Aleksa Sarai
f530b9f9ff
Accepting request 869056 from home:cyphar:docker
...
runc 1.0.0-rc93 update.
OBS-URL: https://build.opensuse.org/request/show/869056
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=101
2021-02-04 00:26:20 +00:00
Aleksa Sarai
c589d24124
- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
...
/usr/share/doc/packages/docker/CHANGELOG.md. CVE-2021-21285 CVE-2021-21284
- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
the upstream runc package (it's stable enough and Docker no longer pins git
versions). docker-libnetwork is so unstable that it doesn't have any
versioning scheme and so it really doesn't make sense to maintain the project
as a separate package. bsc#1181641 bsc#1181677
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=100
2021-02-02 22:19:53 +00:00
Dominique Leuenberger
1e1da9e0a2
Accepting request 830453 from Virtualization:containers
...
OBS-URL: https://build.opensuse.org/request/show/830453
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=32
2020-08-31 14:47:44 +00:00
Aleksa Sarai
4aca013630
Accepting request 830206 from home:rhafer:branches:Virtualization:containers
...
- Upgrade to runc v1.0.0~rc92 (bsc#1175821). Upstream changelog is
available from https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc92
* Updates to CRIU support.
* Improvements to cgroupfs performance and correctness.
OBS-URL: https://build.opensuse.org/request/show/830206
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=98
2020-08-29 09:35:30 +00:00
Dominique Leuenberger
c4e0835c2e
Accepting request 818193 from Virtualization:containers
...
OBS-URL: https://build.opensuse.org/request/show/818193
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=31
2020-07-06 14:14:00 +00:00
Aleksa Sarai
7b244a9844
Accepting request 818188 from home:cyphar:docker
...
- Upgrade to runc v1.0.0~rc91. Upstream changelog is available from
https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc91
* This release of runc has experimental support for cgroupv2-only systems.
- Remove upstreamed patches:
- bsc1149954-0001-sd-notify-do-not-hang-when-NOTIFY_SOCKET-is-used-wit.patch
- bsc1168481-0001-cgroup-devices-major-cleanups-and-minimal-transition.patch
OBS-URL: https://build.opensuse.org/request/show/818188
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=96
2020-07-02 01:50:30 +00:00
Dominique Leuenberger
74c0f964de
Accepting request 804891 from Virtualization:containers
...
- Backport https://github.com/opencontainers/runc/pull/2391 to help fix
bsc#1168481.
+ bsc1168481-0001-cgroup-devices-major-cleanups-and-minimal-transition.patch
OBS-URL: https://build.opensuse.org/request/show/804891
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=30
2020-05-14 21:22:28 +00:00
Aleksa Sarai
923e7ff863
Accepting request 804873 from home:cyphar:docker
...
- Backport https://github.com/opencontainers/runc/pull/2391 to help fix
bsc#1168481.
+ bsc1168481-0001-cgroup-devices-major-cleanups-and-minimal-transition.patch
OBS-URL: https://build.opensuse.org/request/show/804873
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=94
2020-05-13 07:16:34 +00:00
Dominique Leuenberger
8c654ae3d8
Accepting request 793810 from Virtualization:containers
...
OBS-URL: https://build.opensuse.org/request/show/793810
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=29
2020-04-15 17:53:41 +00:00
Aleksa Sarai
b91f4ecce0
Accepting request 793807 from home:rhafer:branches:Virtualization:containers
...
- Renamed patch:
0001-sd-notify-do-not-hang-when-NOTIFY_SOCKET-is-used-wit.patch
to
bsc1149954-0001-sd-notify-do-not-hang-when-NOTIFY_SOCKET-is-used-wit.patch
- Added fix for bsc#1149954
* 0001-sd-notify-do-not-hang-when-NOTIFY_SOCKET-is-used-wit.patch
(cherry pick of https://github.com/opencontainers/runc/pull/1807 )
OBS-URL: https://build.opensuse.org/request/show/793807
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=92
2020-04-14 10:22:21 +00:00
Dominique Leuenberger
9aab460be0
Accepting request 769817 from Virtualization:containers
...
OBS-URL: https://build.opensuse.org/request/show/769817
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=28
2020-02-06 12:19:01 +00:00
Aleksa Sarai
c8dec0e6fa
Accepting request 766566 from home:iznogood:branches:Virtualization:containers
...
- Change packagewide go version to be greater or equal to 1.10.
OBS-URL: https://build.opensuse.org/request/show/766566
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=90
2020-02-04 02:30:22 +00:00
Dominique Leuenberger
e71fb241d7
Accepting request 766725 from Virtualization:containers
...
OBS-URL: https://build.opensuse.org/request/show/766725
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=27
2020-01-30 08:30:55 +00:00
Aleksa Sarai
9a57dbdc64
Accepting request 766724 from home:cyphar:docker
...
runc 1.0.0-rc10 update
OBS-URL: https://build.opensuse.org/request/show/766724
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=88
2020-01-24 03:07:47 +00:00
Dominique Leuenberger
0e18ab7717
Accepting request 765105 from Virtualization:containers
...
OBS-URL: https://build.opensuse.org/request/show/765105
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=26
2020-01-23 15:07:57 +00:00
Aleksa Sarai
8a0d82c468
Accepting request 765103 from home:cyphar:docker
...
- Update CVE-2019-19921 patch to match upstream PR.
* CVE-2019-19921.patch
OBS-URL: https://build.opensuse.org/request/show/765103
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=86
2020-01-17 03:34:42 +00:00
Dominique Leuenberger
fc1984a25f
Accepting request 764685 from Virtualization:containers
...
CVE-2019-19921
OBS-URL: https://build.opensuse.org/request/show/764685
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=25
2020-01-16 17:19:36 +00:00
Aleksa Sarai
8fefd473fa
Accepting request 764682 from home:cyphar:docker
...
Add bug reference for CVE-2019-19921.
OBS-URL: https://build.opensuse.org/request/show/764682
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=84
2020-01-15 14:07:23 +00:00
Aleksa Sarai
01dc9f6ec0
Accepting request 764148 from home:cyphar:docker
...
- Add backported fix for CVE-2019-19921.
+ CVE-2019-19921.patch
OBS-URL: https://build.opensuse.org/request/show/764148
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=83
2020-01-14 04:49:43 +00:00
Dominique Leuenberger
5a2b279580
Accepting request 735405 from Virtualization:containers
...
OBS-URL: https://build.opensuse.org/request/show/735405
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=24
2019-10-10 09:50:05 +00:00
Aleksa Sarai
9c821cca87
Accepting request 735404 from home:cyphar:containers:maint
...
- Upgrade to runc v1.0.0~rc9. Upstream changelog is available from
https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc9
- Remove upstreamed patches:
- CVE-2019-16884.patch
OBS-URL: https://build.opensuse.org/request/show/735404
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=81
2019-10-05 11:52:50 +00:00
Aleksa Sarai
2606526c7c
Accepting request 733834 from home:cyphar:containers:maint
...
Add reference to bsc#1152308.
OBS-URL: https://build.opensuse.org/request/show/733834
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=80
2019-09-28 11:41:04 +00:00
Aleksa Sarai
c2791cd3be
Fix From: line for CVE-2019-16884.
...
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=79
2019-09-27 20:22:13 +00:00
Aleksa Sarai
53bd0f1302
Accepting request 733753 from home:cyphar:containers:maint
...
Add /proc/self/fd protections to CVE-2019-16884.patch.
OBS-URL: https://build.opensuse.org/request/show/733753
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=78
2019-09-27 20:18:17 +00:00
Aleksa Sarai
c0cf07af42
Accepting request 733530 from home:cyphar:containers:maint
...
Fix CVE patch.
OBS-URL: https://build.opensuse.org/request/show/733530
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=77
2019-09-27 03:17:22 +00:00
Aleksa Sarai
1a94d9d340
Accepting request 733478 from home:cyphar:containers:maint
...
- Add backported fix for CVE-2019-16884.
+ CVE-2019-16884.patch
- Add runc-rpmlintrc to drop runc-test rpmlint warnings.
OBS-URL: https://build.opensuse.org/request/show/733478
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=76
2019-09-26 15:15:16 +00:00
Dominique Leuenberger
0eb4f05040
Accepting request 699413 from Virtualization:containers
...
OBS-URL: https://build.opensuse.org/request/show/699413
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=23
2019-05-02 17:14:41 +00:00
Aleksa Sarai
67c52ee2aa
Accepting request 699412 from home:cyphar:runc
...
- Upgrade to runc v1.0.0~rc8. Upstream changelog is available from
https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc8
- Includes upstreamed patches for regressions (bsc#1131314 bsc#1131553).
- Remove upstreamed patches:
- CVE-2019-5736.patch
OBS-URL: https://build.opensuse.org/request/show/699412
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=74
2019-04-29 12:05:18 +00:00
Stephan Kulow
c5c186118b
Accepting request 674113 from Virtualization:containers
...
OBS-URL: https://build.opensuse.org/request/show/674113
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=22
2019-02-24 16:03:54 +00:00
Aleksa Sarai
68bddaf3ee
Accepting request 674111 from home:cyphar:cve-2019-5736
...
- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
to avoid write attacks to the host runc binary). bsc#1121967
+ CVE-2019-5736.patch
OBS-URL: https://build.opensuse.org/request/show/674111
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=72
2019-02-12 14:09:26 +00:00
Dominique Leuenberger
c07367038d
Accepting request 660263 from Virtualization:containers
...
OBS-URL: https://build.opensuse.org/request/show/660263
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=21
2018-12-26 23:25:07 +00:00
Aleksa Sarai
337c2c14cc
Accepting request 660132 from home:clee:branches:Virtualization:containers
...
- Update go requirements to >= go1.10 to fix
* bsc#1118897 CVE-2018-16873
go#29230 cmd/go: remote command execution during "go get -u"
* bsc#1118898 CVE-2018-16874
go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
* bsc#1118899 CVE-2018-16875
go#29233 crypto/x509: CPU denial of service
OBS-URL: https://build.opensuse.org/request/show/660132
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=70
2018-12-20 11:15:05 +00:00
Aleksa Sarai
588a1df835
Accepting request 657727 from home:dorf:branches:Virtualization:containers
...
- Require golang = 1.10.
OBS-URL: https://build.opensuse.org/request/show/657727
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=69
2018-12-13 07:54:13 +00:00
Dominique Leuenberger
f03667ed33
Accepting request 652640 from Virtualization:containers
...
- Upgrade to runc v1.0.0~rc6. Upstream changelog is available from
https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc6
OBS-URL: https://build.opensuse.org/request/show/652640
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=20
2018-12-05 08:37:06 +00:00
Aleksa Sarai
adc9380f22
[ DO NOT FORWARD TO FACTORY! ]
...
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
/usr/share/doc/packages/docker/CHANGELOG.md
- Add revert of an upstream patch to fix docker-* handling.
+ packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
* bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
* bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
* bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
* private-registry-0001-Add-private-registry-mirror-support.patch
* secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
* secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
- bsc1100727-0001-build-add-buildmode-pie.patch
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=67
2018-11-29 15:15:50 +00:00
Dominique Leuenberger
1928689ce0
Accepting request 645770 from Virtualization:containers
...
OBS-URL: https://build.opensuse.org/request/show/645770
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=19
2018-11-06 14:29:02 +00:00
Aleksa Sarai
5b02da5652
Accepting request 645753 from home:vrothberg:branches:Virtualization:containers
...
- Create a symlink in /usr/bin/runc to enable rootless Podman and Buildah.
OBS-URL: https://build.opensuse.org/request/show/645753
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=65
2018-10-31 15:30:13 +00:00
Yuchen Lin
8cfedf9e90
Accepting request 616570 from Virtualization:containers
...
OBS-URL: https://build.opensuse.org/request/show/616570
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=18
2018-06-22 11:15:38 +00:00
Jordi Massaguer
8c87813fbf
Accepting request 616531 from home:dcassany:branches:Virtualization:containers
...
- Make use of %license macro
OBS-URL: https://build.opensuse.org/request/show/616531
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=63
2018-06-13 15:25:29 +00:00
Dominique Leuenberger
b0b522efd7
Accepting request 614156 from Virtualization:containers
...
OBS-URL: https://build.opensuse.org/request/show/614156
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=17
2018-06-08 21:09:53 +00:00
Valentin Rothberg
28fa6fa85c
Accepting request 614149 from home:cyphar:containers:remove_check_section
...
- Remove 'go test' from %check section, as it has only ever caused us problems
and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
testing has been far more useful. boo#1095817
OBS-URL: https://build.opensuse.org/request/show/614149
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=61
2018-06-05 07:46:42 +00:00
Dominique Leuenberger
39fd35b355
Accepting request 580741 from Virtualization:containers
...
OBS-URL: https://build.opensuse.org/request/show/580741
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=16
2018-03-01 11:03:37 +00:00
Aleksa Sarai
5b9cf0431f
Accepting request 580739 from home:cyphar:containers:runc_rc5
...
- Upgrade to runc v1.0.0~rc5. Upstream changelog is available from
https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc5
- Remove patch now merged upstream.
- bsc1053532-0001-makefile-drop-usage-of-install.patch
OBS-URL: https://build.opensuse.org/request/show/580739
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=59
2018-02-27 17:41:09 +00:00
Dominique Leuenberger
145736efd2
Accepting request 517695 from Virtualization:containers
...
1
OBS-URL: https://build.opensuse.org/request/show/517695
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=15
2017-08-24 16:22:28 +00:00
Aleksa Sarai
a670c86507
Accepting request 517286 from home:cyphar:containers:runc_use_signed_archive
...
- Use .tar.xz provided by upstream, as well as include the keyring to allow
full provenance of the source.
OBS-URL: https://build.opensuse.org/request/show/517286
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=57
2017-08-19 13:24:20 +00:00
Dominique Leuenberger
7a344dfd11
Accepting request 517265 from Virtualization:containers
...
- Use the upstream Makefile, to ensure that we always include the version
information in runc. This was confusing users (and Docker). bsc#1053532
- Add a backported patch to fix a Makefile bug.
https://github.com/opencontainers/runc/pull/1555
+ bsc1053532-0001-makefile-drop-usage-of-install.patch
- Update to runc v1.0.0-rc4.
- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429
- Cleanup seccomp builds similar to bsc#1028638
OBS-URL: https://build.opensuse.org/request/show/517265
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=14
2017-08-17 09:44:20 +00:00
Aleksa Sarai
9676cebf63
Accepting request 517264 from home:cyphar:containers:bsc1053532
...
- Use the upstream Makefile, to ensure that we always include the version and
commit information in runc. This was confusing users (and Docker).
bsc#1053532
- Add a backported patch to fix a Makefile bug. This also includes some other
changes to make the docker-runc.spec mirror the newer runc.
OBS-URL: https://build.opensuse.org/request/show/517264
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=55
2017-08-16 19:16:32 +00:00
Aleksa Sarai
f50f0c9beb
Accepting request 516116 from home:cyphar:containers:runc_update_rc4
...
- Update to runc v1.0.0-rc4. Upstream changelog:
+ runc now supports v1.0.0 of the OCI runtime specification. #1527
+ Rootless containers support has been released. The current state of
this feature is that it only supports single-{uid,gid} mappings as an
unprivileged user, and cgroups are completely unsupported. Work is
being done to improve this. #774
+ Rather than relying on CRIU version nnumbers, actually check if the
system supports pre-dumping. #1371
+ Allow the PIDs cgroup limit to be updated. #1423
+ Add support for checkpoint/restore of containers with orphaned PTYs
(which is effectively all containers with terminal=true). #1355
+ Permit prestart hooks to modify the cgroup configuration of a
container. #1239
+ Add support for a wide variety of mount options. #1460
+ Expose memory.use_hierarchy in MemoryStats. #1378
* Fix incorrect handling of systems without the freezer cgroup. #1387
* Many, many changes to switch away from Go's "syscall" stdlib to
"golang.org/x/sys/unix". #1394 #1398 #1442 #1464 #1467 #1470 #1474
#1478 #1491 #1482 #1504 #1519 #1530
* Set cgroup resources when restoring a container. #1399
* Switch back to using /sbin as the installation directory. #1406
* Remove the arbitrary container ID length restriction. #1435
* Make container force deletion ignore non-existent containers. #1451
* Improve handling of arbitrary cgroup mount locations when populating
cpuset. #1372
* Make the SaneTerminal interface public. #1479
* Fix cases where runc would report a container to be in a "Running"
state if the init was a zombie or dead. #1489
* Do not set supplementary groups for numeric users. #1450
* Fix various issues with the "owner" field in runc-list. #1516
* Many other miscellaneous fixes, some of which were made by first-time
contributors. Thanks, and welcome to the project! #1406 #1400 #1365
#1396 #1402 #1414 #1412 #1408 #1418 #1425 #1428 #1436 #1433 #1438
#1410 #1447 #1388 #1484 #1481 #1496 #1245 #1524 #1534 #1526 #1533
- Remove any semblance of non-Linux support. #1502
- We no longer use shfmt for testing. #1510
OBS-URL: https://build.opensuse.org/request/show/516116
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=54
2017-08-11 13:51:29 +00:00
Aleksa Sarai
ce95522847
- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429
...
This also includes some various improvements to the packaging of runc,
containerd and docker-runc.
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=53
2017-08-11 12:10:02 +00:00
Dominique Leuenberger
95b584f280
Accepting request 509158 from Virtualization:containers
...
1
OBS-URL: https://build.opensuse.org/request/show/509158
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/runc?expand=0&rev=13
2017-07-30 09:22:54 +00:00