Dario Faggioli
8c5623c25e
- Update to 0.21
- honor memory swappiness set to 0
- status: add fields for owner and created timestamp
- cgroup: lookup pids controller as well when the memory controller
is not available
- when compiled with krun, automatically use it if the current
executable file is called "krun".
- container: ignore error when resetting the SELinux label for the
keyring.
- container: call prestart hooks before rootfs is RO.
- cgroup: added support cleaning custom controllers on cgroupv1.
- spec: add support for --bundle.
- exec: add --no-new-privs.
- exec: add --process-label and --apparmor to change SELinux and
AppArmor labels.
- cgroup: kill procs in cgroup on EBUSY.
- cgroup: ignore devices errors when running in a user namespace.
- seccomp: drop SECCOMP_FILTER_FLAG_LOG by default.
- seccomp: report correct action in error message.
- apply SELinux label to keyring.
- add custom annotation run.oci.delegate-cgroup.
- close_range fallbacks to close on EPERM.
- report error if the cgroup path was set and the cgroup could not be
joined.
- on exec, honor additional_gids from the process spec, not the
container definition.
- spec: add cgroup ns if on cgroup v2.
- systemd: support array of strings for cgroup annotation.
- join all the cgroup v1 controllers.
- raise a warning when newuidmap/newgidmap fail.
- handle eBPF access(dev_name, F_OK) call correctly.
- fix some memory leaks on errors when libcrun is used by a long
running process.
- fix the SELinux label for masked directories.
- support default seccomp errno value.
- fail if no default seccomp action specified.
- support OCI seccomp notify listener.
- improve OOM error messages.
- ignore unknown capabilities and raise a warning.
- always remount bind mounts to drop not requested mount flags.
OBS-URL: https://build.opensuse.org/request/show/910479
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/crun?expand=0&rev=5
71 lines
3.0 KiB
Plaintext
71 lines
3.0 KiB
Plaintext
-------------------------------------------------------------------
|
|
Wed Jul 28 11:56:01 UTC 2021 - Paolo Stivanin <info@paolostivanin.com>
|
|
|
|
- Update to 0.21
|
|
- honor memory swappiness set to 0
|
|
- status: add fields for owner and created timestamp
|
|
- cgroup: lookup pids controller as well when the memory controller
|
|
is not available
|
|
- when compiled with krun, automatically use it if the current
|
|
executable file is called "krun".
|
|
- container: ignore error when resetting the SELinux label for the
|
|
keyring.
|
|
- container: call prestart hooks before rootfs is RO.
|
|
- cgroup: added support cleaning custom controllers on cgroupv1.
|
|
- spec: add support for --bundle.
|
|
- exec: add --no-new-privs.
|
|
- exec: add --process-label and --apparmor to change SELinux and
|
|
AppArmor labels.
|
|
- cgroup: kill procs in cgroup on EBUSY.
|
|
- cgroup: ignore devices errors when running in a user namespace.
|
|
- seccomp: drop SECCOMP_FILTER_FLAG_LOG by default.
|
|
- seccomp: report correct action in error message.
|
|
- apply SELinux label to keyring.
|
|
- add custom annotation run.oci.delegate-cgroup.
|
|
- close_range fallbacks to close on EPERM.
|
|
- report error if the cgroup path was set and the cgroup could not be
|
|
joined.
|
|
- on exec, honor additional_gids from the process spec, not the
|
|
container definition.
|
|
- spec: add cgroup ns if on cgroup v2.
|
|
- systemd: support array of strings for cgroup annotation.
|
|
- join all the cgroup v1 controllers.
|
|
- raise a warning when newuidmap/newgidmap fail.
|
|
- handle eBPF access(dev_name, F_OK) call correctly.
|
|
- fix some memory leaks on errors when libcrun is used by a long
|
|
running process.
|
|
- fix the SELinux label for masked directories.
|
|
- support default seccomp errno value.
|
|
- fail if no default seccomp action specified.
|
|
- support OCI seccomp notify listener.
|
|
- improve OOM error messages.
|
|
- ignore unknown capabilities and raise a warning.
|
|
- always remount bind mounts to drop not requested mount flags.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Mar 23 17:52:10 UTC 2021 - Dario Faggioli <dfaggioli@suse.com>
|
|
|
|
- Add a mention to crun-rpmlintrc in the spec file
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Mar 19 02:18:44 UTC 2021 - Dario Faggioli <dfaggioli@suse.com>
|
|
|
|
- Since we're building with libkrun support, let's enable only the
|
|
arch-es for which we do have libkrun
|
|
|
|
-------------------------------------------------------------------
|
|
Sat Mar 13 01:12:19 UTC 2021 - Dario Faggioli <dfaggioli@suse.com>
|
|
|
|
- Suppress the (false positive) rpmlint warning
|
|
|
|
-------------------------------------------------------------------
|
|
Sat Mar 13 00:43:54 UTC 2021 - Dario Faggioli <dfaggioli@suse.com>
|
|
|
|
- Some fixes to the spec file (add some %doc, remove unused macros, etc)
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Mar 11 08:08:36 UTC 2021 - Dario Faggioli <dfaggioli@suse.com>
|
|
|
|
- Initial package for 0.18
|
|
Based on the package by Giuseppe Scrivano <gscrivan@redhat.com>
|