pool/runc
SHA256
14
0
Fork 1
Code Issues Pull Requests Activity
172 Commits 4 Branches 0 Tags
f39156d2f7d8667f42d45310f35dbda21c524607431f40779c17be2562135587
Commit Graph

172 Commits

This Branch
This Branch
All Branches
Author SHA256 Message Date
Ana Guerrero
f39156d2f7 Accepting request 1216988 from Virtualization:containers 
OBS-URL: https://build.opensuse.org/request/show/1216988
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=65
 2024-10-23 19:08:42 +00:00
Aleksa Sarai
c56b5f514a - Update to runc v1.2.0. Upstream changelog is available from 
<https://github.com/opencontainers/runc/releases/tag/v1.2.0>.

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=164
 2024-10-22 09:15:32 +00:00
Dominique Leuenberger
936c90f147 Accepting request 1198393 from Virtualization:containers 
OBS-URL: https://build.opensuse.org/request/show/1198393
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=64
 2024-09-04 11:22:06 +00:00
Aleksa Sarai
ec33e305e4 - Update to runc v1.2.0~rc3. Upstream changelog is available from 
<https://github.com/opencontainers/runc/releases/tag/v1.2.0-rc.3>.
  Includes the patch for CVE-2024-45310.

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=162
 2024-09-03 02:30:45 +00:00
Dominique Leuenberger
67e60adac6 Accepting request 1187033 from Virtualization:containers 
OBS-URL: https://build.opensuse.org/request/show/1187033
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=63
 2024-07-31 11:28:07 +00:00
Aleksa Sarai
313d2c4984 Accepting request 1187032 from home:cyphar:docker 
- Update to runc v1.2.0~rc2. Upstream changelog is available from
  <https://github.com/opencontainers/runc/releases/tag/v1.2.0-rc.2>.
- Re-allow Go 1.22 builds for >= 1.22.4.

OBS-URL: https://build.opensuse.org/request/show/1187032
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=160
 2024-07-12 08:43:39 +00:00
Ana Guerrero
45e4adb561 Accepting request 1165426 from Virtualization:containers 
OBS-URL: https://build.opensuse.org/request/show/1165426
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=62
 2024-04-05 18:25:29 +00:00
Aleksa Sarai
2d98556bab Accepting request 1165425 from home:cyphar:docker 
- Update to runc v1.2.0~rc1. Upstream changelog is available from
  <https://github.com/opencontainers/runc/releases/tag/v1.2.0-rc.1>.
- Remove upstreamed patches.
  - 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
  - 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
  - 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch

OBS-URL: https://build.opensuse.org/request/show/1165425
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=158
 2024-04-05 06:50:38 +00:00
Ana Guerrero
3f45a3d3f3 Accepting request 1159949 from Virtualization:containers 
OBS-URL: https://build.opensuse.org/request/show/1159949
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=61
 2024-03-22 14:17:59 +00:00
Aleksa Sarai
904cbe4ac7 Accepting request 1159948 from home:cyphar:docker 
- Add upstream patch <https://github.com/opencontainers/runc/pull/4219> to
  properly fix -ENOSYS stub on ppc64le. bsc#1192051 bsc#1221050
  + 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
  + 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
  + 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch

OBS-URL: https://build.opensuse.org/request/show/1159948
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=156
 2024-03-21 03:51:32 +00:00
Ana Guerrero
a336e7eb11 Accepting request 1143139 from Virtualization:containers 
OBS-URL: https://build.opensuse.org/request/show/1143139
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=60
 2024-02-01 17:04:09 +00:00
Aleksa Sarai
1888581cd1 Accepting request 1143138 from home:cyphar:docker 
- Update to runc v1.1.12. Upstream changelog is available from
  <https://github.com/opencontainers/runc/releases/tag/v1.1.12>. bsc#1218894

  * This release fixes a container breakout vulnerability (CVE-2024-21626). For
    more details, see the upstream security advisory:
    <https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv>
  * Remove upstreamed patches:
    - CVE-2024-21626.patch
  * Update runc.keyring to match upstream changes.

OBS-URL: https://build.opensuse.org/request/show/1143138
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=154
 2024-01-31 20:38:35 +00:00
Dominique Leuenberger
1a42b5979e Accepting request 1136047 from Virtualization:containers 
OBS-URL: https://build.opensuse.org/request/show/1136047
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=59
 2024-01-04 14:56:37 +00:00
Aleksa Sarai
74ec7c7074 Accepting request 1136046 from home:cyphar:docker 
- Update to runc v1.1.11. Upstream changelog is available from
  <https://github.com/opencontainers/runc/releases/tag/v1.1.11>.

OBS-URL: https://build.opensuse.org/request/show/1136046
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=152
 2024-01-02 03:04:06 +00:00
Ana Guerrero
44754697d1 Accepting request 1123912 from Virtualization:containers 
OBS-URL: https://build.opensuse.org/request/show/1123912
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=58
 2023-11-07 20:25:34 +00:00
Dirk Mueller
4bed41fd2c Accepting request 1121545 from home:cyphar:docker 
- Update to runc v1.1.10. Upstream changelog is available from
  <https://github.com/opencontainers/runc/releases/tag/v1.1.10>.

OBS-URL: https://build.opensuse.org/request/show/1121545
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=150
 2023-11-07 10:34:07 +00:00
Ana Guerrero
77dc7ea28d Accepting request 1110965 from Virtualization:containers 
OBS-URL: https://build.opensuse.org/request/show/1110965
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=57
 2023-09-14 14:25:05 +00:00
Aleksa Sarai
2608422848 Accepting request 1109204 from home:danishprakash:branches:Virtualization:containers 
Update to runc v1.1.9

OBS-URL: https://build.opensuse.org/request/show/1109204
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=148
 2023-09-14 01:52:09 +00:00
Ana Guerrero
00cbac1625 Accepting request 1099532 from Virtualization:containers 
OBS-URL: https://build.opensuse.org/request/show/1099532
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=56
 2023-07-25 09:23:38 +00:00
Aleksa Sarai
fe29cfaec4 Accepting request 1099531 from home:cyphar:docker 
- Update to runc v1.1.8. Upstream changelog is available from
  <https://github.com/opencontainers/runc/releases/tag/v1.1.8>.

OBS-URL: https://build.opensuse.org/request/show/1099531
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=146
 2023-07-19 14:09:53 +00:00
Dominique Leuenberger
cdedb08921 Accepting request 1083239 from Virtualization:containers 
OBS-URL: https://build.opensuse.org/request/show/1083239
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=55
 2023-04-28 14:22:37 +00:00
Aleksa Sarai
b2d3afeb60 Accepting request 1083238 from home:cyphar:docker 
- Update to runc v1.1.7. Upstream changelog is available from
  <https://github.com/opencontainers/runc/releases/tag/v1.1.7>.
- Update runc.keyring to upstream version.

OBS-URL: https://build.opensuse.org/request/show/1083238
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=144
 2023-04-27 09:57:52 +00:00
Dominique Leuenberger
d38f3d56df Accepting request 1079877 from Virtualization:containers 
OBS-URL: https://build.opensuse.org/request/show/1079877
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=54
 2023-04-17 15:41:13 +00:00
Aleksa Sarai
6023ea5248 Accepting request 1079875 from home:cyphar:docker 
Fix bugzilla references for /dev/null issues bsc#1168481 and bsc#1207004.

OBS-URL: https://build.opensuse.org/request/show/1079875
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=142
 2023-04-17 09:46:28 +00:00
Dominique Leuenberger
c08e860fac Accepting request 1078554 from Virtualization:containers 
OBS-URL: https://build.opensuse.org/request/show/1078554
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=53
 2023-04-13 12:09:51 +00:00
Aleksa Sarai
5ec848c759 Accepting request 1078553 from home:cyphar:docker 
- Update to runc v1.1.6. Upstream changelog is available from
  <https://github.com/opencontainers/runc/releases/tag/v1.1.6>.

OBS-URL: https://build.opensuse.org/request/show/1078553
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=140
 2023-04-12 04:25:25 +00:00
Dominique Leuenberger
6a71307c5e Accepting request 1075228 from Virtualization:containers 
- Update to runc v1.1.5. Upstream changelog is available from
  <https://github.com/opencontainers/runc/releases/tag/v1.1.5>.

  Includes fixes for the following CVEs:
   - CVE-2023-25809 bsc#1209884
   - CVE-2023-27561 bsc#1208962
   - CVE-2023-28642 bsc#1209888

  * Fix the inability to use `/dev/null` when inside a container.
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1168481
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.

- Drop version-specific Go requirement.

OBS-URL: https://build.opensuse.org/request/show/1075228
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=52
 2023-03-30 20:50:49 +00:00
Aleksa Sarai
7a1dc570e6 Accepting request 1075227 from home:cyphar:docker 
Add bsc references for CVEs.
   - CVE-2023-25809 bsc#1209884
   - CVE-2023-27561 bsc#1208962
   - CVE-2023-28642 bsc#1209888

OBS-URL: https://build.opensuse.org/request/show/1075227
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=138
 2023-03-29 13:06:28 +00:00
Aleksa Sarai
b6fd9f1914 Accepting request 1075138 from home:cyphar:docker 
- Drop version-specific Go requirement.

OBS-URL: https://build.opensuse.org/request/show/1075138
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=137
 2023-03-29 07:14:02 +00:00
Aleksa Sarai
d39f70955b Accepting request 1075135 from home:cyphar:docker 
- Update to runc v1.1.5. Upstream changelog is available from
  <https://github.com/opencontainers/runc/releases/tag/v1.1.5>.
  CVE-2023-25809 CVE-2023-27561 CVE-2023-28642

  * Fix the inability to use `/dev/null` when inside a container.
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1168481
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.

OBS-URL: https://build.opensuse.org/request/show/1075135
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=136
 2023-03-29 07:12:21 +00:00
Dominique Leuenberger
b005b543cf Accepting request 1005074 from Virtualization:containers 
OBS-URL: https://build.opensuse.org/request/show/1005074
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=51
 2022-09-21 12:39:40 +00:00
Aleksa Sarai
2440658faa Accepting request 1005073 from home:cyphar:docker 
Add bugzilla reference bsc#1202021

OBS-URL: https://build.opensuse.org/request/show/1005073
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=134
 2022-09-21 00:34:33 +00:00
Dominique Leuenberger
ba9556dac3 Accepting request 1000884 from Virtualization:containers 
OBS-URL: https://build.opensuse.org/request/show/1000884
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=50
 2022-09-03 21:18:41 +00:00
Dan Čermák
64bb0cbc3a Accepting request 1000448 from home:favogt:branches:Virtualization:containers 
- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)

OBS-URL: https://build.opensuse.org/request/show/1000448
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=132
 2022-09-02 12:28:01 +00:00
Dominique Leuenberger
0de189a64c Accepting request 983321 from Virtualization:containers 
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/983321
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=49
 2022-06-17 19:19:01 +00:00
Dominique Leuenberger
96f151fd47 Accepting request 981402 from Virtualization:containers 
OBS-URL: https://build.opensuse.org/request/show/981402
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=48
 2022-06-10 13:57:15 +00:00
Aleksa Sarai
d2a02458e0 Accepting request 982018 from home:cyphar:docker 
Fix bsc#1193436 reference.

OBS-URL: https://build.opensuse.org/request/show/982018
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=129
 2022-06-10 09:28:15 +00:00
Aleksa Sarai
683f0a36dd Accepting request 981401 from home:cyphar:docker 
- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)

  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch

OBS-URL: https://build.opensuse.org/request/show/981401
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=128
 2022-06-09 00:28:16 +00:00
Dominique Leuenberger
d7c9cff73a Accepting request 978577 from Virtualization:containers 
OBS-URL: https://build.opensuse.org/request/show/978577
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=47
 2022-05-24 18:30:41 +00:00
Aleksa Sarai
bb89a115f8 Accepting request 978576 from home:cyphar:docker 
Fix CVE references.

OBS-URL: https://build.opensuse.org/request/show/978576
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=126
 2022-05-23 03:24:41 +00:00
Aleksa Sarai
456c3f8a79 Accepting request 978574 from home:cyphar:docker 
- Backport <https://github.com/opencontainers/runc/pull/3474> to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch
- Add ExcludeArch for s390 (not s390x) since we've never supported it.

OBS-URL: https://build.opensuse.org/request/show/978574
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=125
 2022-05-23 03:15:57 +00:00
Dominique Leuenberger
6ea6b466e6 Accepting request 976495 from Virtualization:containers 
OBS-URL: https://build.opensuse.org/request/show/976495
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=46
 2022-05-14 20:52:06 +00:00
Aleksa Sarai
2f40aa19ad Accepting request 976494 from home:cyphar:docker 
- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-24769

 * A bug was found in runc where runc exec --cap executed processes with
   non-empty inheritable Linux process capabilities, creating an atypical Linux
   environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
   CVE-2022-29162.
 * `runc spec` no longer sets any inheritable capabilities in the created
   example OCI spec (`config.json`) file.

OBS-URL: https://build.opensuse.org/request/show/976494
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=123
 2022-05-11 23:03:17 +00:00
Dominique Leuenberger
7345490bc2 Accepting request 965512 from Virtualization:containers 
OBS-URL: https://build.opensuse.org/request/show/965512
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=45
 2022-04-02 16:20:10 +00:00
Aleksa Sarai
c5a72d81b3 Accepting request 965511 from home:cyphar:docker 
- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.

  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)

OBS-URL: https://build.opensuse.org/request/show/965511
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=121
 2022-03-29 03:37:10 +00:00
Dominique Leuenberger
4bf6c57201 Accepting request 947076 from Virtualization:containers 
OBS-URL: https://build.opensuse.org/request/show/947076
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=44
 2022-01-21 00:24:53 +00:00
Aleksa Sarai
52be9a93b9 Accepting request 947075 from home:cyphar:docker 
- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.

  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)

OBS-URL: https://build.opensuse.org/request/show/947075
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=120
 2022-01-17 22:51:56 +00:00
Dominique Leuenberger
560bb768a1 Accepting request 940369 from Virtualization:containers 
OBS-URL: https://build.opensuse.org/request/show/940369
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=43
 2021-12-16 20:18:43 +00:00
Aleksa Sarai
81f99db1b9 Accepting request 940368 from home:cyphar:docker 
- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.

  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container hasexited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.

OBS-URL: https://build.opensuse.org/request/show/940368
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=119
 2021-12-14 05:24:53 +00:00
Dominique Leuenberger
001b38a108 Accepting request 935875 from Virtualization:containers 
OBS-URL: https://build.opensuse.org/request/show/935875
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=42
 2021-12-08 21:08:27 +00:00