------------------------------------------------------------------- Fri Nov 12 16:21:06 UTC 2021 - Richard Brown - Update to version 2.171.0 * Define kubernetes_file_t as a config_type * Allow containers to be socket activated by user domains and by systemd. * Allow iptables to use fifo files of a container runtime * Allow container_runtime create all tmpfs content as container_runtime_tmpfs_t * Allow containers to create lnk_file on tmpfs_t directories. ------------------------------------------------------------------- Mon Aug 9 07:44:17 UTC 2021 - Johannes Segitz - Update to version 2.164.2 * Don't setup users for writing to pid_sockets * Allow container engines to be started from the staff user. * Allow spc_t domains to set bpf rules on any domain * Add support for k3s ------------------------------------------------------------------- Fri Apr 23 06:04:48 UTC 2021 - Johannes Segitz - Fix container runtime binary labels (bsc#1185030). You need to relable at least /usr/sbin if you're affected ------------------------------------------------------------------- Tue Feb 23 13:21:19 UTC 2021 - Thorsten Kukuk - Update to version 2.158.0 - Add nfs remount support - Allow containers to execmod on nfs, samba and cephs remote shares - Allow confined users to send dbus messages to container_runtime ------------------------------------------------------------------- Mon Jan 11 10:40:32 UTC 2021 - Thorsten Kukuk - Update to version 2.154.0 - Allow confined user domains to run confined container domains. - Allow all containers to use nfs shares, iff virt_use_nfs boolean is enabled. - Allow containers to read nsfs file systems. - KVM Container need to use tunnel sockets created by runtime. ------------------------------------------------------------------- Tue Nov 3 07:53:35 UTC 2020 - Ludwig Nussel - Don't use BuildRequires based on shell script output. OBS can't evaluate that. ------------------------------------------------------------------- Thu Oct 29 07:52:21 UTC 2020 - Thorsten Kukuk - Update to version 2.150.0 - Add additional allow rules for kvm based containers using virtiofsd. ------------------------------------------------------------------- Wed Oct 14 12:57:07 UTC 2020 - Thorsten Kukuk - Update to version 2.145.0 - Add support for kubernetes_file_t - Allow container_t to open existing tun/tap ------------------------------------------------------------------- Wed Aug 12 09:11:30 UTC 2020 - Thorsten Kukuk - Minimize BuildRequires ------------------------------------------------------------------- Mon Aug 10 21:11:12 UTC 2020 - Thorsten Kukuk - Update to version 2.143.0 - support containerd/cri ------------------------------------------------------------------- Wed Aug 5 08:42:45 UTC 2020 - Thorsten Kukuk - Initial version