pool/runc
SHA256
5
0
Fork 1
Code Issues Pull Requests Packages Projects Releases Wiki Activity
136 Commits 2 Branches 0 Tags 3.4 MiB
96f151fd47
Commit Graph

136 Commits

This Branch
This Branch
All Branches
Author SHA256 Message Date
Dominique Leuenberger
fc1984a25f Accepting request 764685 from Virtualization:containers 
CVE-2019-19921

OBS-URL: https://build.opensuse.org/request/show/764685
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=25
 2020-01-16 17:19:36 +00:00
Aleksa Sarai
8fefd473fa Accepting request 764682 from home:cyphar:docker 
Add bug reference for CVE-2019-19921.

OBS-URL: https://build.opensuse.org/request/show/764682
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=84
 2020-01-15 14:07:23 +00:00
Aleksa Sarai
01dc9f6ec0 Accepting request 764148 from home:cyphar:docker 
- Add backported fix for CVE-2019-19921.
  + CVE-2019-19921.patch

OBS-URL: https://build.opensuse.org/request/show/764148
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=83
 2020-01-14 04:49:43 +00:00
Dominique Leuenberger
5a2b279580 Accepting request 735405 from Virtualization:containers 
OBS-URL: https://build.opensuse.org/request/show/735405
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=24
 2019-10-10 09:50:05 +00:00
Aleksa Sarai
9c821cca87 Accepting request 735404 from home:cyphar:containers:maint 
- Upgrade to runc v1.0.0~rc9. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc9
- Remove upstreamed patches:
  - CVE-2019-16884.patch

OBS-URL: https://build.opensuse.org/request/show/735404
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=81
 2019-10-05 11:52:50 +00:00
Aleksa Sarai
2606526c7c Accepting request 733834 from home:cyphar:containers:maint 
Add reference to bsc#1152308.

OBS-URL: https://build.opensuse.org/request/show/733834
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=80
 2019-09-28 11:41:04 +00:00
Aleksa Sarai
c2791cd3be Fix From: line for CVE-2019-16884. 
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=79
 2019-09-27 20:22:13 +00:00
Aleksa Sarai
53bd0f1302 Accepting request 733753 from home:cyphar:containers:maint 
Add /proc/self/fd protections to CVE-2019-16884.patch.

OBS-URL: https://build.opensuse.org/request/show/733753
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=78
 2019-09-27 20:18:17 +00:00
Aleksa Sarai
c0cf07af42 Accepting request 733530 from home:cyphar:containers:maint 
Fix CVE patch.

OBS-URL: https://build.opensuse.org/request/show/733530
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=77
 2019-09-27 03:17:22 +00:00
Aleksa Sarai
1a94d9d340 Accepting request 733478 from home:cyphar:containers:maint 
- Add backported fix for CVE-2019-16884.
  + CVE-2019-16884.patch
- Add runc-rpmlintrc to drop runc-test rpmlint warnings.

OBS-URL: https://build.opensuse.org/request/show/733478
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=76
 2019-09-26 15:15:16 +00:00
Dominique Leuenberger
0eb4f05040 Accepting request 699413 from Virtualization:containers 
OBS-URL: https://build.opensuse.org/request/show/699413
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=23
 2019-05-02 17:14:41 +00:00
Aleksa Sarai
67c52ee2aa Accepting request 699412 from home:cyphar:runc 
- Upgrade to runc v1.0.0~rc8. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc8
- Includes upstreamed patches for regressions (bsc#1131314 bsc#1131553).
- Remove upstreamed patches:
  - CVE-2019-5736.patch

OBS-URL: https://build.opensuse.org/request/show/699412
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=74
 2019-04-29 12:05:18 +00:00
Stephan Kulow
c5c186118b Accepting request 674113 from Virtualization:containers 
OBS-URL: https://build.opensuse.org/request/show/674113
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=22
 2019-02-24 16:03:54 +00:00
Aleksa Sarai
68bddaf3ee Accepting request 674111 from home:cyphar:cve-2019-5736 
- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch

OBS-URL: https://build.opensuse.org/request/show/674111
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=72
 2019-02-12 14:09:26 +00:00
Dominique Leuenberger
c07367038d Accepting request 660263 from Virtualization:containers 
OBS-URL: https://build.opensuse.org/request/show/660263
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=21
 2018-12-26 23:25:07 +00:00
Aleksa Sarai
337c2c14cc Accepting request 660132 from home:clee:branches:Virtualization:containers 
- Update go requirements to >= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service

OBS-URL: https://build.opensuse.org/request/show/660132
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=70
 2018-12-20 11:15:05 +00:00
Aleksa Sarai
588a1df835 Accepting request 657727 from home:dorf:branches:Virtualization:containers 
- Require golang = 1.10.

OBS-URL: https://build.opensuse.org/request/show/657727
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=69
 2018-12-13 07:54:13 +00:00
Dominique Leuenberger
f03667ed33 Accepting request 652640 from Virtualization:containers 
- Upgrade to runc v1.0.0~rc6. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc6

OBS-URL: https://build.opensuse.org/request/show/652640
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=20
 2018-12-05 08:37:06 +00:00
Aleksa Sarai
adc9380f22 [ DO NOT FORWARD TO FACTORY! ] 
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=67
 2018-11-29 15:15:50 +00:00
Dominique Leuenberger
1928689ce0 Accepting request 645770 from Virtualization:containers 
OBS-URL: https://build.opensuse.org/request/show/645770
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=19
 2018-11-06 14:29:02 +00:00
Aleksa Sarai
5b02da5652 Accepting request 645753 from home:vrothberg:branches:Virtualization:containers 
- Create a symlink in /usr/bin/runc to enable rootless Podman and Buildah.

OBS-URL: https://build.opensuse.org/request/show/645753
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=65
 2018-10-31 15:30:13 +00:00
Yuchen Lin
8cfedf9e90 Accepting request 616570 from Virtualization:containers 
OBS-URL: https://build.opensuse.org/request/show/616570
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=18
 2018-06-22 11:15:38 +00:00
Jordi Massaguer
8c87813fbf Accepting request 616531 from home:dcassany:branches:Virtualization:containers 
- Make use of %license macro

OBS-URL: https://build.opensuse.org/request/show/616531
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=63
 2018-06-13 15:25:29 +00:00
Dominique Leuenberger
b0b522efd7 Accepting request 614156 from Virtualization:containers 
OBS-URL: https://build.opensuse.org/request/show/614156
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=17
 2018-06-08 21:09:53 +00:00
Valentin Rothberg
28fa6fa85c Accepting request 614149 from home:cyphar:containers:remove_check_section 
- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817

OBS-URL: https://build.opensuse.org/request/show/614149
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=61
 2018-06-05 07:46:42 +00:00
Dominique Leuenberger
39fd35b355 Accepting request 580741 from Virtualization:containers 
OBS-URL: https://build.opensuse.org/request/show/580741
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=16
 2018-03-01 11:03:37 +00:00
Aleksa Sarai
5b9cf0431f Accepting request 580739 from home:cyphar:containers:runc_rc5 
- Upgrade to runc v1.0.0~rc5. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc5
- Remove patch now merged upstream.
  - bsc1053532-0001-makefile-drop-usage-of-install.patch

OBS-URL: https://build.opensuse.org/request/show/580739
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=59
 2018-02-27 17:41:09 +00:00
Dominique Leuenberger
145736efd2 Accepting request 517695 from Virtualization:containers 
1

OBS-URL: https://build.opensuse.org/request/show/517695
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=15
 2017-08-24 16:22:28 +00:00
Aleksa Sarai
a670c86507 Accepting request 517286 from home:cyphar:containers:runc_use_signed_archive 
- Use .tar.xz provided by upstream, as well as include the keyring to allow
  full provenance of the source.

OBS-URL: https://build.opensuse.org/request/show/517286
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=57
 2017-08-19 13:24:20 +00:00
Dominique Leuenberger
7a344dfd11 Accepting request 517265 from Virtualization:containers 
- Use the upstream Makefile, to ensure that we always include the version
  information in runc. This was confusing users (and Docker). bsc#1053532
- Add a backported patch to fix a Makefile bug.
  https://github.com/opencontainers/runc/pull/1555
  + bsc1053532-0001-makefile-drop-usage-of-install.patch
- Update to runc v1.0.0-rc4.
- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429
- Cleanup seccomp builds similar to bsc#1028638

OBS-URL: https://build.opensuse.org/request/show/517265
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=14
 2017-08-17 09:44:20 +00:00
Aleksa Sarai
9676cebf63 Accepting request 517264 from home:cyphar:containers:bsc1053532 
- Use the upstream Makefile, to ensure that we always include the version and
  commit information in runc. This was confusing users (and Docker).
  bsc#1053532
- Add a backported patch to fix a Makefile bug. This also includes some other
  changes to make the docker-runc.spec mirror the newer runc.

OBS-URL: https://build.opensuse.org/request/show/517264
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=55
 2017-08-16 19:16:32 +00:00
Aleksa Sarai
f50f0c9beb Accepting request 516116 from home:cyphar:containers:runc_update_rc4 
- Update to runc v1.0.0-rc4. Upstream changelog:
	+ runc now supports v1.0.0 of the OCI runtime specification. #1527
	+ Rootless containers support has been released. The current state of
	  this feature is that it only supports single-{uid,gid} mappings as an
	  unprivileged user, and cgroups are completely unsupported. Work is
	  being done to improve this. #774
	+ Rather than relying on CRIU version nnumbers, actually check if the
	  system supports pre-dumping. #1371
	+ Allow the PIDs cgroup limit to be updated. #1423
	+ Add support for checkpoint/restore of containers with orphaned PTYs
	  (which is effectively all containers with terminal=true). #1355
	+ Permit prestart hooks to modify the cgroup configuration of a
	  container. #1239
	+ Add support for a wide variety of mount options. #1460
	+ Expose memory.use_hierarchy in MemoryStats. #1378
	* Fix incorrect handling of systems without the freezer cgroup. #1387
	* Many, many changes to switch away from Go's "syscall" stdlib to
	  "golang.org/x/sys/unix". #1394 #1398 #1442 #1464 #1467 #1470 #1474
	  #1478 #1491 #1482 #1504 #1519 #1530
	* Set cgroup resources when restoring a container. #1399
	* Switch back to using /sbin as the installation directory. #1406
	* Remove the arbitrary container ID length restriction. #1435
	* Make container force deletion ignore non-existent containers. #1451
	* Improve handling of arbitrary cgroup mount locations when populating
	  cpuset. #1372
	* Make the SaneTerminal interface public. #1479
	* Fix cases where runc would report a container to be in a "Running"
	  state if the init was a zombie or dead. #1489
	* Do not set supplementary groups for numeric users. #1450
	* Fix various issues with the "owner" field in runc-list. #1516
	* Many other miscellaneous fixes, some of which were made by first-time
	  contributors. Thanks, and welcome to the project! #1406 #1400 #1365
	  #1396 #1402 #1414 #1412 #1408 #1418 #1425 #1428 #1436 #1433 #1438
	  #1410 #1447 #1388 #1484 #1481 #1496 #1245 #1524 #1534 #1526 #1533
	- Remove any semblance of non-Linux support. #1502
	- We no longer use shfmt for testing. #1510

OBS-URL: https://build.opensuse.org/request/show/516116
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=54
 2017-08-11 13:51:29 +00:00
Aleksa Sarai
ce95522847 - Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429 
This also includes some various improvements to the packaging of runc,
containerd and docker-runc.

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=53
 2017-08-11 12:10:02 +00:00
Dominique Leuenberger
95b584f280 Accepting request 509158 from Virtualization:containers 
1

OBS-URL: https://build.opensuse.org/request/show/509158
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=13
 2017-07-30 09:22:54 +00:00
Thomas Hipp
c311eecf47 Accepting request 508797 from home:thipp:branches:Virtualization:containers 
- switch to opencontainers/runc master branch
- remove CVE-2016-9962.patch 
- stop providing docker-runc

OBS-URL: https://build.opensuse.org/request/show/508797
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=51
 2017-07-10 11:39:32 +00:00
Dominique Leuenberger
c08cc4e6bb Accepting request 494718 from Virtualization:containers 
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/494718
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=12
 2017-05-20 08:13:19 +00:00
Jordi Massaguer
105b3cf4bc OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=49 2017-05-04 19:02:51 +00:00
Jordi Massaguer
b8321caca6 Accepting request 492509 from home:jordimassaguerpla:branch:V:c:fix_golang_req 
- fix golang requirement to 1.7

OBS-URL: https://build.opensuse.org/request/show/492509
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=48
 2017-05-04 18:33:34 +00:00
Jordi Massaguer
b03a9ad55f Accepting request 491891 from home:jengelh:branches:Virtualization:containers 
- Substitute %__-type macro indirections

OBS-URL: https://build.opensuse.org/request/show/491891
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=47
 2017-04-28 16:29:38 +00:00
Jordi Massaguer
c6750aa1a1 OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=46 2017-04-20 10:54:06 +00:00
Jordi Massaguer
f4e0799fbb OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=45 2017-04-20 10:25:40 +00:00
Yuchen Lin
98d4194e22 Accepting request 487329 from Virtualization:containers 
1

OBS-URL: https://build.opensuse.org/request/show/487329
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=11
 2017-04-17 08:26:20 +00:00
Jordi Massaguer
6d3438c47b Accepting request 487318 from home:cyphar:containers 
Fix up the ignore cgroupv2 patch so it is easier to track.

OBS-URL: https://build.opensuse.org/request/show/487318
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=43
 2017-04-11 12:14:17 +00:00
Jordi Massaguer
faf305337d fix changelog 
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=42
 2017-04-11 11:03:16 +00:00
Aleksa Sarai
6b0d36eb61 Accepting request 487271 from home:jordimassaguerpla:branch:V:c:runc:ignore_cgroup_v2_mountpoints 
- fix bsc#1028113 - runc: make sure to ignore cgroup v2 mountpoints

OBS-URL: https://build.opensuse.org/request/show/487271
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=41
 2017-04-11 09:56:51 +00:00
Dominique Leuenberger
2fc0db0acd Accepting request 478794 from Virtualization:containers 
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/478794
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=10
 2017-03-12 19:05:55 +00:00
Aleksa Sarai
c57749596d Accepting request 461897 from home:jordimassaguerpla:branch:Vc:update_docker_1_13 
- update to docker-1.13.0 requirement

OBS-URL: https://build.opensuse.org/request/show/461897
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=39
 2017-03-05 03:07:20 +00:00
Dominique Leuenberger
161e459806 Accepting request 450531 from Virtualization:containers 
(forwarded request 450530 from jordimassaguerpla)

OBS-URL: https://build.opensuse.org/request/show/450531
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=9
 2017-01-23 10:36:50 +00:00
Jordi Massaguer
f0fbd369e5 Accepting request 450530 from home:jordimassaguerpla:branch:Vc:runc:fix_CVE_name 
OBS-URL: https://build.opensuse.org/request/show/450530
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=37
 2017-01-16 15:08:31 +00:00
Aleksa Sarai
03232f8a36 OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=36 2017-01-13 17:01:54 +00:00