Commit Graph

182 Commits

Author SHA256 Message Date
Ana Guerrero
043e645b71 Accepting request 1235492 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1235492
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=69
2025-01-09 14:04:54 +00:00
Aleksa Sarai
5ae709f712 - Update runc.keyring to match upstream.
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=174
2025-01-07 06:35:28 +00:00
Aleksa Sarai
09900039d8 - Update to runc v1.2.4. Upstream changelog is available from
<https://github.com/opencontainers/runc/releases/tag/v1.2.4>.

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=173
2025-01-07 06:32:47 +00:00
Ana Guerrero
8bdc03b7b4 Accepting request 1229979 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1229979
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=68
2024-12-13 21:30:36 +00:00
Aleksa Sarai
84da435103 Accepting request 1229978 from home:cyphar:docker
- Update to runc v1.2.3. Upstream changelog is available from
  <https://github.com/opencontainers/runc/releases/tag/v1.2.3>.

OBS-URL: https://build.opensuse.org/request/show/1229978
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=171
2024-12-11 02:05:04 +00:00
Ana Guerrero
c8280a39b3 Accepting request 1224554 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1224554
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=67
2024-11-17 15:39:34 +00:00
Aleksa Sarai
6924b85142 - Update to runc v1.2.2. Upstream changelog is available from
<https://github.com/opencontainers/runc/releases/tag/v1.2.2>.

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=169
2024-11-16 07:04:45 +00:00
Dominique Leuenberger
a811cce773 Accepting request 1220123 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1220123
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=66
2024-11-03 06:17:07 +00:00
Aleksa Sarai
156dfe7e9d - Update to runc v1.2.1. Upstream changelog is available from
<https://github.com/opencontainers/runc/releases/tag/v1.2.1>.

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=167
2024-11-02 00:28:41 +00:00
c27b0c3b43 - build without manpages on SLE12
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=166
2024-10-29 13:29:26 +00:00
Ana Guerrero
f39156d2f7 Accepting request 1216988 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1216988
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=65
2024-10-23 19:08:42 +00:00
Aleksa Sarai
c56b5f514a - Update to runc v1.2.0. Upstream changelog is available from
<https://github.com/opencontainers/runc/releases/tag/v1.2.0>.

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=164
2024-10-22 09:15:32 +00:00
Dominique Leuenberger
936c90f147 Accepting request 1198393 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1198393
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=64
2024-09-04 11:22:06 +00:00
Aleksa Sarai
ec33e305e4 - Update to runc v1.2.0~rc3. Upstream changelog is available from
<https://github.com/opencontainers/runc/releases/tag/v1.2.0-rc.3>.
  Includes the patch for CVE-2024-45310.

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=162
2024-09-03 02:30:45 +00:00
Dominique Leuenberger
67e60adac6 Accepting request 1187033 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1187033
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=63
2024-07-31 11:28:07 +00:00
Aleksa Sarai
313d2c4984 Accepting request 1187032 from home:cyphar:docker
- Update to runc v1.2.0~rc2. Upstream changelog is available from
  <https://github.com/opencontainers/runc/releases/tag/v1.2.0-rc.2>.
- Re-allow Go 1.22 builds for >= 1.22.4.

OBS-URL: https://build.opensuse.org/request/show/1187032
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=160
2024-07-12 08:43:39 +00:00
Ana Guerrero
45e4adb561 Accepting request 1165426 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1165426
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=62
2024-04-05 18:25:29 +00:00
Aleksa Sarai
2d98556bab Accepting request 1165425 from home:cyphar:docker
- Update to runc v1.2.0~rc1. Upstream changelog is available from
  <https://github.com/opencontainers/runc/releases/tag/v1.2.0-rc.1>.
- Remove upstreamed patches.
  - 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
  - 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
  - 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch

OBS-URL: https://build.opensuse.org/request/show/1165425
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=158
2024-04-05 06:50:38 +00:00
Ana Guerrero
3f45a3d3f3 Accepting request 1159949 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1159949
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=61
2024-03-22 14:17:59 +00:00
Aleksa Sarai
904cbe4ac7 Accepting request 1159948 from home:cyphar:docker
- Add upstream patch <https://github.com/opencontainers/runc/pull/4219> to
  properly fix -ENOSYS stub on ppc64le. bsc#1192051 bsc#1221050
  + 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
  + 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
  + 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch

OBS-URL: https://build.opensuse.org/request/show/1159948
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=156
2024-03-21 03:51:32 +00:00
Ana Guerrero
a336e7eb11 Accepting request 1143139 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1143139
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=60
2024-02-01 17:04:09 +00:00
Aleksa Sarai
1888581cd1 Accepting request 1143138 from home:cyphar:docker
- Update to runc v1.1.12. Upstream changelog is available from
  <https://github.com/opencontainers/runc/releases/tag/v1.1.12>. bsc#1218894

  * This release fixes a container breakout vulnerability (CVE-2024-21626). For
    more details, see the upstream security advisory:
    <https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv>
  * Remove upstreamed patches:
    - CVE-2024-21626.patch
  * Update runc.keyring to match upstream changes.

OBS-URL: https://build.opensuse.org/request/show/1143138
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=154
2024-01-31 20:38:35 +00:00
Dominique Leuenberger
1a42b5979e Accepting request 1136047 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1136047
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=59
2024-01-04 14:56:37 +00:00
Aleksa Sarai
74ec7c7074 Accepting request 1136046 from home:cyphar:docker
- Update to runc v1.1.11. Upstream changelog is available from
  <https://github.com/opencontainers/runc/releases/tag/v1.1.11>.

OBS-URL: https://build.opensuse.org/request/show/1136046
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=152
2024-01-02 03:04:06 +00:00
Ana Guerrero
44754697d1 Accepting request 1123912 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1123912
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=58
2023-11-07 20:25:34 +00:00
4bed41fd2c Accepting request 1121545 from home:cyphar:docker
- Update to runc v1.1.10. Upstream changelog is available from
  <https://github.com/opencontainers/runc/releases/tag/v1.1.10>.

OBS-URL: https://build.opensuse.org/request/show/1121545
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=150
2023-11-07 10:34:07 +00:00
Ana Guerrero
77dc7ea28d Accepting request 1110965 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1110965
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=57
2023-09-14 14:25:05 +00:00
Aleksa Sarai
2608422848 Accepting request 1109204 from home:danishprakash:branches:Virtualization:containers
Update to runc v1.1.9

OBS-URL: https://build.opensuse.org/request/show/1109204
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=148
2023-09-14 01:52:09 +00:00
Ana Guerrero
00cbac1625 Accepting request 1099532 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1099532
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=56
2023-07-25 09:23:38 +00:00
Aleksa Sarai
fe29cfaec4 Accepting request 1099531 from home:cyphar:docker
- Update to runc v1.1.8. Upstream changelog is available from
  <https://github.com/opencontainers/runc/releases/tag/v1.1.8>.

OBS-URL: https://build.opensuse.org/request/show/1099531
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=146
2023-07-19 14:09:53 +00:00
Dominique Leuenberger
cdedb08921 Accepting request 1083239 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1083239
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=55
2023-04-28 14:22:37 +00:00
Aleksa Sarai
b2d3afeb60 Accepting request 1083238 from home:cyphar:docker
- Update to runc v1.1.7. Upstream changelog is available from
  <https://github.com/opencontainers/runc/releases/tag/v1.1.7>.
- Update runc.keyring to upstream version.

OBS-URL: https://build.opensuse.org/request/show/1083238
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=144
2023-04-27 09:57:52 +00:00
Dominique Leuenberger
d38f3d56df Accepting request 1079877 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1079877
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=54
2023-04-17 15:41:13 +00:00
Aleksa Sarai
6023ea5248 Accepting request 1079875 from home:cyphar:docker
Fix bugzilla references for /dev/null issues bsc#1168481 and bsc#1207004.

OBS-URL: https://build.opensuse.org/request/show/1079875
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=142
2023-04-17 09:46:28 +00:00
Dominique Leuenberger
c08e860fac Accepting request 1078554 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1078554
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=53
2023-04-13 12:09:51 +00:00
Aleksa Sarai
5ec848c759 Accepting request 1078553 from home:cyphar:docker
- Update to runc v1.1.6. Upstream changelog is available from
  <https://github.com/opencontainers/runc/releases/tag/v1.1.6>.

OBS-URL: https://build.opensuse.org/request/show/1078553
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=140
2023-04-12 04:25:25 +00:00
Dominique Leuenberger
6a71307c5e Accepting request 1075228 from Virtualization:containers
- Update to runc v1.1.5. Upstream changelog is available from
  <https://github.com/opencontainers/runc/releases/tag/v1.1.5>.

  Includes fixes for the following CVEs:
   - CVE-2023-25809 bsc#1209884
   - CVE-2023-27561 bsc#1208962
   - CVE-2023-28642 bsc#1209888

  * Fix the inability to use `/dev/null` when inside a container.
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1168481
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.

- Drop version-specific Go requirement.

OBS-URL: https://build.opensuse.org/request/show/1075228
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=52
2023-03-30 20:50:49 +00:00
Aleksa Sarai
7a1dc570e6 Accepting request 1075227 from home:cyphar:docker
Add bsc references for CVEs.
   - CVE-2023-25809 bsc#1209884
   - CVE-2023-27561 bsc#1208962
   - CVE-2023-28642 bsc#1209888

OBS-URL: https://build.opensuse.org/request/show/1075227
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=138
2023-03-29 13:06:28 +00:00
Aleksa Sarai
b6fd9f1914 Accepting request 1075138 from home:cyphar:docker
- Drop version-specific Go requirement.

OBS-URL: https://build.opensuse.org/request/show/1075138
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=137
2023-03-29 07:14:02 +00:00
Aleksa Sarai
d39f70955b Accepting request 1075135 from home:cyphar:docker
- Update to runc v1.1.5. Upstream changelog is available from
  <https://github.com/opencontainers/runc/releases/tag/v1.1.5>.
  CVE-2023-25809 CVE-2023-27561 CVE-2023-28642

  * Fix the inability to use `/dev/null` when inside a container.
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1168481
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.

OBS-URL: https://build.opensuse.org/request/show/1075135
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=136
2023-03-29 07:12:21 +00:00
Dominique Leuenberger
b005b543cf Accepting request 1005074 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1005074
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=51
2022-09-21 12:39:40 +00:00
Aleksa Sarai
2440658faa Accepting request 1005073 from home:cyphar:docker
Add bugzilla reference bsc#1202021

OBS-URL: https://build.opensuse.org/request/show/1005073
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=134
2022-09-21 00:34:33 +00:00
Dominique Leuenberger
ba9556dac3 Accepting request 1000884 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1000884
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=50
2022-09-03 21:18:41 +00:00
64bb0cbc3a Accepting request 1000448 from home:favogt:branches:Virtualization:containers
- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)

OBS-URL: https://build.opensuse.org/request/show/1000448
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=132
2022-09-02 12:28:01 +00:00
Dominique Leuenberger
0de189a64c Accepting request 983321 from Virtualization:containers
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/983321
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=49
2022-06-17 19:19:01 +00:00
Dominique Leuenberger
96f151fd47 Accepting request 981402 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/981402
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=48
2022-06-10 13:57:15 +00:00
Aleksa Sarai
d2a02458e0 Accepting request 982018 from home:cyphar:docker
Fix bsc#1193436 reference.

OBS-URL: https://build.opensuse.org/request/show/982018
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=129
2022-06-10 09:28:15 +00:00
Aleksa Sarai
683f0a36dd Accepting request 981401 from home:cyphar:docker
- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)

  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch

OBS-URL: https://build.opensuse.org/request/show/981401
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=128
2022-06-09 00:28:16 +00:00
Dominique Leuenberger
d7c9cff73a Accepting request 978577 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/978577
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=47
2022-05-24 18:30:41 +00:00
Aleksa Sarai
bb89a115f8 Accepting request 978576 from home:cyphar:docker
Fix CVE references.

OBS-URL: https://build.opensuse.org/request/show/978576
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=126
2022-05-23 03:24:41 +00:00