EndpointSlice controller to wait for cache to be updated a660f5cbfb2 e2e fix: loosen configmap to 10 in resource quota 8c06bdd0529 api-server add --lease-max-object-count 7e9a4be4a5a apiserver add metric etcd_lease_object_counts 67a75c277a5 apiserver add --lease-reuse-duration-seconds to config lease reuse duration d834777e74b Add tests for populated volumes 8adb218cdec Fix comment on getPodVolumeSubpathListFromDisk 70afbff84f2 Fix tests to test for new behavior b6f98d1c3a9 Add warnings after cleanup back c946996f218 Automatically remove orphaned pod's dangling volumes d3417520d28 Count pod overhead as an entity's resource usage f2fe40c6f8d Merge pull request #99164 from verult/automated-cherry-pick-of-#98555-upstream-release-1.20 c4af4684437 Merge pull request #99587 from liggitt/automated-cherry-pick-of-#99538-upstream-release-1.20 6c49363aed0 Merge pull request #98168 from CKchen0726/cherrypick_96876_1.20 404866ab6d7 Ensure only one LoadBalancer rule is created when HA mode is enabled 8559d41ec15 Fix issue in checking domain socket for plugin watcher 033304932ba Use Lstat in plugin watcher to avoid Windows problem 8feee7ef06c fix smb mount issue on Windows 1e3c47e7f61 Merge pull request #99017 from aojea/automated-cherry-pick-of-#98305-upstream-release-1.20 19c6bfe464c Merge pull request #99171 from jkh52/release-1.20 7c7c7e65413 Skip visiting empty secret and configmap names 085542b7cf7 Number of sockets is assumed to be same as NUMA nodes f90c43eb67e disables APF if the aggregated apiserver cannot locate the core kube-apiserver 165e5664b0e Merge pull request #98369 from hasheddan/automated-cherry-pick-of-#97700-upstream-release-1.20 e708a40ab97 Fix repeatedly aquire the inhibit lock dff5593d585 Sync node status during kubelet node shutdown 849c0d19df7 remove executable permission bits 8022487e21d Upgrading vendored dependencies 68030c39db5 Upgrading cAdvisor to 0.38.8 5eb14a18ce7 Update CHANGELOG/CHANGELOG-1.20.md for v1.20.4 9fdbacd8db5 Release commit for Kubernetes v1.20.5-rc.0 eda61d35915 build/OWNERS: Add Dan and Sascha as reviewers 5ecc81d8dbb OWNERS(CHANGELOG): Move reviewers/approvers to CHANGELOG/ dir d61e4a1ff0a Bump konnectivity-client to v0.0.15 in release-1.20 35062261c22 Storage e2e: Remove pd csi driver installation in GKE 2786062c167 Fix dbus shutdown events not continuing if they are not valid d059a916c37 kube-proxy: clear conntrack entries after rules are in place f3c73ba7e50 Use -LiteralPath instead of -Path 97dfcaa1a32 Escape the special character in vsphere windows path 7748a7d8822 Include unit test d691bcf83a0 Adjust defer to correctly call f0a40f47245 do not remove volume dir when saveVolumeData fails 2927f04acb0 Balance nodes in scheduling e2e 1598f8b7e58 e2e: Pod should avoid nodes that have avoidPod annotation: clean remaining pods 692caa52216 OWNERS(CHANGELOG): Add release-engineering-reviewers as reviewers af2eb120a2f OWNERS(CHANGELOG): Add release-engineering-reviewers as approvers c37df23228b OWNERS(sig-release): Add CHANGELOG aliases 9163fc12fa8 OWNERS(build-image): Add Release Managers as reviewers d2487eea38e OWNERS(releng): Sync Release Managers 5941f1cebb8 OWNERS(sig-release): Remove SIG Release approvers alias 5935da7151c Merge pull request #96876 from howieyuen/no-execute-taint-missing f7b66fe5ad5 Bump Cluster Autoscaler to v1.20.0 Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-07-29kubernetes: fix CVE-2021-20206sakib.sajal@windriver.com
Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-07-23uxen-guest-tools: inherit dos2unix to fix do_patch failureMartin Jansa
* fixes: ERROR: uxen-guest-tools-4.1.7-r0 do_patch: Command Error: 'quilt --quiltrc /OE/build/oe-core/tmp-glibc/work/qemux86_64-oe-linux/uxen-guest-tools/4.1.7-r0/recipe-sysroot-native/etc/quiltrc push' exited with 0 Output: stdout: Applying patch fix-Makefile-for-OE-kernel-build.patch patching file Makefile Hunk #1 FAILED at 1 (different line endings). Hunk #2 FAILED at 19 (different line endings). 2 out of 2 hunks FAILED -- rejects in file Makefile Patch fix-Makefile-for-OE-kernel-build.patch does not apply (enforce with -f) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-07-21busybox-initrd: Update to 1.33.1Diego Sueiro
In oe-core hardknott branch busybox was updated to 1.33.1. Hence, do the same for busybox-initrd recipe. Signed-off-by: Diego Sueiro <diego.sueiro@arm.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-07-14crun: adjust image-spec repository from master to mainBruce Ashfield
We need to change our branch to avoid parse errors. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-24podman: update to 3.2.1Bruce Ashfield
Cherry picked from master. Although we don't normally bump versions on releasd branches, the podman is causing pseudo aborts and the version on the release branch is no longer active upstream. It is riskier to try and isolate fixes and backport them, than it is to just update to the latest bugfix release. Original commit log follows: ============================ Bumping libpod to version v3.2.1-2-gab4d0cf90, which comprises the following commits: 60752b320 Bump to v3.2.2-dev 152952fe6 Bump to v3.2.1 c5d9c0a6f Updated release notes for v3.2.1 4f56f7f13 Fix network connect race with docker-compose e42d727a9 Revert "Ensure minimum API version is set correctly in tests" f69789155 Fall back to string for dockerfile parameter 5a158563c remote events: fix --stream=false 38fbd2cb9 [CI:DOCS] fix incorrect network remove api doc 26eae3bf8 remote: always send resize before the container starts c751544fa remote events: support labels c28f442b2 remote pull: cancel pull when connection is closed 2993bdf1e Fix network prune api docs 8ba0c92e6 Improve systemd-resolved detection c3f6ef63a logs: k8s-file: fix race f1e7a0747 Fix image prune --filter cmd behavior 5ddd76edd Several shell completion fixes 2afb5eeab podman-remote build should handle -f option properly 6beae86f0 System tests: deal with crun 0.20.1 80362b34c Fix build tags for pkg/machine... c85b6b3fe Fix pre-checkpointing b61701acb container: ignore named hierarchies e0dcffa8d [v3.2] vendor containers/common@v0.38.9 d46deca8c rootless: fix fast join userns path f2b3da502 [v3.2] vendor containers/common@v0.38.7 78430ee1d [v3.2] vendor containers/common@v0.38.6 b6ef7cf21 Correct qemu options for Intel macs 9647d8844 Ensure minimum API version is set correctly in tests 72455ece4 Bump to v3.2.1-dev 0281ef262 Bump to v3.2.0 cff73766f Fix network create macvlan with subnet option 8688f54ea Final release notes updates for v3.2.0 f62c6bf6e add ipv6 nameservers only when the container has ipv6 enabled 4b8ca6303 Use request context instead of background ce5c3b554 [v.3.2] events: support disjunctive filters dd83f5c0c System tests: add :Z to volume mounts 32927f5d6 generate systemd: make mounts portable abb57e5cf vendor containers/storage@v1.31.3 1e4563182 vendor containers/common@v0.38.5 fbf8b78a3 Bump to v3.2.0-dev 684729482 Bump to v3.2.0-RC3 f49023031 Update release notes for v3.2.0-RC3 ee5dd0603 Fix race on podman start --all 6c9de9382 Fix race condition in running ls container in a pod 69bae4774 docs: --cert-dir: point to containers-certs.d(5) 934f36df5 Handle hard links in different directories 5eecc2761 Improve OCI Runtime error ba884865c Handle hard links in remote builds c53638e9f Podman info add support for status of cgroup controllers ac8b7ddd8 Drop container does not exist on removal to debugf 18e917cdc Downgrade API service routing table logging efa15b96c add libimage events a9108ab25 docs: generate systemd: XDG_RUNTIME_DIR bb589bec2 Fix problem copying files when container is in host pid namespace Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-24podman: bump to 3.2-rcXBruce Ashfield
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-21crun: switch to main as specified branchBruce Ashfield
The upstream project has moved from master to main, so we adjust our recipe accordingly. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-04-20 05:01:45 +0000