Re: [meta-virtualization][PATCH v2] classes/image-oci: Map image architecture correctly

2023-11-02 Thread Bruce Ashfield
merged to master-next With any luck, I'll complete my release testing and master-next will become master shortly Bruce In message: [meta-virtualization][PATCH v2] classes/image-oci: Map image architecture correctly on 30/10/2023 Joshua Watt wrote: > OCI requires that the architecture [1] be a

Re: [meta-virtualization] use of yocto-cfg-fragments

2023-11-02 Thread Bruce Ashfield
Hi Alexander! On Thu, Nov 2, 2023 at 6:24 AM Sverdlin, Alexander wrote: > > Hello Bruce! > > Trying to understand the usage of SRC_URI type=kmeta/kernel-cache in > commits > 5c2129118797 ("virtualization/config: allow conditional use of > yocto-cfg-fragments") > and 5be8686e659c ("kernel: fix co

[meta-virtualization][kirkstone][PATCH 2/3] kubernetes: Fix CVE-2023-2727, CVE-2023-2728

2023-11-02 Thread Soumya via lists.yoctoproject.org
From: Soumya Sambu Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers, Kubernetes clusters are only affected if the ImagePolicyWebhook admission plugin is used together with ephemeral containers. Users may be able to laun

[meta-virtualization][kirkstone][PATCH 1/3] kubernetes: Fix CVE-2023-2431

2023-11-02 Thread Soumya via lists.yoctoproject.org
From: Soumya Sambu A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement. Pods that use localhost type for seccomp profile but specify an empty profile field, are affected by this issue. In this scenario, this vulnerability allows the pod to run in

[meta-virtualization][kirkstone][PATCH 1/1] kubernetes: Adjust patches to resolve error that occur with devtool

2023-11-02 Thread Soumya via lists.yoctoproject.org
From: Soumya Sambu Adjust patches and .bb to fix below error which occurs with devtool modify command - ERROR: Applying patch '0001-hack-lib-golang.sh-use-CC-from-environment.patch' on target directory CmdError('sh -c \'PATCHFILE="0001-hack-lib-golang.sh-use-CC-from-environment.patch" git -c

[meta-virtualization] use of yocto-cfg-fragments

2023-11-02 Thread A. Sverdlin via lists.yoctoproject.org
Hello Bruce! Trying to understand the usage of SRC_URI type=kmeta/kernel-cache in commits 5c2129118797 ("virtualization/config: allow conditional use of yocto-cfg-fragments") and 5be8686e659c ("kernel: fix conditional application of fragments"). I have an issue implementing some locally-maintain