[meta-virtualization][kirkstone][PATCHv2 14/21] docker/proxy: don't use -linkshared unconditionally

From: Jose Quaresma The linkshared is not supported in some machines like riscv64 and when supported we can use the GO_LINKSHARED instaed. So export GO_LINKSHARED on the recipe to be available for Makefile. This is currently only used in libnetwork for the proxy build, but could be used in

[meta-virtualization][kirkstone][PATCHv2 15/21] runc: update to 1.1.4-tip

From: Bruce Ashfield Bumping runc to version v1.1.4-8-g974efd2d, which comprises the following commits: 3b958289 Fixes inability to use /dev/null when inside a container 335ec376 cirrus-ci: install EPEL on CentOS 7 conditionally fb145a2f cirrus-ci: enable EPEL for CentOS 7

[meta-virtualization][kirkstone][PATCHv2 13/21] containerd: fix final TMDIR references

From: Bruce Ashfield restructure the containerd source layout to avoid symlinking vendor dependencies. This avoid go recording paths in the final binaries. Signed-off-by: Bruce Ashfield --- ...O_BUILD_FLAGS-to-be-externally-speci.patch | 6 +-- ...don-t-use-gcflags-to-define-trimpath.patch |

[meta-virtualization][kirkstone][PATCHv2 12/21] docker: reproducibility add -trimpath to go -> $GO patches

From: Bruce Ashfield With this, we build and package docker without QA warnings due to references to TMPDIR. Signed-off-by: Bruce Ashfield --- ...i-use-external-GO111MODULE-and-cross-compiler.patch | 2 +- .../files/0001-dynbinary-use-go-cross-compiler.patch | 2 +-

[meta-virtualization][kirkstone][PATCHv2 11/21] containerd: improve reproducibility

From: Bruce Ashfield We get the following QA warning on build: WARNING: containerd-opencontainers-v1.6.8+gitAUTOINC+579a6380ec-r0 do_package_qa: QA Issue: File /usr/bin/containerd-shim-runc-v2 in package containerd-opencontainers contains reference to TMPDIR File /usr/bin/containerd-ctr in

[meta-virtualization][kirkstone][PATCHv2 08/21] docker-ce: update to 20.10.17

From: Bruce Ashfield Bumping moby to version v20.10.17-2-g3949ff121e, which comprises the following commits: ff7feeac37 vendor: github.com/containerd/continuity v0.3.0 6f3f2b6d08 update containerd binary to v1.6.6 b3bcb15da8 update containerd binary to v1.6.5 f55b030fa0 system:

[meta-virtualization][kirkstone][PATCHv2 10/21] containerd: update to 1.6.8

From: Bruce Ashfield Bumping containerd to version v1.6.8-8-g579a6380e, which comprises the following commits: 1efd8b947 ci: remove GOPROXY environment variable due to https://github.com/go-yaml/yaml/issues/887 0448673af Do not append []string{""} to command to preserve Docker

[meta-virtualization][kirkstone][PATCHv2 07/21] docker-moby: update to 20.10.17

From: Bruce Ashfield Bumping moby to version v20.10.17-2-g3949ff121e, which comprises the following commits: ff7feeac37 vendor: github.com/containerd/continuity v0.3.0 6f3f2b6d08 update containerd binary to v1.6.6 b3bcb15da8 update containerd binary to v1.6.5 f55b030fa0 system:

[meta-virtualization][kirkstone][PATCHv2 09/21] docker: ensure that sysvinit and systemd are exclusive

From: Bruce Ashfield The sysvinit functionality conflicts with the docker daemon settings required for the systemd docker.socket. Ensure that the sysvinit capabilities are only enabled if systemd is not present. Signed-off-by: Bruce Ashfield --- recipes-containers/docker/README | 7

[meta-virtualization][kirkstone][PATCHv2 04/21] runc-opencontainers: drop obsolete patch

commit e4474ef881401b2f3ed3ba806a288bb986dcac49 of runc does a vendor update which includes the reverted fix again. The commit is after 1.2.0 and before 1.3.0 --> the next cherry-pick updates runc to 1.3.0 and the fix will be back. Signed-off-by: Adrian Freihofer ---

[meta-virtualization][kirkstone][PATCHv2 06/21] runc-docker: update to 1.1.3

From: Bruce Ashfield Bumping runc to version v1.1.3-2-g1e7bb5b7, which comprises the following commits: eb1552a0 VERSION: back to development 6724737f VERSION: release 1.1.3 91fa032d ci: add basic checks for CHANGELOG.md 7219387e cgroups: systemd: skip adding device paths that

[meta-virtualization][kirkstone][PATCHv2 03/21] docker-ce: update to 20.10.16

From: Bruce Ashfield Bumping moby to version v20.10.16, which comprises the following commits: a15acb4bd6 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 5f2e0b79ad [20.10] update golang to 1.17.10 be7855fdbe vendor: update github.com/containerd/cgroups and

[meta-virtualization][kirkstone][PATCHv2 05/21] runc: update to 1.1.3

From: Bruce Ashfield Bumping runc to version v1.1.3-2-g1e7bb5b7, which comprises the following commits: eb1552a0 VERSION: back to development 6724737f VERSION: release 1.1.3 91fa032d ci: add basic checks for CHANGELOG.md 7219387e cgroups: systemd: skip adding device paths that

[meta-virtualization][kirkstone][PATCHv2 01/21] docker/moby: update to 20.10.16

From: Bruce Ashfield Bumping moby to version v20.10.16, which comprises the following commits: a15acb4bd6 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 5f2e0b79ad [20.10] update golang to 1.17.10 be7855fdbe vendor: update github.com/containerd/cgroups and

[meta-virtualization][kirkstone][PATCHv2 02/21] docker/moby/libnetwork: update to -latest

From: Bruce Ashfield Bumping libnetwork to version v0.7.0-dev.3-1830-g339b972b, which comprises the following commits: 9db86fb7 Only check if route overlaps routes with scope: LINK 7b9c2905 fix port forwarding with ipv6.disable=1 Signed-off-by: Bruce Ashfield ---

[meta-virtualization][kirkstone][PATCHv2 00/21] docker updates

This brings docker-ce, docker-moby, containerd-opencontainers, runc-opencontainers and runc-docker to almost the same commits as they are on the master branch. That's what I did: git cherry-pick ea4c3c3ebac169c3b609476de1cae9bf826e2e50 git cherry-pick ade7848788f9b9b1fdf64c2569601ae187e92b1c

[meta-virtualization] [meta-cloud-services][PATCH] layer.conf: add meta-virtualization to LAYERDEPENDS

From: Mingli Yu Fix the below yocto compliance issue, the libibverbs under meta-virtualization provides virtual/libibverbs. ERROR: Nothing PROVIDES 'virtual/libibverbs' (but /build/layers/meta-cloud-services/recipes-extended/glusterfs/glusterfs_6.1.bb DEPENDS on or otherwise requires it).