Accepting request 1143040 from Virtualization:containers

OBS-URL: https://build.opensuse.org/request/show/1143040
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/crun?expand=0&rev=20

crun-1.12.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:860f4d1972dd2fdb17e4a1aae4386c4da2989e547d1e17f909b3ca0aff135c28
-size 739228

crun-1.12.tar.xz.asc

@@ -1,11 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQEzBAABCAAdFiEEr2D8o82qberRV+o6Z+OPeouiF3IFAmVfho0ACgkQZ+OPeoui
-F3KSLwgAt3cIXkAHXImWqh2mmr3TYkx9ndoMVzkJ48xQJGukwdGx5EI7WHIXWH5C
-riN3eNSj5ybS3LLbQdGZwO9RRuELbCuI4MeGtznQQP+e2SumsbL+MpRDpQTu8IgX
-lX1WN9aY/oK6wkr+jAs/RV1StV9U+LrfiUpa/RM4+yvjxCsfZF6gOqndLbSV8JE9
-6XADBCbHENwrRwjGcLi8PcI8mAWmy7lvjqxViJwfdIs0gPdfYkIKzChs2m3GKwXO
-mozMpKSu9zZfS4w7KHTb7TuLo3QxSwT8Xf8eo3YK1WD+8QKihNNlhQhkKpxcsCaW
-R2Q7mIFJogvoisuzWcrQoN1qhyvMHg==
-=QyS5
------END PGP SIGNATURE-----

crun-1.14.tar.xz.asc

@@ -0,0 +1,11 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQEzBAABCAAdFiEEr2D8o82qberRV+o6Z+OPeouiF3IFAmWxP6sACgkQZ+OPeoui
+F3KW9Af/Y7/+zpxWQ07p0TEVj4+ay61UDzALUMW76vI73+PV4EheBPMHnUAJtaxL
+2CY10m2tlE55S3QZ9/66j+TCQ7DheXGv1fMCWVg99whqmrO9a0JH/XACyj64lqAc
+igUvcnzH3sQvLaTVQWxX7aBGZKWFumSBzHJeFx6TxkYCJb5/o4O1Fcv0IBW5+T80
+6yHcYe07zNXOmdp7QflxxZ+B79wP+bKvGvSiBPZ5zysEap+e8UMxlDf5C+YaLIZq
+LgHpVkN/TF8PJb8meX3qxbWgzOswz4+sa/4VOAkwfENLUWMM1TqHhf4rQAxrWmIY
+hNVDEcKOwlwSChJqn6NBaKj1Rc3Jng==
+=LYzP
+-----END PGP SIGNATURE-----

crun.changes

@@ -1,3 +1,20 @@
+-------------------------------------------------------------------
+Sat Jan 27 16:21:04 UTC 2024 - Andrea Manzini <andrea.manzini@suse.com>
+
+- update to 1.14:
+  * build: drop dependency on libgcrypt. Use blake3 to compute the cache key.
+  * cpuset: don't clobber parent cgroup value when writing the cpuset value.
+  * linux: force umask(0). It ensures that the mknodat syscall is not affected by the umask of the calling process, 
+    allowing file permissions to be set as specified in the OCI configuration.
+  * ebpf: do not require MEMLOCK for eBPF programs. This requirement was relaxed in Linux 5.11.
+
+- update to 1.13:
+  * src: use O_CLOEXEC for all open/openat calls
+  * cgroup v1: use "max" when pids limit < 0.
+  * improve error message when idmap mount fails because the underlying file system has no support for it.
+  * libcrun: fix compilation when building without libseccomp and libcap.
+  * fix relative idmapped mount when using the custom annotation.
+
 -------------------------------------------------------------------
 Fri Dec  1 13:41:35 UTC 2023 - Dan Čermák <dcermak@suse.com>
 

crun.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package crun
 #
-# Copyright (c) 2023 SUSE LLC
+# Copyright (c) 2024 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -23,7 +23,7 @@
 %endif
 
 Name:           crun
-Version:        1.12
+Version:        1.14
 Release:        0
 Summary:        OCI runtime written in C
 License:        GPL-2.0-or-later