From 327ff4227181f269cef55ee8d90301a3f270843169f9166ce342d10289a89536 Mon Sep 17 00:00:00 2001 From: Dirk Mueller Date: Thu, 29 Sep 2022 19:06:55 +0000 Subject: [PATCH] Accepting request 1006927 from home:dfaggioli:Virtualization - Update to 1.6 * runc compatibility: -v now prints the version string. * build: fix build with glibc 2.36. * container: drop intermediate userns custom feature. * cgroup: change the delegate cgroup semantic so that the cgroup is created in the container payload after the cgroup namespace is created. * seccomp: use helper process to send file descriptor to the listener socket. It enables to be notified on every syscall without hanging the main process. * linux: add a fallback to using kill(2) if pidfd_send_signal(2) fails with ENOSYS. * krun: add support for krun-sev. * wasmtime: always grant file system capability for workdir inside the container. * wasmtime: inherit arguments list from the handler instead of the current process. * wasmedge: use released wasmedge library instead of libwasmedge_c.so. - Update to 1.5 * add mono based native .NET handler * new Wasmtime backend for running WebAssembly * add support for wasmedge 0.10 and dropping support for wasmedge 0.9.x * dropping support for experimental WasmEdgeProcess from wasmedge handler * honor process user's uid when setting the HOME environment variable * create the current working directory if it is missing in the container * fallback to using a tmpfs mount if umount of /sys and /proc fails * fallback to netlink to setup lo device * fix creating devices in the rootfs * fallback to using io.weight if io.bfq.weight doesn't exist * remove tun/tap from the default allow list * linux: devices mounts have noexec and nosuid * fix copyup of files from the container to the tmpfs * honor $PATH for newgidmap and newguidmap * krun: limit the number of vCPUs to 8 * cgroup: add support for cpu.idle OBS-URL: https://build.opensuse.org/request/show/1006927 OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/crun?expand=0&rev=15 --- crun-1.4.5.tar.xz | 3 --- crun-1.6.tar.xz | 3 +++ crun.changes | 40 ++++++++++++++++++++++++++++++++++++++++ crun.spec | 2 +- 4 files changed, 44 insertions(+), 4 deletions(-) delete mode 100644 crun-1.4.5.tar.xz create mode 100644 crun-1.6.tar.xz diff --git a/crun-1.4.5.tar.xz b/crun-1.4.5.tar.xz deleted file mode 100644 index 2c06f7c..0000000 --- a/crun-1.4.5.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:9b3795700f997d96221118edb3296177020b3160720ea20762c7cced274f0d0c -size 879044 diff --git a/crun-1.6.tar.xz b/crun-1.6.tar.xz new file mode 100644 index 0000000..35380de --- /dev/null +++ b/crun-1.6.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:8ae387950f3f75aaff7fe9da14f2f012be842a8b20038bb8344a451197b40ee4 +size 840324 diff --git a/crun.changes b/crun.changes index e4cccdb..cbdb9a8 100644 --- a/crun.changes +++ b/crun.changes @@ -1,3 +1,43 @@ +------------------------------------------------------------------- +Thu Sep 29 10:44:19 UTC 2022 - Dario Faggioli + +- Update to 1.6 + * runc compatibility: -v now prints the version string. + * build: fix build with glibc 2.36. + * container: drop intermediate userns custom feature. + * cgroup: change the delegate cgroup semantic so that the cgroup + is created in the container payload after the cgroup namespace + is created. + * seccomp: use helper process to send file descriptor to the listener + socket. It enables to be notified on every syscall without hanging + the main process. + * linux: add a fallback to using kill(2) if pidfd_send_signal(2) + fails with ENOSYS. + * krun: add support for krun-sev. + * wasmtime: always grant file system capability for workdir inside + the container. + * wasmtime: inherit arguments list from the handler instead of the + current process. + * wasmedge: use released wasmedge library instead of libwasmedge_c.so. + +- Update to 1.5 + * add mono based native .NET handler + * new Wasmtime backend for running WebAssembly + * add support for wasmedge 0.10 and dropping support for wasmedge 0.9.x + * dropping support for experimental WasmEdgeProcess from wasmedge handler + * honor process user's uid when setting the HOME environment variable + * create the current working directory if it is missing in the container + * fallback to using a tmpfs mount if umount of /sys and /proc fails + * fallback to netlink to setup lo device + * fix creating devices in the rootfs + * fallback to using io.weight if io.bfq.weight doesn't exist + * remove tun/tap from the default allow list + * linux: devices mounts have noexec and nosuid + * fix copyup of files from the container to the tmpfs + * honor $PATH for newgidmap and newguidmap + * krun: limit the number of vCPUs to 8 + * cgroup: add support for cpu.idle + ------------------------------------------------------------------- Mon May 9 12:43:12 UTC 2022 - Frederic Crozat diff --git a/crun.spec b/crun.spec index 0d13246..6465cd8 100644 --- a/crun.spec +++ b/crun.spec @@ -19,7 +19,7 @@ Summary: OCI runtime written in C License: GPL-2.0-or-later Name: crun -Version: 1.4.5 +Version: 1.6 Release: 0 Source0: https://github.com/containers/crun/releases/download/%{version}/%{name}-%{version}.tar.xz URL: https://github.com/containers/crun