Revisions of runc

Aleksa Sarai's avatar Aleksa Sarai (cyphar) committed (revision 41)
Update patch.
Aleksa Sarai's avatar Aleksa Sarai (cyphar) committed (revision 40)
update patch
Aleksa Sarai's avatar Aleksa Sarai (cyphar) committed (revision 39)
Add upstream backport.
Aleksa Sarai's avatar Aleksa Sarai (cyphar) committed (revision 38)
- Backport <https://github.com/opencontainers/runc/pull/3055> to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch
buildservice-autocommit accepted request 901272 from Aleksa Sarai's avatar Aleksa Sarai (cyphar) (revision 37)
baserev update by copy to link target
Aleksa Sarai's avatar Aleksa Sarai (cyphar) committed (revision 36)
- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0

  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).

  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)

  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.
Aleksa Sarai's avatar Aleksa Sarai (cyphar) committed (revision 35)
- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0

  * cgroupv2: various SetFreezer optimisations.
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: support SkipDevices with systemd driver.
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
buildservice-autocommit accepted request 894285 from Aleksa Sarai's avatar Aleksa Sarai (cyphar) (revision 34)
baserev update by copy to link target
Aleksa Sarai's avatar Aleksa Sarai (cyphar) committed (revision 33)
- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95

  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405
buildservice-autocommit accepted request 892389 from Aleksa Sarai's avatar Aleksa Sarai (cyphar) (revision 32)
baserev update by copy to link target
Aleksa Sarai's avatar Aleksa Sarai (cyphar) committed (revision 31)
- Update to runc v1.0.0~rc94. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94
  Breaking Changes:
  * cgroupv1: kernel memory limits are now always ignored, as kmemcg has
    been effectively deprecated by the kernel. Users should make use of regular
    memory cgroup controls.
  Regression Fixes:
  * seccomp: fix 32-bit compilation errors
  * runc init: fix a hang caused by deadlock in seccomp/ebpf loading code
  * runc start: fix "chdir to cwd: permission denied" for some setups
- Remove upstreamed patches:
  - 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch
buildservice-autocommit accepted request 888384 from Aleksa Sarai's avatar Aleksa Sarai (cyphar) (revision 30)
baserev update by copy to link target
Aleksa Sarai's avatar Aleksa Sarai (cyphar) committed (revision 29)
fix build
Aleksa Sarai's avatar Aleksa Sarai (cyphar) committed (revision 28)
- Backport patch to fix build on SLE-12 ppc64le.
  + 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch
buildservice-autocommit accepted request 886957 from Aleksa Sarai's avatar Aleksa Sarai (cyphar) (revision 27)
baserev update by copy to link target
Aleksa Sarai's avatar Aleksa Sarai (cyphar) committed (revision 26)
Add new BZ reference.
buildservice-autocommit accepted request 876332 from Aleksa Sarai's avatar Aleksa Sarai (cyphar) (revision 25)
baserev update by copy to link target
Aleksa Sarai's avatar Aleksa Sarai (cyphar) committed (revision 24)
Add bsc#1182451 reference.
buildservice-autocommit accepted request 869056 from Aleksa Sarai's avatar Aleksa Sarai (cyphar) (revision 23)
baserev update by copy to link target
Aleksa Sarai's avatar Aleksa Sarai (cyphar) committed (revision 22)
Fix git_version.
Displaying revisions 61 - 80 of 101
openSUSE Build Service is sponsored by