- Update to criu 2.3:
New features
* Ability not to show payload for some objects in CRIT
* Pidfile is written at the end of restore
* Ability to join existing namespaces on restore
* C/R of Data sitting in TTYs, Partially write-protected SysVIPC
segments, Debugfs and tracefs mounts, Overmounted tmpfs, IPv6
devconf sysctls, External block devices, Unix sockets with
mismatched shutdown state
Optimizations/improvements:
* Relaxed calculation of AIO ring size
* Tree-based search of tasks by real pid
* Less mem-to-mem copies on restore
* Saner devconf image format
* More verbose explanation of why task cannot be seized
* PID is printed in PIE logs
Fixes:
* Too many mmap-ed files blocked the dump
* Potential memory corruption when working with IPv6 sockets
* Overmounted bind mounts could cause restore to fail
* Overmounted bind mounts could result in badly restored mount tree
* Incomplete restoration of RO bind mounts options
Deprecated/removed:
* Greedy mode of pagemap (non-root) caused dump to fail (disabled)
OBS-URL: https://build.opensuse.org/request/show/402670
OBS-URL: https://build.opensuse.org/package/show/devel:tools/criu?expand=0&rev=42
- Update to criu 2.2: mostly bugfixes
New features:
* "Post-resume" added to action scripts
* Root task's PID in environment for action scripts
* Devconfs drop_gratuitous_arp and drop_unicast_in_l2_multicast
* Serial ttys
Optimizations/improvements
* Lighter link-remaps restore on newer kernels
Fixes:
* Race when restoring userns vs setting ns' maps
* Tasks with zero fds failed the dump
* Restore of TCP recv queue could fail due to kernel mem alloc
constraints
* No errors were written to logs when launching helper
(tar/iptables) app in userns restore
* User-mode dumped no memory pages sometimes
* Bind mounts considered not as bind sometimes
* Two mounts in the same directory blocked the dump
* Off-by in on /dev/tty{1,63} dumping
* Forking of cgroupns task was done with screwed clone flags
Deprecated/removed:
* Greedy mode of pagemap dumping (on some kernels we do not
support user-mode)
* Removed the --namespaces option
OBS-URL: https://build.opensuse.org/request/show/396192
OBS-URL: https://build.opensuse.org/package/show/devel:tools/criu?expand=0&rev=40
- Update to criu 2.1:
New features:
* Checking now classifies features to important/extra/experimental
* Ability to bring some disk files into images.
* C/R of Completed AIO requests and fallback gre and gretap net
devices
Optimizations/improvements:
* Code coverage collecting now works
* Use native rtnl library for netlink messages processing
* Using --output - now results in stdout as log, not a file with
the name "-"
* Signals are printed by names in logs
Fixes:
* Make tar generated tarbal with bad name
* CG restore code lacked rollback in some places
* Error code from raw syscalls was treated with errors resulting
in wrong criu check reports
* Dumping task with HUGE amount of file descriptors failed
* Task could be stopped after pre-dump if respective option was used
* A /proc/pid directory from dead process conflicting with a new
alive one could cause dump to fail
* Zombie from alien session/process group caused restore to fail
* CGroup fs was wrongly mounted in CGNS on restore
* Irmap scan was mis-checking devices numbers
* Use-after-free in irmap scan
* Btrfs bindmounts detection was mistaken due to 'subvol=' options
met
* Propagation of mountpoint's shared groups was lost for
propagated mounts
* Unaligned allocations of restore shared memory could result in
OBS-URL: https://build.opensuse.org/request/show/389858
OBS-URL: https://build.opensuse.org/package/show/devel:tools/criu?expand=0&rev=38
- Update to criu 2.0:
New features:
* New code layout for sub-projects (e.g. Compel)
* Unprivileged dump
* Dump/check cpuinfo support for PPC
* Explorers for CRIT
* Added "post-setup-namespaces" to action scripts
* Added timeout for dump procedure (5 sec by default)
* Ability to override LSM profile on restore with CLI/RPC option
* External bind mounts can be fs-root mounts too
* Skip netns' internals on dump and restore (for Docker integration)
* Advanced support for external files
* More C/R supports
Optimizations/improvements:
* Align parasite stack on 16 bits for correctness
* Compilation with native libc syscall wrappers and helpers
* Parasite code injection done via memfd system call
* Make vaddr to pfn conversion with one less syscall
* CRIT shows device numbers in "maj:min" manner
* CRIT shows mmap's status in verbose
* Docker files for builds on all supported arches
Fixes:
* Absent readlink syscall on ARM (use readlinkat instead) could cause dump to fail
* Wrong argument to timer_create system call could cause restore to crash
* Extra tasks in freeze cgroup caused dump to fail/hand/crash
* Unaligned restore-time object allocations caused lock operations to fail
* Opened /proc/pid dir of dead task failed the dump
* Unaligned stacks caused criu to fail on aarch64
* Changed device numbers on restore side could cause random failures
* Fixes in mount points sharing/slavery/propagation restore
OBS-URL: https://build.opensuse.org/request/show/369387
OBS-URL: https://build.opensuse.org/package/show/devel:tools/criu?expand=0&rev=36
- Update to criu 1.8:
* Ability to check CRIU features via RPC
* Pre-dump and pre-restore action scripts
* The "info" action in CRIT showing stats about image file
* Python API
* C/R of read-only bind mounts, IPv6 routes and iptables rules,
ip rules (it ip tool supports such), ignore_routes_with_linkdown
netns devconf, empty bridges in netns, FILTER mode of seccomp,
and IP_FREEBIND socket option
* Lots of fixes, two security fixes
Service run as root could allow users to violate ptrace policies
Service run as root could give users access to privileged files
and directories
- Remove superfluous dependencies
- Clean up spec file, as systemd and logrotate supports have been
officially dropped
OBS-URL: https://build.opensuse.org/request/show/347906
OBS-URL: https://build.opensuse.org/package/show/devel:tools/criu?expand=0&rev=34
- Disable systemd service as a temporary workaround for possibile
security issues (CVE-2015-5228, CVE-2015-5231, bsc#943105)
- Update to criu 1.7:
* Improved cgroups management
* Support for seccomp strict mode
* Support for stream unix sockets inheritance
* Support uid/gid-restricted mounts in userns
* Support deleted bind-mounts
* Ability to specify maximum ghost file size
* OverlayFS support
* Support relative unix sockets' bind paths
* Altivec and PSX support for PPC
* Small PIE loader
* Temporary proc mountpoint is mounted with nosuid, noexec and nodev
* Less memory copies when preparing restorer binary
* CRIT action "show" for less keystrokes on common use-case
* Fsnotify log messages now use hex everywhere :)
* CRIT output doesn't mix fields any more
* Many fixes
OBS-URL: https://build.opensuse.org/request/show/330520
OBS-URL: https://build.opensuse.org/package/show/devel:tools/criu?expand=0&rev=29
- update to version 1.6:
* PowerPC 64bit LE support
* Makefile.local for 3-rd party build rules
* Ability to "enable" filesystem on dump (--enable-fs)
* Ability to skip mountpoint on dump (--skip-mnt)
* Prepare to deprecate "criu show" command
* External mounts auto-detection
* /dev/tty (current terminal) support
* Netdev and netns (all/default) confs C/R
* Images v1.1 with extra magic at head
* Support fusectl (only ctl) mountpoint
* Sub-version format is now as of git-describe
* Apparamor labels C/R support
- Fix library path for aarch64 and ppc64le
- Fix the prototype for lsm.c (to fix build errors):
lsm-prototype-fix.diff
- Refreshed crit-install-prefix.diff
OBS-URL: https://build.opensuse.org/request/show/309628
OBS-URL: https://build.opensuse.org/package/show/devel:tools/criu?expand=0&rev=25
- update to version 1.5: New features
* CRIT tool
* ability to request CPU compatibility on instructions level only
* C/R of empty AIO rings
* more detailed errno report via RPC
* per-feature "criu check"
* inheriting FDs on restore
* ability to automatically move veth device to host-side bridge
on netns restore
* VT terminals support
* more user namespaces C/R stuff
See more details at http://criu.org/Releases#v._1.5
- fix installation of crit:
crit-install-prefix.diff
OBS-URL: https://build.opensuse.org/request/show/290686
OBS-URL: https://build.opensuse.org/package/show/devel:tools/criu?expand=0&rev=19
- update to version 1.4: New features:
* Dump and check cpuinfo
* Initial support for user namespaces
* The docker_cr.sh script for Docker
* New API for writing plugins (old one is still possible)
* Service workers change their title to better look in ps output
* Ability to feed socket for pre-dump and page-server in swrk mode
* Page-server can auto-bind its port
* Ability to perform several actions during one connection to RPC service
* C/R of opened /proc/$pid/foo files of dead tasks
* C/R of /dev/console
* C/R of virtualized devtmpfs (openvz and future upstream kernels)
* C/R of empty mqueue fs (posix message queues)
* C/R of shared bind-mounts
See more details at http://criu.org/Releases#v._1.4
OBS-URL: https://build.opensuse.org/request/show/263711
OBS-URL: https://build.opensuse.org/package/show/devel:tools/criu?expand=0&rev=17
- update to version 1.3:
* Docker and LXC support, lots of bug fixes
- cleanup spec file, fix rpmlint warnings
- Update to version 1.3-rc2:
* external bind mounts and tasks-to-cgroups bindings
* many bugfixes in memory restore and mounpoints dump
- Update to version 1.3-rc1:
New features:
* AArch64
* Multiple mount namespaces
* FPU state restore control
Restore old FPU state on newer CPUs
Ability to ignore FPU restoration
* Support stopped multi-threaded tasks
* CRIU now can execv() other binary right after restore is complete
* Inode-revese mapping can be enforced to allow live-migration with FS copying
* Gold linker can now be used to compile CRIU
* "Berserker" test to check CRIU scalability
* Punch pages from mem images on restore (optimizes live-migration)
Optimizations:
* Batched deduplication of memory images
* Packed rlimits into core image
* Packed timers into core image
Fixes:
* Bad checks for kcmp() ret codes resulted in errors in file sharing detection
* Multiple mmap-s of same files with different flags blocked the restore
* Integer overflow in huge mapping restore caused restoration failure
* Devpts's newinstance option was lost during dump
OBS-URL: https://build.opensuse.org/request/show/247175
OBS-URL: https://build.opensuse.org/package/show/devel:tools/criu?expand=0&rev=13
- Update to version 1.2:
New features:
* Performance improvements
* Library versioning
* RPC API got closer to CLI
* New "post-restore" call in action scripts
* Logrotate rules file
* Default log file for service when starting via systemd
Bug fixes:
* A lot for ARM cross-compile
* Fsnotifies dumping didn't work on NFS
* Images auto-deduplication only worked one level up
* Packet socket ID was treated as file-descriptor and close()-d
* Badly counted pages stats on restore
* Linked remap name conflict when dump and restore on NFS
* Sporadic failures in memory draining due to huge pipes used
* Broken criu show of repeated fields
* Failure to open mountpoint in foreign pid namespace
* Unlinked bound unix socket dump error
* Small memory leak when writing to incremental image(s)
* Restoring fsnotify for links results in ELOOP
* Host's PATH is not suitable when execv-ing tar/ip/iptable to restore namespace (workaround, proper fix will be in 1.3)
* Using subdirs in log file name via RPC breaks security
- New subpackages: libcriu1 and criu-devel
- Remove obsoleted always-define-ptrace_peeksiginfo_args.diff
OBS-URL: https://build.opensuse.org/request/show/223976
OBS-URL: https://build.opensuse.org/package/show/devel:tools/criu?expand=0&rev=9
- Update to version 1.1-rc2: Bugs fixed,
* Crash in criu check
* RPC check always fail on 3.11 kernel
* Failed fork() didn't abort restore
* Dump fail not reported via RPC
* RPC client disconnect wasn't handled
* Page server could connect to self for writing images
* Hang on pre-dumping task livig in net-namespace
* VDSO page mis-handle on pre-dump
* FPU state loss on pre-dump
* Memory tracking turns ON w/o request
* Various fixes (and improvements) in build system
- Fix missing struct ptrace_peeksiginfo_args on FACTORY:
always-define-ptrace_peeksiginfo_args.diff
OBS-URL: https://build.opensuse.org/request/show/214574
OBS-URL: https://build.opensuse.org/package/show/devel:tools/criu?expand=0&rev=6
- Update to version 1.1-rc1:
New features:
* libcriu.so -- wrapper library for RPC clients
* new plugins: external unix sockets, external bind mounts,
external net devices and unknown file types
* Images deduplication in incremental dumps
* Integration with systemd
* Filtering of criu show output
Bug fixes:
* Errors in unlinked files/sockets detection on BTRFS
* NFS silly-rename files are not treated as unlinked
* Freezer fail to seize quickly forking/pthread_create-ing tasks
* Extra stop signal queued for stopped tasks after pre-dump
* Wrong dying task state detection
* Lost RPC dump response
* Crash when reporting restore error via RPC
* Negative return code into shell
* Tasks left in wrong states after failed dump
* A little bit more verbose check action
* Coverity checks fail here and there
- Drop obsoleted criu-fix-PTRACE_LISTEN-define.diff
OBS-URL: https://build.opensuse.org/request/show/213205
OBS-URL: https://build.opensuse.org/package/show/devel:tools/criu?expand=0&rev=4
