Dario Faggioli
8c5623c25e
- Update to 0.21
- honor memory swappiness set to 0
- status: add fields for owner and created timestamp
- cgroup: lookup pids controller as well when the memory controller
is not available
- when compiled with krun, automatically use it if the current
executable file is called "krun".
- container: ignore error when resetting the SELinux label for the
keyring.
- container: call prestart hooks before rootfs is RO.
- cgroup: added support cleaning custom controllers on cgroupv1.
- spec: add support for --bundle.
- exec: add --no-new-privs.
- exec: add --process-label and --apparmor to change SELinux and
AppArmor labels.
- cgroup: kill procs in cgroup on EBUSY.
- cgroup: ignore devices errors when running in a user namespace.
- seccomp: drop SECCOMP_FILTER_FLAG_LOG by default.
- seccomp: report correct action in error message.
- apply SELinux label to keyring.
- add custom annotation run.oci.delegate-cgroup.
- close_range fallbacks to close on EPERM.
- report error if the cgroup path was set and the cgroup could not be
joined.
- on exec, honor additional_gids from the process spec, not the
container definition.
- spec: add cgroup ns if on cgroup v2.
- systemd: support array of strings for cgroup annotation.
- join all the cgroup v1 controllers.
- raise a warning when newuidmap/newgidmap fail.
- handle eBPF access(dev_name, F_OK) call correctly.
- fix some memory leaks on errors when libcrun is used by a long
running process.
- fix the SELinux label for masked directories.
- support default seccomp errno value.
- fail if no default seccomp action specified.
- support OCI seccomp notify listener.
- improve OOM error messages.
- ignore unknown capabilities and raise a warning.
- always remount bind mounts to drop not requested mount flags.
OBS-URL: https://build.opensuse.org/request/show/910479
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/crun?expand=0&rev=5
76 lines
2.1 KiB
RPMSpec
76 lines
2.1 KiB
RPMSpec
#
|
|
# spec file for package crun
|
|
#
|
|
# Copyright (c) 2021 SUSE LLC
|
|
#
|
|
# All modifications and additions to the file contributed by third parties
|
|
# remain the property of their copyright owners, unless otherwise agreed
|
|
# upon. The license for this file, and modifications and additions to the
|
|
# file, is the same license as for the pristine package itself (unless the
|
|
# license for the pristine package is not an Open Source License, in which
|
|
# case the license is the MIT License). An "Open Source License" is a
|
|
# license that conforms to the Open Source Definition (Version 1.9)
|
|
# published by the Open Source Initiative.
|
|
|
|
# Please submit bugfixes or comments via https://bugs.opensuse.org/
|
|
#
|
|
|
|
|
|
Summary: OCI runtime written in C
|
|
Name: crun
|
|
Version: 0.21
|
|
Release: 0
|
|
Source0: https://github.com/containers/crun/releases/download/%{version}/%{name}-%{version}.tar.gz
|
|
Source1: crun-rpmlintrc
|
|
License: GPL-2.0-or-later
|
|
URL: https://github.com/containers/crun
|
|
ExclusiveArch: x86_64 aarch64
|
|
# We always run autogen.sh
|
|
BuildRequires: autoconf
|
|
BuildRequires: automake
|
|
BuildRequires: gcc
|
|
BuildRequires: git-core
|
|
BuildRequires: glibc-devel-static
|
|
BuildRequires: go-md2man
|
|
BuildRequires: libcap-devel
|
|
BuildRequires: libkrun-devel >= 0.1.4
|
|
BuildRequires: libseccomp-devel
|
|
BuildRequires: libselinux-devel
|
|
BuildRequires: libtool
|
|
BuildRequires: libyajl-devel
|
|
BuildRequires: python
|
|
BuildRequires: python3-libmount
|
|
BuildRequires: systemd-devel
|
|
%ifnarch %ix86
|
|
BuildRequires: criu-devel >= 3.15
|
|
%endif
|
|
Requires: libkrun0 >= 0.1.4
|
|
|
|
%description
|
|
crun is a runtime for running OCI containers. It is built with libkrun support
|
|
|
|
%prep
|
|
%autosetup
|
|
|
|
%build
|
|
./autogen.sh
|
|
%configure --disable-silent-rules --with-libkrun CFLAGS='-I /usr/include/libseccomp'
|
|
%make_build
|
|
|
|
%install
|
|
%make_install
|
|
rm -rf %{buildroot}/%{_libdir}/lib*
|
|
# allow easy krun usage with podman
|
|
ln -s %{_bindir}/crun %{buildroot}%{_bindir}/krun
|
|
|
|
%files
|
|
%defattr(-,root,root)
|
|
%license COPYING
|
|
%doc README.md
|
|
%doc SECURITY.md
|
|
%{_bindir}/%{name}
|
|
%{_bindir}/krun
|
|
%{_mandir}/man1/*
|
|
|
|
%changelog
|