aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
3 hoursdiod: Build in 32bit systems with 64bit time_tHEADmasterOla x Nilsson
Signed-off-by: Ola x Nilsson <olani@axis.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
3 dayspodman: fix location of user systemd service unitsLukasz Czechowski
The value of USERSYSTEMDDIR is currently set to ${systemd_unitdir}/user, which might not be present in user unit search path. Use dedicated bitbake variable ${systemd_user_unitdir} instead. Signed-off-by: Lukasz Czechowski <lukasz.czechowski@thaumatec.com> Cc: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-04-10kernel/cfg: update SRCREV to sync lxc optionsmaster-nextBruce Ashfield
Bumping the SRCREV to pickup the latest lxc configuration tweaks and consoliation. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-04-09lxc: fix broken test casesXiangyu Chen
Upstream dropped cgroup handling in lxc-test-usernic lxc-test-unpriv and lxc-test-apparmor-mount to fix the broken cases. Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-04-09libvirt: add libvirt-dbusMathieu Dupré
libvirt-dbus provides a dBus interface for libvirt. It can be needed as dependency for some virtualization packages, such as `cockpit-machines`. Compilation tested on x86-64 and aarch64 machines. Signed-off-by: Mathieu Dupré <mathieu.dupre@savoirfairelinux.com> Signed-off-by: Paul Le Guen de Kerneizon <paul.leguendekerneizon@savoirfairelinux.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-04-09runc-docker: update to 1.1.12Bruce Ashfield
Bumping runc to version v1.1.12-2-ga9833ff3, which comprises the following commits: 29d6d873 VERSION: back to development 51d5e946 VERSION: release 1.1.12 e9665f4d init: don't special-case logrus fds 683ad2ff libcontainer: mark all non-stdio fds O_CLOEXEC before spawning init b6633f48 cgroup: plug leaks of /sys/fs/cgroup handle 284ba305 init: close internal fds before execve fbe3eed1 setns init: do explicit lookup of execve argument early 0994249a init: verify after chdir that cwd is inside the container 506552a8 Fix File to Close d0b1a374 keyring: update AkihiroSuda key expiry d561e5da keyring: update cyphar@cyphar.com key expiry 7887736f VERSION: back to development 4bccb38c VERSION: release 1.1.11 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-04-04xen-tools: adjust recommendations for qemu package splittingBruce Ashfield
When vmsep is enabled the qemu packages are split based on meta-virt policy. Detect this distro feature and update our dependencies accordingly. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-04-04docs/README: drop meta-oe priority recommendationBruce Ashfield
This hasn't been needed for over 10 years (and is in the wrong format for overrides). Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-04-04podman: update to 5.0.1Bruce Ashfield
Bumping libpod to version v5.0.1-4-gbb81e85a4, which comprises the following commits: 63f6a78eb Packit: Enable CentOS Stream 10 update job e22c9dd65 Bump to v5.0.2-dev 946d055df Bump to v5.0.1 131f3d089 Add release notes for v5.0.1 2967eb9a2 [v5.0] libpod: restart always reconfigure the netns 92b3cda79 [v5.0] use new c/common pasta2 setup logic to fix dns b1dbd477e [v5.0] Bump Buildah to v1.35.3 ebe3f395b hyperv: error if not admin 4b54d1824 libpod: don't warn about cgroupsv1 on FreeBSD 312313872 Use built-in ssh impl for all non-pty operations 70fe2a1c9 fix remote build isolation on client side bfc63cc32 fix remote build isolation when server runs as root Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-04-04openvswitch: 3.3.0Bruce Ashfield
Bumping ovs to version v3.3.0-26-g1c1f173ce, which comprises the following commits: 1c1f173ce dpif-netdev: Fix crash due to tunnel offloading on recirculation. feb0fefd8 netdev-dpdk: Disable outer UDP checksum offload for ice/i40e driver. 3280d95c4 ovs-monitor-ipsec: LibreSwan autodetect paths. 4fedcae6e route-table: Avoid routes from non-standard routing tables. 9f39cd4a1 ovs-tcpdump: Fix cleanup mirror failed with twice fatal signals. 7fa40643e ofproto-dpif: Fix tunnel with different name del/add failure. 04dc9d117 ofpbuf: Prevent undefined behavior in ofpbuf_clone. 667c9eb2b netdev-dpdk: Fix tunnel type check during Tx offload preparation. 332300c36 netdev-dpdk: Fix TCP check during Tx offload preparation. e7778b371 netdev-dpdk: Clear inner packet marks if no inner offloads requested. c85158e26 netdev-dpdk: Clean up all marker flags if no offloads requested. a6bb8be42 github: Reduce ASLR entropy to be compatible with asan in llvm 14. 70dcee98f netdev-dpdk: Dump packets that fail Tx preparation. 5ae591757 bfd: Improve state change log message. efbc37b94 tests: Fix "SSL db: Implementation" test with openssl > 3.2.0. 0f1af687c conntrack: Fix flush not flushing all elements. 04f1984a4 m4: Fix linking with OpenSSL 1.1.0+ and 3+ on Windows. 8f903b598 ovs-pki: Fix file permissions on Windows. 300201065 bond: Reset stats when deleting post recirc rule. 02f0d6db1 ofproto-dpif-trace: Fix infinite recirculation tracing. e68ddb34b github: Temporarily disable SNAT with exhaustion system test. 95d4d7108 dp-packet: Don't offload inner csum if outer isn't supported. 05453d807 ofproto-dpif-xlate: Fix ignoring IPv6 local_ip for native tunnels. a0df9c85d netdev-dummy: Add local route entries for IP addresses. 2f742d7af tests: Move the non-local port as tunnel endpoint test. a6bdf7d31 Prepare for 3.3.1. 6c4da8cc2 Set release date for 3.3.0. 54ba53bfa system-traffic.at: Add tests with UDP tunneling of UDP traffic. 71a547474 netdev-native-tnl: Mark all vxlan/geneve packets as tunneled. 91a147ea8 netdev-linux: Only repair IP checksum in IPv4. 51ee4d36a netdev-linux: Favour inner packet for multi-encapsulated TSO. 0eb8d8116 rstp: Fix deadlock with patch ports. c67de08f1 dpif-netdev: Increase MAX_RECIRC_DEPTH to 8. 310247ae9 netdev-linux: Avoid deadlock in netdev_get_speed. e38ba0b0a ofproto-dpif-monitor: Remove unneeded calls to clear packets. 37f24aebc dp-packet: Include inner offsets in adjustments and checks. eead56062 bfd: Set proper offsets and flags in BFD packets. 2de9347a5 dp-packet: Validate correct offset for L4 inner size. 76144cc63 netdev-offload-tc: Check geneve metadata length. 5c8586b1a odp: ND: Follow Open Flow spec converting from OF to DP. 5cc4eedc6 faq: Update matching DPDK releases for older branches. 447d4ecd9 github: Bump Fedora version to 39. fe55ce37a github: Update versions of action dependencies (Node.js 20). 86f79063b mcast-snooping: Remove typedef from mcast_group_proto. b0cf73112 dp-packet: Reset offload/offsets when clearing a packet. c467a7a71 tests: ovsdb-server: Fix config-file same schema test. 2222dbb92 ci: Run system tests in a separate namespace. 0c9e932aa netdev-dpdk: Trigger port reconfiguration in main thread for resets. 928498aea tests: mcast-snooping: Stop time for the group protocol test. 6ffceaf14 dp-packet: Avoid checks while preparing non-offloading packets. a940a691e ovs-atomic: Fix inclusion of Clang header by GCC 14. e802fe79a Prepare for 3.3.0. 206dfaa36 AUTHORS: Add Dexia Li. 85bcbbed8 userspace: Enable tunnel tests with TSO. 084c80872 userspace: Support VXLAN and GENEVE TSO. 0edfe05e4 netdev-dummy: Add support and test for TSO. 76e2f20d5 userspace: Correct IPv6 header in software-GSO. 9e3c842d5 dp-packet: Set checksum flags during software TSO. 253d90075 python: ovs: flow: Add meter_id to controller. ea44cafae python: ovs: flow: Make check_pkt_len action a list. 32f6737b5 python: ovs: flow: Add idle_age to openflow flows. e72b7b6f1 python: tests: Refactor test_odp section testing. 5e45091ea python: ovs: flow: Add dp hash and meter actions. ab7d08961 python: ovs: flow: Add sample to nested actions. 9ef49ca85 python: tests: Add info and key tests for OFPFlows. 6bbbb7664 python: ovs: flow: Fix typo in n_packets. 603890d6a ovsdb-server: Make use of cooperative multitasking. 36bad3182 json: Add yielding json create/destroy functions. d4a15647b ovsdb: raft: Enable cooperative multitasking. 3c8a4e942 lib: Introduce cooperative multitasking module. 6ece3d57b timeval: Add internal timewarp interface. b222593bc mcast-snooping: Add group protocol to mdb/show output. 077d0bad0 mcast-snooping: Store IGMP/MLD protocol version. 8b51b2bcb ci: Add kernel and userspace ASAN/UBSAN tests. fc13c0d65 ci: Combine the ubsan and asan sanitizer runs. 48d4f6963 tests: Set handle_segv for UBSAN to allow SIGSEGV tests. d662eee09 ci: Add clang-analyze to GitHub actions. ed738eca3 util: Annotate function that will never return NULL. da093acc7 netdev-offload-dpdk: Replace action PORT_ID with REPRESENTED_PORT. bdf2f1677 tests: Fix 'long flow dump duration' failures due to large time warp. 8893e24d9 dpdk: Update to use v23.11. 65b22552a tests: ovsdb: Add configuration tests with config file. 47ddc474d tests: ovsdb: Add relay and replication execution with config file. 55140090e ovsdb-server: Allow user-provided config files. 99d7e8849 ovsdb: relay: Allow setting all jsonrpc session options. dd0947b87 ovsdb-cs: Add function to set all jsonrpc session options. 6de317c0e ovsdb: replication: Allow to set all jsonrpc options. 9a1b79c15 ovsdb: Embed jsonrpc session options into ovsdb jsonrpc options. 40ce846e8 jsonrpc: Add function to update all options at once. 37ab57b41 jsonrpc-server: Re-add remotes on role changes. 8c8a6f793 ovsdb-server: Add no-op config-file option. e76f84720 ovsdb-server: Database config isolation. c8c0e570d ovsdb: replication: Automatically switch read-only mode. 3ff980c85 ovsdb: replication: Isolate databases from each other. e56d30242 ovsdb: Extract relay string parsing into a separate function. 80414c3e1 ovsdb: Track jsonrpc options per remote. da1a4f699 jsonrpc-server: Add functions to convert jsonrpc options to/from json. ea4362174 ovsdb: Allow database itself to be read-only. 05d6f419c timeval: Add coverage counter for long poll interval events. 969b3a570 ofproto-dpif-upcall: Add flow_limit coverage counters. 92ff2a201 ofproto-dpif-upcall: Change flow dump duration message to WARN level. 60457a5e9 ovsdb: transaction: Calculate added/removed from diff. 7ab8f6f7c ovsdb: Preserve column diffs read from the storage. 67ee63087 ovsdb-idl.at: Test IDL behavior during database conversion. ac04dfa7e python: idl: Handle monitor_canceled. c8d85a0e4 AUTHORS: Add Brad Cowie 8aea66599 system-traffic.at: Test conntrack + FTP server running on a non-standard port. 8abe32f95 conntrack: Use helpers from committed connections. 14ef8b451 lib/conntrack: Only use given packet in protocol detection. 7b74454c7 system-tests: Test openflow matching for ct related packets with SNAT. 7404d25ea system-dpdk: Test with mlx5 devices. 915b97971 checkpatch.py: Load codespell dictionary. 21c61243f checkpatch: Fix personal word list storage. 2535d171a vconn: Count vconn_sent regardless of log level. 54b3eb531 backtrace: Fix error in log_backtrace() documentation. 94371c099 ovsdb: trigger: Do not allow conversion in read-only mode. e951af81c ovsdb: jsonrpc-server: Fix the DSCP value in default options. d07a3b798 jsonrpc: Sort JSON objects while printing debug messages. 0a2e16b67 tests: ovsdb: Use diff -up format for replay test. 7c3df3676 ovsdb-server.at: Enbale debug logs in active-backup tests. 0ef3ebb0c ovsdb: transaction: Don't try to diff unchanged columns. 6f11d9daa ovsdb: transaction: Avoid diffs for different type references. d51d4f42d ovsdb: Fix incorrect sharing of UUID and _version columns. 4102674b3 ovsdb-idl: Preserve change_seqno when deleting rows. 5c3810491 tests: Move MFEX tests to dpif-netdev. 98ee21ef6 system-dpdk: Use dummy-pmd port for packet injection. df5e5cf43 Documentation: Add section on inclusive language. de4cccf93 ci: Add make check-afxdp to GitHub actions ci. 67c53a89d ci: Allow make check-dpdk to run the MFEX tests. 26ffd192f ci: Fix dpdk build cache key generation. adfc3d4a3 ci: Add make check-system-tso to GitHub actions ci. 09958e081 ci: Add make check-system-userspace to GitHub actions ci. 15f179324 ci: Add make check-offloads to GitHub actions ci. e7b51b38f ci: Add make check-kernel to GitHub actions ci. a80883f76 ci: Fixed tests that show random failures through GitHub actions. 6660fccb1 ci: Exclude tests that show random failures through GitHub actions. 9dfa65dc7 ci: Update the GitHub Ubuntu runner image to Ubuntu 22.04. e07ae9a6d ci: Add make check-ovsdb-cluster tests to GitHub action ci. ee93f364b ci: Add JOBS variable to replace all the '-j4' instances. 4cbbf56e6 dpif-netdev: Add per PMD sleep config. a095794bc openflow: Allow CT flush to match on mark and labels. 386deb32c dpctl, ovs-ofctl: Unify parsing of ct-flush arguments. 62c5d32ad ofp-prop: Add helper for parsing and storing of ovs_u128. cc670e741 system-dpdk: Wait for MTU changes to be applied. 7067ed166 tests: Do not use zone 0 for CT limit system test. 27e0349e2 ct-dpif: Enforce CT zone limit protection. 1b3557f53 vswitchd, ofproto-dpif: Propagate the CT limit from database. 324883361 ovs-vsctl: Add limit to CT zone. 8f4b86237 dpctl: Allow the default CT zone limit to be deleted. 4b9eb061b ct-dpif: Handle default zone limit the same way as other limits. 6b1723588 tunnel: Do not carry source port from a previous tunnel. 472dd6642 netdev-offload-tc: Fix offload of tunnel key tp_src. a34e306a0 ofp-ct: Return error for unknown property in CT flush. 20022fbf5 editorconfig: Remove [*] section and trim_trailing_whitespace. 8b5fe2dc6 userspace: Add Generic Segmentation Offloading. e0056018c userspace: Respect tso/gso segment size. 6c59c1952 netdev-linux: Use ethtool to detect offload support. c8d494636 cirrus: Update from FreeBSD 12 to 14. cf984d5be appveyor: Use previous image to unblock CI. ceb29608d faq: Update matching DPDK releases for older branches. 3626c1744 ovs-ofctl: Correctly mark the CT flush commands. 40f651ce0 mcast-snooping: Fix comments format. 42c1e2efe mcast-snooping: Flush flood and report ports when deleting interfaces. 4990a9a27 mcast-snooping: Test per port explicit flooding. 4e90baca8 system-dpdk: Run traffic tests. 1d0ff364b system-dpdk: Rework cleanup for vhost-user client tests. 1c37d869c system-dpdk: Refactor tests using vhost-user ports. d0a6cf57d system-dpdk: Fix race in some vhost-user client MTU test. 64c1d16c6 system-dpdk: Remove tap interfaces from vport MTU tests. b561bbdc2 netdev-afxdp: Postpone libbpf logging helper registration. 818217eaf system-dpdk: Refactor OVS daemons helpers. e6dd50d61 tests: Define a macro to skip tc relying tests. ab3eca612 ci: Run DPDK tests in GitHub Actions. c488f28a0 system-dpdk: Don't require hugetlbfs. 209667c0e system-dpdk: Introduce helpers for testpmd. 7b514aba0 ofproto-dpif-trace: Improve conjunctive match tracing. c62b4ac8f ovs-ofctl: Implement compose-packet --bare [--bad-csum]. 3e0d8d1f4 checkpatch.at: Add cases to verify skip committer check. 74bfe3701 checkpatch: Add argument to skip committer signoff check. 4d74e2307 build-aux/extract-ofp-fields: Fix the number of Summary columns. 8b4265c11 release-process: Update LTS designation schedule example. c19a5b48b netdev-dpdk: Sync and clean {get, set}_config() callbacks. d614f2863 netdev-afxdp: Sync and clean {get, set}_config() callbacks. 169c6b2d4 netdev-dummy: Sync and clean {get, set}_config() callbacks. bf843fd43 checkpatch: Don't spell check Fixes tag. fdbf0bb2a flake8: Fix E721 check failures. 28f6e7602 build-aux: Enable flake8 checks for python extraction scripts. 20e6309ba build-aux/extract-ofp-msgs: Fix flake8 and syntax errors. 23fb4bd4b build-aux/extract-ofp-fields: Fix flake8 and syntax errors. 6625f6f2f build-aux/extract-ofp-errors: Fix flake8 and syntax errors. 51fb99290 build-aux/extract-ofp-actions: Fix flake8 and syntax errors. 723cd4c9b automake: Move build-aux EXTRA_DIST updates to their own file. 08212d755 netdev-offload: Fix Clang's static analyzer 'Division by zero' warnings. 979bc94b1 ovsdb: Fix Clang's static analyzer 'func null dereference' warnings. 03c8e8010 ofp-table: Fix count_common_prefix_run() function. 5b6021957 general: Fix Clang's static analyzer 'Dead assignment' warnings. 49096a0cf general: Fix Clang's static analyzer 'Dead initialization' warnings. fea52dc71 python: Remove duplicate UnixctlClient implementation. 2c841eef9 vswitch.xml: Add entry for dpdkvhostuser userspace-tso. e8914353c vswitch.xml: Add dpdkvhostuser group status. 594d14541 readthedocs: Use dirhtml builder. 34ae81c1f tests: Use ping timeout instead of deadline. 6cfb3d1ff tests/system-traffic: Ensure no name resolution for tcpdump. cc89bf8e2 README: Add documentation build status badge. e388bd73b readthedocs: Add the configuration file. a413fed99 tc: Improve logging of mismatched actions. bd86266ea ofproto-dpif-upcall: Pause revalidators when purging. d581473cb AUTHORS: Add Zengyuan Wang. 23a70e286 db-ctl-base: Fix memory leak of db commands. c29ba5401 tc: Add IPIP/GRE protocols to offload in IP rewrite. b16ef5200 tc: Add csum offload of IGMP/UDPLITE/SCTP in IP rewrite. f100e6a83 tests: Update some tests title prefix print. c92ded551 tests/tunnel.at: Add geneve options mirror test. 834bd9158 ofproto-dpif-upcall: Fix redundant mirror on geneve tunnel options. d76193008 tests: Add some tests for byteq module. 297db8056 AUTHORS: Add Jakob Meng. bb6ed2472 netdev-dpdk: Document rx-steering status options. e9ada1629 netdev-dpdk: Update docs for interface info. 8020eff9a netdev-dpdk: Document status options for VF MAC address. 0aeb06e1f netdev-offload-dpdk: Fix flushing of a physdev. b78427639 Documentation: Add CVE-2022-40982, aka Downfall reference. 155f632e7 connmgr: Fix ofconn configuration on vswitchd startup. 13dde1131 utilities: Add kernel_delay.py script to debug a busy Linux kernel. 4fc02650a ovsdb: Fix potential leak when making diff of conditions. a40c55eff hash: Add explicit typecasts to fix C++ compilation issues. 880a2bbb4 lib, ovsdb, vtep: Add various null pointer checks. 010c256ca lib: Add non-null assertions to some return values of `dp_packet_data`. 1b8fa4a66 checkpatch: Add checks for the subject line. 0896dc19e python: idl: Fix last-id update from a monitor reply. bac34b26a netlink-conntrack: Fix partial match of entries with SCTP. 563c50fba ovsdb-cluster.at: Remove extra ordinal schema and schema name operations. 154e4299d ofproto-dpif-xlate: Fix recirculation with patch port and controller. 9a8b39b70 ofproto-dpif-xlate: Don't reinstall removed XC_LEARN rule. bc79a7bf0 treewide: Add `ovs_assert` to check for null pointers. 40546cd6e lib, ovs-vsctl: Add zero-initializations. 1116459b3 conntrack: Remove nat_conn introducing key directionality. 85634fd58 ovsdb: raft: Support pre-vote mechanism to deal with disruptive server. bb61931dc netdev-dpdk: Disable net/tap Tx L4 checksum offloads. 13b874f4f tests/mfex: Don't require python cryptography. 28c0cec40 configure: Avoid deprecated AC_PROG_CC_C99 if possible. d3bdc7c91 tests: Fix time dependency in overlapping flows modification test. 9b7e1a753 netdev-dpdk: Clear IP packet type when no offload is requested. bf7e53bb5 python: Use build to generate PEP517 compatible archives. f1983a508 python: Use twine to upload sdist package to pypi.org. bb0dd1135 python: Rename build related code to ovs_build_helpers. 785e22f87 dpif-netdev: Fix length calculation of netdet_flow_key. 0e98b9924 doc: Fix description of max_len for controller action. 9842d89e5 docs: Fix rendering of VLAN Comparison Chart. 57cccb076 fatal-signal: Drop logging of failed dummy backtrace. eb344e0be AUTHORS: Add Colin Watson and Lucas Nussbaum. 6180fefa8 docs: Run tbl preprocessor in manpage-check rule. e46d45520 docs: Add `nowarn` region option to tables. f1305b5a2 tests: Add clang-analyzer-results to gitignore. d910fd8a0 ci: Add jobs to test -std=c99 builds. f0899b1fc tests: Fix order of includes in barrier/id-fpool/mpsc-queue tests. 1776aa17a sflow: Always enable _BSD_SOURCE. be2cd24b1 compiler.h: Don't use asm and typeof with non-GNU compilers. e3d561670 AUTHORS: Add Ivan Malov. de86c5bbd Set release date for 3.2.0. 41006c1b3 AUTHORS: Add gordonwwang and Xiaojie Chen. 0945e1a5f ovs.tmac: Fix troff warning in versions above groff-1.23. d80df0b86 AUTHORS: Update email for Simon Horman. bd78f0e2e AUTHORS: Add François Rigault. 77610902b connmgr: Count unsent async messages. cf11766cb ofproto-dpif-upcall: Fix push_dp_ops to handle all errors. eac54ee24 system-traffic.at: Avoid names veth0/veth1 in SRv6 tests. 21410ff80 dpif-netdev: Fix dpif_netdev_flow_put. da64d1b2f MAINTAINERS: Add Aaron Conole. b8d4619d3 cirrus: Update to FreeBSD 13.2. bbdfb332d MAINTAINERS: Add Kevin Traynor. 2f34475a9 ci: Fix OPTS not being passed to OSX builds. 269053bf2 ovsdb-tool: Fix json leak while showing clustered log. bd2a80b1d ovsdb-server: Fix excessive memory usage on DB open. d6fd6e591 tests: Add ovsdb execution cases for set size constraints. 2f1b43064 ovsdb: relay: Fix handling of XOR updates with size constraints. e062465a8 ovsdb: file: Fix diff application to a default column value. edfbd44ff ovsdb: file: Fix inability to read diffs that violate type size. aa56afb57 AUTHORS: Add Simon Jones. 20a7654d2 ovs-tcpdump: Clear auto-assigned ipv6 address of mirror port. 47520b33b ofproto-dpif: Fix removal of renamed datapath ports. d460c473e netdev-dpdk: Negotiate delivery of per-packet Rx metadata. feed7f677 ofproto-dpif-upcall: Mirror packets that are modified. f5188ff21 daemon.at: Correctly terminate ovsdb process in a backtrace test. 24520a401 vswitchd: Wait for a bridge exit before replying to exit unixctl. bffffd841 Prepare for post-3.2.0 (3.2.90). Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-04-04docker-compose: update to v2.26.0Bruce Ashfield
Bumping compose to version v2.24.7-21-g33712277, which comprises the following commits: 33712277 chore(desktop): revised feature detection for file shares e9dc8201 Add Navigation Menu to compose up 39504607 Add support for volume Subpath option 3b541b07 Bump docker v26.0.0 25671ae6 introduce config --variables to list compose model variables 0191e69d Fix docs on default build image name 897d239f Bump compose-go to v2.0.2 c5a760ce add support for annotations 26f687a1 Revert "Bump compose-go to v2.0.1" ad414613 Bump compose-go to v2.0.1 db4ed895 feat(desktop): synchronized file share integration (#11614) 1b5fa3b9 feat(experiments): add experimental feature state (#11633) 4f97edf3 reduce timeout of the Otel tracing command bc5fc6ba fix `compose config --format json` f937e42a Bump compose-go v2.0.0 f46ca459 services shell completion bugfix b2d4c1b8 fix TestBuildPlatformsWithCorrectBuildxConfig 5a1ba0ef only use ToModel when --no-interpolate is set 17d4229e feat(desktop): add Docker Desktop detection and client skeleton (#11593) 4efb8970 chore(deps): upgrade go to 1.21.8 (#11578) f35449a6 ci(deps): bump moby/moby & docker/cli to v25.0.4 (#11566) 34b11c4f Add test summary for test jobs in ci c525373a make code simpler e99b8ace avoid duplicated "xx exited with code 0" message 8ab8df86 introduce --watch de178267 move code into small functions for better readability 1680f9a8 restore support for `config --no-interpolate` 5c4f3370 remove docker cli step in ci.yml 58ec0e9f get log to manage `attach` 349d9f34 bump compose-go to version v2.0.0-rc.8 697a48af use an dedicated compose file --quiet-pull e2e test 9b0d1ffc Add a fallback check of Watch pid on Windows False positives were detected when checking the previous watch process state d10a179f add support of QuietOption to create command 94246f3c pass QuietOption when starting dependencies from run command 9630cc58 when ran with ANSI disabled, force progress=plain 6c175548 Issue-11374: Modified compose up command to respect COMPOSE_REMOVE_ORPHANS environment variable 9b0e3d53 ci: bump engine version to `25.0.3` de3da829 sort containers to optimize scale down c79aabde discard stdout for laaarge log test 0aad3221 use listeners to collect include metrics b1c06770 docs: update cli reference link e330f590 docs: unify no trailing dots in docstrings and help (#11301) 16c8099c Use listener for file metadata 07bda596 fix deadlock collecting large logs d2034029 chore(watch): remove old `docker cp` implementation 894ab41c ci(deps): bump docker/cli to v25.0.3 (#11481) 3ba66453 pass All option to backend api.Service when length statuses is not equal to zero 2eca9313 Add OTEL specs: build, depends_on, capabilities (gpu/tpu) 1fea7c1b build(deps): bump github.com/opencontainers/image-spec acf2ffb0 feat(tracing): add project hash attr 0d48a93f chore(load): ensure context passed to load aaa7ef6d Include all networks in ContainerCreate call if API >= 1.44 6ef55a53 bump compose-go to v2.0.0-rc.4 a553db33 CI: docker engine version matrix 05bec55d build(deps): bump github.com/docker/cli 8fdd45cd chore(e2e): fix flaky test & standalone behavior (#11382) a0954dc5 ci(deps): replace buildkit to fix fsutil issues on Windows (#11426) 05820018 Fix canonical container name da1a34a8 don't check external network existence when swarm is enabled 8b023ae0 build(deps): bump github.com/docker/cli 8c80297c build(deps): bump github.com/docker/docker 7e991515 Add support for storage_opt d9791156 ci(deps): update DOCKER_CLI_VERSION to v25.0.1 71bebc16 bump compose-go to v2.0.0-rc.3 which fixes multiple compose files merge issues 25d16d1f build(deps): bump actions/upload-artifact from v3 to v4 ab97dcc7 update MAINTAINERS file a8bd3b7a Fix load .env from project directory when project file is set by COMPOSE_FILE 811364b4 use a custom version of fsutils that fixes a bug on Windows causing all Compose builds to fail 1551fcb4 introduce stopAndRemoveContainer to share logic scaling down eb4249ec bump compose-go to v2.0.0-rc.2 1e8241f6 ci(deps): upgrade to Moby v25.0.0 GA (#11381) 053a5604 docs: update link to use canonical URL for command 34ba0bc9 go.mod: github.com/moby/sys/mountinfo v0.7.1 56e38260 go.mod: github.com/google/uuid v1.5.0 c28bf522 bump version of compose-go to v2.0.0-rc.1 51c113b6 build(deps): bump github.com/docker/docker 7cdc7e15 remove watch command from the alpha command fb026543 build(deps): bump github.com/docker/cli d688d3bf fix(tracing): batch span exports to prevent blocking 898e1b60 signals/utils: always handle received signals f414bf78 fix engine version require to use healthcheck.start_interval 3c4593f2 Stop the resource timer after last expected event d2562029 build(deps): bump github.com/containerd/containerd from 1.7.11 to 1.7.12 (#11347) 26ed1051 build(deps): bump github.com/docker/docker from 25.0.0-rc.1+incompatible to 25.0.0-rc.2+incompatible (#11349) 191c10b9 build(deps): bump github.com/docker/cli from 25.0.0-rc.1+incompatible to 25.0.0-rc.2+incompatible (#11348) 5d05df6e update compose-go to version using immutable Project functions b621948c feat(cli): report more useful User-Agent on engine API requests f5c53c2d ci(deps): bump golangci-lint to v1.55.2 1cfeda71 ci(deps): bump golang to version v1.21.6 (#11331) 2bf2b22f Add source policies for build 575f2ed7 watch: remove requirements for tar binary and for sync target to be rw 5f4b22ed make docs dcf6bd77 make mocks 80823b77 go ahead and wire up sig-proxy and no-stdin for consistency with underlying docker container attach 2c16e16d docker compose attach via RunAttach (from docker/cli's docker container attach) d1be9caf build(deps): bump golang.org/x/sys from 0.15.0 to 0.16.0 c3c0cf3d build(deps): bump golang.org/x/sync from 0.5.0 to 0.6.0 (#11317) 27987415 gha: update DOCKER_CLI_VERSION to v24.0.7 566d2207 go.mod: github.com/docker/cli v25.0.0-rc.1 d09c39dc go.mod: github.com/docker/docker v25.0.0-rc.1 a1d36379 go.mod: github.com/klauspost/compress v1.17.4 0c55998b go.mod: github.com/felixge/httpsnoop v1.0.4 2f6ec9b7 go.mod: github.com/docker/go-connections v0.5.0 dcbf005f up: gracefully teardown when command ctx cancelled e105f165 introduce `stats` command ce5a0c65 Fix cancellable context detection in `AdaptCmd` f58f23a6 remove ServiceProxy which was introduced for archived compose-cli 9aa52326 go.mod: docker/docker and docker/cli v25.0.0-beta.3 ccd83b8a go.mod: github.com/gorilla/mux v1.8.1 9e57850c go.mod: github.com/docker/distribution v2.8.3 35d3a7ca go.mod: golang.org/x/crypto v0.17.0 6c998602 go.mod: golang.org/x/crypto v0.16.0 402f3688 go.mod: golang.org/x/text v0.14.0 30dd3e66 go.mod: golang.org/x/term v0.15.0 0c4fa017 Bump compose-go v2-beta.2 b12e23b0 build(deps): bump go.uber.org/mock from 0.3.0 to 0.4.0 17da54da introduce build --with-dependencies 1baa4f44 up: fix write/close race condition in logPrinter 7781b7c9 deps: update docker/cli to fix go version selection issue 785835b1 Add support for endpoint-specific MAC address e4fb5545 build do not require environment to be reslved 74cc0912 github.com/golang/mock is deprecated 5e61c62e collect services to build using WithServices fb3868ff add support for start_interval bdbda790 include disabled services for shell completion ae4fd791 bump golang to version 1.21.5 26aca867 avoid use of service.Name when iterating on project.Services 138facea project.Services is a map cda04f28 adopt compose-go/v2 85a1aec1 regen docs 9c29d223 use custom config type for OCI v1.0 df6fe59f tweak help message on oci version flag 07df9cc4 fix typo 7c8ff36d move around OCI logic, auto fallback/retry 1.1 -> 1.0 111ad3b0 fix(publish): add OCI 1.0 fallback support for AWS ECR 8026d0e2 adopt container.RestartPolicy* df1533a1 [lint] don't use deprecated types 8639fbae go mod tidy 56e2ad9e update to v1.25 for RunAttach ce1ddb6c fix combination of --pull always --no-build c5824702 build(deps): bump golang.org/x/sys from 0.14.0 to 0.15.0 1f148244 send out a cancel event on SIGINT/SIGTERM 9faef4ae Update README.md to use standard compose.yaml file name 59f11ecb Fix configs are mounted under /<id> 750553c8 introduce compose logs --index to select a replica container 8c964f5a Update E2E test 90ca13b7 Fix E2E test to have index in the correct position f9946127 Fix docs ddda59a1 Add index option to compose logs command e981c358 Add failing test 16c4241c log we don't expose service ports when --verbose 9025d63a bump ddev a1de0b96 Restore `Project` is ps json output caa0cbbc Introduce ps --orphans so user can include/exclude services not declared by project 29e9fdba let contributor know we might close unanswered issues c665c53c bump buildx to v0.12.0 and adapt code to changes a39cf75e build(deps): bump github.com/compose-spec/compose-go 46ba9c99 build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 5c5d30c6 build(deps): bump github.com/docker/cli 36fa8d4e build(deps): bump github.com/docker/docker 2384635e build(deps): bump github.com/moby/buildkit from 0.12.2 to 0.12.3 2ba5e4c1 in watch mode force pull policy to build for services with both build and develop attributes This default behaviour will force a rebuild of the service images at watch process startup and be sure containers will be in sync with the local source code b1a26dac Assume /src/pkg/compose/testdata absolute workingdir to make tests reproducible 5e77ae92 avoir use of []types.ServiceConfig f5572201 identify services to build and don't display 'building' if none 8e1b3236 fix --remove-orphans not to consider disabled services as orphaned 7cb1f8ba introduce RuntimeVersion for code to check container runtime supports required features cb01186c push also consider build.tags 9c4efbdd Strip project prefix from docker-compose up output 8ea7c9e0 Make it context aware and add test skipping options c1694360 render quiet after filtering applied 254a94b0 bump golang to version 1.21.4 cf608fa9 bump compose-go to v1.20.1 426377a4 reject compose file using `secrets|configs.driver or template_driver` 493f6c80 skips flaky e2e tests on watch and attach 646a8fc0 fix docker/compose#11170 add newline in cmd/compose/build.go fmt.Fprint 2945532f fix --pull documentation e5cd265a improve watch configuration logging Add action associated to each managed path d646d757 lint 71237ef6 do not resolve cache dir until remote resource is in use 0d905a89 add a copyright notice with original author b847c7f5 implement runtime file selection 5e3d8f67 re-implement cache folder detection 67279088 introduce --resolve-image-digests for publish to seal service images by digest 4cd61957 fix build 0d4cbbdb fix 9631a49d ENGDOCS-1764 328ca3f2 add docs upstream validation workflow e1bbfc63 build(deps): bump go.uber.org/goleak from 1.2.1 to 1.3.0 616bba0a linter errors fixed ee6e3c2a NetworkList to NetworkInspect for ID search c7e31a3c Squashing feature branch commits in order to add signoff message. 704a9fd3 Use project.ServiceNames() if no service specified in hash d9e0e42d Add branch configuration for pull_request trigger c48e3c4a Initial codeql.yml commit dd0803db fix SIGTERM support to stop/kill stack 39008c53 align with OCI artifact best practices 6c345b37 refactor(cmd/compose/run): remove redundant `len` check 1ffa194e fail start if depependency is missing b9298101 check that the pull policy provided is a valid one or is not missing when --pull is used 3d0207eb remove uncessary return value of pullComposeFiles function 16a7c209 enable profile when down is ran with explicit service names 818bc3c3 add sync+restart action to watch attribute 38bc6d5d build(deps): bump github.com/containerd/containerd from 1.7.6 to 1.7.7 0b6ce6ee build(deps): bump github.com/google/go-cmp from 0.5.9 to 0.6.0 ae16bbbf build(deps): bump google.golang.org/grpc from 1.58.2 to 1.59.0 d13ad1f9 build(deps): bump golang.org/x/sync from 0.3.0 to 0.4.0 9b4d577c remove refrecence docs generation 14b43c1a remove cucumber tests as we haven't added new ones for a while 9dd081b9 add support of COMPOSE_ENV_FILES env variable to pass a list of env files 2c0b0232 add dry-run support for publish command 599e4b24 extract method to reduce cyclomatic complexity fe8c2780 warn user remote resource is disabled a345515f Don't delete dependent services 8967df7a Apply platform before hashing 4f694919 deps: remove deprecated github.com/pkg/errors 6ecab957 Include image name in error message 12e0ac89 pkg/compose/publish: use empty config descriptor mediaType a6b7d785 pkg/remote/oci: check artifactType instead of config.mediaType 991901f2 pkg/remote/oci: refer to the manifest as manifest 2d971fc9 update the watch warning message when no services with a develop section 78f33619 ci: enable verbose output for e2e tests (#11045) 44d21280 truncate command by default, introduce --no-trunc flag to get the full command ff2ff18c build(deps): bump google.golang.org/grpc from 1.58.1 to 1.58.2 ab81db5b config --xx don't need `env_file` being parsed 61c8be11 remove --timeout=0 flag to cleanup function of watch e2e test compose down command need the watch process to be killed to succeed 6be5f300 move watch from alpha to main command c34c306c TestWatch to use new `develop` section 5ca35c88 implement publish 805541be watch: use official `develop` section (#11026) 8f489d6d build(deps): bump github.com/opencontainers/image-spec 9ea8fbc6 build(deps): bump github.com/moby/buildkit from 0.12.1 to 0.12.2 76f150e4 build(deps): bump gotest.tools/v3 from 3.5.0 to 3.5.1 f447c809 build(deps): bump google.golang.org/grpc from 1.58.0 to 1.58.1 4587d4ba build(deps): bump github.com/containerd/containerd from 1.7.3 to 1.7.6 a697a069 introduce pull --missing flag to only pull images not present in cache 8af49ff3 resolve service reference into container based on observed state f6e31dbc don't rely on depends_on to resolve volume_from, better use observed state 6d5eb6fd update to go1.21.1 9d7e0ad6 correct scale error messages formatting 1a98a70b add scale command 19bbb12f ci: tweak restricted imports in linter (#10992) 7a134578 deps: upgrade Moby to v24.0.6 and gRPC to v1.58.0 (#10991) 13115468 cli: fix `--build` flag for `create` (#10982) e1aa4f77 otel: add args & flags to cli traces (#10974) d7b0b2bd watch: build & launch the project at start (#10957) e0f39ebb pull OCI remote resource c9d54f09 introduce publish (alpha) command 52e54ef9 doc: updated README.md to remove broken link f4f2e934 migrate to github.com/distribution/reference 32c3d0a3 Enable service explicitly requested to be restarted 1fdbcb62 build: pass BuildOptions around explicitly & fix multi-platform issues 407a0d5b up: fix various race/deadlock conditions on exit (#10934) 8caa6f1f pkg/api: replace uuid for basic random id Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-23podman: add new kernel module rrecommendsBruce Ashfield
Testing podman + netavark without kernel-modules installed in the image shows some are missing from the rrecomends. It could be argued that they belong in netavark, but since podman + netavark are almost always used together, we group them here. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-22podman: update to 5.0.0Bruce Ashfield
Tested with cni: root@qemux86-64:~# podman version Client: Podman Engine Version: 5.0.1-dev API Version: 5.0.1-dev Go Version: go1.22.0 Git Commit: 177ea856f579914e0047655f32eb4f9fbc3ddbc4-dirty Built: Thu Mar 21 17:59:57 2024 OS/Arch: linux/amd64 root@qemux86-64:~# rpm -qa | grep cni cni-v1.2.0+rc0+gitb62753aa2bfa365c1ceaff6f25774a8047c896b50+b62753aa2b_b6a0e0bc96-r0.core2_64 root@qemux86-64:~# rpm -qa | grep neta Tested with netavark: root@qemux86-64:~# podman version Client: Podman Engine Version: 5.0.1-dev API Version: 5.0.1-dev Go Version: go1.22.0 Git Commit: 177ea856f579914e0047655f32eb4f9fbc3ddbc4-dirty Built: Thu Mar 21 17:59:57 2024 OS/Arch: linux/amd64 root@qemux86-64:~# rpm -qa | grep netavark netavark-1.10.3-r0.core2_64 Bumping libpod to version v5.0.0-4-g177ea856f, which comprises the following commits: bfc63cc32 fix remote build isolation when server runs as root f32338dfc bump version to v5.0.1-dev e71ec6f1d New release: v5.0.0 6b93d9e11 Update RELEASE_NOTES.md with CVE-2024-1753 eb2b16d6d [v5.0] Bump Buildah to v1.35.1 43b9ea8b9 Adjust to the standard location of gvforwarder used in new images 4a84f39b3 Switch to 5.x WSL machine os stream using new automation a03de4c14 rpm: use macro supported vendoring 069439820 Bump to v5.0.0-dev f8888a13b Bump to v5.0.0-RC7 2e387df07 Add release notes for v5.0.0-rc7 d36ce9c2b fix invalid HTTP header values when hijacking a connection 8891d592b Use faster gzip for compression for 3x speedup for sending large contexts to remote 59512272b pkg/machine: make checkExclusiveActiveVM race free 51eee609c pkg/machine/wsl: remove unused CheckExclusiveActiveVM() 412648207 pkg/machine: CheckExclusiveActiveVM should also check for starting 1ca93f3fb pkg/machine: refresh config after we hold lock 71320df8e rpm: update containers-common dep on f40+ e58cb97de Change API socket to be machine name isolated dbf38779b Makefile: drop tests-included from validate target 0fdd83173 Add release notes for v5.0.0 d7bc7b7b4 do not require policy.json 82597144b Machine decompress.go refactoring follow-up abaa179aa Add target win-gvproxy in winmake.ps1 4c5d26f6f Add final machine endpoint 068ddfd19 update API doc version to 5.0.0 f2af295e4 Bump to 5.0.0-dev d26113ca8 Bump to 5.0.0-rc6 52ed774c2 docs: generate-systemd: add clarification statement 3d6758a61 docs: quadlet: improve docs on root/rootless dirs 885dd2add [CI:DOCS] performance: fix URL and kernel version requirement e6ac569a1 [CI:DOCS] Remove outdated references 364813da6 Add note for RHEL 8.5 e220d1ce6 Update module gopkg.in/go-jose/go-jose.v2 to v2.6.3 [SECURITY] f91b8e77b Update module github.com/go-jose/go-jose/v3 to v3.0.3 [SECURITY] 9b21a5b79 Bump to v5.0.0-dev bbad09bb0 Bump to v5.0.0-rc5 432f4fbf9 Fix Mac CI d54a37399 Complete policy.json inclusion b234bb55e Bump Buildah to v1.35.0 5d3a19f8d podman compose: enable machine socket connection 6f4ee16d9 [CI:DOCS] Add farm command to commands list 25f3a8ce7 podman machine start/stop do not write config unlocked 75fa38d52 [CI:BUILD] Build universal Podman binary for Mac installer 7a7591492 podman machine init: do not write config unlocked 7bfe5e700 Fail on failures to close the file descriptors, and especially the SparseWriter 5e0b7e54c Avoid reliance on fs.ErrClosed in SparseWriter users 4c6505be5 Fix the logic for detecting an unexpected close error 81906081e vendor libhvee-0.7.0 3c9c5be7d podman machine set: change options only locked a65b546c6 Remove copySparseFile 2ba3a2d56 pkg/machine: fix relative DefaultPolicyJSONPath 724c5a06b Don't read full VM File before decompressing ff81cf7c7 [CI:DOCS] Fix windows installer action 4d2fc293c machine: make more use of strongunits 92b67a69a Fix wrong units size return 79012795a fix(deps): update github.com/containers/libhvee digest to 7cee23c d6d260174 [CI:DOCS] Migrate podman container image a349f8d10 fix(deps): update module google.golang.org/protobuf to v1.33.0 39851a0b9 CI: try to fix more flakes 835cfbc05 [CI:BUILD] rpm: Put the podmansh(1) manual in the podmansh sub-package 945995be1 e2e: fix potential race in file-locks test 02403c2e6 Makefile: podman should have correct selinux label 9ee96a956 properly implement pull-error event status 155cd463d fix(deps): update module golang.org/x/tools to v0.19.0 6272abbbb Resurrect auto-port reassignment, but for all providers ef7727238 Refactor env dir and port functions into new leaf pkgs eabf0acfa fix(deps): update module golang.org/x/net to v0.22.0 3b72f9178 Revert "Expose as-tested Mac/Windows repository state" 24516f3ef fix(deps): update module golang.org/x/term to v0.18.0 e8bf9a323 Update podman-for-windows.md 8c9222848 fix(deps): update github.com/containers/libhvee digest to 0ff33af e09444327 machine init: print output to improve UX 530782e11 logformatter: fixes for Macintosh ebce0e71d test/e2e: check for stderr errors in cleanup() ef6d38752 Bump to FreeBSD 13.3 (13.2 vanished) fc4e16366 Bump to v5.0.0-dev bce14b1e6 fix(deps): update module github.com/stretchr/testify to v1.9.0 cfc5b8e0f Bump to v5.0.0-RC4 185981fa5 Copy past golang/expansion form ks8.io/kubernetes Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-22podman: conditionally add cni build tagBruce Ashfield
We should ensure that cni is built as part of podman if that's the configured virtual runtime. Although cni is not a primary networking backend for podman, this also allows it to be skipped if netavark is used. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-21xen: use bzImage for boot (instead of vmlinux)Bruce Ashfield
Testing with the latest oe-core was unable to boot and only syslinux was running. It appears that the desired kernel is not on the /boot partition, and hence the system can't continue. bzImage is installed and available, so we switch to that. We also ensure that both kernel-vmlinux and kernel-image are installed to the rootfs so we can have choices in the future. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-20Revert "docker-compose: update to v2.24.6"Bruce Ashfield
One of the vendor components has deleted a commit that docker-compose is using (and has listed as a replacement in go.mod). Until docker-compose comes up with a solution, we temporarily revert to and older compose. We'll update to the latest 2.23.x if this isn't resolved in 2.24+ before release. This reverts commit 29ec8e5ceacdf20bd1f836268cf01a6a12484ba3.
2024-03-19k3s: package check-config.shBruce Ashfield
In a similar way we package check-config.sh for docker, we package the contrib script for k3s. root@qemux86-64:/# ./usr/share/k3s/check-config.sh [48/4924] Verifying binaries in ./usr/share/k3s: - sha256sum: sha256sums unavailable - links: link list unavailable System: - /usr/sbin iptables v1.8.10 (legacy): ok - swap: disabled - routes: ok Limits: - /proc/sys/kernel/keys/root_maxkeys: 1000000 info: reading kernel config from /proc/config.gz ... Generally Necessary: - cgroup hierarchy: cgroups V2 mounted, cpu|cpuset|memory controllers status: good - CONFIG_NAMESPACES: enabled - CONFIG_NET_NS: enabled - CONFIG_PID_NS: enabled - CONFIG_IPC_NS: enabled - CONFIG_UTS_NS: enabled - CONFIG_CGROUPS: enabled - CONFIG_CGROUP_PIDS: enabled - CONFIG_CGROUP_CPUACCT: enabled - CONFIG_CGROUP_DEVICE: enabled - CONFIG_CGROUP_FREEZER: enabled - CONFIG_CGROUP_SCHED: enabled - CONFIG_CPUSETS: enabled - CONFIG_MEMCG: enabled - CONFIG_KEYS: enabled - CONFIG_VETH: enabled - CONFIG_BRIDGE: enabled - CONFIG_BRIDGE_NETFILTER: enabled - CONFIG_IP_NF_FILTER: enabled (as module) - CONFIG_IP_NF_TARGET_MASQUERADE: enabled (as module) - CONFIG_NETFILTER_XT_MATCH_ADDRTYPE: enabled (as module) - CONFIG_NETFILTER_XT_MATCH_CONNTRACK: enabled (as module) - CONFIG_NETFILTER_XT_MATCH_IPVS: enabled (as module) - CONFIG_NETFILTER_XT_MATCH_COMMENT: enabled (as module) - CONFIG_NETFILTER_XT_MATCH_MULTIPORT: enabled (as module) - CONFIG_IP_NF_NAT: enabled (as module) - CONFIG_NF_NAT: enabled (as module) - CONFIG_POSIX_MQUEUE: enabled Optional Features: - CONFIG_USER_NS: enabled - CONFIG_SECCOMP: enabled - CONFIG_BLK_CGROUP: enabled - CONFIG_BLK_DEV_THROTTLING: enabled - CONFIG_CGROUP_PERF: enabled - CONFIG_CGROUP_HUGETLB: enabled - CONFIG_NET_CLS_CGROUP: enabled - CONFIG_CGROUP_NET_PRIO: enabled - CONFIG_CFS_BANDWIDTH: enabled - CONFIG_FAIR_GROUP_SCHED: enabled - CONFIG_RT_GROUP_SCHED: enabled - CONFIG_IP_NF_TARGET_REDIRECT: enabled (as module) - CONFIG_IP_SET: enabled (as module) - CONFIG_IP_VS: enabled - CONFIG_IP_VS_NFCT: enabled - CONFIG_IP_VS_PROTO_TCP: enabled - CONFIG_IP_VS_PROTO_UDP: enabled - CONFIG_IP_VS_RR: enabled (as module) - CONFIG_EXT4_FS: enabled - CONFIG_EXT4_FS_POSIX_ACL: enabled - CONFIG_EXT4_FS_SECURITY: enabled - Network Drivers: - "overlay": - CONFIG_VXLAN: enabled (as module) Optional (for encrypted networks): - CONFIG_CRYPTO: enabled - CONFIG_CRYPTO_AEAD: enabled - CONFIG_CRYPTO_GCM: enabled - CONFIG_CRYPTO_SEQIV: enabled - CONFIG_CRYPTO_GHASH: enabled - CONFIG_XFRM: enabled - CONFIG_XFRM_USER: enabled (as module) - CONFIG_XFRM_ALGO: enabled - CONFIG_INET_ESP: enabled (as module) - CONFIG_INET_XFRM_MODE_TRANSPORT: missing - Storage Drivers: - "overlay": - CONFIG_OVERLAY_FS: enabled STATUS: pass Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-19kernel/cfg: update configuration for kubernetesBruce Ashfield
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-19kernel/cfg: add space before distro optional featuresBruce Ashfield
distro optional features need to ensure that they are space separated or we'll have configuration failures. Additionally, always add a local configuration fragment for easy debug and enablement of options. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15k3s: set version.UpstreamGolang in binariesBruce Ashfield
k3s will refuse to start if the golang version it was built with doesn't match the VERSION_GOLANG linker variable. As an example: https://gitlab.alpinelinux.org/alpine/aports/-/merge_requests/61668 We query our version of the compiler and set it in the binaries to ensure they match. Note: this may cause issues if you bump the golang compiler, but k3s doesn't rebuild. We'll worry about that when it happens. With this change, k3s starts and the node becomes ready. root@qemux86-64:~# uname -a Linux qemux86-64 6.6.20-yocto-standard #1 SMP PREEMPT_DYNAMIC Sun Mar 3 16:28:22 UTC 2024 x86_64 GNU/Linux root@qemux86-64:~# kubectl get nodes NAME STATUS ROLES AGE VERSION qemux86-64 Ready control-plane,master 10m v1.28.7-k3s1 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15xen-tools/4.17: update to -tipBruce Ashfield
Bumping xen to version RELEASE-4.17.3-53-g0ebd2e49bc, which comprises the following commits: 0ebd2e49bc x86: protect conditional lock taking from speculative execution 074b4c8987 x86/mm: add speculation barriers to open coded locks 2cc5e57be6 locking: attempt to ensure lock wrappers are always inline 468a368b2e percpu-rwlock: introduce support for blocking speculation into critical regions 7454dad6ee rwlock: introduce support for blocking speculation into critical regions 9d2f136328 x86/spinlock: introduce support for blocking speculation into critical regions 0a53565f18 xen: Swap order of actions in the FREE*() macros bf70ce8b34 x86/paging: Delete update_cr3()'s do_locking parameter d85481135d x86/spec-ctrl: Mitigation Register File Data Sampling 6663430b44 x86/spec-ctrl: VERW-handling adjustments d55d52961d x86/spec-ctrl: Rename VERW related options 76af773de5 x86/spec-ctrl: Perform VERW flushing later in exit paths 77f2bec134 x86/vmx: Perform VERW flushing later in the VMExit path abc43cf5a6 x86: Resync intel-family.h from Linux e691f99f17 x86/entry: Introduce EFRAME_* constants 1f94117bec x86/mm: fix detection of last L1 entry in modify_xen_mappings_lite() 1e9808227c hvmloader/PCI: skip huge BARs in certain calculations 54dacb5c02 x86/cpu-policy: Allow for levelling of VERW side effects 2f49d9f89c x86/altcall: always use a temporary parameter stashing variable c4ee68eda9 libxl: Fix segfault in device_model_spawn_outcome a59106b276 xen/livepatch: properly build the noapply and norevert tests 5564323f64 xen/livepatch: fix norevert test attempt to open-code revert c54cf903b0 xen/livepatch: search for symbols in all loaded payloads b11917de0c xen/livepatch: register livepatch regions when loaded 0ce25b46ab x86/spec: do not print thunk option selection if not built-in 693455c3c3 x86/spec: fix INDIRECT_THUNK option to only be set when build-enabled 76ea2aab36 x86/spec: print the built-in SPECULATIVE_HARDEN_* options b75bee1832 xen/sched: Fix UB shift in compat_set_timer_op() 9c0d518eb8 x86/HVM: hide SVM/VMX when their enabling is prohibited by firmware 6cbccc4071 xen/arm: Fix UBSAN failure in start_xen() 49f7760237 x86: account for shadow stack in exception-from-stub recovery 9165001081 x86/spec: fix BRANCH_HARDEN option to only be set when build-enabled 1aafe054e7 x86/altcall: use a union as register type for function parameters on clang 229e8a72ee xen/cmdline: fix printf format specifier in no_config_param() f6b1279254 xen/livepatch: fix norevert test hook setup typo 16f2e47eb1 x86emul: add missing EVEX.R' checks ea86997727 build: make sure build fails when running kconfig fails b974528073 libxl: Disable relocating memory for qemu-xen in stubdomain too 1330a5fe44 build: Replace `which` with `command -v` b3ae0e6201 x86/HVM: tidy state on hvmemul_map_linear_addr()'s error path 415f770d23 x86/hvm: Fix fast singlestep state persistence 463aaf3fbf amd-vi: fix IVMD memory type checks 61da71968e tools/xentop: fix sorting bug for some columns 091466ba55 x86/p2m-pt: fix off by one in entry check assert afb85cf1e8 lib{fdt,elf}: move lib{fdt,elf}-temp.o and their deps to $(targets) 7bd612727d x86/vmx: Disallow the use of inactivity states eca5416f9b x86/vmx: Fix IRQ handling for EXIT_REASON_INIT d0ad2cc5ea x86/intel: ensure Global Performance Counter Control is setup correctly 0ef1fb43dd CirrusCI: drop FreeBSD 12 abcc32f063 x86/amd: Extend CPU erratum #1474 fix to more affected models 6b1864afc1 VT-d: Fix "else" vs "#endif" misplacement f9e1ed51bd pci: fail device assignment if phantom functions cannot be assigned 4f6e9d4327 update Xen version to 4.17.4-pre 949a4aad41 update Xen version to 4.17.3 958706fd2e xen/arm: page: Avoid pointer overflow on cache clean & invalidate e2caee491a xen/sched: fix sched_move_domain() 4000522008 Only compile the hypervisor with -Wdeclaration-after-statement 83ae677d2a x86/x2apic: introduce a mixed physical/cluster mode 6eb98dda5c xen/domain: fix error path in domain_create() 5d01aa7ad5 xen/sched: fix adding offline cpu to cpupool 7d8bd64e11 x86emul: avoid triggering event related assertions 4923450c0e tools/xg: Fix potential memory leak in cpu policy getters/setters eac655d6be xen/x86: In x2APIC mode, derive LDR from APIC ID e3c1ffb2a3 livepatch: do not use .livepatch.funcs section to store internal state 32c3403e4c x86/mem_sharing: Release domain if we are not able to enable memory sharing e1f9cb16e2 xen/sched: fix sched_move_domain() 28f44b603f xen/grant: Fix build in PV_SHIM 0527bab090 x86/spec-ctrl: Add SRSO whitepaper URL c635c17fde x86/i8259: do not assume interrupts always target CPU0 d10db37b78 x86/x2apic: remove usage of ACPI_FADT_APIC_CLUSTER 267ac3c592 x86/pv-shim: fix grant table operations for 32-bit guests 4bd2c8c8b9 x86/mem_sharing: add missing m2p entry when mapping shared_info page 011d20a69c docs: Fix IOMMU command line docs some more bb13e63143 x86: support data operand independent timing mode 40685f9283 iommu/vt-d: fix SAGAW capability parsing ee4ce01198 iommu: fix quarantine mode command line documentation f6996645d2 x86/pvh: fix identity mapping of low 1MB e1275e58c7 x86/amd: Address AMD erratum #1485 1a94fc132a x86: Add bit definitions for Automatic IBRS 7eb2a4eba1 tools/pygrub: Fix pygrub's --entry flag for python3 65e1f3d289 cxenstored: wait until after reset to notify dom0less domains 6384cdf0c3 x86: Clarify that only 5 hypercall parameters are supported 2e87f3a03a docs/sphinx: Switch hypercall-abi.rst to named footnotes 4f43614a89 x86/amd: do not expose HWCR.TscFreqSel to guests 0311ff4a2c x86/spec-ctrl: Remove conditional IRQs-on-ness for INT $0x80/0x82 paths b7a1e10539 iommu/amd-vi: use correct level for quarantine domain page tables 0b56bed864 x86/pv: Correct the auditing of guest breakpoint addresses 3f8b444072 x86/svm: Fix asymmetry with AMD DR MASK context switching 46d00dbf4c libxl: limit bootloader execution in restricted mode 42bf49d74b libxl: add support for running bootloader in restricted mode f5e211654e tools/pygrub: Deprivilege pygrub 8ee19246ad tools/libfsimage: Export a new function to preload all plugins 3797742067 tools/pygrub: Open the output files earlier e7059f16f7 tools/pygrub: Small refactors 8a584126ea tools/pygrub: Remove unnecessary hypercall eb4efdac4c libfsimage/xfs: Add compile-time check to libfsimage 78143c5336 libfsimage/xfs: Sanity-check the superblock during mounts f1cd620cc3 libfsimage/xfs: Amend mask32lo() to allow the value 32 d665c6690e libfsimage/xfs: Remove dead code 0d8f9f7f27 iommu/amd-vi: flush IOMMU TLB when flushing the DTE c4e05c97f5 tools/xenstored: domain_entry_fix(): Handle conflicting transaction 90c540c589 x86/shadow: defer releasing of PV's top-level shadow reference 9ac2f49f5f x86/spec-ctrl: Mitigate the Zen1 DIV leakage 19ee1e1faa x86/amd: Introduce is_zen{1,2}_uarch() predicates 2e2c3efcfc x86/spec-ctrl: Issue VERW during IST exit to Xen e4a71bc0da x86/entry: Track the IST-ness of an entry for the exit paths 5f7efd47c8 x86/entry: Adjust restore_all_xen to hold stack_end in %r14 ba023e93d0 x86/spec-ctrl: Improve all SPEC_CTRL_{ENTER,EXIT}_* comments 3952c73bdb x86/spec-ctrl: Turn the remaining SPEC_CTRL_{ENTRY,EXIT}_* into asm macros 84690fb82c x86/spec-ctrl: Fold DO_SPEC_CTRL_EXIT_TO_XEN into it's single user dc28aba565 x86/spec-ctrl: Fix confusion between SPEC_CTRL_EXIT_TO_XEN{,_IST} d2d2dcae87 x86/AMD: extend Zenbleed check to models "good" ucode isn't known for d31e5b2a9c xen/arm: page: Handle cache flush of an element at the top of the address space 699de51274 x86/irq: fix reporting of spurious i8259 interrupts 8be85d8c0d x86/vmx: Revert "x86/VMX: sanitize rIP before re-entering guest" a939e953cd x86/svm: Fix valid condition in svm_get_pending_event() 7ca58fbef4 tboot: Disable CET at shutdown 0429822978 libxl: slightly correct JSON generation of CPU policy ba360fbb64 build: correct gas --noexecstack check 5116fe12d8 x86/iommu: pass full IO-APIC RTE for remapping table update e08e7330c5 iommu/vtd: rename io_apic_read_remap_rte() local variable 1bd4523d69 x86/ioapic: RTE modifications must use ioapic_write_entry a885649098 x86/ioapic: add a raw field to RTE struct d0cdd34dd8 x86/ioapic: sanitize IO-APIC pins before enabling lapic LVTERR/ESR f04295dd80 xenalyze: Handle start-of-day ->RUNNING transitions e5f9987d5f x86/head: check base address alignment 7b5155a79e xen/vcpu: ignore VCPU_SSHOTTMR_future 052a8d24bc tools/vchan: Fix -Wsingle-bit-bitfield-constant-conversion f00d563095 CI: Resync FreeBSD config with staging e418a77295 rombios: Remove the use of egrep 24487fec3b rombios: Avoid using K&R function syntax ae1045c429 rombios: Work around GCC issue 99578 37f1d68fa3 x86emul: rework wrapping of libc functions in test and fuzzing harnesses 476d2624ec Config.mk: evaluate XEN_COMPILE_ARCH and XEN_OS immediately a1f68fb567 build: evaluate XEN_BUILD_* and XEN_DOMAIN immediately 36e84ea02e build: remove TARGET_ARCH, a duplicate of SRCARCH 56076ef445 build: remove TARGET_SUBARCH, a duplicate of ARCH 1c3927f8f6 build: define ARCH and SRCARCH later 8d84be5b55 libxl: Use XEN_LIB_DIR to store bootloader from pygrub 7d88979849 x86: fix build with old gcc after CPU policy changes 2f337a04bf update Xen version to 4.17.3-pre 322a20add0 Update Xen to version 4.17.2 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15xen/4.17: update to -tipBruce Ashfield
Bumping xen to version RELEASE-4.17.3-53-g0ebd2e49bc, which comprises the following commits: 0ebd2e49bc x86: protect conditional lock taking from speculative execution 074b4c8987 x86/mm: add speculation barriers to open coded locks 2cc5e57be6 locking: attempt to ensure lock wrappers are always inline 468a368b2e percpu-rwlock: introduce support for blocking speculation into critical regions 7454dad6ee rwlock: introduce support for blocking speculation into critical regions 9d2f136328 x86/spinlock: introduce support for blocking speculation into critical regions 0a53565f18 xen: Swap order of actions in the FREE*() macros bf70ce8b34 x86/paging: Delete update_cr3()'s do_locking parameter d85481135d x86/spec-ctrl: Mitigation Register File Data Sampling 6663430b44 x86/spec-ctrl: VERW-handling adjustments d55d52961d x86/spec-ctrl: Rename VERW related options 76af773de5 x86/spec-ctrl: Perform VERW flushing later in exit paths 77f2bec134 x86/vmx: Perform VERW flushing later in the VMExit path abc43cf5a6 x86: Resync intel-family.h from Linux e691f99f17 x86/entry: Introduce EFRAME_* constants 1f94117bec x86/mm: fix detection of last L1 entry in modify_xen_mappings_lite() 1e9808227c hvmloader/PCI: skip huge BARs in certain calculations 54dacb5c02 x86/cpu-policy: Allow for levelling of VERW side effects 2f49d9f89c x86/altcall: always use a temporary parameter stashing variable c4ee68eda9 libxl: Fix segfault in device_model_spawn_outcome a59106b276 xen/livepatch: properly build the noapply and norevert tests 5564323f64 xen/livepatch: fix norevert test attempt to open-code revert c54cf903b0 xen/livepatch: search for symbols in all loaded payloads b11917de0c xen/livepatch: register livepatch regions when loaded 0ce25b46ab x86/spec: do not print thunk option selection if not built-in 693455c3c3 x86/spec: fix INDIRECT_THUNK option to only be set when build-enabled 76ea2aab36 x86/spec: print the built-in SPECULATIVE_HARDEN_* options b75bee1832 xen/sched: Fix UB shift in compat_set_timer_op() 9c0d518eb8 x86/HVM: hide SVM/VMX when their enabling is prohibited by firmware 6cbccc4071 xen/arm: Fix UBSAN failure in start_xen() 49f7760237 x86: account for shadow stack in exception-from-stub recovery 9165001081 x86/spec: fix BRANCH_HARDEN option to only be set when build-enabled 1aafe054e7 x86/altcall: use a union as register type for function parameters on clang 229e8a72ee xen/cmdline: fix printf format specifier in no_config_param() f6b1279254 xen/livepatch: fix norevert test hook setup typo 16f2e47eb1 x86emul: add missing EVEX.R' checks ea86997727 build: make sure build fails when running kconfig fails b974528073 libxl: Disable relocating memory for qemu-xen in stubdomain too 1330a5fe44 build: Replace `which` with `command -v` b3ae0e6201 x86/HVM: tidy state on hvmemul_map_linear_addr()'s error path 415f770d23 x86/hvm: Fix fast singlestep state persistence 463aaf3fbf amd-vi: fix IVMD memory type checks 61da71968e tools/xentop: fix sorting bug for some columns 091466ba55 x86/p2m-pt: fix off by one in entry check assert afb85cf1e8 lib{fdt,elf}: move lib{fdt,elf}-temp.o and their deps to $(targets) 7bd612727d x86/vmx: Disallow the use of inactivity states eca5416f9b x86/vmx: Fix IRQ handling for EXIT_REASON_INIT d0ad2cc5ea x86/intel: ensure Global Performance Counter Control is setup correctly 0ef1fb43dd CirrusCI: drop FreeBSD 12 abcc32f063 x86/amd: Extend CPU erratum #1474 fix to more affected models 6b1864afc1 VT-d: Fix "else" vs "#endif" misplacement f9e1ed51bd pci: fail device assignment if phantom functions cannot be assigned 4f6e9d4327 update Xen version to 4.17.4-pre 949a4aad41 update Xen version to 4.17.3 958706fd2e xen/arm: page: Avoid pointer overflow on cache clean & invalidate e2caee491a xen/sched: fix sched_move_domain() 4000522008 Only compile the hypervisor with -Wdeclaration-after-statement 83ae677d2a x86/x2apic: introduce a mixed physical/cluster mode 6eb98dda5c xen/domain: fix error path in domain_create() 5d01aa7ad5 xen/sched: fix adding offline cpu to cpupool 7d8bd64e11 x86emul: avoid triggering event related assertions 4923450c0e tools/xg: Fix potential memory leak in cpu policy getters/setters eac655d6be xen/x86: In x2APIC mode, derive LDR from APIC ID e3c1ffb2a3 livepatch: do not use .livepatch.funcs section to store internal state 32c3403e4c x86/mem_sharing: Release domain if we are not able to enable memory sharing e1f9cb16e2 xen/sched: fix sched_move_domain() 28f44b603f xen/grant: Fix build in PV_SHIM 0527bab090 x86/spec-ctrl: Add SRSO whitepaper URL c635c17fde x86/i8259: do not assume interrupts always target CPU0 d10db37b78 x86/x2apic: remove usage of ACPI_FADT_APIC_CLUSTER 267ac3c592 x86/pv-shim: fix grant table operations for 32-bit guests 4bd2c8c8b9 x86/mem_sharing: add missing m2p entry when mapping shared_info page 011d20a69c docs: Fix IOMMU command line docs some more bb13e63143 x86: support data operand independent timing mode 40685f9283 iommu/vt-d: fix SAGAW capability parsing ee4ce01198 iommu: fix quarantine mode command line documentation f6996645d2 x86/pvh: fix identity mapping of low 1MB e1275e58c7 x86/amd: Address AMD erratum #1485 1a94fc132a x86: Add bit definitions for Automatic IBRS 7eb2a4eba1 tools/pygrub: Fix pygrub's --entry flag for python3 65e1f3d289 cxenstored: wait until after reset to notify dom0less domains 6384cdf0c3 x86: Clarify that only 5 hypercall parameters are supported 2e87f3a03a docs/sphinx: Switch hypercall-abi.rst to named footnotes 4f43614a89 x86/amd: do not expose HWCR.TscFreqSel to guests 0311ff4a2c x86/spec-ctrl: Remove conditional IRQs-on-ness for INT $0x80/0x82 paths b7a1e10539 iommu/amd-vi: use correct level for quarantine domain page tables 0b56bed864 x86/pv: Correct the auditing of guest breakpoint addresses 3f8b444072 x86/svm: Fix asymmetry with AMD DR MASK context switching 46d00dbf4c libxl: limit bootloader execution in restricted mode 42bf49d74b libxl: add support for running bootloader in restricted mode f5e211654e tools/pygrub: Deprivilege pygrub 8ee19246ad tools/libfsimage: Export a new function to preload all plugins 3797742067 tools/pygrub: Open the output files earlier e7059f16f7 tools/pygrub: Small refactors 8a584126ea tools/pygrub: Remove unnecessary hypercall eb4efdac4c libfsimage/xfs: Add compile-time check to libfsimage 78143c5336 libfsimage/xfs: Sanity-check the superblock during mounts f1cd620cc3 libfsimage/xfs: Amend mask32lo() to allow the value 32 d665c6690e libfsimage/xfs: Remove dead code 0d8f9f7f27 iommu/amd-vi: flush IOMMU TLB when flushing the DTE c4e05c97f5 tools/xenstored: domain_entry_fix(): Handle conflicting transaction 90c540c589 x86/shadow: defer releasing of PV's top-level shadow reference 9ac2f49f5f x86/spec-ctrl: Mitigate the Zen1 DIV leakage 19ee1e1faa x86/amd: Introduce is_zen{1,2}_uarch() predicates 2e2c3efcfc x86/spec-ctrl: Issue VERW during IST exit to Xen e4a71bc0da x86/entry: Track the IST-ness of an entry for the exit paths 5f7efd47c8 x86/entry: Adjust restore_all_xen to hold stack_end in %r14 ba023e93d0 x86/spec-ctrl: Improve all SPEC_CTRL_{ENTER,EXIT}_* comments 3952c73bdb x86/spec-ctrl: Turn the remaining SPEC_CTRL_{ENTRY,EXIT}_* into asm macros 84690fb82c x86/spec-ctrl: Fold DO_SPEC_CTRL_EXIT_TO_XEN into it's single user dc28aba565 x86/spec-ctrl: Fix confusion between SPEC_CTRL_EXIT_TO_XEN{,_IST} d2d2dcae87 x86/AMD: extend Zenbleed check to models "good" ucode isn't known for d31e5b2a9c xen/arm: page: Handle cache flush of an element at the top of the address space 699de51274 x86/irq: fix reporting of spurious i8259 interrupts 8be85d8c0d x86/vmx: Revert "x86/VMX: sanitize rIP before re-entering guest" a939e953cd x86/svm: Fix valid condition in svm_get_pending_event() 7ca58fbef4 tboot: Disable CET at shutdown 0429822978 libxl: slightly correct JSON generation of CPU policy ba360fbb64 build: correct gas --noexecstack check 5116fe12d8 x86/iommu: pass full IO-APIC RTE for remapping table update e08e7330c5 iommu/vtd: rename io_apic_read_remap_rte() local variable 1bd4523d69 x86/ioapic: RTE modifications must use ioapic_write_entry a885649098 x86/ioapic: add a raw field to RTE struct d0cdd34dd8 x86/ioapic: sanitize IO-APIC pins before enabling lapic LVTERR/ESR f04295dd80 xenalyze: Handle start-of-day ->RUNNING transitions e5f9987d5f x86/head: check base address alignment 7b5155a79e xen/vcpu: ignore VCPU_SSHOTTMR_future 052a8d24bc tools/vchan: Fix -Wsingle-bit-bitfield-constant-conversion f00d563095 CI: Resync FreeBSD config with staging e418a77295 rombios: Remove the use of egrep 24487fec3b rombios: Avoid using K&R function syntax ae1045c429 rombios: Work around GCC issue 99578 37f1d68fa3 x86emul: rework wrapping of libc functions in test and fuzzing harnesses 476d2624ec Config.mk: evaluate XEN_COMPILE_ARCH and XEN_OS immediately a1f68fb567 build: evaluate XEN_BUILD_* and XEN_DOMAIN immediately 36e84ea02e build: remove TARGET_ARCH, a duplicate of SRCARCH 56076ef445 build: remove TARGET_SUBARCH, a duplicate of ARCH 1c3927f8f6 build: define ARCH and SRCARCH later 8d84be5b55 libxl: Use XEN_LIB_DIR to store bootloader from pygrub 7d88979849 x86: fix build with old gcc after CPU policy changes 2f337a04bf update Xen version to 4.17.3-pre 322a20add0 Update Xen to version 4.17.2 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15xen-tools-dev: update to -tipBruce Ashfield
Bumping xen to version 4.18.0-rc4-707-g03cf7ca23e, which comprises the following commits: 03cf7ca23e x86: protect conditional lock taking from speculative execution 42a572a38e x86/mm: add speculation barriers to open coded locks 197ecd838a locking: attempt to ensure lock wrappers are always inline f218daf6d3 percpu-rwlock: introduce support for blocking speculation into critical regions a1fb15f616 rwlock: introduce support for blocking speculation into critical regions 7ef0084418 x86/spinlock: introduce support for blocking speculation into critical regions c4f427ec87 xen: Swap order of actions in the FREE*() macros fb5b6f6744 x86/spec-ctrl: Mitigation Register File Data Sampling 1eb91a8a06 x86/spec-ctrl: VERW-handling adjustments f7603ca252 x86/spec-ctrl: Rename VERW related options 0a666cf2cd x86/spec-ctrl: Perform VERW flushing later in exit paths 475fa20b73 x86/vmx: Perform VERW flushing later in the VMExit path 7c81558208 x86/mm: fix detection of last L1 entry in modify_xen_mappings_lite() 1396892d80 xen/ppc: switch PPC to use asm-generic/device.h e90089db3f arm/smmu: address some violations of MISRA C Rule 20.7 acb13d1b81 x86/irq: parenthesize negative constants 22d0e3487f xen/arm: address some violations of MISRA C Rule 20.7 d937b2d1ee xen/param: address violations of MISRA C Rule 20.7 e51649b4c2 xen/include: address violations of MISRA C Rule 20.7 9106769ea9 xen/spinlock: address violations of MISRA C Rule 20.7 c44cac2290 xen/x86: bzImage parse kernel_alignment bf7a2eaede features.h: Replace hard tabs 698c35184c xen/domain.h: Centrialize is_domain_direct_mapped() 8395f275eb MAINTAINERS: drop AMD SVM and Intel VT-x sections 8ef780a1cf xen/mem-access: ifdef inclusion of <asm/mem_access.h> 136fff30b3 xen/asm-generic: introduce stub header monitor.h ef31ffbc3d automation/eclair: add deviation for MISRA C:2012 Rule 16.6 90173fc5a2 tools/9pfsd: Fix build error caused by strerror_r b52c45b1bd MAINTAINERS: add an entry for tools/9pfsd b083b1c393 x86/livepatch: Relax permissions on rodata too ef969144a4 xen/virtual-region: Include rodata pointers 989556c6f8 xen/virtual-region: Rename the start/end fields 08bb338f09 SUPPORT.md: add xen-9pfsd 49b664f5bf x86/asm: add commas to further macros definitions/invocations 4ad4df0964 CHANGELOG: add an entry for 9pfsd 9249a441c9 x86/asm: add commas to BUILD_BUG_ON 5daf46b439 Kbuild: simplify as-insn a little 2f7481d592 x86/EFI: correct compiler probing 66c8e9b76c tools/xentop: Add VBD3 support to xentop f4900d6d69 9pfsd: allow building with old glibc e14fece7d4 xen/{RISCV,PPC}/xen.lds: Delete duplicate _erodata definitions cd53ee9c41 SUPPORT.md: clarify support of booting 32-bit Xen on ARMv8 e7b62fcfd9 x86: i387.c cleanup 57acad12a0 hvmloader/PCI: skip huge BARs in certain calculations 91ed573391 xen/riscv: introduces acquire, release and full barriers cfbcfce494 Argo: don't obtain excess page references fc84b4a5a3 xen/tasklet: address violations of MISRA C Rule 20.7 47fdf9a79f xen/errno: address violations of MISRA C Rule 20.7 771c4e3963 xen/arm: smmuv3: address violations of MISRA C Rule 20.7 9174674c3b arch: move array_index_mask_nospec() 2d514678a3 hvmloader: suppress GNU ld 2.39 warning about RWX load segments 856664f774 docs/misra/rules.rst: add rule 14.4 c40bc0576d x86/mm: re-implement get_page_light() using an atomic increment de17162caf x86/cpu-policy: Allow for levelling of VERW side effects 0263dc9069 tests/resource: Fix HVM guest in !SHADOW builds e2d8a65225 x86/cpu-policy: Fix visibility of HTT/CMP_LEGACY in max policies 5420aa165d x86/cpu-policy: Hide x2APIC from PV guests efad36f1ba docs/misra/rules.rst: Fix entry for 20.12 rule 4cac80e226 docs/misra/rules.rst: add rule 16.6 and 20.12 e1de3a0536 automation/eclair: tag MISRA C:2012 Rule 8.2 as clean b87697fc1a automation/eclair: fully deviate MISRA C:2012 Rules 5.7 and 18.7 635dd1120a pci: fix locking around vPCI removal in pci_remove_device() d388673d1b tools/xenstored: have a single do_control_memreport() 8937d44628 tools/xenstored: support complete log capabilities in stubdom 2a750fcf7d tools/xenstored: add helpers for filename handling 0a999849c8 tools/xenstored: mount 9pfs device in stubdom 254c6f787c stubdom: extend xenstore stubdom configs 90c0b97e27 config: update Mini-OS commit 7159164bee xen/riscv: introduce nospec.h c20850540a x86/altcall: always use a temporary parameter stashing variable c103bb8ad4 x86: remove redundant XEN_SHSTK check from reinit_bsp_stack() b36d850c22 docs: Move function and macro properties in docs/misra 6d05d52940 x86/memsharing: use an atomic add instead of a cmpxchg loop d4f3d35f04 libxl: Fix segfault in device_model_spawn_outcome 54fd7b9974 xen/livepatch: group and document payload hooks e579677095 xen/livepatch: properly build the noapply and norevert tests cdae267ce1 xen/livepatch: fix norevert test attempt to open-code revert d2daa40fb3 xen/livepatch: search for symbols in all loaded payloads a57b4074ab xen/livepatch: register livepatch regions when loaded 195e75371b x86: Resync intel-family.h from Linux b2b3d40f9a xen/arm: Fix arm32 build failure when early printk is enabled ba0d1a7ced xen/lib: introduce generic find next bit operations 801c4e7262 tests/vpci: fix unit tests after locking change 576528a2a7 x86/spec: do not print thunk option selection if not built-in 8441fa806a x86/spec: fix INDIRECT_THUNK option to only be set when build-enabled 6e9507f7d5 x86/spec: print the built-in SPECULATIVE_HARDEN_* options 52ebde3cfa vpci/header: program p2m with guest BAR view 622bdd9628 vpci/header: handle p2m range sets per BAR 99eeb2eb0b rangeset: add rangeset_purge() function fe62abfcb2 rangeset: add RANGESETF_no_print flag 8c5bca7074 vpci/header: implement guest BAR register handlers e262826159 vpci/header: rework exit path in init_header() f20dde9259 vpci: add hooks for PCI device assign/de-assign 80b0eb095a vpci: restrict unhandled read/write operations for guests 4f78438b45 vpci: use per-domain PCI lock to protect vpci structure cfe3ad6712 x86: re-run exception-from-stub recovery selftests with CET-SS enabled 91f5f7a915 x86: account for shadow stack in exception-from-stub recovery 28154a245c x86: document how stub exception recovery works 7356bb5e47 xen/arm: ffa: reclaim shared memory on guest destroy ca7c872c70 xen: introduce Kconfig function alignment option 84b9617c03 xen/ppc: address violations of MISRA C:2012 Rule 11.8 150e7a4e79 automation: remove bin86/dev86 from tumbleweed image 37541208f1 x86/entry: Introduce EFRAME_* constants 0603a0c092 x86/entry: Simplify expressions in compat_restore_all_guest() 7d3c91377d x86/entry: Adjustments to "reduce assembly code size of entry points" 6f1b280876 docs/sphinx: Start an FAQ, and add Kconfig/CET details 03fb5f503c nestedsvm: Remove bogus debug message from nestedsvm_check_intercepts 2beef32b42 xen/hvm: Move other hvm_function_table booleans into the caps bitfield 42b8e78b37 svm: Improve type of cpu_has_svm_feature 5cd5e3070b xen/hvm: Convert hap_capabilities into a bitfield 60e00f77a5 x86/spec: fix BRANCH_HARDEN option to only be set when build-enabled 21051291ad automation: Rework "build-each-commit-gcc" test 56a9641359 x86: Dom0 "broken ELF" reporting adjustments 164daecb18 x86/HVM: limit upcall vector related verbosity 8de3afc0b4 xen: move BUG_ON(), WARN_ON(), ASSERT(), ASSERT_UNREACHABLE() to xen/bug.h 2ce562b2a4 x86/altcall: use a union as register type for function parameters on clang ef101f5251 xen/cmdline: fix printf format specifier in no_config_param() 001d7fdb55 xen/consoled: drop return value from consoled_guest_rx/tx f49fb70d3d x86/hpet: use an atomic add instead of a cmpxchg loop f0622dd4fd xen/livepatch: fix norevert test hook setup typo 92babc88f6 Revert stubdom+xenstore 9pfs changes f5e1c527d0 tools/xenstored: have a single do_control_memreport() a76f8809f1 tools/xenstored: support complete log capabilities in stubdom 93892648ff tools/xenstored: add helpers for filename handling 297a2587e6 tools/xenstored: mount 9pfs device in stubdom e21d9dbf44 tools: add 9pfs device to xenstore-stubdom 0b761781c4 stubdom: extend xenstore stubdom configs 4287a71f9b tools/xl: support new 9pfs backend xen_9pfsd ab5a6b5986 tools/libs/light: add backend type for 9pfs PV devices 098d868e52 tools/oxenstored: Make Quota.t pure b6cf604207 tools/oxenstored: Use Map instead of Hashtbl for quotas 7e5b662b28 x86/altp2m: p2m_altp2m_get_or_propagate() should honor ap2m->default_access 98e79be5b6 xen/*/asm-offset: Fix bad copy&paste from x86 812bdc99f4 xen-analysis.py: Accept deviation comment at the end of the line d064b429b6 xen-analysis.py: Substitute only the comment instead of the line ddd6696fc6 xen-analysis.py: Use named group for tag regex 8c5e4ce145 consolidate do_bug_frame() / bug_fn_t f75b051f78 x86/APIC: drop regs parameter from direct vector handler functions 4da40a267a IRQ: drop regs parameter from handler functions b31e753fe7 serial: drop serial_[rt]x_interrupt()'s regs parameter e1e0579afa PV-shim: drop pv_console_rx()'s regs parameter 4f09e51027 serial: drop serial_rx_fn's regs parameter feb338d843 keyhandler: drop regs parameter from handle_keyregs() ba3c8373cd serial: fake IRQ-regs context in poll handlers 9ee7dc877b x86emul: make run32 test harness goal work again cb319824bf x86emul: add missing EVEX.R' checks 54557ee9b4 x86/uaccess: add attribute noreturn to __{get,put}_user_bad() d34e5fa2e8 build: make sure build fails when running kconfig fails bb1619ed4f tools/9pfsd: add missing va_end() in fill_data() d9fe1d743f Constify some parameters 512f88a92d xen/riscv: use some asm-generic headers a4a790f432 gnttab: fully ignore zero-size copy requests 97883aa269 libxl: Disable relocating memory for qemu-xen in stubdomain too f8791d0fd3 xen/arm: Make hwdom vUART optional feature 981f722efa xen/asm-generic: fold struct devarch into struct dev c0dd41e055 xen/arm: switch Arm to use asm-generic/device.h c2263735f5 xen/asm-generic: introduce generic device.h c144b9e324 x86: Reduce assembly code size of entry points 1eb013ef97 libxl: Add "grant_usage" parameter for virtio disk devices f93629b18b build: Replace `which` with `command -v` 4917b9a423 mm: add the __must_check attribute to {gfn,mfn,dfn}_add() 0441c3acc7 xen/arm: fixmap: Rename the fixmap slots to follow the x86 convention 78398afae1 tools/xen-9pfsd: add 9pfs read request support e93172d57d tools/xen-9pfsd: add 9pfs write request support 01c569f3fc tools/xen-9pfsd: add 9pfs stat request support 34449f8cf0 tools/xen-9pfsd: add 9pfs create request support 052a3a7fd9 tools/xen-9pfsd: add 9pfs clunk request support 7c0d5f3cac tools/xen-9pfsd: add 9pfs open request support 9615e40f47 tools/xen-9pfsd: add 9pfs walk request support 27815b5f8f tools/xen-9pfsd: add 9pfs attach request support bcec59cf7f tools/xen-9pfsd: add 9pfs version request support 7809132b1a tools/xen-9pfsd: add 9pfs response generation support 8219809423 tools/xen-9pfsd: add transport layer d43c72a785 tools/xen-9pfsd: connect to frontend c3e583b01b tools: add a new xen 9pfs daemon c4d6802d33 docs: add a best practices coding guide d9bfc2810e iommu/x86: fix IVMD/RMRR range checker loop increment d670c1a38b libxl: Fix comment for LIBXL_HAVE_VMTRACE_BUF_KB 40da8a7e4b tools: add access macros for unaligned data 03e08d44c8 tools/xentop: add option to display dom0 first d9d4c5a142 libxl: Allow Phy backend for CDROM devices 4e41947bad libxl: Create empty file for Phy cdrom 4f2c81d509 xen/riscv: define an address of frame table 9bb281d328 Argo: drop meaningless mfn_valid() check b3bea912a7 docs/misra: add asm-offset.c to exclude-list a185f88e98 iommu/vt-d: switch to common RMRR checker e45801dea1 iommu/x86: introduce a generic IVMD/RMRR range validity helper e72f951df4 x86/HVM: tidy state on hvmemul_map_linear_addr()'s error path 2fb516157f xen/riscv: introduce event.h a541ddadec xen/riscv: introduce time.h af46249ad8 xen/riscv: introduce regs.h 4988704e00 xen/riscv: introduce p2m.h 6cb8ced1e8 xen/riscv: introduce irq.h ebb64781dd xen/riscv: introduce smp.h 05ff18b4f0 xen/riscv: introduce flushtlb.h 392c0c871d xen/riscv: introduce setup.h f9f339d33f xen: avoid generation of empty asm/iommu.h 2c162e2f69 xen/riscv: introduce guest_atomics.h d42ebc95e2 xen/riscv: introduce cpufeature.h 4c13f9c3fc xen: add support in public/hvm/save.h for PPC and RISC-V 6d7d8d2b3e libxl: Add support for blktap vbd3 cbbca7be4a x86/p2m: make p2m_get_page_from_gfn() handle grant case correctly 772380f754 eclair: remove wrongly added -eval_file 897def94b5 x86/hvm: Fix fast singlestep state persistence a773adedbd x86/PV32: restore PAE-extended-CR3 logic 4e5bd87d24 config: update Mini-OS commit 06024b2619 xen/serial: Drop serial_{put,get}c e36c106b0b tools/ocaml: Add missing vmtrace_buf_kb field 837e5144ac x86: convert misc assembly function annotations 00ae55ad76 SVM: convert entry point annotations e11f576650 xen/arm: Fix UBSAN failure in start_xen() f4519ee87e eclair: move function and macro properties outside ECLAIR 38ae4739d8 xen/ns16550: address violations of MISRA C:2012 Rule 13.1 e8f1bb803f block-common: Fix same_vm for no targets 878159bf25 VMX: tertiary execution control infrastructure 59a69674b5 automation: Switch yocto-qemux86-64 job to run on x86 57a923bfd9 golang: Regen binding 02c6ad4515 x86/entry: Reduce assembly instruction size 80b01e20d0 x86/paging: Use more specific constant 83afa31358 amd-vi: fix IVMD memory type checks 8ac8999d70 x86/srat: vmap the pages for acpi_slit 861d987726 xen/numa: vmap the pages for memnodemap f940facaa3 acpi: vmap pages in acpi_os_alloc_memory ef0873946c xen/vmap: Introduce vmap_size() and use it 2213b5a293 setup: Move vm_init() before acpi calls 1cb7949b37 xen/evtchn: Remove useless assignment in evtchn_alloc_unbound() 3ce2e1f606 tools/xenstored: map stubdom interface 097388d520 tools/xenstored: split domain_init() 5edc819ed5 tools/xenstored: rework ring page (un)map functions a3e37f7024 tools/xenstored: get own domid in stubdom case e199a30680 tools/xenstored: move all socket handling into posix.c aae54458a1 tools/xenstored: move all log-pipe handling into posix.c 511cc30cf8 tools/xenstored: move systemd handling to posix.c e767a98f04 tools/xenstored: add early_init() function 1c2c7f7901 tools/xenstored: rename xenbus_evtchn() 9c076988fe tools/helpers: allocate xenstore event channel for xenstore stubdom 29f17d8374 tools/xentop: fix sorting bug for some columns 10e0fb655d x86/cpu: Fix mixed tabs/spaces 9eee78988c xen/bitmap: Deduplicate __bitmap_weight() implementations 930605f155 x86/ucode: Remove accidentally introduced tabs 660f8a7501 x86/CPU: convert vendor hook invocations to altcall e931edccc5 x86/guest: finish conversion to altcall 044168fa3a x86: arrange for ENDBR zapping from <vendor>_ctxt_switch_masking() 3f819af8a7 xen: Remove debugger.h d182f9feae x86: Remove gdbstub 583f1d0950 x86/spec-ctrl: Expose BHI_CTRL to guests 478e4787fa x86/spec-ctrl: Expose RRSBA_CTRL to guests 4dd6760706 x86/spec-ctrl: Expose IPRED_CTRL to guests c852ca5c05 tools/ocaml: Bump minimum version to OCaml 4.05 558e84b7ff xen/bitmap: Consistently use unsigned bits values 4f0b0ffff3 x86/traps: Annotate {l,c}star_enter() as nocall fb22c33d17 x86/boot: Add braces in reloc.c ae6d4fd876 xen/sched: Fix UB shift in compat_set_timer_op() 9d701bc9ab x86/hvm: Fix UBSAN failure in do_hvm_op() printk 8e36c668ca xen: Drop superfluous semi-colons 4c2d50d586 xen/arm: Properly clean update to init_ttbr and smp_up_cpu bc45f20c01 shim: avoid building of vendor IOMMU code 9916fdff4b IOMMU: iommu_use_hap_pt() implies CONFIG_HVM 1aee91fe98 xen/page_alloc: introduce init_free_page_fields() helper 18cd984905 xenpm: Print message for disabled commands d3df0f180f x86/PoD: simplify / improve p2m_pod_cache_add() cc6ba68edf VT-d: Fix "else" vs "#endif" misplacement cb4ecb3cc1 pci: fail device assignment if phantom functions cannot be assigned 4a7e71aa08 x86/iommu: cleanup unused functions 0e1bd15a1d x86/iommu: switch hwdom IOMMU to use a rangeset 79fcc0e9d7 x86/iommu: remove regions not to be mapped 40a7467702 x86: purge NMI_IO_APIC 4396761654 x86/APIC: purge {GET,SET}_APIC_DELIVERY_MODE() 1097878338 NUMA: no need for asm/numa.h when !NUMA a75c5aa2b2 xen/vmap: Check the page has been mapped in vm_init_type() c378ff8983 x86/entry: fix jump into restore_all_guest without %rbx correctly set dbdd7e8df7 xen/arm64: head: Use PRINT_ID() for secondary CPU MMU-off boot code 9a5114074b arm/smpboot: Move smp_up_cpu to a new section .data.idmap 5ed59e62c6 arm/mmu: Move init_ttbr to a new section .data.idmap b24b540de6 x86/entry: Avoid register spilling in cr4_pv32_restore() 024e7131be tools: don't expose XENFEAT_hvm_pirqs by default 72cad62abb x86/hvm: make X86_EMU_USE_PIRQ optional cf7fe8b72d x86/ucode: Fix stability of the raw CPU Policy rescan 052d78fbec pmstat: Limit hypercalls under HWP e047b8d0fa x86/entry: replace two GET_CURRENT() uses f575f05524 x86/NMI: refine "watchdog stuck" log message 610775d0dd x86/p2m-pt: fix off by one in entry check assert 98ae35cab0 x86/entry: Fix ELF metadata for NMI and handle_ist_exception 55fbecb64e x86/kexec: Drop compatibility_mode_far bbf7d6acd3 xen/riscv: introduce guest_access.h f132bb5b6b xen/riscv: introduce domain.h f67bddf3bc IRQ: generalize [gs]et_irq_regs() 79519fcfa0 lib{fdt,elf}: move lib{fdt,elf}-temp.o and their deps to $(targets) 2cfdbd5863 PPC: switch entry point annotations to common model 4900c939cb tools/binfile: switch to common annotations model 7015f337a2 RISC-V: annotate entry points with type and size ae08d0c304 Arm: annotate entry points with type and size 9de79317e8 x86: also mark assembler globals hidden b3a9037550 x86: annotate entry points with type and size df2209f9b7 common: assembly entry point type/size annotations 85ba4d050f x86/MCE: switch some callback invocations to altcall 9f58616ddb x86/MCE: separate BSP-only initialization 1212af3e8c x86/PV: avoid indirect call for I/O emulation quirk hook e9e0eb30d4 x86/MTRR: avoid several indirect calls 1bc07ebcac core-parking: use alternative_call() b25607e528 xen: Fold exit paths in find_text_region() c30021be30 xen/livepatch: Make check_for_livepatch_work() faster in the common case 86d0edda34 x86/cpuid: Change cpuid() from a macro to a static inline 3643bb53a0 x86/vmx: Disallow the use of inactivity states d1f8883aeb x86/vmx: Fix IRQ handling for EXIT_REASON_INIT 6522ef73fd x86/vmx: Collect all empty VMExit cases together 730d2637a8 x86/HPET: avoid an indirect call 467ae515ca cpufreq: finish genapic conversion to altcall b1cc53753c x86/APIC: finish genapic conversion to altcall 6bdb965178 x86/intel: ensure Global Performance Counter Control is setup correctly f3f6c500e2 xen/arm64: head: Allow to use early printk while on 1:1 mapping d5a2ff06b1 xen/arm32: head: Move earlyprintk 'hex' to .rodata.idmap c2ce346647 CirrusCI: drop FreeBSD 12 cd574f3ed8 x86/vPMU: drop regs parameter from interrupt functions 7a3bd1cbc4 x86/vIRQ: split PCI link load state checking from actual loading 69c89dd787 x86/vPIC: check values loaded from state save record c53013da6f x86/vPIT: check values loaded from state save record c3c6e9b8e8 x86/HVM: adjust save/restore hook registration for optional check handler 5b6cab423c x86/HVM: split restore state checking from state loading 5e600b4fb9 NUMA: limit first_valid_mfn exposure 137c08aa07 xen/riscv: introduce system.h cef805dce4 x86emul: support SM4 390777414a x86emul: support SM3 aa18530282 x86emul: support SHA512 c8bb7553f2 x86emul: support AVX-VNNI-INT16 1ec3fe1f66 xen/arm32: head: Improve logging in head.S 410837189e xen/arm: bootfdt: Harden handling of malformed mem reserve map 89c384c525 xen/common: Don't dereference overlay_node after checking that it is NULL 0f9a688f60 xen/arm32: head: Rework how the fixmap and early UART mapping are prepared c27c8922f2 x86/iommu: introduce a rangeset to perform hwdom IOMMU setup 48193fe00a x86/HVM: drop tsc_scaling.setup() hook 0b5f149338 x86/HVM: hide SVM/VMX when their enabling is prohibited by firmware f628fc8d18 VMX: drop vmx_virt_exception and make vmx_vmfunc static 2467ab2a74 x86/mwait-idle: fix ubsan warning cc5a436002 xen/public: add some more 9pfs xenstore paths 589d8cf146 xen: ifdef inclusion of <asm/grant_table.h> in <xen/grant_table.h> 42b814b7ff xen/asm-generic: introduce stub header softirq.h e2c7111d65 xen/asm-generic: introduce generic div64.h header 5a3ace21f3 xen/arm: smmu-v3: address violations of MISRA C:2012 Rule 16.3 49818cde63 xen: remove asm/unaligned.h f61685f1fa xen: make include/xen/unaligned.h usable on all architectures 23db507a01 x86/amd: Extend CPU erratum #1474 fix to more affected models b74c735f88 xen/xmalloc: XMEM_POOL_POISON improvements 3909fb4692 docs/misra: exclude files inherited from ACPI CA from MISRA compliance 773db8f307 x86/platform: tidy do_platform_op() a little 6ccd2501b4 x86/mm: use "break" in arch_memory_op() 8862c7b8b6 pci: introduce per-domain PCI rwlock f4d0859da3 pci: msi: pass pdev to pci_enable_msi() function 94039d97e2 amd-vi: set IOMMU page table levels based on guest reported paddr width ad3a4b7c76 x86/p2m: move and rename paging_max_paddr_bits() 6efc654a0b tools/xg: Reserialise CPU policies with the allocated number of leaves. ecabcd0d4e xen/bug: Complete outstanding TODO 5f7fd392d9 driver/char: Drop run_in_exception_handler() ifdefary 1fa104ee7a tools/pygrub: Drop compatibility symlink e9786ba9ee xen/arm: mmu: address a violations of MISRA C:2012 Rule 16.3 2750111969 xen/arm: guest_walk: address violations of MISRA C:2012 Rule 16.3 f1e956cdbf xen/arm: traps: address violations of MISRA C:2012 Rule 16.3 7d18ab2b9b xen/arm: gic-v3: address violations of MISRA C:2012 Rule 16.3 18828f00e4 automation/eclair_analysis: fix typo in deviation. 5171930429 docs/misra/rules.rst: add Rule 17.1 913a177416 x86/IO-APIC: correct RTE polarity comment e6cb988a3d xen/common: address violations of MISRA C:2012 Rule 11.8 9d8c3bc887 xen: remove unused function ERR_CAST 23a5fb3df7 xen: add deviations for Rule 11.8 1fb1d3e77f xen/arm: address violations of MISRA C:2012 Rule 11.8 725acf8e4d xen/arm: vcpreg: address violation of MISRA C Rule 2.1 2a0f5a11f2 xen/arm: traps: add ASSERT_UNREACHABLE() where needed c877b90928 xen/arm: address MISRA C:2012 Rule 2.1 51ffb33118 xen: move declaration of first_valid_mfn to xen/numa.h fba913a21a docs/misra: add entries to exclude-list ed45dd16c4 automation/eclair: update configuration of MISRA C:2012 Rule 5.6 a128d8da91 automation/eclair: add deviations for MISRA C:2012 Rule 16.3 1b42304fd1 xen/arm: ffa: return fpi size from FFA_PARTITION_INFO_GET 05b6368ba0 x86: don't open-code max_page calculation nor pfn_to_paddr() 11126964d8 automation/eclair_analysis: avoid violation of MISRA Rule 2.1 bfd52e979d xen/shutdown: address MISRA C:2012 Rule 2.1 36a05926b0 xen/wait: address violations of MISRA C Rule 11.9 e66237eb1a x86/hvm: dom0: use helper to get sizeof struct field 985fe473c0 x86/ioapic: use NULL as a null pointer constant 0940d34291 xen/hvm: use NULL as a null pointer constant 3af0a4f922 iommu/vt-d: do not assume page table levels for quarantine domain 64d32b75e6 x86: allow non-BIGMEM configs to boot on >= 16Tb systems 0cc74376d6 x86/hvm: address a violation of MISRA C:2012 Rule 11.8 abdee7b1db x86/boot: address violations of MISRA C:2012 Rule 11.8 b736154e89 xen/efi: address violations of MISRA C:2012 Rule 11.8 5fbb3e9da9 xen/arm64: address violations of MISRA C:2012 Rule 11.8 a57680db1a xen/x86_emulate: address violations of MISRA C:2012 Rule 14.4 c714b8807b xen/x86: add missing instances of asmlinkage attributes c6dbc6df52 xen: fix compilation issue of serial.c d2ab1347bd xen: add RISCV support for pmu.h fa469c5a86 xen/riscv: add public arch-riscv.h a60067f398 docs/misra/rules.rst: add Rule 16.2 896c191786 automation/eclair_analysis: file exclusion automation cad6f9a4c1 smp: move cpu_is_offline() definition 68e6b7fc11 tools/libs/evtchn: fix locking in Mini-OS 75571e162b xen/arm: ffa: return FFA_RET_NOT_SUPPORTED on unhandled calls a236b74b96 xen/arm: don't pass iommu properties to hwdom for iommu-map 666e3c294d xen/iommu: address leftover violation of MISRA C:2012 Rule 8.2 75b6bcbd9e xen/drivers: address violations of MISRA C:2012 Rule 8.2 76ecfc517d x86/include: address violations of MISRA C:2012 Rule 8.2 b9905a04e4 xen/compat: address violations of MISRA C:2012 Rule 8.2 abdbf82448 MAINTAINERS: add me as Mini-OS maintainer 56c633bc8e xen/riscv: define bug frame tables in xen.lds.S a6a8fe0eb1 Revert "xen: make include/xen/unaligned.h usable on all architectures" 8fe6219d83 Revert "xen: remove asm/unaligned.h" 7fca0463c7 xen/spinlock: make spinlock initializers more readable a77fcbc389 xen/spinlock: reduce lock profile ifdefs 35431ecb9d xen/arm: smmu: move phys_addr_t definition to linux-compat.h 889af18eee xen/sched: address MISRA C:2012 Rule 2.1 f0bb77bf73 AMD/IOMMU: address violations of MISRA C:2012 Rule 8.2 6d5e94ca7d x86/mm: address violations of MISRA C:2012 Rule 8.2 fbc8cff877 x86/mm: remove compat_subarch_memory_op() 431ada87e5 xen/acpi: address violations of MISRA C:2012 Rule 8.2 190b7f49af xen/arm: page: Avoid pointer overflow on cache clean & invalidate 0fb4b6b0ea MAINTAINERS: Hand over the release manager role to Oleksii Kurochko 6619c6f891 xen: remove asm/unaligned.h 6c4be49503 xen: make include/xen/unaligned.h usable on all architectures 3e3ff7f9cd xen/arm: set -mno-unaligned-access compiler option for Arm32 cf40abbc7f tools/xenstored: potentially split trace_io() out message 1403131596 x86/viridian: make build_assertions static f45e488e7b docs/misra/rules.rst: add more rules 519c7a1d58 xen: address violations of MISRA C:2012 Rule 14.4 807321b6f3 x86/acpi: remove acpi_pic_sci_set_trigger() bc4fe94a69 tools/libs/evtchn: replace assert()s in stubdom with proper locking e6e8c5831a Config: Update MiniOS revision d2b7c442b4 CODING_STYLE: Add a section of the naming convention 25147005da xen/sched: do some minor cleanup of sched_move_domain() 23792cc0f2 xen/sched: fix sched_move_domain() 02d0a615b3 xen/arm: bootfdt: Check return code of device_tree_for_each_node() c4ccad6f3f tools/xenstored: remove the "-R" command line option cc6609eed2 tools/xenstored: remove the "-P" command line option cddc66b1ea tools/xenstored: remove "-V" command line option 98f2cb76f6 tools/xenstored: remove "-D" command line parameter dbe69e1c85 x86/DMI: adjustments to comply with Misra C:2012 Rule 9.3 add7046baf Revert "x86/DMI: adjustments to comply with Misra C:2012 Rule 9.3" d4bfd38998 xen/hypervisor: Don't use cc-option-add for -Wdeclaration-after-statement 40be6307ec Only compile the hypervisor with -Wdeclaration-after-statement 59df285131 x86/DMI: adjustments to comply with Misra C:2012 Rule 9.3 e4c0489ec5 xen/pci: address violations of MISRA C:2012 Rule 8.2 24b2672695 x86/mce: address violations of MISRA C:2012 Rule 8.2 8b0dc4a88f x86/page: address violations of MISRA C:2012 Rule 8.2 fa9171ed05 config: update Mini-OS commit 2e5e9ec4ff x86/vPIC: vpic_elcr_mask() master bit 2 control 634c6e15ac x86/HVM: introduce hvm_get_entry() 55cd2eaec3 xen/riscv: introduce spinlock.h 204aa245df xen/riscv:introduce asm/byteorder.h 3e5672d69f automation/eclair: tag function calls to address violations of MISRA C:2012 Rule 13.1 1ff6d92938 automation/eclair: add deviations for MISRA C:2012 Rule 5.6 d97d6a7f08 docs/misra: deviate deliberately unused labels 4c6142a1ab CI: Fix fallout from adding elfutils-dev to the build container 01da0aeecd ns16550: remove partial explicit initializer 948e033031 automation/alpine: add elfutils-dev afb2692c47 ubsan: Introduce CONFIG_UBSAN_FATAL to panic on UBSAN failure ff11780620 xen/domain: fix error path in domain_create() d830b0a7bc xen/vpci: header: filter PCI capabilities a3c8fb450a xen/vpci: header: status register handler 6f7db3e0a0 xen: address violations of MISRA C:2012 Rule 11.8 3e7a3f08ce bump default SeaBIOS version to 1.16.3 06e8d65d33 xen/sched: fix adding offline cpu to cpupool 787d11c5aa x86emul: avoid triggering event related assertions 93d913c6e6 xen/public: fix flexible array definitions 80a7669afd x86/p2m: address a violation of MISRA C:2012 Rule 8.3 f0a00ab1a6 x86/p2m: preparation work for xenmem_add_to_physmap_one() 525c7c094b xen/arm: Move static event channel feature to a separate module 1571ff7a98 tools/xg: Fix potential memory leak in cpu policy getters/setters 02ef46b675 .gitignore: generalize *.new cd1a4a5709 docs/misra: add entry to exclude-list.json ebd7074dd0 xen/arm: mmu: add headers for missing declarations e7c4b68738 xen/serial: address a violation of MISRA C:2012 Rule 8.2 498c130104 xen/perfc: address a violation of MISRA C:2012 Rule 8.2 5dc781b4af xen/param: address a violation of MISRA C:2012 Rule 8.2 13832e2367 xen/kernel: address a violation of MISRA C:2012 Rule 8.2 80aeb9ccec xen/iommu: address violations of MISRA C:2012 Rule 8.2 59f31d970f xen/notifier: address violations of MISRA C:2012 Rule 8.2 24dbf93ebd xen/domain: address violations of MISRA C:2012 Rule 8.2 def73fc144 automation/eclair: improve scheduled analyses e5aba2909c docs/misra: fix a typo in rules.rst 829b4731df automation: Switch u-boot boot command to bootz for arm32 tests f0dd0cd959 docs/misra: add guidance on the format of Dir 4.1 docs for ECLAIR ddf664a557 automation/eclair: make the docs for MISRA C:2012 Dir 4.1 visible to ECLAIR 2f848d3cee arm/bitops: encapsulate violation of MISRA C:2012 Rule 10.1 902377b690 xen/livepatch: fix livepatch tests b3d3267286 cirrus-ci: update FreeBSD versions 92696bf052 xen/arm64: Move print_reg macro to asm/arm64/macros.h 7e1f5b68ac xen/asm-generic: introduce generic header altp2m.h f1ac700b44 xen/asm-generic: introduce generalized hardirq.h 7c20d1616d xen/asm-generic: introduce generic header percpu.h 18f3095654 xen/asm-generic: introduce stub header <asm/random.h> f6082c7b6c xen/asm-generic: introduce generic header iocap.h 2ae2a306f4 xen/asm-generic: introduce generic hypercall.h 94854f1419 xen/asm-generic: introduce stub header paging.h 90309854fd xen/x86: In x2APIC mode, derive LDR from APIC ID 8b15717518 xen/dmi: address a violation of MISRA C:2012 Rule 8.2 022d7d87cc xen/cpumask: address violations of MISRA C:2012 Rule 8.2 b0356bc0e0 xen/acpi: address violations of MISRA C:2012 Rule 8.2 07551414ca xen/console: address violations of MISRA C:2012 Rule 8.2 84eba1dc6d xen: remove <asm/delay.h> 72ec070930 xen: replace some occurrences of SAF-1-safe with asmlinkage attribute caa221791d domain: add ASSERT to help static analysis tools 18540a313c arm/dom0less: introduce Kconfig for dom0less feature d7d80e7a32 xen/arm: Move static memory build code in separate modules 8d2c3ab18c arm/dom0less: put dom0less feature code in a separate module dcb92d4ef1 xen/arm: Add asm/domain.h include to kernel.h 4a6962fa7f arm/gicv2: make GICv2 driver and vGICv2 optional 72d51813d6 x86: amend cpu_has_xen_{ibt,shstk} 17754972fa x86/atomic: address violations of MISRA C:2012 Rule 11.8 fc63c0ebef AMD/IOMMU: address violations of MISRA C:2012 Rule 11.8 fe26cb2dd2 x86/boot/reloc: address violations of MISRA C:2012 Rule 11.8 09c2fe438d x86/platform_hypercall: address violations of MISRA C:2012 Rule 11.8 82182ad7b4 livepatch: do not use .livepatch.funcs section to store internal state 46f2e2c3bc xen/mm: address violations of MISRA C:2012 Rules 8.2 and 8.3 b82b867a66 x86/mm: preparation work to uniform modify_xen_mappings* interfaces fbcec32d6d x86/mem_sharing: Release domain if we are not able to enable memory sharing b9eeb19926 x86/mem_sharing: Fix typo in comment 80c153c48b xen/sort: address violations of MISRA C:2012 Rule 8.2 a66b02a6b6 x86/vPIC: correct vpic_domain() 9b3476f13e xen/iommu: use ISOLATE_LSB to wrap a violation of Rule 10.1 80d72670ad xen/vmap: use ISOLATE_LSB to wrap a violation of Rule 10.1 de4f3cf327 x86_64/mm: express macro CNT using ISOLATE_LSB 02d754aa55 xen/pdx: amend definition of PDX_GROUP_COUNT f02829592e x86emul/test: fold AVX512VL scatter/gather test blobs with AVX512F ones 03d6720a4c tools/pygrub: Restrict depriv operation with RLIMIT_AS 2d63785a8a tools/pygrub: Fix expression before it's copied elsewhere de577641cf tools/pygrub: Fix bug in LIMIT_FSIZE env variable override c789c7ff7e tools/pygrub: Set mount propagation to private recursively 16a0e16dab tools/python: add .gitignore file 9b1972dff5 tools/pygrub: add .gitignore file 5d4b948169 xen/efi: Drop image_name from efi_arch_handle_cmdline() f96e2f6457 xen/MISRA: Remove nonstandard inline keywords Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15xen-dev: update to -tipBruce Ashfield
Bumping xen to version 4.18.0-rc4-707-g03cf7ca23e, which comprises the following commits: 03cf7ca23e x86: protect conditional lock taking from speculative execution Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15xen-tools/4.18: update to -tipBruce Ashfield
Drop upstreamed patch, otherwise, no other changes. Bumping xen to version RELEASE-4.18.0-71-g4da8ca9cb9, which comprises the following commits: 4da8ca9cb9 x86: protect conditional lock taking from speculative execution e107a8ece7 x86/mm: add speculation barriers to open coded locks 9de8a52b0e locking: attempt to ensure lock wrappers are always inline 5a13c81542 percpu-rwlock: introduce support for blocking speculation into critical regions e7f0f11c88 rwlock: introduce support for blocking speculation into critical regions 1932973ac9 x86/spinlock: introduce support for blocking speculation into critical regions bdda600406 xen: Swap order of actions in the FREE*() macros 908cbd1893 x86/spec-ctrl: Mitigation Register File Data Sampling fb85a8fc91 x86/spec-ctrl: VERW-handling adjustments b7205fc1cb x86/spec-ctrl: Rename VERW related options 95dd34fdbe x86/spec-ctrl: Perform VERW flushing later in exit paths 9f89ec65fb x86/vmx: Perform VERW flushing later in the VMExit path b91c253e81 x86: Resync intel-family.h from Linux fe1869a569 x86/entry: Introduce EFRAME_* constants a96d2d4355 x86/mm: fix detection of last L1 entry in modify_xen_mappings_lite() 4c84fa6cb6 hvmloader/PCI: skip huge BARs in certain calculations fd7cb7a1d0 x86/cpu-policy: Allow for levelling of VERW side effects 75221fb0f8 x86/altcall: always use a temporary parameter stashing variable 267845a838 libxl: Fix segfault in device_model_spawn_outcome e9516b73e7 xen/livepatch: properly build the noapply and norevert tests d81bfc7ff8 xen/livepatch: fix norevert test attempt to open-code revert 50a8f74df7 xen/livepatch: search for symbols in all loaded payloads 5382a6a79c xen/livepatch: register livepatch regions when loaded 7404c25efd x86/spec: do not print thunk option selection if not built-in 09b9db0413 x86/spec: fix INDIRECT_THUNK option to only be set when build-enabled b7f9168878 x86/spec: print the built-in SPECULATIVE_HARDEN_* options 57f1370536 xen/sched: Fix UB shift in compat_set_timer_op() 3e383bb413 x86/HVM: hide SVM/VMX when their enabling is prohibited by firmware 498b3624d0 xen/arm: Fix UBSAN failure in start_xen() 58bb811510 x86: account for shadow stack in exception-from-stub recovery 4d47dca20d x86/spec: fix BRANCH_HARDEN option to only be set when build-enabled 19fd9ff998 x86/altcall: use a union as register type for function parameters on clang f6e5ab5fa7 xen/cmdline: fix printf format specifier in no_config_param() 33a0368d3b xen/livepatch: fix norevert test hook setup typo a751d1321f x86emul: add missing EVEX.R' checks 5fda826414 build: make sure build fails when running kconfig fails 489c2b9ba1 libxl: Disable relocating memory for qemu-xen in stubdomain too 006764b871 build: Replace `which` with `command -v` 59e6ad6597 x86/HVM: tidy state on hvmemul_map_linear_addr()'s error path b51fd78aed x86/hvm: Fix fast singlestep state persistence 16475909ba block-common: Fix same_vm for no targets fa9950a527 amd-vi: fix IVMD memory type checks 184d723e7a tools/xentop: fix sorting bug for some columns b1fdd7d0e4 x86/ucode: Fix stability of the raw CPU Policy rescan 295ab8060d x86/p2m-pt: fix off by one in entry check assert 579a622eb4 lib{fdt,elf}: move lib{fdt,elf}-temp.o and their deps to $(targets) 00550e808c x86/vmx: Disallow the use of inactivity states 4cc0f88c42 x86/vmx: Fix IRQ handling for EXIT_REASON_INIT 6ccf064b0c x86/intel: ensure Global Performance Counter Control is setup correctly b26c30a408 CirrusCI: drop FreeBSD 12 62b3d7f8e4 x86/amd: Extend CPU erratum #1474 fix to more affected models c7ac596a57 VT-d: Fix "else" vs "#endif" misplacement 637da04812 pci: fail device assignment if phantom functions cannot be assigned 1792d1723b x86/x2apic: introduce a mixed physical/cluster mode a4f3f5a62c xen/arm: page: Avoid pointer overflow on cache clean & invalidate 48eb9e9199 xen/sched: fix sched_move_domain() a56d598e13 Only compile the hypervisor with -Wdeclaration-after-statement 25b7f9ed0f xen/domain: fix error path in domain_create() 5ac87c8afd xen/sched: fix adding offline cpu to cpupool 18f900b77b x86emul: avoid triggering event related assertions 3af9d1cbb6 tools/xg: Fix potential memory leak in cpu policy getters/setters 61d032e322 xen/x86: In x2APIC mode, derive LDR from APIC ID 480168fcb3 livepatch: do not use .livepatch.funcs section to store internal state 90a6d82175 x86/mem_sharing: Release domain if we are not able to enable memory sharing 3f9390fea5 xen/sched: fix sched_move_domain() 40bfa9dd57 x86/spec-ctrl: Add SRSO whitepaper URL fcb1016bbd x86/i8259: do not assume interrupts always target CPU0 9e8edd4c75 x86/x2apic: remove usage of ACPI_FADT_APIC_CLUSTER 880e06fdea x86/pv-shim: fix grant table operations for 32-bit guests 52be29df79 x86/mem_sharing: add missing m2p entry when mapping shared_info page 02f8d0adfb update Xen version to 4.18.1-pre d75f1e9b74 SUPPORT.md: Update release notes URL Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15xen/4.18: update to -tipBruce Ashfield
Bumping xen to version RELEASE-4.18.0-71-g4da8ca9cb9, which comprises the following commits: 4da8ca9cb9 x86: protect conditional lock taking from speculative execution e107a8ece7 x86/mm: add speculation barriers to open coded locks 9de8a52b0e locking: attempt to ensure lock wrappers are always inline 5a13c81542 percpu-rwlock: introduce support for blocking speculation into critical regions e7f0f11c88 rwlock: introduce support for blocking speculation into critical regions 1932973ac9 x86/spinlock: introduce support for blocking speculation into critical regions bdda600406 xen: Swap order of actions in the FREE*() macros 908cbd1893 x86/spec-ctrl: Mitigation Register File Data Sampling fb85a8fc91 x86/spec-ctrl: VERW-handling adjustments b7205fc1cb x86/spec-ctrl: Rename VERW related options 95dd34fdbe x86/spec-ctrl: Perform VERW flushing later in exit paths 9f89ec65fb x86/vmx: Perform VERW flushing later in the VMExit path b91c253e81 x86: Resync intel-family.h from Linux fe1869a569 x86/entry: Introduce EFRAME_* constants a96d2d4355 x86/mm: fix detection of last L1 entry in modify_xen_mappings_lite() 4c84fa6cb6 hvmloader/PCI: skip huge BARs in certain calculations fd7cb7a1d0 x86/cpu-policy: Allow for levelling of VERW side effects 75221fb0f8 x86/altcall: always use a temporary parameter stashing variable 267845a838 libxl: Fix segfault in device_model_spawn_outcome e9516b73e7 xen/livepatch: properly build the noapply and norevert tests d81bfc7ff8 xen/livepatch: fix norevert test attempt to open-code revert 50a8f74df7 xen/livepatch: search for symbols in all loaded payloads 5382a6a79c xen/livepatch: register livepatch regions when loaded 7404c25efd x86/spec: do not print thunk option selection if not built-in 09b9db0413 x86/spec: fix INDIRECT_THUNK option to only be set when build-enabled b7f9168878 x86/spec: print the built-in SPECULATIVE_HARDEN_* options 57f1370536 xen/sched: Fix UB shift in compat_set_timer_op() 3e383bb413 x86/HVM: hide SVM/VMX when their enabling is prohibited by firmware 498b3624d0 xen/arm: Fix UBSAN failure in start_xen() 58bb811510 x86: account for shadow stack in exception-from-stub recovery 4d47dca20d x86/spec: fix BRANCH_HARDEN option to only be set when build-enabled 19fd9ff998 x86/altcall: use a union as register type for function parameters on clang f6e5ab5fa7 xen/cmdline: fix printf format specifier in no_config_param() 33a0368d3b xen/livepatch: fix norevert test hook setup typo a751d1321f x86emul: add missing EVEX.R' checks 5fda826414 build: make sure build fails when running kconfig fails 489c2b9ba1 libxl: Disable relocating memory for qemu-xen in stubdomain too 006764b871 build: Replace `which` with `command -v` 59e6ad6597 x86/HVM: tidy state on hvmemul_map_linear_addr()'s error path b51fd78aed x86/hvm: Fix fast singlestep state persistence 16475909ba block-common: Fix same_vm for no targets fa9950a527 amd-vi: fix IVMD memory type checks 184d723e7a tools/xentop: fix sorting bug for some columns b1fdd7d0e4 x86/ucode: Fix stability of the raw CPU Policy rescan 295ab8060d x86/p2m-pt: fix off by one in entry check assert 579a622eb4 lib{fdt,elf}: move lib{fdt,elf}-temp.o and their deps to $(targets) 00550e808c x86/vmx: Disallow the use of inactivity states 4cc0f88c42 x86/vmx: Fix IRQ handling for EXIT_REASON_INIT 6ccf064b0c x86/intel: ensure Global Performance Counter Control is setup correctly b26c30a408 CirrusCI: drop FreeBSD 12 62b3d7f8e4 x86/amd: Extend CPU erratum #1474 fix to more affected models c7ac596a57 VT-d: Fix "else" vs "#endif" misplacement 637da04812 pci: fail device assignment if phantom functions cannot be assigned 1792d1723b x86/x2apic: introduce a mixed physical/cluster mode a4f3f5a62c xen/arm: page: Avoid pointer overflow on cache clean & invalidate 48eb9e9199 xen/sched: fix sched_move_domain() a56d598e13 Only compile the hypervisor with -Wdeclaration-after-statement 25b7f9ed0f xen/domain: fix error path in domain_create() 5ac87c8afd xen/sched: fix adding offline cpu to cpupool 18f900b77b x86emul: avoid triggering event related assertions 3af9d1cbb6 tools/xg: Fix potential memory leak in cpu policy getters/setters 61d032e322 xen/x86: In x2APIC mode, derive LDR from APIC ID 480168fcb3 livepatch: do not use .livepatch.funcs section to store internal state 90a6d82175 x86/mem_sharing: Release domain if we are not able to enable memory sharing 3f9390fea5 xen/sched: fix sched_move_domain() 40bfa9dd57 x86/spec-ctrl: Add SRSO whitepaper URL fcb1016bbd x86/i8259: do not assume interrupts always target CPU0 9e8edd4c75 x86/x2apic: remove usage of ACPI_FADT_APIC_CLUSTER 880e06fdea x86/pv-shim: fix grant table operations for 32-bit guests 52be29df79 x86/mem_sharing: add missing m2p entry when mapping shared_info page 02f8d0adfb update Xen version to 4.18.1-pre d75f1e9b74 SUPPORT.md: Update release notes URL Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15conf: bump xen preferred version to 4.18Bruce Ashfield
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15libvmi: update -tipBruce Ashfield
Bumping libvmi to version v0.10-1135-gdf8547f, which comprises the following commits: df8547f Set mem-range access, read wstrings, get last PF (#1095) fba6232 driver_wrapper: fix debug prints (#1094) 8f37f07 Xen: fix calculation of ram size (#1092) 071d81f Ensure that the third level descriptor is valid prior to returning (#1091) a2438e8 CMake: Adjust scope of linked libraries (#1089) d048e41 Kvm: Fix events not being processed during shutdown (#1038) 782bfff Implement SLAT for kvm (#1043) 9bf6b62 Fill offset field for singlestep events (#1088) 72ef3aa Add missing event clear wiring (#1087) e707440 Reduce cognitive complexity of kvm_events.c (#1086) bcc057c Add DIRTY bit definition (#1085) 12d3a8c Fix bug not looking up xc_domain_setmaxmem (#1084) d4f95a5 New physical page api (#1083) 1b47190 Feature/osx_support (#1078) b9691ca driver interface, xen driver: added prot flag to mmap interface (#1082) f47a568 Xen 4.18 support (#1081) 0332ac2 fix KPCR read on Windows x86 (#1077) 3c42697 examples: add missing long_opts array terminator (#1079) e2313cc Remove cached config entry as part of vmi_destroy function (#1076) 8a79057 Use actions/checkout@v3 (#1075) d5b0177 Sanitize input for PE parser (#1073) 0f832eb Symbol RVA translation for ELF executables and shared libraries (#1072) f2bfd4a Adding basic support for reading an ARM64 memory dump (#1070) d2f3fe9 Change xen vbd state check from 1 to 4 (#1069) 9166fd6 Revise Xen minor version sanity checking logic (#1068) 79ace5c Fix documentation url (#1067) c0edc27 Adjust xc_monitor_io availability (#1066) 3fe7e6e I/O event hooking, firmware type check (#1045) 63a6a2d Split complexity from scan-build CI test (#1065) a95e99e Calculate cognitive complexity score as part of scan-build (#1062) db93f47 Address to kernel symbol translation for windows (#1056) dd919a6 linux: use more strickt checks while initializing linux kaslr (#1060) 9dee43c Skip consecutive PD/PT entries for Windows 10 in vmi_get_va_pages (#1055) afb05d0 Fix x64 windows address translation (#1054) 5662dba Create SECURITY.md 36bcb2c Return success if whole region is unmapped (#1050) 38ff0db Fix struct layout warning in kvm.c (#1051) fecdb1f Revert "Revert "Limit single step dispatch to successful events to harmonize KVM / XEN behavior (#1040)" (#1047)" (#1049) b26888c Rework mem-event-example (#1048) 68a4a69 Revert "Limit single step dispatch to successful events to harmonize KVM / XEN behavior (#1040)" (#1047) 546e2e3 Fix vmi_read_str on page boundary (#1046) 78a9512 Limit single step dispatch to successful events to harmonize KVM / XEN behavior (#1040) 7328e9e Fix memory cache remove (#1042) 92f9f70 Kvm: Implement pause counter (#1039) 50d256b Pop pending events after pausing vm (#1026) 0cb5db8 Add support for new Xen event type for vm exits (#1036) 5edc478 Kvm: Flush pages from memory cache after write operation (#1035) ff2c1c9 Fix memory corruption in kvm interrupt event handling (#1034) 09be0ef cmake: add ZLIB detection (#1033) 932a87a vbd: fix uncompression of qcow2 cluster (#1032) 26152fc vbd: Add support for JSON format of qcow2 backing file description (#1030) afd541b vbd: Remove some copy-paste in qcow2 reading code (#1031) 1d17c98 vbd: Fix memory leak in uncompress_cluster (#1029) 6859024 Fix vmi_init_paging issue on ARM64/ZCU102 (#1028) 710b0a5 Fix double free corruption (#1027) 7c0c537 Kvm: Ensure monitor_intr_on ist set to false in error case (#1025) f51d3fd Add kvm support for swap/clear events (#1024) c87a1fb Remove xen includes from vbd.c (#1023) 45b32c0 Switch pid cache to g_direct_hash/equal (#1021) f108304 Use g_direct_hash/equal everywhere (#1020) b34cb61 Plug holes in events ABI and bump ABI version (#1019) f9db2f4 Use g_direct_hash/direct_equal for generic mem_events (#1018) 41600b6 Actually define __XS_EVENT_REASON_MAX (#1016) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15kvmtool: update -tipBruce Ashfield
Bumping kvmtool to latest, which comprises the following commits: 4d2c017 Fix 9pfs open device file security flaw e73a6b2 x86: Enable in-kernel irqchip before creating PIT f6cc06d riscv: Fix guest poweroff when using PLIC emulation 4ddaa42 riscv: Handle SBI DBCN calls from Guest/VM ef89838 riscv: Set mmu-type DT property based on satp_mode ONE_REG interface 8cd71ca riscv: Add Zicond extension support 8d02d5a riscv: Add Smstateen extension support 3436684 riscv: Add Zicsr and Zifencei extension support 6676856 riscv: Add Zicntr and Zihpm extension support 6331850 riscv: Add Zba and Zbs extension support 7887b39 riscv: Make CPU_ISA_MAX_LEN depend upon isa_info_arr array size fcb0767 riscv: Improve warning in generate_cpu_nodes() 92ef2dc Sync kernel headers with v6.7 to enable additional Risc-V extensions 095773e riscv: Fix guest/init linkage for multilib toolchain 328f087 riscv: Use AIA in-kernel irqchip whenever KVM RISC-V supports 17aab30 riscv: Add IRQFD support for in-kernel AIA irqchip 0dff350 riscv: Make irqchip support pluggable 56e2d67 riscv: Add Svnapot extension support 26c8589 Sync-up header with Linux-6.6 for KVM RISC-V 74af145 virtio: Cancel and join threads when exiting devices devices 9cb1b46 pci: Deregister KVM_PCI_CFG_AREA on pci__exit d560235 virtio/pci: Use consistent naming for the PCI ISR bit flags 2921448 virtio/pci: Treat PCI ISR as a set of bit flags 353fa0d virtio/pci: Level-trigger the legacy IRQ line in all cases c7b7a54 builtin-run: Document mode=none for -n/--network 4498eb7 Revert "virtio-net: Don't print the compat warning for the default device" 106e2ea riscv: Fix guest RAM alloc size computation for RV32 8659200 riscv: Add Ssaia extension support 8f1e47c riscv: Add Zicboz extension support 8c1584e riscv: Add zbb extension support b346fab riscv: Sort the ISA extension array alphabetically a416fdc riscv: Allow disabling SBI extensions for Guest 9e9cfde riscv: Allow setting custom mvendorid, marchid, and mimpid be98682 Sync-up headers with Linux-6.4 d834369 kvm tools: Add __DECLARE_FLEX_ARRAY() in include/linux/stddef.h 15757e8 virtio-net: Don't print the compat warning for the default device 63643b1 Apply scaling down the calculated guest ram size to the number of pages 834e5ed Factor out getting the number of physical memory host pages b6bae72 Factor out getting the host page size bd4ba57 Add --loglevel argument for the run command fc184a6 util: Use __pr_debug() instead of pr_info() to print debug messages 72e1394 Replace printf/fprintf with pr_* macros 2cc4929 util: Make pr_err() return void 0b5e55f vfio/pci: Clarify the MSI states 3a36d34 vfio/pci: Initialize MSI vectors unmasked 3b1cdcf virtio/vhost: Clear VIRTIO_F_ACCESS_PLATFORM 46aaf3b virtio/vhost: Support line interrupt signaling d30d948 Factor epoll thread 3a70ab1 virtio/net: Warn about enabling multiqueue with vhost 33e026a virtio: Fix messages about missing Linux config 13534ee virtio: Document how to test the devices 53171d5 virtio/net: Fix feature selection cf8358d virtio/vsock: Fix feature selection 13ea439 virtio/scsi: Fix feature selection b8420e8 virtio/scsi: Initialize max_target 7bc3b5d disk/core: Fix segfault on exit with SCSI 145a86f virtio/scsi: Fix and simplify command-line 13e7d62 virtio/scsi: Move VHOST_SCSI_SET_ENDPOINT to device start 029cd2b virtio/vhost: Factor notify_vq_gsi() 676c0c8 virtio/vhost: Factor notify_vq_eventfd() 745221e virtio/vhost: Factor vring operation f84ab9e virtio: Factor vhost initialization 5311413 virtio/rng: Fix build warning from min() 426e875 arm/kvm-cpu: Fix new build warning 8f6cabb Makefile: Refine -s handling in the make parameters b17552e virtio: sanitise virtio endian wrappers c1eecc6 option parsing: fix type of empty .argh parameter bc23b9d virtio/rng: return at least one byte of entropy 62ba372 virtio/rng: switch to using /dev/urandom 77b108c arm: Do not add padding alignment for hugetlbfs backed memory 9b46ebc Add virtio-transport option and deprecate force-pci and virtio-legacy. 2f030d2 riscv: Move serial and rtc from IO port space to MMIO area. e17d182 riscv: Add --disable-<xyz> options to allow user disable extensions 798398f riscv: Add Zicbom extension support b721ac0 riscv: Move reg encoding helpers to kvm-cpu-arch.h 23a8ed9 riscv: Add zihintpause extension support ac16e94 riscv: Add Svinval extension support 76dfc0c Update UAPI headers based on Linux-6.1-rc1 5a9cde6 hw/i8042: Fix value uninitialized in kbd_io() 78771e7 pci: Disable writes to Status register 717a3ab virtio-net: Fix vq->use_event_idx flag check ed805be riscv: Fix serial0 alias path 3c07aea riscv: Add Sstc extension support 2b4fe0f riscv: Add Svpbmt extension support 8aff29e riscv: Append ISA extensions to the device tree 8d0face Update UAPI headers based on Linux-6.0-rc1 9987a37 net: Use vfork() instead of fork() for script execution 336751f Makefile: Introduce LIBFDT_DIR to specify libfdt location Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15cloud-init: update to 24.1.1Bruce Ashfield
Bumping cloud-init to version 24.1.1, which comprises the following commits: e982c2087 Release 24.1.1 2a4c0b6f7 fix: Include DataSourceCloudStack attribute in unpickle test (#5039) f1e43986f bug(vmware): initialize new DataSourceVMware attributes at unpickle (#5021) f32228e75 fix(apt): Don't warn on apt 822 source format (#5028) 3eefceb3b fix: Add "broadcast" to network v1 schema (#5034) 8eba10ca2 pro: honor but warn on custom ubuntu_advantage in /etc/cloud/cloud.cfg (#5030) 8aa31e3d3 net/dhcp: handle timeouts for dhcpcd (#5022) caea5619e fix: Make wait_for_url respect explicit arguments 1f38828d5 bug(wait_for_url): when exceptions occur url is unset, use url_exc c2bb381e7 test: Fix scaleway retry assumptions 3b93a01a9 fix: Make DataSourceOracle more resilient to early network issues (#5025) c9bdb1a67 tests: Fix wsl test (#5008) 49df54730 Release 24.1 5c15e7997 fix: Don't warn on vendor directory (#4986) 12126f574 apt: kill spawned keyboxd after gpg cmd interaction c8507a49b tests: upgrade tests should only validate current boot log fc150eb86 net/dhcp: fix maybe_perform_dhcp_discovery check for interface=None f6a98c80d doc(network-v2): fix section nesting levels 545991488 fix(tests): don't check for clean log on minimal image (#4965) fc81fb325 fix(cc_resize): Don't warn if zpool command not found (#4969) aa285fe67 feat(subp): Make invalid command warning more user-friendly (#4972) f8cbd5ca9 docs: Remove statement about device path matching (#4966) 3780ee7cc test: Fix xfail to check the dhcp client name (#4971) cb49eee0c tests: avoid console prompts when removing gpg on Noble d8b6ac2bc test: fix test_get_status_systemd_failure 1447bfe49 Release 23.4.4 (#4955) 66b5ce9d5 fix(nocloud): smbios datasource definition 4b694a45d tests: Check that smbios seed works beddd97c1 fix: Remove hardcoded /var/lib/cloud hotplug path (#4940) d175170ae refactor: Refactor status.py (#4864) 05ea2c020 test: Use correct lxd network-config keys (#4950) e8c2eaf2f test: limit temp dhcp6 changes to < NOBLE (#4942) 89ebcc394 test: allow downgrades when install debs (#4941) 758536152 tests: on noble, expect default /etc/apt/sources.list e5249ab5a tests: lxd_vm early boot status test ordered After=systemd-remount-fs (#4936) 6f52f15f4 tests: pro integration tests supply ubuntu_advantage until pro v32 (#4935) 05eac8ba1 feat(hotplug): add cmd to enable hotplug (#4821) 05ed5472a test: fix test_combined_cloud_config_json (#4925) 9bd0f5264 test: xfail udhcpc on azure (#4924) 4c822bd6b feat: Implement the WSL datasource (#4786) 2e89bb317 refactor(openrc): Improve the OpenRC files (#4916) 0234f1b0b tests: use apt install instead of dpkg -i to install pkg deps b74299efe tests: inactive module rename ubuntu_advantage to ubuntu_pro 4ed78b116 test: fix tmpdir in test_cc_apk_configure (#4914) 94f58e812 test: fix jsonschema version checking in pro test (#4915) 6d61b63f3 feat(dhcp): Make dhcpcd the default dhcp client (#4912) 5fd3fc72f feat(Alpine) cc_growpart.py: fix handling of /dev/mapper devices (#4876) 90fd7ac0e test: Retry longer in test_status.py integration test (#4910) 29c215fa8 test: fix kernel override test (#4913) 4775327e7 chore: Rename sysvinit/gentoo directory to sysvinit/openrc (#4906) 4779679e7 doc: update ubuntu_advantage references to pro 09bb6190e chore: rename cc_ubuntu_advantage to cc_ubuntu_pro (SC-1555) b9b125fd8 feat(ubuntu pro): deprecate ubuntu_pro key in favor of ubuntu_advantage 25bc74cc4 feat(schema): support ubuntu_pro key and deprecate ubuntu_advantage 0754ed2d6 test: fix verify_clean_log (#4903) a41401199 test: limit test_no_hotplug_triggered_by_docker to stable releases d6dc417d2 tests: generalize warning Open vSwitch warning from netplan apply (#4894) 64631260b fix(hotplug): remove literal quotes in args cd5a72743 feat(apt): skip known /etc/apt/sources.list content 9d08c1177 feat(apt): use APT deb822 source format by default 48ab789b9 test(ubuntu-pro): change livepatch to esm-infra 99394ecb9 doc(ec2): fix metadata urls (#4880) c948e4182 fix: unpin jsonschema and update tests (#4882) 160b5ac8f distro: add eject FreeBSD code path (#4838) 4dbb08f5f feat(ec2): add hotplug as a default network update event (#4799) f2750c058 feat(ec2): support instances with repeated device-number (#4799) b519d861a feat(cc_install_hotplug): trigger hook on known ec2 drivers (#4799) 0ca5f3104 feat(ec2): support multi NIC/IP setups (#4799) e70cd4784 feat(hotplug): hook-hotplug is now POSIX shell add OpenRC init script 7d605eae6 test: harden test_dhcp.py::test_noble_and_newer_force_client 9c4b799e6 test: fix test_combined_cloud_config_json (#4868) c7c4a334f feat(apport): Disable hook when disabled (#4874) 0af00e48d chore: Add pyright ignore comments (#4874) 534cbc26c bug(apport): Fix invalid typing (#4874) be68e2aac refactor: Move general apport hook to main branch (#4874) 551f560d1 feat(bootspeed)!: cloud-config.service drop After=snapd.seeded 7a03691a8 chore: update CI package build to oldest supported Ubuntu release focal (#4871) 4e87db2be test: fix test_cli.test_valid_userdata ee7994071 feat: handle error when log file is empty (#4859) 15f786a5b test: fix test_ec2_ipv6 5e7ef1032 fix: Address TIOBE abstract interpretation issues (#4866) c608a9c94 feat(dhcp): Make udhcpc use same client id (#4830) 5c03247a4 feat(dhcp): Support InfiniBand with dhcpcd (#4830) 7ed89d3f7 feat(azure): Add ProvisionGuestProxyAgent OVF setting (#4860) b7c7be95f test: Bring back dhcp6 integration test changes (#4855) 39c106364 tests: add status --wait blocking test from early boot e6d56b636 tests: fix retry decorator to return the func value cb08cab5d docs: add create_hostname_file to all hostname user-data examples (#4727) fdefe08ad fix: Fix typos (#4850) 33148a072 feat(dhcpcd): Read dhcp option 245 for azure wireserver (#4835) 928e79029 tests(dhcp): Add udhcpc client to test matrix (#4839) b08193b37 fix: Add types to network v1 schema (#4841) 40d65002a docs(vmware): fixed indentation on example userdata yaml (#4854) 66c427ce1 tests: Remove invalid keyword from method call 4e0329331 Release 23.4.3 1f6eddd5b fix: Handle systemctl when dbus not ready (#4842) 89cba2950 fix(schema cli): avoid netplan validation on net-config version 1 7dab72dd5 tests: reduce expected reports due to dropped rightscale module ae38732be tests(net-config): add awareness of netplan on stable Ubuntu d45beaa88 fix(source): fix argument boundaries when parsing cmdline (#4825) 2060e8359 feat: fall back to cdrom_id eject if eject is not available (#4769) 81051acc6 fix(packages/bddeb): restrict debhelper-compat to 12 in focal (#4831) 2c748f502 tests: Add kernel commandline test (#4833) fc4e23334 fix: Ensure NetworkManager renderer works without gateway (#4829) 2b693c656 test: Correct log parsing in schema test (#4832) 1a248b592 refactor: Remove cc_rightscale_userdata (#4813) d27eab110 refactor: Replace load_file with load_binary_file to simplify typing (#4823) 0e90131d5 refactor: Add load_text_file function to simplify typing (#4823) 31fff57de refactor: Change variable name for consistent typing (#4823) 21b2b6e44 feat(dhcp): Add support for dhcpcd (#4746) ba6fbfe4f refactor: Remove unused networking code (#4810) e8928418f test: Add more DNS net tests f7e0c4174 BREAKING CHANGE: Stop adding network v2 DNS to global DNS a85f0678c doc: update DataSource.default_update_events doc (#4815) 15c78e8b2 chore: do not modify instance attribute (#4815) ef2e48e93 test: fix mocking leaks (#4815) a74653f98 Revert "ci: Pin pytest<8.0.0. (#4816)" (#4815) dba337bf7 test: Update tests for passlib (#4818) e168b4a13 fix(net-schema): no warn when skipping schema check on non-netplan 56aa87969 feat(SUSE): reboot marker file is written as /run/reboot-needed (#4788) ddbb7aa08 test: Cleanup unwanted logger setup calls (#4817) cb58abe04 refactor(cloudinit.util): Modernize error handling, add better warnings (#4812) 7c96c9cd9 ci: Pin pytest<8.0.0. (#4816) 180da9ba3 fix(tests): fixing KeyError on integrations tests (#4811) 39c578140 tests: integration for network schema on netplan systems (#4767) 275b66e3e feat(schema): use netplan API to validate network-config (#4767) dad4ad925 chore: define CLOUDINIT_NETPLAN_FILE static var (#4767) 81a3fa462 fix: cli schema config-file option report network-config type (#4767) ae9a6ff43 refactor(azure): replace BrokenAzureDataSource with reportable errors (#4807) 72418838f Fix Alpine and Mariner /etc/hosts templates (#4780) 5370c3e26 tests: revert #4792 as noble images no longer return 2 (#4809) 0a91df832 tests: use client fixture instead of class_client in cleantest (#4806) 7ee0dc8ef tests: enable ds-idenitfy xfail test LXD-kvm-not-MAAS-1 (#4808) 48bdc150f fix(tests): failing integration tests due to missing ua token (#4802) d9677655e Release 23.4.2 8ff94fe94 Revert "Use grep for faster parsing of cloud config in ds-identify (#4327)" f2851e099 tests: Demonstrate ds-identify yaml parsing broken 3b9397ff8 tests: add exit 2 on noble from cloud-init status (#4792) 9d22a63bf fix: linkcheck for ci to ignore scaleway anchor URL (#4793) 84b322c6f feat: Update cacerts to support VMware Photon (#4763) b620c0424 fix: netplan rendering integrations tests (#4795) bc2e24e5e azure: remove cloud-init.log reporting via KVP (#4715) ae38d4b07 feat(Alpine): Modify ds-identify for Alpine support and add OpenRC init.d script (#4785) ce07818f9 doc: Add DatasourceScaleway documentation (#4773) bb8ed452a fix: packaged logrotate file lacks suffix on ubuntu (#4790) d9865e2ac feat(logrotate): config flexibility more backups (#4790) da08a2609 fix(clean): stop warning when running clean command (#4761) 17caebb26 feat: network schema v1 strict on nic name length 15 (#4774) 0e247c897 logrotate config (#4721) 494035101 test: Enable coverage in integration tests (#4682) f1ca01c5b test: Move unit test helpers to global test helpers (#4682) 1c5726b1c test: Remove snapshot option from install_new_cloud_init (#4682) 5b5eb8bd8 docs: fix cloud-init single param docs (#4682) 5b6d08deb Alpine: fix location of dhclient leases file (#4782) 034a5cdf1 test(jsonschema): Pin jsonschema version (#4781) 1baa9ff06 refactor(IscDhclient): discover DHCP leases at distro-provided location (#4683) b729a4c4a feat: datasource check for WSL (#4730) f79505db9 test: Update hostname integration tests (#4744) 901a9a695 test: Add mantic and noble releases to integration tests (#4744) 436e6f5ce refactor: Ensure internal DNS state same for v1 and v2 (#4756) 42d1c9571 feat: Add v2 route mtu rendering to NetworkManager (#4748) dc94a3901 tests: stable ubuntu releases will not exit 2 on warnings (#4757) bda164459 doc(ds-identify): Describe ds-identify irrespective of distro (#4742) 812df5038 fix: relax NetworkManager renderer rules (#4745) 598e0560d fix: fix growpart race (#4618) 0d787d0a2 feat: apply global DNS to interfaces in network-manager (#4723) 39abae9ec feat(apt): remove /etc/apt/sources.list when deb22 preferred (#4740) 960faf87d chore: refactor schema data as enums and namedtuples (#4585) 3274d2306 feat(schema): improve CLI message on unprocessed data files (#4585) 8937b5e5a fix(config): relocate /run to /var/run on BSD (canonical#4677) 83f99b547 fix(ds-identify): relocate /run on *BSD (#4677) ccf5bc4dc fix(sysvinit): make code a bit more consistent (#4677) b51536bc7 doc: Document how cloud-init is, not how it was (#4737) 720665263 tests: add expected exit 2 on noble from cloud-init status (#4738) 367300257 test(linkcheck): ignore github md and rst link headers (#4734) b6a1c635d test: Update webhook test due to removed cc_migrator module (#4726) 0f3afb41b fix(ds-identify): Return code 2 is a valid result, use cached value cb36bf38b fix(cloudstack): Use parsed lease file for virtual router in cloudstack 53eb8555e fix(dhcp): Guard against FileNotFoundError and NameError exceptions d662ffc5e fix(apt_configure): disable sources.list if rendering deb822 (#4699) 21c1d9161 docs: Add link to contributing to docs (#4725) 5a021d50b chore: remove commented code (#4722) fb5a7186d chore: Add log message when create_hostname_file key is false (#4724) c2c100e8c fix: Correct v2 NetworkManager route rendering (#4637) 82162cb47 azure/imds: log http failures as warnings instead of info (#4714) bb1e298b4 fix(setup): Relocate libexec on OpenBSD (#4708) 4f60ff099 feat(jinja): better jinja feedback and error catching (#4629) c698d8e2a test: Fix silent swallowing of unexpected subp error (#4702) 9308e8767 fix: Move cloud-final.service after time-sync.target (#4610) 1003d438b feat(log): Make logger name more useful for __init__.py 468c0f62e Release 23.4.1 (#4695) 1b0719420 chore: Remove cc_migrator module (#4690) c071f69ac fix(tests): make cmd/devel/tests work on non-GNU e90cb10bb chore: Remove cmdline from spelling list (#4670) 290b0a0f7 doc: Document boot status meaning (#4670) 5e1cf09c4 doc: Set expectations for new datasources (#4670) addfc845b ci: Show linkcheck broken links in job output (#4670) d29b744e7 fix: Handle systemctl commands when dbus not ready (#4681) 4006c23cb dmi: Add support for OpenBSD (#4654) 4ed09d63d ds-identify: fake dmidecode support on OpenBSD (#4654) 533ec66bd ds-identify: add OpenBSD support in uname (#4654) 949af5483 refactor: Ensure '_cfg' in Init class is dict (#4674) a6ef369ad refactor: Make event scope required in stages.py (#4674) da62f298f refactor: Remove unused argument (#4674) 305ec6bec chore: Move from lintian to a sphinx spelling plugin (#3639) 3e7caf3d0 fix(doc): Fix spelling errors found by sphinxcontrib-spelling (#3639) 75ee2f073 ci: Add Python 3.13 (#4567) 78a653bfe Add AlexSv04047 to CLA signers file (#4671) 969671bc7 fix(openbsd): services & build tool (#4660) bb474df78 tests/unittests: add a new unit test for network manager net activator (#4672) b45d23ce3 Implement DataSourceCloudStack.get_hostname() (#4433) d1d516689 net/nm: check for presence of ifcfg files when nm connection files are absent (#4645) 1d6918bdf doc: Overhaul debugging documentation (#4578) 084c053d2 doc: Move dangerous commands to dev docs (#4578) ebb843371 doc: Relocate file location docs (#4578) 12950ae0a doc: Remove the debugging page (#4578) cfb1bef67 fix(util): Fix boottime to work on OpenBSD (#4667) 0264e9691 net: allow dhcp6 configuration from generate_fallback_configuration() 29dd5ace7 net/network_manager: do not set "may-fail" to False for both ipv4 and ipv6 dhcp 72d6e187a feat(subp): Measure subprocess command time (#4606) 09b70436b fix(python3.13): Fix import error for passlib on Python 3.13 (#4669) 45501aaa1 style(brpm/bddeb): add black and ruff for packages build scripts (#4666) 4d6b96d8b copr: remove TODO.rst from spec file d798bb5e0 fix(packages/brpm): correct syntax error and typo 9994f7f56 style(ruff): fix tip target 12bb6818a config: Module documentation updates (#4599) 3bad8b5a5 refactor(subp): Remove redundant parameter 'env' (#4555) ad6808f82 refactor(subp): Remove unused parameter 'target' (#4555) e6d0acde2 refactor: Remove 'target' boilerplate from cc_apt_configure (#4555) 3ee514ace refactor(subp): Re-add return type to subp() (#4555) 36959b6ab refactor(subp): Add type information to args (#4555) 3924113df refactor(subp): Use subprocess.DEVNULL (#4555) 9af8a4a07 refactor(subp): Remove parameter 'combine_capture' (#4555) e9b9971f6 refactor(subp): Remove unused parameter 'status_cb' (#4555) c02098ff0 fix(cli): fix parsing of argparse subcommands (#4559) 9160bdb68 chore!: drop support for dsa ssh hostkeys in docs and schema (#4456) 3c0eca190 chore!: do not generate ssh dsa host keys (#4456) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15criu: patch cleanupsBruce Ashfield
Adding Upstream-Status and reformatting some of the long logs. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15virt-manager: add Upstream-Status to patchBruce Ashfield
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15ceph: update to 18.2.2Bruce Ashfield
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15ceph: fix do_compile/do_install failuresChen Qi
1. OECMAKE_C/CXX_COMPILER needs to have sysroot setting in it, because ceph's cmake files are using it to construct PY_CC. Without it, files such as stdlib.h cannot be found. 2. re2 is added to deps. Seems no way to disable it. 3. 0001-ceph-fix-build-errors-for-cross-compile.patch is dropped. It's useless and problematic for new version. 4. 0001-cmake-add-support-for-python3.11.patch is dropped as it's not needed anymore. 5. 0001-avoid-to_string-error.patch is added to fix build error, maybe caused by boost version incompatibility. 6. Some cleanups. 7. A few more options are set. 8. BUILD_DOC=1 is exported so that check_sanity() causes compilation error. This is a workaround and may need further visit in the future. 9. Delete the conditional check for /etc/debian_version which adds '--install-layout deb' and causes the following error. error: option --install-layout not recognized The patch is 0001-delete-install-layout-deb.patch. 10. ceph-volume[-systemd] are now in sbin. 11. cephfs-mirror units are added to avoid package QA issue. 12. cephfs-top is seded to fix incorrect shebang. 13. Ensure libcephsqlite.so is packaged into ceph instead of ceph-dev. 14. Add bash to RDEPENDS as rbdmap needs it. 15. Skip buildpaths QA. 16. Add ceph user/group, because ceph-crash needs it in drop_privilege function call. 17. Patch the build.py which creates the cephadm zipapp to ensure it uses the correct interpreter. We cannot simply use 'sed' against the cephadm as it's zip format. Runtime tests: cephfs-top --help cephadm --help systemctl status rbdmap systemctl --failed Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15ceph: initial update to 18.2.0Bruce Ashfield
The ability to detected our python is fixed, but we are now failing in the compilation phase on some of the applications. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15kernel/cfg: move to a kernel-cache / central location for configurationBruce Ashfield
We've had duplicate fragments in the kernel-cache and the meta-virt layer for quite some time (i.e. docker). To more easily keep these in sync, promote the sharing of fragments and to allow them to be used even when meta-virt isn't part of a build, we change our feature additions to use the yocto-kernel-cfg clone of the kernel-cache instead of the ones in our layer. It remains to be seen if any other kernel recipes will run into issues with this movement of the fragments, so we mark this as a WIP/RFC. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15diod: Update to b4b5e8e00ed11b21d7fcf05a080dc054a8eac2d6Ola x Nilsson
Just needs a single patch to handle the lua feature in configure when cross-compiling. f732f19 auto.diod.in: remove bashisms 7e0df4c build: Update ax_compiler_vendor.m4 from autoconf-archive 2023.02.20 7e56831 build: Update ax_lua.m4 from autoconf-archive 2023.02.20 76c7c18 build: Install diod.service and auto.diod without install-data-local af5972f build: Add missing , to AS_CASE in configure.ac 6cbbacf diodmount: update man page with privport option 3777ea1 libdiod: Support ipv6 in diod_sock_connect ddf6071 libdiod: Set global options on exports specified on 1db9e57 libdiod: support privport on ipv6 ae7c536 diodmount: Add option to set privport 66652bf diod: allow walk on open fids 2822ea6 tests: disable open-walk test 56f24b2 diod: fix incompatible-pointer-types warning ab03b7f utils/diodls: fix error-format warnings 84d4e51 github: extend build matrix to include ubuntu18 203b4c7 README: reference SPDX identifier d5444ce license: update 9p.h kernel header 0a5c80e license: update npfs source headers 88350f3 license: update license header to abbreivated one 57a621d protocol: fix plan9 manual links ee95dd9 tests/misc: fix distcheck problems d8e1e67 README: update dependencies 5425713 ci: install lua interpreter as prereq 25bebfb build: add configure --disable-config e7f9df9 build: fix lua detection 3eabd5d ci: create build matrix with clang, gcc 20ca897 build: conditional use of gcc warning flags is broken 16f8da4 build: turn all compiler warnings into errors 59bdaa1 tests/kern/tfcntl3: drop dead code 7a0f557 tests/kern/tfcntl2: drop dead code dd4d4c0 tests/kern/misc: ignore stringop-truncation warnings 3a05837 tests/kern/fsx: ignore unused-result warnings c918476 tests/kern/postmark: ignore format-overflow warn b20268c tests/kern/fsx: fix incorrect message 7ee5b68 tests/kern/pathwalk: check snprintf return value 657dc10 diod: use readdir(3) in ioctx_readdir() cba3834 diod: normalize whitespace in ioctx_readdir_r() 3e8ed95 diod: use readdir() not deprecated readdir_r() 194416d diod: define _DEFAULT_SOURCE not _BSD_SOURCE ddcbd3b diodmount: initialized variable 698d055 diodmount: check system() return value 787994e build: suppress liblsd errors 192229f build: enable automake "maintainer mode" 0086b9b libnpfs: don't call snprintf() with NULL %s arg 620792d ci: add basic github workflow 530e2d5 move main.yml into the correct directory 783cb8c ci: add github workflow stub c7eccf9 ci: drop travis config ff26333 Use PKG_CHECK_MODULES for ncurses, drop legacy curses 91d8966 Silence warnings when compiling with clang 3bb5798 Increase diod server maximum msize setting to 1MB 896f37c Add option to disable hostname lookups cdd12f2 Remove empty README c2cd87c Document IPv6 address format 899306b diod: Add support for IPv6 addresses 1878ce9 diodmount: Add support for IPv6 addresses 82b819f Splits the package in diod, and diod-utils. cf33c8e Fixes spec file for systemd build on CentOS 7. 9af7d94 Travis-ci: added support for ppc64le 550ba49 document the FreeBSD changes bfe6c4b implement impersonation on FreeBSD c28286f restore user-linux.c from user-linux-0.c 2624b4f copy user-linux.c to user-freebsd.c f4ae6ef save a copy of user-linux.c as user-linux-0.c 228c2d2 minor cleanup in liblsd/hostlist.c f325ad5 fix the help message e20572a finish the split of user.c 11ed83c remove non-shared code from user.c 929276d move common code from user.c out of the way 7d3d01a leave only a stub in user-stub.c d7abf6f create user-stub.c from user.c 828cf89 remove non-Linux bits from user-linux.c 3eb807c create user-linux.c from user.c 490d7bc add a setting to configure access=user API 243b0b3 disable diodmount and tests except on Linux 1ece6d7 make building tests configurable a3610ca make building diodmount configurable 13eace1 do not special-case Linux to do the same thing 33cd2b0 FreeBSD does not have ENODATA e6ecd06 remove unused ifdefs 42958d2 check for missing defines directly 244adc7 use autoconf to detect headers f3b9cae small fixes for FreeBSD 73fe9a6 Update protocol.md f0f7d0d Fix systemd unit dir and file permissions 81eef82 Fix autoconf failure: Ensure m4 macro inclusion ca1b0f5 Place systemd unit into $(libdir)/systemd/system 5551dbc libnpclient/read.c: fix out-of-bounds write 50bc4ea libdiod/diod_sock.c: zero initialize sockaddr 1d40ba5 diod/ops.c: distinguish opened and unopened Fids in {set,get}attr d1d31c9 diod/ioctx.c: add stat, chmod, chown, truncate, utimensat 6749db3 diod/ops.c: disallow walk on opened fids f1f1b38 tests/user: add tests for operations on opened fids 6fbe656 tests: fix xattr test build d3946ca tests: check for daemon user ff730b1 Fix typo in P9_TRENAME format 9690086 add git to debian dependencies 0498089 diod/ops.c: add header file for makedev 043f1ea cleanup: remove files that should not have been committed 0dd51c5 travis-ci: begin building under travis fb191b7 tests/kern: avoid use of relative paths 47c63b0 tests/user: avoid use of relative paths 320eb5a tests/misc: avoid use of relative paths 74bfd84 test/misc: include test.h in dist target 89fb32d tests/kern/dbench: fix distcheck problem d6881e0 build: fix source references in tests/misc 2379e20 build: include from $(srcdir) not relative path f86b24e test/user: skip t18,19 if xattr not enabled fc02397 test/user/attach: reduce number of threads 2f92e04 cleanup: drop trailing whitespace from test source f958117 build: drop META f33d72a libnpfs: use PACKAGE_NAME-PACKAGE_VERSION not META_ALIAS 5add7d2 dtop: show PACKAGE_VERSION not META_VERSION.RELEASE 3a51ec0 man: use PACKAGE not META macros 1fd1b11 spec: use PACKAGE not META macros cf3247a cleanup: drop trailing whitespace from source 7ca7f56 protocol.md: fix typos and markdown errors d04c39e README.md: trivial fixes 9d37f4a protocol.md: fix typos Change-Id: I5f06ccaa86f935d5f32a0800c0edb49b9d17b0ff Signed-off-by: Ola x Nilsson <olani@axis.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15libvirtd: don't allow named.service listening on libvirt network interfaceXiangyu Chen
libvirtd has its own network interface named virbr0, and it using dnsmasq to setup the DNS. the named.service also listen interface and try to bind the port 59 on virtbr0, that cause dnsmasq report following error: dnsmasq: failed to create listening socket for 192.168.122.1: Address already in use Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15kernel/cfg: synchronize latest docker configurationBruce Ashfield
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15libvirt-glib: update 4.0.0 -> 5.0.0Markus Volk
5.0.0 - Nov 28, 2023 ==================== - Fix compatiblity with libxml2 >= 2.12.0 - Bump min libvirt version to 2.3.0 - Bump min meson to 0.56.0 - Require use of GCC >= 4.8 / CLang > 3.4 / XCode CLang > 5.1 - Mark USB disks as removable by default - Add support for audio device backend config - Add support for DBus graphics backend config - Add support for controlling firmware feature flags - Improve compiler flag handling in meson - Extend library version script handling to FreeBSD - Fix pointer sign issue in capabilities config API - Fix compat with gnome.mkenums() in Meson 0.60.0 - Avoid compiler warnings from gi-ir-scanner generated code by not setting glib version constraints - Be more robust about NULL GError parameters - Disable unimportant cast alignment compiler warnings - Use 'pragma once' in all header files - Updated translations This fixes build after libxml update: ../git/libvirt-gconfig/libvirt-gconfig-object.c:200:37: error: passing argument 2 of 'xmlSetStructuredErrorFunc' from incompatible pointer type [-Werror=incompatible-pointer-types] 200 | xmlSetStructuredErrorFunc(NULL, gvir_xml_structured_error_nop); | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~ | | | void (*)(void *, xmlError *) {aka void (*)(void *, struct _xmlError *)} In file included from /home/flk/poky/build/tmp/work/corei7-64-poky-linux/libvirt-glib/4.0.0/recipe-sysroot/usr/include/libxml2/libxml/relaxng.h:14, Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15virt-manager: add packagePaul Le Guen de Kerneizon
virt-manager is a graphical tool for managing virtual machines via libvirt. By default, virt-manager is compiled with GUI dependency using `gui` flag. Build tested on aarch64 and x86-64 machines, with both with and without gui PACKAGECONFIG flag. Signed-off-by: Paul Le Guen de Kerneizon <paul.leguendekerneizon@savoirfairelinux.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15cfg-fragments: update to 6.6Bruce Ashfield
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15criu: pycriu RDEPENDS on python3-fcntlTim Orling
Signed-off-by: Tim Orling <tim.orling@konsulko.com>
2024-03-15criu: pycriu RDEPENDS on python3-ctypesTim Orling
Signed-off-by: Tim Orling <tim.orling@konsulko.com>
2024-03-15criu: pycriu RDEPENDS on python3-protobufTim Orling
Signed-off-by: Tim Orling <tim.orling@konsulko.com>
2024-03-15criu: cleanup; export USRBINPATH PEP517_INSTALL_PYTHONTim Orling
Signed-off-by: Tim Orling <tim.orling@konsulko.com>
2024-03-15criu: fix pycriu build of wheelTim Orling
Inherit python_setuptools_build_meta instead of setuptools3, as this is the build-backend declared in the pyproject.toml We seem to need python3-protobuf-native as a DEPENDS, but then the dependency check complains because our version in meta-python is python3-protobuf_4.25.bb Workaround this (for now?) by telling python3 -m build to --skip-dependency-check This allows criu to _build_. Whether it is functional and proper is a different story. Signed-off-by: Tim Orling <tim.orling@konsulko.com>
2024-03-15criu: build and install wheelsTim Orling
Mimic what we do with python_pep517.bbclass in do_compile (python3 -m build) and do_install (python3 -m install) to build and install wheels and avoid the heavy handed pip install usage. FIXME: even though lib/pycriu/version.py is properly being dynamically generated, setuptools/config/expand.py is failing to detect the __version__ attr. Signed-off-by: Tim Orling <tim.orling@konsulko.com>
2024-03-15criu: update to v3.19Bruce Ashfield
Bumping criu to version v3.19, which comprises the following commits: f8b14286b criu: Version 3.19 (Bronze Peacock) f104b3d6d Makefile: introduce ARCHCFLAGS for arch specific cflags 0b62f4267 lib: use separate packages for pycriu and crit 97b8b659c zdtm: cgroup_ifpriomap: Improve skip check's robustness. e076c11e2 ci: fix codespell errors 41938f14b zdtm/static: test the offset migration of ELF files 29026496d zdtm/lib: add missing signal.h header a77185dae files-reg: don't change the file pos in get_build_id 5d4179ddb criu/proc_parse: refactor the eventpoll parser cfaacfb58 zdtm/thread_different_uid_gid: remove the redundant check 36a84751e zdtm/cow00: fix typo 48d6a59a2 arch/x86: remove the redundant check 45670b655 apparmor: remove the redundant check 5e8d7dc94 tun: don't parse buffers that have not been filled with data 4c9d23d33 util: allow to run criu under strace c9fdd355f pie: Mark __export_*() functions as externally_visible 5d6c8bc58 clang-format: disable column limit constraint 81a30c320 zdtm/memfd04: check execveat on memfd that has memory mappings e86e8dac0 memfd: don't reopen file descriptors for memory mappings 28e854d66 amdgpu: fix clang warnings ba168ab78 ci: enable build with amdgpu plugin aa38a5989 amdgpu: print an error if the dup syscall fails 940a05c0b amdgpu: don't leak fd on an error path in open_img_file a68975c06 plugins: the UPDATE_VMA_MAP callback returns fd with the full control 66f39adf1 criu: change the comment about magic numbers 9b4e8292c vma: Add !VVAR condition to vma_entry_can_be_lazy 28adebefb Return page size as unsigned long 00f8a56b6 zdtm: check userns once ba48ceb57 zdtm: socket_udp_shutdown: Make the test fail instead of timing out. f6e820bed zdtm: Treat ESRCH from kill() as success. c29c5a1df zdtm: cgroup04: Improve skip check's robustness. 131e464a0 zdtm: cgroup04: Improve error messages. 785d97a61 zdtm: If ignoring kernel taint, also ignore taint changes. 5e544dc44 ci: stop testing ubuntu overlayfs 7a2910f89 py/cli: add --version option 61d9cf6f9 crit/setup.py: use __version__ from pycriu 8adefc90d lib/pycriu: generate version.py 59fcfa80d compel: Add support for ppc64le scv syscalls d06c9b5cd criu/plugin: Add environment variable to cap size of buffers. 8caf460b9 zdtm: test MEMBARRIER_CMD_GLOBAL_EXPEDITED migration 2ba872782 dump: use MEMBARRIER_CMD_GET_REGISTRATIONS when available 32241b00d vagrant: run tests with fedora 38 862cb5c1c vagrant: update to version 2.3.7 d2a0d1fa6 lint: don't fail workflow on indent fail 08f286ed9 CONTRIBUTING.md: improve coding-style related sections 38bf7f42e CONTRIBUTING.md: don't mention ctags b7a8bb088 zdtm: test execveat(memfd) c9b2633ca memfd: return original memfd fd for execveat() 480565437 kerndat: check_pagemap: close(fd) on error path d5284313f kerndat: Make errors from clone3() check more precise. badf8060c proc_parse: Log smaps entry while dumping VMA. 1800018bc test/other: add test for action-script ea05b06ac proc_parse: remove trivial goto from vma_get_mapfile_user() f7d7dc9c0 compel/infect: include the relevant pid in "no-breakpoints restore" debug message b56a9cef3 kerndat: Make pagemap check more robust against swapped out pages. 86ad52bc2 ci/loongarch64: compile tests before running zdtm.py 0085f992c memfd: don't set fd attributes not needed for vma mapping 8c17535f3 loongarch64: fix syscall_64.tbl 6ea60d6ef github: auto-remove `changes requested` and `awaiting reply` labels 620e8c0a6 Put a cap on the size of single preadv in restore operation. 2547ac8ac zdtm: membarrier: test migration of membarrier() registration e07155e19 dump+restore: Implement membarrier() registration c/r. 5b790aa18 loongarch64: reformat syscall_64.tbl for 8-wide tabs d1096e3b3 lib/py: add VMA_AREA_MEMFD constant d3b955e57 ci/docker: install all required packages 9477354de scripts/apt: don't hide apt output a4b49c46f amdgpu_plugin: remove duplicated log prefix 69200bec7 irmap: scan user-provided paths in order 2a131167b page-xfer: Pull tcp_cork,nodelay(). 6ed50ea49 apparmor: fix incorrect usage of sizeof on char ptr 3628589b5 zdtm/memfd00: test memfd file mode dfa541095 memfd: dump and restore permissions. ac1219f4e sk-inet: Extend 'TCP repair off' failure log. 25d033080 restore: Skip dropping BSET capability if irrelevant. fe4be19de prctl: test prctl(NO_NEW_PRIVS) setting a605cc9f3 prctl: Migrate prctl(NO_NEW_PRIVS) setting. 7df3f6595 restore: Fix capability migration requirements between different kernels. 7ab02639f restore: Skip setgroups() when already correct. 4998b724e restore: Avoid need for CAP_SETPCAP if not changing uids. 99188cfbe tty: Avoid EPERM for no-op chown(). 113957270 memfd: Avoid EPERM for no-op chown(). 96fa42b79 cgroup: Replace restore_perms() with cr_fchperm(). b074f92f9 files-reg: Avoid EPERM in ghost_apply_metadata() for no-op changes. f985d9f44 sk-unix: Avoid restore_file_perms() EPERM error for no-op changes. 21560270d util: Implement fchown() and fchmod() wrappers. e25a243b2 ci: add workflow for loongarch64 788e1e92e zdtm: add loongarch64 support ae0811475 criu: add loongarch64 support to parasite and restorer ec6dc2d5c images: add loongarch64 core image c9df09eea compel: add loongarch64 support b304106e6 include: add common header files for loongarch64 8a24d4872 ci: add workflow to ensure self-contained commits 23313080a kerndat: don't leak a socket file descriptor b2d74fbfd zdtm: replace NR_fstat with NR_statx 8ee35bebb kerndat: bind ipv6-socket only if ipv6 is enabled 6b8107cd1 irmap: Reduce error log severity to warning. 4eb6cc319 mount: Demote fsnotify logs for ignored failures. 3e428a1de log: Remove error logs for ignored or otherwise logged subprocess exits. 804c0ba82 soccr: Log name of socket queue that failed to restore. 4018b7877 soccr: Log offset when failed to restore socket's queued data. 1cb791652 sk-unix: Log both peer names when failing on an external stream unix socket. 5a723937a compel: Log the status word with "Task is still running" errors. 664598dc7 files-reg: Debug "open file on overmounted mount" error. a5fe99d2c cgroup: Propagate error on cgroup mount failure. 056cac474 zdtm: drop python 2 compatibility 002f2372a lib/py: drop python 2 compatibility d388b91de test/others: drop setup_swrk() py2 compatibility ee9983d4a test/criu-ns: drop python 2 compatibility ede018176 make: remove checks for python 2 binary 642fd99bf remove python-future dependency 376f3d180 crit: add requirements.txt for pip>=20.1 f5d06571c crit: drop python 2 support 7825f4ebf coredump: drop python 2 support 05f0535de ci: clean up CentOS 7 related tweaks 362d8fa5c ci: disable CentOS 7 test in Cirrus CI 94c9e4787 readme: refactor asciinema link for video playback 7bda5e656 zdtm: Update netns purpose comment in zdtm_ct. 9ad59f58f util: Make CRIU run_id machine-level unique. eecc53d05 kerndat: Don't fail on NETLINK/nsid support missing. bf8446ae5 kerndat: unexport kerndat_nsid() f2011e1c7 util: Downgrade ignored errors to warnings. 2aa9cb933 rpc: Support setting images_dir by path. 439b52243 rpc: Support gathering external file list after freezing process tree. 82a0db036 docker/podman: test c/r with action-script 28d005638 action-scripts: allow shell scripts in rpc mode 3e0a8ffd6 build: libnfnetlink: Remove nla_get_s32(). f043cb22a build: Guard against libbsd's version of `__aligned`. c5142104a build: Use make-provided AR for building libzdtmtst. 88f8fdda8 build: Fix LIBS vs LDFLAGS order. cbbe6c683 build: Debug system feature tests. 1a1fa439c build: Remove HAS_MEMFD test 2bf10c8d2 restore: remove unused `secbits` field. e5c9bc4d0 kerndat: Make socket feature probing work on IPv6-only host. eea0d6ede pipes: Plug pipe fd leak in "Unable to set a pipe size" error case. ffa1e47fd sockets: Increase the size of sockets hashmap to 16K. 304a309ae test/thp_disable: fix lint c97cc6a6c Allow skipping iptables/nftables invocation. d0ac547b3 zdtm: sock_opts00: Improve error messages. 6bc00fcb8 zdtm: Implement test sharding. 1fb5c410c zdtm: Allow --keep-going for single test. ed88e3241 zdtm: Add timeouts for test commands. 516fade93 zdtm: Allow overriding /tmp. 4b764a9dc Allow passing --log_to_stderr via RPC. 1e5ebec39 Allow passing --display_stats via RPC. 0e88a91ff Allow passing --leave_stopped by RPC. 4455444ee compel/test: Return 0 in case of error in fdspy 4c1409b8f Fill FPU init state if it's not provided by kernel. 93ad8d40d zdtm: thp_disable: Verify MADV_NOHUGEPAGE before migration 01238d270 zdtm: thp_disable: Verify prctl(THP_DISABLE) migration a0c78a790 zdtm: thp_disable: Output a single failure message 2364c963c Log if prctl(SET_THP_DISABLE) doesn't work as expected. 21ce76263 Restore THP_DISABLE prctl. 9943dcde1 Fix mount(cgroup2) for older kernels. 0218b1e8f Fix dumping hugetlb-based memfd on kernels < 4.16. a638043a7 cgroup/restore: split prepare_task_cgroup code into two separate functions 2ac15e3ad action-scripts: Add pre-stream hook c6ac396aa timers: improve and fix posix timer id sequence checks fc08fa907 criu-ns: Update shebang line to python 9cd09f586 criu-ns: Install Python pathlib module in CentOS 7 9c9e8ea3f criu-ns: Add tests for criu-ns script e4b6fb2d1 criu-ns: Add support for older Python version in CI 733f16551 criu-ns: Add --criu-binary argument to run_criu() 36709536e lib/c: add empty_ns interfaces to libcriu b665dce3c docs: rename amdgpu_plugin.txt to criu-amdgpu-plugin.txt cc607f810 criu-ns: make --pidfile option show pid in caller pidns 50e17a1cf scripts: make newer versions of shellcheck happy df7b897a2 ci: fix new codespell errors 727d79650 compel: support XSAVE on newer Intel CPUs fa6af25e7 dump: increase fcntl call failure judgment 1c0f8787b zdtm: Add tests for ip tos restore 04cdbd610 sk-inet: Add IP TOS socket option 4c1a2ac41 criu: Version 3.18 (Silver Sandpiper) b689bcc35 cr-check: remove excess kerndat_has_nspid from check_ns_pid 9b3496043 log: fix timestamp logging when tv_sec>=100 94ac9ee3c proc_parse: fix while condition in parse_pid_status 45e4a6b27 netlink: fix netlink fd flags dump/restore failed 6c728df1d zdtm: modify rseq01 to include a thread f8da250bb cr-dump: properly apply rseq fixup for all threads 78c4e2c0f cr-dump: move rseq functions before dump_task_thread 85e46c44d dump: extend parasite_thread_ctl lifetime to dump_task_thread 9683097f2 zdtm: don't ignore rseq_cs mismatch in rseq01 test 0c5239932 ci: cancel preceding workflows run 5c8cdceec sk-unix: rework unix_resolve_name de39bd2bd sk-unix: simplify error handling in unix_resolve_name_old d93409cf1 sk-unix: remove bogus xfree from unix_resolve_name_old ccc790d54 zdtm/lib: fix cwd path freeing 8e6fa9c3b net: Add net log prefix 7f0f07599 crit: fix compatibility with Python 3.12 bd0f209c2 pstree: improve id intersection detection in prepare_pstree_for_shell_job 66fd45d51 sk-unix: add some missed error printing a0158e692 zdtm: add MNTNS_ZDTM macro to fix initialization 12423abdb mount: allow bindmounts for external fuse mounts 65407616e ci/archlinux: initialize machine ID 34e2b0221 Optimized shell code with <'s (instead of cat + |) 7cae16e97 mount: do collect_mntinfo of external mount namespace with no for_dump 69befdde1 cgroup-v2: make new field cg_set optional 529f29891 cgroup-v2: make new field is_threaded optional 6e681afb6 net: fail restore if nftables isn't supported but image is present 156c8da33 make: disable '-Wdangling-pointer' warning with gcc 12 4930c9802 x86/xsave: Set only used XFEATURE_* in xstate_bv 3f8e3220b CONTRIBUTING.md: document make lint / indent 42c4be2a9 net: use get_legacy_iptables_bin also on restore 298286718 pie/restorer: Fix fd leaking on error path 1d4777e45 test: add long command-line to coredump test edaec5d76 coredump: report missing files without a backtrace 3ca979f9a coredump: handle long command-lines a0cc95c03 lib/py: reduce code duplication 85b5c1e45 ci/podman-test: drop crun installation script 91ff24b47 ci: disable c/r of cgroups with podman e7ab6fe63 restore: don't miss futex abort in restore_task_with_children 676b4579f zdtm/transition/epoll: don't rely on errno in case of zero return 7b8035344 mailmap: update my email 1ae9bac54 dump: improve error printing and readability of task_comm_info 11c71656b ci: add test for crit info 9b919ab74 crit: fix empty string comparison fa4af0430 dump: Show task comm early fd7e97fcf lint: exclude tags file from codespell 50e42c9dd Add documentation for --ghost-fiemap 4a8c02d63 zdtm: Add tests for IP_PKTINFO and IP_FREEBIND sock options bd9b66c8c sk-inet: support IP_PKTINFO and IPV6_RECVPKTINFO options 7d4d4915a sk-inet: save IP_FREEBIND option for SOCK_RAW sockets also f1c8d386b kerndat: check if setsockopt IPV6_FREEBIND is supported 14e883656 proc_parse: Handle btrfs files when map_files is not accessible d7da4a69a ci: Add maps00 test in unprivileged mode in user namespace d2abc9817 shmem: Close fd when VMA is copied from /proc/$pid/mem 144b467a0 shmem: pr_err -> pr_perror 6d7c0d007 compel/mips: fix parasite with GCC 12 7280e96a7 clang-format: use IndentGotoLabels to get rid of goto label indentation fcdb753ed namespaces: cleanup switch_mnt_ns and restore_mnt_ns 63159c14c mount: simplify code around mount_cr_time_mount 43fa4e76d remap: refactor goto jumping to a while loop 757a2b46c remap: Fix typo 3837d31b5 ci/lint: make push action have at least too commits depth cec43025a criu(8): Add info about unprivileged mode limitations 80528dbf7 proc_parse: Don't bail out on is_memfd() VMAs 95e590b51 shmem: Fall back to /proc/$pid/mem if no map_files 951c56917 proc_parse: Set VMA_AREA_REGULAR where needed a92dfb61f string: define wrapers __setproctitle and __setproctitle_init to hide bsd headers 0a7c5fd1b string: use our own __strlcpy and __strlcat to remove bsd headers 8cfda2748 log: remove all uses of %m specifier in pr_* functions 7459d0204 lint: prohibit to use %m specifier in pr_* functions f73ba7726 ci: switch from lgtm to codeql 0bddecead restorer: add logging on prctl PR_SET_MM_MAP failure fb66727a2 zdtm: add mntns_compare check to mount_complex_sharing ba09fad39 zdtm: add mountinfo topology compare to test lib 2837a13ef zdtm: add mountinfo parsing to test lib 543501d5f zdtm/lib: copy xmalloc.h d800ef658 zdtm/lib: copy list.h be61624f4 clang-format: rework make indent to check specific commits a918093ce scripts/ci: use Fedora 37 for vagrant based tests 1bb84f96f tty: fix codding-style around for_each_bit call abfe0b5d2 clang-format: add for_each_bit macros to ForEachMacros c8b4fb9ba autofs: fix a frankenstein auto-created by clang-format aab709b60 log: Write more details in write_pidfile 7c6eb0b85 asm: fix for_each_bit macro bb3f7bef6 crtools: fix help message alignment for --network-lock a302b3694 zdtm: fix 'zdtm.py list' command 21f5be91a cgroups: ignore EOPNOTSUPP on setting memory.kmem.limit_in_byte 9686693aa test/javaTests: update org.testng:testng (Maven) 5c60d35be sockets: tiny style fix 5a19c3432 non-root: Don't dump socket option SO_MARK if 0 2180e03b9 non-root: Rework socket bufs for unprivileged mode e5ccfbb24 Fix typo in comment bdbccc315 zdtm: add two tests for highly sparse ghost file f3fdce81a files-reg.c: fiemap algorithm for ghost file 14b9ec195 ci: fix make indent d0c64b7b3 ci/alpine: remove symlink for /usr/bin/python 095b3e84b ci/lint: install ShellCheck with dnf c48b5290d Fix warnings from -Wstrict-prototypes in clang 16.0.0 fa2c585c2 amdgpu: define __nmk_dir if missing c7211f52d Remove execute bit from source file f5e0f641a cgroup: Remove redundant code that handles zombie tasks c1ae880eb kerndat: Mark memfd_create(MFD_HUGETLB) unavailable when ENOSYS is returned 153614cb1 ci: move cgroup unmounting to run-ci-tests.sh 516ebc4f5 ci: Do not fail if latest epel repository definition is already installed 2ebce9233 ci: Make cpuset move to cgroup-v2 hierarchy 07d538cef zdtm: Check threads are restored into correct threaded controllers 20ea8a064 cgroup-v2: Restore threads in a process into correct threaded controllers 17d1d8810 cgroup-v2: Dump cgroup controllers of every threads in a process ad3936e81 zdtm: Add test to check global properties of cgroup-v2 are preserved d7e874659 zdtm: Add write_value/read_value helpers into zdtm library 167cfd366 cgroup-v2: Checkpoint and restore some global properties 8a336ab22 Switch aarch64 builds to Cirrus CI 840735aa0 ipc_sysctl: Prioritize restoring IPC variables using non usernsd approach 3db8d1a6c cgroup: add a comment to restore_cgroup_prop about path argument requirements 1cba559da non-root: add non-root test case to cirrus runs 6743d608c non-root: extend zdtm.py to be able to run tests as non-root 251939992 Documentation: add details about --unprivileged 47b07d011 non-root: Introduce unprivileged mode to kerndat 6a30c7d1e non-root: enable non-root checkpoint/restore ce01f70d9 non-root: add functions to work with capabilities 4b4bf0421 non-root: add infrastructure to run as non-root 4c7f91aff ci: enable EPEL for CentOS 7 a39d41656 compel: Fix ppc64le parasite stack layout 17ec53913 compel: Add test to check parasite stack setup 556ab0dea compel: Fix infect test to not override failures 461fa7271 compel: Add APIs to facilitate testing debc9c16c seize: do not overwrite exit code from failpath 16f1c147c test/others/crit/test.sh: use bash array 0a872ccf1 scripts/protobuf-gen.sh: fix (not ignore) shellcheck warnings 75b859f23 scripts/ci: rm shellcheck disable annotations aeb6961f3 scripts/ci/run-ci-tests: use bash arrays b1fb9f2f0 Fix, not ignore, shellcheck SC1091 warnings 9d2948b23 scripts/ci/asan.sh: fix, not ignore, shellcheck warning 968eec0d5 scripts/ci/apt-install: fix (not ignore) shellcheck warning 86ac0f05e ci/gha/lint: install a recent shellcheck 2039d7320 files-reg: skip failed mount lookup for shell-job's tty 9e91e62a7 criu-ns: capture controlling tty 40e1aaf56 mount: add definition for FSOPEN_CLOEXEC 7bc24688d ci: Clean up and improve Java testing 0178f2f99 ci: Add Dockerfile for openj9 on Ubuntu 39b3de60b ci: Rename openj9 Dockerfiles to hotspot f78d3d821 gitignore: Ignore top-evel build dir only aeaff6445 test/unix: check C/R of unix listen queues 83c606e02 zdtm: return 1 from pr_err, pr_perror, fail dca55d281 criu: fail migration if data was sent to an in-flight socket dfe9d006a breakpoint: enable breakpoints by default on amd64 and arm64 bb73e1cf5 breakpoint: implement hw breakpoint for arm64 platform b7953c6c7 compel: switch breakpoint functions to non-inline at arm64 platform 719fea2fc compel: clear a breakpoint right after it's been triggered d7477dac0 compel: set TRACESYSGOOD to distinguish breakpoints from syscalls c089159a4 ci/cirrus: centos 8 job nits a202ec271 ci/cirrus: add CentOS Stream 9 2642b657d docker-test: handle race condition error 49319cd57 Add Alexander Mikhalitsyn to maintainers f7972a3f0 cr-restore: rseq: use glibc-specific way to unregister only as fallback cacddf19d cr-restore: rseq: dynamically handle *libc with rseq 1f9bd82a5 cr-check: optimize check for apparmor stacking a1262f55f cr-check: fix check for apparmor stacking f9bc0a750 docker-test: use containerd installed from package 750acec25 Revert "ci: Switch to non overlaysfs tests" e8a6765d1 criu: fix conflicting headers eb4ecb3cf ci: unset XDG_RUNTIME_DIR when invoking podman da4803bea MAINTAINERS: Add Radostin (myself) to maintainers e62d541bd zdtm: add two tests for large ghost sparse file 2d34b5602 unlink_largefile.desc: remove crfail, since criu now can support unlink_largefile test fbded7978 files-reg.c: modify the check of ghost_limit to support large sparse files 01b8d40ce zdtm/mnt_root_ext: don't allow propagation from test mntns to criu mntns d12e2364c zdtm: make root mount private in criu mntns 70a9cd6fb vdso-compat: Increase the reserved buffer for compat vdso b30f3ee3d zdtm: Remove permission part check for skipping vsyscall vma c502d480f x86/compel/fault-inject: fixup mxcsr for PTRACE_SETFPREGS e30d18f43 rseq: fix headers conflict on Mariner GNU/Linux ad58553d9 Add --skip-file-rwx-check opt test 18fba4125 config/files-reg: Add opt to skip file r/w/x check on restore 6cef6e726 zdtm: add tests for SIGTSTP c7858ba42 infect: add SIGTSTP support 49caf85b2 config: fail on --track-mem option if dirty tracking is not available 91e971c4d hugetlb: don't dump anonymous private hugetlb mapping using memfd approach dd0217976 amdgpu: Add gitignore b117b211a zdtm/scm: add scm09 test with closed sender fd 5cd7092fd sk-unix: make add_fake_unix_queuers earier and rework find_queuer_for 28358db13 Fix the check for mnt namespace in criu-ns 295dc85ca github: use git-clang-format instead of make indent ced4ab4b0 zdtm: skip zdtm/static/shm-hugetlb when hugetlb is not supported c830643d8 Revert "ci: skip new hugetlb maps09/maps10 tests for pre-dump" b26e1fdbf mem: Skip pre-dumping on hugetlb mappings 9066f8741 cr-dump: do not report success to logs if post-dump script failed d46f40f4f criu: Version 3.17.1 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15kubernetes: fix build with go 1.21+Bruce Ashfield
go1.21+ checks the GOTOOLCHAIN variable and will attempt to validate/fetch the toolchain version requested. That doesn't work in our environment, so we export the variable as "local" to indicate that the build should trust (and use) the local toolchain. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>