|
[RFC][dunfell][PATCH] add CVE_PRODUCT for docker, containerd, runc
This is more of an RFC than an actual review request. Currently, the
yocto CVE checker fails to report CVEs in docker, due to mismatch of the
package names (eg "docker-moby" versus just "docker" in
This is more of an RFC than an actual review request. Currently, the
yocto CVE checker fails to report CVEs in docker, due to mismatch of the
package names (eg "docker-moby" versus just "docker" in
|
By
Ralph Siemsen
·
#6464
·
|
|
Help on openvswitch
Hello Bruce
when openvswitch enable DPDK, the do_configure will trigger follow error:
checking whether dpdk is enabled... yes
| checking for rte_config.h... yes
| checking whether
Hello Bruce
when openvswitch enable DPDK, the do_configure will trigger follow error:
checking whether dpdk is enabled... yes
| checking for rte_config.h... yes
| checking whether
|
By
Zhang, Qiang <qiang.zhang@...>
·
#6463
·
|
|
[dunfell][PATCH] docker-moby: update to v19.03.15
Bumping to 19.03.15 to pickup bugfixes and security changes. The
following commits comprise the change:
420b1d3625 pull: Validate layer digest format
5472f39022 buildkit: Apply apparmor
Bumping to 19.03.15 to pickup bugfixes and security changes. The
following commits comprise the change:
420b1d3625 pull: Validate layer digest format
5472f39022 buildkit: Apply apparmor
|
By
Ralph Siemsen
·
#6462
·
|
|
[PATCH v3] ceph: Upgrade to 16.2.1
From: Saul Wold <Saul.Wold@...>
This updates the Ceph version to 16.2.1 which required a couple
changes to base code via a rebased patch which also disabled the
sanity check due to it not
From: Saul Wold <Saul.Wold@...>
This updates the Ceph version to 16.2.1 which required a couple
changes to base code via a rebased patch which also disabled the
sanity check due to it not
|
By
Saul Wold
·
#6461
·
|
|
Re: [hardknott][PATCH] containerd: fix fuzz for CVE-2021-3121 patch
Acked-by: Martin Jansa <Martin.Jansa@...>
Thanks!
Acked-by: Martin Jansa <Martin.Jansa@...>
Thanks!
|
By
Martin Jansa
·
#6460
·
|
|
Re: [PATCH v2] ceph: Upgrade to 16.2.1
What's the base for this ?
I've tried it with and without your previous upgrade patch, and it
won't apply in either case.
I just pushed a new master branch for the libseccomp fixes, it is
probably
What's the base for this ?
I've tried it with and without your previous upgrade patch, and it
won't apply in either case.
I just pushed a new master branch for the libseccomp fixes, it is
probably
|
By
Bruce Ashfield
·
#6459
·
|
|
[PATCH v2] ceph: Upgrade to 16.2.1
This updates the Ceph version to 16.2.1 which required a couple
changes to base code via a rebased patch which also disabled the
sanity check due to it not working correctly, but the actual
compile
This updates the Ceph version to 16.2.1 which required a couple
changes to base code via a rebased patch which also disabled the
sanity check due to it not working correctly, but the actual
compile
|
By
Saul Wold
·
#6458
·
|
|
Re: [PATCH] ceph: Upgrade to 16.2.1
Dang, I thought I took care of that. Maybe something happened with Devtool, strange.
Ok, I figured out what happened, Version 2 coming, there is some other missing change.
I did not see this, I will
Dang, I thought I took care of that. Maybe something happened with Devtool, strange.
Ok, I figured out what happened, Version 2 coming, there is some other missing change.
I did not see this, I will
|
By
Saul Wold
·
#6457
·
|
|
Re: [PATCH] libvirt: uprev v6.3 -> v7.2
<Daniel.Dragomir@...> wrote:
I didn't currently have a plan to do that backport, since it is a
major version bump and missed when I had to branch for the release.
But if someone can
<Daniel.Dragomir@...> wrote:
I didn't currently have a plan to do that backport, since it is a
major version bump and missed when I had to branch for the release.
But if someone can
|
By
Bruce Ashfield
·
#6456
·
|
|
[hardknott][PATCH] containerd: fix fuzz for CVE-2021-3121 patch
Signed-off-by: Trevor Gamblin <trevor.gamblin@...>
---
.../containerd/files/CVE-2021-3121.patch | 849 +++++++++---------
1 file changed, 423 insertions(+), 426 deletions(-)
diff
Signed-off-by: Trevor Gamblin <trevor.gamblin@...>
---
.../containerd/files/CVE-2021-3121.patch | 849 +++++++++---------
1 file changed, 423 insertions(+), 426 deletions(-)
diff
|
By
Trevor Gamblin
·
#6455
·
|
|
Re: [PATCH] libvirt: uprev v6.3 -> v7.2
Hi Bruce!
Do you know when this patch will be back-ported on hardknott?
Currently in only on master:
9f35986 (HEAD -> master, origin/master, origin/HEAD) libvirt: uprev v6.3 -> v7.2
Thanks,
Daniel
Hi Bruce!
Do you know when this patch will be back-ported on hardknott?
Currently in only on master:
9f35986 (HEAD -> master, origin/master, origin/HEAD) libvirt: uprev v6.3 -> v7.2
Thanks,
Daniel
|
By
Daniel Dragomir
·
#6454
·
|
|
Re: [PATCH] ceph: Upgrade to 16.2.1
argh. My bad, that should be "master-ceph"
Bruce
--
- Thou shalt not follow the NULL pointer, for chaos and madness await
thee at its end
- "Use the force Harry" - Gandalf, Star Trek II
argh. My bad, that should be "master-ceph"
Bruce
--
- Thou shalt not follow the NULL pointer, for chaos and madness await
thee at its end
- "Use the force Harry" - Gandalf, Star Trek II
|
By
Bruce Ashfield
·
#6453
·
|
|
Re: [PATCH] ceph: Upgrade to 16.2.1
I had to adjust the hashes to get this to download, and once I did
that, I had to limit the build to avoid OOM, and then ran into this:
24 -Wpessimizing-move -Wredundant-move
I had to adjust the hashes to get this to download, and once I did
that, I had to limit the build to avoid OOM, and then ran into this:
24 -Wpessimizing-move -Wredundant-move
|
By
Bruce Ashfield
·
#6452
·
|
|
[PATCH 8/8] xen, rpi4: add xen-rpi-u-boot-scr recipe for default u-boot script
Add a new xen-rpi-u-boot-scr recipe to PROVIDE u-boot-default-script
instead of using a bbappend to rpi-u-boot-scr.
This allows the new recipe to be selected by indicating it as
PREFERRED_PROVIDER of
Add a new xen-rpi-u-boot-scr recipe to PROVIDE u-boot-default-script
instead of using a bbappend to rpi-u-boot-scr.
This allows the new recipe to be selected by indicating it as
PREFERRED_PROVIDER of
|
By
Christopher Clark
·
#6451
·
|
|
[PATCH 7/8] xen, rpi4: move rpi4-machine+xen-distro cfg into dynamic layer
Improve meta-virt-xen.inc by moving all the Raspberry Pi 4 config
settings to a new xen-raspberrypi4-64.inc file in the raspberrypi
dynamic layer.
The new .inc file is included only for the
Improve meta-virt-xen.inc by moving all the Raspberry Pi 4 config
settings to a new xen-raspberrypi4-64.inc file in the raspberrypi
dynamic layer.
The new .inc file is included only for the
|
By
Christopher Clark
·
#6450
·
|
|
[PATCH 6/8] xen, rpi4: apply workaround to fix crash on boot with Xen 4.14
Apply update to the device tree to allow Xen 4.14 to boot.
Suggested-by: Bertrand Marquis <bertrand.marquis@...>
Signed-off-by: Christopher Clark <christopher.w.clark@...>
---
Apply update to the device tree to allow Xen 4.14 to boot.
Suggested-by: Bertrand Marquis <bertrand.marquis@...>
Signed-off-by: Christopher Clark <christopher.w.clark@...>
---
|
By
Christopher Clark
·
#6449
·
|
|
[PATCH 5/8] xen, rpi4: fix u-boot script to load binaries from boot partition
fatload needs to read from mmc 1:1 to find the Xen hypervisor and Linux
kernel binaries with the current Yocto Linux 5.10 kernel.
Add boot messages to to the u-boot script to indicate the size of
fatload needs to read from mmc 1:1 to find the Xen hypervisor and Linux
kernel binaries with the current Yocto Linux 5.10 kernel.
Add boot messages to to the u-boot script to indicate the size of
|
By
Christopher Clark
·
#6448
·
|
|
[PATCH 4/8] xen, rpi4: switch Xen-on-Rpi4 kernel preference to linux-yocto
The 5.10 version of the Linux Yocto kernel supports running Xen on the
Raspberry Pi 4, so the previous preference for linux-yocto-dev can be
replaced.
Use the ?= operator to set the kernel preference
The 5.10 version of the Linux Yocto kernel supports running Xen on the
Raspberry Pi 4, so the previous preference for linux-yocto-dev can be
replaced.
Use the ?= operator to set the kernel preference
|
By
Christopher Clark
·
#6447
·
|
|
[PATCH 3/8] xen, rpi4, linux-yocto: enable linux-yocto 5.10 for RPi4
Added to the raspberrypi dynamic layer for use with Xen as
preparation for switching to it as the default preference.
Signed-off-by: Christopher Clark <christopher.w.clark@...>
---
Added to the raspberrypi dynamic layer for use with Xen as
preparation for switching to it as the default preference.
Signed-off-by: Christopher Clark <christopher.w.clark@...>
---
|
By
Christopher Clark
·
#6446
·
|
|
[PATCH 2/8] xen, rpi4: drop the raspberrypi4-64 defconfig, xen_git.bbappend
Since upstream Xen 4.14 and 4.15 have working default configs for Xen on
the Raspberry Pi 4, the defconfig and bbappend in the raspberrypi
dynamic layer can now be removed.
Signed-off-by: Christopher
Since upstream Xen 4.14 and 4.15 have working default configs for Xen on
the Raspberry Pi 4, the defconfig and bbappend in the raspberrypi
dynamic layer can now be removed.
Signed-off-by: Christopher
|
By
Christopher Clark
·
#6445
·
|