openSUSE Build Service

Overview Repositories Revisions Requests Users Attributes Meta

File criu.changes of Package criu (Revision a4418b5852862d20d2d61d4e1c2a395f)

Currently displaying revision a4418b5852862d20d2d61d4e1c2a395f , Show latest

-------------------------------------------------------------------
Tue Jul 12 12:10:20 CEST 2016 - tiwai@suse.de

- Update to criu 2.4:
  New features:
  * Generate core from images
  * Ability to forcibly drop half-open TCP connections on C/R
  * Ability to specify cgroup ctls to dump via API
    Opened/mapped files' mode is compared between dump and restore
    times
  * AutoFS mountpoints
  * New cgroups (perf_event, net_cls, net_prio and pids)
  * Memcgroup optional properties
  * Devices cgroup
  Optimizations/improvements:
  * Pagemap image entries are cached in memory
  Fixes:
  * Configured kmem cgroup limit restore failed
  * Mem cgroup oom_control
  * Cgroup's pids.max was not C/R-ed
  * Failure to write cgroup property was ignored
  * No init PID in pre-dump action script
  * Sigactions inheritance didn't work on ARM
  * Opened "/proc" dir blocked the dump
  * Working with iptables was racy
  * Sibling mounts detection error on dump
  * Devconf accept_redirects devconf could be restored with errors
  * "All" devconfs could be overridden by "Default"
  * Name-less unix sockets got auto-bound
  * Mode was lost for PTY device file on restore
  * Newer protobuf compilers didn't recognize PB files
  * External mounts could be remounted with MS_PRIVATE
  * Build fail on Alpine Linux
  Deprecated/removed:
  * Per-pid file locks images
  * Per-pid fdinfo images
  * Ancient pagemap/pages images
- Enable builds on 32bit ARM

-------------------------------------------------------------------
Wed Jun 15 08:19:40 CEST 2016 - tiwai@suse.de

- Update to criu 2.3:
  New features
  * Ability not to show payload for some objects in CRIT
  * Pidfile is written at the end of restore
  * Ability to join existing namespaces on restore
  * C/R of Data sitting in TTYs, Partially write-protected SysVIPC
    segments, Debugfs and tracefs mounts, Overmounted tmpfs, IPv6
    devconf sysctls, External block devices, Unix sockets with
    mismatched shutdown state
  Optimizations/improvements:
  * Relaxed calculation of AIO ring size
  * Tree-based search of tasks by real pid
  * Less mem-to-mem copies on restore
  * Saner devconf image format
  * More verbose explanation of why task cannot be seized
  * PID is printed in PIE logs
  Fixes:
  * Too many mmap-ed files blocked the dump
  * Potential memory corruption when working with IPv6 sockets
  * Overmounted bind mounts could cause restore to fail
  * Overmounted bind mounts could result in badly restored mount tree
  * Incomplete restoration of RO bind mounts options
  Deprecated/removed:
  * Greedy mode of pagemap (non-root) caused dump to fail (disabled)

-------------------------------------------------------------------
Tue May 17 14:03:06 CEST 2016 - tiwai@suse.de

- Update to criu 2.2: mostly bugfixes
  New features:
  * "Post-resume" added to action scripts
  * Root task's PID in environment for action scripts
  * Devconfs drop_gratuitous_arp and drop_unicast_in_l2_multicast
  * Serial ttys
  Optimizations/improvements
  * Lighter link-remaps restore on newer kernels
  Fixes:
  * Race when restoring userns vs setting ns' maps
  * Tasks with zero fds failed the dump
  * Restore of TCP recv queue could fail due to kernel mem alloc
    constraints
  * No errors were written to logs when launching helper
    (tar/iptables) app in userns restore
  * User-mode dumped no memory pages sometimes
  * Bind mounts considered not as bind sometimes
  * Two mounts in the same directory blocked the dump
  * Off-by in on /dev/tty{1,63} dumping
  * Forking of cgroupns task was done with screwed clone flags
  Deprecated/removed:
  * Greedy mode of pagemap dumping (on some kernels we do not
    support user-mode)
  * Removed the --namespaces option

-------------------------------------------------------------------
Tue Apr 12 16:35:06 CEST 2016 - tiwai@suse.de

- Update to criu 2.1:
  New features:
  * Checking now classifies features to important/extra/experimental
  * Ability to bring some disk files into images.
  * C/R of Completed AIO requests and fallback gre and gretap net
    devices
  Optimizations/improvements:
  * Code coverage collecting now works
  * Use native rtnl library for netlink messages processing
  * Using --output - now results in stdout as log, not a file with
    the name "-"
  * Signals are printed by names in logs
  Fixes:
  * Make tar generated tarbal with bad name
  * CG restore code lacked rollback in some places
  * Error code from raw syscalls was treated with errors resulting
    in wrong criu check reports
  * Dumping task with HUGE amount of file descriptors failed
  * Task could be stopped after pre-dump if respective option was used
  * A /proc/pid directory from dead process conflicting with a new
    alive one could cause dump to fail
  * Zombie from alien session/process group caused restore to fail
  * CGroup fs was wrongly mounted in CGNS on restore
  * Irmap scan was mis-checking devices numbers
  * Use-after-free in irmap scan
  * Btrfs bindmounts detection was mistaken due to 'subvol=' options
    met
  * Propagation of mountpoint's shared groups was lost for
    propagated mounts
  * Unaligned allocations of restore shared memory could result in
    codedumps when used by futexes
  * Temporary mountpoints could result in spurious propagations
  * When aborting the dump criu could crash on use-after-free objects
  * Locking the network could stuck doing the DNS resolve
  * Several build fixes
  Deprecated/removed
  * The images from criu prior to 0.4 are deprecated
  * The --namespaces option makes no sense and is also deprecated
  * The --ms option for check action is deprecated

-------------------------------------------------------------------
Wed Mar  9 20:43:04 CET 2016 - tiwai@suse.de

- Update to criu 2.0:
  New features:
  * New code layout for sub-projects (e.g. Compel)
  * Unprivileged dump
  * Dump/check cpuinfo support for PPC
  * Explorers for CRIT
  * Added "post-setup-namespaces" to action scripts
  * Added timeout for dump procedure (5 sec by default)
  * Ability to override LSM profile on restore with CLI/RPC option
  * External bind mounts can be fs-root mounts too
  * Skip netns' internals on dump and restore (for Docker integration)
  * Advanced support for external files
  * More C/R supports
  Optimizations/improvements:
  * Align parasite stack on 16 bits for correctness
  * Compilation with native libc syscall wrappers and helpers
  * Parasite code injection done via memfd system call
  * Make vaddr to pfn conversion with one less syscall
  * CRIT shows device numbers in "maj:min" manner
  * CRIT shows mmap's status in verbose
  * Docker files for builds on all supported arches
  Fixes:
  * Absent readlink syscall on ARM (use readlinkat instead) could cause dump to fail
  * Wrong argument to timer_create system call could cause restore to crash
  * Extra tasks in freeze cgroup caused dump to fail/hand/crash
  * Unaligned restore-time object allocations caused lock operations to fail
  * Opened /proc/pid dir of dead task failed the dump
  * Unaligned stacks caused criu to fail on aarch64
  * Changed device numbers on restore side could cause random failures
  * Fixes in mount points sharing/slavery/propagation restore
  * Race between mntns creation and fds closing in different tasks could cause restore to fail
  * Hard kernel limit on TCP repair recv queue restore could cause big queue restore to fail
  * Unconnected dgram UNIX socket with data lost packets on restore
  * CRIT didn't show IPC objects
  * CRIT didn't convert IP addresses in images
  * Logs from PIE code contained corrupted addresses and sizes
  * Not loaded netfilter modules could cause dump/restore to stuck on dumping netlink socket
  * Shared external mounts were restored with error
  Security:
  * When checking for namespaces' CRIU entered userns with host creds
  * Deprecated/removed:
  * Completely removed 'show' action. Use CRIT instead.

-------------------------------------------------------------------
Tue Dec  8 12:01:05 CET 2015 - tiwai@suse.de

- Update to criu 1.8:
  * Ability to check CRIU features via RPC
  * Pre-dump and pre-restore action scripts
  * The "info" action in CRIT showing stats about image file
  * Python API
  * C/R of read-only bind mounts, IPv6 routes and iptables rules,
    ip rules (it ip tool supports such), ignore_routes_with_linkdown
    netns devconf, empty bridges in netns, FILTER mode of seccomp,
    and IP_FREEBIND socket option
  * Lots of fixes, two security fixes
    Service run as root could allow users to violate ptrace policies
    Service run as root could give users access to privileged files
    and directories
- Remove superfluous dependencies
- Clean up spec file, as systemd and logrotate supports have been
  officially dropped

-------------------------------------------------------------------
Thu Nov 19 16:10:29 CET 2015 - tiwai@suse.de

- update to criu 1.7.1:
  Fixes in mounts, notifies and userns found while testing openvz
- update to criu 1.7.2:
  Fixes for IPC in userns, venet C/R, socket buffers overflow and
  unix sockets name off-by-one
- Add the package dependency on python-protobuf

-------------------------------------------------------------------
Fri Sep 11 16:06:30 CEST 2015 - tiwai@suse.de

- Disable systemd service as a temporary workaround for possibile
  security issues (CVE-2015-5228, CVE-2015-5231, bsc#943105)
- Update to criu 1.7:
  * Improved cgroups management
  * Support for seccomp strict mode
  * Support for stream unix sockets inheritance
  * Support uid/gid-restricted mounts in userns
  * Support deleted bind-mounts
  * Ability to specify maximum ghost file size
  * OverlayFS support
  * Support relative unix sockets' bind paths
  * Altivec and PSX support for PPC
  * Small PIE loader
  * Temporary proc mountpoint is mounted with nosuid, noexec and nodev
  * Less memory copies when preparing restorer binary
  * CRIT action "show" for less keystrokes on common use-case
  * Fsnotify log messages now use hex everywhere :)
  * CRIT output doesn't mix fields any more
  * Many fixes
- Drop obsoleted patches:
  crit-install-prefix.diff
  lsm-prototype-fix.diff
  4c5b23e5-criu.pc.diff

-------------------------------------------------------------------
Fri Jul 31 07:47:22 UTC 2015 - cbosdonnat@suse.com

- Fix version in criu.pc file.
  4c5b23e5-criu.pc.diff

-------------------------------------------------------------------
Mon Jun  1 15:26:56 CEST 2015 - tiwai@suse.de

- update to version 1.6:
  * PowerPC 64bit LE support
  * Makefile.local for 3-rd party build rules
  * Ability to "enable" filesystem on dump (--enable-fs)
  * Ability to skip mountpoint on dump (--skip-mnt)
  * Prepare to deprecate "criu show" command
  * External mounts auto-detection
  * /dev/tty (current terminal) support
  * Netdev and netns (all/default) confs C/R
  * Images v1.1 with extra magic at head
  * Support fusectl (only ctl) mountpoint
  * Sub-version format is now as of git-describe
  * Apparamor labels C/R support
- Fix library path for aarch64 and ppc64le
- Fix the prototype for lsm.c (to fix build errors):
  lsm-prototype-fix.diff
- Refreshed crit-install-prefix.diff

-------------------------------------------------------------------
Tue Apr 28 11:54:14 CEST 2015 - tiwai@suse.de

- update to version 1.5.2:
  * fix error in mutli-threaded tasks restore with --restore-sibling
    (Docker and LXC cases)
  * fix too big RPC messages error for service (and swrk)

-------------------------------------------------------------------
Tue Apr  7 15:52:47 CEST 2015 - tiwai@suse.de

- Fix build failure on FACTORY due to comment-in-comment in
  google/protobuf/descriptor.proto
- update to version 1.5.1:
  * fix crash with 4.0 kernel
  * legalize swrk API and add the ability for inheriting fds via it
  * cgroup yard destruction and properties restore

-------------------------------------------------------------------
Fri Mar 13 10:10:07 CET 2015 - tiwai@suse.de

- update to version 1.5: New features
  * CRIT tool
  * ability to request CPU compatibility on instructions level only
  * C/R of empty AIO rings
  * more detailed errno report via RPC
  * per-feature "criu check"
  * inheriting FDs on restore
  * ability to automatically move veth device to host-side bridge
    on netns restore
  * VT terminals support
  * more user namespaces C/R stuff
  See more details at http://criu.org/Releases#v._1.5
- fix installation of crit:
  crit-install-prefix.diff

-------------------------------------------------------------------
Mon Dec  1 18:17:51 CET 2014 - tiwai@suse.de

- update to version 1.4: New features:
  * Dump and check cpuinfo
  * Initial support for user namespaces
  * The docker_cr.sh script for Docker
  * New API for writing plugins (old one is still possible)
  * Service workers change their title to better look in ps output
  * Ability to feed socket for pre-dump and page-server in swrk mode
  * Page-server can auto-bind its port
  * Ability to perform several actions during one connection to RPC service
  * C/R of opened /proc/$pid/foo files of dead tasks
  * C/R of /dev/console
  * C/R of virtualized devtmpfs (openvz and future upstream kernels)
  * C/R of empty mqueue fs (posix message queues)
  * C/R of shared bind-mounts 
  See more details at http://criu.org/Releases#v._1.4

-------------------------------------------------------------------
Mon Sep 15 13:43:00 CEST 2014 - tiwai@suse.de

- update to version 1.3.1, a stable releasing fixing below:
  * Sibling restore mode didn't set up CRIU signals properly
  * Unpredictable sibling/child root task restore. Fixed with
    explicit CLI option
  * Validation for leaf mount points was skipped
  * Mount options were corrupted on dump, which resulted in errors
    bind mounts detection

-------------------------------------------------------------------
Tue Sep  2 07:33:29 CEST 2014 - tiwai@suse.de

- update to version 1.3:
  * Docker and LXC support, lots of bug fixes
- cleanup spec file, fix rpmlint warnings

-------------------------------------------------------------------
Wed Jun 18 16:59:16 CEST 2014 - tiwai@suse.de

- Update to version 1.3-rc2:
  * external bind mounts and tasks-to-cgroups bindings
  * many bugfixes in memory restore and mounpoints dump

-------------------------------------------------------------------
Tue May  6 11:48:37 CEST 2014 - tiwai@suse.de

- Update to version 1.3-rc1:
  New features:
  * AArch64
  * Multiple mount namespaces
  * FPU state restore control
        Restore old FPU state on newer CPUs
        Ability to ignore FPU restoration 
  * Support stopped multi-threaded tasks
  * CRIU now can execv() other binary right after restore is complete
  * Inode-revese mapping can be enforced to allow live-migration with FS copying
  * Gold linker can now be used to compile CRIU
  * "Berserker" test to check CRIU scalability
  * Punch pages from mem images on restore (optimizes live-migration) 
 Optimizations:
  * Batched deduplication of memory images
  * Packed rlimits into core image
  * Packed timers into core image 
 Fixes:
  * Bad checks for kcmp() ret codes resulted in errors in file sharing detection
  * Multiple mmap-s of same files with different flags blocked the restore
  * Integer overflow in huge mapping restore caused restoration failure
  * Devpts's newinstance option was lost during dump
  * Subsequent dump could try to find old mem dump for newly forked task
  * Bad detection of overmounted mountpoints on fsnotify restore
  * Page-server could read partial message and failed
  * Errors in dumping of two subsequent anon vmas in some cases
  * Irmap mis-compared devices for disk FS-s
  * TMPFS handles always change during dump/restore
  * Pre-dump sometimes hangs on FIFO-s
  * Post-restore script fails too late (if does it)

-------------------------------------------------------------------
Sat Mar  1 09:39:03 CET 2014 - tiwai@suse.de

- Run spec-cleaner, nothing more than that.

-------------------------------------------------------------------
Wed Feb 26 17:15:26 CET 2014 - tiwai@suse.de

- Update to version 1.2:
  New features:
  * Performance improvements
  * Library versioning
  * RPC API got closer to CLI
  * New "post-restore" call in action scripts
  * Logrotate rules file
  * Default log file for service when starting via systemd 
  Bug fixes:
  * A lot for ARM cross-compile
  * Fsnotifies dumping didn't work on NFS
  * Images auto-deduplication only worked one level up
  * Packet socket ID was treated as file-descriptor and close()-d
  * Badly counted pages stats on restore
  * Linked remap name conflict when dump and restore on NFS
  * Sporadic failures in memory draining due to huge pipes used
  * Broken criu show of repeated fields
  * Failure to open mountpoint in foreign pid namespace
  * Unlinked bound unix socket dump error
  * Small memory leak when writing to incremental image(s)
  * Restoring fsnotify for links results in ELOOP
  * Host's PATH is not suitable when execv-ing tar/ip/iptable to restore namespace (workaround, proper fix will be in 1.3)
  * Using subdirs in log file name via RPC breaks security 
- New subpackages: libcriu1 and criu-devel
- Remove obsoleted always-define-ptrace_peeksiginfo_args.diff

-------------------------------------------------------------------
Tue Jan 28 12:42:34 CET 2014 - tiwai@suse.de

- Update to version 1.1: BUGs fixed,
  * Errors from memory dumping are not handled resulting in
    corrupted dumps
  * EOF detection in stacked images is done with error
  * Stacked images don't work on non-shared FS (missing pagemap-s)

-------------------------------------------------------------------
Tue Jan 21 12:23:27 CET 2014 - tiwai@suse.de

- Update to version 1.1-rc2: Bugs fixed,
  * Crash in criu check
  * RPC check always fail on 3.11 kernel
  * Failed fork() didn't abort restore
  * Dump fail not reported via RPC
  * RPC client disconnect wasn't handled
  * Page server could connect to self for writing images
  * Hang on pre-dumping task livig in net-namespace
  * VDSO page mis-handle on pre-dump
  * FPU state loss on pre-dump
  * Memory tracking turns ON w/o request
  * Various fixes (and improvements) in build system 
- Fix missing struct ptrace_peeksiginfo_args on FACTORY:
  always-define-ptrace_peeksiginfo_args.diff

-------------------------------------------------------------------
Wed Jan  8 16:40:12 CET 2014 - tiwai@suse.de

- Update to version 1.1-rc1:
  New features:
   * libcriu.so -- wrapper library for RPC clients
   * new plugins: external unix sockets, external bind mounts,
     external net devices and unknown file types 
   * Images deduplication in incremental dumps
   * Integration with systemd
   * Filtering of criu show output 
  Bug fixes:
   * Errors in unlinked files/sockets detection on BTRFS
   * NFS silly-rename files are not treated as unlinked
   * Freezer fail to seize quickly forking/pthread_create-ing tasks
   * Extra stop signal queued for stopped tasks after pre-dump
   * Wrong dying task state detection
   * Lost RPC dump response
   * Crash when reporting restore error via RPC
   * Negative return code into shell
   * Tasks left in wrong states after failed dump
   * A little bit more verbose check action
   * Coverity checks fail here and there

- Drop obsoleted criu-fix-PTRACE_LISTEN-define.diff

-------------------------------------------------------------------
Wed Nov 27 14:29:51 CET 2013 - tiwai@suse.de

- Fix rpm group tag to System/Console

-------------------------------------------------------------------
Mon Nov 25 18:09:55 CET 2013 - tiwai@suse.de

- updated to version 1.0
  * New features:
    -W option to specify working dir
    CHECK request in RPC
    Optimized headers
    More info in logs about undumpable files
    More comments about tricky dump/restore places
    Generic memory allocation for restorer 
  * Bugfixes
    After --leave-running linked remaps were not cleaned
    TCP was left locked after --leave-running
    Weak criteria in memory COW detection
    Private mapping's premmapped address overwrote file ID
    Restorer memory could overlap with timers/signals arrays
    RPC worker reused options from service task
    Suboptimal memory utilization by restorer arguments
    TCP unsent/unacked data boundary was lost
    Wrong dev_t decoding on 64 bit
    Unpredictable daemons (service and page-service) working dir
    Parasite stack could be corrupted by its arguments
    Error from exe link restore was ignored
    Artificial small limit on the number of shared memory segments
    to restore
    Bug in ARM VFP restore
    VDSO proxy was unmapped at the very end of restore

-------------------------------------------------------------------
Sun Oct 20 09:41:15 CEST 2013 - tiwai@suse.de

- updated to version 0.8:
  * New features:
    RPC service
    Ability to work from non-root user (via +s bit)
    Handle stopped tasks
    Restore tasks' root path
    Dump and restore net ns iptables configuration (w/o conntracks)
    Support for external net devices in netns (e.g. openvz venet)
    Support CORK and NODELAY TCP options
    SEQPACKET unix sockets support 
  * Fixes and improvements
    Unload restorer blob after restore
    Fixes and enhancements in criu show
    Fix in unsorted inotify wd restoring
    Fixed trimmed messages in parasite transport
    Fine-grained pgrps restore
    Fix in large TCP buffers restore
    Fixed buffer overflow in IPC ns dumping
    Fix in early page server connection close on pre-dump
    Fixed race in handling aborted parasite blob
    Fixed lost unmapped criu vmas in restore
    Fixes in parsing devices in /proc/pid/maps and /proc/locks
    Fixed snd/rcv buf sockoptions restore
    Enhanced logging in parasite

-------------------------------------------------------------------
Fri Sep  6 09:08:02 CEST 2013 - tiwai@suse.de

- updated to version 0.7:
  * TUN devices support (requires patched kernel)
  * Alternative stack (sigaltstack) C/R
  * Shared and master/slave mounts support
  * Restore statistics
  * Net device address C/R
  * Safer and simpler asynchronous parasite
  * Fixes in:
    - Stack guard page dump/restore
    - Page server communications
    - COW mappings restore
    - Zombies restore
    - Aborting failed restore
    - TCP connection restore (some require patched kernel)
    - Semi-closed Unix sockets with data dump/restore
- Fix build error on FACTORY due to redefinition of PTRACE_LISTEN:
  criu-fix-PTRACE_LISTEN-define.diff

-------------------------------------------------------------------
Mon Jul  8 12:35:16 CEST 2013 - tiwai@suse.de

- updated to version 0.6:
  * Cross-compiling support
  * Ready to accept images from OpenVZ RHEL6-based kernel
  * Posix CPU timers C/R
  * Asynchronous parasite
  * Memory changes tracking (requires patched kernel)
  * Dump statistics
  * Return-arg for remote syscalls execution
  * Improved "show" output
  * Opened /proc/PID/ns/* files C/R
  * Daemon mode for page-server
  * Build-time features test (makes it possible to build on
    different distros)

-------------------------------------------------------------------
Wed May 29 09:42:17 CEST 2013 - tiwai@suse.de

- initial version: 0.5

Places

File criu.changes of Package criu (Revision a4418b5852862d20d2d61d4e1c2a395f)

Places