Accepting request 1006927 from home:dfaggioli:Virtualization

- Update to 1.6
  * runc compatibility: -v now prints the version string.
  * build: fix build with glibc 2.36.
  * container: drop intermediate userns custom feature.
  * cgroup: change the delegate cgroup semantic so that the cgroup
    is created in the container payload after the cgroup namespace
    is created.
  * seccomp: use helper process to send file descriptor to the listener
    socket. It enables to be notified on every syscall without hanging
    the main process.
  * linux: add a fallback to using kill(2) if pidfd_send_signal(2)
    fails with ENOSYS.
  * krun: add support for krun-sev.
  * wasmtime: always grant file system capability for workdir inside
    the container.
  * wasmtime: inherit arguments list from the handler instead of the
    current process.
  * wasmedge: use released wasmedge library instead of libwasmedge_c.so.
- Update to 1.5
  * add mono based native .NET handler
  * new Wasmtime backend for running WebAssembly
  * add support for wasmedge 0.10 and dropping support for wasmedge 0.9.x
  * dropping support for experimental WasmEdgeProcess from wasmedge handler
  * honor process user's uid when setting the HOME environment variable
  * create the current working directory if it is missing in the container
  * fallback to using a tmpfs mount if umount of /sys and /proc fails
  * fallback to netlink to setup lo device
  * fix creating devices in the rootfs
  * fallback to using io.weight if io.bfq.weight doesn't exist
  * remove tun/tap from the default allow list
  * linux: devices mounts have noexec and nosuid
  * fix copyup of files from the container to the tmpfs
  * honor $PATH for newgidmap and newguidmap
  * krun: limit the number of vCPUs to 8
  * cgroup: add support for cpu.idle

OBS-URL: https://build.opensuse.org/request/show/1006927
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/crun?expand=0&rev=15

crun-1.4.5.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:9b3795700f997d96221118edb3296177020b3160720ea20762c7cced274f0d0c
-size 879044

crun-1.6.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:8ae387950f3f75aaff7fe9da14f2f012be842a8b20038bb8344a451197b40ee4
+size 840324

crun.changes

@@ -1,3 +1,43 @@
+-------------------------------------------------------------------
+Thu Sep 29 10:44:19 UTC 2022 - Dario Faggioli <dfaggioli@suse.com>
+
+- Update to 1.6
+  * runc compatibility: -v now prints the version string.
+  * build: fix build with glibc 2.36.
+  * container: drop intermediate userns custom feature.
+  * cgroup: change the delegate cgroup semantic so that the cgroup
+    is created in the container payload after the cgroup namespace
+    is created.
+  * seccomp: use helper process to send file descriptor to the listener
+    socket. It enables to be notified on every syscall without hanging
+    the main process.
+  * linux: add a fallback to using kill(2) if pidfd_send_signal(2)
+    fails with ENOSYS.
+  * krun: add support for krun-sev.
+  * wasmtime: always grant file system capability for workdir inside
+    the container.
+  * wasmtime: inherit arguments list from the handler instead of the
+    current process.
+  * wasmedge: use released wasmedge library instead of libwasmedge_c.so.
+
+- Update to 1.5
+  * add mono based native .NET handler
+  * new Wasmtime backend for running WebAssembly
+  * add support for wasmedge 0.10 and dropping support for wasmedge 0.9.x
+  * dropping support for experimental WasmEdgeProcess from wasmedge handler
+  * honor process user's uid when setting the HOME environment variable
+  * create the current working directory if it is missing in the container
+  * fallback to using a tmpfs mount if umount of /sys and /proc fails
+  * fallback to netlink to setup lo device
+  * fix creating devices in the rootfs
+  * fallback to using io.weight if io.bfq.weight doesn't exist
+  * remove tun/tap from the default allow list
+  * linux: devices mounts have noexec and nosuid
+  * fix copyup of files from the container to the tmpfs
+  * honor $PATH for newgidmap and newguidmap
+  * krun: limit the number of vCPUs to 8
+  * cgroup: add support for cpu.idle
+
 -------------------------------------------------------------------
 Mon May  9 12:43:12 UTC 2022 - Frederic Crozat <fcrozat@suse.com>
 

crun.spec

@@ -19,7 +19,7 @@
 Summary:        OCI runtime written in C
 License:        GPL-2.0-or-later
 Name:           crun
-Version:        1.4.5
+Version:        1.6
 Release:        0
 Source0:        https://github.com/containers/crun/releases/download/%{version}/%{name}-%{version}.tar.xz
 URL:            https://github.com/containers/crun