baserev update by copy to link target

• Files Changed
• Browse Source

- Update to crun v1.18.2 Upstream changelog is available from
  <https://github.com/containers/crun/releases/tag/1.18.2>

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Update to crun v1.18. Upstream changelog is available from
  <https://github.com/containers/crun/releases/tag/1.18>
- Remove URL from crun.keyring source declaration. If the Ubuntu keyservers
  update their server software or some other minor change causes the output of
  the key to change (such as the maintainer updating their key expiry), we will
  end up with build failures despite the key still being a totally valid key to
  do verifications with. This also matches how keyring files are managed for
  most packages.

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- update to 1.17:
  * Add --log-level option. It accepts error, warning and error.
  * Add debug logs for container creation.
  * Fix double-free in crun exec code that could lead to a crash.
  * Allow passing an ID to the journald log driver.
  * Report "executable not found" errors after tty has been setup.
  * Do not treat EPIPE from hooks as an error.
  * Make sure DefaultDependencies is correctly set in the systemd scope.
  * Improve the error message when the container process is not found.
  * Improve error handling for the mnt namespace restoration.
  * Fix error handling for getpwuid_r, recvfrom and libcrun_kill_linux.
  * Fix handling of device paths with trailing slashes.
- add url for keyring
- enable leap by disabling wasmedge (not packaged for leap)

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

new upstream release 1.16.1

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- New upstream release 1.15
  * fix a mount point leak under /run/crun, add a retry mechanism to unmount the directory if the removal failed with EBUSY.
  * linux: cgroups: fix potential mount leak when /sys/fs/cgroup is already mounted, causing the posthooks to not run.
  * release: build s390x binaries using musl libc.
  * features: add support for potentiallyUnsafeConfigAnnotations.
  * handlers: add option to load wasi-nn plugin for wasmedge.
  * linux: fix "harden chdir()" security measure. The previous check was not correct.
  * crun: add option --keep to the run command. When specified the container is not automatically deleted when it exits. 

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

New upstream release 1.14.4

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- update to 1.14:
  * build: drop dependency on libgcrypt. Use blake3 to compute the cache key.
  * cpuset: don't clobber parent cgroup value when writing the cpuset value.
  * linux: force umask(0). It ensures that the mknodat syscall is not affected by the umask of the calling process, 
    allowing file permissions to be set as specified in the OCI configuration.
  * ebpf: do not require MEMLOCK for eBPF programs. This requirement was relaxed in Linux 5.11.
- update to 1.13:
  * src: use O_CLOEXEC for all open/openat calls
  * cgroup v1: use "max" when pids limit < 0.
  * improve error message when idmap mount fails because the underlying file system has no support for it.
  * libcrun: fix compilation when building without libseccomp and libcap.
  * fix relative idmapped mount when using the custom annotation.

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

New upstream release 1.12.0

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- update to 1.11.1:
  * force a remount operation with bind mounts from the host to
    correctly set all the mount flags.
  * cgroup: honor cpu burst.
  * systemd: set CPUQuota and CPUPeriod on the scope cgroup.
  * linux: append tmpfs mode if missing for mounts.  This is the
    same behavior of runc.
  * cgroup: always use the user session for rootless.
  * support for Intel Resource Director Technology (RDT).
  * new mount option "copy-symlink".  When provided for a mount,
    if the source is a symlink, then it is copied in the container
    instead of attempting a mount.
  * linux: open mounts before setgroups if in a userns.  This
    solves a problem where a directory that was previously
    accessible to the user, become inaccessible after setgroups
    causing the bind mount to fail.

  * linux: idmapped mounts expect the same configuration as
    mapping. It is a breaking change, but the behavior was aligned
  * cgroup: always delete the cgroup on errors.
  ° exec: fix double free when using --apparmor and

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

New upstream release 1.9.2

• Files Changed
• Browse Source