From 4e052b1a32c5417cae4d905d78ad0db6bf4263ae63de906448f6cb409e89d96e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Dan=20=C4=8Cerm=C3=A1k?= Date: Fri, 2 Sep 2022 12:28:01 +0000 Subject: [PATCH] Accepting request 1000448 from home:favogt:branches:Virtualization:containers - Update to runc v1.1.4. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.1.4. * Fix mounting via wrong proc fd. When the user and mount namespaces are used, and the bind mount is followed by the cgroup mount in the spec, the cgroup was mounted using the bind mount's mount fd. * Switch kill() in libcontainer/nsenter to sane_kill(). * Fix "permission denied" error from runc run on noexec fs. * Fix failed exec after systemctl daemon-reload. Due to a regression in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded. (boo#1202821) OBS-URL: https://build.opensuse.org/request/show/1000448 OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=132 --- runc-1.1.3.tar.xz | 3 --- runc-1.1.3.tar.xz.asc | 17 ----------------- runc-1.1.4.tar.xz | 3 +++ runc-1.1.4.tar.xz.asc | 17 +++++++++++++++++ runc.changes | 16 ++++++++++++++++ runc.spec | 4 ++-- 6 files changed, 38 insertions(+), 22 deletions(-) delete mode 100644 runc-1.1.3.tar.xz delete mode 100644 runc-1.1.3.tar.xz.asc create mode 100644 runc-1.1.4.tar.xz create mode 100644 runc-1.1.4.tar.xz.asc diff --git a/runc-1.1.3.tar.xz b/runc-1.1.3.tar.xz deleted file mode 100644 index 9db5dd4..0000000 --- a/runc-1.1.3.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:2db1f3a01ffd2f8fa3a259b9b512ca7d4dbf89be5765cc58d306e45658668453 -size 1413040 diff --git a/runc-1.1.3.tar.xz.asc b/runc-1.1.3.tar.xz.asc deleted file mode 100644 index 629637a..0000000 --- a/runc-1.1.3.tar.xz.asc +++ /dev/null @@ -1,17 +0,0 @@ ------BEGIN PGP SIGNATURE----- - -iQJDBAABCAAtFiEEXzbGxhtUYBJKdfWmnhiqJn3bjbQFAmKhOw0PHGFzYXJhaUBz -dXNlLmRlAAoJEJ4YqiZ92420MrQP/2QCwFFFDOGQvmnX4W/lhZaBpuNH5bDOpUAi -fMucNUf+AherA7VwgOGgG28a7QdA9iV4yCz2kfokQFAha+fM+VSf+QIB+fUvoy/8 -qtpiFv69BEjo59Qcjgy1fpy2WrCGfLs6J4p6MsBySWjVxxSD1yCYNlntn2GTCbcq -ArsoirqV+U9pjKJU5eqUK3Oxei0FRD/e2PnCkb6UdILti91xosCJ4KWAFwfan6O5 -b663HFq7E41bX17RR1Y8PYr9BMFzdDnN3W+xxi5F5fRdSV9F5/wKLouQ8FEe43PU -2yYkixMkB9Z9PcV28uE9nXWbObhNfYlau0QLIakIgKCDjHX0HmBpwYmmtuL5Qln0 -/IsPCYXBCK75bIVQtSgoVZTap59M4QXYTBDidZyaY3yCeAhkzth+V+Hr2TeVSu2y -OKvSzyAOHbKqUURjmUMzSoHrvFAYhQOhGi3iJKtnaDv5kiiVKQdCSfoa0TB4U1fP -z8TbCxWjvGNjKwgt8kgLn74BiSerPdxlVE/Cc9P9rfG09BYha8TB5gMTKri/KiCP -1LUwBpMkxRY4DoXmVrtfq6+0C7SE3d+s6ezB5+71Mu5YN3NFt+8vWIST94VmyU+a -Zq0o5sVcEgvl5AP/ordXCDYxjg7kdWKegdZCDZ5BuF4tBNS7xLn3RihNTUHqhBT1 -XBfloHMo -=lLbv ------END PGP SIGNATURE----- diff --git a/runc-1.1.4.tar.xz b/runc-1.1.4.tar.xz new file mode 100644 index 0000000..82dad57 --- /dev/null +++ b/runc-1.1.4.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:9f5972715dffb0b2371e4d678c1206cc8c4ec5eb80f2d48755d150bac49be35b +size 1414096 diff --git a/runc-1.1.4.tar.xz.asc b/runc-1.1.4.tar.xz.asc new file mode 100644 index 0000000..c7ee010 --- /dev/null +++ b/runc-1.1.4.tar.xz.asc @@ -0,0 +1,17 @@ +-----BEGIN PGP SIGNATURE----- + +iQJDBAABCAAtFiEEXzbGxhtUYBJKdfWmnhiqJn3bjbQFAmMH5k4PHGFzYXJhaUBz +dXNlLmRlAAoJEJ4YqiZ92420PE4P/RraZC2MNVLV6Tbyj9bLgEK7rFYLbYH0/NJ3 +Vg8cfS6G2QzVcQCxbV2onq7y5LHA/1NkWADQg4NRbjVFgUu8+8HY4Yz1M/bIzkYS +ic827WBqmvHV7ov1IMcM/YPJCzOUfwm1PW1cWI5w9jLINgoqORYRF/Cm0Qkn2ReE +2pRl4kjdVUALmelQ5H1/p0FN8i0j+yC3Wpzv4akhFb/BigxgQx1zWqhrCRSmcsMJ +C4ta0ty7wAIOXLoPNCUgcq2HPnHrj8IjtnjKtprur59JpzFdJ1th1hBcJjO9EEos +SP6WGBbFQgX+5jiTCbUlEhSEp7gWeDYO8R8uIA+itXGYO9iwbMC8QBk6kVPIUiYW +9RpniJzDonglcuSpTcvfogoTq0vRFhQYk82fbBI4k2YIDVCfho+w45KCqaSjsSTr +v0qrlb320STds4CmzI8vTIB7IFTKMnGdpLe/aVly3bOhHHD2gutW5PG3mo4uzCLZ +E30hYQ9fgE7wSjLmvK6FCm6axwCistDp3Xy2giLTeIXZwDbVagaR/YcYr6CRg7HH +gVFoG7P0FsrWI1Xpj5+2D/KFZXnvpTig4inC7SzwITdyxx/mX3uCm12Ya5YcAv/Q +rjgFgznrS3kpcxkuonKXszwn7JjT7fi3Cd4ZiwPoqGSGwQNhp7lxBss8CzQXFSdj +Soq9Y1FN +=xkJd +-----END PGP SIGNATURE----- diff --git a/runc.changes b/runc.changes index 89b3ede..1ccebd1 100644 --- a/runc.changes +++ b/runc.changes @@ -1,3 +1,19 @@ +------------------------------------------------------------------- +Wed Aug 31 13:00:31 UTC 2022 - Fabian Vogt + +- Update to runc v1.1.4. Upstream changelog is available from + https://github.com/opencontainers/runc/releases/tag/v1.1.4. + + * Fix mounting via wrong proc fd. When the user and mount namespaces are + used, and the bind mount is followed by the cgroup mount in the spec, + the cgroup was mounted using the bind mount's mount fd. + * Switch kill() in libcontainer/nsenter to sane_kill(). + * Fix "permission denied" error from runc run on noexec fs. + * Fix failed exec after systemctl daemon-reload. Due to a regression + in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and + was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded. + (boo#1202821) + ------------------------------------------------------------------- Thu Jun 9 00:22:16 UTC 2022 - Aleksa Sarai diff --git a/runc.spec b/runc.spec index 7d2a67d..615c3cc 100644 --- a/runc.spec +++ b/runc.spec @@ -26,8 +26,8 @@ %define project github.com/opencontainers/runc Name: runc -Version: 1.1.3 -%define _version 1.1.3 +Version: 1.1.4 +%define _version 1.1.4 Release: 0 Summary: Tool for spawning and running OCI containers License: Apache-2.0