Commit Graph

65 Commits

Author SHA256 Message Date
Aleksa Sarai
b43f769557 Accepting request 892389 from home:cyphar:docker
- Update to runc v1.0.0~rc94. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94
  Breaking Changes:
  * cgroupv1: kernel memory limits are now always ignored, as kmemcg has
    been effectively deprecated by the kernel. Users should make use of regular
    memory cgroup controls.
  Regression Fixes:
  * seccomp: fix 32-bit compilation errors
  * runc init: fix a hang caused by deadlock in seccomp/ebpf loading code
  * runc start: fix "chdir to cwd: permission denied" for some setups
- Remove upstreamed patches:
  - 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch

OBS-URL: https://build.opensuse.org/request/show/892389
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=109
2021-05-12 08:08:56 +00:00
Aleksa Sarai
89808d395e Accepting request 888384 from home:cyphar:docker
- Backport patch to fix build on SLE-12 ppc64le.
  + 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch

OBS-URL: https://build.opensuse.org/request/show/888384
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=107
2021-04-26 08:00:58 +00:00
Aleksa Sarai
153f71ec48 Accepting request 869056 from home:cyphar:docker
runc 1.0.0-rc93 update.

OBS-URL: https://build.opensuse.org/request/show/869056
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=101
2021-02-04 00:26:20 +00:00
Aleksa Sarai
819ff378e5 - Update to Docker 20.10.3-ce. See upstream changelog in the packaged
/usr/share/doc/packages/docker/CHANGELOG.md. CVE-2021-21285 CVE-2021-21284
- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=100
2021-02-02 22:19:53 +00:00
Aleksa Sarai
5039dc9cd9 Accepting request 830206 from home:rhafer:branches:Virtualization:containers
- Upgrade to runc v1.0.0~rc92 (bsc#1175821). Upstream changelog is
  available from https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc92
  * Updates to CRIU support.
  * Improvements to cgroupfs performance and correctness.

OBS-URL: https://build.opensuse.org/request/show/830206
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=98
2020-08-29 09:35:30 +00:00
Aleksa Sarai
efa986a2bb Accepting request 818188 from home:cyphar:docker
- Upgrade to runc v1.0.0~rc91. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc91

  * This release of runc has experimental support for cgroupv2-only systems.

- Remove upstreamed patches:
  - bsc1149954-0001-sd-notify-do-not-hang-when-NOTIFY_SOCKET-is-used-wit.patch
  - bsc1168481-0001-cgroup-devices-major-cleanups-and-minimal-transition.patch

OBS-URL: https://build.opensuse.org/request/show/818188
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=96
2020-07-02 01:50:30 +00:00
Aleksa Sarai
5dbfe9576f Accepting request 804873 from home:cyphar:docker
- Backport https://github.com/opencontainers/runc/pull/2391 to help fix
  bsc#1168481.
  + bsc1168481-0001-cgroup-devices-major-cleanups-and-minimal-transition.patch

OBS-URL: https://build.opensuse.org/request/show/804873
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=94
2020-05-13 07:16:34 +00:00
Aleksa Sarai
f91cfb6e11 Accepting request 793807 from home:rhafer:branches:Virtualization:containers
- Renamed patch:
  0001-sd-notify-do-not-hang-when-NOTIFY_SOCKET-is-used-wit.patch
  to
  bsc1149954-0001-sd-notify-do-not-hang-when-NOTIFY_SOCKET-is-used-wit.patch

- Added fix for bsc#1149954
  * 0001-sd-notify-do-not-hang-when-NOTIFY_SOCKET-is-used-wit.patch
    (cherry pick of https://github.com/opencontainers/runc/pull/1807)

OBS-URL: https://build.opensuse.org/request/show/793807
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=92
2020-04-14 10:22:21 +00:00
Aleksa Sarai
4cc7da61f8 Accepting request 766566 from home:iznogood:branches:Virtualization:containers
- Change packagewide go version to be greater or equal to 1.10.

OBS-URL: https://build.opensuse.org/request/show/766566
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=90
2020-02-04 02:30:22 +00:00
Aleksa Sarai
189d2c49bd Accepting request 766724 from home:cyphar:docker
runc 1.0.0-rc10 update

OBS-URL: https://build.opensuse.org/request/show/766724
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=88
2020-01-24 03:07:47 +00:00
Aleksa Sarai
066a3bfeaa Accepting request 764148 from home:cyphar:docker
- Add backported fix for CVE-2019-19921.
  + CVE-2019-19921.patch

OBS-URL: https://build.opensuse.org/request/show/764148
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=83
2020-01-14 04:49:43 +00:00
Aleksa Sarai
0f2a74731d Accepting request 735404 from home:cyphar:containers:maint
- Upgrade to runc v1.0.0~rc9. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc9
- Remove upstreamed patches:
  - CVE-2019-16884.patch

OBS-URL: https://build.opensuse.org/request/show/735404
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=81
2019-10-05 11:52:50 +00:00
Aleksa Sarai
58623da251 Accepting request 733834 from home:cyphar:containers:maint
Add reference to bsc#1152308.

OBS-URL: https://build.opensuse.org/request/show/733834
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=80
2019-09-28 11:41:04 +00:00
Aleksa Sarai
0bdfb449d1 Accepting request 733530 from home:cyphar:containers:maint
Fix CVE patch.

OBS-URL: https://build.opensuse.org/request/show/733530
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=77
2019-09-27 03:17:22 +00:00
Aleksa Sarai
f3a10f34bd Accepting request 733478 from home:cyphar:containers:maint
- Add backported fix for CVE-2019-16884.
  + CVE-2019-16884.patch
- Add runc-rpmlintrc to drop runc-test rpmlint warnings.

OBS-URL: https://build.opensuse.org/request/show/733478
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=76
2019-09-26 15:15:16 +00:00
Aleksa Sarai
48d20bc916 Accepting request 699412 from home:cyphar:runc
- Upgrade to runc v1.0.0~rc8. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc8
- Includes upstreamed patches for regressions (bsc#1131314 bsc#1131553).
- Remove upstreamed patches:
  - CVE-2019-5736.patch

OBS-URL: https://build.opensuse.org/request/show/699412
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=74
2019-04-29 12:05:18 +00:00
Aleksa Sarai
ba0b485e9f Accepting request 674111 from home:cyphar:cve-2019-5736
- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch

OBS-URL: https://build.opensuse.org/request/show/674111
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=72
2019-02-12 14:09:26 +00:00
Aleksa Sarai
34ced09c11 Accepting request 657727 from home:dorf:branches:Virtualization:containers
- Require golang = 1.10.

OBS-URL: https://build.opensuse.org/request/show/657727
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=69
2018-12-13 07:54:13 +00:00
Aleksa Sarai
801ddcf199 [ DO NOT FORWARD TO FACTORY! ]
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=67
2018-11-29 15:15:50 +00:00
Aleksa Sarai
101116b685 Accepting request 645753 from home:vrothberg:branches:Virtualization:containers
- Create a symlink in /usr/bin/runc to enable rootless Podman and Buildah.

OBS-URL: https://build.opensuse.org/request/show/645753
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=65
2018-10-31 15:30:13 +00:00
Jordi Massaguer
bb31ae7e18 Accepting request 616531 from home:dcassany:branches:Virtualization:containers
- Make use of %license macro

OBS-URL: https://build.opensuse.org/request/show/616531
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=63
2018-06-13 15:25:29 +00:00
Valentin Rothberg
ce055b46c7 Accepting request 614149 from home:cyphar:containers:remove_check_section
- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817

OBS-URL: https://build.opensuse.org/request/show/614149
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=61
2018-06-05 07:46:42 +00:00
Aleksa Sarai
bbfd719f9c Accepting request 580739 from home:cyphar:containers:runc_rc5
- Upgrade to runc v1.0.0~rc5. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc5
- Remove patch now merged upstream.
  - bsc1053532-0001-makefile-drop-usage-of-install.patch

OBS-URL: https://build.opensuse.org/request/show/580739
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=59
2018-02-27 17:41:09 +00:00
Aleksa Sarai
4a233a5c6e Accepting request 517286 from home:cyphar:containers:runc_use_signed_archive
- Use .tar.xz provided by upstream, as well as include the keyring to allow
  full provenance of the source.

OBS-URL: https://build.opensuse.org/request/show/517286
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=57
2017-08-19 13:24:20 +00:00
Aleksa Sarai
74ea12c88b Accepting request 517264 from home:cyphar:containers:bsc1053532
- Use the upstream Makefile, to ensure that we always include the version and
  commit information in runc. This was confusing users (and Docker).
  bsc#1053532
- Add a backported patch to fix a Makefile bug. This also includes some other
  changes to make the docker-runc.spec mirror the newer runc.

OBS-URL: https://build.opensuse.org/request/show/517264
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=55
2017-08-16 19:16:32 +00:00
Aleksa Sarai
d38ef74d50 Accepting request 516116 from home:cyphar:containers:runc_update_rc4
- Update to runc v1.0.0-rc4. Upstream changelog:
	+ runc now supports v1.0.0 of the OCI runtime specification. #1527
	+ Rootless containers support has been released. The current state of
	  this feature is that it only supports single-{uid,gid} mappings as an
	  unprivileged user, and cgroups are completely unsupported. Work is
	  being done to improve this. #774
	+ Rather than relying on CRIU version nnumbers, actually check if the
	  system supports pre-dumping. #1371
	+ Allow the PIDs cgroup limit to be updated. #1423
	+ Add support for checkpoint/restore of containers with orphaned PTYs
	  (which is effectively all containers with terminal=true). #1355
	+ Permit prestart hooks to modify the cgroup configuration of a
	  container. #1239
	+ Add support for a wide variety of mount options. #1460
	+ Expose memory.use_hierarchy in MemoryStats. #1378
	* Fix incorrect handling of systems without the freezer cgroup. #1387
	* Many, many changes to switch away from Go's "syscall" stdlib to
	  "golang.org/x/sys/unix". #1394 #1398 #1442 #1464 #1467 #1470 #1474
	  #1478 #1491 #1482 #1504 #1519 #1530
	* Set cgroup resources when restoring a container. #1399
	* Switch back to using /sbin as the installation directory. #1406
	* Remove the arbitrary container ID length restriction. #1435
	* Make container force deletion ignore non-existent containers. #1451
	* Improve handling of arbitrary cgroup mount locations when populating
	  cpuset. #1372
	* Make the SaneTerminal interface public. #1479
	* Fix cases where runc would report a container to be in a "Running"
	  state if the init was a zombie or dead. #1489
	* Do not set supplementary groups for numeric users. #1450
	* Fix various issues with the "owner" field in runc-list. #1516
	* Many other miscellaneous fixes, some of which were made by first-time
	  contributors. Thanks, and welcome to the project! #1406 #1400 #1365
	  #1396 #1402 #1414 #1412 #1408 #1418 #1425 #1428 #1436 #1433 #1438
	  #1410 #1447 #1388 #1484 #1481 #1496 #1245 #1524 #1534 #1526 #1533
	- Remove any semblance of non-Linux support. #1502
	- We no longer use shfmt for testing. #1510

OBS-URL: https://build.opensuse.org/request/show/516116
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=54
2017-08-11 13:51:29 +00:00
Aleksa Sarai
438ec77e8c - Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429
This also includes some various improvements to the packaging of runc,
containerd and docker-runc.

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=53
2017-08-11 12:10:02 +00:00
Thomas Hipp
030004095c Accepting request 508797 from home:thipp:branches:Virtualization:containers
- switch to opencontainers/runc master branch
- remove CVE-2016-9962.patch 
- stop providing docker-runc

OBS-URL: https://build.opensuse.org/request/show/508797
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=51
2017-07-10 11:39:32 +00:00
Jordi Massaguer
e9cd9305f4 OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=49 2017-05-04 19:02:51 +00:00
Jordi Massaguer
8d8fed71b3 Accepting request 492509 from home:jordimassaguerpla:branch:V:c:fix_golang_req
- fix golang requirement to 1.7

OBS-URL: https://build.opensuse.org/request/show/492509
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=48
2017-05-04 18:33:34 +00:00
Jordi Massaguer
02fcbee273 Accepting request 491891 from home:jengelh:branches:Virtualization:containers
- Substitute %__-type macro indirections

OBS-URL: https://build.opensuse.org/request/show/491891
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=47
2017-04-28 16:29:38 +00:00
Jordi Massaguer
871ab3a54c OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=46 2017-04-20 10:54:06 +00:00
Jordi Massaguer
dd30b50950 OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=45 2017-04-20 10:25:40 +00:00
Aleksa Sarai
b0463e5979 Accepting request 487271 from home:jordimassaguerpla:branch:V:c:runc:ignore_cgroup_v2_mountpoints
- fix bsc#1028113 - runc: make sure to ignore cgroup v2 mountpoints

OBS-URL: https://build.opensuse.org/request/show/487271
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=41
2017-04-11 09:56:51 +00:00
Aleksa Sarai
b55f5ac831 Accepting request 461897 from home:jordimassaguerpla:branch:Vc:update_docker_1_13
- update to docker-1.13.0 requirement

OBS-URL: https://build.opensuse.org/request/show/461897
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=39
2017-03-05 03:07:20 +00:00
Jordi Massaguer
0de2bc6731 Accepting request 450530 from home:jordimassaguerpla:branch:Vc:runc:fix_CVE_name
OBS-URL: https://build.opensuse.org/request/show/450530
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=37
2017-01-16 15:08:31 +00:00
Aleksa Sarai
6c28b7232c OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=36 2017-01-13 17:01:54 +00:00
Aleksa Sarai
4199169c81 Accepting request 447963 from home:jordimassaguerpla:branch:Vc:fix_runc_symlink
OBS-URL: https://build.opensuse.org/request/show/447963
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=34
2016-12-28 10:08:10 +00:00
Aleksa Sarai
88553395ee Accepting request 447318 from home:jordimassaguerpla:branch:V:c:fix_runc_symlink
- add symlink to docker-runc in the post section, as this is how it
  has been already fixed for some client. fixes bsc#1015661

OBS-URL: https://build.opensuse.org/request/show/447318
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=33
2016-12-21 16:38:17 +00:00
Jordi Massaguer
020aaf5db9 fix version
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=32
2016-12-19 17:41:49 +00:00
Aleksa Sarai
9547577941 OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=31 2016-12-19 14:01:37 +00:00
Aleksa Sarai
0017b9024f Accepting request 446750 from home:jordimassaguerpla:branch:Vc:runc_symlink_docker_runc
- add the /usr/bin/docker-run symlink to partially fix bsc#1015661

OBS-URL: https://build.opensuse.org/request/show/446750
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=30
2016-12-19 08:39:07 +00:00
Jordi Massaguer
e7756c519f Accepting request 441846 from home:jordimassaguerpla:branch:Vc:fix_runc_and_containerd_versioning
- fix version by adding a revision "counter" so that it will always
  increase
  fix bsc#1009961

OBS-URL: https://build.opensuse.org/request/show/441846
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=28
2016-11-24 12:49:13 +00:00
Jordi Massaguer
5a4d9c570e OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=27 2016-10-24 10:56:10 +00:00
Jordi Massaguer
6488c6af8b Accepting request 429757 from home:jengelh:branches:Virtualization:containers
- Run fdupes.

OBS-URL: https://build.opensuse.org/request/show/429757
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=25
2016-09-23 14:37:04 +00:00
Aleksa Sarai
b5b7e65723 Accepting request 428672 from home:jordimassaguerpla:branch:V:c:fix_go_arches_def
- fix go_arches definition: use global instead of define, otherwise
  it fails to build

OBS-URL: https://build.opensuse.org/request/show/428672
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=23
2016-09-19 12:08:36 +00:00
Jordi Massaguer
094919e13c Accepting request 422801 from home:cyphar:branches:Virtualization:containers
Removes the docker-runc symlink, since that's been fixed as part of sr#422714

OBS-URL: https://build.opensuse.org/request/show/422801
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=22
2016-08-26 10:03:29 +00:00
Christian Brauner
820371af3d Accepting request 422238 from home:jordimassaguerpla:branch:Vc:symlink_runc
- Create a symlink /usr/sbin/docker-runc -> /usr/sbin/docker
  Docker expects this symlink to exist

OBS-URL: https://build.opensuse.org/request/show/422238
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=21
2016-08-25 17:13:43 +00:00
Christian Brauner
7bf8489ba5 Accepting request 422163 from home:jordimassaguerpla:branch:Vc:gcc_fails_with_GOPATH_empty
- Remove GOPATH at the end of the GOPATH assignment
  cause GOPATH is empty and if we do that, we get the path ""
  appended, which causes gcc6-go to complain

OBS-URL: https://build.opensuse.org/request/show/422163
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=20
2016-08-25 16:01:03 +00:00
Christian Brauner
e53118531b Accepting request 421922 from home:jordimassaguerpla:branch:V:c:fix_go_arches_definition
fix the go_arches definition

OBS-URL: https://build.opensuse.org/request/show/421922
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=19
2016-08-25 13:46:46 +00:00