October 2019 - openSUSE Kubic - openSUSE Mailing Lists

[opensuse-kubic] New MicroOS snapshot 20191028 released!
by Richard Brown 31 Oct '19

31 Oct '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: c-ares dmidecode kernel-firmware (20190909 -> 20191023) libsolv (0.7.6 -> 0.7.7) lvm2-device-mapper rpm-config-SUSE (0.g40 -> 0.g42) zypper (1.14.30 -> 1.14.32) === Details === ==== c-ares ==== - Add upstream patches with the ares_getaddrinfo function: * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch * 0007-getaddrinfo-enhancements-257.patch * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch - Add a patch which disables test failing on OBS (but passing in local environment): * 0010-Disable-failing-test.patch ==== dmidecode ==== 1 recommended fixe from upstream: - dmidecode-fix-system-slot-information-for-pcie-ssd.patch: Fix System Slot Information for PCIe SSD. Partial support for SMBIOS 3.3.0: - dmidecode-add-enumerated-values-from-smbios-3.3.0.patch: Add enumerated values from SMBIOS 3.3.0 (bsc#1153533). ==== kernel-firmware ==== Version update (20190909 -> 20191023) Subpackages: ucode-amd - Fix the missing ast and qla2xx firmwares due to typos in extrawhence file - Update to version 20191023 (git commit: ad7a8b22b1d0): * Mellanox: Add new mlxsw_spectrum2 firmware 29.2000.2308 * Mellanox: Add new mlxsw_spectrum firmware 13.2000.2308 * rtl_nic: add firmware files for RTL8153 * rtl_bt: Update configuration file for BT part of RTL8822CU * bnx2x: Add FW 7.13.15.0. - Update topics.list and modaliases for r8152 and ice - Update to version 20191022 (git-commit: 2b016afc348b): * linux-firmware: Update AMD cpu microcode * linux-firmware: Update firmware file for Intel Bluetooth AX200 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth 9260 * amdgpu: add initial navi14 firmware form 19.30 * rtlwifi: rtl8821ae: Add firmware for the RTL8812AE variant. * ice: Fix up WHENCE entry and symlink * nvidia: Update Tegra210 XUSB firmware to v50.24 * nvidia: Add XUSB firmware for Tegra194 * Remove duplicate symlinks * copy-firmware: Create symlinks from WHENCE file * Make symlinks consistent * amdgpu: update vega20 ucode for 19.30 * amdgpu: update vega12 ucode for 19.30 * amdgpu: update vega10 ucode for 19.30 * amdgpu: update picasso ucode for 19.30 * amdgpu: update raven2 ucode for 19.30 * amdgpu: update raven ucode for 19.30 * amdgpu: add new raven rlc firmware * ice: Add package file for Intel E800 series driver * amdgpu: add initial navi10 firmware * drm/i915/firmware: Add v9.0.0 of HuC for Icelake * drm/i915/firmware: Add v4.0.0 of HuC for Cometlake * drm/i915/firmware: Add v4.0.0 of HuC for Geminilake * drm/i915/firmware: Add v2.0.0 of HuC for Broxton * drm/i915/firmware: Add v4.0.0 of HuC for Kabylake * drm/i915/firmware: Add v2.0.0 of HuC for Skylake * drm/i915/firmware: Add v33 of GuC for CML * drm/i915/firmware: Add v2.04 of DMC for TGL * drm/i915/firmware: Add v1.09 of DMC for ICL * qcom: add firmware files for Adreno a630 - Update module aliases and topics list - Update install-split.sh to deal with the proper symlinks - Add verbose mode to install-split.sh ==== libsolv ==== Version update (0.7.6 -> 0.7.7) - fix updating of too many packages in focusbest mode - fix handling of disabled installed packages in distupgrade - new POOL_FLAG_WHATPROVIDESWITHDISABLED pool flag - bump version to 0.7.7 ==== lvm2-device-mapper ==== Subpackages: device-mapper libdevmapper-event1_03 libdevmapper1_03 - Fix udev rules issue (bsc#1154655) + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch ==== rpm-config-SUSE ==== Version update (0.g40 -> 0.g42) - Update to version 0.g42: * Add __perl macro until the perl package provides it * Add requires_eq and requires_ge macros ==== zypper ==== Version update (1.14.30 -> 1.14.32) Subpackages: zypper-needs-restarting - Add extended solver options to list-updates. Since the update command supports tweaking the solver via CLI options the list-updates command should allow the same (bsc#1153351) - version 1.14.32 - --solver-focus: Set the solvers general attitude when resolving a job (bsc#1146415) - Add --repo switch to download (jira#SLE-9171) - manpage: Improve description of $releasever and --releasever usecases (bsc#1149511) - Ask only once if multiple packages share the same license text (bsc#1145554) - Allow selection by capability if --force switch is used (fixes #289) - BuildRequires: libzypp-devel >= 17.15.0 - version 1.14.31 -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191028 released!
by Richard Brown 31 Oct '19

31 Oct '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: c-ares dmidecode kernel-firmware (20190909 -> 20191023) libsolv (0.7.6 -> 0.7.7) lvm2 lvm2-device-mapper rpm-config-SUSE (0.g40 -> 0.g42) zypper (1.14.30 -> 1.14.32) === Details === ==== c-ares ==== - Add upstream patches with the ares_getaddrinfo function: * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch * 0007-getaddrinfo-enhancements-257.patch * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch - Add a patch which disables test failing on OBS (but passing in local environment): * 0010-Disable-failing-test.patch ==== dmidecode ==== 1 recommended fixe from upstream: - dmidecode-fix-system-slot-information-for-pcie-ssd.patch: Fix System Slot Information for PCIe SSD. Partial support for SMBIOS 3.3.0: - dmidecode-add-enumerated-values-from-smbios-3.3.0.patch: Add enumerated values from SMBIOS 3.3.0 (bsc#1153533). ==== kernel-firmware ==== Version update (20190909 -> 20191023) Subpackages: ucode-amd - Fix the missing ast and qla2xx firmwares due to typos in extrawhence file - Update to version 20191023 (git commit: ad7a8b22b1d0): * Mellanox: Add new mlxsw_spectrum2 firmware 29.2000.2308 * Mellanox: Add new mlxsw_spectrum firmware 13.2000.2308 * rtl_nic: add firmware files for RTL8153 * rtl_bt: Update configuration file for BT part of RTL8822CU * bnx2x: Add FW 7.13.15.0. - Update topics.list and modaliases for r8152 and ice - Update to version 20191022 (git-commit: 2b016afc348b): * linux-firmware: Update AMD cpu microcode * linux-firmware: Update firmware file for Intel Bluetooth AX200 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth 9260 * amdgpu: add initial navi14 firmware form 19.30 * rtlwifi: rtl8821ae: Add firmware for the RTL8812AE variant. * ice: Fix up WHENCE entry and symlink * nvidia: Update Tegra210 XUSB firmware to v50.24 * nvidia: Add XUSB firmware for Tegra194 * Remove duplicate symlinks * copy-firmware: Create symlinks from WHENCE file * Make symlinks consistent * amdgpu: update vega20 ucode for 19.30 * amdgpu: update vega12 ucode for 19.30 * amdgpu: update vega10 ucode for 19.30 * amdgpu: update picasso ucode for 19.30 * amdgpu: update raven2 ucode for 19.30 * amdgpu: update raven ucode for 19.30 * amdgpu: add new raven rlc firmware * ice: Add package file for Intel E800 series driver * amdgpu: add initial navi10 firmware * drm/i915/firmware: Add v9.0.0 of HuC for Icelake * drm/i915/firmware: Add v4.0.0 of HuC for Cometlake * drm/i915/firmware: Add v4.0.0 of HuC for Geminilake * drm/i915/firmware: Add v2.0.0 of HuC for Broxton * drm/i915/firmware: Add v4.0.0 of HuC for Kabylake * drm/i915/firmware: Add v2.0.0 of HuC for Skylake * drm/i915/firmware: Add v33 of GuC for CML * drm/i915/firmware: Add v2.04 of DMC for TGL * drm/i915/firmware: Add v1.09 of DMC for ICL * qcom: add firmware files for Adreno a630 - Update module aliases and topics list - Update install-split.sh to deal with the proper symlinks - Add verbose mode to install-split.sh ==== libsolv ==== Version update (0.7.6 -> 0.7.7) - fix updating of too many packages in focusbest mode - fix handling of disabled installed packages in distupgrade - new POOL_FLAG_WHATPROVIDESWITHDISABLED pool flag - bump version to 0.7.7 ==== lvm2 ==== Subpackages: liblvm2cmd2_03 - Fix udev rules issue (bsc#1154655) + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch ==== lvm2-device-mapper ==== Subpackages: device-mapper libdevmapper-event1_03 libdevmapper1_03 - Fix udev rules issue (bsc#1154655) + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch ==== rpm-config-SUSE ==== Version update (0.g40 -> 0.g42) - Update to version 0.g42: * Add __perl macro until the perl package provides it * Add requires_eq and requires_ge macros ==== zypper ==== Version update (1.14.30 -> 1.14.32) Subpackages: zypper-needs-restarting - Add extended solver options to list-updates. Since the update command supports tweaking the solver via CLI options the list-updates command should allow the same (bsc#1153351) - version 1.14.32 - --solver-focus: Set the solvers general attitude when resolving a job (bsc#1146415) - Add --repo switch to download (jira#SLE-9171) - manpage: Improve description of $releasever and --releasever usecases (bsc#1149511) - Ask only once if multiple packages share the same license text (bsc#1145554) - Allow selection by capability if --force switch is used (fixes #289) - BuildRequires: libzypp-devel >= 17.15.0 - version 1.14.31 -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20191027 released!
by Richard Brown 29 Oct '19

29 Oct '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: yast2 (4.2.28 -> 4.2.29) === Details === ==== yast2 ==== Version update (4.2.28 -> 4.2.29) - Support for products on control file during upgrade (jsc#SLE-7214) - 4.2.29 -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191027 released!
by Richard Brown 29 Oct '19

29 Oct '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: yast2 (4.2.28 -> 4.2.29) === Details === ==== yast2 ==== Version update (4.2.28 -> 4.2.29) - Support for products on control file during upgrade (jsc#SLE-7214) - 4.2.29 -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20191025 released!
by Richard Brown 28 Oct '19

28 Oct '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: bash chrony (3.4 -> 3.5) cloud-init dhcp file ncurses openssh (7.9p1 -> 8.1p1) slirp4netns (0.4.1 -> 0.4.2) talloc texinfo vim zlib === Details === ==== bash ==== - Remove PILOTPORT and PILOTRATE environment variable from default ~/.bashrc (/etc/skel/.bashrc) (bsc#1123510) - Move definitions of environment variables from ~/.bashrc to ~/.profile (/etc/skel/.profile) ==== chrony ==== Version update (3.4 -> 3.5) - Fix asciidoc in Tumbleweed - Revert clknetsim to version 58c5e8b - Fix incorrect download link for package signature - Temporarily disable signature usage as its expired - Update clknetsim to version ac3c832 - fix chrony-service-helper.patch - Update to 3.5: + Add support for more accurate reading of PHC on Linux 5.0 + Add support for hardware timestamping on interfaces with read-only timestamping configuration + Add support for memory locking and real-time priority on FreeBSD, NetBSD, Solaris + Update seccomp filter to work on more architectures + Validate refclock driver options + Fix bindaddress directive on FreeBSD + Fix transposition of hardware RX timestamp on Linux 4.13 and later + Fix building on non-glibc systems ==== cloud-init ==== - Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988) + Short curcuit the conditional for identifying the sysconfig renderer. If we find ifup/ifdown accept the renderer as available. - Add cloud-init-break-resolv-symlink.patch (bsc#1151488) + If /etc/resolv.conf is a symlink break it. This will avoid netconfig from clobbering the changes cloud-init applied. ==== dhcp ==== Subpackages: dhcp-client - bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch: DHCPv6 server crashes regularly. - Add compile option --enable-secs-byteorder to avoid duplicate lease warnings [bsc#1089524]. - Make systemd a weak dependency as we don't want that in a container - bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and dhcrelay6 (0021-dhcp-ip-family-symlinks.patch). ==== file ==== Subpackages: file-magic libmagic1 - Add temporary patch CVE-2019-18218-46a8443f.patch from upstream to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c - Let python-magic build with latest rpm ==== ncurses ==== Subpackages: libncurses6 ncurses-utils terminfo terminfo-base - Add ncurses patch 20191019 + modify make_hash to not require --disable-leaks, to simplify building with address-sanitizer. + modify tic to exit if it cannot remove a conflicting name, because treating that as a partial success can cause an infinite loop in use-resolution (report/testcase by Hongxu Chen, cf: 20111001). - Add ncurses patch 20191015 + improve buffer-checks in captoinfo.c, for some cases when the input string is shorter than expected. > fix two errata in tic (report/testcases by Hongxu Chen): + check for missing character after backslash in write_it + check for missing characters after "%>" when converting from termcap syntax (cf: 980530). - Avoid recursion trouble in spec file cause by undefined _lto_cflags - Add ncurses patch 20191012 + amend recent changes to ncurses*-config and pc-files to filter out Debian linker-flags (report by Sven Joachim, cf: 20150516). + clarify relationship between tic, infocmp and captoinfo in manpage. + check for invalid hashcode in _nc_find_type_entry and _nc_find_name_entry. > fix several errata in tic (reports/testcases by "zjuchenyuan"): + check for invalid hashcode in _nc_find_entry. + check for missing character after backslash in fmt_entry + check for acsc with odd length in dump_entry in check for one-one mapping (cf: 20060415); + check length when converting from old AIX box_chars_1 capability, overlooked in changes to eliminate strcpy (cf: 20001007). - Add ncurses patch 20191005 + modify the ncurse*-config and pc-files to more closely match for the - I and -l options. ==== openssh ==== Version update (7.9p1 -> 8.1p1) - Add openssh-7.9p1-keygen-preserve-perms.patch (bsc#1150574). This attempts to preserve the permissions of any existing known_hosts file when modified by ssh-keygen (for instance, with -R). - Add patch from upstream openssh-7.9p1-revert-new-qos-defaults.patch - Run 'ssh-keygen -A' on startup only if SSHD_AUTO_KEYGEN="yes" in /etc/sysconfig/ssh. This is set to "yes" by default, but can be changed by the system administrator (bsc#1139089). - Add openssh-7.9p1-keygen-preserve-perms.patch (bsc#1150574). This attempts to preserve the permissions of any existing known_hosts file when modified by ssh-keygen (for instance, with -R). - Version update to 8.1p1: * ssh-keygen(1): when acting as a CA and signing certificates with an RSA key, default to using the rsa-sha2-512 signature algorithm. Certificates signed by RSA keys will therefore be incompatible with OpenSSH versions prior to 7.2 unless the default is overridden (using "ssh-keygen -t ssh-rsa -s ..."). * ssh(1): Allow %n to be expanded in ProxyCommand strings * ssh(1), sshd(8): Allow prepending a list of algorithms to the default set by starting the list with the '^' character, E.g. "HostKeyAlgorithms ^ssh-ed25519" * ssh-keygen(1): add an experimental lightweight signature and verification ability. Signatures may be made using regular ssh keys held on disk or stored in a ssh-agent and verified against an authorized_keys-like list of allowed keys. Signatures embed a namespace that prevents confusion and attacks between different usage domains (e.g. files vs email). * ssh-keygen(1): print key comment when extracting public key from a private key. * ssh-keygen(1): accept the verbose flag when searching for host keys in known hosts (i.e. "ssh-keygen -vF host") to print the matching host's random-art signature too. * All: support PKCS8 as an optional format for storage of private keys to disk. The OpenSSH native key format remains the default, but PKCS8 is a superior format to PEM if interoperability with non-OpenSSH software is required, as it may use a less insecure key derivation function than PEM's. - Additional changes from 8.0p1 release: * scp(1): Add "-T" flag to disable client-side filtering of server file list. * sshd(8): Remove support for obsolete "host/port" syntax. * ssh(1), ssh-agent(1), ssh-add(1): Add support for ECDSA keys in PKCS#11 tokens. * ssh(1), sshd(8): Add experimental quantum-computing resistant key exchange method, based on a combination of Streamlined NTRU Prime 4591^761 and X25519. * ssh-keygen(1): Increase the default RSA key size to 3072 bits, following NIST Special Publication 800-57's guidance for a 128-bit equivalent symmetric security level. * ssh(1): Allow "PKCS11Provider=none" to override later instances of the PKCS11Provider directive in ssh_config, * sshd(8): Add a log message for situations where a connection is dropped for attempting to run a command but a sshd_config ForceCommand=internal-sftp restriction is in effect. * ssh(1): When prompting whether to record a new host key, accept the key fingerprint as a synonym for "yes". This allows the user to paste a fingerprint obtained out of band at the prompt and have the client do the comparison for you. * ssh-keygen(1): When signing multiple certificates on a single command-line invocation, allow automatically incrementing the certificate serial number. * scp(1), sftp(1): Accept -J option as an alias to ProxyJump on the scp and sftp command-lines. * ssh-agent(1), ssh-pkcs11-helper(8), ssh-add(1): Accept "-v" command-line flags to increase the verbosity of output; pass verbose flags though to subprocesses, such as ssh-pkcs11-helper started from ssh-agent. * ssh-add(1): Add a "-T" option to allowing testing whether keys in an agent are usable by performing a signature and a verification. * sftp-server(8): Add a "lsetstat(a)openssh.com" protocol extension that replicates the functionality of the existing SSH2_FXP_SETSTAT operation but does not follow symlinks. * sftp(1): Add "-h" flag to chown/chgrp/chmod commands to request they do not follow symlinks. * sshd(8): Expose $SSH_CONNECTION in the PAM environment. This makes the connection 4-tuple available to PAM modules that wish to use it in decision-making. * sshd(8): Add a ssh_config "Match final" predicate Matches in same pass as "Match canonical" but doesn't require hostname canonicalisation be enabled. * sftp(1): Support a prefix of '@' to suppress echo of sftp batch commands. * ssh-keygen(1): When printing certificate contents using "ssh-keygen -Lf /path/certificate", include the algorithm that the CA used to sign the cert. - Rebased patches: * openssh-7.7p1-IPv6_X_forwarding.patch * openssh-7.7p1-X_forward_with_disabled_ipv6.patch * openssh-7.7p1-cavstest-ctr.patch * openssh-7.7p1-cavstest-kdf.patch * openssh-7.7p1-disable_openssl_abi_check.patch * openssh-7.7p1-fips.patch * openssh-7.7p1-fips_checks.patch * openssh-7.7p1-hostname_changes_when_forwarding_X.patch * openssh-7.7p1-ldap.patch * openssh-7.7p1-seed-prng.patch * openssh-7.7p1-sftp_force_permissions.patch * openssh-7.7p1-sftp_print_diagnostic_messages.patch * openssh-8.0p1-gssapi-keyex.patch (formerly openssh-7.7p1-gssapi_key_exchange.patch) * openssh-8.1p1-audit.patch (formerly openssh-7.7p1-audit.patch) - Removed patches (integrated upstream): * 0001-upstream-Fix-two-race-conditions-in-sshd-relating-to.patch * openssh-7.7p1-seccomp_ioctl_s390_EP11.patch * openssh-7.9p1-CVE-2018-20685.patch * openssh-7.9p1-brace-expansion.patch * openssh-CVE-2019-6109-force-progressmeter-update.patch * openssh-CVE-2019-6109-sanitize-scp-filenames.patch * openssh-CVE-2019-6111-scp-client-wildcard.patch - Removed patches (obsolete): * openssh-openssl-1_0_0-compatibility.patch ==== slirp4netns ==== Version update (0.4.1 -> 0.4.2) - Update to 0.4.2 * Do not propagate mounts to the parent ns in sandbox ==== talloc ==== - Add two patches making build compatible with Python 3.8.0: - waf_upgrade.patch - waf_use_native_waf_timer.patch ==== texinfo ==== - Delete info-dir as not required anymore - Mark /usr/share/info/dir as %ghost - Add a rpmlintrc file to silent useless warnings ==== vim ==== Subpackages: vim-data-common - Add python38-config.patch to make vim buildable with new Python 3.8. (gh#vim/vim#4080) ==== zlib ==== - Add SUSE specific patch to fix bsc#1138793, we simply don't want to test if the app was linked with exactly same version of zlib like the one that is present on the runtime: * zlib-no-version-check.patch -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191025 released!
by Richard Brown 28 Oct '19

28 Oct '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: bash chrony (3.4 -> 3.5) cloud-init dhcp file ncurses openssh (7.9p1 -> 8.1p1) slirp4netns (0.4.1 -> 0.4.2) talloc texinfo vim zlib === Details === ==== bash ==== - Remove PILOTPORT and PILOTRATE environment variable from default ~/.bashrc (/etc/skel/.bashrc) (bsc#1123510) - Move definitions of environment variables from ~/.bashrc to ~/.profile (/etc/skel/.profile) ==== chrony ==== Version update (3.4 -> 3.5) - Fix asciidoc in Tumbleweed - Revert clknetsim to version 58c5e8b - Fix incorrect download link for package signature - Temporarily disable signature usage as its expired - Update clknetsim to version ac3c832 - fix chrony-service-helper.patch - Update to 3.5: + Add support for more accurate reading of PHC on Linux 5.0 + Add support for hardware timestamping on interfaces with read-only timestamping configuration + Add support for memory locking and real-time priority on FreeBSD, NetBSD, Solaris + Update seccomp filter to work on more architectures + Validate refclock driver options + Fix bindaddress directive on FreeBSD + Fix transposition of hardware RX timestamp on Linux 4.13 and later + Fix building on non-glibc systems ==== cloud-init ==== - Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988) + Short curcuit the conditional for identifying the sysconfig renderer. If we find ifup/ifdown accept the renderer as available. - Add cloud-init-break-resolv-symlink.patch (bsc#1151488) + If /etc/resolv.conf is a symlink break it. This will avoid netconfig from clobbering the changes cloud-init applied. ==== dhcp ==== Subpackages: dhcp-client - bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch: DHCPv6 server crashes regularly. - Add compile option --enable-secs-byteorder to avoid duplicate lease warnings [bsc#1089524]. - Make systemd a weak dependency as we don't want that in a container - bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and dhcrelay6 (0021-dhcp-ip-family-symlinks.patch). ==== file ==== Subpackages: file-magic libmagic1 - Add temporary patch CVE-2019-18218-46a8443f.patch from upstream to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c - Let python-magic build with latest rpm ==== ncurses ==== Subpackages: libncurses6 ncurses-utils terminfo terminfo-base - Add ncurses patch 20191019 + modify make_hash to not require --disable-leaks, to simplify building with address-sanitizer. + modify tic to exit if it cannot remove a conflicting name, because treating that as a partial success can cause an infinite loop in use-resolution (report/testcase by Hongxu Chen, cf: 20111001). - Add ncurses patch 20191015 + improve buffer-checks in captoinfo.c, for some cases when the input string is shorter than expected. > fix two errata in tic (report/testcases by Hongxu Chen): + check for missing character after backslash in write_it + check for missing characters after "%>" when converting from termcap syntax (cf: 980530). - Avoid recursion trouble in spec file cause by undefined _lto_cflags - Add ncurses patch 20191012 + amend recent changes to ncurses*-config and pc-files to filter out Debian linker-flags (report by Sven Joachim, cf: 20150516). + clarify relationship between tic, infocmp and captoinfo in manpage. + check for invalid hashcode in _nc_find_type_entry and _nc_find_name_entry. > fix several errata in tic (reports/testcases by "zjuchenyuan"): + check for invalid hashcode in _nc_find_entry. + check for missing character after backslash in fmt_entry + check for acsc with odd length in dump_entry in check for one-one mapping (cf: 20060415); + check length when converting from old AIX box_chars_1 capability, overlooked in changes to eliminate strcpy (cf: 20001007). - Add ncurses patch 20191005 + modify the ncurse*-config and pc-files to more closely match for the - I and -l options. ==== openssh ==== Version update (7.9p1 -> 8.1p1) - Add openssh-7.9p1-keygen-preserve-perms.patch (bsc#1150574). This attempts to preserve the permissions of any existing known_hosts file when modified by ssh-keygen (for instance, with -R). - Add patch from upstream openssh-7.9p1-revert-new-qos-defaults.patch - Run 'ssh-keygen -A' on startup only if SSHD_AUTO_KEYGEN="yes" in /etc/sysconfig/ssh. This is set to "yes" by default, but can be changed by the system administrator (bsc#1139089). - Add openssh-7.9p1-keygen-preserve-perms.patch (bsc#1150574). This attempts to preserve the permissions of any existing known_hosts file when modified by ssh-keygen (for instance, with -R). - Version update to 8.1p1: * ssh-keygen(1): when acting as a CA and signing certificates with an RSA key, default to using the rsa-sha2-512 signature algorithm. Certificates signed by RSA keys will therefore be incompatible with OpenSSH versions prior to 7.2 unless the default is overridden (using "ssh-keygen -t ssh-rsa -s ..."). * ssh(1): Allow %n to be expanded in ProxyCommand strings * ssh(1), sshd(8): Allow prepending a list of algorithms to the default set by starting the list with the '^' character, E.g. "HostKeyAlgorithms ^ssh-ed25519" * ssh-keygen(1): add an experimental lightweight signature and verification ability. Signatures may be made using regular ssh keys held on disk or stored in a ssh-agent and verified against an authorized_keys-like list of allowed keys. Signatures embed a namespace that prevents confusion and attacks between different usage domains (e.g. files vs email). * ssh-keygen(1): print key comment when extracting public key from a private key. * ssh-keygen(1): accept the verbose flag when searching for host keys in known hosts (i.e. "ssh-keygen -vF host") to print the matching host's random-art signature too. * All: support PKCS8 as an optional format for storage of private keys to disk. The OpenSSH native key format remains the default, but PKCS8 is a superior format to PEM if interoperability with non-OpenSSH software is required, as it may use a less insecure key derivation function than PEM's. - Additional changes from 8.0p1 release: * scp(1): Add "-T" flag to disable client-side filtering of server file list. * sshd(8): Remove support for obsolete "host/port" syntax. * ssh(1), ssh-agent(1), ssh-add(1): Add support for ECDSA keys in PKCS#11 tokens. * ssh(1), sshd(8): Add experimental quantum-computing resistant key exchange method, based on a combination of Streamlined NTRU Prime 4591^761 and X25519. * ssh-keygen(1): Increase the default RSA key size to 3072 bits, following NIST Special Publication 800-57's guidance for a 128-bit equivalent symmetric security level. * ssh(1): Allow "PKCS11Provider=none" to override later instances of the PKCS11Provider directive in ssh_config, * sshd(8): Add a log message for situations where a connection is dropped for attempting to run a command but a sshd_config ForceCommand=internal-sftp restriction is in effect. * ssh(1): When prompting whether to record a new host key, accept the key fingerprint as a synonym for "yes". This allows the user to paste a fingerprint obtained out of band at the prompt and have the client do the comparison for you. * ssh-keygen(1): When signing multiple certificates on a single command-line invocation, allow automatically incrementing the certificate serial number. * scp(1), sftp(1): Accept -J option as an alias to ProxyJump on the scp and sftp command-lines. * ssh-agent(1), ssh-pkcs11-helper(8), ssh-add(1): Accept "-v" command-line flags to increase the verbosity of output; pass verbose flags though to subprocesses, such as ssh-pkcs11-helper started from ssh-agent. * ssh-add(1): Add a "-T" option to allowing testing whether keys in an agent are usable by performing a signature and a verification. * sftp-server(8): Add a "lsetstat(a)openssh.com" protocol extension that replicates the functionality of the existing SSH2_FXP_SETSTAT operation but does not follow symlinks. * sftp(1): Add "-h" flag to chown/chgrp/chmod commands to request they do not follow symlinks. * sshd(8): Expose $SSH_CONNECTION in the PAM environment. This makes the connection 4-tuple available to PAM modules that wish to use it in decision-making. * sshd(8): Add a ssh_config "Match final" predicate Matches in same pass as "Match canonical" but doesn't require hostname canonicalisation be enabled. * sftp(1): Support a prefix of '@' to suppress echo of sftp batch commands. * ssh-keygen(1): When printing certificate contents using "ssh-keygen -Lf /path/certificate", include the algorithm that the CA used to sign the cert. - Rebased patches: * openssh-7.7p1-IPv6_X_forwarding.patch * openssh-7.7p1-X_forward_with_disabled_ipv6.patch * openssh-7.7p1-cavstest-ctr.patch * openssh-7.7p1-cavstest-kdf.patch * openssh-7.7p1-disable_openssl_abi_check.patch * openssh-7.7p1-fips.patch * openssh-7.7p1-fips_checks.patch * openssh-7.7p1-hostname_changes_when_forwarding_X.patch * openssh-7.7p1-ldap.patch * openssh-7.7p1-seed-prng.patch * openssh-7.7p1-sftp_force_permissions.patch * openssh-7.7p1-sftp_print_diagnostic_messages.patch * openssh-8.0p1-gssapi-keyex.patch (formerly openssh-7.7p1-gssapi_key_exchange.patch) * openssh-8.1p1-audit.patch (formerly openssh-7.7p1-audit.patch) - Removed patches (integrated upstream): * 0001-upstream-Fix-two-race-conditions-in-sshd-relating-to.patch * openssh-7.7p1-seccomp_ioctl_s390_EP11.patch * openssh-7.9p1-CVE-2018-20685.patch * openssh-7.9p1-brace-expansion.patch * openssh-CVE-2019-6109-force-progressmeter-update.patch * openssh-CVE-2019-6109-sanitize-scp-filenames.patch * openssh-CVE-2019-6111-scp-client-wildcard.patch - Removed patches (obsolete): * openssh-openssl-1_0_0-compatibility.patch ==== slirp4netns ==== Version update (0.4.1 -> 0.4.2) - Update to 0.4.2 * Do not propagate mounts to the parent ns in sandbox ==== talloc ==== - Add two patches making build compatible with Python 3.8.0: - waf_upgrade.patch - waf_use_native_waf_timer.patch ==== texinfo ==== - Delete info-dir as not required anymore - Mark /usr/share/info/dir as %ghost - Add a rpmlintrc file to silent useless warnings ==== vim ==== Subpackages: vim-data-common - Add python38-config.patch to make vim buildable with new Python 3.8. (gh#vim/vim#4080) ==== zlib ==== - Add SUSE specific patch to fix bsc#1138793, we simply don't want to test if the app was linked with exactly same version of zlib like the one that is present on the runtime: * zlib-no-version-check.patch -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20191024 released!
by Richard Brown 27 Oct '19

27 Oct '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: kernel-source (5.3.6 -> 5.3.7) === Details === ==== kernel-source ==== Version update (5.3.6 -> 5.3.7) - Linux 5.3.7 (bnc#1151927). - efi/tpm: Fix sanity check of unsigned tbl_size being less than zero (bnc#1151927). - io_uring: only flush workqueues on fileset removal (bnc#1151927). - x86/asm: Fix MWAITX C-state hint value (bnc#1151927). - mtd: rawnand: au1550nd: Fix au_read_buf16() prototype (bnc#1151927). - hwmon: Fix HWMON_P_MIN_ALARM mask (bnc#1151927). - tracing: Get trace_array reference for available_tracers files (bnc#1151927). - ftrace: Get a reference counter for the trace_array on filter files (bnc#1151927). - tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency (bnc#1151927). - tracing/hwlat: Report total time spent in all NMIs during the sample (bnc#1151927). - arm64/sve: Fix wrong free for task->thread.sve_state (bnc#1151927). - media: stkwebcam: fix runtime PM after driver unbind (bnc#1151927). - drm/msm: Use the correct dma_sync calls harder (bnc#1151927). - drm/i915: Mark contents as dirty on a write fault (bnc#1151927). - drm/i915: Whitelist COMMON_SLICE_CHICKEN2 (bnc#1151927). - drm/i915: Bump skl+ max plane width to 5k for linear/x-tiled (bnc#1151927). - Fix the locking in dcache_readdir() and friends (bnc#1151927). - iio: light: fix vcnl4000 devicetree hooks (bnc#1151927). - arm64: topology: Use PPTT to determine if PE is a thread (bnc#1151927). - ACPI/PPTT: Add support for ACPI 6.3 thread flag (bnc#1151927). - RDMA/vmw_pvrdma: Free SRQ only once (bnc#1151927). - MIPS: elf_hwcap: Export userspace ASEs (bnc#1151927). - MIPS: Disable Loongson MMI instructions for kernel build (bnc#1151927). - NFS: Fix O_DIRECT accounting of number of bytes read/written (bnc#1151927). - btrfs: fix uninitialized ret in ref-verify (bnc#1151927). - btrfs: fix incorrect updating of log root tree (bnc#1151927). - Btrfs: fix memory leak due to concurrent append writes with fiemap (bnc#1151927). - btrfs: fix balance convert to single on 32-bit host CPUs (bnc#1151927). - btrfs: allocate new inode in NOFS context (bnc#1151927). - btrfs: relocation: fix use-after-free on dead relocation roots (bnc#1151927). - gpiolib: don't clear FLAG_IS_OUT when emulating open-drain/open-source (bnc#1151927). - gpio: fix getting nonexclusive gpiods from DT (bnc#1151927). - firmware: google: increment VPD key_len properly (bnc#1151927). - IB/core: Fix wrong iterating on ports (bnc#1151927). - mm/vmpressure.c: fix a signedness bug in vmpressure_register_event() (bnc#1151927). - mm/page_alloc.c: fix a crash in free_pages_prepare() (bnc#1151927). - mm/z3fold.c: claim page in the beginning of free (bnc#1151927). - kernel/sysctl.c: do not override max_threads provided by userspace (bnc#1151927). - cifs: use cifsInodeInfo->open_file_lock while iterating to avoid a panic (bnc#1151927). - CIFS: Force reval dentry if LOOKUP_REVAL flag is set (bnc#1151927). - CIFS: Force revalidate inode when dentry is stale (bnc#1151927). - CIFS: Gracefully handle QueryInfo errors during open (bnc#1151927). - selinux: fix context string corruption in convert_context() (bnc#1151927). - blk-wbt: fix performance regression in wbt scale_up/scale_down (bnc#1151927). - drm/i915: Perform GGTT restore much earlier during resume (bnc#1151927). - perf inject jit: Fix JIT_CODE_MOVE filename (bnc#1151927). - perf llvm: Don't access out-of-scope array (bnc#1151927). - efi/tpm: Only set 'efi_tpm_final_log_size' after successful event log parsing (bnc#1151927). - efi/tpm: Don't traverse an event log with no events (bnc#1151927). - efi/tpm: Don't access event->count when it isn't mapped (bnc#1151927). - efivar/ssdt: Don't iterate over EFI vars if no SSDT override was specified (bnc#1151927). - iio: accel: adxl372: Perform a reset at start up (bnc#1151927). - iio: accel: adxl372: Fix push to buffers lost samples (bnc#1151927). - iio: accel: adxl372: Fix/remove limitation for FIFO samples (bnc#1151927). - iio: light: add missing vcnl4040 of_compatible (bnc#1151927). - iio: light: opt3001: fix mutex unlock race (bnc#1151927). - iio: adc: stm32-adc: fix a race when using several adcs with dma and irq (bnc#1151927). - iio: adc: stm32-adc: move registers definitions (bnc#1151927). - iio: adc: axp288: Override TS pin bias current for some models (bnc#1151927). - iio: adc: ad799x: fix probe error handling (bnc#1151927). - iio: adc: hx711: fix bug in sampling of data (bnc#1151927). - staging: vt6655: Fix memory leak in vt6655_probe (bnc#1151927). - staging: rtl8188eu: fix HighestRate check in odm_ARFBRefresh_8188E() (bnc#1151927). - Staging: fbtft: fix memory leak in fbtft_framebuffer_alloc (bnc#1151927). - staging: bcm2835-audio: Fix draining behavior regression (bnc#1151927). - staging/fbtft: Depend on OF (bnc#1151927). - gpio: eic: sprd: Fix the incorrect EIC offset when toggling (bnc#1151927). - mei: avoid FW version request on Ibex Peak and earlier (bnc#1151927). - mei: me: add comet point (lake) LP device ids (bnc#1151927). - USB: legousbtower: fix use-after-free on release (bnc#1151927). - USB: legousbtower: fix open after failed reset request (bnc#1151927). - USB: legousbtower: fix potential NULL-deref on disconnect (bnc#1151927). - USB: legousbtower: fix deadlock on disconnect (bnc#1151927). - USB: legousbtower: fix slab info leak at probe (bnc#1151927). - usb: typec: ucsi: displayport: Fix for the mode entering routine (bnc#1151927). - usb: typec: ucsi: ccg: Remove run_isr flag (bnc#1151927). - usb: typec: tcpm: usb: typec: tcpm: Fix a signedness bug in tcpm_fw_get_caps() (bnc#1151927). - usb: renesas_usbhs: gadget: Fix usb_ep_set_{halt,wedge}() behavior (bnc#1151927). - usb: renesas_usbhs: gadget: Do not discard queues in usb_ep_set_{halt,wedge}() (bnc#1151927). - USB: dummy-hcd: fix power budget for SuperSpeed mode (bnc#1151927). - USB: microtek: fix info-leak at probe (bnc#1151927). - USB: usblcd: fix I/O after disconnect (bnc#1151927). - USB: serial: fix runtime PM after driver unbind (bnc#1151927). - USB: serial: option: add support for Cinterion CLS8 devices (bnc#1151927). - USB: serial: option: add Telit FN980 compositions (bnc#1151927). - USB: serial: ftdi_sio: add device IDs for Sienna and Echelon PL-20 (bnc#1151927). - USB: serial: keyspan: fix NULL-derefs on open() and write() (bnc#1151927). - serial: uartps: Fix uartps_major handling (bnc#1151927). - serial: uartlite: fix exit path null pointer (bnc#1151927). - USB: ldusb: fix NULL-derefs on driver unbind (bnc#1151927). - USB: chaoskey: fix use-after-free on release (bnc#1151927). - USB: usblp: fix runtime PM after driver unbind (bnc#1151927). - USB: iowarrior: fix use-after-free after driver unbind (bnc#1151927). - USB: iowarrior: fix use-after-free on release (bnc#1151927). - USB: iowarrior: fix use-after-free on disconnect (bnc#1151927). - USB: adutux: fix use-after-free on release (bnc#1151927). - USB: adutux: fix NULL-derefs on disconnect (bnc#1151927). - USB: adutux: fix use-after-free on disconnect (bnc#1151927). - xhci: Fix NULL pointer dereference in xhci_clear_tt_buffer_complete() (bnc#1151927). - xhci: Increase STS_SAVE timeout in xhci_suspend() (bnc#1151927). - xhci: Prevent deadlock when xhci adapter breaks during init (bnc#1151927). - usb: xhci: wait for CNR controller not ready bit in xhci resume (bnc#1151927). - xhci: Fix USB 3.1 capability detection on early xHCI 1.1 spec based hosts (bnc#1151927). - xhci: Check all endpoints for LPM timeout (bnc#1151927). - xhci: Prevent device initiated U1/U2 link pm if exit latency is too long (bnc#1151927). - xhci: Fix false warning message about wrong bounce buffer write length (bnc#1151927). - USB: usb-skeleton: fix NULL-deref on disconnect (bnc#1151927). - USB: usb-skeleton: fix runtime PM after driver unbind (bnc#1151927). - USB: yurex: fix NULL-derefs on disconnect (bnc#1151927). - USB: yurex: Don't retry on unexpected errors (bnc#1151927). - USB: rio500: Remove Rio 500 kernel driver (bnc#1151927). - panic: ensure preemption is disabled during panic() (bnc#1151927). - commit f52c7f6 - Revert "drm/i915/bios: make child device order the priority order" (bnc#1152971 fdo#112028). - commit 3eea5a9 - Update patches.kernel.org/5.3.4-063-sched-core-Fix-CPU-controller-for-RT_GROUP_SCH… (bnc#1151927 bnc#1135646). Add a bnc ref. - commit d6c109d - Update config files. Disable CONFIG_RT_GROUP_SCHED again (bnc#950955 bnc#1153228). - commit a55f3f6 - Update config files. Just refresh (RTC_DRV_BD70528 dismissed). - commit 418ca4c -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191024 released!
by Richard Brown 27 Oct '19

27 Oct '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: kernel-source (5.3.6 -> 5.3.7) === Details === ==== kernel-source ==== Version update (5.3.6 -> 5.3.7) - Linux 5.3.7 (bnc#1151927). - efi/tpm: Fix sanity check of unsigned tbl_size being less than zero (bnc#1151927). - io_uring: only flush workqueues on fileset removal (bnc#1151927). - x86/asm: Fix MWAITX C-state hint value (bnc#1151927). - mtd: rawnand: au1550nd: Fix au_read_buf16() prototype (bnc#1151927). - hwmon: Fix HWMON_P_MIN_ALARM mask (bnc#1151927). - tracing: Get trace_array reference for available_tracers files (bnc#1151927). - ftrace: Get a reference counter for the trace_array on filter files (bnc#1151927). - tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency (bnc#1151927). - tracing/hwlat: Report total time spent in all NMIs during the sample (bnc#1151927). - arm64/sve: Fix wrong free for task->thread.sve_state (bnc#1151927). - media: stkwebcam: fix runtime PM after driver unbind (bnc#1151927). - drm/msm: Use the correct dma_sync calls harder (bnc#1151927). - drm/i915: Mark contents as dirty on a write fault (bnc#1151927). - drm/i915: Whitelist COMMON_SLICE_CHICKEN2 (bnc#1151927). - drm/i915: Bump skl+ max plane width to 5k for linear/x-tiled (bnc#1151927). - Fix the locking in dcache_readdir() and friends (bnc#1151927). - iio: light: fix vcnl4000 devicetree hooks (bnc#1151927). - arm64: topology: Use PPTT to determine if PE is a thread (bnc#1151927). - ACPI/PPTT: Add support for ACPI 6.3 thread flag (bnc#1151927). - RDMA/vmw_pvrdma: Free SRQ only once (bnc#1151927). - MIPS: elf_hwcap: Export userspace ASEs (bnc#1151927). - MIPS: Disable Loongson MMI instructions for kernel build (bnc#1151927). - NFS: Fix O_DIRECT accounting of number of bytes read/written (bnc#1151927). - btrfs: fix uninitialized ret in ref-verify (bnc#1151927). - btrfs: fix incorrect updating of log root tree (bnc#1151927). - Btrfs: fix memory leak due to concurrent append writes with fiemap (bnc#1151927). - btrfs: fix balance convert to single on 32-bit host CPUs (bnc#1151927). - btrfs: allocate new inode in NOFS context (bnc#1151927). - btrfs: relocation: fix use-after-free on dead relocation roots (bnc#1151927). - gpiolib: don't clear FLAG_IS_OUT when emulating open-drain/open-source (bnc#1151927). - gpio: fix getting nonexclusive gpiods from DT (bnc#1151927). - firmware: google: increment VPD key_len properly (bnc#1151927). - IB/core: Fix wrong iterating on ports (bnc#1151927). - mm/vmpressure.c: fix a signedness bug in vmpressure_register_event() (bnc#1151927). - mm/page_alloc.c: fix a crash in free_pages_prepare() (bnc#1151927). - mm/z3fold.c: claim page in the beginning of free (bnc#1151927). - kernel/sysctl.c: do not override max_threads provided by userspace (bnc#1151927). - cifs: use cifsInodeInfo->open_file_lock while iterating to avoid a panic (bnc#1151927). - CIFS: Force reval dentry if LOOKUP_REVAL flag is set (bnc#1151927). - CIFS: Force revalidate inode when dentry is stale (bnc#1151927). - CIFS: Gracefully handle QueryInfo errors during open (bnc#1151927). - selinux: fix context string corruption in convert_context() (bnc#1151927). - blk-wbt: fix performance regression in wbt scale_up/scale_down (bnc#1151927). - drm/i915: Perform GGTT restore much earlier during resume (bnc#1151927). - perf inject jit: Fix JIT_CODE_MOVE filename (bnc#1151927). - perf llvm: Don't access out-of-scope array (bnc#1151927). - efi/tpm: Only set 'efi_tpm_final_log_size' after successful event log parsing (bnc#1151927). - efi/tpm: Don't traverse an event log with no events (bnc#1151927). - efi/tpm: Don't access event->count when it isn't mapped (bnc#1151927). - efivar/ssdt: Don't iterate over EFI vars if no SSDT override was specified (bnc#1151927). - iio: accel: adxl372: Perform a reset at start up (bnc#1151927). - iio: accel: adxl372: Fix push to buffers lost samples (bnc#1151927). - iio: accel: adxl372: Fix/remove limitation for FIFO samples (bnc#1151927). - iio: light: add missing vcnl4040 of_compatible (bnc#1151927). - iio: light: opt3001: fix mutex unlock race (bnc#1151927). - iio: adc: stm32-adc: fix a race when using several adcs with dma and irq (bnc#1151927). - iio: adc: stm32-adc: move registers definitions (bnc#1151927). - iio: adc: axp288: Override TS pin bias current for some models (bnc#1151927). - iio: adc: ad799x: fix probe error handling (bnc#1151927). - iio: adc: hx711: fix bug in sampling of data (bnc#1151927). - staging: vt6655: Fix memory leak in vt6655_probe (bnc#1151927). - staging: rtl8188eu: fix HighestRate check in odm_ARFBRefresh_8188E() (bnc#1151927). - Staging: fbtft: fix memory leak in fbtft_framebuffer_alloc (bnc#1151927). - staging: bcm2835-audio: Fix draining behavior regression (bnc#1151927). - staging/fbtft: Depend on OF (bnc#1151927). - gpio: eic: sprd: Fix the incorrect EIC offset when toggling (bnc#1151927). - mei: avoid FW version request on Ibex Peak and earlier (bnc#1151927). - mei: me: add comet point (lake) LP device ids (bnc#1151927). - USB: legousbtower: fix use-after-free on release (bnc#1151927). - USB: legousbtower: fix open after failed reset request (bnc#1151927). - USB: legousbtower: fix potential NULL-deref on disconnect (bnc#1151927). - USB: legousbtower: fix deadlock on disconnect (bnc#1151927). - USB: legousbtower: fix slab info leak at probe (bnc#1151927). - usb: typec: ucsi: displayport: Fix for the mode entering routine (bnc#1151927). - usb: typec: ucsi: ccg: Remove run_isr flag (bnc#1151927). - usb: typec: tcpm: usb: typec: tcpm: Fix a signedness bug in tcpm_fw_get_caps() (bnc#1151927). - usb: renesas_usbhs: gadget: Fix usb_ep_set_{halt,wedge}() behavior (bnc#1151927). - usb: renesas_usbhs: gadget: Do not discard queues in usb_ep_set_{halt,wedge}() (bnc#1151927). - USB: dummy-hcd: fix power budget for SuperSpeed mode (bnc#1151927). - USB: microtek: fix info-leak at probe (bnc#1151927). - USB: usblcd: fix I/O after disconnect (bnc#1151927). - USB: serial: fix runtime PM after driver unbind (bnc#1151927). - USB: serial: option: add support for Cinterion CLS8 devices (bnc#1151927). - USB: serial: option: add Telit FN980 compositions (bnc#1151927). - USB: serial: ftdi_sio: add device IDs for Sienna and Echelon PL-20 (bnc#1151927). - USB: serial: keyspan: fix NULL-derefs on open() and write() (bnc#1151927). - serial: uartps: Fix uartps_major handling (bnc#1151927). - serial: uartlite: fix exit path null pointer (bnc#1151927). - USB: ldusb: fix NULL-derefs on driver unbind (bnc#1151927). - USB: chaoskey: fix use-after-free on release (bnc#1151927). - USB: usblp: fix runtime PM after driver unbind (bnc#1151927). - USB: iowarrior: fix use-after-free after driver unbind (bnc#1151927). - USB: iowarrior: fix use-after-free on release (bnc#1151927). - USB: iowarrior: fix use-after-free on disconnect (bnc#1151927). - USB: adutux: fix use-after-free on release (bnc#1151927). - USB: adutux: fix NULL-derefs on disconnect (bnc#1151927). - USB: adutux: fix use-after-free on disconnect (bnc#1151927). - xhci: Fix NULL pointer dereference in xhci_clear_tt_buffer_complete() (bnc#1151927). - xhci: Increase STS_SAVE timeout in xhci_suspend() (bnc#1151927). - xhci: Prevent deadlock when xhci adapter breaks during init (bnc#1151927). - usb: xhci: wait for CNR controller not ready bit in xhci resume (bnc#1151927). - xhci: Fix USB 3.1 capability detection on early xHCI 1.1 spec based hosts (bnc#1151927). - xhci: Check all endpoints for LPM timeout (bnc#1151927). - xhci: Prevent device initiated U1/U2 link pm if exit latency is too long (bnc#1151927). - xhci: Fix false warning message about wrong bounce buffer write length (bnc#1151927). - USB: usb-skeleton: fix NULL-deref on disconnect (bnc#1151927). - USB: usb-skeleton: fix runtime PM after driver unbind (bnc#1151927). - USB: yurex: fix NULL-derefs on disconnect (bnc#1151927). - USB: yurex: Don't retry on unexpected errors (bnc#1151927). - USB: rio500: Remove Rio 500 kernel driver (bnc#1151927). - panic: ensure preemption is disabled during panic() (bnc#1151927). - commit f52c7f6 - Revert "drm/i915/bios: make child device order the priority order" (bnc#1152971 fdo#112028). - commit 3eea5a9 - Update patches.kernel.org/5.3.4-063-sched-core-Fix-CPU-controller-for-RT_GROUP_SCH… (bnc#1151927 bnc#1135646). Add a bnc ref. - commit d6c109d - Update config files. Disable CONFIG_RT_GROUP_SCHED again (bnc#950955 bnc#1153228). - commit a55f3f6 - Update config files. Just refresh (RTC_DRV_BD70528 dismissed). - commit 418ca4c -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20191023 released!
by Richard Brown 25 Oct '19

25 Oct '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: btrfsprogs gpgme libcontainers-common podman (1.5.1 -> 1.6.1) systemd === Details === ==== btrfsprogs ==== Subpackages: btrfsprogs-udev-rules libbtrfs0 - Enable build of python-bindings for libbtrfsutil ==== gpgme ==== - Build qt bindings separately to avoid build cycle with samba/libsoup. ==== libcontainers-common ==== - Update to image 4.0.0 - Add http response to log - Add tests for parsing OpenShift kubeconfig files - Compress: define some consts for the compression algos - Compression: add support for the zstd - Compression: allow to specify the compression format - Copy: add nil checks - Copy: compression: default to gzip - Copy: don't lose annotations of BlobInfo - Copy: fix options.DestinationCtx nil check - Copy: use a bigger buffer for the compression - Fix cross-compilation by vendoring latest c/storage - Internal/testing/explicitfilepath-tmpdir: handle unset TMPDIR - Keyctl: clean up after tests - Make container tools work with go+openssl - Make test-skopeo: replace c/image module instead of copying code - Media type checks - Move keyctl to internal & func remove auth from keyring - Replace vendor.conf by go.mod - Update dependencies - Update test certificates - Update to mergo v0.3.5 - Vendor.conf: update reference for containers/storage - Update to storage 1.13.4 - Update generated files - ImageBigData: distinguish between no-such-image and no-such-item - ImageSize: don't get tripped up by images with no layers - tarlogger: disable raw accouting - Update to libpod 1.6.0 - Nothing changed regarding the OCI hooks documentation provided by this package ==== podman ==== Version update (1.5.1 -> 1.6.1) Subpackages: podman-cni-config - Update podman to v1.6.1 * Features - The podman network create, podman network rm, podman network inspect, and podman network ls commands have been added to manage CNI networks used by Podman - The podman volume create command can now create and mount volumes with options, allowing volumes backed by NFS, tmpfs, and many other filesystems - Podman can now run containers without CGroups for better integration with systemd by using the --cgroups=disabled flag with podman create and podman run. This is presently only supported with the crun OCI runtime - The podman volume rm and podman volume inspect commands can now refer to volumes by an unambiguous partial name, in addition to full name (e.g. podman volume rm myvol to remove a volume named myvolume) (#3891) - The podman run and podman create commands now support the - -pull flag to allow forced re-pulling of images (#3734) - Mounting volumes into a container using --volume, --mount, and - -tmpfs now allows the suid, dev, and exec mount options (the inverse of nosuid, nodev, noexec) (#3819) - Mounting volumes into a container using --mount now allows the relabel=Z and relabel=z options to relabel mounts. - The podman push command now supports the --digestfile option to save a file containing the pushed digest - Pods can now have their hostname set via podman pod create - -hostname or providing Pod YAML with a hostname set to podman play kube (#3732) - The podman image sign command now supports the --cert-dir flag - The podman run and podman create commands now support the - -security-opt label=filetype:$LABEL flag to set the SELinux label for container files - The remote Podman client now supports healthchecks * Bugfixes - Fixed a bug where remote podman pull would panic if a Varlink connection was not available (#4013) - Fixed a bug where podman exec would not properly set terminal size when creating a new exec session (#3903) - Fixed a bug where podman exec would not clean up socket symlinks on the host (#3962) - Fixed a bug where Podman could not run systemd in containers that created a CGroup namespace - Fixed a bug where podman prune -a would attempt to prune images used by Buildah and CRI-O, causing errors (#3983) - Fixed a bug where improper permissions on the ~/.config directory could cause rootless Podman to use an incorrect directory for storing some files - Fixed a bug where the bash completions for podman import threw errors - Fixed a bug where Podman volumes created with podman volume create would not copy the contents of their mountpoint the first time they were mounted into a container (#3945) - Fixed a bug where rootless Podman could not run podman exec when the container was not run inside a CGroup owned by the user (#3937) - Fixed a bug where podman play kube would panic when given Pod YAML without a securityContext (#3956) - Fixed a bug where Podman would place files incorrectly when storage.conf configuration items were set to the empty string (#3952) - Fixed a bug where podman build did not correctly inherit Podman's CGroup configuration, causing crashed on CGroups V2 systems (#3938) - Fixed a bug where podman cp would improperly copy files on the host when copying a symlink in the container that included a glob operator (#3829) - Fixed a bug where remote podman run --rm would exit before the container was completely removed, allowing race conditions when removing container resources (#3870) - Fixed a bug where rootless Podman would not properly handle changes to /etc/subuid and /etc/subgid after a container was launched - Fixed a bug where rootless Podman could not include some devices in a container using the --device flag (#3905) - Fixed a bug where the commit Varlink API would segfault if provided incorrect arguments (#3897) - Fixed a bug where temporary files were not properly cleaned up after a build using remote Podman (#3869) - Fixed a bug where podman remote cp crashed instead of reporting it was not yet supported (#3861) - Fixed a bug where podman exec would run as the wrong user when execing into a container was started from an image with Dockerfile USER (or a user specified via podman run --user) (#3838) - Fixed a bug where images pulled using the oci: transport would be improperly named - Fixed a bug where podman varlink would hang when managed by systemd due to SD_NOTIFY support conflicting with Varlink (#3572) - Fixed a bug where mounts to the same destination would sometimes not trigger a conflict, causing a race as to which was actually mounted - Fixed a bug where podman exec --preserve-fds caused Podman to hang (#4020) - Fixed a bug where removing an unmounted container that was unmounted might sometimes not properly clean up the container (#4033) - Fixed a bug where the Varlink server would freeze when run in a systemd unit file (#4005) - Fixed a bug where Podman would not properly set the $HOME environment variable when the OCI runtime did not set it - Fixed a bug where rootless Podman would incorrectly print warning messages when an OCI runtime was not found (#4012) - Fixed a bug where named volumes would conflict with, instead of overriding, tmpfs filesystems added by the --read-only-tmpfs flag to podman create and podman run - Fixed a bug where podman cp would incorrectly make the target directory when copying to a symlink which pointed to a nonexistent directory (#3894) - Fixed a bug where remote Podman would incorrectly read STDIN when the -i flag was not set (#4095) - Fixed a bug where podman play kube would create an empty pod when given an unsupported YAML type (#4093) - Fixed a bug where podman import --change improperly parsed CMD (#4000) - Fixed a bug where rootless Podman on systems using CGroups V2 would not function with the cgroupfs CGroups manager - Fixed a bug where rootless Podman could not correctly identify the DBus session address, causing containers to fail to start (#4162) - Fixed a bug where rootless Podman with slirp4netns networking would fail to start containers due to mount leaks * Misc - Significant changes were made to Podman volumes in this release. If you have pre-existing volumes, it is strongly recommended to run podman system renumber after upgrading. - Version 0.8.1 or greater of the CNI Plugins is now required for Podman - Version 2.0.1 or greater of Conmon is strongly recommended - Updated vendored Buildah to v1.11.2 - Updated vendored containers/storage library to v1.13.4 - Improved error messages when trying to create a pod with no name via podman play kube - Improved error messages when trying to run podman pause or podman stats on a rootless container on a system without CGroups V2 enabled - TMPDIR has been set to /var/tmp by default to better handle large temporary files - podman wait has been optimized to detect stopped containers more rapidly - Podman containers now include a ContainerManager annotation indicating they were created by libpod - The podman info command now includes information about slirp4netns and fuse-overlayfs if they are available - Podman no longer sets a default size of 65kb for tmpfs filesystems - The default Podman CNI network has been renamed in an attempt to prevent conflicts with CRI-O when both are run on the same system. This should only take effect on system restart - The output of podman volume inspect has been more closely matched to docker volume inspect ==== systemd ==== Subpackages: libsystemd0 libudev1 systemd-logger systemd-sysvinit udev - Add 0001-compat-rules-escape-when-used-for-shell-expansion.patch (bsc#1153648) Added to the quaratine area to avoid uploading a new tar ball just for that single change. It will be dropped during the next import. - don't package locales in -mini package - Import commit 428b937f917ae177f2315e8469800941885e441a 0026b58744 pid1: fix DefaultTasksMax initialization - Import commit ed81f69153488279957268e247a5c81b678da491 (changes from v243-stable) fab6f010ac dhcp6: use unaligned_read_be32() f2d9af4322 dhcp6: add missing option length check ccf797511e ndisc: make first solicit delayed randomly f2275b6e12 dhcp6: read OPTION_INFORMATION_REFRESH_TIME option 6dfbe58ee7 l10n: update Czech Translation d4cd0e9d32 sd-radv: if lifetime < SD_RADV_DEFAULT_MAX_TIMEOUT_USEC, adjust timeout (#13491) dbefe59259 polkit: fix typo a321507476 sd-netlink: fix invalid assertion 45dca7fe86 network: do not enter failed state if device's sysfs entry does not exist yet dd83d58796 network: add missing link->network checks b294305888 path: stop watching path specs once we triggered the target unit 2cd636c437 hwdb: add Medion Akoya E2292 (#13498) d133bdd1fa po: update Brazilian Portuguese translation 530e09b594 po: update Polish translation 0c5c3e34c1 polkit: change "revert settings" to "reset settings" 73e0f372d8 man: fix description of ARPIntervalSec= units 5412cc54a1 hwdb: axis override for Dell 9360 touchpad 9d4e658529 test: drop the missed || exit 1 expression 7ed7ea82f6 udevadm: use usec_add() 477bf86c91 udevadm: missing initialization of descriptor 19ac31c989 networkd: unbreak routing_policy_rule_compare_func() a20a2157a8 core: coldplug possible nop_job eb55241742 tty-ask-pwd-agent: fix message forwarded to wall(1) 1a3c53c06c core: Fix setting StatusUnitFormat from config files 91db81e4dd network DHCP4: Dont mislead the logs. 6af590838b Update m4 for selective utmp support. modified: tmpfiles.d/systemd.conf.m4 6823c907cf core: restore initialization of u->source_mtime 29308bcc13 mount-setup: relabel items mentioned directly in relabel-extra.d 8ca1e56165 Call getgroups() to know size of supplementary groups array to allocate 5d84a7ad1c test: add test cases for empty string match 1536348cc8 udev: fix multi match 3ccafef0ad man: move TimeoutCleanSec= entry from .service to .exec 8c0c30a820 zsh: udpate bootctl completions 0556c247a2 resolved: fix abort when recv() returns 0 9a25d75520 man: remove repeated words be3be29347 hwdb: Also mark lis3lv02d sensors in "HP" laptops as being in the base 4b92ffccaa udev: also logs file permission 75a2845e5a udev: add missing flag for OPTIONS=static_node 19e9fc4262 network: do not abort execution when a config file cannot be loaded 3e1267cf50 fileio: update warning message 1b3156edd2 pstore: fix use after free f500d2fa81 journal: Make the output of --update-catalog deterministic 64d0f7042d travis: protect the systemd organization on Fuzzit from forks 4247938ee1 hwdb: Mark lis3lv02d sensors in HP laptops as being in the base 379158684a po: update Japanese translation 31e1bbd1ca docs: fix push recipe in RELEASE.md f06530d86b man/systemctl.xml: fix missing "not" 22aba2b969 docs: fix typo in boot loader doc 000e08ca70 pstore: fix typo in error message - directoy -> directory f7f9c69ac5 Fix typo in comment: overide -> override ca8ba8f8c0 po: update Polish translation -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191023 released!
by Richard Brown 25 Oct '19

25 Oct '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: btrfsprogs cilium (1.5.5 -> 1.6.3) cri-tools (1.15.0 -> 1.16.1) etcd (3.3.11 -> 3.3.15) flannel gpgme kubernetes (1.15.4 -> 1.16.2) libcontainers-common libevent podman (1.5.1 -> 1.6.1) systemd === Details === ==== btrfsprogs ==== Subpackages: btrfsprogs-udev-rules libbtrfs0 - Enable build of python-bindings for libbtrfsutil ==== cilium ==== Version update (1.5.5 -> 1.6.3) - Update to version 1.6.3: * Highlights * KVStore free operation * 100% Kube-proxy replacement * Socket-based load-balancing * Policy scalability improvements * Generic CNI chaining * Native AWS ENI mode * Key Fixes * Fix IP leak on main interface when using ENI IPAM * Fix deadlock caused by buffered channel being full when large amounts of local identities are allocated while FQDNSelectors are being updated * Minor Bug Fixes * Fix apiVersion in micropk8s Daemonset in microk8s-prepull.yml to apps/v1 * Do not try to delete CiliumEndpoint from K8s if name / namespace fields are empty * Configure sysctl if IPv6 is disabled for the health endpoint's device to have IPv6 disabled as well in order to avoid emitting IPv6 autoconf frames * Fix monitor reporting status to not show monitor as always being disabled * Fix sockops compilation / verification on newer LLVM versions * Ensure that unroutable packets are dropped as being unroutable when they are unroutable via cilium_host device * Fix bug where L7 wildcarding for policy was not occurring for CIDR-based policy rules * Enhancements * Populate source and destination ports for DNS records in the monitor * Backport of pkg/sysctl to make it easier to configure sysctl options * Support client certificate rotation in the etcd client * Encryption Fixes * Fix packet drops when using encryption by setting output-mark to use table 200 post-encryption and set different MTU for main/200 tables / not using policies/states for subnets * Dependencies * Update netlink library to get support for output-mark * Update golang version in Docker images to v1.12.10 * Always run update when building dependencies in Docker images * Bump K8s dependency to v1.16.1 * Bump golang.org/sys/unix library version * Documentation * Update supported Kubernetes versions * Update microk8s instructions to use cilium plugin to microk8s ==== cri-tools ==== Version update (1.15.0 -> 1.16.1) - Update to v1.16.1: * crictl: * Fix empty fields in crictl inspect(p/i) result. * Pass pod config when pulling image during container creation. * Fix crictl stats panic. * critest * Skip hostnetwork portforward test on windows. * Add hostname test. - Update to v1.16.0: * crictl: * Add container 'run' subcommand. * Pull image on container creation. * Treat first crictl stats argument as filter ID. * Add -a (remove all) option to rmp. * Create directory for config file. * Add container rm --force, -f and --all, -a flags. * Add images aliases image, img. * Add --all, -a flag to image removal (rmi). * Update Kubernetes vendors to 1.16.0 and add addiontion IPs for Pods. * critest: * Add registry prefix option. * Add test for MaskedPaths and ReadonlyPaths. * Switch to multi-arch nonewprivs image. * Use arch specific hostnet-nginx image. * Use a dedicated image for all reference test. * Use IsAppArmorEnabled of Kubernetes instead of local one. * Fix exec test timeout issues. ==== etcd ==== Version update (3.3.11 -> 3.3.15) - Update to version 3.3.15: * version: 3.3.15 * vendor: regenerate * go.mod: remove, change back to "glide" * version: 3.3.14 * Documentation/upgrades: special upgrade guides for >= 3.3.14 * version: 3.3.14-rc.0 * vendor: regenerate * go.mod: regenerate * gitignore: track vendor directory * *: test with Go 1.12.9 * version: 3.3.14-beta.0 * tests/e2e: add missing curl * e2e: move * test: do not run "v2store" tests * test: bump up timeout for e2e tests * travis: fix functional tests * functional: add back, travis * auth: fix tests * travis: do not run functional for now * travis: skip windows build * test: fix repo path * tests/e2e: fix * build: remove tools * integration: fix tests * integration: fix "HashKVRequest" * functional: update * travis.yml: fix, run e2e * integration: update * etcdserver: detect leader change on reads * clientv3: rewrite based on 3.4 * raft: fix compile error in "Panic" * pkg/*: add * etcdserver/api/v3rpc: support watch fragmentation * tests: update * *: regenerate proto * etcdserver/etcdserverpb/rpc.proto: add watch progress/fragment * vendor: regenerate, upgrade gRPC to 1.23.0 * go.mod: migrate to Go module * scripts: update release, genproto, dep * Makefile/build: sync with 3.4 branch * *: use new adt.IntervalTree interface * pkg/adt: remove TODO * pkg/adt: fix interval tree black-height property based on rbtree * pkg/adt: document textbook implementation with pseudo-code * pkg/adt: mask test failure, add TODO * pkg/adt: add "IntervalTree.Delete" failure case * pkg/adt: test node "11" deletion * pkg/adt: README "IntervalTree.Delete" test case images * pkg/adt: README initial commit * pkg/adt: add "visitLevel", make "IntervalTree" interface, more tests * pkg: clean up code format * travis: update * etcdserver: add "etcd_server_snapshot_apply_inflights_total" * etcdserver/api: add "etcd_network_snapshot_send_inflights_total", "etcd_network_snapshot_receive_inflights_total" * Raft HTTP: fix pause/resume race condition * ctlv3: add missing newline in EndpointHealth * ctlv3: support "write-out" for "endpoint health" command * etcd: Replace ghodss/yaml with sigs.k8s.io/yaml * version: bump up 3.3.13 * clientv3: fix race condition in "Endpoints" methods * etcdserver: improve heartbeat send failures logging * Documentation metadata for 3.3 branch (#10692) * vendor: add missing files * vendor: Run scripts/updatedeps.sh to cleanup unused code * client: Switch to case sensitive unmarshalling to be compatible with ugorji * *: update bill-of-materials * vendor: Add json-iterator and its dependencies * scripts: Remove generated code and script * client: Replace ugorji/codec with json-iterator/go * mvcc: fix db_compaction_total_duration_milliseconds * wal: Add test for Verify * wal: add Verify function to perform corruption check on wal contents * *: Change gRPC proxy to expose etcd server endpoint /metrics * travis: fix tests by using proper code path * etcdserver: Use panic instead of fatal on no space left error * raft: cherry pick of #8334 to release-3.3 * travis.yml: update Go 1.10.8 * version: 3.3.12 * etcdctl: fix strings.HasPrefix args order * version: 3.3.11+git ==== flannel ==== - It's apps/v1, not apps/v1beta1 - Fix some more typos - Fix typo in updated flannel manifest - Update flannel manifest to match upstream and support k8s 1.16 API ==== gpgme ==== - Build qt bindings separately to avoid build cycle with samba/libsoup. ==== kubernetes ==== Version update (1.15.4 -> 1.16.2) Subpackages: kubernetes-client kubernetes-kubeadm kubernetes-kubelet - Update to version 1.16.2: * apiextensions: npe panic in structural schema unfold * Fix dynamic kubelet config init order * Fixed bug in TopologyManager with SingleNUMANode Policy * Merge pull request #83102 from feiskyer/fix-too-many-calls * Address PR comment * Update service controller to prevent orphaned public IP addresses * Limit YAML/JSON decode size * bump gopkg.in/yaml.v2 v2.2.4 * Add/Update CHANGELOG-1.16.md for v1.16.1. * Kubernetes version v1.16.2-beta.0 openapi-spec file updates * Don't leak a go routine on panic * using online instead to fix kubelet service failed with wrong number of possible NUMA nodes * Update go mod hcsshim version to fix the kube-proxy issue cannot access service by self nodeip:port on windows - Update to version 1.16.1: * Deflake TestWatchBasedManager * Update to use go1.12.10 * remove apiserver loopback client QPS limit * Use ipv4 in wincat port forward * Update codegen violation rules * Update generated code * Add example3.io:v1 to update-codegen.sh * Add example3.io * informer-gen: allow package names containing dots * Update cluster autoscaler version to 1.16.1 * Fix ipv6 ip allocation method for standard lb * fix map assignment to entry in nil map,when use --feature-gates in kubeadm * Fix closing of dirs in doSafeMakeDir * Fixed a scheduler panic on PodAffinity * TokenCleaner#evalSecret should enqueue the key * Only set ipv4/ipv6 routes when there is corresponding CIDR. * Add/Update CHANGELOG-1.16.md for v1.16.0. * Kubernetes version v1.16.1-beta.0 openapi-spec file updates * expose and use an AddHealthChecks method directly on config * fix: azure disk detach failure if node not exists * Exec probes should not be unbounded * Add 16MB limit to dockershim ExecSync * Add LimitWriter util * Encryption config: correctly handle overlapping providers * Check cache is synced first before sleeping - Update to version 1.16.0: * Add/Update CHANGELOG-1.16.md for v1.16.0-rc.2. * fix kubelet status http calls with truncation * Expose etcd metric port in tests * Only publish openapi for structural schemas * Omit openapi properties if spec.preserveUnknownFields=true * Fix iptables version detection code to handle RHEL 7 correctly * Propagate and honor http.ErrAbortHandler * Updated stripFieldsTest to be run with update instead of apply * Moved managed fields validation to server-side apply * Apply will fail with managed fields + tests * Regenerate specs * Remove alpha status from ManagedFields * Add/Update CHANGELOG-1.16.md for v1.16.0-rc.1. * Update Cluster Autoscaler version to 1.16.0 * Fallback to schemaless apply behavior for custom resources with unhandled schemas * Improving GCE cluster up logic for EndpointSlice Controller * Add read-only rbac for csinodes to cluster-autoscaler * Update cluster-autoscaler image to v1.16.0-beta.1 * Update kubernetes dev setup instructions * Update client-go install instructions * Fix wrong command in e2e agnhost utility function * Fix filter plugins are not been called during preemption * Adding a nil check in endpointslicecache * Simplify etcd image version usage in kubeadm * Add etcd image version to kubeadm * Ensuring endpointslice controller starts up as part of cluster up when all alpha feature gates are enabled * kubeadm: Fetching kube-proxy's config map is now optional * Prevent resultPod.Status.ContainerStatuses from being empty. * Add dns capability to GCE window cluster * rebase * Add comment * Adding ENABLE_STACKDRIVER_WINDOWS * Install and start logging based on kube env * Add/Update CHANGELOG-1.16.md for v1.16.0-beta.2. * Update CHANGELOG-1.16.md for v1.16.0-beta.2. * Fixing bugs related to Endpoint Slices * kubelet e2e: defer the close to after the error check * skip recording inputs & outputs in fake script plugin when CNI_COMMAND=VERSION * bump metrics-server version to v0.3.4 * in GuaranteedUpdate, retry on precondition check failure if we are working with cached data * test * Make sure loadbalancer service is deleted before exiting the test * fix namespace termination conditions to be consistent and correct * Ensure the KUBE-MARK-DROP chain in kube-proxy mode=ipvs * Add integration test for webhook client auth * Plumb service port, URL port to webhook client auth resolution * Search client auth with and without port * Update NodeSSHHosts to support clusters with some public nodes * add ready plugin to dns tests * kubeadm: Form correct URL for IPv6 in HTTPProxy check * Remove symlink support from kubectl cp * Register all volume plugins in kubemark * persistentvolume-controller: fix data race of non-deepcopied objects in fake client * Allow typha-cpa to get apps/deployments * e2e log: fix time stamp normalization in unit test * Made IPVS and iptables modes of kube-proxy fully randomize masquerading if possible * using const instead * test(runtimeclass): add e2e tests for runtimeclass scheduling * Ensure backend is ready in listing webhook e2es * Honour "nbf" claim if present in ID token * Make CRD conversion e2e tests robust in non-aggregator-routing clusters * Make admission webhook e2e tests robust in non-aggregator-routing clusters * Make CRD admission webhook e2e work in parallel test environments * Add readiness probes to CRD/Admission webhook pods * Fix failure running `make build test` in cluster/images/etcd * Update default etcd server to 3.3.15 for kubernetes 1.16 * promote crd discovery e2e to conformance * Adding kubectl support for EndpointSlice * Add support for konnectivity service to the etcd3 client. * update cAdvisor godeps to v0.34.0 release * Add /readyz endpoints to converter/webhook test image * Move HostUtil to pkg/volume/util/hostutil * Add discovery docs crd e2e test * use the existing request info * use the same context for aggregated and proxy requests * add temporary feature gate to allow disabling aggregated discovery timeout * add env var to allow disabling the aggregated discovery timeout * add a timeout for proxying discovery requests * Single-numa-node Topology Manager bug fix * Added Single NUMA Node Policy which ensure resource are aligned on a single NUMA node * Update CanAdmitPodResult() in TopologyManager to take a TopologyHint * fix nit * run hack/update-vendor.sh * Remove defaulting for x-k8s-list-type * Update generated * Fix validation and add many tests * Use CRD validation field in server-side apply * Update kube-openapi version * fixed golint error * Adding EndpointSlice RBAC for node-proxier/kube-proxy * ipvs dualstack: generated items * create meta-proxy for proxy-mode=ipvs (dualstack) * Adding EndpointsAdapter for apiserver EndpointSlice support * Added support for ILB Global Access * startupProbe: make update * startupProbe: Test changes * startupProbe: Kubelet changes * startupProbe: API changes * Fix Windows disk usage metric measurement * wire up the webhook rejection metrics in webhook handlers * test * add webhook rejection metrics * add /livez as a liveness endpoint for kube-apiserver * Promote admission webhook e2e tests to conformance * webhook-e2e: add denying CR update test case, check CR patch and * Fixed comment to refer to the right int accessor for Quantity * Update semantics to set Preferred field in TopologyHint generation * Write the Stackdriver config separately from the installation. * bazel update * e2e logging: disable brittle output test * Promote CRD e2e tests to conformance * Update NPD addon to use v0.7.1 * Update CPUManager topology helpers to accept multiple ids * Update RuntimeClass E2E expectations * cmd/kubeadm: remove "rpc/status" from import-restrictions * vendor: update with "update-vendor.sh" script * k8s/apiextensions-apiserver/test/integration: block etcd client creation until connection is up * test/integration: block etcd client creation until connection is up * kubeadm/app/util/etcd: : block etcd client creation until connection is up * cluster/.../etcd/migrate: block etcd client creation until connection is up * Update running_pod_count and running_container_count metric * Add !providerless tag * Adding an e2e test on GMSA support * Fix out of bounds error in timeout tests * bump coredns version in kubeadm to 1.6.2 * Remove kubectl log * update dependencies file * hardcoded check sha of corefile tool * Add pre pull of e2e images after DiskPressure test * Fix static check errors * Use k8s.io/utils package * Update modules for openstack staging. * Fix linting errors on provider staging * Move Openstack provider to staging * Add devicemanager tests for TopologyHint consumption * Consume TopologyHints in the devicemanager * Add devicemanager tests for TopologyHint generation * Generate TopologyHints from the devicemanager * Added stub support for Topology Manager to Device Manager * Change Topology.NUMANode in device plugin interface to a repeated field * Update generated files * generated * apiextensions: merge openapi spec ignore path conflict * add a test to make sure the CRD OpenAPI path and defintion are protected * Add tests for namespace status conditions * Add status conditions to namespaces * fix(kubectl): all-namespaces flag being ignored by ToBuilder() in builder_flags.go * use directly DeletionHandlingMetaNamespaceKeyFunc from client-go * Adds visitor test for traversal errors * Adding EndpointSlice support for kube-proxy ipvs and iptables proxiers * Migrate the e2e provisioner container image to a different location. * Move kubectl cp back to k/k * azure support for ipv6 and dual stack services(excluding ILB) * Adding EndpointSlice controller * Graduating Windows GMSA support to beta * crd-e2e: check watch observes CR modified events; use WatchUnsafe * fix semantics of the rejected label in webhook metrics * Fix broken link to api-conventions doc. * kubeadm: fix a bug where the kubelet cert rotation was turned off * Regenerate openapi-spec * Fix bug in CPUManager with setting topology for policies * Make ServerSideApply beta, and enable by default (on the server) * Rename --experimental-* flags to --* for server-side apply * serviceaccounts: Add JWT KeyIDs to tokens * Use http/1.1 in apiserver->webhook clients * Plumb NextProtos to TLS client config, honor http/2 client preference * Enable the RuntimeClass admission controller on GCE & CI * api: Loosens RunAsUserName validation * add checksum * group imports properly * migrate kube-proxy metrics to stability framework * migrate controller-manager metrics to stability framework * Make webhook benchmarks parallel * add some documentation around the metrics stability migration changes for clarity * migrate kubelet's metrics/probes & metrics endpoint to metrics stability framework * Add authentication metrics: overall failure and error count * Use log functions of core framework on sub [p-s] * phase 2: generated items * Fail fast with TopologyManager on machines with more than 8 NUMA Nodes * Add NUMA Node awareness to the TopologyManager * phase 2: ipam filter secondary service cidr * Phase 2: service and endpoint processing * phase 2: api types + defaulting + validation + disabled fields handling * Tombstone the former Fields field by commenting the old entry * Move the IsMasterNode function to tests and mark it Deprecated * Cleanup staticcheck issues for package in client-go. * Node lifecycle controller should use a label for excluding nodes * Service controller should begin moving away from node-role labels * Add a feature gate for legacy node-role behavior * [Framework] Add UnschedulableAndUnresolvable status code * fix: prevent overriding of certain kubelet security configuration parameters if the user wished to modify them. * migrate scheduler metrics endpoint to metrics stability framework * e2e storage: read/write + read-only ephemeral inline volume test, data sharing * e2e storage: wait for pod deletion * e2e storage: multi-volume and multi-pod tests for inline ephemeral volumes * e2e storage: check NodeUnpublishVolume in csi-mock tests * e2e storage: enable testing of ephemeral inline volumes with hostpath CSI driver * e2e storage: synchronize .yaml files with latest upstream releases * Add e2e test for volume limits * Bump NPD version to v0.7 for GCI * generated * storage: make CSIInlineVolume a beta feature * storage: make tests independent of CSIInlineVolume default * Update CRD docs * Support PluginWatcher in Windows * Remove myself from reviewers across the repo so that PRs are no longer assigned to me by blunderbuss. * gce staticcheck fixes * Update vendor k8s-cloud-provider and google API * Disable tracking manged fields on scale sub-resource * Add issue to TODO * Update round-trip compatibility test * Regenerate all * Add new FieldsType to clarify the format of Fields * Rename TopologyHint.SocketAffinity to TopologyHint.NUMANodeAffinity * Update CPUManager to include NUMANodeID in CPUTopology * Updated the godoc on the CRD API types to follow conventions * Cache the discovered topology in the CPUManager instead of MachineInfo * Skip deleting custom resource instances that overlap with storage for built-in types * add comment about explicitly registering grpcprom client metrics * add some documentation around the metrics stability migration changes for clarity * add stability level to aggregator metrics and drop blank line in cmd file * migrate kube-apiserver metrics to stability framework * Re-implement AWS test driver interfaces * extending RequestedToCapacityRatio priority function to support resource bin packing of extended resources * Rename mount.IsBind to mount.MakeBindOpts * remove dependency to pkg/features on service controller package * derive node CSR hashes from public keys * Refactoring pod related functions from pv_util to pod pkg * Generated docs for ephemeral containers API * Improve API documentation for ephemeral containers * Enable CSI e2e tests for volume expansion * Graduate volume expansion to beta * Factor PassiveClock out of clock.Clock * Add discovery docs webhook e2e test * aggregator: add metric for openapi regeneration * kubeadm Json6902 Patches * storage: fix CSIInlineVolume round-trip test * apiextension: add metric for openapi regeneration * aggregator/apiextensions: v(2) log why OpenAPI spec is regenerated * delete lo network when TearDownPod to avoid CNI cache leak * DNS e2e tests differentiate between IP family * Make TestContext.IPFamily global for parallel testing * apiextensions: always set lastTransitionTime when CRD condition changes * remove slice dependency * run hack/update-bazel.sh * Update kubectl polymorphic logs helper for ephemeral containers * Change the seven blanks to ` {7}` in the regex, so it will be more readable . * apiextensions: set 'metadata.generation: 1' during read from etcd if not set * use log functions of core framework * fix test/e2e/gke_node_pools.go * Add a helper function to decode scheduler plugin args * Correct func name WithBuildMetadata * revert wrongly replaced log function ginkgo.Fail * kubectl: take pod overhead into account * generated * remove test cases disabling the gates * bump the CRD feature gates to GA and lock the defaults * Add types to StatefulSetUpdateStrategyType constants * Remove conflict logic from PodTolerationRestriction * Fix toleration comparison & merging logic * Updating log after framework code refactor * Remove ndots check as it doesn't apply to windows * Run hack/update-bazel * Change custom DNS test to use ipconfig instead of resolv.conf * Add e2e DNS tests to windows tests * Adding discovery/v1alpha1 API for EndpointSlices * Bump cluster proportional autoscaler to 1.7.1 * e2e/network: add service hairpin test * Split defaultPrintHandler from handlerEntry in table printing * Improve error message on server-side apply conflicts * add cache-control headers to kube-apiserver * Move MakeFile/Dir from HostUtil to host_path vol * schedule code clean: using string prefix instead of MarkDeprecated * Internalize mount.Interface.IsMountPointMatch * apiextension: fixup defaulting tests * Utilize reflectorMutex in LastSyncResourceVersion * apiextension: promote defaulting to beta * Cleanup ginkgo.Fail calls from the e2e test framework * Add support for vSphere volume mount/attach on Windows * Use preferred import packages for test/e2e * e2e logger test: handle paths in Kubernetes CI * bazel update * e2e: consistent failure logging * e2e: unit test for logger.go and ginkgowrapper.go * Use log functions of core framework on test/e2e/apps * Clean up staticcheck issues. * apiextension: ratcheting validation of unpruned defaults * publishing: add missing deps for 1.16 branch * e2e_kubeadm: use log functions of core framework * v1beta1: bugfix in Event struct definition * fix typo in build/platforms.bzl * Correct comment in CertOrKeyExist * Remove watching Endpoints of Headless Services * Tolerate ending slash when running staticcheck * Updated comments in wait.go * generated * Mark v1beta1 admissionwebhook and crd types as deprecated * Use cached selectors/client for webhooks * Add admission benchmarks * Let webhook accessors construct client/selectors once * apiextensions: remove preliminary committed openapi packages * kube-aggregator: remove preliminary committed openapi packages * Clean up staticcheck issues for gce. Dealing with deprecated issues. (staticcheck SA1019) Dealing with error discard issue. (staticcheck SA4006) Dealing with context overwritten issue. (staticcheck SA4009) Dealing with unused functions. (staticcheck U1000) Remove gce from staticcheck failure list * Enable the RuntimeClass admission controller for scheduling * apiextension: prune default values in storage * apiextension: complete validation of meta data defaults * apiextension: reject x-kubernetes-embedded-resource with empty properties * apiextension: fix go-openapi validation error path at the root * apiextension: fix structural additionalProperties in ToOpenAPI() * Fix failing test * Use log functions of core framework on sub p* * allow an apiserver to only serve http1 * Add tests * Only update managedFields on update if it already exists * Move PrintPerfData to the test * generated * tests * mutating webhook: audit log mutation existence and actual patch * Add --include-test-files flag to verify-import-boss * Add test for HTTPExtender.IsInterested * tests: Adds RunAsUserName tests * Update PrintOptions to more appropriate GenerateOptions in some cases * hack/pin-dependency.sh k8s.io/gengo 26a664648505d962332bda642b27306bc10d1082 * Remove nsenter impl from pkg/vol/util * feat(scheduler): move node info snapshot out of internal package * moving podInformer to node controller scope * kube-proxy: improve logging around network programming latency SLI. * Add ephemeral container to GetPodVolumeNames test * fix upgrade checks * update scale client to support non-namespaced resources * Add dropDisbledFields() to service * kubeadm: fix static check failures * Fix devicePath for raw block expansion * Replace time.Sleep with poll.wait in admission e2e tests * test(scale): fix tests * fix: patch the Scale subresource if no precondition was given * fix-typo-cmd/kubeadm/app/util/config/initconfiguration.go * Make container removal fail if platform-specific containers fail * Use log functions of core framework on sub [j-l] * Don't overwrite PVC with nil/empty object returned by failed Update * Adding TooMany error type * Switch to v1 for admission and CRDs for all api-machinery e2e tests * s/nolegacyproviders/providerless/ * Use log functions of core framework on [d-i] * hack/update-bazel.sh * make it possible to start kube-api-server and kube-controller-manager without legacy cloud provider flags * make it possible to build kubelet without legacy cloud providers * add build tags to legacy provider code and make it possible to build kube-controller-manager without any legacyproviders or without particular legacy providers * Drop Azure/go-autorest from pkg/controller * Use log functions of core framework on p* * Included resizing for CSI-based block volumes. * Fix golint issues in pkg/apis/apps and pkg/apis/apps/validation * feat: use PreBind instead of Prebind in the scheduling framework * feat: use PostBind instead of Postbind in the scheduling framework * feat: use PreFilter instead of Prefilter in the scheduling framework * Split HostUtil functionality into its own files * Change GenerateTable parameter PrintOptions to GenerateOptions * Remove decorateTable() from TableGenerator * kubeadm: print the stack trace of an error for klog level v>=5 * move testfiles back * copy testfiles to hostutil dir * move files back to mount * copy mount files to hostutils * Promote VolumePVCDataSource to beta for 1.16 * remove the ipvs checks from the preflight checks * move WaitForCacheSync to the sharedInformer package * Cleanup: fix typo in flag help message * check that the recorded event is not nil on refreshExistingEventSeries * apimachinery: hide 'suppressing panic for copyResponse' error' in ReverseProxy * removed equivalence cache tests * apiextensions: builder for OpenAPI v3 * apiextensions: move openapi schema builder and merge code into package * Add e2e test for Lease API * Remove all skips from admission and CRD e2e tests that will be promoted to conformance * Add fast path to podFitsOnNode * Remove dead code * Renaming strict policy to restricted policy Restricted policy will fail admission of guaranteed pods where all requested resources are not available on a single NUMA Node * bazel update * Do not cleanup node lease namespace in e2e setup suite * Omit nil or empty field when calculating hash value * drop unused check * add legacyBinding for non-Named Binding Creater * check pod name with that in pod eviction object * check pod name with that in binding object * populate object name for admission attributes when CREATE * fix cluster/images/conformance/go-runner/tar_test.go * Fix cloud reported hostname being overridden if nodeIP set * Add hex108 as a scheduler reviewer * add SataQiu to hack/ approvers * feat: update runtime class admission plugin * Skip spec.volumes mount/map test if no SSH * GCE/Windows: use "return" as "continue" for ForEach-Object * Fix windows kubectl log -f. * Check service finalizer on upgrade test and fix-up test cases * Finish implementation of stable metrics static analysis * promote the remainingItemCount field to beta * mv HasMountRefs from mount pkg to vol/util * Remove watching Endpoints of Headless Services * move ShuffleStrings to pkg/proxy * Dump the stacktrace while an error occurs * Un-blacklist pkg/kubelet for staticcheck * add client-go as a dep of component-base * duplicate migrated variants of shared metrics into component-base * Cleanup more static check issues (S1*,ST*) * Clean up error messages (ST1005) * Clean up deprecated references * Fix misc static check issues * Remove dead code from pkg/kubelet/... * Make sure no op updates don't affect the resource version * move version logic directly into the component-base, to simplify legacyregistry logic * Fix flaky hugepages tests by decreasing page count * removing redundant code * Close leaking files in `conformance/walk.go` * fix: azure disk name matching issue * disable staticcheck on a few more packages * Update google.golang.org/genproto to c66870c02cf8 * Update github.com/coreos/etcd to v3.3.15 * Update google.golang.org/grpc to v1.23.0 * fix static check for test/e2e/framework * Fix verb reporting in metrics * controller:volume fix static check failures * Update existing node lease with retry. * Check error return from Scheme.Convert * Use lesser of context or webhook-specific timeout in webhooks * Remove check for addIPv6Checks which evaluates to true * Use framework functions under test/e2e/node/ * Add tests for newly exposed drain code * Use log functions of core framework on [c-n] * Promote service load balancer finalizer to beta and enable by default * kubeadm: support any kernel version newer than 3.10 * generated * mark CRD .status.conditions as optional * tests: Skips Windows-unrelated tests on Windows * test images: Updates image building process README * Use non-default container port and scoped port vars in webhook e2e tests * staticcheck follow-up to address late feedback * bump coredns to 1.5.0 * add coredns migration support to upgrade.sh * fixes a bug that connection refused error cannot be recognized correctly * Use VisitContainers instead of directly accessing pod container fields * update dependencies * Fix returning logs from ephemeral containers * update build dep * move the corefile backup into a single configmap with a corefile-backup data key * Move RunNormalizeScorePlugins and ApplyScoreWeights into RunScorePlugins; Also add unit tests for RunScorePlugins. * Optimize internal data structure of EvenPodsSpread * Add Benchmark test for EvenPodsSpread predicate * removed awk from kubeadm reset * Fix CRD v1 release note * Plumb context to admission Admit/Validate * plumb client-specified request timeout to context * chore: add reviewer of csi-translation-lib * Add/Update CHANGELOG-1.16.md for v1.16.0-beta.1. * Update CHANGELOG-1.16.md for v1.16.0-beta.1. * kubeadm: do not use github.com/blang/semver in app/preflight * don't delete KUBE-MARK-MASQ chain in iptables/ipvs proxier * test images: Adds README containing image building process * fix: add kind parameter in CSI migration * Log the error return from dir removal * fix: trim new line for azure storage account name * Refactor NewXXXPlugin in framework_test to avoid package variable and do some other refactor * Bump agnhost image version to 2.5 * Update e2e tests to use CRD v1 API * pod-overhead: utilize pod overhead for cgroup sizing, eviction handling * Add static analysis verify script * Delete duplicate resource.Quantity.Copy() * Bump golang.org/x/tools version for staticcheck compat * Vendor staticcheck * Leave Windows Defender enabled for clusters on GCE * accept dial timeout in webhook e2e * Update structured-merge-diff to latest version * Fix e2e for block volume expansion * Group update managedFieldsEntries by manager name * inject transformer prefix into metric * Split printer tests into table generation then table printing * Split HumanReadablePrinter struct into generator and printer structs * add delete to gaugeVec, histogramVec, summaryVec since kubelet requires it * provider/azure: Fix load balancer distribution constants * Update vendor for Azure API bumps * Update Azure imports to latest API versions * Add messages for framework.Expect* in volumeMode tests * Speed up block volume e2e test by checking events * Check the error return from listener close * Rename WaitTimeoutForPodEvent to WaitTimeoutForEvent and move it to common/events.go * Fix Test for kubeadm/app/util/net.GetHostname * Update CHANGELOG-1.14.md for v1.14.6. * Update CHANGELOG-1.15.md for v1.15.3. * Update CHANGELOG-1.13.md for v1.13.10. * Update the PR template for latest 'additional documentation' enhancements * change GetVolumeName log level * Add/delete load balancer backendPoodID in VMSS. * add delete to counterVec wrapper, since we require it in the kubelet * lock the mutation of the create boolean for safety * fix typo * fix: disk not found issue in detaching azure disk * fix: detach azure disk issue using dangling error * convert EndpointNamespace showing string rather than pointer * Remove boolean waitForComponentRestart which is always true in upgradeComponent * Use v1 admissionregistration APIs in e2e * Fix in kube-proxy for sctp ipset entries * Upgrade ConversionReview e2e test image to also support v1 * ConversionReview v1 * Fix GCE typo in test output * swap BenTheElder for rmmh in typecheck / go-srcimporter reviewers * remove unnecessary ignore * FlattenListVisitor now continues traversal on errors and returns an aggregate error * remove unused jenkins scripts * update hack/jenkins/README.md * check clusterCIDR after occupy serviceCIDR * Don't track syncProxyRules runtime if not running * Bump nfs-provisioner to include GetReference fix * Demote HPA tests from release-blocking * Demote regular resource tracking tests from release-blocking * Add benchmark for updates and get with/without server-side apply * Drop GetPods from ActualStateOfWorld * implement request cancellation in token transport * generated * CRD v1: require structural schema for v1 * CRD v1: switch integration tests with defaulting to v1 * CRD v1: require valid openapiv3 types * CRD v1: limit 'default' use to v1 * CRD v1: require schema * Move HandleFlags to e2e package * Modify dns e2e to individualise GCE specific dns checks into seperate e2e * Only advertise supported patch types * ignore agnhost binary * Fix handling empty result when invoking kubectl get * Delete agnhost binary * use factory.Config fields directly in scheduler struct * Removes conflicting Quobyte tenant test error from API validation * Get location and subscriptionID from IMDS when useInstanceMetadata is true * Results of running update scripts: update-openapi-spec * Update GetTopologyHints() API to return a map * Initialize flags to support extra flags * replace ping with connect in msg * use agnhost image * update go to 1.12.9 * Add log.go back to core of e2e test framework * Disable kubelet restart tests for file volmode * Skip preprovisioned and inline volume tests if driver supports dynamic provisioning. * kubeadm: use etcd's /health endpoint for it's liveness probe * Lint Azure imports * Update vendor for Azure dependencies * Update Azure/azure-sdk-for-go and Azure/go-autorest modules * updated kubeadm reset wording to be more clear * Add e2e tests for CSI PVCDataSources * buildPortsToEndpointsMap should use flattened value type * aggregator: add myself to approvers * Move ConfirmStatefulPodCount to e2e test * CRD v1: disallow spec.preserveUnknownFields=true * CRD v1: combine webhookClientConfig and conversionReviewVersions under webhook struct * CRD v1: drop spec.scope default * CRD v1: drop top-level version, validation, subresources, additionalPrinterColumns fields * CRD v1: change JSONPath to jsonPath * CRD v1: install/register types * CRD v1: copy v1beta1 types to v1 * Taints and tolerations e2e test re-work * cleanup: fix typos in rbd_util.go * cleanup: fix typos in error message in e2e test * error config attachable plugin * add the ability to migrate coredns configmap * error config attachable plugin * remove defaultedInternalConfig fromr kubeadm * fix error set csiplugin attachable * Fix panic when errors are nil * Add test for unused volumes * Skip unused volumes in VolumeManager * Refactor makeMountsMap into GetPodVolumeNames * Add http response code 503 to check. * kubeadm-kustomize-ux * [kubernetes/kubeadm] fix minor nil issues in kudeadm code * fix some typos in recycle_test.go * Make drain library more reusable * Propagate error from NewEtcd * Lowercase first letter of chainable errors in PVC protection controller * Add live list of pods to PVC protection controller * Upgrade AdmissionReview e2e test image to also support v1 * Bump vertical autoscaler to v0.8.1 * Add instruction for "Application Default Credentials" * fix shellcheck failures in hack/test-integration.sh and hack/verify-test-featuregates.sh * Add admission e2e tests for untested stable operations * fix some typos in testing.go * kube-proxy: do not export network programming latency for deleted enpoints. * feat: use schedulerapi.MaxPriority instead of hard-coded int * feat(scheduler): return error when score is out of range * Promote e2e verifying service type updates * do not publish openapi for a schema containing bad types * Add CRD e2e tests for list, delete collection, and status sub-resource operations * Handle error correctly in kubee-proxy command * Fix malformed port in vsphere cloud provider test * Add CPUManager tests for TopologyHint consumption * Consume TopologyHints in the CPUManager * Add CPUManager tests for TopologyHint generation * Generate TopologyHints from the CPUManager * Add IterateSocketMasks() function to socketmask abstraction * Fix up failing boilerplate test * Update to go 1.12.8 * fix azure load balancer update dns label issue * Fix default scheduler crash if scheduler extender filter returns a not found node * change deprecatedVersion type to string for static analysis parsing ease * Add service reachability polling to avoid flakiness * Update vendor * Pin golang.org/x/net to cdfb69a * Remove fail argument from ReadOrDie() * Move GetGPUDevicePluginImage to the test * Move ProxyRequest to kubelet e2e fw * resource: cleanup helpers_test.go * kube-eviction: use common resource summation functions * resource: modify resource helpers for better reuse * bump go-grpc-prometheus since 1.2.0 actually exposes the metrics * kubeadm: add v1.17 to the list versions that map to etcd version * Re-Generate k8s.io/apimachinery/pkg/util/sets * Update k8s.io/gengo to 955ffa8fcfc983717cd9de5d2a1e9f5c465f4376 * storage: add test for ValidateCSIDriverUpdate * storage: check CSIDriver.Spec.VolumeLifecycleModes * storage: validate CSIDriver.Spec.VolumeLifecycleModes * storage: generated files for CSIDriver.Spec.VolumeLifecycleModes * storage: introduce CSIDriver.Spec.VolumeLifecycleModes * kubelet: add eviction counter to metrics * rename healthz methodNames to be more consistent w/ present day usages * Fix event when Cinder volume can not be expanded when in-use * use image in statefulset too * Hide bearer token in logs * Address review comments * proxy/ipvs: test cleanLegacyService with real servers * run ./hack/update-vendor.sh * Kubernetes version v1.17.0-alpha.0 openapi-spec file updates * kubectl: eliminate unnecessary blank ending line (#81229) * Delete extraneous CHANGELOG-*.md files on branch. * add missing import required by build scripts * Use RWMutex in watchBasedManager * [k8s.io/client-go]fix typo in eventseries_test.go method * Fix flaky test TestPreemptWithPermitPlugin * Introduce cache for APIServices * Replace self defined const StatusTooManyRequests with http.StatusTooManyRequests. * Remove algorithm.NodeLister from scheduler interface * Update csi-provisioner and snapshotter to get selflink fix * remove alias until we can get the proper alias in place * Update docs for service/endpoints port names * Propagate error from NewREST * proxy/ipvs: remove unused constant rsGracefulDeletePeriod * add logicalhan as approver on component-base/metrics * Error code incorrectly hidden in recordEvent * Update CSI hostpathplugin to include cloning fix * Return 503 for custom resource requests during server start * Revert "Toleration priority function score computation" * kubeadm: cleanup unnecessary slice initialization statements * cleanup: proxier.go error message fix * Inline/simplify two used-only-once service test helper functions * Replace self defined const StatusTooManyRequests with http.StatusTooManyRequests. * adds an integration test for double deletion with a custom finalizer * placeholders for follow-up PR on kustomize UX * kubeadm-kustomize-core * publishing: remove rules for release-1.12 branch * publishing: add rules for release-1.16 branch * Implement stable metric validation and verification * Modify the logic to discover corresponding errors. * Fix conflicted cache when the requests are canceled by other Azure operations * changes the way `gc` detect that an object needs to be deleted * Fix Azure client requests stuck issues on http.StatusTooManyRequests * Add service annotation for specifying load balancer's pip with name. * Fix logging message during unmounting * tests: Fixes DNS tests for Windows * Add missed status code description in comment. * Add DataSource to PVC describe * doc: add Draven as a reviewer to test package * Set runtimeState when RuntimeReady is not set or false * Remove runDeployment() from e2e test * Fix a bug in the IPVS proxier where virtual servers are not cleaned up even though the corresponding Service object was deleted. * Remove unused BusyBoxImage * Remove core dependency from endpoints e2e fw * Remove core dependency from deployment e2e fw * Return CR validation errors as field errors * Autogenerated files * Scheduler should terminate when it looses leader lock * Rename HostUtils.GetFSGroup to HostUtils.GetOwner * Deprecate the hyperkube support for cloud-controller-manager * Rename HostUtils.ExistsPath to PathExists * Rename mount.NewOsExec to mount.NewOSExec * Update generated files * Introduce topology into the runtimeClass API * Add iptables restore failure metrics * kubeadm --pod-network-cidr supports a comma separated list of pod CIDRs. This is a necesary change for dual-stack. * Update kubeproxy config validation to support list of comma separated pod CIDRs. Dual-stack feature must be enabled for the validation to be done. * add validation for CNI config before loading and fix some typo * reduce kubelet getting node lease * Experimental ILB support * kubeadm: the permissions of generated CSR files are changed from 0644 to 0600 * remove iSCSI volume storage cleartext secrets in logs * Fix node port service reachability test for nodes running on localhost * Add load balancer cross resource group settings to config. * fix: use Create for attach/detach disk * make hostpath configurable for test * feat(scale): add Patch method to ScaleInterface * feat: cleanup pod critical pod annotations feature * Fix two race issues in scheduling_queue_test * Use the escalate verb for clusterroleaggregator rather than cluster-admin permissions * expose ability to register native prometheus collectors * Fix most linting issues in pkg/util/mount * remove redundant reviewers in test/OWNERS * promote andrewsykim to approver in test/OWNERS * Changed comment on ScaledValue (#79738) * Remove unnecessary serializer override for CRD status, test proto requests on CRD status * fix: update provisional delay seconds to 10s * fix: reduce the number of pods and volumes * fix: use workqueue to speed up of volume binding tests * feat: add logs to volume binding test * Add `gen_openapi` target to top-level Makefile. * kubeadm: Fix some documnetation errors * Adjust test case for a new command line parameter * Update to latest klog 0.4.0 * pinned cadvisor to a latest commit * Use events to speed up the test * Add test for mismatched usage of filesystem/block volumes * publish path parameter * kubeadm: remove dependency on pkg/kubeapiserver/authorizer/modes * fix kubeadm version def.bzl * Remove printOnce() on e2e tests * Constant time password comparison * Rename MetricsForE2E for golint failure * Added info requested in review of #77636, and more * Refactor validation options * Move CRD approval validation into validation package * feat: use named array instead of score array in normalizing score * remove dead code: pkg/api/resources * changed IsCriticalPod to return true in case of static pods * Lower verbosity level for some useful scheduler logs; Also add node resource info when pod is scheduled on node. * generated * update github.com/json-iterator/go to v1.1.7 * Update the Windows node image 1809 version to 0709 * also deprecate --cloud-provider-gce-lb-src-cidrs flag from kube-apiserver * add scheduling utils * move volume scheduling tests * audit & admission: associate annotation with audit level * Fix a racing issue in FakeFilterPlugin * Update CHANGELOG-1.16.md for v1.16.0-alpha.3. * update dependencies to include k8s.io/utils/inotify * fix linting issues * use k8s.io/utils/inotify instead of github.com/go-sigma/inotify * Ensure tests which rely on SSH behavior are skipped if unavailable * [TOB-K8S-027] Fix Incorrect isKernelPid check * [TOB-K8S-025] Incorrect docker daemon process name in container manager * Update WORKSPACE to fix symlink permissions * Fix symlinks in bazel-release * autogenerated files * Deprecate SelfLink + featuregate for setting it * Fix GetReference function * Add stub support for TopologyManager to CPUManager * Make nodeList schedulable * Add IPv6 support to e2e GlusterDynamicProvisioner * Get network-proxy working with GCE. * Test webhooks with and without watch cache enabled * Update configMap data checking * modify the spelling errors * Support cross resource group load balancer. * Reduce indents of resource_usage_gatherer * generated * Limit v1 webhooks to None and NoneOnDryRun side effects classes * kubeadm e2e networking test for dual-stack podSubnet check. * Promote NodePort service creation e2e test to conformance * [e2e] Add verbose to reachability test commands * Implement CodecFactoryOptions allowing clients to opt-in to Pretty encoders and Strict Decoders (#76805) * Scope e2e webhooks to avoid cross-test interference * Add security notices to changelogs * Fix golint failures of pkg/registry/core/event * Fixed a racing issue in scheduler UT * Drop cloud-controller-manager artifacts from k/k release * Validate CSI Inline Migration unconditionally * Setup directories for Metrics validation and verification KEP * Test more replicas than spec. * fix typos in create_namespace.go * Refine TestFilterPlugin * Fix error collides with imported package name * kubeadm: fix name of CA spell error * Update function for data inequality verification * Return error returned by CSINode Get if initialization failed * cleanup: fix log message error in test case * Bumped log level of CSI driver de-registration to match registration handler * cleanup: fix typo "contstruct" -> "construct" * Add davidz627 to testing manfiests csi owners * Bump GCE PD CSI Driver testing manifests to v0.5.2-gke.0 for volume limits fix * Moved e2e boilerplate to framework * Upgrade to latest k8s.io/utils * Replace string concatination with trace fields * Add trace to webhook invocations * Added import restrictions file to e2e framework * Simplify checking in getMinTolerationTime * fix: use %q instead of %v in scheduling framework * Add CHANGELOG-1.16.md to CHANGELOG.md * fixup: correct file name in log message * cleanup: remove package csi duplicated error log * Update CHANGELOG-1.15.md for v1.15.2. * Update CHANGELOG-1.14.md for v1.14.5. * Update CHANGELOG-1.13.md for v1.13.9. * Add limit of stored errors * fix shellcheck failure in cluster/test-e2e.sh * Fix example urls * Move docker specific const to dockershim. * kubeadm: use EnsureCertificateAuthorityIsEmbedded() for file discovery * Re-import api/core/install for init function * Fixed pull-kubernetes-verify issues * Fix suggestions, track removed library in bazel * Fix golint failures in some pkg/kubelet packages * kubeadm: enable secure serving for the kube-scheduler * Fix comment on dropPodStatusDisabledFields method * Simplify VisitContainers pattern in volumemanager populator * migrate scheduler options to resourceName & resourceNamespace * Fix verify-generated-files to error on untracked files * Make Overhead validation unconditional * Preserve existing ephemeral containers on update, validate unconditionally * update generated files * Allow kubectl to attach to an ephemeral container * add unit tests for attacher DisksAreAttached and BulkDisksAreAttached * Toleration priority function score computation I think, if a pod doesn't have any tolerations, we don't prefer node without taints to the one which has taints in https://github.com/kubernetes/kubernetes/blob/master/pkg/scheduler/algorith…, so there is no point in testing that particular functionality. The side effect of the above is, since we're going round-robin in every scheduling cycle sometimes we're choosing first node and in the next cycle we'd move onto next node(where taints are not being applied), so it's causing problem unnecessarily * Omit namespace when kubectl get is for the cluster * Remove NormalizeScore plugin set from config API. * increase timeout for maximum-startup-sequence-duration to decrease probability of a flake * Reduce GCE PD Attach Limits by 1 because Node Boot Disk counts as 1 attached disk * Disable gzip compression in core control plane components * Allow gzip compression to be disabled from rest.Config * Change order kubelet starts containers * Unexport kubectl cmd profiling * Added comment after invoking ensureLoadBalancer * Wait for pods to be running before eviction starts * Moved nil check inside AlphaFeatureGate.Enabled * Updated comment about ImplementedElsewhere * Setting log level to 4 since default is 2 or 3. * Added comment on how to use ImplementedElsewhere * Fixed review comments, lint. * fixed error message * addressed review comments * Add a new error type in cloud.go * skip ilb creation if subsetting is enabled. * Handle ImplementedElsewhere error in service_controller * unit test * Add a defer to kubelet boostrap token deletion * Update copyright years * added latest tag * fixed whitespaces * updated fluentd to 1.6.3 * Fix registry for prometheus-to-sd * Rename cacheWatcher#stop * kubeadm: simplified returns * publishing: remove redundant rules for kubectl * handle joinControPlaneDoneTemp.Execute errors * feat: update multiple files in e2e node with framework helpers * Fix shellcheck failures in hack/verify-test-featuregates.sh * fix: update run filter plugin for consistency * feat: implement "post-filter" extension point for scheduling framework * Fix admissionreview doc typos * Don't supress the node update error while logging * Update .golint_failures to reflect code move to staging * Update generated * RawExtension.Raw json:"-" * Update vendor modules to reflect code move to staging * Update test data to reflect code move to staging * Add IPv6 support to preserve source pod IP test * Generated * Clarify accepted versions skew requirements, update field documentation * AdmissionReview: Allow webhook admission to dispatch v1 or v1beta1 * AdmissionReview: Install/register * Move nil check for mapperPlugin earlier in reconstructVolume * Update gofmt * Update BUILD files reflecting code move to staging * Refactor e2e tests * Add in-line filesystem volumes to MakeSecPod * Don't create mounter when reconstructing block volume * Move disruptive tests to testsuites and add ones for block volume * Add ConfigMap patch e2e test with validation step * test images: Adds version and bind-tools to agnhost * Adde 9.0.2 to CHANGELOG.md * Update import statements to reflect code move * Move pkg/kubectl/cmd/{command} to staging * EvenPodsSpread: integration test * iptables: simplify version handling * kube-proxy: drop iptables version check * fix-certs-generation-for-external-etcd * iptables: don't do feature detection on the iptables-restore binary * prune owners * Only output json format from tests when building junit reports * kubeadm reset: replace Errorf with Warningf * Update kube-addon-manager to v9.0.2. * Typo fix: DaemonsSet->DaemonSet * Fix selflinks in tests * Fix selflinks in events tests * csi: Fix socket extension comment * Remove Configurator interface * Return early in ApplyScoreWeights if there are no scores * Make discovery wait for a finite time * Refactor and clean up e2e framework utils, this patch handles test/e2e/framework/kubelet_stats.go file * Update predicates to use cached CSINode in scheduler * Add independent cache for CSINode in scheduler * Fix some unreasonable places int csi ut * Fix host path test clean up * Print ephemeral containers in kubectl describe * add flag concurrent-statefulset-syncs to kube-controller-manager (#79169) * cleanup: log message typo fix * fixed golint issues. * update codedellemc/goscaleio * Fix failing service e2e due to execPod IP unavailability * kubeadm: update the supported version for 1.16 * kubeadm: apply a number of _test fixes * doc: fix couple of issues for the doc of agnhost * add secret back to the workqueue with delay time, avoid expired bootstrap tokens not being deleted * Adding support for Azure Stack ADFS case. * fix some log typos in csi_mounter.go cleanup: remove logging duplicated error message fix error msg, include err in new returned errors. Signed-off-by: ethan <guangming.wang(a)daocloud.io> * Use default skuname shared Azure Disk * do not return error, when the ds is not found * Nominate Abdullah Gharaibeh to scheduler maintainers. * Use ExpectEqual in test/e2e_node/[a-d] * Unit test endpoints controller service deletion * Update compatibility fixture data: * Update generated * Use raw bytes in metav1.Fields instead of map * Don't delete service endpoints when a generic error occurs * vendor gotest.tools/gotestsum * Switch to json test output * `kubectl get` does not count binaryData keys on ConfigMap * Fix license script to handle single-segment packages * Add GetKernelVersion to ipvs.KernelHandler interface * Add code check for framework.ExpectEqual() * Remove duplicate scheduler anti-affinity preemption e2e * Refactor pkg/kubectl/conditions.go to remove file * clean GeneralPredicates code * Fix registry for PrometheusDummyExporter * apiextensions: 404 if request scope does not match crd scope * When PVC is invalid, don't count volumes in scheduler predicate * Don't count unrelated volumes in scheduler predicate * update RSA keys to 2048 bits * Fix unexpected line end in override flags * Run ginkgo in foreground, elminiate wait & pgrep * Move pkg/kubect/explain to staging * Use framework.ExpectEqual() under test/e2e_kubeadm * Refactor pkg/kubectl/{scale.go|rollingupdater.go} for move to staging * Refine watcher count calculation * Move pod related functions file in test/e2e/framework/util.go to its sub direcotry * Move pkg/kubectl/proxy to staging * proxy/ipvs: refactor TestNodePort to use test tables * Removed unsed return values of createResourceQuota * Fix tag for github.com/gogo/protobuf * proxy/ipvs: refactor TestClusterIP to use test tables * Fix hanging webhook error checking * Add NormalizeScore extension point for scheduler framework. * Upgrade Calico to 3.7.4 * Move pkg/kubectl/generate to staging * Convert e2e webhook tests to use v1 API * Determine system model for windows nodes * Move pkg/kubectl/cmd/util/openapi/OWNERS to staging * Refactor kubectl retrieve logs test to use agnhost * scheduler: make ApplyFeatureGates() stateless * upgrade repo infra to f85734f673056977d8ba04b0386394b684ca2acb * Move pkg/kubectl/interfaces.go to testing * Move pkg/kubectl/polymorphichelpers staging * Kubeadm FG for dual-stack was introduced in #80145. This PR progagates the kubeadm FG to the individual k8scomponents on the control-plane node. * apiextensions: add scope tests * split coredns dependency to decouple kubeadm and kube-up * Pop expired watchers in case there is no update * Update CHANGELOG-1.16.md for v1.16.0-alpha.2. * report error message when reset scheduler metrics in e2e test * Log an error when kube-scheduler fails to update the condition of the pod. * add options for name and namespace of leaderelection object * Use ErrorChannel to communicate errors during parallel execution in interpod_afiinity. * Use bigger keys for RSA-PSS, default for TLS 1.3 * Move pkg/kubectl/metricsutil to staging * Update vendor * Update structured merge-diff version * Debug values when test fail * Store key in TimestampedEntry * fix: do not allow nil Callbacks functions * Move pkg/kubectl/cmd/util and subdirs to staging * Update github.com/docker/distribution to v2.7.1 * Fix/Add comments on cadvisor implementations * Update logexporter version. * feedback 1 * Fix the public IP getting issues for VMSS nodes * change node-lease-renew-interval to 0.25 of renew-duration * Provision vSphere volume as per selectedNode * Move pkg/kubectl/apply and subdirectories to staging * TopologyManager: Fix rename best-effort policy files * support args for newrc funcs * kube-proxy in ipvs mode use ipvs to redirect traffic * update guide to make the command works as expected * e2e_node: clean up non-recommended import * delete the pods from unschedulable queue only when Add succeeds * Remove final file from pkg/kubectl/util * Move pkg/kubectl/cmd/util/openapi to staging * AdmissionReview: copy v1beta1 to v1 * fix-file-discovery * kubeadm networking related tests. * podSubnet check: if a podSubnet is specified in kubeadm-config then the e2e test will check that pod-cidrs of individual nodes fall within this range. * serviceSubnet check: if a serviceSubnet is specified in kubeadm-config then the e2e test will check that the kubernetes service created in the default namespace got a service IP from the configured range. * delete-bootstrap-kubelet.conf * autogenerated * Refactor and clean up e2e framework utils, this patch handles test/e2e/framework/psp_util.go file * Update misleading comemnts for HandleCrash * 1. Fix lint errors for the whole directory staging/src/k8s.io/client-go/tools/cache; 2. Remove staging/src/k8s.io/client-go/tools/cache from .golint_failures; 3. Fix some typo from comments. * fix snapshotter rbac rules * [eps-priority] auto-gen files * EvenPodsSpread: optimize Priority logic * EvenPodsSpread: Benchmarking Priority function * EvenPodsSpread: weigh constraints individually * EvenPodsSpread: minor enhancement on printing out priority score * EvenPodsSpread: Make some funcs in predicates pkg as public * EvenPodsSpread: Core Priority logic * EvenPodsSpread: Define a new Priority * Add message which shows how much CPU used * Remove duplicated check in ObserveEventAfterAction * Move pkg/kubectl/version to staging * Add a field 'RequiredAccessModes' to the driver info object that is propagated to pvc creation * fix building test/e2e_node/ with bazel 0.28.1 * Fix error message of ListTargetHTTPSProxies * kubelet: add UID to kubelet_container_log_filesystem_used_bytes metric * Allow aggregate-to-view roles to get jobs status (#77866) * Check error return from GetPodKey * Promote taint-based eviction e2e tests to Conformance * Move pkg/kubectl/describe to staging * Fix error handling issue in kubeadm upgrade * Un-[Slow] a bunch of networking tests * Assign OWNERS for pod integration tests * Avoid echoing request URL in proxy error * build: Add Release Engineering OWNERS * second iteration * Add tests for proactive init Container removal in the CPUManager static policy * Add tests for new containertMap type in the CPUManager * Proactively remove init Containers in CPUManager static policy * Retry metadata requests in get-credentials and valid-storage-scope * Don´t translate to IPv6 empty addresses * Bump kube-addon-manager's version to v9.0.2 * PVC protection controller: get rid of PVC leaks * fix pv controller not find pv for pvc provisioning * Moves pkg/kubectl/util/i18n to staging * Add annotation to disable tcp reset on SLB service * Bug fix: Set enableTcpReset of lb rules to true for Azure Standard Load Balancer * Change Socket to Node Change Node from int in TopologyInfo to type NUMANode which is an int * use correct format verb * Device Plugin API change to include Topology Info in Devices * e2e_kubeadm: clean up non-recommended import * fix typos in csi_attacher.go * Allow customize registry name of base and release images * Kubectl user exec should accept zero-length environment values #652 (#78875) * Add ipv6 support to the e2e kubectl tests * document API guarentees and deprecation policies for cloud config files * Update pkg/volume/portworx OWNERs * vendor: update for libopenstorage/openstorage to v1.0.0 * OWNERS: api-approvers should be approvers on cri-api * Regenerate * Fix pkg-names script that doesn't select files properly * Update gogo/protobuf to latest version * Update custom-serialization code to go backward * Fix some golint failures * Move some pkg/kubectl into polymorphichelpers * Unify secret and configmap triggers * Document and improve defaulting for MakePersistentVolume, dedupe some manual PV creations * hostport: Don't masquerade localhost-to-localhost traffic * Move pkg/kubectl/drain to staging * updated Bazel files * e2e storage: csi-mock tests for ephemeral inline volumes * CSI: allow drivers that can handle persistent and ephemeral volumes * e2e: remove unused ShortName from external driver definition * Promote resourceQuota e2e verifying 'object count quota' and 'quota scope' to Conformance * Refactor nested loop in getTPMapMatchingSpreadConstraints * Clarify IP family meaning * Update TODO * kubeadm: handle ResetClusterStatusForNode errors * Remove unused package //pkg/util/normalizer * Optimize Schedule by querying nodes only when needed. * Fix leader election in kube-addon manager * Revert "e2e: Skip multi-node PV test when pods scheduled on the same node" * Rename 'preferred' TopologyManager policy to 'best-effort' * Report error when iscsiadm fails during detach * add reciprocal note about keeping manifests in sync * fix kube-proxy manifest * Fix review comments, will squash later. * Move pkg/kubectl/apply.go to staging * fix typos in pv_controller.go * Move pkg/kubectl/apps to staging * Refactor and clean up e2e framework utils, this patch handles test/e2e/framework/perf_util.go * doc: nominate Draven to scheduler reviewers. * Promote job completion after failure e2e test to Conformance * Promote job pod orphaning/adotion e2e test to Conformance * Add benchmarks for serializing PodList * EvenPodsSpread: update addPod() logic to match individual constraint * fixup: address comments * EvenPodsSpread: Preemption UT on generic_scheduler * EvenPodsSpread: Supports Preemption (addPod) * EvenPodsSpread: Supports Preemption (removePod) * Store config args instead of config factory in test context * Remove NodeLister from Scheduler Configurator * Move pkg/kubectl/util to staging * Check whether metricObj can be converted to *v1beta2.MetricValueList * Corrected Cinder typos. * Add service reachability test util function and e2e fixes * EvenPodsSpread: update 'selfMatch' logic * fixup: address comments * EvenPodsSpread: UT on genericScheduler.Schedule() * EvenPodsSpread: Core Predicate logic * EvenPodsSpread: Define a new Predicate * Generated code for Ephemeral Containers in kubelet * Add support for ephemeral containers to the kubelet * Fix es 7.x.x initial cluster formation * kubeadm: add forgotten error check * cleanup: log message typo fix * Regenerate _example informers packages * fix wrong spells in events.go * fix typos in kubelet.go * fix: return empty string when status is nil * Add 'apiserver_watch_events_sizes'. * Add unit test for iSCSI refcounter * add protection for reserved API groups * Add new refcounter for iSCSI volumes * Add _example & test for a hyphenated API group * informer-gen: use correct PackageName computed from input parameters * Autogenerated files * Add simple batching to endpoints controller * Fix detachment of deleted volumes * Updates to container manager and internal container lifecycle to accommodate Topology Manager * Fix error overrided when saveVolumeData occurs error * Use scheduler cache in affinity priority functions * bugfix: panic log params in the construct method when maxInterval is less than minInterval * Update the CleanupAndExit field for the Options and the OnServiceSynced for the ServiceHandler comment * Use v1helper.GetPersistentVolumeClaimClass for compatibility * Optimize logic in EvenPodsSpread API validation * fix lint * Changed to use cmd for getting system uuid * Remove recursion in csiAttacher#waitForVolumeAttachmentInternal * add ipv6 support to the hostport/HostIP e2e test * e2e: add a function to map IPv4 in IPv6 * Move to getMachineInfo() * Dedupe all Make PVC API object functions into the one MakePersistentVolumeClaim to rule them all * Add migration shim for VerifyVolumesAreAttached and BulkVolumeVerify * Enable windows ntfs e2e storage tests for aws driver * Add support for windows to AWS EBS * Add unit test * e2e: Autodetect the IP family of the cluster * Set the systemUUID for windows nodes * proxy/ipvs: Compute all node ips only once when a zero cidr is used * proxy/ipvs: Only compute node ip addresses once per sync * Add doc that plugins in binding cycle should not use NodeInfoSnapshot() * Remove ExecutionHook API changelog entry * fix grammar err * use correct format verb * Fix potential panic in nodeGetVolumeStatsV1 * Send a reject message to permit plugin when preempting a WaitingPod * fix kubemark e2e test script * EvenPodsSpread: match selector of each constraint independently * [eps-pred-meta] auto-gen files * fixup: fix comments and use a channel to pass err * EvenPodsSpread: refactor "chained" utils * EvenPodsSpread: refactor topologyPairsPodSpreadMap * EvenPodsSpread: PredicateMetadata initilization * GCP config: gke-exec-auth-plugin for ValidatingAdmissionWebhook * refactors to kubernetes cp command * gofmt * address comments * refactors to kubernetes CP command * Add CSIDriver creation factory to e2e framework * add link of kubeadm config doc * Generated code for ephemeral containers integration tests * Add integration tests for ephemeral containers * Fix retry issues when the nodes are under deleting on Azure * Generated code for ephemeral containers API * Add Ephemeral Containers to the Kubernetes core API * Rename DebugContainers feature to EphemeralContainers * Fix some error messages * Report NodeNotInitialized error when providerId is empty string * Fix csi attacher unit tests using t.Run() * use ExpectEqual in density_test.go * Record metrics when framework returns unschedulable error * make util/retry more generic * Pod e2e for reading last line can flake if pod runs to completion * cleanup: fix some log and error capitalizations * Use HTTPS as etcd-apiserver protocol when mTLS is enabled * bump smd * fix breaking change * Change default PVC AccessModes to RWO in test framework * add ability for gce to bulk verify attached disks * Drop "pod_name" and "container_name" metric labels * kubeadm: remove dependency on pkg/util/procfs * Add events to dswp * Cleanup versioning serializer * Remove unneded directory * kubeadm: remove dependency on pkg/kubeapiserver/authorizer/modes * Fix golint failure in pkg/util/netsh/testing/ * kubeadm should always fall back to client version when there is any internet issue * Remove unwanted string converstion in metrics errors * Calling Unreserve plugin before recordSchedulingFailure in case of binding failure * Cleanup comments in TopologyManager socketmask abstraction * EvenPodsSpread: regenerated API compatibility data * EvenPodsSpread: auto-gen files * EvenPodsSpread: api changes * feat: move service_util to separated package * Surface error returned by LoadConfig * fix gofmt * Updated dependencies: BUILD/modules.txt * Update all imports to scheme in staging * Moved files from pkg/kubectl/scheme to staging * fix parameterization of test error message * Make kubelet report usageNanoCores for node on Windows * Register Kubelet server metrics * Cleanup kubelet authz tests & make explicit * Update csi hostpath driver in e2e * implement functionality to return all found instances * Add package level And/Or calls to TopologyManager socketmask abstraction * Add NewEmtpySocketMask() call to TopologyManager socketmask abstraction * gce: configure: use 'amd64' in kube core images manifest * Set score plugin's weight to 1 if it is not set * Improve readability for image manager tests * Rename TriggerPublisherFunc as IndexerFunc * Precheck score plugins' weight when initializing * Update the topologymanager to error out if an invalid policy is given * Update the cpumanager to error out if an invalid policy is given * Update CHANGELOG-1.15.md for v1.15.1. * Fix error log issue, remove OrDie suffix in methods naming * Refactor and Move node related methods to framework/node package * Revert "feat: cleanup pod critical pod annotations feature" * Fix code block for kubectl book. * Fix of review comments. Will squash later. * Don't expect pod to stay up during node upgrade * Update generated * Make changes to integrate new version * Update smd and kube-openapi version * Skip unnecessary operations if diff is less than 0 * build: bazel: release tars should use arch in the name * fix panic in ResourceLocation in case of empty pod ip list * Handle error return from MetaNamespaceKeyFunc * Revert "Promote pod autoscaling" * correct testname for existing E2E for testing backoff limit for jobs * correct testname for E2E related to active deadline in jobs * kubeadm: get rid of dependency on pkg/util/node * Windows: Sets the effective SecurityContext's RunAsUserName * Run code generation for new field * Windows: Adds RunAsUserName field in WindowsOptions * Fixes TestScorePlugin flakiness. * make node lease renew interval more heuristic * Update deprecated diff.ObjectGoPrintDiff method * Fix shellcheck failures in test/cmd/l.*.sh * Fix shellcheck failures in test/cmd/d.*.sh * Add OWNERS for generated openapi spec package * The implementation of Filter extension for the new framework * Add CHANGELOG-1.16.md for v1.16.0-alpha.1. * Topology Manager Implementation based on Interfaces * fix pkg/controller/volume/expand/pvc_populator.go * Update unit test with expected query parameters * Add supportedMountOptions for GCE PD CSI Driver tests * Add passthrough for MountOptions for NodeStageVolume for CSI * Remove unnecessary string() from policy_none * Fix placement of test in conformance.txt * remove function apply-encryption-config in configure-helper * Skip unnecessary copy of Selector * pod-overhead: autogenerated code for scheduling changes * scheduler: add pod Overhead support for requests * remove sudo from storage tests * Remove duplicate requestInfoResolver * Log warning if config labels deletion returns false * release: generate release docker tag with default values * remove kube-aggregator/pkg/client/* * Nominate Huang-Wei to scheduler reviewers. * kube-proxy: change buckets used by NetworkProgrammingLatency * Fixed build files. * Use error channel to capture first error. * Update generated files update generated protobufs * HPA scale-to-zero for custom object/external metrics * Fix iSCSI storage plugin cleanup in block volumes * Score plugin for the scheduling framework. * make taint.ToString() consistent with the reverse parsing logic * Tolerate the case if `related` event is nil * Avoid RbdDiskManager's DetachDisk never execute again * Check return value of LabelSelectorAsSelector in describe * Simplify trigger functions in cacher * kubeadm: use local copy of kubectl's version package * Fix no audit policy by default in hack/local-up-cluster.sh * Fix error shadowing error for createPDWithRetry so failures return actual error * move getInstancesByName logic to helper function * Create C:\tmp if DNE * release: accept empty KUBE_DOCKER_IMAGE_TAG * Promote API metadata return value * remove github.com/kardianos/osext * Propagate error from creating cacher and storage decorators up * Add patch method for container images * Run gofmt * Add test for ContainerStats * Add tracing to GetContainerStats * Fix compile on non windows linux systems * Removed duplicate code * Fix flaky test TestBindPlugin * Revert "Revert "Add Bind extension point of the scheduling framework"" * Rename unused variable * Run gofmt * [kubeadm] Adds json struct tags to exposed API types * kubectl/docs/book: bump lodash from 4.17.5 to 4.17.13 * Fix kubelet watches to propagate all options * cleanup: remove useless code * Remove manual conversions for ListOptions * Fix imports, Formatting of text * delivery event non blocking firstly * Bump Go version for release-1.14 to 1.12.5 * Bump Go version for release-1.13 to 1.11.5 * Adds kubeadm feature-gate for dual-stack (IPv6DualStack). Issue: #1612 * Bugfix: csi raw block that does not need attach mounted failed * Promote StatefulSet Replica scaling * fix: rename RegisterPriorityFunction2 to RegisterPriorityMapReduceFunction * Drop -r for variable within loop * openapi: add list_type_missing violations after bump * apiserver: make changes to integrate new structured-merge-patch * Run update-vendor.sh * Don't print non-error (blank lines in this case) to stdout, and don't print blank lines for empty resources * Adjust redis matching strings * Remove GBRedisSlave image * Use docker official redis images * bazel: add openapi generation for non-main spec and fix main spec * Bump(k8s.io/kube-openapi): aggregator: merge x-kubernetes-group-version-kind slices * feat: use scheduler.New in daemonset integration test * feat: use channel instead of mutex in scheduling predicates * cluster: configure: load images and add tags with no arch * proxy/ipvs: increase log level for graceful termination * Update vendor * openapi: commit low-change code-gen+sample-apiserver specs * apiextensions: update OpenAPI spec with v1beta1 meta types * Makefile.generated_files: build code-generator+sample-apiserver OpenAPI schemas * sample-apiserver: add openapi spec * apiextensions: exclude newly added openapi from hack/update-codegen.sh * code-generator: call openapi-gen from generate-internal-groups.sh * kubeadm/*/phases/init/certs,kubeconfig: add "kubernetes-version" flag * Break out of inner loop when newQuantity is negative * Update pd csi driver images to most recent stable * kubeadm: cleanup unnecessary k8sVer parameter for GetStaticPodSpecs * kubeadm: support fetching configuration from the original cluster for 'upgrade diff' * Add ImageFSInfo, ContainerStats, and ListContainerStats impl for linux to dockershim * Add explicit warning for deprecation of Cinder and ScaleIO volume providers * Fix golint failure in pkg/quota/v1/evaluator/core * Register WatchEvents metric * Make service "no endpoints" test use agnhost connect * move scheduler to use v1beta1.events * Add josephburnett to podautoscaler OWNERS. * Added code for e2e tests for network policy. * Autogenerated files * Migrate WatchBookmarks to Beta * Enable watch bookmarks in reflector * Add `docs` section to pull request template * sample-controller: add note about fetching deps in README * Fix scripts to not rely on codegen scripts being executable * Update testname to match requested case * Fix case and update to follow RFC2119 * Update revision number for the image * Remove support for etcd2 from cluster/images/etcd image * Wait for StackdriverLogging service to stop before restarting it. * Update to go 1.12.7 * add myself and lbernail as IPVS approvers * Remove deprecated --containerized flag in kubelet * improve error messages for verifydependency * Limit the read length of ioutil.ReadAll in `pkg/kubelet` and `pkg/probe` * Add davidz627 (David Zhu) to Approvers for OperationExecutor and GCE PD * use klog.Error instead of klog.Errorf when had no format * Fixes mount/unmount paths for migrated inline volumes. Some minor fixes for GCE specific inline migrated volumes * Move volume_expand tests to storage e2e testsuites * release lib: docker save remove special name for amd64 * Avoid truncating long log messages * mark dashboard tests [Feature:Dashboard] * Use metadata informers instead of dynamic informers in controller manager * Rename metadata.NewConfigOrDie to be consistent * Switch the garbage collector to use metadata client and protobuf * add rbac for events.k8s.io apiGroup to system:kube-scheduler * execute hack/update-codegen.sh, sync updates * add check when qps > 0 but burst <=0 * Add support for HA kubemark * Rename PluginOption to Option * keep processing other nodes for the nil node error * Add check to reduce orphaned volume * removed make-symlink flag and corresponding code in hyperkube * Remove support for KUBEMARK_MASTER_COMPONENTS_QPS_LIMITS * Update testname and fix typo * Update Conformance test Metadata * chore: make some func as public in azure provider * Added custom error message when wrong file is provided with KUBECONFIG (#78185) * Populate API version in synthetic authorization requests * feat: cleanup pod critical pod annotations feature * Return the error from validateOverhead in RuntimeClass#Validate * Return 400 on invalid patch requests * clean up and fix nits * tests: Fixes jessie-dnsutils image build * Generated * Add defaulting tests * Add mutatingwebhook validation tests * Require webhook names to be unique in v1 * Remove default admissionReviewVersions in v1, make required in validation * Remove default sideEffects in v1, make required in validation * Change default timeout to 10 seconds * Change default matchPolicy to Equivalent in v1 * Add EntryType * move jbeda to emeritus * add wojtek-t and yastij as approvers/reviewers for events package * move zmerlynn to emeritus * Switch the namespace controller to use the metadata client * Add fake client, informer factory, and lister to metadata client * Fake ObjectReaction should handle PartialObjectMetadata special * reference paths to update to bump dependencies * Changed to use select-object to filter the log properties * feat: use framework.ExpectNotEqual in e2e test * Remove redundant provisioning tests * Remove redundant tests * Add block volume support to InjectContent / TestVolumeClient * Refactor TestVolumeClient and InjectContent into common function * kubeadm: cleanup the code about cobra * Ignore pending pods. * Migrate kubemark to e2e-up/e2e/down scripts. * Hollow-node should use separate client for heartbeats. * Deployment Controller - don't copy pods in getPodMapForDeployment * flush current namespace when resources are not found * Avoid conflicts with other cobra auto completion * Remove incorrect ampersand in front of AverageValue in describeHorizontalPodAutoscalerV2beta2 * cancel process node if error occurs * Fix projected volume test clean up * Fix 'concurrency' logs typo * Promote pod autoscaling * Add timestamp to the docker test logs * add failedJobsHistoryLimit to successfulJobsHistoryLimit test * add e2e test for cronjob failedJobsHistoryLimit * Add benchmarks for FieldManager handling * promote bentheelder to build/ approver * enable token review when openapi is generated * Add comments as to why we force python2 * apiserver: add --shutdown-delay-duration to keep serving until LBs stop serving traffic * More consistent env var handling in vsphere e2e test * removed flaky watch code and added NewIndexerInformerWatcher * Allow hack/lint-dependencies.sh to skip golang.org/x/... deps, verify in verify-vendor.sh * Use O_CLOEXEC in util packages * Use O_CLOEXEC for volume subpath util * Use EPOLL/O_CLOEXEC in evicition notifier * If volume in delete request does not exist, return success. * make kubectl --raw consistent for create, update, get, delete * Add micro-benchmark for DeploymentController.getPodMapForDeployment method * kubectl book: added a leading slash to apis path * Remove unnecessary return value check * update caddy vendor dependency to v1.0.1 * kubeadm: move klog.InitFlags into app/kubeadm.go * kube-cross makefile add REGISTRY * Handle error return from http.NewRequest() * Remove unused aggregator ca key * Refactored metrics-related functions from framework/metrics_util.go * Revert Provide resource version in error if available * update code documentation to reflect change in status * Add e2e test for downward API with host network * Fix golint failures in pkg/proxy * apiaggregation available controller should only hit required endpoint * Remove unintended ampersand in front of in.Current.AverageValue * For windows, use exec.Command instead of syscall.Execve. * Remove the TODO for container name matching * Remove dead code from csi_client * Remove use of HugePages feature flag in test * update code docs around old todo that is not going to happen * fixed a typo in kubectl book * Change default failurePolicy to Fail in v1 * Install/register v1 admission registration types * Copy v1beta1 to v1 admission registration types * aggregator: wire OpenAPI correctly into PrepareRun flow * Cleanup: Audit log and error capitalization * use ExpectEqual under e2e/autoscaling * apiserver: chain delegated PrepareRun * Update CHANGELOG-1.14.md for v1.14.4. * Update CHANGELOG-1.13.md for v1.13.8. * Replace KubeDescribe with ginkgo.Describe in e2e/kubectl * Trace step should be at the end of calls rather than the begin. * Add node status report frequency to kubemark config * fix incorrect hpa status * use framework.ExpectEqual for tests * fix: use schedulerCache instead of podlister in config factory * Update CHANGELOG-1.12.md for v1.12.10. * feat: use framework.ExpectEqual instead of should * e2e: use framework.ExpectEqual() for test/e2e/lifecycle * Return MetricsError with ErrCodeNotSupported code * Remove panic in storage and add log * Provide resource version in error if available * correct kubectl cp argument order * add fakes for events package, add startEventWatcher to event interface * Use ExpectEqual in e2e/scalability * apiextensions: remove hacks around nullable * update CHANGELOG * Fix wrong indentation in shell * Use framework.ExpectEqual() for e2e/cloud tests * staging file fix lint error: receiver name should not be an underscore and rename * fix: golint error of clientgo * e2e: use framework.ExpectEqual() for test/e2e/network * Populate DisruptedPods field for non-dry run * Add go-runner to the list of e2e test targets * build_defs/pkg/make_deb.py needs python2 * e2e: Skip multi-node PV test when pods scheduled on the same node * update Bazel * e2e: avoid mandatory command line flags * Extender bind should respect IsInterested * feat: use framework.ExpectEqual in storage e2e test * e2e: fix full path support when reading viper config file * e2e: use framework.ExpectEqual() for test/e2e/node * Remove duplicate error messages * Fix descriptions of kubeadm * Closing stopCh when pod_store is not created * correct the CHANGELOG-1.11.md-fix-2 * etcd: Add comment re: SELinux * etcd: Change perms in Makefile, not Dockerfile * etcd: Ensure etcd binaries are world executable * Use framework.ExpectEqual() under e2e/scheduling * Get the pdb when conflict instead of relisting * Use ExpectEqual in e2e/common * Use ExpectEqual in e2e/auth * feat: use framework.ExpectEqual in upgrades and windows e2e test * feat: use framework.ExpectEqual in servicecatalog e2e test * Making sure we handle error on http.NewRequest(). * Use ExpectEqual under apps * cleanup bespoke ipv6 checking in kubeadm * etcd: Allow Makefile to be used on SELinux systems * Remove lazy provide from credential provider and kubelet (#79674) * clean up: node dropDisabledFields * Audit policy test * Allow kube-apiserver to test the status of kms-plugin. * consolidate etcd version * Test kubectl with x-kubernetes-preserve-unknown-fields * Output boolean for AllowPrivilegeEscalation * client-go: update installation instructions to reflect v12.0.0 release * etcd: Ensure etcd binaries are world executable * correct the CHANGELOG-1.12.md * edit google dns hostname * consolidate coreDNS version to ease dependency bump * updated fluentd to 1.5.1, es & kibana to 7.1.1 * Fix HA setup logic * Address couple of issue on image build for ARM arch * Add MASTER_NODE_LABELS * correct flag order in make-help * clean up redundant conditiontype OutOfDisk * add e2e for dualstack * kubelet: fix ip reporting for downward api * Fix golint failure in pkg/kubelet/dockershim/network/cni * Use ExpectEqual in e2e/kubectl * Updated github.com/gogo/protobuf from SHA to nearest-pinnable tag (v1.0.0), as part of dependency management cleanup: #79234 * call unreserve plugin before record event * Use ExpectEqual under e2e/apimachinery * Pass desiredPods to CleanupPods * Update gophercloud vendor dependency to v0.1.0 * kubeadm: run MemberAdd/Remove for etcd clients with exp-backoff retry * Create a service account Getter when TokenRequest is enabled * Hack PatchNodeStatus() to override the patch type on Status.Addresses * Document the problem with Node.Status.Addresses and strategic merge patch * generated items * vendor updates * updated publishing rules * kubenet for ipv6 dualstack * Add a metadata client to client-go that can read PartialObjectMetadata * release lib: save release docker tag in tarfile * RuntimeClass-admission: fixup comment, simplify nested ifs * kubelet: add allowed sysctl to KubeletConfiguration * correct the CHANGELOG-1.15.md * cri types changes * route controller + azure v6 routes * node ipam controller for ipv6 dualstack * api: dropDisabledFields * types modifications + conversion + conversion testing * IPv6DualStack ALPHA feature * Omit obtaining the lock when adding Nodes in newNodeTree * There are various reasons that the HPA will decide not the change the current scale. Two important ones are when missing metrics might change the direction of scaling, and when the recommended scale is within tolerance of the current scale. * Removed diplicated info row in v1.12.7 * Add public functions to define CSI external tests * Move etcd/util to etcd3/ * Utilize RWMutex for efficient backoff operations * Enable feature gate and kubelet flags for Topology Manager * Make AuthorizeClientBearerToken actually return if authn or authz is nil * Fix publishing x-kubernetes-preserve-unknown-fields working with kubectl * Remove unnecessary ETCD_CA_KEY check * quote container name in container already use error matching * Adds an optional golang runner to the conformance test image * Fix ordering settings in verify bazel * kubelet: add CNI cache dir option and plumb through to CNI and kubenet * move to libcni 0.7.0 * vendor: update containernetworking/cni to v0.7.1 * Cloud provider AWS library should query instance by ID when possible * kubelet: ensure stable order for images in node status * Modify kube-up to support cluster without nodes. * Move population of expectedUIDs outside lock * kubeadm: prevent PSP blocking of upgrade image prepull * Update autogenerated files * Move etcd/testing to etcd3/testing * kubeadm: don't use the Docker SDK in util/system/docker_validator* * Clear valueWatchers instead of removing every entry using a loop * Use Join instead of concat it manually in cephfs. * Add 'apiserver_watch_events_total' metric. * refactor: use controller.FilterActivePods in framework e2e test * Simplify the check of presence of labels in createPods * Deprecate scalability tests * Drop unnecessary claim parameter from PersistentVolumeController#updateBindVolumeToClaim * Update vendor * Update azure-sdk-for-go/services/network to 2018-08-01 * Update vendor * Update azure-sdk-for-go/services/containerregistry to 2018-09-01 * Check the correct value of Quantity in GetResourceRequest * Fix TestUnreservePlugin * Fix a bug that StatefulSet applies the revision incorrectly * improve error msg for predicate meta data * Add mattjmcnaughton as sig-node-reviewer * Autogenerate code * fixed a typo in kubectl book * agnhost: add connect subcommand * Add ability to output watch events from kubectl get * Allow YAML printer to separate multiple printed objects * followup of 79262 to cleanup PodPriority leftover * v1.15.0 API compatibility data * fix hack/update-vendor.sh array expansion * iptables proxier: fix comments for LB IP traffic from local address * Fix cgroup hugetlb size prefix for kB * Update dependency sirupsen/logrus * Update dependency opencontainer/runc * Move APIObjectVersioner * Move etcdtest to testing * Cleanup util file * Move metrics to etcd3 and clean up * Update dependencies BUILD/go.mod/go.sum * Add client-side status object handling * Fix AWS DHCP option set domain names causing garbled InternalDNS or Hostname addresses on Node * fix: predicates read nodes from scheduler cache * Remove internal object printing from kubectl * Updated import statements to reflect move to staging * Move pkg/kubectl/validation to staging * Fix closing of dirs in doSafeMakeDir * Remove unnecessary variable declaration * fix: change timeout value in csi plugin * Adding an if statement to check the number of worker nodes available before running a test that needs 2 nodes. * update openapi-spec * remove finailzers * Remove tests/e2e/scalability from the list of golint failures * Add missing CSINodeInformer when creating ConfigFactoryArgs * Fix golint failures related to docs * Fix golint failures for test/e2e/scalability * Remove dead metrics in etcd code * Default resourceGroup should be used when value of annotation azure-load-balancer-resource-group is empty string * automatically tag tests in test/integration/* as integration * Remove unnecessay call to findNewReplicaSet * supress libseccomp pkg-config errors * fix shellcheck failures in test/e2e_node/conformance/run_test.sh * kubeadm: fix bug for --cri-socket flag processing logic * add unit tests for azure_loadbalancer_test.go * Replace buzybox and pause pod image with agnhost * runtimeclass-admissioN: add owners file * update import-restrictions * Only create one pod per gpu node in E2E test * Add tests for podspec and podtemplatespec default changes * Remove duplicate error messages from cli commands * update vendor * Move pkg/util/logs to staging and update ref * update vendor * Move pkg/util/slice and update refs * Re-add kubectl docs to kubectl staging * Removes test-cmd inappropriate dependency on kubectl * Update BUILD files * Update imports for the files moved to staging * Move pkg/kubectl/util/fieldpath to staging * Use coordination v1 API * Fixed clock.fakeTimer.Stop and Reset * Fix client-go request benchmark * ? fix the KEP-kube-scheduler link * handling OptimisticLockError in kubelet * Run sidecars for csi-mock as privileged * Don't leak ssh connections * Short-circuit the evaluation of `cpuFraction` and `memoryFraction` * tests: Clarifies agnhost's entrypoint-tester's usage * Centralizes images into agnhost (part 3) * Bump gopkg.in/check to v1.0.0-20180628173108-788fd7840127 * Bump objx to v0.2.0 * Bump easyjson to v0.0.0-20190614124828-94de47d64c63 * Bump pty to v1.1.5 * Bump govalidator to v0.0.0-20190424111038-f61b66f89f4a * Bump purell to v1.1.1 * Bump go-openapi dependencies to preferred version * kubelet: retry pod sandbox creation when containers were never created * Fix service controller not release loadBalancer issue in corner case. * hack/boilerplate: added regex to strip Python shebang * Remove monopole from root OWNERS * block not allowed node labels on kubelet * Updated BUILD dependency to use staging * Removes unused BUILD file * Move pkg/kubectl/util/certificate to staging * kubeadm: update OWNERS for 1.16 * tests: Replaces images used with agnhost (part 3) * Updates to dependencies including go.mod, go.sum, and BUILD files * Move pkg/kubectl/util/resource to staging * add defaul latest tag as well * tests: Fixes agnhost logs-generator usage * Add generated proto files * Fix typo in network policy ingress rule * apiserver: store httplog in context * apiserver: don't log stack trace on /healthz error * fix hack/lib/version.sh shellcheck failures * remove dead KUBE_TEST_API_VERSIONS from test-integration * refactor: add reset method to all test plugins * Updates to dependencies including go.mod, go.sum, and BUILD files * Removes unused BUILD file * Move pkg/kubectl/util/qos to staging * Add benchmark for scheduling of pods with PVs * Migrate TaintManager to use watch for listing pods instead of expensive listing pods call. * Fix CRD validation error for 'items' field * fix KubeletConfiguration apiVersion * fix shellcheck failures in cluster/restore-from-backup.sh * Restore early return for podSpecHasContainer * clarify elastisearch script as bash * fix hack/lib/init.sh shellcheck failures * fix hack/lib/swagger.sh shellcheck failures * Conformance walker should handle nested/adjacent Describes * Moving pkg/kubectl/util/storage to staging * Fixed and clarified comments and parameter names in index.go (#77633) * Update link in pull request template * crd-handler: level-trigger storage recreation and fix a race * Dependency changes * Update imports after moving util/event to staging * Move pkg/kubectl/util/event into staging * Add ipv6 support to the DNS e2e tests * move images from gcr.io to quay.io * Add ipv6 support to the e2e guestbook test * Increase Network Policy tests coverage * update vendor * Move pkg/util/rbac to staging and update refs * Update go.mod, go.sum, and BUILD dependencies * Update import statements to reference code moved to staging * Move pkg/kubectl/util/hash to staging * Generated build file for alwayspullimages * Return all errors in alwayspullimages.Validate() * flowcontrol context aware and fix request may hang issue * fix hack/make-rules/make-help.sh shellcheck failures * Replace HTTP compression with an inline handler * Set API compression feature gate to Beta * Add unit tests for CSI predicate * Update scheduler to use volume limits from CSINode * Update nodeinfomanager to store volume limits in CSINode * Auto-generated code for volume limits API * Add volume limits API changes * Update doc.go in staging/src/k8s.io/ * Remove the OutputFormatType and OutputFormatArgument fields as they are no longer used. * move jws to k8s.io/cluster-bootstrap * add IPv6 support to the e2e PreStop test * Use WithOption to implment scheduler register * Refactor statefulset e2e tests * kubeadm: add --control-plane-endpoint flag * Add Policy None for Topology Manager * hack: fixed issues from previous refactor PR * feat: cleanup feature gates for CSIPersistentVolume * Revert "Skip ILB creation on GCE if neg annotation is present" * remove misterikkit from scheduler maintainers * printer: fix a nil pointer dereference * Updated publishing dependencies rules * Updates to dependencies including go.mod, go.sum, and BUILD files * Updated imports for util/deployment * Moved pkg/kubectl/util/deployment to staging * Fix max port value to 65535 * Add env var(CNI_STORAGE_PATH) for cni storage path. * document KUBE_ROOT in util.sh * fix hack/verify-no-vendor-cycles.sh shellcheck failures * fix hack/pin-dependency.sh shellcheck failures * fix hack/update-vendor.sh shellcheck failures * add kube::util::list_staging_repos * automatically set clinkopts * update libssecomp-golang to v0.9.1 * add sleep 5 before exponential backoff in waitUntilVolumeAvailable * Fix --watch-only of a single item with table output * Add kubectl get/list/watch tests for table output * Test humanreadable table output * Fix short buffer error in get test * Update CHANGELOG.md * Updated publishing dependencies rules, import-restrictions * Update go.mod, go.sum, and BUILD file dependencies * Removes unused BUILD file * Move pkg/kubectl/util/podutils to staging * kubeadm: Retire MarshalClusterConfigurationToBytes * kubeadm: Stop using //pkg/util/normalizer * publishing: use deps in replace directive in rules * kubeadm: cleanup ExperimentalControlPlane and ExperimentalUploadCerts * fix: Use correct function to remove etcd member * Pass registry parameter to scheduler instead of global singleton * Add support for writing out of tree custom scheduler plugins * change from milli bytes to bytes in ephemeral-storage resource limits * Drop unused dependencies * github.com/kr/text v0.1.0 * gopkg.in/natefinch/lumberjack.v2 v2.0.0 * github.com/hashicorp/hcl v1.0.0 * github.com/gorilla/websocket v1.4.0 * github.com/google/uuid v1.1.1 * github.com/BurntSushi/toml v0.3.1 * fix test/e2e_node/gubernator.sh shellcheck failures * use kube::util::md5 for update-vendor-licenses.sh * copy kube::release:md5 to kube::util::md5 * Add ipv6 support to [sig-apps] StatefulSet e2e test * feat: cleanup feature gates for KubeletPluginsWatcher * feat: remove several GA features flag * feat: cleanup PodPriority features gate * Respect Allocation IDs * ipvs proxy: add unit test for udp graceful termination * Switch test manifests to apps/v1, remove beta workloads calls * Stop serving apps/v1beta1, apps/v1beta2, and deprecated extensions/v1beta1 resources by default * kubectl attach test: wait for input before proceeding * Move KubeletPodResources to the Beta section * Revert "Add Bind extension point of the scheduling framework" * Use RWMutex to improve locking for serviceCache * e2e: remove framework.Failf * fix typo heathcheck * publishing: fix rules for kubectl * Adds kubectl logo images * added comment * updates based off reviews * update to remove unused test * updated tests to prevent false positive * seperation of network calls when getting version * Update heketi vendor dependency to v9.0.0 * Update BUILD files for container helper * Create helpers for iterating containers in a pod * kubeadm: cleanup command output * service controller: if targetPort has changed will process by cloud-provider * feat: remove several types in runtime serializer * Add stub device plugin for e2e tests * Remove redundant initilization for service controller * Do not delete an incorrect pod when replacing a mirror pod * Refactored runtime.Object helper functions into subpkg * enable ability to show hidden metrics * hack/update-vendor.sh * Move pkg/util/printers to staging and update refs * kunsupported cgroup setup causes kubelet to emit a warning rather than exiting * Moved pkg/kubectl/util/term, pkg/kubectl/util/templates, pkg/kubectl/util/interrupt, and pkg/kubectl/util/interrupt to staging * add myself to sig-network-reviewers * add import-alias for k8s.io/kubernetes/pkg/scheduler/apis/config/v1alpha1 * add import-alias for k8s.io/kubernetes/pkg/proxy/apis/config/v1alpha1 * add import-alias for k8s.io/kubernetes/pkg/kubelet/apis/stats/v1alpha1 * add import-alias for k8s.io/kubernetes/pkg/kubelet/apis/resourcemetrics/v1alpha1 * add import-alias for k8s.io/kubernetes/pkg/kubelet/apis/podresources/v1alpha1 * add import-alias for k8s.io/kubernetes/pkg/kubelet/apis/pluginregistration/v1beta1 * add import-alias for k8s.io/kubernetes/pkg/kubelet/apis/pluginregistration/v1alpha1 * add import-alias for k8s.io/kubernetes/pkg/kubelet/apis/pluginregistration/v1 * add import-alias for k8s.io/kubernetes/pkg/kubelet/apis/deviceplugin/v1beta1 * add import-alias for k8s.io/kubernetes/pkg/kubelet/apis/deviceplugin/v1alpha * add import-alias for k8s.io/kubernetes/pkg/kubelet/apis/config/v1beta1 * add import-alias for k8s.io/kubernetes/pkg/controller/apis/config/v1alpha1 * add import-alias for k8s.io/api/storage/v1beta1 * add import-alias for k8s.io/api/storage/v1alpha1 * add import-alias for k8s.io/api/storage/v1 * add import-alias for k8s.io/api/settings/v1alpha1 * add import-alias for k8s.io/api/scheduling/v1beta1 * add import-alias for k8s.io/api/scheduling/v1alpha1 * add import-alias for k8s.io/api/scheduling/v1 * add import-alias for k8s.io/api/rbac/v1beta1 * add import-alias for k8s.io/api/rbac/v1alpha1 * add import-alias for k8s.io/api/rbac/v1 * add import-alias for k8s.io/api/policy/v1beta1 * add import-alias for k8s.io/api/node/v1beta1 * add import-alias for k8s.io/api/node/v1alpha1 * add import-alias for k8s.io/api/networking/v1beta1 * add import-alias for k8s.io/api/networking/v1 * add import-alias for k8s.io/api/imagepolicy/v1alpha1 * add import-alias for k8s.io/api/extensions/v1beta1 * add import-alias for k8s.io/api/events/v1beta1 * add import-alias for k8s.io/api/core/v1 * add import-alias for k8s.io/api/coordination/v1beta1 * add import-alias for k8s.io/api/coordination/v1 * add import-alias for k8s.io/api/certificates/v1beta1 * add import-alias for k8s.io/api/batch/v1beta1 * add import-alias for k8s.io/api/batch/v1 * add import-alias for k8s.io/api/autoscaling/v1 * add import-alias for k8s.io/api/authorization/v1beta1 * add import-alias for k8s.io/api/authorization/v1 * add import-alias for k8s.io/api/authentication/v1beta1 * add import-alias for k8s.io/api/authentication/v1 * add import-alias for k8s.io/api/auditregistration/v1alpha1 * add import-alias for k8s.io/api/apps/v1beta2 * add import-alias for k8s.io/api/apps/v1beta1 * add import-alias for k8s.io/api/apps/v1 * add import-alias for k8s.io/api/admission/v1beta1 * add import-alias for k8s.io/api/admissionregistration/v1beta1 * Fix the creation of load balancer policy for the NodeIp when NodePort specified is same as service Port * Fix golint issues in pkg/kubelet/secret * Fix golint issues in pkg/kubelet/prober/results * Fix golint issues in pkg/kubelet/prober * updating github.com/go-bindata/go-bindata to v3.1.1 * Sample controller: Init flags * compiled in a package level var * allow importing k8s.io/klog * auto-generated * Add Bind extension point of the scheduling framework * refactor bootstrap token utils * Clean up selft-set node labels * Fix review comments to use ${} * change sed to ${SED} in local-up-cluster.sh * Obtain readyzLock once in installReadyz * Replace mapfile with kube::util::read-array * autogenerated code update based in new plugin * add RuntimeClass admission controller plugin * introduce RuntimeClass admission controller * Fix mutating webhook test image 'addlabel' to update existing labels instead of clobbering * Close auditStopCh if SecureServing encounters error * Update CHANGELOG-1.15.md for v1.15.0. * Move soltysh back to approvers * Update Sig-Apps OWNERS in places that were missed in #76669 * kubeadm: improve the kubeconfig file validation phase * Dropping unused dependencies * updating github.com/miekg/dns to v1.1.4 * updating github.com/spf13/cast to v1.3.0 * updating gopkg.in/yaml.v2 to v2.2.2 * updating gopkg.in/square/go-jose.v2 to v2.2.2 * updating github.com/stretchr/testify to v1.3.0 * updating github.com/spf13/viper to v1.3.2 * updating github.com/spf13/pflag to v1.0.3 * updating github.com/spf13/jwalterweatherman to v1.1.0 * updating github.com/spf13/cobra to v0.0.4 * updating github.com/spf13/afero to v1.2.2 * refactor: replace framework.Failf with e2elog.Failf * Pass updated deployment for comparison of replica count * Output the nvidia gpu information in the E2E test. * Make the check strict to use ExpectNoError() * pod-overhead: autogenerated code updates * pod overhead: drop from RuntimeClass base on feature-gate * pod-overhead: add Overhead to RuntimeClass internal type * pod-overhead: add Overhead to RuntimeClass * pod-overhead: drop from PodSpec based on feature-gate * pod-overhead: add Overhead to PodSpec internal type * pod-overhead: add Overhead to PodSpec * pod-overhead: Introduce PodOverhead feature gate * Minor change: delete unused constant from service controller * e2e: fix return value of WaitForPodsWithLabelRunningReady * Redundant call to WithAll in NewWaitFlags * Fix golint failures of test/e2e/storage/testsuites * kubeadm: cleanup deps on pkg/version * Move node related methods to framework/node package * Close watcher early for volume detachment * The default-http-backend for handling 404 pages will now point to 404 handler with prometheus integration and provides metrics related to requests per second and the duration of responding to the requests for various percentile groupings. Please check https://github.com/kubernetes/ingress-gce/blob/master/cmd/404-server-with-m… for details about the 404-server-with-metrics. * add readyz endpoint for kube-apiserver readiness checks * Refactor online volume resize unit tests * kubelet_stats: fix potential e2e crash dereferencing CPU * kubeadm: cleanup deps on pkg/master/ports * tests: Replaces images used with agnhost (part 2) * move initsystem to kubeadm * Update the comments on how to check disk conflict * re-named conformance test name for pod creating with CPU and memory resources * Add unit tests for azure_controller_common.go and azure_controller_standard.go * tests: Fixes Windows image pulling tests * Remove selected IP from backup-volfile-servers list to avoid warning in mount logs. * rundir attribute was missing for some new integration test cases * fix kubelet can not delete orphaned pod directory when the kubelet's root directory symbolically links to another device's directory * Fix shellcheck faulures in test/cmd * test images: Removes linux/ prefix from agnhost BASEIMAGE * Add interface for registerable metrics which does not have any private methods * fix golint failure in e2e/common/util.go * remove duplicate comment in e2e/common/sysctl.go * Remove unused ServiceController.loadBalancerName method * use reflect.deepEqual for noop object comparison * use noopRegistry for default global legacy prom registry and expose an http handler * Create SECURITY.md for GitHub security policy page * Removed deprecated --resource-container flag from kube-proxy. * Add kubeletstatsv1alpha1 as the preferred alias for k8s.io/kubernetes/pkg/kubelet/apis/stats/v1alpha1 * verify import aliases * correct the CHANGELOG-1.13.md * correct the CHANGELOG-1.14.md * Ignore cgroup pid support if related feature gates are disabled * Code cleanup for for probe/http * Remove unnecessary loop for lowering expectations * Fix CHANGELOG-1.15.md bad format * fix golint failures for pkg/volume/scaleio and pkg/volume/storageos * add m00nf1sh as approver/reviewer in aws provider * Add ExpectEqual() to e2e framework * updating github.com/russross/blackfriday to v1.5.2 * updating github.com/robfig/cron to v1.1.0 * updating github.com/opencontainers/selinux to v1.2.2 * updating github.com/opencontainers/image-spec to v1.0.1 * updating github.com/opencontainers/go-digest to v1.0.0-rc1 * updating github.com/onsi/gomega to v1.5.0 * updating github.com/onsi/ginkgo to v1.8.0 * updating github.com/mvdan/xurls to v1.1.0 * updating github.com/mitchellh/go-wordwrap to v1.0.0 * updating github.com/mistifyio/go-zfs to v2.1.1+incompatible * updating github.com/mholt/caddy to v1.0.0 * updating github.com/mattn/go-shellwords to v1.0.5 * updating github.com/magiconair/properties to v1.8.1 * updating github.com/kr/pretty to v0.1.0 * updating github.com/json-iterator/go to v1.1.6 * updating github.com/jonboulle/clockwork to v0.1.0 * updating github.com/google/gofuzz to v1.0.0 * updating github.com/golang/mock to v1.2.0 * updating github.com/godbus/dbus to v4.1.0+incompatible * updating github.com/go-bindata/go-bindata to v3.1.1+incompatible * updating github.com/fatih/camelcase to v1.0.0 * updating github.com/evanphx/json-patch to v4.2.0+incompatible * updating github.com/emicklei/go-restful to v2.9.5+incompatible * updating github.com/cyphar/filepath-securejoin to v0.2.2 * updating github.com/cpuguy83/go-md2man to v1.0.10 * updating github.com/coreos/go-semver to v0.3.0 * updating github.com/client9/misspell to v0.3.4 * Fix for build failure - viper now uses ConfigFileNotFoundError * Remove dot import from e2e test and replace with framework.ExpectNoError * Fix file permissions for non executable files * Run verify-test-code on all e2e tests * Cleanup e2e_node test style * Increase load balancer timeout in test cases * Refactor pkg/util/mount to be more reusable * Add HEAD fixtures * Add v1.14.0 fixtures * Add missing API groups to compatibility test * kubeadm: Don't use "//pkg/apis/core".Resource helper * Fix nil pointer * link scripts in build/README.md * kubeadm: Replace ValidateDNS1123Subdomain * kubeadm: Don't use RBAC helpers * fix: make azure disk URI case insensitive * Modify klog Warning 'The resourceVersion for the provided watch is too old' to Info. * Remove returned value of func handleCreateEvent * Clean up node-problem-detector configuration for GCI * Updated code with gofmt * kubectl config set hangs on some invalid property names #415 * Enable cadvisor ProcessMetrics collecting. * ipvs: fix string check for IPVS protocol during graceful termination * tests: Combine Linux / Windows image pulling tests * tests: Replaces images used with agnhost (part 1) * tests: Sets MaximumNArgs for agnhost subcommands to 0 * Updates agnhost README and Dockerfile files * Updates agnhost image version in documentation * test images: Centralizes images into agnhost (part 1) * Don't dereference nil pointer in conflicts * test images: Refactors agnhost image * Adding metrics to nfs driver * Fix spurious .sock files running envelope unit tests * Correct a typo * hack/make-rules/test.sh: run all staging unit tests * do not delete pods whose deletiontimestamp != nil * Replaced klog with an error wrapper * homogenize min-request-timeout for cr handler * Centralizes images into agnhost (part 2) * update to go 1.12.6 * get-kube-binaries: use GCE token to fetch artifacts from GCS * [e2e] move Failf from e2e/framework to e2e/framework/log * add more tests on clearing managedFields * Do not add non-PersistentVolume to return value for pvAssumeCache#ListPVs * unit tests for the volume plugin name that's used inside GeneratedUnmapVolumeFunc for csi migration on/off scenarios * Return early when mount ref is determined * Inverted error handling to ensure server-side apply does not fall back on client-side apply when there is an error * Add more backward compatible access mode logic to remove ReadOnlyMany access mode when ReadWriteOnce,ReadOnlyMany specified * prefilter extension point implementation. * cache mutation detector: use correct diff function * fix stability level annotation for counter vec * Update gpu device plugin to better support Vulkan workloads * Fix typos. * apiextensions: simplify default value pruning test * apiextensions: only clone on !s.XEmbeddedResource * apiextensions: add unit test for x-kubernetes-preserve-unknown-fields with additionalProperties * Suppress irrelevant jq error message when propagating pinned dependencies * remove vendored code * Remove ovirt/cloudstack/photon cloud providers * apiextensions: fix variable name * apiextensions: add items+additionalProperties test coverage for objectmeta.Validate * Check correct error for cleanup * added defer keyword to wg.Done() in logs.go * Remove return value of mergeHealthChecks. Simplified HC equivalence check. * Fix typo in node lifecycle controller * fix volumecreate comments * rename and change aws backoff vars * tag some release-blocking tests taking over 5min as [Slow] * kubeadm: fix minor typo in a comment * use klog.Info instead of klog.Infof when had no format * Force using Go Modules in README.md * Fix reserved cgroup systemd * Remove experimental note for ipvs in kube-proxy arguments * Fix keep the watcher open for too long * Use no-priority best-effort pod as the preemptor in BenchmarkGetPodsToPreempt * preload metrics for legacyregistry for backwards compatibility * Allow master nodes to be accessed from private ips * Remove unwanted newlines in glusterfs driver * Promote existing E2Es for hostport/HostIP resolution to conformance * New E2E to verify pods are deleted after Job deletion * fix typo in probe.go * Calling PatchAction on typed objects should work correctly * update CHANGELOG-1.14.md * Fix spelling of test name * enforce the interface relationship between ServicePort and BaseServiceInfo * Fix kubeadm service-cidr mapping to service-cluster-ip-rage for kube-controller-manager. * Modify firewall rules names to make them shorter. * fix some golint failures of pkg/registry * Add integration test for propagationPolicy=Orphan GC * Bug fix: remove etcd related issues in bazel-test-integration * Simplify func ConstructVolumeSpec * remove todo in pkg/ssh * [e2e] Make meaningful service name in test * Add more approvers/reviewers to cluster/gce/windows * Support image status by ID. * Create-update-delete-deployment example using dynamic package * Sort kubeadm CLI default params for component config API objects * merge common funcs * Change quoting format * Fix shellchecks in test/cmd/{b,c}.*.sh * Fix return value for ExtractFieldPathAsString * Remove inner loop for finding MinReclaim in ParseThresholdConfig * Fixed some minor errors in openapi * Enable resize in default gce storageclass * Fix verify-shellcheck comments * Enable API operation log on conformance job * Iterate through thresholds in managerImpl#synchronize * Move test/e2e use to v1 APIs * Remove redundant assignment to volumeAttachment * Add readme for API compatibility data * Add helper script to regenerate API compatibility data * Remove dead codes * kubelet: add sjenning to kubelet subdirectory owners files * 74900, kubectl logs selector supports tail=-1 * Use Mutex for synchronization in imageCache * Use go standard library for common bit operations * kubeadm:fix typo in controlplane.go * change aws encryptedCheck to exponential backoff * Remove pod UID from volumeMount, we can get it elsewhere * Rename pkg/volume/util/quota -> pkg/volume/util/fsquota * Adding test cases to make sure objectSelector works for CRD * fix typo in /pkg/kubelet/container * kubeadm: improve kubelet-config-x.y ConfigMap logic * fix golint failures of pkg/kubelet/prober pkg/kubelet/secret * Add references of registry and image from imageutils * Remove unnecessary string() * kubeadm: apply deterministic order on certificate phases * Check limits for resolve conf outside the loop * Skip tests is fstype is xfs and node distro is gci, cos, or windows * Continue admitting the pod regardless of return value from killPodFunc * Unstructed helpers: document lack of slice syntax * remove unused events in event.go * Refactored pod-related functions from framework/util.go * Avoid unnecessary concatenation of errors * fix typo in /test/integration * fix: assign default value for pod.Status.StartTime in TestSelectNodesForPreemption * delete TODO: remove when we stop supporting the legacy group version * Update SECURITY_CONTACTS with current PSC * hack: refactored code in update_owners.py * fix a mistake in CHANGELOG-1.14.md * fix some mistakes in changelog * Change to EnableHTTPS in kube-apiserver options * Fix golint issues in pkg/kubelet/stats/log_metrics_provider.go * Fix golint issues in pkg/kubelet/client * Use reservoir sampling to select one host from priority list * Fix nil pointer dereference in metrics value calculator. * Call getKubeletSandboxes first in containerGC#evictSandboxes * Break out of loop when currentRevision is found in defaultStatefulSetControl#getStatefulSetRevisions * Fix typo * Updated node.go using update-gofmt.sh * change BeTrue to Equal or BeNumerically in cronjob e2e test * get rid of the redundancy field in kube-proxy option * Add missing TestMain() functions * Cleanup math/rand package usage * Add documentation about "non-zero requests" * fix flexvol stuck issue due to corrupted mnt point * enrich oom event message info * ignore failed pods to not stuck rolling update daemonset * fix golint errors in test/e2e/storage/utils * Narrow down the lock * fix golint failures of pkg/kubelet/configmap pkg/kubelet/custommetrics * kubelet: include init containers when determining pod QoS * kubelet: lookup node address for external provider if none is set * Fix shellcheck failures in test/cmd/g.*sh * fix golint failures of pkg/util/parsers pkg/util/sysctl pkg/util/system * pkg/util/workqueue: delete deprecated metrics * Promote e2e verifying DNS resolution for o pod's fqdn, hostname and subdomain * Clean up pkg/cloudprovider/providers/openstack. * pkg/util/workqueue/prometheus: fix double registration * fix shellcheck failures in /hack/make-rules/test.sh * Add readiness probe for Kibana * fix shellcheck failures in /hack/make-rules/clean.sh,test.sh,vet.sh * Allow version field in the title to be changeable * mark deprecated kubelet-read-only-port * add warning log for csr controllers * Check error return from Update * creating instance groups in parallel * Fix message of failed sync * Updated pkg node BUILD for new lib inclusion * Fix for kube-proxy to wait for some duration for the node to be defined * Update CHANGELOG-1.14.md * Promote security context NodeConformance tests to Conformance suite * tests: creates HostPath pods as unprivileged * fix error 'coresponding' * fix typo: "inidvidual"-> "individual" * Remove unnecessary map in cleanupHistory * Remove unwanted `else` block from statefulset controller. * enable multipod e2es for intree volumes * Bug fix 72757.Removed deprecated label kubernetes.io/cluster-service * apiserver: Update a comment * Fix shellchecks follow the `${var:?}` pattern * Stop testing containerized kubelet in e2e-node * Improve windows home directory selection * rm unused judgement * remove redundant words 'the' in comment * fix cp time stamp is in the future error * Set ProviderID when running kubemark node * add a test case for HostnameOverride * when SessionAffinityConfig is different, enqueueService in update Service handler * Adjust node_exporter CPU params ==== libcontainers-common ==== - Update to image 4.0.0 - Add http response to log - Add tests for parsing OpenShift kubeconfig files - Compress: define some consts for the compression algos - Compression: add support for the zstd - Compression: allow to specify the compression format - Copy: add nil checks - Copy: compression: default to gzip - Copy: don't lose annotations of BlobInfo - Copy: fix options.DestinationCtx nil check - Copy: use a bigger buffer for the compression - Fix cross-compilation by vendoring latest c/storage - Internal/testing/explicitfilepath-tmpdir: handle unset TMPDIR - Keyctl: clean up after tests - Make container tools work with go+openssl - Make test-skopeo: replace c/image module instead of copying code - Media type checks - Move keyctl to internal & func remove auth from keyring - Replace vendor.conf by go.mod - Update dependencies - Update test certificates - Update to mergo v0.3.5 - Vendor.conf: update reference for containers/storage - Update to storage 1.13.4 - Update generated files - ImageBigData: distinguish between no-such-image and no-such-item - ImageSize: don't get tripped up by images with no layers - tarlogger: disable raw accouting - Update to libpod 1.6.0 - Nothing changed regarding the OCI hooks documentation provided by this package ==== libevent ==== - Add upstream patches with the feature of "prepare" and "check" watchers. That feature is needed by envoy-proxy: * 0001-evwatch-Add-prepare-and-check-watchers.patch * 0002-evwatch-fix-race-condition.patch ==== podman ==== Version update (1.5.1 -> 1.6.1) Subpackages: podman-cni-config - Update podman to v1.6.1 * Features - The podman network create, podman network rm, podman network inspect, and podman network ls commands have been added to manage CNI networks used by Podman - The podman volume create command can now create and mount volumes with options, allowing volumes backed by NFS, tmpfs, and many other filesystems - Podman can now run containers without CGroups for better integration with systemd by using the --cgroups=disabled flag with podman create and podman run. This is presently only supported with the crun OCI runtime - The podman volume rm and podman volume inspect commands can now refer to volumes by an unambiguous partial name, in addition to full name (e.g. podman volume rm myvol to remove a volume named myvolume) (#3891) - The podman run and podman create commands now support the - -pull flag to allow forced re-pulling of images (#3734) - Mounting volumes into a container using --volume, --mount, and - -tmpfs now allows the suid, dev, and exec mount options (the inverse of nosuid, nodev, noexec) (#3819) - Mounting volumes into a container using --mount now allows the relabel=Z and relabel=z options to relabel mounts. - The podman push command now supports the --digestfile option to save a file containing the pushed digest - Pods can now have their hostname set via podman pod create - -hostname or providing Pod YAML with a hostname set to podman play kube (#3732) - The podman image sign command now supports the --cert-dir flag - The podman run and podman create commands now support the - -security-opt label=filetype:$LABEL flag to set the SELinux label for container files - The remote Podman client now supports healthchecks * Bugfixes - Fixed a bug where remote podman pull would panic if a Varlink connection was not available (#4013) - Fixed a bug where podman exec would not properly set terminal size when creating a new exec session (#3903) - Fixed a bug where podman exec would not clean up socket symlinks on the host (#3962) - Fixed a bug where Podman could not run systemd in containers that created a CGroup namespace - Fixed a bug where podman prune -a would attempt to prune images used by Buildah and CRI-O, causing errors (#3983) - Fixed a bug where improper permissions on the ~/.config directory could cause rootless Podman to use an incorrect directory for storing some files - Fixed a bug where the bash completions for podman import threw errors - Fixed a bug where Podman volumes created with podman volume create would not copy the contents of their mountpoint the first time they were mounted into a container (#3945) - Fixed a bug where rootless Podman could not run podman exec when the container was not run inside a CGroup owned by the user (#3937) - Fixed a bug where podman play kube would panic when given Pod YAML without a securityContext (#3956) - Fixed a bug where Podman would place files incorrectly when storage.conf configuration items were set to the empty string (#3952) - Fixed a bug where podman build did not correctly inherit Podman's CGroup configuration, causing crashed on CGroups V2 systems (#3938) - Fixed a bug where podman cp would improperly copy files on the host when copying a symlink in the container that included a glob operator (#3829) - Fixed a bug where remote podman run --rm would exit before the container was completely removed, allowing race conditions when removing container resources (#3870) - Fixed a bug where rootless Podman would not properly handle changes to /etc/subuid and /etc/subgid after a container was launched - Fixed a bug where rootless Podman could not include some devices in a container using the --device flag (#3905) - Fixed a bug where the commit Varlink API would segfault if provided incorrect arguments (#3897) - Fixed a bug where temporary files were not properly cleaned up after a build using remote Podman (#3869) - Fixed a bug where podman remote cp crashed instead of reporting it was not yet supported (#3861) - Fixed a bug where podman exec would run as the wrong user when execing into a container was started from an image with Dockerfile USER (or a user specified via podman run --user) (#3838) - Fixed a bug where images pulled using the oci: transport would be improperly named - Fixed a bug where podman varlink would hang when managed by systemd due to SD_NOTIFY support conflicting with Varlink (#3572) - Fixed a bug where mounts to the same destination would sometimes not trigger a conflict, causing a race as to which was actually mounted - Fixed a bug where podman exec --preserve-fds caused Podman to hang (#4020) - Fixed a bug where removing an unmounted container that was unmounted might sometimes not properly clean up the container (#4033) - Fixed a bug where the Varlink server would freeze when run in a systemd unit file (#4005) - Fixed a bug where Podman would not properly set the $HOME environment variable when the OCI runtime did not set it - Fixed a bug where rootless Podman would incorrectly print warning messages when an OCI runtime was not found (#4012) - Fixed a bug where named volumes would conflict with, instead of overriding, tmpfs filesystems added by the --read-only-tmpfs flag to podman create and podman run - Fixed a bug where podman cp would incorrectly make the target directory when copying to a symlink which pointed to a nonexistent directory (#3894) - Fixed a bug where remote Podman would incorrectly read STDIN when the -i flag was not set (#4095) - Fixed a bug where podman play kube would create an empty pod when given an unsupported YAML type (#4093) - Fixed a bug where podman import --change improperly parsed CMD (#4000) - Fixed a bug where rootless Podman on systems using CGroups V2 would not function with the cgroupfs CGroups manager - Fixed a bug where rootless Podman could not correctly identify the DBus session address, causing containers to fail to start (#4162) - Fixed a bug where rootless Podman with slirp4netns networking would fail to start containers due to mount leaks * Misc - Significant changes were made to Podman volumes in this release. If you have pre-existing volumes, it is strongly recommended to run podman system renumber after upgrading. - Version 0.8.1 or greater of the CNI Plugins is now required for Podman - Version 2.0.1 or greater of Conmon is strongly recommended - Updated vendored Buildah to v1.11.2 - Updated vendored containers/storage library to v1.13.4 - Improved error messages when trying to create a pod with no name via podman play kube - Improved error messages when trying to run podman pause or podman stats on a rootless container on a system without CGroups V2 enabled - TMPDIR has been set to /var/tmp by default to better handle large temporary files - podman wait has been optimized to detect stopped containers more rapidly - Podman containers now include a ContainerManager annotation indicating they were created by libpod - The podman info command now includes information about slirp4netns and fuse-overlayfs if they are available - Podman no longer sets a default size of 65kb for tmpfs filesystems - The default Podman CNI network has been renamed in an attempt to prevent conflicts with CRI-O when both are run on the same system. This should only take effect on system restart - The output of podman volume inspect has been more closely matched to docker volume inspect ==== systemd ==== Subpackages: libsystemd0 libudev1 systemd-logger systemd-sysvinit udev - Add 0001-compat-rules-escape-when-used-for-shell-expansion.patch (bsc#1153648) Added to the quaratine area to avoid uploading a new tar ball just for that single change. It will be dropped during the next import. - don't package locales in -mini package - Import commit 428b937f917ae177f2315e8469800941885e441a 0026b58744 pid1: fix DefaultTasksMax initialization - Import commit ed81f69153488279957268e247a5c81b678da491 (changes from v243-stable) fab6f010ac dhcp6: use unaligned_read_be32() f2d9af4322 dhcp6: add missing option length check ccf797511e ndisc: make first solicit delayed randomly f2275b6e12 dhcp6: read OPTION_INFORMATION_REFRESH_TIME option 6dfbe58ee7 l10n: update Czech Translation d4cd0e9d32 sd-radv: if lifetime < SD_RADV_DEFAULT_MAX_TIMEOUT_USEC, adjust timeout (#13491) dbefe59259 polkit: fix typo a321507476 sd-netlink: fix invalid assertion 45dca7fe86 network: do not enter failed state if device's sysfs entry does not exist yet dd83d58796 network: add missing link->network checks b294305888 path: stop watching path specs once we triggered the target unit 2cd636c437 hwdb: add Medion Akoya E2292 (#13498) d133bdd1fa po: update Brazilian Portuguese translation 530e09b594 po: update Polish translation 0c5c3e34c1 polkit: change "revert settings" to "reset settings" 73e0f372d8 man: fix description of ARPIntervalSec= units 5412cc54a1 hwdb: axis override for Dell 9360 touchpad 9d4e658529 test: drop the missed || exit 1 expression 7ed7ea82f6 udevadm: use usec_add() 477bf86c91 udevadm: missing initialization of descriptor 19ac31c989 networkd: unbreak routing_policy_rule_compare_func() a20a2157a8 core: coldplug possible nop_job eb55241742 tty-ask-pwd-agent: fix message forwarded to wall(1) 1a3c53c06c core: Fix setting StatusUnitFormat from config files 91db81e4dd network DHCP4: Dont mislead the logs. 6af590838b Update m4 for selective utmp support. modified: tmpfiles.d/systemd.conf.m4 6823c907cf core: restore initialization of u->source_mtime 29308bcc13 mount-setup: relabel items mentioned directly in relabel-extra.d 8ca1e56165 Call getgroups() to know size of supplementary groups array to allocate 5d84a7ad1c test: add test cases for empty string match 1536348cc8 udev: fix multi match 3ccafef0ad man: move TimeoutCleanSec= entry from .service to .exec 8c0c30a820 zsh: udpate bootctl completions 0556c247a2 resolved: fix abort when recv() returns 0 9a25d75520 man: remove repeated words be3be29347 hwdb: Also mark lis3lv02d sensors in "HP" laptops as being in the base 4b92ffccaa udev: also logs file permission 75a2845e5a udev: add missing flag for OPTIONS=static_node 19e9fc4262 network: do not abort execution when a config file cannot be loaded 3e1267cf50 fileio: update warning message 1b3156edd2 pstore: fix use after free f500d2fa81 journal: Make the output of --update-catalog deterministic 64d0f7042d travis: protect the systemd organization on Fuzzit from forks 4247938ee1 hwdb: Mark lis3lv02d sensors in HP laptops as being in the base 379158684a po: update Japanese translation 31e1bbd1ca docs: fix push recipe in RELEASE.md f06530d86b man/systemctl.xml: fix missing "not" 22aba2b969 docs: fix typo in boot loader doc 000e08ca70 pstore: fix typo in error message - directoy -> directory f7f9c69ac5 Fix typo in comment: overide -> override ca8ba8f8c0 po: update Polish translation N��r��y隊Z)z{.��.n'>�{.n�+��Ǩ��r��i�m��0��ޙ��s�0��Ǩ�

1 0

[opensuse-kubic] New MicroOS snapshot 20191022 released!
by Richard Brown 24 Oct '19

24 Oct '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: aaa_base (84.87+git20190822.82a17f1 -> 84.87+git20191017.bf0a315) freetype2 gpg2 libxslt libzypp (17.14.0 -> 17.15.0) lvm2-device-mapper lz4 (1.9.1 -> 1.9.2) open-iscsi perl-Bootloader (0.925 -> 0.926) python-base rpm rpm-config-SUSE (0.g35 -> 0.g40) shadow vim (8.1.2052 -> 8.1.2148) xen (4.12.1_02 -> 4.13.0_01) yast2 (4.2.27 -> 4.2.28) === Details === ==== aaa_base ==== Version update (84.87+git20190822.82a17f1 -> 84.87+git20191017.bf0a315) - Update to version 84.87+git20191017.bf0a315: * Use short TERM name rxvt for rxvt-unicode and rxvt-unicode-256-color - Update to version 84.87+git20191017.14003c1: * Use official key binding functions in inputrc that is replace up-history with previous-history, down-history with next-history and backward-delete-word with backward-kill-word (bsc#1084934). Add some missed key escape sequences for urxvt-unicode terminal as well (boo#1007715). - Update to version 84.87+git20191016.80d1420: * backup-sysconfig: fall back top cpio if tar is not available (bsc#1089299) * backup-rpmdb: check if rpm database is okay before backup to avoid overwriting good backups with corrupt ones (bsc#1079861) * service: check if there is a second argument before using it (bsc#1051143) - Update to version 84.87+git20191014.52dc403: * also add color alias for ip command, jira#sle-9880, bsc#1153943 - Update to version 84.87+git20191010.b20083a: * check if variables can be set before modifying them to avoid warnings on login with a restricted shell (bsc#1138869) - Update to version 84.87+git20191009.4c2bd8e: * Add s390x compressed kernel support (bsc#1151023) * Fix LC_NAME and LC_ADDRESS in sh.ssh * fix string test to arithmetic test in /etc/profile.d/wsl.sh ==== freetype2 ==== - Use the compiler default C std, since 2012 gcc defaults have changed, we now only need to get rid of ANSIFLAGS, override that variable instead. ==== gpg2 ==== - Do not recommend lang package. The lang package already has a supplements. ==== libxslt ==== - Security fix [bsc#1154609, CVE-2019-18197] * Fix dangling pointer in xsltCopyText * Add libxslt-CVE-2019-18197.patch ==== libzypp ==== Version update (17.14.0 -> 17.15.0) - Fix empty metalink downloads if filesize is unknown (bsc#1153557) - Recognize riscv64 as architecture - Fix installation of new header file (fixes #185) - zypp.conf: Introduce `solver.focus` to define the resolvers general attitude when resolving jobs. (bsc#1146415) - New container detection algorithm for zypper ps (bsc#1146947) - version 17.15.0 (12) - Revert "Use CURL_HTTP_VERSION_2TLS if available" (bsc#1146027) - doc: add service example using variables - Fix build with rpm >= 4.15 (fixes #172) - version 17.14.1 (12) ==== lvm2-device-mapper ==== Subpackages: device-mapper libdevmapper-event1_03 libdevmapper1_03 - lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498) + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch ==== lz4 ==== Version update (1.9.1 -> 1.9.2) - enable testsuite - verbose build - version update to 1.9.2 * decompression functions were reading a few bytes beyond input size * api: lz4frame initializers compatibility with c++, reported by @degski * cli : added command --list, based on a patch by @gabrielstedman ==== open-iscsi ==== Subpackages: iscsiuio libopeniscsiusr0_2_0 - Merge in latest upstream, with fixes for: * Support CHAP SHA-1, SHA-256, SHA3-256 vis openssl libcrypto - this requires an update of the SPEC file, as well * Initialize timeout for printing specific session info Updating (in addition to the SPEC file): * open-iscsi-SUSE-latest.diff.bz2 ==== perl-Bootloader ==== Version update (0.925 -> 0.926) - merge gh#openSUSE/perl-bootloader#123 - Accept sysconfig values without quotes - 0.926 ==== python-base ==== Subpackages: libpython2_7-1_0 - Add CVE-2019-16935-xmlrpc-doc-server_title.patch fixing bsc#1153238 (aka CVE-2019-16935) fixing a reflected XSS in python/Lib/DocXMLRPCServer.py ==== rpm ==== - Split librpmbuild into a separate subpackage, it's pulled in by python-rpm - Add set-flto=auto-by-default.patch in order to utilize -flto=auto. - Move more into rpm-build subpackage: * brp- and -check scripts * .prov and .req files, with *find* scripts * elfdeps, debugedit and sepdebugcrcfix * librpmbuild and dependents - Add upstream patches which remove libelf dep from librpmio and plugins: * 0001-Stop-papering-over-the-security-disaster-known-as-pr.patch * 0002-Fix-use-after-free-introduced-in-0f21bdd0d7b2c45564d.patch ==== rpm-config-SUSE ==== Version update (0.g35 -> 0.g40) - Update to version 0.g40: * locale.prov: also work with -locale packages * locale.prov: discard input in error case - Update to version 0.g37: * Add macros for locale provides ==== shadow ==== - libeconf.patch: Add support for libeconf and /usr/etc for login.defs. - Move first configuration files and pam config files to /usr/etc ==== vim ==== Version update (8.1.2052 -> 8.1.2148) Subpackages: vim-data-common - Updated to version 8.1.2148, fixes the following problems * Using "x" before a closed fold may delete that fold. * SafeStateAgain not triggered if callback uses feedkeys(). * Compiler test for Perl may fail. * Not easy to jump to function line from profile. * "make test" for indent files doesn't cause make to fail. * The screen.c file is much too big. * Function for ex command is named inconsistently. * Fix for "x" deleting a fold has side effects. * "precedes" in 'listchars' not used properly. * The mouse code is spread out. * Some tests fail when +balloon_eval_term is missing but _balloon_eval is present. (Dominique Pelle) * No tests for state(). * No tests for SafeState and SafeStateAgain. * Test for SafeState and SafeStateAgain may fail. * Test for SafeStateAgain may still fail. * Mouse code is spread out. * When 'wincolor' is set text property changes highlighting. (Andy Stewart) * "gk" moves to start of line instead of upwards. * When editing a buffer 'colorcolumn' may not work. * Test for SafeState autocommand is a bit flaky. * Get many log messages when waiting for a typed character. * Crash when trying to put a terminal buffer in a popup window. * The ops.c file is too big. * Build error with +textprop but without +terminal. (Tony Mechelynck) * Popup window test fails without +terminal. * The terminal API is limited and can't be disabled. * The spell.c file is too big. * Some files have a weird name to fit in 8.3 characters. * Multi-byte chars do not work properly with "%.*S" in printf(). * Missing a few changes for the renamed files. * Cannot easily select one test function to execute. * Renamed libvterm mouse.c file not in distributed file list. * Do not get a hint that $TEST_FILTER was active. * Not clear why channel log file ends. * Double free when memory allocation fails. (Zu-Ming Jiang) * The fileio.c file is too big. * Leaking memory when getting item from dict. * Too many #ifdefs. * :mksession is not sufficiently tested. * mksession test fails on MS-Windows. * state() test fails on some Mac systems. * :mksession is not sufficiently tested. * write_session_file() often defined but not used. * Can't build with GTK and FEAT_GUI_GNOME. (Tony Mechelynck) * wrong error message if "termdebugger" is not executable. * The normal.c file is too big. * No tests for dragging the mouse beyond the window. * Various memory leaks reported by asan. * Cannot close the cmdline window from CmdWinEnter. (George Brown) * popup_getoptions() hangs with tab-local popup. * CTRL-C closes two popups instead of one. * Viminfo file not sufficiently tested. * Build number for ConPTY is outdated. * ":help expr-!~?" only works after searching. * When a popup is closed with CTRL-C the callback aborts. * No check for out of memory. * CursorLine highlight used while 'cursorline' is off. * Termcodes test fails when $TERM is "dumb". * memory access error for empty string when 'encoding' is a single byte encoding. * Some MB_ macros are more complicated than necessary. (Dominique Pelle) * Mode is not updated when switching to terminal in Insert mode. * Cannot build without terminal feature. * Parsing CSI sequence is messy. * Ruler is not updated if win_execute() moves cursor. * Fnamemodify() fails when repeating :e. * Viminfo not sufficiently tested. * The indent.c file is a bit big. * Renamed libvterm sources makes merging difficult. * Using hard coded executable path in test. * MSVC build fails. * MSVC tests fail. * MS-Windows: screen mess when not recognizing insider build. * Some tests fail when run as root. * Modifier keys are not always recognized. * With modifyOtherKeys Alt-a does not work properly. * using freed memory with autocmd from fuzzer. (Dhiraj Mishra, Dominique Pelle) * Parsing the termresponse is not tested. * Including the build number in the Win32 binary is confusing. * The modifyOtherKeys codes are not tested. * "gk" and "gj" do not work correctly in number column. * :tselect has an extra hit-enter prompt. * Some key mappings do not work with modifyOtherKeys. * Cannot see each command even when 'verbose' is set. * Side effects when using t_ti to enable modifyOtherKeys. * Cannot map <C-H> when modifyOtherKeys is enabled. * Build failure. * Crash when allocating memory fails. (Zu-Ming Jiang) * No test for right click extending Visual area. ==== xen ==== Version update (4.12.1_02 -> 4.13.0_01) - Update to Xen 4.13.0 RC1 release xen-4.13.0-testing-src.tar.bz2 - Drop patches contained in new tarball or invalid 5ca7660f-x86-entry-drop-unused-includes.patch 5cab2a6b-x86-ACPI-also-parse-AMD-tables-early.patch 5cab2ab7-x86-IOMMU-introduce-init-ops.patch 5cab2ae8-x86-IOMMU-abstract-iommu_supports_eim.patch 5cab2b4e-x86-IOMMU-abstract-iommu_enable_x2apic_IR.patch 5cab2b95-x86-IOMMU-initialize-iommu_ops-in.patch 5cac9a4b-x86-IOMMU-abstract-adjust_vtd_irq_affinities.patch 5cdeac7f-AMD-IOMMU-adjust-IOMMU-list-head-init.patch 5cf8da09-adjust-sysdom-creation-call-earlier-on-x86.patch 5d0cf4e4-AMD-IOMMU-initialize-IRQ-tasklet-once.patch 5d149bb0-AMD-IOMMU-dont-add-IOMMUs.patch 5d1b3fab-AMD-IOMMU-restrict-feature-logging.patch 5d358508-x86-IRQ-desc-affinity-represents-request.patch 5d358534-x86-IRQ-consolidate-arch-cpu_mask-use.patch 5d358a67-AMD-IOMMU-pass-IOMMU-to-iterate_ivrs_entries-cb.patch 5d358a92-AMD-IOMMU-pass-IOMMU-to-amd_iommu_alloc_intremap_table.patch 5d39811c-x86-IOMMU-dont-restrict-IRQ-affinities.patch 5d417813-AMD-IOMMU-bitfield-extended-features.patch 5d417838-AMD-IOMMU-bitfield-control-reg.patch 5d41785b-AMD-IOMMU-bitfield-IRTE.patch 5d41787e-AMD-IOMMU-pass-IOMMU-to-gfu-intremap-entry.patch 5d4178ad-AMD-IOMMU-128bit-non-guest-APIC-IRTE.patch 5d4178fc-AMD-IOMMU-split-amd_iommu_init_one.patch 5d41793f-AMD-IOMMU-allow-enabling-without-IRQ.patch 5d417a16-AMD-IOMMU-adjust-IRQ-setup-for-x2APIC.patch 5d417ab6-AMD-IOMMU-enable-x2APIC-mode.patch 5d417b38-AMD-IOMMU-correct-IRTE-updating.patch 5d417b6a-AMD-IOMMU-dont-needlessly-log-headers.patch 5d419d49-x86-spec-ctrl-report-proper-status.patch 5d43253c-x86-ucode-always-collect_cpu_info-at-boot.patch 5d4a9d25-AMD-IOMMU-drop-not-found-message.patch 5d4aa36f-x86-apic-enable-x2APIC-mode-earlier.patch 5d4afa7a-credit2-fix-memory-leak.patch 5d4d850a-introduce-bss-percpu-page-aligned.patch 5d516531-x86-xpti-dont-leak-TSS-adjacent-data.patch 5d5bf475-x86-PV-fix-handling-of-iommu-mappings.patch 5d6524ca-x86-mm-correctly-init-M2P-entries.patch 5d67ceaf-x86-properly-gate-PKU-clearing.patch 5d70bfba-x86-shadow-dont-enable-with-too-small-allocation.patch 5d779811-x86-fix-CPUID7-0-eax-levelling-MSR.patch 5d77b40f-fix-hvm_all_ioreq_servers_add_vcpu-cleanup.patch 5d80e7c0-AMD-IOMMU-free-shared-IRT-once.patch 5d80e80d-AMD-IOMMU-valid-flag-for-IVRS-mappings.patch 5d80e82e-AMD-IOMMU-alloc_intremap_table-callers-handle-errors.patch 5d80e857-x86-PCI-read-MSI-X-table-entry-count-early.patch 5d80ea13-vpci-honor-read-only-devices.patch 5d89d8d9-libxc-x86-avoid-overflow-in-CPUID-APIC-ID.patch 5d8b715f-ACPI-cpuidle-bump-max-num-of-states.patch 5d8b72e5-AMD-IOMMU-dont-blindly-alloc-intremap-tables.patch 5d8b730e-AMD-IOMMU-phantom-funcs-share-intremap-tables.patch 5d8b733b-x86-PCI-read-max-MSI-vector-count-early.patch 5d8b736d-AMD-IOMMU-replace-INTREMAP_ENTRIES.patch 5d8b7393-AMD-IOMMU-restrict-intremap-table-sizes.patch 5d9ee2a8-AMD-IOMMU-alloc-1-devtab-per-PCI-seg.patch 5d9ee2f0-AMD-IOMMU-allocate_buffer-avoid-memset.patch 5d9ee312-AMD-IOMMU-prefill-all-DTEs.patch CVE-2014-0222-blktap-qcow1-validate-l2-table-size.patch blktap2-no-uninit.patch libxl.prepare-environment-for-domcreate_stream_done.patch pygrub-python3-conversion.patch fix-xenpvnetboot.patch - bsc#1135799 - Partner-L3: Xen crashes on AMD ROME based machines 5d9ee2a8-AMD-IOMMU-alloc-1-devtab-per-PCI-seg.patch 5d9ee2f0-AMD-IOMMU-allocate_buffer-avoid-memset.patch 5d9ee312-AMD-IOMMU-prefill-all-DTEs.patch ==== yast2 ==== Version update (4.2.27 -> 4.2.28) - Fix showing details for accessing media error (bsc#1153297) - 4.2.28 -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191022 released!
by Richard Brown 24 Oct '19

24 Oct '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: aaa_base (84.87+git20190822.82a17f1 -> 84.87+git20191017.bf0a315) freetype2 gpg2 libxslt libzypp (17.14.0 -> 17.15.0) lvm2 lvm2-device-mapper lz4 (1.9.1 -> 1.9.2) open-iscsi patterns-base perl-Bootloader (0.925 -> 0.926) python-base rpm rpm-config-SUSE (0.g35 -> 0.g40) shadow vim (8.1.2052 -> 8.1.2148) xen (4.12.1_02 -> 4.13.0_01) yast2 (4.2.27 -> 4.2.28) yomi-formula (0.0.1+git.1570457098.f38ad71 -> 0.0.1+git.1570614306.1a4ae0f) === Details === ==== aaa_base ==== Version update (84.87+git20190822.82a17f1 -> 84.87+git20191017.bf0a315) - Update to version 84.87+git20191017.bf0a315: * Use short TERM name rxvt for rxvt-unicode and rxvt-unicode-256-color - Update to version 84.87+git20191017.14003c1: * Use official key binding functions in inputrc that is replace up-history with previous-history, down-history with next-history and backward-delete-word with backward-kill-word (bsc#1084934). Add some missed key escape sequences for urxvt-unicode terminal as well (boo#1007715). - Update to version 84.87+git20191016.80d1420: * backup-sysconfig: fall back top cpio if tar is not available (bsc#1089299) * backup-rpmdb: check if rpm database is okay before backup to avoid overwriting good backups with corrupt ones (bsc#1079861) * service: check if there is a second argument before using it (bsc#1051143) - Update to version 84.87+git20191014.52dc403: * also add color alias for ip command, jira#sle-9880, bsc#1153943 - Update to version 84.87+git20191010.b20083a: * check if variables can be set before modifying them to avoid warnings on login with a restricted shell (bsc#1138869) - Update to version 84.87+git20191009.4c2bd8e: * Add s390x compressed kernel support (bsc#1151023) * Fix LC_NAME and LC_ADDRESS in sh.ssh * fix string test to arithmetic test in /etc/profile.d/wsl.sh ==== freetype2 ==== - Use the compiler default C std, since 2012 gcc defaults have changed, we now only need to get rid of ANSIFLAGS, override that variable instead. ==== gpg2 ==== - Do not recommend lang package. The lang package already has a supplements. ==== libxslt ==== - Security fix [bsc#1154609, CVE-2019-18197] * Fix dangling pointer in xsltCopyText * Add libxslt-CVE-2019-18197.patch ==== libzypp ==== Version update (17.14.0 -> 17.15.0) - Fix empty metalink downloads if filesize is unknown (bsc#1153557) - Recognize riscv64 as architecture - Fix installation of new header file (fixes #185) - zypp.conf: Introduce `solver.focus` to define the resolvers general attitude when resolving jobs. (bsc#1146415) - New container detection algorithm for zypper ps (bsc#1146947) - version 17.15.0 (12) - Revert "Use CURL_HTTP_VERSION_2TLS if available" (bsc#1146027) - doc: add service example using variables - Fix build with rpm >= 4.15 (fixes #172) - version 17.14.1 (12) ==== lvm2 ==== Subpackages: liblvm2cmd2_03 - lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498) + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch ==== lvm2-device-mapper ==== Subpackages: device-mapper libdevmapper-event1_03 libdevmapper1_03 - lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498) + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch ==== lz4 ==== Version update (1.9.1 -> 1.9.2) - enable testsuite - verbose build - version update to 1.9.2 * decompression functions were reading a few bytes beyond input size * api: lz4frame initializers compatibility with c++, reported by @degski * cli : added command --list, based on a patch by @gabrielstedman ==== open-iscsi ==== Subpackages: iscsiuio libopeniscsiusr0_2_0 - Merge in latest upstream, with fixes for: * Support CHAP SHA-1, SHA-256, SHA3-256 vis openssl libcrypto - this requires an update of the SPEC file, as well * Initialize timeout for printing specific session info Updating (in addition to the SPEC file): * open-iscsi-SUSE-latest.diff.bz2 ==== patterns-base ==== Subpackages: patterns-base-apparmor patterns-base-minimal_base - Remove tcpdump from enhanced_base ==== perl-Bootloader ==== Version update (0.925 -> 0.926) - merge gh#openSUSE/perl-bootloader#123 - Accept sysconfig values without quotes - 0.926 ==== python-base ==== Subpackages: libpython2_7-1_0 - Add CVE-2019-16935-xmlrpc-doc-server_title.patch fixing bsc#1153238 (aka CVE-2019-16935) fixing a reflected XSS in python/Lib/DocXMLRPCServer.py ==== rpm ==== - Split librpmbuild into a separate subpackage, it's pulled in by python-rpm - Add set-flto=auto-by-default.patch in order to utilize -flto=auto. - Move more into rpm-build subpackage: * brp- and -check scripts * .prov and .req files, with *find* scripts * elfdeps, debugedit and sepdebugcrcfix * librpmbuild and dependents - Add upstream patches which remove libelf dep from librpmio and plugins: * 0001-Stop-papering-over-the-security-disaster-known-as-pr.patch * 0002-Fix-use-after-free-introduced-in-0f21bdd0d7b2c45564d.patch ==== rpm-config-SUSE ==== Version update (0.g35 -> 0.g40) - Update to version 0.g40: * locale.prov: also work with -locale packages * locale.prov: discard input in error case - Update to version 0.g37: * Add macros for locale provides ==== shadow ==== - libeconf.patch: Add support for libeconf and /usr/etc for login.defs. - Move first configuration files and pam config files to /usr/etc ==== vim ==== Version update (8.1.2052 -> 8.1.2148) Subpackages: vim-data-common - Updated to version 8.1.2148, fixes the following problems * Using "x" before a closed fold may delete that fold. * SafeStateAgain not triggered if callback uses feedkeys(). * Compiler test for Perl may fail. * Not easy to jump to function line from profile. * "make test" for indent files doesn't cause make to fail. * The screen.c file is much too big. * Function for ex command is named inconsistently. * Fix for "x" deleting a fold has side effects. * "precedes" in 'listchars' not used properly. * The mouse code is spread out. * Some tests fail when +balloon_eval_term is missing but _balloon_eval is present. (Dominique Pelle) * No tests for state(). * No tests for SafeState and SafeStateAgain. * Test for SafeState and SafeStateAgain may fail. * Test for SafeStateAgain may still fail. * Mouse code is spread out. * When 'wincolor' is set text property changes highlighting. (Andy Stewart) * "gk" moves to start of line instead of upwards. * When editing a buffer 'colorcolumn' may not work. * Test for SafeState autocommand is a bit flaky. * Get many log messages when waiting for a typed character. * Crash when trying to put a terminal buffer in a popup window. * The ops.c file is too big. * Build error with +textprop but without +terminal. (Tony Mechelynck) * Popup window test fails without +terminal. * The terminal API is limited and can't be disabled. * The spell.c file is too big. * Some files have a weird name to fit in 8.3 characters. * Multi-byte chars do not work properly with "%.*S" in printf(). * Missing a few changes for the renamed files. * Cannot easily select one test function to execute. * Renamed libvterm mouse.c file not in distributed file list. * Do not get a hint that $TEST_FILTER was active. * Not clear why channel log file ends. * Double free when memory allocation fails. (Zu-Ming Jiang) * The fileio.c file is too big. * Leaking memory when getting item from dict. * Too many #ifdefs. * :mksession is not sufficiently tested. * mksession test fails on MS-Windows. * state() test fails on some Mac systems. * :mksession is not sufficiently tested. * write_session_file() often defined but not used. * Can't build with GTK and FEAT_GUI_GNOME. (Tony Mechelynck) * wrong error message if "termdebugger" is not executable. * The normal.c file is too big. * No tests for dragging the mouse beyond the window. * Various memory leaks reported by asan. * Cannot close the cmdline window from CmdWinEnter. (George Brown) * popup_getoptions() hangs with tab-local popup. * CTRL-C closes two popups instead of one. * Viminfo file not sufficiently tested. * Build number for ConPTY is outdated. * ":help expr-!~?" only works after searching. * When a popup is closed with CTRL-C the callback aborts. * No check for out of memory. * CursorLine highlight used while 'cursorline' is off. * Termcodes test fails when $TERM is "dumb". * memory access error for empty string when 'encoding' is a single byte encoding. * Some MB_ macros are more complicated than necessary. (Dominique Pelle) * Mode is not updated when switching to terminal in Insert mode. * Cannot build without terminal feature. * Parsing CSI sequence is messy. * Ruler is not updated if win_execute() moves cursor. * Fnamemodify() fails when repeating :e. * Viminfo not sufficiently tested. * The indent.c file is a bit big. * Renamed libvterm sources makes merging difficult. * Using hard coded executable path in test. * MSVC build fails. * MSVC tests fail. * MS-Windows: screen mess when not recognizing insider build. * Some tests fail when run as root. * Modifier keys are not always recognized. * With modifyOtherKeys Alt-a does not work properly. * using freed memory with autocmd from fuzzer. (Dhiraj Mishra, Dominique Pelle) * Parsing the termresponse is not tested. * Including the build number in the Win32 binary is confusing. * The modifyOtherKeys codes are not tested. * "gk" and "gj" do not work correctly in number column. * :tselect has an extra hit-enter prompt. * Some key mappings do not work with modifyOtherKeys. * Cannot see each command even when 'verbose' is set. * Side effects when using t_ti to enable modifyOtherKeys. * Cannot map <C-H> when modifyOtherKeys is enabled. * Build failure. * Crash when allocating memory fails. (Zu-Ming Jiang) * No test for right click extending Visual area. ==== xen ==== Version update (4.12.1_02 -> 4.13.0_01) - Update to Xen 4.13.0 RC1 release xen-4.13.0-testing-src.tar.bz2 - Drop patches contained in new tarball or invalid 5ca7660f-x86-entry-drop-unused-includes.patch 5cab2a6b-x86-ACPI-also-parse-AMD-tables-early.patch 5cab2ab7-x86-IOMMU-introduce-init-ops.patch 5cab2ae8-x86-IOMMU-abstract-iommu_supports_eim.patch 5cab2b4e-x86-IOMMU-abstract-iommu_enable_x2apic_IR.patch 5cab2b95-x86-IOMMU-initialize-iommu_ops-in.patch 5cac9a4b-x86-IOMMU-abstract-adjust_vtd_irq_affinities.patch 5cdeac7f-AMD-IOMMU-adjust-IOMMU-list-head-init.patch 5cf8da09-adjust-sysdom-creation-call-earlier-on-x86.patch 5d0cf4e4-AMD-IOMMU-initialize-IRQ-tasklet-once.patch 5d149bb0-AMD-IOMMU-dont-add-IOMMUs.patch 5d1b3fab-AMD-IOMMU-restrict-feature-logging.patch 5d358508-x86-IRQ-desc-affinity-represents-request.patch 5d358534-x86-IRQ-consolidate-arch-cpu_mask-use.patch 5d358a67-AMD-IOMMU-pass-IOMMU-to-iterate_ivrs_entries-cb.patch 5d358a92-AMD-IOMMU-pass-IOMMU-to-amd_iommu_alloc_intremap_table.patch 5d39811c-x86-IOMMU-dont-restrict-IRQ-affinities.patch 5d417813-AMD-IOMMU-bitfield-extended-features.patch 5d417838-AMD-IOMMU-bitfield-control-reg.patch 5d41785b-AMD-IOMMU-bitfield-IRTE.patch 5d41787e-AMD-IOMMU-pass-IOMMU-to-gfu-intremap-entry.patch 5d4178ad-AMD-IOMMU-128bit-non-guest-APIC-IRTE.patch 5d4178fc-AMD-IOMMU-split-amd_iommu_init_one.patch 5d41793f-AMD-IOMMU-allow-enabling-without-IRQ.patch 5d417a16-AMD-IOMMU-adjust-IRQ-setup-for-x2APIC.patch 5d417ab6-AMD-IOMMU-enable-x2APIC-mode.patch 5d417b38-AMD-IOMMU-correct-IRTE-updating.patch 5d417b6a-AMD-IOMMU-dont-needlessly-log-headers.patch 5d419d49-x86-spec-ctrl-report-proper-status.patch 5d43253c-x86-ucode-always-collect_cpu_info-at-boot.patch 5d4a9d25-AMD-IOMMU-drop-not-found-message.patch 5d4aa36f-x86-apic-enable-x2APIC-mode-earlier.patch 5d4afa7a-credit2-fix-memory-leak.patch 5d4d850a-introduce-bss-percpu-page-aligned.patch 5d516531-x86-xpti-dont-leak-TSS-adjacent-data.patch 5d5bf475-x86-PV-fix-handling-of-iommu-mappings.patch 5d6524ca-x86-mm-correctly-init-M2P-entries.patch 5d67ceaf-x86-properly-gate-PKU-clearing.patch 5d70bfba-x86-shadow-dont-enable-with-too-small-allocation.patch 5d779811-x86-fix-CPUID7-0-eax-levelling-MSR.patch 5d77b40f-fix-hvm_all_ioreq_servers_add_vcpu-cleanup.patch 5d80e7c0-AMD-IOMMU-free-shared-IRT-once.patch 5d80e80d-AMD-IOMMU-valid-flag-for-IVRS-mappings.patch 5d80e82e-AMD-IOMMU-alloc_intremap_table-callers-handle-errors.patch 5d80e857-x86-PCI-read-MSI-X-table-entry-count-early.patch 5d80ea13-vpci-honor-read-only-devices.patch 5d89d8d9-libxc-x86-avoid-overflow-in-CPUID-APIC-ID.patch 5d8b715f-ACPI-cpuidle-bump-max-num-of-states.patch 5d8b72e5-AMD-IOMMU-dont-blindly-alloc-intremap-tables.patch 5d8b730e-AMD-IOMMU-phantom-funcs-share-intremap-tables.patch 5d8b733b-x86-PCI-read-max-MSI-vector-count-early.patch 5d8b736d-AMD-IOMMU-replace-INTREMAP_ENTRIES.patch 5d8b7393-AMD-IOMMU-restrict-intremap-table-sizes.patch 5d9ee2a8-AMD-IOMMU-alloc-1-devtab-per-PCI-seg.patch 5d9ee2f0-AMD-IOMMU-allocate_buffer-avoid-memset.patch 5d9ee312-AMD-IOMMU-prefill-all-DTEs.patch CVE-2014-0222-blktap-qcow1-validate-l2-table-size.patch blktap2-no-uninit.patch libxl.prepare-environment-for-domcreate_stream_done.patch pygrub-python3-conversion.patch fix-xenpvnetboot.patch - bsc#1135799 - Partner-L3: Xen crashes on AMD ROME based machines 5d9ee2a8-AMD-IOMMU-alloc-1-devtab-per-PCI-seg.patch 5d9ee2f0-AMD-IOMMU-allocate_buffer-avoid-memset.patch 5d9ee312-AMD-IOMMU-prefill-all-DTEs.patch ==== yast2 ==== Version update (4.2.27 -> 4.2.28) - Fix showing details for accessing media error (bsc#1153297) - 4.2.28 ==== yomi-formula ==== Version update (0.0.1+git.1570457098.f38ad71 -> 0.0.1+git.1570614306.1a4ae0f) - Update to version 0.0.1+git.1570614306.1a4ae0f: * README: update FQDN where master lives by default -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New: toolbox utility and container
by Thorsten Kukuk 23 Oct '19

23 Oct '19

Hi, If you haven't read the blog yet: for openSUSE MicroOS and Kubic we have now the "toolbox" utility and container. With this, you can run a privileged container to debug your system without the need to reboot for installing debugging utilities. And of course you can do a lot of other stuff with it: https://kubic.opensuse.org/blog/2019-10-22-toolbox/ Thorsten -- Thorsten Kukuk, Distinguished Engineer, Senior Architect SLES & MicroOS SUSE Software Solutions Germany GmbH, Maxfeldstr. 5, 90409 Nuernberg, Germany Managing Director: Felix Imendoerffer (HRB 36809, AG Nürnberg) -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] Notification of intent to reduce Cilium support in Kubic/Tumbleweed/Factory
by Richard Brown 23 Oct '19

23 Oct '19

Hi all, Cilium has been functionally broken for quite some weeks now and due to it's supported & tested status as a key part of the Kubic state, this has prevented all updates for Kubernetes/podman/go/etc for quite some time. I've discussed with our Cilium contributors & known users and it is our intention to reduce Cilium's status in Kubic from "supported" to "best effort". In otherwords, we'll stop testing it in openQA, and stop requiring it for Kubic releases. Which means it will likely remain broken for quite some time. We won't drop the packages from Factory at this time, but they should be considered 'at risk' as Factory maintainers do not allow broken packages to remain indefinately. Users will continue to have flannel as a fully documented CNI solution tested as part of the Kubic release process. Weave is also supported in Kubic-Control and should be more likely to work than Cilium at the moment. I'm also interested if we look into adding multus support which seems to be the direction Ceph on Kubernetes is interested in. https://github.com/intel/multus-cni If there are no immediate objections I intend to reduce the test coverage for Cilium today in order to get the long-stuck Kubic submissions moving again. Thanks, -- Richard Brown Linux Distribution Engineer - Future Technology Team Phone +4991174053-361 SUSE Software Solutions Germany GmbH, Maxfeldstr. 5, D-90409 Nuernberg (HRB 36809, AG Nürnberg) Geschäftsführer: Felix Imendörffer -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

2 1

[opensuse-kubic] New MicroOS snapshot 20191018 released!
by Richard Brown 21 Oct '19

21 Oct '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: branding-openSUSE cloud-init (19.1 -> 19.2) glib2 (2.60.7 -> 2.62.1) installation-images-MicroOS (14.440 -> 14.442) kernel-source (5.3.5 -> 5.3.6) libffi open-vm-tools snapper (0.8.3 -> 0.8.5) toolbox (1.0+git20191007.e038337 -> 1.0+git20191014.3034fbc) === Details === ==== branding-openSUSE ==== - BuildRequires rsvg-convert instead of rsvg-view on suse_version >= 1550. rsvg-view no longer exists and the sub-package from librsvg was renamed accordingly. ==== cloud-init ==== Version update (19.1 -> 19.2) - Update to cloud-init 19.2 (bsc#1099358) + Remove, included upstream - cloud-init-detect-nova.diff - cloud-init-add-static-routes.diff + net: add rfc3442 (classless static routes) to EphemeralDHCP (LP: #1821102) + templates/ntp.conf.debian.tmpl: fix missing newline for pools (LP: #1836598) + Support netplan renderer in Arch Linux [Conrad Hoffmann] + Fix typo in publicly viewable documentation. [David Medberry] + Add a cdrom size checker for OVF ds to ds-identify [Pengpeng Sun] (LP: #1806701) + VMWare: Trigger the post customization script via cc_scripts module. [Xiaofeng Wang] (LP: #1833192) + Cloud-init analyze module: Added ability to analyze boot events. [Sam Gilson] + Update debian eni network configuration location, retain Ubuntu setting [Janos Lenart] + net: skip bond interfaces in get_interfaces [Stanislav Makar] (LP: #1812857) + Fix a couple of issues raised by a coverity scan + Add missing dsname for Hetzner Cloud datasource [Markus Schade] + doc: indicate that netplan is default in Ubuntu now + azure: add region and AZ properties from imds compute location metadata + sysconfig: support more bonding options [Penghui Liao] + cloud-init-generator: use libexec path to ds-identify on redhat systems (LP: #1833264) + tools/build-on-freebsd: update to python3 [Gonéri Le Bouder] + Allow identification of OpenStack by Asset Tag [Mark T. Voelker] (LP: #1669875) + Fix spelling error making 'an Ubuntu' consistent. [Brian Murray] + run-container: centos: comment out the repo mirrorlist [Paride Legovini] + netplan: update netplan key mappings for gratuitous-arp (LP: #1827238) + freebsd: fix the name of cloudcfg VARIANT [Gonéri Le Bouder] + freebsd: ability to grow root file system [Gonéri Le Bouder] + freebsd: NoCloud data source support [Gonéri Le Bouder] (LP: #1645824) + Azure: Return static fallback address as if failed to find endpoint [Jason Zions (MSFT)] ==== glib2 ==== Version update (2.60.7 -> 2.62.1) Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 - Update to version 2.62.1: + Fix regression in g_file_copy() when passing `G_FILE_COPY_TARGET_DEFAULT_PERMS` flag; the destination permissions would be private rather than following the process? umask. + Several `GDateTime` parsing fixes. + Always build the tests if installed-tests are enabled, so that the tests can actually be installed. + Bugs fixed: glgo#GNOME/GLib#174, glgo#GNOME/GLib#1865, glgo#GNOME/GLib#1875, glgo#GNOME/GLib#1887, glgo#GNOME/GLib#1888, glgo#GNOME/GLib!1021, glgo#GNOME/GLib!1094, glgo#GNOME/GLib!1101, glgo#GNOME/GLib!1102, glgo#GNOME/GLib!1103, glgo#GNOME/GLib!1127, glgo#GNOME/GLib!1128, glgo#GNOME/GLib!1140, glgo#GNOME/GLib!1141, glgo#GNOME/GLib!1142. + Updated translations. - Update to version 2.62.0: + Fix new `GFileInfo` APIs to work when `G_FILE_ATTRIBUTE_TIME_MODIFIED_USEC` was not queried. + Bugs fixed: glgo#GNOME/GLib#487, glgo#GNOME/GLib!1084, glgo#GNOME/GLib!1086,glgo#GNOME/GLib!1087. - Update to version 2.61.3: + Support setting thread name on BSD systems. + Install previously-uninstalled headers for public `GNativeSocketAddress` object. + Very initial support for Windows apps (UWP). + Add various new valgrind suppressions to `glib.supp`. + Bugs fixed: glgo#GNOME/GLib!83, glgo#GNOME/GLib!512, glgo#GNOME/GLib!873, glgo#GNOME/GLib!905, glgo#GNOME/GLib!1057, glgo#GNOME/GLib!1309, glgo#GNOME/GLib!1620, glgo#GNOME/GLib!1761, glgo#GNOME/GLib!1803, glgo#GNOME/GLib!1819, glgo#GNOME/GLib!1852, glgo#GNOME/GLib!1854, glgo#GNOME/GLib!1860, glgo#GNOME/GLib!1863, glgo#GNOME/GLib!1867, glgo#GNOME/GLib!1870, glgo#GNOME/GLib!1879, glgo#GNOME/GLib!1880, glgo#GNOME/GLib!1881, glgo#GNOME/GLib!1002, glgo#GNOME/GLib!1011, glgo#GNOME/GLib!1015, glgo#GNOME/GLib!1016, glgo#GNOME/GLib!1017, glgo#GNOME/GLib!1023, glgo#GNOME/GLib!1026, glgo#GNOME/GLib!1027, glgo#GNOME/GLib!1031, glgo#GNOME/GLib!1032, glgo#GNOME/GLib!1033, glgo#GNOME/GLib!1034, glgo#GNOME/GLib!1036, glgo#GNOME/GLib!1037, glgo#GNOME/GLib!1044, glgo#GNOME/GLib!1049, glgo#GNOME/GLib!1050, glgo#GNOME/GLib!1054, glgo#GNOME/GLib!1057, glgo#GNOME/GLib!1059, glgo#GNOME/GLib!1066, glgo#GNOME/GLib!1068, glgo#GNOME/GLib!1071, glgo#GNOME/GLib!1074, glgo#GNOME/GLib!1075. ==== installation-images-MicroOS ==== Version update (14.440 -> 14.442) - merge gh#openSUSE/installation-images#338 - adjust samba library list - include correct udev dir for virtualbox-guest-tools - remove multipath-tools from initrd - adjust to /usr/etc move in pam and shadow packages - 14.442 - merge gh#openSUSE/installation-images#337 - etc: module.config, sort other kernel/* modules - etc: update module.config to match 5.4 - handle kernel 5.4 - 14.441 - Set clamp_mtime_to_source_date_epoch 0: as the content of i-i is published in extracted form on download.o.o, and rsynced around, we need to be able to rely on changing mtime's for the content. ==== kernel-source ==== Version update (5.3.5 -> 5.3.6) - Linux 5.3.6 (bnc#1151927). - libnvdimm: prevent nvdimm from requesting key when security is disabled (bnc#1151927). - staging: erofs: detect potential multiref due to corrupted images (bnc#1151927). - staging: erofs: avoid endless loop of invalid lookback distance 0 (bnc#1151927). - staging: erofs: add two missing erofs_workgroup_put for corrupted images (bnc#1151927). - staging: erofs: some compressed cluster should be submitted for corrupted images (bnc#1151927). - staging: erofs: fix an error handling in erofs_readdir() (bnc#1151927). - coresight: etm4x: Use explicit barriers on enable/disable (bnc#1151927). - vfs: Fix EOVERFLOW testing in put_compat_statfs64 (bnc#1151927). - riscv: Avoid interrupts being erroneously enabled in handle_exception() (bnc#1151927). - perf stat: Reset previous counts on repeat with interval (bnc#1151927). - tick: broadcast-hrtimer: Fix a race in bc_set_next (bnc#1151927). - KVM: nVMX: Fix consistency check on injected exception error code (bnc#1151927). - Btrfs: fix selftests failure due to uninitialized i_mode in test inodes (bnc#1151927). - drm/radeon: Bail earlier when radeon.cik_/si_support=0 is passed (bnc#1151927). - nfp: abm: fix memory leak in nfp_abm_u32_knode_replace (bnc#1151927). - mlxsw: spectrum_flower: Fail in case user specifies multiple mirror actions (bnc#1151927). - perf unwind: Fix libunwind build failure on i386 systems (bnc#1151927). - i2c: qcom-geni: Disable DMA processing on the Lenovo Yoga C630 (bnc#1151927). - net: dsa: microchip: Always set regmap stride to 1 (bnc#1151927). - bpf: Fix bpf_event_output re-entry issue (bnc#1151927). - blk-mq: move lockdep_assert_held() into elevator_exit (bnc#1151927). - libbpf: fix false uninitialized variable warning (bnc#1151927). - kernel/elfcore.c: include proper prototypes (bnc#1151927). - selftests/bpf: adjust strobemeta loop to satisfy latest clang (bnc#1151927). - include/trace/events/writeback.h: fix -Wstringop-truncation warnings (bnc#1151927). - perf build: Add detection of java-11-openjdk-devel package (bnc#1151927). - sched/core: Fix migration to invalid CPU in __set_cpus_allowed_ptr() (bnc#1151927). - sched/membarrier: Fix private expedited registration check (bnc#1151927). - sched/membarrier: Call sync_core only before usermode for same mm (bnc#1151927). - libnvdimm/nfit_test: Fix acpi_handle redefinition (bnc#1151927). - fuse: fix memleak in cuse_channel_open (bnc#1151927). - =?UTF-8?q?libnvdimm:=20Fix=20endian=20conversion=20issues?= =?UTF-8?q?=C2=A0?= (bnc#1151927). - libnvdimm/region: Initialize bad block for volatile namespaces (bnc#1151927). - iommu/amd: Fix downgrading default page-sizes in alloc_pte() (bnc#1151927). - thermal_hwmon: Sanitize thermal_zone type (bnc#1151927). - thermal: Fix use-after-free when unregistering thermal zone device (bnc#1151927). - ntb: point to right memory window index (bnc#1151927). - x86/purgatory: Disable the stackleak GCC plugin for the purgatory (bnc#1151927). - selftests/seccomp: fix build on older kernels (bnc#1151927). - pwm: stm32-lp: Add check in case requested period cannot be achieved (bnc#1151927). - SUNRPC: Don't try to parse incomplete RPC messages (bnc#1151927). - pNFS: Ensure we do clear the return-on-close layout stateid on fatal errors (bnc#1151927). - perf probe: Fix to clear tev->nargs in clear_probe_trace_event() (bnc#1151927). - drm/amdgpu: Check for valid number of registers to read (bnc#1151927). - drm/amdgpu: Fix KFD-related kernel oops on Hawaii (bnc#1151927). - netfilter: nf_tables: allow lookups in dynamic sets (bnc#1151927). - watchdog: aspeed: Add support for AST2600 (bnc#1151927). - SUNRPC: RPC level errors should always set task->tk_rpc_status (bnc#1151927). - ceph: reconnect connection if session hang in opening state (bnc#1151927). - ceph: fetch cap_gen under spinlock in ceph_add_cap (bnc#1151927). - ceph: fix directories inode i_blkbits initialization (bnc#1151927). - fuse: fix request limit (bnc#1151927). - xen/pci: reserve MCFG areas earlier (bnc#1151927). - 9p: avoid attaching writeback_fid on mmap with type PRIVATE (bnc#1151927). - 9p: Transport error uninitialized (bnc#1151927). - xprtrdma: Send Queue size grows after a reconnect (bnc#1151927). - xprtrdma: Toggle XPRT_CONGESTED in xprtrdma's slot methods (bnc#1151927). - fs: nfs: Fix possible null-pointer dereferences in encode_attrs() (bnc#1151927). - ima: fix freeing ongoing ahash_request (bnc#1151927). - ima: always return negative code for error (bnc#1151927). - drivers: thermal: qcom: tsens: Fix memory leak from qfprom read (bnc#1151927). - cfg80211: initialize on-stack chandefs (bnc#1151927). - cfg80211: validate SSID/MBSSID element ordering assumption (bnc#1151927). - nl80211: validate beacon head (bnc#1151927). - ieee802154: atusb: fix use-after-free at disconnect (bnc#1151927). - xen/xenbus: fix self-deadlock after killing user process (bnc#1151927). - xen/balloon: Set pages PageOffline() in balloon_add_region() (bnc#1151927). - DTS: ARM: gta04: introduce legacy spi-cs-high to make display work again (bnc#1151927). - sched: Add __ASSEMBLY__ guards around struct clone_args (bnc#1151927). - libnvdimm/altmap: Track namespace boundaries in altmap (bnc#1151927). - Revert "locking/pvqspinlock: Don't wait if vCPU is preempted" (bnc#1151927). - mmc: sdhci: Let drivers define their DMA mask (bnc#1151927). - mmc: sdhci-of-esdhc: set DMA snooping based on DMA coherence (bnc#1151927). - mmc: sdhci: improve ADMA error reporting (bnc#1151927). - mmc: tegra: Implement ->set_dma_mask() (bnc#1151927). - mac80211: keep BHs disabled while calling drv_tx_wake_queue() (bnc#1151927). - drm/i915: to make vgpu ppgtt notificaiton as atomic operation (bnc#1151927). - drm/i915/gvt: update vgpu workload head pointer correctly (bnc#1151927). - drm/amd/powerplay: change metrics update period from 1ms to 100ms (bnc#1151927). - drm/nouveau/kms/nv50-: Don't create MSTMs for eDP connectors (bnc#1151927). - drm/msm/dsi: Fix return value check for clk_get_parent (bnc#1151927). - drm/omap: fix max fclk divider for omap36xx (bnc#1151927). - drm: mali-dp: Mark expected switch fall-through (bnc#1151927). - drm/atomic: Take the atomic toys away from X (bnc#1151927). - drm/atomic: Reject FLIP_ASYNC unconditionally (bnc#1151927). - drm/i915/dp: Fix dsc bpp calculations, v5 (bnc#1151927). - perf stat: Fix a segmentation fault when using repeat forever (bnc#1151927). - perf tools: Fix segfault in cpu_cache_level__read() (bnc#1151927). - watchdog: imx2_wdt: fix min() calculation in imx2_wdt_set_timeout (bnc#1151927). - selftests: pidfd: Fix undefined reference to pthread_create() (bnc#1151927). - selftests/tpm2: Add the missing TEST_FILES assignment (bnc#1151927). - PCI: Restore Resizable BAR size bits correctly for 1MB BARs (bnc#1151927). - PCI: vmd: Fix shadow offsets to reflect spec changes (bnc#1151927). - PCI: hv: Avoid use of hv_pci_dev->pci_slot after freeing it (bnc#1151927). - PCI: vmd: Fix config addressing when using bus offsets (bnc#1151927). - timer: Read jiffies once when forwarding base clk (bnc#1151927). - usercopy: Avoid HIGHMEM pfn warning (bnc#1151927). - tracing: Make sure variable reference alias has correct var_ref_idx (bnc#1151927). - power: supply: sbs-battery: only return health when battery present (bnc#1151927). - power: supply: sbs-battery: use correct flags field (bnc#1151927). - MIPS: Treat Loongson Extensions as ASEs (bnc#1151927). - crypto: ccree - use the full crypt length value (bnc#1151927). - crypto: ccree - account for TEE not ready to report (bnc#1151927). - crypto: caam - fix concurrency issue in givencrypt descriptor (bnc#1151927). - crypto: caam/qi - fix error handling in ERN handler (bnc#1151927). - crypto: cavium/zip - Add missing single_release() (bnc#1151927). - crypto: skcipher - Unmap pages after an external error (bnc#1151927). - crypto: qat - Silence smp_processor_id() warning (bnc#1151927). - tools lib traceevent: Do not free tep->cmdlines in add_new_comm() on failure (bnc#1151927). - tools lib traceevent: Fix "robust" test of do_generate_dynamic_list_file (bnc#1151927). - can: mcp251x: mcp251x_hw_reset(): allow more time after a reset (bnc#1151927). - powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (bnc#1151927). - powerpc/mm: Fix an Oops in kasan_mmu_init() (bnc#1151927). - powerpc/mm: Add a helper to select PAGE_KERNEL_RO or PAGE_READONLY (bnc#1151927). - powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (bnc#1151927). - powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (bnc#1151927). - powerpc/kasan: Fix shadow area set up for modules (bnc#1151927). - powerpc/kasan: Fix parallel loading of modules (bnc#1151927). - powerpc/powernv/ioda: Fix race in TCE level allocation (bnc#1151927). - powerpc/pseries: Fix cpu_hotplug_lock acquisition in resize_hpt() (bnc#1151927). - powerpc/powernv: Restrict OPAL symbol map to only be readable by root (bnc#1151927). - powerpc/ptdump: Fix addresses display on PPC32 (bnc#1151927). - powerpc/32s: Fix boot failure with DEBUG_PAGEALLOC without KASAN (bnc#1151927). - powerpc/603: Fix handling of the DIRTY flag (bnc#1151927). - powerpc/mce: Schedule work from irq_work (bnc#1151927). - powerpc/mce: Fix MCE handling for huge pages (bnc#1151927). - powerpc/xive: Implement get_irqchip_state method for XIVE to fix shutdown race (bnc#1151927). - ASoC: sgtl5000: Improve VAG power and mute control (bnc#1151927). - ASoC: Define a set of DAPM pre/post-up events (bnc#1151927). - PM / devfreq: tegra: Fix kHz to Hz conversion (bnc#1151927). - nbd: fix max number of supported devs (bnc#1151927). - KVM: X86: Fix userspace set invalid CR4 (bnc#1151927). - KVM: PPC: Book3S HV: Don't lose pending doorbell request on migration on P9 (bnc#1151927). - KVM: PPC: Book3S HV: Check for MMU ready on piggybacked virtual cores (bnc#1151927). - KVM: PPC: Book3S HV: Fix race in re-enabling XIVE escalation interrupts (bnc#1151927). - KVM: PPC: Book3S HV: Don't push XIVE context when not using XIVE device (bnc#1151927). - KVM: PPC: Book3S HV: XIVE: Free escalation interrupts before disabling the VP (bnc#1151927). - KVM: PPC: Book3S: Enable XIVE native capability only if OPAL has required functions (bnc#1151927). - KVM: s390: fix __insn32_query() inline assembly (bnc#1151927). - Revert "s390/dasd: Add discard support for ESE volumes" (bnc#1151927). - s390/dasd: Fix error handling during online processing (bnc#1151927). - s390/cio: exclude subchannels with no parent from pseudo check (bnc#1151927). - s390/cio: avoid calling strlen on null pointer (bnc#1151927). - s390/topology: avoid firing events before kobjs are created (bnc#1151927). - KVM: s390: Test for bad access register and size at the start of S390_MEM_OP (bnc#1151927). - s390/sclp: Fix bit checked for has_sipl (bnc#1151927). - s390/process: avoid potential reading of freed stack (bnc#1151927). - commit 519ea7b ==== libffi ==== - Workaround aarch64 bug (boo#1153573) with upstream patch https://github.com/libffi/libffi/pull/499 updated to apply on current sources (upstream will probably rework this patch so we need to monitor the issue for the proper fix): * aarch64.patch ==== open-vm-tools ==== Subpackages: libvmtools0 - Add gcc9-static-inline.patch: Fix static inline when building with gcc9. - Fix memory leak in VixToolsListAuthAliases and VixToolsListMappedAliases. (bsc#1153271) + Add patch fix-leaks-Aliases-MappedAliases.patch ==== snapper ==== Version update (0.8.3 -> 0.8.5) Subpackages: libsnapper4 - allow trailing comments in configuration files (bsc#1005342) - version 0.8.5 - allow to make snapshot from other snapshot that the current one (jsc#SLE-7333) - version 0.8.4 ==== toolbox ==== Version update (1.0+git20191007.e038337 -> 1.0+git20191014.3034fbc) - Update to version 1.0+git20191014.3034fbc: * Make default shell configureable, use /bin/bash as default

1 0

[opensuse-kubic] New Kubic snapshot 20191018 released!
by Richard Brown 21 Oct '19

21 Oct '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: branding-openSUSE cloud-init (19.1 -> 19.2) glib2 (2.60.7 -> 2.62.1) installation-images-MicroOS (14.440 -> 14.442) kernel-source (5.3.5 -> 5.3.6) libffi open-vm-tools snapper (0.8.3 -> 0.8.5) toolbox (1.0+git20191007.e038337 -> 1.0+git20191014.3034fbc) === Details === ==== branding-openSUSE ==== Subpackages: grub2-branding-openSUSE - BuildRequires rsvg-convert instead of rsvg-view on suse_version >= 1550. rsvg-view no longer exists and the sub-package from librsvg was renamed accordingly. ==== cloud-init ==== Version update (19.1 -> 19.2) - Update to cloud-init 19.2 (bsc#1099358) + Remove, included upstream - cloud-init-detect-nova.diff - cloud-init-add-static-routes.diff + net: add rfc3442 (classless static routes) to EphemeralDHCP (LP: #1821102) + templates/ntp.conf.debian.tmpl: fix missing newline for pools (LP: #1836598) + Support netplan renderer in Arch Linux [Conrad Hoffmann] + Fix typo in publicly viewable documentation. [David Medberry] + Add a cdrom size checker for OVF ds to ds-identify [Pengpeng Sun] (LP: #1806701) + VMWare: Trigger the post customization script via cc_scripts module. [Xiaofeng Wang] (LP: #1833192) + Cloud-init analyze module: Added ability to analyze boot events. [Sam Gilson] + Update debian eni network configuration location, retain Ubuntu setting [Janos Lenart] + net: skip bond interfaces in get_interfaces [Stanislav Makar] (LP: #1812857) + Fix a couple of issues raised by a coverity scan + Add missing dsname for Hetzner Cloud datasource [Markus Schade] + doc: indicate that netplan is default in Ubuntu now + azure: add region and AZ properties from imds compute location metadata + sysconfig: support more bonding options [Penghui Liao] + cloud-init-generator: use libexec path to ds-identify on redhat systems (LP: #1833264) + tools/build-on-freebsd: update to python3 [Gonéri Le Bouder] + Allow identification of OpenStack by Asset Tag [Mark T. Voelker] (LP: #1669875) + Fix spelling error making 'an Ubuntu' consistent. [Brian Murray] + run-container: centos: comment out the repo mirrorlist [Paride Legovini] + netplan: update netplan key mappings for gratuitous-arp (LP: #1827238) + freebsd: fix the name of cloudcfg VARIANT [Gonéri Le Bouder] + freebsd: ability to grow root file system [Gonéri Le Bouder] + freebsd: NoCloud data source support [Gonéri Le Bouder] (LP: #1645824) + Azure: Return static fallback address as if failed to find endpoint [Jason Zions (MSFT)] ==== glib2 ==== Version update (2.60.7 -> 2.62.1) Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 - Update to version 2.62.1: + Fix regression in g_file_copy() when passing `G_FILE_COPY_TARGET_DEFAULT_PERMS` flag; the destination permissions would be private rather than following the process? umask. + Several `GDateTime` parsing fixes. + Always build the tests if installed-tests are enabled, so that the tests can actually be installed. + Bugs fixed: glgo#GNOME/GLib#174, glgo#GNOME/GLib#1865, glgo#GNOME/GLib#1875, glgo#GNOME/GLib#1887, glgo#GNOME/GLib#1888, glgo#GNOME/GLib!1021, glgo#GNOME/GLib!1094, glgo#GNOME/GLib!1101, glgo#GNOME/GLib!1102, glgo#GNOME/GLib!1103, glgo#GNOME/GLib!1127, glgo#GNOME/GLib!1128, glgo#GNOME/GLib!1140, glgo#GNOME/GLib!1141, glgo#GNOME/GLib!1142. + Updated translations. - Update to version 2.62.0: + Fix new `GFileInfo` APIs to work when `G_FILE_ATTRIBUTE_TIME_MODIFIED_USEC` was not queried. + Bugs fixed: glgo#GNOME/GLib#487, glgo#GNOME/GLib!1084, glgo#GNOME/GLib!1086,glgo#GNOME/GLib!1087. - Update to version 2.61.3: + Support setting thread name on BSD systems. + Install previously-uninstalled headers for public `GNativeSocketAddress` object. + Very initial support for Windows apps (UWP). + Add various new valgrind suppressions to `glib.supp`. + Bugs fixed: glgo#GNOME/GLib!83, glgo#GNOME/GLib!512, glgo#GNOME/GLib!873, glgo#GNOME/GLib!905, glgo#GNOME/GLib!1057, glgo#GNOME/GLib!1309, glgo#GNOME/GLib!1620, glgo#GNOME/GLib!1761, glgo#GNOME/GLib!1803, glgo#GNOME/GLib!1819, glgo#GNOME/GLib!1852, glgo#GNOME/GLib!1854, glgo#GNOME/GLib!1860, glgo#GNOME/GLib!1863, glgo#GNOME/GLib!1867, glgo#GNOME/GLib!1870, glgo#GNOME/GLib!1879, glgo#GNOME/GLib!1880, glgo#GNOME/GLib!1881, glgo#GNOME/GLib!1002, glgo#GNOME/GLib!1011, glgo#GNOME/GLib!1015, glgo#GNOME/GLib!1016, glgo#GNOME/GLib!1017, glgo#GNOME/GLib!1023, glgo#GNOME/GLib!1026, glgo#GNOME/GLib!1027, glgo#GNOME/GLib!1031, glgo#GNOME/GLib!1032, glgo#GNOME/GLib!1033, glgo#GNOME/GLib!1034, glgo#GNOME/GLib!1036, glgo#GNOME/GLib!1037, glgo#GNOME/GLib!1044, glgo#GNOME/GLib!1049, glgo#GNOME/GLib!1050, glgo#GNOME/GLib!1054, glgo#GNOME/GLib!1057, glgo#GNOME/GLib!1059, glgo#GNOME/GLib!1066, glgo#GNOME/GLib!1068, glgo#GNOME/GLib!1071, glgo#GNOME/GLib!1074, glgo#GNOME/GLib!1075. ==== installation-images-MicroOS ==== Version update (14.440 -> 14.442) - merge gh#openSUSE/installation-images#338 - adjust samba library list - include correct udev dir for virtualbox-guest-tools - remove multipath-tools from initrd - adjust to /usr/etc move in pam and shadow packages - 14.442 - merge gh#openSUSE/installation-images#337 - etc: module.config, sort other kernel/* modules - etc: update module.config to match 5.4 - handle kernel 5.4 - 14.441 - Set clamp_mtime_to_source_date_epoch 0: as the content of i-i is published in extracted form on download.o.o, and rsynced around, we need to be able to rely on changing mtime's for the content. ==== kernel-source ==== Version update (5.3.5 -> 5.3.6) - Linux 5.3.6 (bnc#1151927). - libnvdimm: prevent nvdimm from requesting key when security is disabled (bnc#1151927). - staging: erofs: detect potential multiref due to corrupted images (bnc#1151927). - staging: erofs: avoid endless loop of invalid lookback distance 0 (bnc#1151927). - staging: erofs: add two missing erofs_workgroup_put for corrupted images (bnc#1151927). - staging: erofs: some compressed cluster should be submitted for corrupted images (bnc#1151927). - staging: erofs: fix an error handling in erofs_readdir() (bnc#1151927). - coresight: etm4x: Use explicit barriers on enable/disable (bnc#1151927). - vfs: Fix EOVERFLOW testing in put_compat_statfs64 (bnc#1151927). - riscv: Avoid interrupts being erroneously enabled in handle_exception() (bnc#1151927). - perf stat: Reset previous counts on repeat with interval (bnc#1151927). - tick: broadcast-hrtimer: Fix a race in bc_set_next (bnc#1151927). - KVM: nVMX: Fix consistency check on injected exception error code (bnc#1151927). - Btrfs: fix selftests failure due to uninitialized i_mode in test inodes (bnc#1151927). - drm/radeon: Bail earlier when radeon.cik_/si_support=0 is passed (bnc#1151927). - nfp: abm: fix memory leak in nfp_abm_u32_knode_replace (bnc#1151927). - mlxsw: spectrum_flower: Fail in case user specifies multiple mirror actions (bnc#1151927). - perf unwind: Fix libunwind build failure on i386 systems (bnc#1151927). - i2c: qcom-geni: Disable DMA processing on the Lenovo Yoga C630 (bnc#1151927). - net: dsa: microchip: Always set regmap stride to 1 (bnc#1151927). - bpf: Fix bpf_event_output re-entry issue (bnc#1151927). - blk-mq: move lockdep_assert_held() into elevator_exit (bnc#1151927). - libbpf: fix false uninitialized variable warning (bnc#1151927). - kernel/elfcore.c: include proper prototypes (bnc#1151927). - selftests/bpf: adjust strobemeta loop to satisfy latest clang (bnc#1151927). - include/trace/events/writeback.h: fix -Wstringop-truncation warnings (bnc#1151927). - perf build: Add detection of java-11-openjdk-devel package (bnc#1151927). - sched/core: Fix migration to invalid CPU in __set_cpus_allowed_ptr() (bnc#1151927). - sched/membarrier: Fix private expedited registration check (bnc#1151927). - sched/membarrier: Call sync_core only before usermode for same mm (bnc#1151927). - libnvdimm/nfit_test: Fix acpi_handle redefinition (bnc#1151927). - fuse: fix memleak in cuse_channel_open (bnc#1151927). - =?UTF-8?q?libnvdimm:=20Fix=20endian=20conversion=20issues?= =?UTF-8?q?=C2=A0?= (bnc#1151927). - libnvdimm/region: Initialize bad block for volatile namespaces (bnc#1151927). - iommu/amd: Fix downgrading default page-sizes in alloc_pte() (bnc#1151927). - thermal_hwmon: Sanitize thermal_zone type (bnc#1151927). - thermal: Fix use-after-free when unregistering thermal zone device (bnc#1151927). - ntb: point to right memory window index (bnc#1151927). - x86/purgatory: Disable the stackleak GCC plugin for the purgatory (bnc#1151927). - selftests/seccomp: fix build on older kernels (bnc#1151927). - pwm: stm32-lp: Add check in case requested period cannot be achieved (bnc#1151927). - SUNRPC: Don't try to parse incomplete RPC messages (bnc#1151927). - pNFS: Ensure we do clear the return-on-close layout stateid on fatal errors (bnc#1151927). - perf probe: Fix to clear tev->nargs in clear_probe_trace_event() (bnc#1151927). - drm/amdgpu: Check for valid number of registers to read (bnc#1151927). - drm/amdgpu: Fix KFD-related kernel oops on Hawaii (bnc#1151927). - netfilter: nf_tables: allow lookups in dynamic sets (bnc#1151927). - watchdog: aspeed: Add support for AST2600 (bnc#1151927). - SUNRPC: RPC level errors should always set task->tk_rpc_status (bnc#1151927). - ceph: reconnect connection if session hang in opening state (bnc#1151927). - ceph: fetch cap_gen under spinlock in ceph_add_cap (bnc#1151927). - ceph: fix directories inode i_blkbits initialization (bnc#1151927). - fuse: fix request limit (bnc#1151927). - xen/pci: reserve MCFG areas earlier (bnc#1151927). - 9p: avoid attaching writeback_fid on mmap with type PRIVATE (bnc#1151927). - 9p: Transport error uninitialized (bnc#1151927). - xprtrdma: Send Queue size grows after a reconnect (bnc#1151927). - xprtrdma: Toggle XPRT_CONGESTED in xprtrdma's slot methods (bnc#1151927). - fs: nfs: Fix possible null-pointer dereferences in encode_attrs() (bnc#1151927). - ima: fix freeing ongoing ahash_request (bnc#1151927). - ima: always return negative code for error (bnc#1151927). - drivers: thermal: qcom: tsens: Fix memory leak from qfprom read (bnc#1151927). - cfg80211: initialize on-stack chandefs (bnc#1151927). - cfg80211: validate SSID/MBSSID element ordering assumption (bnc#1151927). - nl80211: validate beacon head (bnc#1151927). - ieee802154: atusb: fix use-after-free at disconnect (bnc#1151927). - xen/xenbus: fix self-deadlock after killing user process (bnc#1151927). - xen/balloon: Set pages PageOffline() in balloon_add_region() (bnc#1151927). - DTS: ARM: gta04: introduce legacy spi-cs-high to make display work again (bnc#1151927). - sched: Add __ASSEMBLY__ guards around struct clone_args (bnc#1151927). - libnvdimm/altmap: Track namespace boundaries in altmap (bnc#1151927). - Revert "locking/pvqspinlock: Don't wait if vCPU is preempted" (bnc#1151927). - mmc: sdhci: Let drivers define their DMA mask (bnc#1151927). - mmc: sdhci-of-esdhc: set DMA snooping based on DMA coherence (bnc#1151927). - mmc: sdhci: improve ADMA error reporting (bnc#1151927). - mmc: tegra: Implement ->set_dma_mask() (bnc#1151927). - mac80211: keep BHs disabled while calling drv_tx_wake_queue() (bnc#1151927). - drm/i915: to make vgpu ppgtt notificaiton as atomic operation (bnc#1151927). - drm/i915/gvt: update vgpu workload head pointer correctly (bnc#1151927). - drm/amd/powerplay: change metrics update period from 1ms to 100ms (bnc#1151927). - drm/nouveau/kms/nv50-: Don't create MSTMs for eDP connectors (bnc#1151927). - drm/msm/dsi: Fix return value check for clk_get_parent (bnc#1151927). - drm/omap: fix max fclk divider for omap36xx (bnc#1151927). - drm: mali-dp: Mark expected switch fall-through (bnc#1151927). - drm/atomic: Take the atomic toys away from X (bnc#1151927). - drm/atomic: Reject FLIP_ASYNC unconditionally (bnc#1151927). - drm/i915/dp: Fix dsc bpp calculations, v5 (bnc#1151927). - perf stat: Fix a segmentation fault when using repeat forever (bnc#1151927). - perf tools: Fix segfault in cpu_cache_level__read() (bnc#1151927). - watchdog: imx2_wdt: fix min() calculation in imx2_wdt_set_timeout (bnc#1151927). - selftests: pidfd: Fix undefined reference to pthread_create() (bnc#1151927). - selftests/tpm2: Add the missing TEST_FILES assignment (bnc#1151927). - PCI: Restore Resizable BAR size bits correctly for 1MB BARs (bnc#1151927). - PCI: vmd: Fix shadow offsets to reflect spec changes (bnc#1151927). - PCI: hv: Avoid use of hv_pci_dev->pci_slot after freeing it (bnc#1151927). - PCI: vmd: Fix config addressing when using bus offsets (bnc#1151927). - timer: Read jiffies once when forwarding base clk (bnc#1151927). - usercopy: Avoid HIGHMEM pfn warning (bnc#1151927). - tracing: Make sure variable reference alias has correct var_ref_idx (bnc#1151927). - power: supply: sbs-battery: only return health when battery present (bnc#1151927). - power: supply: sbs-battery: use correct flags field (bnc#1151927). - MIPS: Treat Loongson Extensions as ASEs (bnc#1151927). - crypto: ccree - use the full crypt length value (bnc#1151927). - crypto: ccree - account for TEE not ready to report (bnc#1151927). - crypto: caam - fix concurrency issue in givencrypt descriptor (bnc#1151927). - crypto: caam/qi - fix error handling in ERN handler (bnc#1151927). - crypto: cavium/zip - Add missing single_release() (bnc#1151927). - crypto: skcipher - Unmap pages after an external error (bnc#1151927). - crypto: qat - Silence smp_processor_id() warning (bnc#1151927). - tools lib traceevent: Do not free tep->cmdlines in add_new_comm() on failure (bnc#1151927). - tools lib traceevent: Fix "robust" test of do_generate_dynamic_list_file (bnc#1151927). - can: mcp251x: mcp251x_hw_reset(): allow more time after a reset (bnc#1151927). - powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (bnc#1151927). - powerpc/mm: Fix an Oops in kasan_mmu_init() (bnc#1151927). - powerpc/mm: Add a helper to select PAGE_KERNEL_RO or PAGE_READONLY (bnc#1151927). - powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (bnc#1151927). - powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (bnc#1151927). - powerpc/kasan: Fix shadow area set up for modules (bnc#1151927). - powerpc/kasan: Fix parallel loading of modules (bnc#1151927). - powerpc/powernv/ioda: Fix race in TCE level allocation (bnc#1151927). - powerpc/pseries: Fix cpu_hotplug_lock acquisition in resize_hpt() (bnc#1151927). - powerpc/powernv: Restrict OPAL symbol map to only be readable by root (bnc#1151927). - powerpc/ptdump: Fix addresses display on PPC32 (bnc#1151927). - powerpc/32s: Fix boot failure with DEBUG_PAGEALLOC without KASAN (bnc#1151927). - powerpc/603: Fix handling of the DIRTY flag (bnc#1151927). - powerpc/mce: Schedule work from irq_work (bnc#1151927). - powerpc/mce: Fix MCE handling for huge pages (bnc#1151927). - powerpc/xive: Implement get_irqchip_state method for XIVE to fix shutdown race (bnc#1151927). - ASoC: sgtl5000: Improve VAG power and mute control (bnc#1151927). - ASoC: Define a set of DAPM pre/post-up events (bnc#1151927). - PM / devfreq: tegra: Fix kHz to Hz conversion (bnc#1151927). - nbd: fix max number of supported devs (bnc#1151927). - KVM: X86: Fix userspace set invalid CR4 (bnc#1151927). - KVM: PPC: Book3S HV: Don't lose pending doorbell request on migration on P9 (bnc#1151927). - KVM: PPC: Book3S HV: Check for MMU ready on piggybacked virtual cores (bnc#1151927). - KVM: PPC: Book3S HV: Fix race in re-enabling XIVE escalation interrupts (bnc#1151927). - KVM: PPC: Book3S HV: Don't push XIVE context when not using XIVE device (bnc#1151927). - KVM: PPC: Book3S HV: XIVE: Free escalation interrupts before disabling the VP (bnc#1151927). - KVM: PPC: Book3S: Enable XIVE native capability only if OPAL has required functions (bnc#1151927). - KVM: s390: fix __insn32_query() inline assembly (bnc#1151927). - Revert "s390/dasd: Add discard support for ESE volumes" (bnc#1151927). - s390/dasd: Fix error handling during online processing (bnc#1151927). - s390/cio: exclude subchannels with no parent from pseudo check (bnc#1151927). - s390/cio: avoid calling strlen on null pointer (bnc#1151927). - s390/topology: avoid firing events before kobjs are created (bnc#1151927). - KVM: s390: Test for bad access register and size at the start of S390_MEM_OP (bnc#1151927). - s390/sclp: Fix bit checked for has_sipl (bnc#1151927). - s390/process: avoid potential reading of freed stack (bnc#1151927). - commit 519ea7b ==== libffi ==== - Workaround aarch64 bug (boo#1153573) with upstream patch https://github.com/libffi/libffi/pull/499 updated to apply on current sources (upstream will probably rework this patch so we need to monitor the issue for the proper fix): * aarch64.patch ==== open-vm-tools ==== Subpackages: libvmtools0 - Add gcc9-static-inline.patch: Fix static inline when building with gcc9. - Fix memory leak in VixToolsListAuthAliases and VixToolsListMappedAliases. (bsc#1153271) + Add patch fix-leaks-Aliases-MappedAliases.patch ==== snapper ==== Version update (0.8.3 -> 0.8.5) Subpackages: libsnapper4 - allow trailing comments in configuration files (bsc#1005342) - version 0.8.5 - allow to make snapshot from other snapshot that the current one (jsc#SLE-7333) - version 0.8.4 ==== toolbox ==== Version update (1.0+git20191007.e038337 -> 1.0+git20191014.3034fbc) - Update to version 1.0+git20191014.3034fbc: * Make default shell configureable, use /bin/bash as default

1 0

[opensuse-kubic] New MicroOS snapshot 20191016 released!
by Richard Brown 18 Oct '19

18 Oct '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: yast2 (4.2.24 -> 4.2.27) === Details === ==== yast2 ==== Version update (4.2.24 -> 4.2.27) - Fixed evaluating the available package versions, fixed crash when trying to download a non-existing package (bsc#1151824) - 4.2.27 - Remove old values from /etc/sysctl.conf (jsc#SLE-9077). - 4.2.26 - Add a CFA based class to adjust sysctl settings (jsc#SLE-9077). - 4.2.25 -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191016 released!
by Richard Brown 18 Oct '19

18 Oct '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: yast2 (4.2.24 -> 4.2.27) === Details === ==== yast2 ==== Version update (4.2.24 -> 4.2.27) - Fixed evaluating the available package versions, fixed crash when trying to download a non-existing package (bsc#1151824) - 4.2.27 - Remove old values from /etc/sysctl.conf (jsc#SLE-9077). - 4.2.26 - Add a CFA based class to adjust sysctl settings (jsc#SLE-9077). - 4.2.25 -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20191014 released!
by Richard Brown 16 Oct '19

16 Oct '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: e2fsprogs (1.45.3 -> 1.45.4) gnutls (3.6.9 -> 3.6.10) nano (4.4 -> 4.5) talloc (2.1.16 -> 2.2.0) tdb (1.3.18 -> 1.4.2) tevent (0.9.39 -> 0.10.0) xen === Details === ==== e2fsprogs ==== Version update (1.45.3 -> 1.45.4) Subpackages: libcom_err2 libext2fs2 - Update to 1.45.4: * A maliciously corrupted file systems can trigger buffer overruns in the quota code used by e2fsck. (Addresses CVE-2019-5094) * E2fsck now checks to make sure the casefold flag is only set on directories, and only when the casefold feature is enabled * E2fsck will not disable the low dtime checks when using a backup superblock where the last mount time is zero * Scrubbing scripts fixes * Update translations ==== gnutls ==== Version update (3.6.9 -> 3.6.10) - gnutls 3.6.10: * Add support for deterministic ECDSA/DSA (RFC6979) * Add functions for in-place encryption/decryption of data buffers * server now selects the highest TLS protocol version, if TLS 1.3 is enabled and the client advertises an older protocol version first * Add support for GOST 28147-89 cipher in CNT (GOST counter) mode and MAC generation based on GOST 28147-89 (IMIT) * certtool: when outputting an encrypted private key do not insert the textual description of it ==== nano ==== Version update (4.4 -> 4.5) - nano 4.5: * new 'tabgives' to modify <Tab> behavior per syntax * <Tab> will indent a marked region also when M-} has been rebound ==== talloc ==== Version update (2.1.16 -> 2.2.0) - Update to version 2.2.0 + Remove pytalloc_CObject_FromTallocPtr() + Remove --extra-python (a build time mode to produce Python2 and Python3 bindings at the same time) + New minor version to allow Samba 4.10 to release a talloc if required from that branch ==== tdb ==== Version update (1.3.18 -> 1.4.2) - Update to version 1.4.2 + Build fixes + Improve the performance by inlining the tdb_oob() checks + Do not propogate any errors from tdb_repack() to tdb_transaction_commit(); (bso#13952) + Remove Python 2.x support except to build just the bare C library + Remove --extra-python (a build time mode to produce Python2 and Python3 bindings at the same time) + New minor version to allow Samba 4.10 to release a tdb if required from that branch ==== tevent ==== Version update (0.9.39 -> 0.10.0) - Update to version 0.10.0 + Remove Python 2.x support except to build just the bare C library + Remove --extra-python (a build time mode to produce Python2 and Python3 bindings at the same time) + New minor version to allow Samba 4.10 to release a tevent if required from that branch ==== xen ==== - bsc#1120095 - add code to change LIBXL_HOTPLUG_TIMEOUT at runtime The included README has details about the impact of this change libxl.LIBXL_HOTPLUG_TIMEOUT.patch -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191014 released!
by Richard Brown 16 Oct '19

16 Oct '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: e2fsprogs (1.45.3 -> 1.45.4) gnutls (3.6.9 -> 3.6.10) haproxy (2.0.6+git0.58706ab4 -> 2.0.7+git0.1909aa1e) nano (4.4 -> 4.5) patterns-base salt talloc (2.1.16 -> 2.2.0) tdb (1.3.18 -> 1.4.2) tevent (0.9.39 -> 0.10.0) xen yomi-formula (0.0.1+git.1566569312.4133e8e -> 0.0.1+git.1570457098.f38ad71) === Details === ==== e2fsprogs ==== Version update (1.45.3 -> 1.45.4) Subpackages: libcom_err2 libext2fs2 - Update to 1.45.4: * A maliciously corrupted file systems can trigger buffer overruns in the quota code used by e2fsck. (Addresses CVE-2019-5094) * E2fsck now checks to make sure the casefold flag is only set on directories, and only when the casefold feature is enabled * E2fsck will not disable the low dtime checks when using a backup superblock where the last mount time is zero * Scrubbing scripts fixes * Update translations ==== gnutls ==== Version update (3.6.9 -> 3.6.10) - gnutls 3.6.10: * Add support for deterministic ECDSA/DSA (RFC6979) * Add functions for in-place encryption/decryption of data buffers * server now selects the highest TLS protocol version, if TLS 1.3 is enabled and the client advertises an older protocol version first * Add support for GOST 28147-89 cipher in CNT (GOST counter) mode and MAC generation based on GOST 28147-89 (IMIT) * certtool: when outputting an encrypted private key do not insert the textual description of it ==== haproxy ==== Version update (2.0.6+git0.58706ab4 -> 2.0.7+git0.1909aa1e) - Update to version 2.0.7+git0.1909aa1e: * [RELEASE] Released version 2.0.7 * BUG/MEDIUM: namespace: fix fd leak in master-worker mode * DOC: Fix documentation about the cli command to get resolver stats * BUG/MINOR: contrib/prometheus-exporter: Return the time averages in seconds * MINOR: stats: Add the support of float fields in stats * MINOR: spoe: Support the async mode with several threads * MINOR: spoe: Improve generation of the engine-id * BUG/MEDIUM: spoe: Use a different engine-id per process * BUG/MINOR: mux-h1: Do h2 upgrade only on the first request * BUG/MAJOR: mux_h2: Don't consume more payload than received for skipped frames * BUG/MINOR: mux-h2: Use the dummy error when decoding headers for a closed stream * BUG/MEDIUM: mux-h2: don't reject valid frames on closed streams * BUG/MEDIUM: namespace: close open namespaces during soft shutdown * BUG/MINOR: mux-h2: do not wake up blocked streams before the mux is ready * BUG/MEDIUM: checks: make sure the connection is ready before trying to recv * BUG/MEDIUM: stream-int: Process connection/CS errors during synchronous sends * BUG/MINOR: stream-int: Process connection/CS errors first in si_cs_send() * BUG/MEDIUM: check/threads: make external checks run exclusively on thread 1 * BUG/MAJOR: mux-h2: Handle HEADERS frames received after a RST_STREAM frame * BUG/MINOR: mux-h2: Be sure to have a connection to unsubcribe * BUG/MEDIUM: stick-table: Properly handle "show table" with a data type argument ==== nano ==== Version update (4.4 -> 4.5) - nano 4.5: * new 'tabgives' to modify <Tab> behavior per syntax * <Tab> will indent a marked region also when M-} has been rebound ==== patterns-base ==== Subpackages: patterns-base-apparmor patterns-base-minimal_base - transactional_base require man by default (boo#1127539) ==== salt ==== Subpackages: python3-salt salt-master salt-minion salt-standalone-formulas-configuration - Improve batch_async to release consumed memory (bsc#1140912) - Fix memory leak produced by batch async find_jobs mechanism (bsc#1140912) - Grant read and execute permission to others (bsc#1150447) - Added: * improve-batch_async-to-release-consumed-memory-bsc-1.patch * fix-memory-leak-produced-by-batch-async-find_jobs-me.patch ==== talloc ==== Version update (2.1.16 -> 2.2.0) - Update to version 2.2.0 + Remove pytalloc_CObject_FromTallocPtr() + Remove --extra-python (a build time mode to produce Python2 and Python3 bindings at the same time) + New minor version to allow Samba 4.10 to release a talloc if required from that branch ==== tdb ==== Version update (1.3.18 -> 1.4.2) - Update to version 1.4.2 + Build fixes + Improve the performance by inlining the tdb_oob() checks + Do not propogate any errors from tdb_repack() to tdb_transaction_commit(); (bso#13952) + Remove Python 2.x support except to build just the bare C library + Remove --extra-python (a build time mode to produce Python2 and Python3 bindings at the same time) + New minor version to allow Samba 4.10 to release a tdb if required from that branch ==== tevent ==== Version update (0.9.39 -> 0.10.0) - Update to version 0.10.0 + Remove Python 2.x support except to build just the bare C library + Remove --extra-python (a build time mode to produce Python2 and Python3 bindings at the same time) + New minor version to allow Samba 4.10 to release a tevent if required from that branch ==== xen ==== - bsc#1120095 - add code to change LIBXL_HOTPLUG_TIMEOUT at runtime The included README has details about the impact of this change libxl.LIBXL_HOTPLUG_TIMEOUT.patch ==== yomi-formula ==== Version update (0.0.1+git.1566569312.4133e8e -> 0.0.1+git.1570457098.f38ad71) - Update directoy persmissions based on the new configuration from salt-standalone-formulas-configuration - Update to version 0.0.1+git.1570457098.f38ad71: * mount: pre-set the chroot before calling zypper (bsc#1153062) * mkinitrd: force re-creation if software changes - Update to version 0.0.1+git.1570179173.75fc04c: * states: simplify default values on conditions * machine-id: copy machine-id from the system * reboot: replace backtick quote in shell command * partitions: unify kind of quote * users: force password hash under quotes * metadata: split form in multiple subforms - Generate metadata information for subforms - Update to version 0.0.1+git.1569935178.cfe975f: * image: check the presence of URL for inclusion * image: fix umount_image_/mnt name * installer: rename entry point to init.sls * mark: remove guard mark and use mount detector * states: get default value for empty sections * pillar: install glibc-locale with pattern:enhanced_base * bootloader: fix documentation and form * metadata: add the initial metadata and form data - Add metadata directory - Adjust states and metadata directory permissions - Update to version 0.0.1+git.1567698409.1177c34: * image: add new mechanism for software installation * formatted: remove useless comments * docs: refactor the documentation - Add metadata information - Adjust salt-formula directory permissions -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] Tidying up github.com/kubic-project
by Richard Brown 15 Oct '19

15 Oct '19

Hi all, I'm tidying up github.com/kubic-project which currently includes a large amount of experimental, short lived, or otherwise not actively developed repositories. I used the following criteria to define what repos are active parts of the Kubic Project: - Sources destined for Packages must have those Packages in Factory - Packages in Factory should be on Kubic media or compatible with tooling provided by the Kubic media - Non-packaged supporting materials (eg cri-o-tests) must be consumed by tools or processes as part of the Factory release process All of the repos that dont fit the above criteria have been archived, and where appropriate OBS delete rqeuests have been sent Those repos are now read-only in preparation for their deletion. ** IF THERE ARE NO OBJECTIONS, THESE REPOS WILL BE DELETED AFTER 15 November 2019 ** This deletion will include any related packages remaining in devel:kubic in OBS A full list of archived repos are below: - caasp-services - velum (obs dr: https://build.opensuse.org/request/show/738619 - delete request because does not build) - caasp-container-manifests - dex-branding (obs dr: https://build.opensuse.org/request/show/738620) - container-feeder - caasp-cli - kubic-init - dex-operator - caasp-init - registries-operator - kubic-ingress-controller - velum-branding - git-templates - build-caasp-iso - terraform - caasp-devenv - e2e-tests Of course, if I made any mistakes, please let me know - that's why I've archived things so everything is reversable. Regards, -- Richard Brown Linux Distribution Engineer - Future Technology Team Phone +4991174053-361 SUSE Software Solutions Germany GmbH, Maxfeldstr. 5, D-90409 Nuernberg (HRB 36809, AG Nürnberg) Geschäftsführer: Felix Imendörffer -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20191012 released!
by Richard Brown 14 Oct '19

14 Oct '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: kernel-source (5.3.4 -> 5.3.5) === Details === ==== kernel-source ==== Version update (5.3.4 -> 5.3.5) - Linux 5.3.5 (bnc#1151927). - vfs: set fs_context::user_ns for reconfigure (bnc#1151927). - 9p/cache.c: Fix memory leak in v9fs_cache_session_get_cookie (bnc#1151927). - KVM: hyperv: Fix Direct Synthetic timers assert an interrupt w/o lapic_in_kernel (bnc#1151927). - kexec: bail out upon SIGKILL when allocating memory (bnc#1151927). - NFC: fix attrs checks in netlink interface (bnc#1151927). - dm zoned: fix invalid memory access (bnc#1151927). - dm raid: fix updating of max_discard_sectors limit (bnc#1151927). - smack: use GFP_NOFS while holding inode_smack::smk_lock (bnc#1151927). - Smack: Don't ignore other bprm->unsafe flags if LSM_UNSAFE_PTRACE is set (bnc#1151927). - net: sched: taprio: Avoid division by zero on invalid link speed (bnc#1151927). - net: sched: cbs: Avoid division by zero when calculating the port rate (bnc#1151927). - net: socionext: netsec: always grab descriptor lock (bnc#1151927). - net: dsa: sja1105: Prevent leaking memory (bnc#1151927). - net: dsa: sja1105: Ensure PTP time for rxtstamp reconstruction is not in the past (bnc#1151927). - ptp_qoriq: Initialize the registers' spinlock before calling ptp_qoriq_settime (bnc#1151927). - net: dsa: sja1105: Fix sleeping while atomic in .port_hwtstamp_set (bnc#1151927). - xen-netfront: do not use ~0U as error return value for xennet_fill_frags() (bnc#1151927). - net: dsa: sja1105: Initialize the meta_lock (bnc#1151927). - net/rds: Fix error handling in rds_ib_add_one() (bnc#1151927). - udp: only do GSO if # of segs > 1 (bnc#1151927). - tcp: adjust rto_base in retransmits_timed_out() (bnc#1151927). - net: dsa: rtl8366: Check VLAN ID and not ports (bnc#1151927). - vsock: Fix a lockdep warning in __vsock_release() (bnc#1151927). - udp: fix gso_segs calculations (bnc#1151927). - tipc: fix unlimited bundling of small messages (bnc#1151927). - sch_dsmark: fix potential NULL deref in dsmark_init() (bnc#1151927). - sch_cbq: validate TCA_CBQ_WRROPT to avoid crash (bnc#1151927). - rxrpc: Fix rxrpc_recvmsg tracepoint (bnc#1151927). - qmi_wwan: add support for Cinterion CLS8 devices (bnc#1151927). - nfc: fix memory leak in llcp_sock_bind() (bnc#1151927). - net: Unpublish sk from sk_reuseport_cb before call_rcu (bnc#1151927). - net: sched: taprio: Fix potential integer overflow in taprio_set_picos_per_byte (bnc#1151927). - net: qlogic: Fix memory leak in ql_alloc_large_buffers (bnc#1151927). - net: ipv4: avoid mixed n_redirects and rate_tokens usage (bnc#1151927). - ipv6: Handle missing host route in __ipv6_ifa_notify (bnc#1151927). - ipv6: drop incoming packets having a v4mapped source address (bnc#1151927). - hso: fix NULL-deref on tty open (bnc#1151927). - erspan: remove the incorrect mtu limit for erspan (bnc#1151927). - cxgb4:Fix out-of-bounds MSI-X info array access (bnc#1151927). - arm: use STACK_TOP when computing mmap base address (bnc#1151927). - arm: properly account for stack randomization and stack guard gap (bnc#1151927). - mips: properly account for stack randomization and stack guard gap (bnc#1151927). - arm64: consider stack randomization for mmap base only when necessary (bnc#1151927). - kmemleak: increase DEBUG_KMEMLEAK_EARLY_LOG_SIZE default to 16K (bnc#1151927). - ocfs2: wait for recovering done after direct unlock request (bnc#1151927). - kbuild: clean compressed initramfs image (bnc#1151927). - mm: add dummy can_do_mlock() helper (bnc#1151927). - crypto: hisilicon - Fix double free in sec_free_hw_sgl() (bnc#1151927). - tools/power/x86/intel-speed-select: Fix high priority core mask over count (bnc#1151927). - hypfs: Fix error number left in struct pointer member (bnc#1151927). - pktcdvd: remove warning on attempting to register non-passthrough dev (bnc#1151927). - fat: work around race with userspace's read via blockdev while mounting (bnc#1151927). - block, bfq: push up injection only after setting service time (bnc#1151927). - i2c: tegra: Move suspend handling to NOIRQ phase (bnc#1151927). - ARM: 8903/1: ensure that usable memory in bank 0 starts from a PMD-aligned address (bnc#1151927). - ARM: 8905/1: Emit __gnu_mcount_nc when using Clang 10.0.0 or newer (bnc#1151927). - PCI: Use static const struct, not const static struct (bnc#1151927). - security: smack: Fix possible null-pointer dereferences in smack_socket_sock_rcv_skb() (bnc#1151927). - PCI: exynos: Propagate errors for optional PHYs (bnc#1151927). - PCI: imx6: Propagate errors for optional regulators (bnc#1151927). - PCI: histb: Propagate errors for optional regulators (bnc#1151927). - PCI: rockchip: Propagate errors for optional regulators (bnc#1151927). - HID: apple: Fix stuck function keys when using FN (bnc#1151927). - PCI: Add pci_info_ratelimited() to ratelimit PCI separately (bnc#1151927). - selinux: fix residual uses of current_security() for the SELinux blob (bnc#1151927). - power: supply: register HWMON devices with valid names (bnc#1151927). - rtc: pcf85363/pcf85263: fix regmap error in set_time (bnc#1151927). - rtc: snvs: fix possible race condition (bnc#1151927). - ARM: 8875/1: Kconfig: default to AEABI w/ Clang (bnc#1151927). - PCI: mobiveil: Fix the CPU base address setup in inbound window (bnc#1151927). - soundwire: intel: fix channel number reported by hardware (bnc#1151927). - ARM: 8898/1: mm: Don't treat faults reported from cache maintenance as writes (bnc#1151927). - mips/atomic: Fix smp_mb__{before,after}_atomic() (bnc#1151927). - livepatch: Nullify obj->mod in klp_module_coming()'s error path (bnc#1151927). - PCI: layerscape: Add the bar_fixed_64bit property to the endpoint driver (bnc#1151927). - PCI: pci-hyperv: Fix build errors on non-SYSFS config (bnc#1151927). - mips/atomic: Fix loongson_llsc_mb() wreckage (bnc#1151927). - rtc: bd70528: fix driver dependencies (bnc#1151927). - HID: wacom: Fix several minor compiler warnings (bnc#1151927). - PCI: tegra: Fix OF node reference leak (bnc#1151927). - mfd: intel-lpss: Remove D3cold delay (bnc#1151927). - i2c-cht-wc: Fix lockdep warning (bnc#1151927). - MIPS: tlbex: Explicitly cast _PAGE_NO_EXEC to a boolean (bnc#1151927). - MIPS: Don't use bc_false uninitialized in __mm_isBranchInstr (bnc#1151927). - MIPS: Ingenic: Disable broken BTB lookup optimization (bnc#1151927). - ext4: fix potential use after free after remounting with noblock_validity (bnc#1151927). - f2fs: fix to drop meta/node pages during umount (bnc#1151927). - dma-buf/sw_sync: Synchronize signal vs syncpt free (bnc#1151927). - scsi: core: Reduce memory required for SCSI logging (bnc#1151927). - clk: sprd: add missing kfree (bnc#1151927). - mbox: qcom: add APCS child device for QCS404 (bnc#1151927). - powerpc: dump kernel log before carrying out fadump or kdump (bnc#1151927). - clk: Make clk_bulk_get_all() return a valid "id" (bnc#1151927). - clk: imx: clk-pll14xx: unbypass PLL by default (bnc#1151927). - clk: imx: pll14xx: avoid glitch when set rate (bnc#1151927). - clk: at91: select parent if main oscillator or bypass is enabled (bnc#1151927). - arm64: fix unreachable code issue with cmpxchg (bnc#1151927). - ARM: dts: dir685: Drop spi-cpol from the display (bnc#1151927). - mailbox: mediatek: cmdq: clear the event in cmdq initial flow (bnc#1151927). - pinctrl: meson-gxbb: Fix wrong pinning definition for uart_c (bnc#1151927). - powerpc/pseries: correctly track irq state in default idle (bnc#1151927). - clk: qcom: gcc-sdm845: Use floor ops for sdcc clks (bnc#1151927). - powerpc/eeh: Clean up EEH PEs after recovery finishes (bnc#1151927). - pstore: fs superblock limits (bnc#1151927). - powerpc/64s/exception: machine check use correct cfar for late handler (bnc#1151927). - drm/amdgpu/si: fix ASIC tests (bnc#1151927). - kbuild: Do not enable -Wimplicit-fallthrough for clang for now (bnc#1151927). - selftests/powerpc: Retry on host facility unavailable (bnc#1151927). - drm/amd/display: fix trigger not generated for freesync (bnc#1151927). - drm/amd/display: fix MPO HUBP underflow with Scatter Gather (bnc#1151927). - drm/amd/powerpaly: fix navi series custom peak level value error (bnc#1151927). - drm/amd/display: support spdif (bnc#1151927). - clk: renesas: cpg-mssr: Set GENPD_FLAG_ALWAYS_ON for clock domain (bnc#1151927). - clk: renesas: mstp: Set GENPD_FLAG_ALWAYS_ON for clock domain (bnc#1151927). - pinctrl: amd: disable spurious-firing GPIO IRQs (bnc#1151927). - drm/nouveau/volt: Fix for some cards having 0 maximum voltage (bnc#1151927). - drm/nouveau/kms/tu102-: disable input lut when input is already FP16 (bnc#1151927). - drm/amdgpu/sdma5: fix number of sdma5 trap irq types for navi1x (bnc#1151927). - vfio_pci: Restore original state on release (bnc#1151927). - powerpc/eeh: Clear stale EEH_DEV_NO_HANDLER flag (bnc#1151927). - pinctrl: tegra: Fix write barrier placement in pmx_writel (bnc#1151927). - powerpc/perf: fix imc allocation failure handling (bnc#1151927). - powerpc/pseries/mobility: use cond_resched when updating device tree (bnc#1151927). - powerpc/64s/radix: Fix memory hotplug section page table creation (bnc#1151927). - powerpc/futex: Fix warning: 'oldval' may be used uninitialized in this function (bnc#1151927). - powerpc/ptdump: fix walk_pagetables() address mismatch (bnc#1151927). - powerpc/rtas: use device model APIs and serialization during LPM (bnc#1151927). - powerpc/xmon: Check for HV mode when dumping XIVE info from OPAL (bnc#1151927). - clk: sunxi: Don't call clk_hw_get_name() on a hw that isn't registered (bnc#1151927). - clk: zx296718: Don't reference clk_init_data after registration (bnc#1151927). - clk: sprd: Don't reference clk_init_data after registration (bnc#1151927). - clk: meson: axg-audio: Don't reference clk_init_data after registration (bnc#1151927). - clk: sirf: Don't reference clk_init_data after registration (bnc#1151927). - clk: actions: Don't reference clk_init_data after registration (bnc#1151927). - powerpc/powernv/ioda2: Allocate TCE table levels on demand for default DMA window (bnc#1151927). - drm/amd/display: Register VUPDATE_NO_LOCK interrupts for DCN2 (bnc#1151927). - drm/amd/display: reprogram VM config when system resume (bnc#1151927). - drm/amd/display: Fix frames_to_insert math (bnc#1151927). - drm/amd/display: fix issue where 252-255 values are clipped (bnc#1151927). - clk: sunxi-ng: v3s: add missing clock slices for MMC2 module clocks (bnc#1151927). - clk: ingenic/jz4740: Fix "pll half" divider not read/written properly (bnc#1151927). - clk: qoriq: Fix -Wunused-const-variable (bnc#1151927). - ipmi_si: Only schedule continuously in the thread in maintenance mode (bnc#1151927). - pinctrl: stmfx: update pinconf settings (bnc#1151927). - PCI: rpaphp: Avoid a sometimes-uninitialized warning (bnc#1151927). - clk: imx8mq: Mark AHB clock as critical (bnc#1151927). - gpu: drm: radeon: Fix a possible null-pointer dereference in radeon_connector_set_property() (bnc#1151927). - drm/radeon: Fix EEH during kexec (bnc#1151927). - drm/amd/display: Use proper enum conversion functions (bnc#1151927). - drm/amdgpu: Fix hard hang for S/G display BOs (bnc#1151927). - drm/rockchip: Check for fast link training before enabling psr (bnc#1151927). - drm/panel: check failure cases in the probe func (bnc#1151927). - drm/bridge: sii902x: fix missing reference to mclk clock (bnc#1151927). - drm/stm: attach gem fence to atomic state (bnc#1151927). - drm/tinydrm/Kconfig: drivers: Select BACKLIGHT_CLASS_DEVICE (bnc#1151927). - video: ssd1307fb: Start page range at page_offset (bnc#1151927). - drm/amd/display: Copy GSL groups when committing a new context (bnc#1151927). - drm/amd/display: Clear FEC_READY shadow register if DPCD write fails (bnc#1151927). - drm/amd/display: fix not calling ppsmu to trigger PME (bnc#1151927). - drm/amd/display: Power-gate all DSCs at driver init time (bnc#1151927). - drm/amd/display: add monitor patch to add T7 delay (bnc#1151927). - drm/panel: simple: fix AUO g185han01 horizontal blanking (bnc#1151927). - drm/vkms: Avoid assigning 0 for possible_crtc (bnc#1151927). - drm/bridge: tc358767: Increase AUX transfer length limit (bnc#1151927). - drm/mcde: Fix uninitialized variable (bnc#1151927). - drm/vkms: Fix crc worker races (bnc#1151927). - commit 1838763 -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191012 released!
by Richard Brown 14 Oct '19

14 Oct '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: kernel-source (5.3.4 -> 5.3.5) === Details === ==== kernel-source ==== Version update (5.3.4 -> 5.3.5) - Linux 5.3.5 (bnc#1151927). - vfs: set fs_context::user_ns for reconfigure (bnc#1151927). - 9p/cache.c: Fix memory leak in v9fs_cache_session_get_cookie (bnc#1151927). - KVM: hyperv: Fix Direct Synthetic timers assert an interrupt w/o lapic_in_kernel (bnc#1151927). - kexec: bail out upon SIGKILL when allocating memory (bnc#1151927). - NFC: fix attrs checks in netlink interface (bnc#1151927). - dm zoned: fix invalid memory access (bnc#1151927). - dm raid: fix updating of max_discard_sectors limit (bnc#1151927). - smack: use GFP_NOFS while holding inode_smack::smk_lock (bnc#1151927). - Smack: Don't ignore other bprm->unsafe flags if LSM_UNSAFE_PTRACE is set (bnc#1151927). - net: sched: taprio: Avoid division by zero on invalid link speed (bnc#1151927). - net: sched: cbs: Avoid division by zero when calculating the port rate (bnc#1151927). - net: socionext: netsec: always grab descriptor lock (bnc#1151927). - net: dsa: sja1105: Prevent leaking memory (bnc#1151927). - net: dsa: sja1105: Ensure PTP time for rxtstamp reconstruction is not in the past (bnc#1151927). - ptp_qoriq: Initialize the registers' spinlock before calling ptp_qoriq_settime (bnc#1151927). - net: dsa: sja1105: Fix sleeping while atomic in .port_hwtstamp_set (bnc#1151927). - xen-netfront: do not use ~0U as error return value for xennet_fill_frags() (bnc#1151927). - net: dsa: sja1105: Initialize the meta_lock (bnc#1151927). - net/rds: Fix error handling in rds_ib_add_one() (bnc#1151927). - udp: only do GSO if # of segs > 1 (bnc#1151927). - tcp: adjust rto_base in retransmits_timed_out() (bnc#1151927). - net: dsa: rtl8366: Check VLAN ID and not ports (bnc#1151927). - vsock: Fix a lockdep warning in __vsock_release() (bnc#1151927). - udp: fix gso_segs calculations (bnc#1151927). - tipc: fix unlimited bundling of small messages (bnc#1151927). - sch_dsmark: fix potential NULL deref in dsmark_init() (bnc#1151927). - sch_cbq: validate TCA_CBQ_WRROPT to avoid crash (bnc#1151927). - rxrpc: Fix rxrpc_recvmsg tracepoint (bnc#1151927). - qmi_wwan: add support for Cinterion CLS8 devices (bnc#1151927). - nfc: fix memory leak in llcp_sock_bind() (bnc#1151927). - net: Unpublish sk from sk_reuseport_cb before call_rcu (bnc#1151927). - net: sched: taprio: Fix potential integer overflow in taprio_set_picos_per_byte (bnc#1151927). - net: qlogic: Fix memory leak in ql_alloc_large_buffers (bnc#1151927). - net: ipv4: avoid mixed n_redirects and rate_tokens usage (bnc#1151927). - ipv6: Handle missing host route in __ipv6_ifa_notify (bnc#1151927). - ipv6: drop incoming packets having a v4mapped source address (bnc#1151927). - hso: fix NULL-deref on tty open (bnc#1151927). - erspan: remove the incorrect mtu limit for erspan (bnc#1151927). - cxgb4:Fix out-of-bounds MSI-X info array access (bnc#1151927). - arm: use STACK_TOP when computing mmap base address (bnc#1151927). - arm: properly account for stack randomization and stack guard gap (bnc#1151927). - mips: properly account for stack randomization and stack guard gap (bnc#1151927). - arm64: consider stack randomization for mmap base only when necessary (bnc#1151927). - kmemleak: increase DEBUG_KMEMLEAK_EARLY_LOG_SIZE default to 16K (bnc#1151927). - ocfs2: wait for recovering done after direct unlock request (bnc#1151927). - kbuild: clean compressed initramfs image (bnc#1151927). - mm: add dummy can_do_mlock() helper (bnc#1151927). - crypto: hisilicon - Fix double free in sec_free_hw_sgl() (bnc#1151927). - tools/power/x86/intel-speed-select: Fix high priority core mask over count (bnc#1151927). - hypfs: Fix error number left in struct pointer member (bnc#1151927). - pktcdvd: remove warning on attempting to register non-passthrough dev (bnc#1151927). - fat: work around race with userspace's read via blockdev while mounting (bnc#1151927). - block, bfq: push up injection only after setting service time (bnc#1151927). - i2c: tegra: Move suspend handling to NOIRQ phase (bnc#1151927). - ARM: 8903/1: ensure that usable memory in bank 0 starts from a PMD-aligned address (bnc#1151927). - ARM: 8905/1: Emit __gnu_mcount_nc when using Clang 10.0.0 or newer (bnc#1151927). - PCI: Use static const struct, not const static struct (bnc#1151927). - security: smack: Fix possible null-pointer dereferences in smack_socket_sock_rcv_skb() (bnc#1151927). - PCI: exynos: Propagate errors for optional PHYs (bnc#1151927). - PCI: imx6: Propagate errors for optional regulators (bnc#1151927). - PCI: histb: Propagate errors for optional regulators (bnc#1151927). - PCI: rockchip: Propagate errors for optional regulators (bnc#1151927). - HID: apple: Fix stuck function keys when using FN (bnc#1151927). - PCI: Add pci_info_ratelimited() to ratelimit PCI separately (bnc#1151927). - selinux: fix residual uses of current_security() for the SELinux blob (bnc#1151927). - power: supply: register HWMON devices with valid names (bnc#1151927). - rtc: pcf85363/pcf85263: fix regmap error in set_time (bnc#1151927). - rtc: snvs: fix possible race condition (bnc#1151927). - ARM: 8875/1: Kconfig: default to AEABI w/ Clang (bnc#1151927). - PCI: mobiveil: Fix the CPU base address setup in inbound window (bnc#1151927). - soundwire: intel: fix channel number reported by hardware (bnc#1151927). - ARM: 8898/1: mm: Don't treat faults reported from cache maintenance as writes (bnc#1151927). - mips/atomic: Fix smp_mb__{before,after}_atomic() (bnc#1151927). - livepatch: Nullify obj->mod in klp_module_coming()'s error path (bnc#1151927). - PCI: layerscape: Add the bar_fixed_64bit property to the endpoint driver (bnc#1151927). - PCI: pci-hyperv: Fix build errors on non-SYSFS config (bnc#1151927). - mips/atomic: Fix loongson_llsc_mb() wreckage (bnc#1151927). - rtc: bd70528: fix driver dependencies (bnc#1151927). - HID: wacom: Fix several minor compiler warnings (bnc#1151927). - PCI: tegra: Fix OF node reference leak (bnc#1151927). - mfd: intel-lpss: Remove D3cold delay (bnc#1151927). - i2c-cht-wc: Fix lockdep warning (bnc#1151927). - MIPS: tlbex: Explicitly cast _PAGE_NO_EXEC to a boolean (bnc#1151927). - MIPS: Don't use bc_false uninitialized in __mm_isBranchInstr (bnc#1151927). - MIPS: Ingenic: Disable broken BTB lookup optimization (bnc#1151927). - ext4: fix potential use after free after remounting with noblock_validity (bnc#1151927). - f2fs: fix to drop meta/node pages during umount (bnc#1151927). - dma-buf/sw_sync: Synchronize signal vs syncpt free (bnc#1151927). - scsi: core: Reduce memory required for SCSI logging (bnc#1151927). - clk: sprd: add missing kfree (bnc#1151927). - mbox: qcom: add APCS child device for QCS404 (bnc#1151927). - powerpc: dump kernel log before carrying out fadump or kdump (bnc#1151927). - clk: Make clk_bulk_get_all() return a valid "id" (bnc#1151927). - clk: imx: clk-pll14xx: unbypass PLL by default (bnc#1151927). - clk: imx: pll14xx: avoid glitch when set rate (bnc#1151927). - clk: at91: select parent if main oscillator or bypass is enabled (bnc#1151927). - arm64: fix unreachable code issue with cmpxchg (bnc#1151927). - ARM: dts: dir685: Drop spi-cpol from the display (bnc#1151927). - mailbox: mediatek: cmdq: clear the event in cmdq initial flow (bnc#1151927). - pinctrl: meson-gxbb: Fix wrong pinning definition for uart_c (bnc#1151927). - powerpc/pseries: correctly track irq state in default idle (bnc#1151927). - clk: qcom: gcc-sdm845: Use floor ops for sdcc clks (bnc#1151927). - powerpc/eeh: Clean up EEH PEs after recovery finishes (bnc#1151927). - pstore: fs superblock limits (bnc#1151927). - powerpc/64s/exception: machine check use correct cfar for late handler (bnc#1151927). - drm/amdgpu/si: fix ASIC tests (bnc#1151927). - kbuild: Do not enable -Wimplicit-fallthrough for clang for now (bnc#1151927). - selftests/powerpc: Retry on host facility unavailable (bnc#1151927). - drm/amd/display: fix trigger not generated for freesync (bnc#1151927). - drm/amd/display: fix MPO HUBP underflow with Scatter Gather (bnc#1151927). - drm/amd/powerpaly: fix navi series custom peak level value error (bnc#1151927). - drm/amd/display: support spdif (bnc#1151927). - clk: renesas: cpg-mssr: Set GENPD_FLAG_ALWAYS_ON for clock domain (bnc#1151927). - clk: renesas: mstp: Set GENPD_FLAG_ALWAYS_ON for clock domain (bnc#1151927). - pinctrl: amd: disable spurious-firing GPIO IRQs (bnc#1151927). - drm/nouveau/volt: Fix for some cards having 0 maximum voltage (bnc#1151927). - drm/nouveau/kms/tu102-: disable input lut when input is already FP16 (bnc#1151927). - drm/amdgpu/sdma5: fix number of sdma5 trap irq types for navi1x (bnc#1151927). - vfio_pci: Restore original state on release (bnc#1151927). - powerpc/eeh: Clear stale EEH_DEV_NO_HANDLER flag (bnc#1151927). - pinctrl: tegra: Fix write barrier placement in pmx_writel (bnc#1151927). - powerpc/perf: fix imc allocation failure handling (bnc#1151927). - powerpc/pseries/mobility: use cond_resched when updating device tree (bnc#1151927). - powerpc/64s/radix: Fix memory hotplug section page table creation (bnc#1151927). - powerpc/futex: Fix warning: 'oldval' may be used uninitialized in this function (bnc#1151927). - powerpc/ptdump: fix walk_pagetables() address mismatch (bnc#1151927). - powerpc/rtas: use device model APIs and serialization during LPM (bnc#1151927). - powerpc/xmon: Check for HV mode when dumping XIVE info from OPAL (bnc#1151927). - clk: sunxi: Don't call clk_hw_get_name() on a hw that isn't registered (bnc#1151927). - clk: zx296718: Don't reference clk_init_data after registration (bnc#1151927). - clk: sprd: Don't reference clk_init_data after registration (bnc#1151927). - clk: meson: axg-audio: Don't reference clk_init_data after registration (bnc#1151927). - clk: sirf: Don't reference clk_init_data after registration (bnc#1151927). - clk: actions: Don't reference clk_init_data after registration (bnc#1151927). - powerpc/powernv/ioda2: Allocate TCE table levels on demand for default DMA window (bnc#1151927). - drm/amd/display: Register VUPDATE_NO_LOCK interrupts for DCN2 (bnc#1151927). - drm/amd/display: reprogram VM config when system resume (bnc#1151927). - drm/amd/display: Fix frames_to_insert math (bnc#1151927). - drm/amd/display: fix issue where 252-255 values are clipped (bnc#1151927). - clk: sunxi-ng: v3s: add missing clock slices for MMC2 module clocks (bnc#1151927). - clk: ingenic/jz4740: Fix "pll half" divider not read/written properly (bnc#1151927). - clk: qoriq: Fix -Wunused-const-variable (bnc#1151927). - ipmi_si: Only schedule continuously in the thread in maintenance mode (bnc#1151927). - pinctrl: stmfx: update pinconf settings (bnc#1151927). - PCI: rpaphp: Avoid a sometimes-uninitialized warning (bnc#1151927). - clk: imx8mq: Mark AHB clock as critical (bnc#1151927). - gpu: drm: radeon: Fix a possible null-pointer dereference in radeon_connector_set_property() (bnc#1151927). - drm/radeon: Fix EEH during kexec (bnc#1151927). - drm/amd/display: Use proper enum conversion functions (bnc#1151927). - drm/amdgpu: Fix hard hang for S/G display BOs (bnc#1151927). - drm/rockchip: Check for fast link training before enabling psr (bnc#1151927). - drm/panel: check failure cases in the probe func (bnc#1151927). - drm/bridge: sii902x: fix missing reference to mclk clock (bnc#1151927). - drm/stm: attach gem fence to atomic state (bnc#1151927). - drm/tinydrm/Kconfig: drivers: Select BACKLIGHT_CLASS_DEVICE (bnc#1151927). - video: ssd1307fb: Start page range at page_offset (bnc#1151927). - drm/amd/display: Copy GSL groups when committing a new context (bnc#1151927). - drm/amd/display: Clear FEC_READY shadow register if DPCD write fails (bnc#1151927). - drm/amd/display: fix not calling ppsmu to trigger PME (bnc#1151927). - drm/amd/display: Power-gate all DSCs at driver init time (bnc#1151927). - drm/amd/display: add monitor patch to add T7 delay (bnc#1151927). - drm/panel: simple: fix AUO g185han01 horizontal blanking (bnc#1151927). - drm/vkms: Avoid assigning 0 for possible_crtc (bnc#1151927). - drm/bridge: tc358767: Increase AUX transfer length limit (bnc#1151927). - drm/mcde: Fix uninitialized variable (bnc#1151927). - drm/vkms: Fix crc worker races (bnc#1151927). - commit 1838763 -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20191011 released!
by Richard Brown 12 Oct '19

12 Oct '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apparmor bash branding-openSUSE (84.87.20180403 -> 84.87.20191004) diffutils dracut (049+git112.fe41ccd9 -> 049+git114.058e566c) installation-images-MicroOS (14.439 -> 14.440) multipath-tools (0.8.2+27+suse.3ff280b -> 0.8.3+9+suse.f6f2a52) ncurses net-tools patterns-containers permissions python-packaging (19.1 -> 19.2) runc (1.0.0~rc8 -> 1.0.0~rc9) === Details === ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-parser apparmor-profiles apparmor-utils perl-apparmor python3-apparmor - add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162) ==== bash ==== - Do not recommend lang package. The lang package already has a supplements. ==== branding-openSUSE ==== Version update (84.87.20180403 -> 84.87.20191004) - Remove symlinks for grub2 - Update requirements for distribution-logos - Removed fix-parallel-build.patch - was applied upstream - Removed xfce4-splash-branding - Splash was dropped in Xfce 4.14 ==== diffutils ==== - Do not recommend lang package. The lang package already has a supplements. ==== dracut ==== Version update (049+git112.fe41ccd9 -> 049+git114.058e566c) Subpackages: dracut-ima - Update to version 049+git114.058e566c: * 35network-legacy: only skip waiting for interfaces if netroot is set (bsc#1152006) * fixup "Dracut: only login to one target at a time" (bsc#1152650) ==== installation-images-MicroOS ==== Version update (14.439 -> 14.440) - merge gh#openSUSE/installation-images#336 - ensure /etc/sysctl.d is writable (bsc#1153285) - 14.440 ==== multipath-tools ==== Version update (0.8.2+27+suse.3ff280b -> 0.8.3+9+suse.f6f2a52) Subpackages: kpartx libmpath0 - Update to version 0.8.3+9+suse.f6f2a52 - Minor upstream improvements and bug fixes * libmultipath: EMC PowerMax NVMe device config ==== ncurses ==== Subpackages: libncurses6 ncurses-utils terminfo terminfo-base - Add ncurses patch 20190928 + amend the ncurse*-config and pc-files to take into account the rpath hack which differed between those files. + improve -L option filtering in ncurses*-config + improve recovery from error when reading command-character in test/ncurses.c, showing the relevant error message and not exiting on EINTR (cf: 20180922) - Add library path for pkgconfig of ncurses5 as well - Add ncurses patch 20190921 + add a note in resizeterm manpage about top-level windows which touch the screen's borders. + modify configure-checks for gnat to identify each of the tools path and version. - Add ncurses patch 20190914 + build-fixes for Ada95 configure-script and corresponding test package ==== net-tools ==== - Do not recommend lang package. The lang package already has a supplements. ==== patterns-containers ==== - Add toolbox to the container runtime pattern ==== permissions ==== Subpackages: chkstat permissions-config - Add || exit 0 on the scriptlet as it can actually fail in rootless containers with podman. This makes sure the zypper does not abort the container creation. * the actual error looks like: /dev/zero: chown: Operation not permitted ==== python-packaging ==== Version update (19.1 -> 19.2) - Update to 19.2: * Many buildsystem tweaks to accomodate for distribution shipping - Remove all the merged patches: * 0001-Fix-test-failures-test_linux_platforms_manylinux-for.patch * 0002-Fix-check-for-64-bit-OS.patch * 0003-Add-additional-test-to-get-100-branch-coverage.patch * 0004-Fix-test_macos_version_detection-failure-on-32-bit-L.patch * 0005-Drop-dependency-on-attrs.patch ==== runc ==== Version update (1.0.0~rc8 -> 1.0.0~rc9) - Upgrade to runc v1.0.0~rc9. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc9 - Remove upstreamed patches: - CVE-2019-16884.patch - Add backported fix for CVE-2019-16884. bsc#1152308 + CVE-2019-16884.patch - Add runc-rpmlintrc to drop runc-test rpmlint warnings. -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191011 released!
by Richard Brown 12 Oct '19

12 Oct '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apparmor bash branding-openSUSE (84.87.20180403 -> 84.87.20191004) cri-o diffutils dracut (049+git112.fe41ccd9 -> 049+git114.058e566c) installation-images-MicroOS (14.439 -> 14.440) multipath-tools (0.8.2+27+suse.3ff280b -> 0.8.3+9+suse.f6f2a52) ncurses net-tools patterns-containers permissions python-packaging (19.1 -> 19.2) runc (1.0.0~rc8 -> 1.0.0~rc9) === Details === ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-parser apparmor-profiles apparmor-utils perl-apparmor python3-apparmor - add usr-etc-abstractions-authentification.diff to allow reading /usr/etc/pam.d/* and some other authentification-related files (boo#1153162) ==== bash ==== - Do not recommend lang package. The lang package already has a supplements. ==== branding-openSUSE ==== Version update (84.87.20180403 -> 84.87.20191004) Subpackages: grub2-branding-openSUSE - Remove symlinks for grub2 - Update requirements for distribution-logos - Removed fix-parallel-build.patch - was applied upstream - Removed xfce4-splash-branding - Splash was dropped in Xfce 4.14 ==== cri-o ==== Subpackages: cri-o-kubeadm-criconfig - Fix default apparmor profile to match the latest version ==== diffutils ==== - Do not recommend lang package. The lang package already has a supplements. ==== dracut ==== Version update (049+git112.fe41ccd9 -> 049+git114.058e566c) Subpackages: dracut-ima - Update to version 049+git114.058e566c: * 35network-legacy: only skip waiting for interfaces if netroot is set (bsc#1152006) * fixup "Dracut: only login to one target at a time" (bsc#1152650) ==== installation-images-MicroOS ==== Version update (14.439 -> 14.440) - merge gh#openSUSE/installation-images#336 - ensure /etc/sysctl.d is writable (bsc#1153285) - 14.440 ==== multipath-tools ==== Version update (0.8.2+27+suse.3ff280b -> 0.8.3+9+suse.f6f2a52) Subpackages: kpartx libmpath0 - Update to version 0.8.3+9+suse.f6f2a52 - Minor upstream improvements and bug fixes * libmultipath: EMC PowerMax NVMe device config ==== ncurses ==== Subpackages: libncurses6 ncurses-utils terminfo terminfo-base - Add ncurses patch 20190928 + amend the ncurse*-config and pc-files to take into account the rpath hack which differed between those files. + improve -L option filtering in ncurses*-config + improve recovery from error when reading command-character in test/ncurses.c, showing the relevant error message and not exiting on EINTR (cf: 20180922) - Add library path for pkgconfig of ncurses5 as well - Add ncurses patch 20190921 + add a note in resizeterm manpage about top-level windows which touch the screen's borders. + modify configure-checks for gnat to identify each of the tools path and version. - Add ncurses patch 20190914 + build-fixes for Ada95 configure-script and corresponding test package ==== net-tools ==== - Do not recommend lang package. The lang package already has a supplements. ==== patterns-containers ==== Subpackages: patterns-containers-container_runtime patterns-containers-container_runtime_kubernetes patterns-containers-kubeadm patterns-containers-kubernetes_utilities patterns-containers-kubic_admin patterns-containers-kubic_loadbalancer patterns-containers-kubic_worker - Add toolbox to the container runtime pattern ==== permissions ==== Subpackages: chkstat permissions-config - Add || exit 0 on the scriptlet as it can actually fail in rootless containers with podman. This makes sure the zypper does not abort the container creation. * the actual error looks like: /dev/zero: chown: Operation not permitted ==== python-packaging ==== Version update (19.1 -> 19.2) - Update to 19.2: * Many buildsystem tweaks to accomodate for distribution shipping - Remove all the merged patches: * 0001-Fix-test-failures-test_linux_platforms_manylinux-for.patch * 0002-Fix-check-for-64-bit-OS.patch * 0003-Add-additional-test-to-get-100-branch-coverage.patch * 0004-Fix-test_macos_version_detection-failure-on-32-bit-L.patch * 0005-Drop-dependency-on-attrs.patch ==== runc ==== Version update (1.0.0~rc8 -> 1.0.0~rc9) - Upgrade to runc v1.0.0~rc9. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc9 - Remove upstreamed patches: - CVE-2019-16884.patch - Add backported fix for CVE-2019-16884. bsc#1152308 + CVE-2019-16884.patch - Add runc-rpmlintrc to drop runc-test rpmlint warnings. -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20191009 released!
by Richard Brown 11 Oct '19

11 Oct '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: kernel-source (5.3.2 -> 5.3.4) wicked (0.6.57 -> 0.6.60) === Details === ==== kernel-source ==== Version update (5.3.2 -> 5.3.4) - Linux 5.3.4 (bnc#1151927). - arcnet: provide a buffer big enough to actually receive packets (bnc#1151927). - cdc_ncm: fix divide-by-zero caused by invalid wMaxPacketSize (bnc#1151927). - ipv6: do not free rt if FIB_LOOKUP_NOREF is set on suppress rule (bnc#1151927). - macsec: drop skb sk before calling gro_cells_receive (bnc#1151927). - net/phy: fix DP83865 10 Mbps HDX loopback disable function (bnc#1151927). - net: qrtr: Stop rx_worker before freeing node (bnc#1151927). - net/sched: act_sample: don't push mac header on ip6gre ingress (bnc#1151927). - net_sched: add max len check for TCA_KIND (bnc#1151927). - net: stmmac: Fix page pool size (bnc#1151927). - nfp: flower: fix memory leak in nfp_flower_spawn_vnic_reprs (bnc#1151927). - nfp: flower: prevent memory leak in nfp_flower_spawn_phy_reprs (bnc#1151927). - openvswitch: change type of UPCALL_PID attribute to NLA_UNSPEC (bnc#1151927). - ppp: Fix memory leak in ppp_write (bnc#1151927). - sch_netem: fix a divide by zero in tabledist() (bnc#1151927). - selftests: Update fib_tests to handle missing ping6 (bnc#1151927). - skge: fix checksum byte order (bnc#1151927). - tcp_bbr: fix quantization code to not raise cwnd if not probing bandwidth (bnc#1151927). - usbnet: ignore endpoints with invalid wMaxPacketSize (bnc#1151927). - usbnet: sanity checking of packet sizes and device mtu (bnc#1151927). - net/rds: Check laddr_check before calling it (bnc#1151927). - net/mlx5e: Fix matching on tunnel addresses type (bnc#1151927). - ipv6: fix a typo in fib6_rule_lookup() (bnc#1151927). - selftests: Update fib_nexthop_multiprefix to handle missing ping6 (bnc#1151927). - net: phy: micrel: add Asym Pause workaround for KSZ9021 (bnc#1151927). - net/sched: cbs: Fix not adding cbs instance to list (bnc#1151927). - ipv4: Revert removal of rt_uses_gateway (bnc#1151927). - net_sched: add policy validation for action attributes (bnc#1151927). - vrf: Do not attempt to create IPv6 mcast rule if IPv6 is disabled (bnc#1151927). - net/mlx5e: Fix traffic duplication in ethtool steering (bnc#1151927). - net: sched: fix possible crash in tcf_action_destroy() (bnc#1151927). - tcp: better handle TCP_USER_TIMEOUT in SYN_SENT state (bnc#1151927). - net/mlx5: Add device ID of upcoming BlueField-2 (bnc#1151927). - mISDN: enforce CAP_NET_RAW for raw sockets (bnc#1151927). - appletalk: enforce CAP_NET_RAW for raw sockets (bnc#1151927). - ax25: enforce CAP_NET_RAW for raw sockets (bnc#1151927). - ieee802154: enforce CAP_NET_RAW for raw sockets (bnc#1151927). - nfc: enforce CAP_NET_RAW for raw sockets (bnc#1151927). - ALSA: hda: Flush interrupts on disabling (bnc#1151927). - ASoC: SOF: Intel: hda: Make hdac_device device-managed (bnc#1151927). - cpufreq: ap806: Add NULL check after kcalloc (bnc#1151927). - ALSA: hda/hdmi - Don't report spurious jack state changes (bnc#1151927). - regulator: lm363x: Fix off-by-one n_voltages for lm3632 ldo_vpos/ldo_vneg (bnc#1151927). - regulator: lm363x: Fix n_voltages setting for lm36274 (bnc#1151927). - spi: dw-mmio: Clock should be shut when error occurs (bnc#1151927). - ASoC: tlv320aic31xx: suppress error message for EPROBE_DEFER (bnc#1151927). - ASoC: sgtl5000: Fix of unmute outputs on probe (bnc#1151927). - ASoC: sgtl5000: Fix charge pump source assignment (bnc#1151927). - firmware: qcom_scm: Use proper types for dma mappings (bnc#1151927). - dmaengine: bcm2835: Print error in case setting DMA mask fails (bnc#1151927). - leds: leds-lp5562 allow firmware files up to the maximum length (bnc#1151927). - ASoC: SOF: reset DMA state in prepare (bnc#1151927). - media: dib0700: fix link error for dibx000_i2c_set_speed (bnc#1151927). - media: mtk-cir: lower de-glitch counter for rc-mm protocol (bnc#1151927). - ASoC: SOF: pci: mark last_busy value at runtime PM init (bnc#1151927). - media: exynos4-is: fix leaked of_node references (bnc#1151927). - media: vivid:add sanity check to avoid divide error and set value to 1 if 0 (bnc#1151927). - media: vb2: reorder checks in vb2_poll() (bnc#1151927). - media: vivid: work around high stack usage with clang (bnc#1151927). - media: hdpvr: Add device num check and handling (bnc#1151927). - media: i2c: ov5640: Check for devm_gpiod_get_optional() error (bnc#1151927). - time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (bnc#1151927). - sched/fair: Fix imbalance due to CPU affinity (bnc#1151927). - sched/core: Fix CPU controller for !RT_GROUP_SCHED (bnc#1151927). - x86/apic: Make apic_pending_intr_clear() more robust (bnc#1151927). - sched/deadline: Fix bandwidth accounting at all levels after offline migration (bnc#1151927). - x86/reboot: Always use NMI fallback when shutdown via reboot vector IPI fails (bnc#1151927). - rcu/tree: Call setschedule() gp ktread to SCHED_FIFO outside of atomic region (bnc#1151927). - x86/apic: Soft disable APIC before initializing it (bnc#1151927). - ALSA: hda - Show the fatal CORB/RIRB error more clearly (bnc#1151927). - ALSA: i2c: ak4xxx-adda: Fix a possible null pointer dereference in build_adc_controls() (bnc#1151927). - rcu: Add destroy_work_on_stack() to match INIT_WORK_ONSTACK() (bnc#1151927). - EDAC/mc: Fix grain_bits calculation (bnc#1151927). - arm64: dts: imx8mq: Correct OPP table according to latest datasheet (bnc#1151927). - media: iguanair: add sanity checks (bnc#1151927). - cpuidle: teo: Allow tick to be stopped if PM QoS is used (bnc#1151927). - gpio: madera: Add support for Cirrus Logic CS47L15 (bnc#1151927). - gpio: madera: Add support for Cirrus Logic CS47L92 (bnc#1151927). - arm64: mm: free the initrd reserved memblock in a aligned manner (bnc#1151927). - soc: amlogic: meson-clk-measure: protect measure with a mutex (bnc#1151927). - base: soc: Export soc_device_register/unregister APIs (bnc#1151927). - ALSA: usb-audio: Skip bSynchAddress endpoint check if it is invalid (bnc#1151927). - ia64:unwind: fix double free for mod->arch.init_unw_table (bnc#1151927). - EDAC/altera: Use the proper type for the IRQ status bits (bnc#1151927). - ASoC: rsnd: don't call clk_get_rate() under atomic context (bnc#1151927). - arm64/prefetch: fix a -Wtype-limits warning (bnc#1151927). - md/raid1: end bio when the device faulty (bnc#1151927). - md: don't call spare_active in md_reap_sync_thread if all member devices can't work (bnc#1151927). - md: don't set In_sync if array is frozen (bnc#1151927). - media: media/platform: fsl-viu.c: fix build for MICROBLAZE (bnc#1151927). - media: staging: tegra-vde: Fix build error (bnc#1151927). - RAS: Build debugfs.o only when enabled in Kconfig (bnc#1151927). - ASoC: hdac_hda: fix page fault issue by removing race (bnc#1151927). - ACPI / processor: don't print errors for processorIDs == 0xff (bnc#1151927). - loop: Add LOOP_SET_DIRECT_IO to compat ioctl (bnc#1151927). - perf tools: Fix paths in include statements (bnc#1151927). - EDAC, pnd2: Fix ioremap() size in dnv_rd_reg() (bnc#1151927). - efi: cper: print AER info of PCIe fatal error (bnc#1151927). - firmware: arm_scmi: Check if platform has released shmem before using (bnc#1151927). - sched/fair: Use rq_lock/unlock in online_fair_sched_group (bnc#1151927). - idle: Prevent late-arriving interrupts from disrupting offline (bnc#1151927). - blk-mq: Fix memory leak in blk_mq_init_allocated_queue error handling (bnc#1151927). - media: gspca: zero usb_buf on error (bnc#1151927). - perf config: Honour $PERF_CONFIG env var to specify alternate .perfconfig (bnc#1151927). - perf test vfs_getname: Disable ~/.perfconfig to get default output (bnc#1151927). - media: mtk-mdp: fix reference count on old device tree (bnc#1151927). - media: i2c: tda1997x: prevent potential NULL pointer access (bnc#1151927). - media: fdp1: Reduce FCP not found message level to debug (bnc#1151927). - media: em28xx: modules workqueue not inited for 2nd device (bnc#1151927). - arm64/efi: Move variable assignments after SECTIONS (bnc#1151927). - perf unwind: Fix libunwind when tid != pid (bnc#1151927). - media: rc: imon: Allow iMON RC protocol for ffdc 7e device (bnc#1151927). - dmaengine: iop-adma: use correct printk format strings (bnc#1151927). - ARM: xscale: fix multi-cpu compilation (bnc#1151927). - perf record: Support aarch64 random socket_id assignment (bnc#1151927). - media: vsp1: fix memory leak of dl on error return path (bnc#1151927). - media: i2c: ov5645: Fix power sequence (bnc#1151927). - media: omap3isp: Don't set streaming state on random subdevs (bnc#1151927). - media: imx: mipi csi-2: Don't fail if initial state times-out (bnc#1151927). - kasan/arm64: fix CONFIG_KASAN_SW_TAGS && KASAN_INLINE (bnc#1151927). - net: lpc-enet: fix printk format strings (bnc#1151927). - m68k: Prevent some compiler warnings in Coldfire builds (bnc#1151927). - ARM: dts: imx7d: cl-som-imx7: make ethernet work again (bnc#1151927). - arm64: dts: qcom: qcs404-evb: Mark WCSS clocks protected (bnc#1151927). - ARM: dts: imx7-colibri: disable HS400 (bnc#1151927). - x86/platform/intel/iosf_mbi Rewrite locking (bnc#1151927). - media: radio/si470x: kill urb on error (bnc#1151927). - media: hdpvr: add terminating 0 at end of string (bnc#1151927). - ASoC: uniphier: Fix double reset assersion when transitioning to suspend state (bnc#1151927). - powerpc/Makefile: Always pass --synthetic to nm if supported (bnc#1151927). - tools headers: Fixup bitsperlong per arch includes (bnc#1151927). - ASoC: sun4i-i2s: Don't use the oversample to calculate BCLK (bnc#1151927). - ASoC: mchp-i2s-mcc: Wait for RX/TX RDY only if controller is running (bnc#1151927). - led: triggers: Fix a memory leak bug (bnc#1151927). - ASoC: mchp-i2s-mcc: Fix unprepare of GCLK (bnc#1151927). - nbd: add missing config put (bnc#1151927). - ACPI / APEI: Release resources if gen_pool_add() fails (bnc#1151927). - arm64: entry: Move ct_user_exit before any other exception (bnc#1151927). - s390/kasan: provide uninstrumented __strlen (bnc#1151927). - media: mceusb: fix (eliminate) TX IR signal length limit (bnc#1151927). - media: dvb-frontends: use ida for pll number (bnc#1151927). - posix-cpu-timers: Sanitize bogus WARNONS (bnc#1151927). - media: dvb-core: fix a memory leak bug (bnc#1151927). - EDAC/amd64: Support more than two controllers for chip selects handling (bnc#1151927). - cpufreq: imx-cpufreq-dt: Add i.MX8MN support (bnc#1151927). - libperf: Fix alignment trap with xyarray contents in 'perf stat' (bnc#1151927). - EDAC/amd64: Recognize DRAM device type ECC capability (bnc#1151927). - EDAC/amd64: Decode syndrome before translating address (bnc#1151927). - ARM: at91: move platform-specific asm-offset.h to arch/arm/mach-at91 (bnc#1151927). - soc: renesas: rmobile-sysc: Set GENPD_FLAG_ALWAYS_ON for always-on domain (bnc#1151927). - soc: renesas: Enable ARM_ERRATA_754322 for affected Cortex-A9 (bnc#1151927). - PM / devfreq: Fix kernel oops on governor module load (bnc#1151927). - ARM: OMAP2+: move platform-specific asm-offset.h to arch/arm/mach-omap2 (bnc#1151927). - PM / devfreq: passive: Use non-devm notifiers (bnc#1151927). - PM / devfreq: exynos-bus: Correct clock enable sequence (bnc#1151927). - media: cec-notifier: clear cec_adap in cec_notifier_unregister (bnc#1151927). - media: saa7146: add cleanup in hexium_attach() (bnc#1151927). - media: cpia2_usb: fix memory leaks (bnc#1151927). - media: saa7134: fix terminology around saa7134_i2c_eeprom_md7134_gate() (bnc#1151927). - perf trace beauty ioctl: Fix off-by-one error in cmd->string table (bnc#1151927). - perf report: Fix --ns time sort key output (bnc#1151927). - perf script: Fix memory leaks in list_scripts() (bnc#1151927). - media: aspeed-video: address a protential usage of an unitialized var (bnc#1151927). - media: ov9650: add a sanity check (bnc#1151927). - leds: lm3532: Fixes for the driver for stability (bnc#1151927). - ASoC: es8316: fix headphone mixer volume table (bnc#1151927). - ACPI / CPPC: do not require the _PSD method (bnc#1151927). - sched/cpufreq: Align trace event behavior of fast switching (bnc#1151927). - arm64: dts: meson: fix boards regulators states format (bnc#1151927). - x86/apic/vector: Warn when vector space exhaustion breaks affinity (bnc#1151927). - arm64: kpti: ensure patched kernel text is fetched from PoU (bnc#1151927). - perf evlist: Use unshare(CLONE_FS) in sb threads to let setns(CLONE_NEWNS) work (bnc#1151927). - arm64: Use correct ll/sc atomic constraints (bnc#1151927). - jump_label: Don't warn on __exit jump entries (bnc#1151927). - x86/mm/pti: Do not invoke PTI functions when PTI is disabled (bnc#1151927). - ASoC: fsl_ssi: Fix clock control issue in master mode (bnc#1151927). - x86/mm/pti: Handle unaligned address gracefully in pti_clone_pagetable() (bnc#1151927). - nvmet: fix data units read and written counters in SMART log (bnc#1151927). - nvme-multipath: fix ana log nsid lookup when nsid is not found (bnc#1151927). - ALSA: firewire-motu: add support for MOTU 4pre (bnc#1151927). - iommu/amd: Silence warnings under memory pressure (bnc#1151927). - ASoC: Intel: Haswell: Adjust machine device private context (bnc#1151927). - libata/ahci: Drop PCS quirk for Denverton and beyond (bnc#1151927). - iommu/iova: Avoid false sharing on fq_timer_on (bnc#1151927). - libtraceevent: Change users plugin directory (bnc#1151927). - ASoC: dt-bindings: sun4i-spdif: Fix dma-names warning (bnc#1151927). - ARM: dts: exynos: Mark LDO10 as always-on on Peach Pit/Pi Chromebooks (bnc#1151927). - x86/amd_nb: Add PCI device IDs for family 17h, model 70h (bnc#1151927). - ACPI: custom_method: fix memory leaks (bnc#1151927). - ACPI / PCI: fix acpi_pci_irq_enable() memory leak (bnc#1151927). - closures: fix a race on wakeup from closure_sync (bnc#1151927). - hwmon: (k10temp) Add support for AMD family 17h, model 70h CPUs (bnc#1151927). - hwmon: (acpi_power_meter) Change log level for 'unsafe software power cap' (bnc#1151927). - md/raid1: fail run raid1 array when active disk less than one (bnc#1151927). - dmaengine: ti: edma: Do not reset reserved paRAM slots (bnc#1151927). - kprobes: Prohibit probing on BUG() and WARN() address (bnc#1151927). - x86/mm: Fix cpumask_of_node() error condition (bnc#1151927). - irqchip/sifive-plic: set max threshold for ignored handlers (bnc#1151927). - s390/crypto: xts-aes-s390 fix extra run-time crypto self tests finding (bnc#1151927). - irqchip/gic-v3-its: Fix LPI release for Multi-MSI devices (bnc#1151927). - x86/cpu: Add Tiger Lake to Intel family (bnc#1151927). - platform/x86: intel_pmc_core: Do not ioremap RAM (bnc#1151927). - platform/x86: intel_pmc_core_pltdrv: Module removal warning fix (bnc#1151927). - ASoC: dmaengine: Make the pcm->name equal to pcm->id if the name is not set (bnc#1151927). - tools/power/x86/intel-speed-select: Fix memory leak (bnc#1151927). - spi: bcm2835: Work around DONE bit erratum (bnc#1151927). - io_uring: fix wrong sequence setting logic (bnc#1151927). - block: make rq sector size accessible for block stats (bnc#1151927). - raid5: don't set STRIPE_HANDLE to stripe which is in batch list (bnc#1151927). - mmc: core: Clarify sdio_irq_pending flag for MMC_CAP2_SDIO_IRQ_NOTHREAD (bnc#1151927). - sched/psi: Correct overly pessimistic size calculation (bnc#1151927). - mmc: sdhci: Fix incorrect switch to HS mode (bnc#1151927). - mmc: core: Add helper function to indicate if SDIO IRQs is enabled (bnc#1151927). - mmc: dw_mmc: Re-store SDIO IRQs mask at system resume (bnc#1151927). - raid5: don't increment read_errors on EILSEQ return (bnc#1151927). - mmc: mtk-sd: Re-store SDIO IRQs mask at system resume (bnc#1151927). - libertas: Add missing sentinel at end of if_usb.c fw_table (bnc#1151927). - e1000e: add workaround for possible stalled packet (bnc#1151927). - ALSA: hda - Add a quirk model for fixing Huawei Matebook X right speaker (bnc#1151927). - ALSA: hda - Drop unsol event handler for Intel HDMI codecs (bnc#1151927). - drm/amd/powerplay/smu7: enforce minimal VBITimeout (v2) (bnc#1151927). - media: ttusb-dec: Fix info-leak in ttusb_dec_send_command() (bnc#1151927). - drm: fix module name in edid_firmware log message (bnc#1151927). - ALSA: hda/realtek - Blacklist PC beep for Lenovo ThinkCentre M73/93 (bnc#1151927). - iommu/amd: Override wrong IVRS IOAPIC on Raven Ridge systems (bnc#1151927). - zd1211rw: remove false assertion from zd_mac_clear() (bnc#1151927). - btrfs: delayed-inode: Kill the BUG_ON() in btrfs_delete_delayed_dir_index() (bnc#1151927). - btrfs: extent-tree: Make sure we only allocate extents from block groups with the same type (bnc#1151927). - btrfs: tree-checker: Add ROOT_ITEM check (bnc#1151927). - btrfs: Detect unbalanced tree with empty leaf before crashing btree operations (bnc#1151927). - kvm: Nested KVM MMUs need PAE root too (bnc#1151927). - media: omap3isp: Set device on omap3isp subdevs (bnc#1151927). - PM / devfreq: passive: fix compiler warning (bnc#1151927). - ARM: dts: logicpd-torpedo-baseboard: Fix missing video (bnc#1151927). - ARM: omap2plus_defconfig: Fix missing video (bnc#1151927). - ALSA: firewire-tascam: handle error code when getting current source of clock (bnc#1151927). - ALSA: firewire-tascam: check intermediate state of clock status and retry (bnc#1151927). - scsi: scsi_dh_rdac: zero cdb in send_mode_select() (bnc#1151927). - scsi: qla2xxx: Fix Relogin to prevent modifying scan_state flag (bnc#1151927). - printk: Do not lose last line in kmsg buffer dump (bnc#1151927). - IB/mlx5: Free mpi in mp_slave mode (bnc#1151927). - IB/hfi1: Define variables as unsigned long to fix KASAN warning (bnc#1151927). - IB/hfi1: Do not update hcrc for a KDETH packet during fault injection (bnc#1151927). - RDMA: Fix double-free in srq creation error flow (bnc#1151927). - randstruct: Check member structs in is_pure_ops_struct() (bnc#1151927). - ARM: dts: am3517-evm: Fix missing video (bnc#1151927). - rcu/tree: Fix SCHED_FIFO params (bnc#1151927). - ALSA: hda/realtek - PCI quirk for Medion E4254 (bnc#1151927). - blk-mq: add callback of .cleanup_rq (bnc#1151927). - scsi: implement .cleanup_rq callback (bnc#1151927). - powerpc/imc: Dont create debugfs files for cpu-less nodes (bnc#1151927). - tpm_tis_core: Turn on the TPM before probing IRQ's (bnc#1151927). - tpm_tis_core: Set TPM_CHIP_FLAG_IRQ before probing for interrupts (bnc#1151927). - tpm: Wrap the buffer from the caller to tpm_buf in tpm_send() (bnc#1151927). - fuse: fix deadlock with aio poll and fuse_iqueue::waitq.lock (bnc#1151927). - fuse: fix missing unlock_page in fuse_writepage() (bnc#1151927). - fuse: fix beyond-end-of-page access in fuse_parse_cache() (bnc#1151927). - parisc: Disable HP HSC-PCI Cards to prevent kernel crash (bnc#1151927). - platform/x86: intel_int0002_vgpio: Fix wakeups not working on Cherry Trail (bnc#1151927). - KVM: x86: always stop emulation on page fault (bnc#1151927). - KVM: x86: set ctxt->have_exception in x86_decode_insn() (bnc#1151927). - KVM: x86: Manually calculate reserved bits when loading PDPTRS (bnc#1151927). - KVM: x86: Disable posted interrupts for non-standard IRQs delivery modes (bnc#1151927). - kvm: x86: Add "significant index" flag to a few CPUID leaves (bnc#1151927). - KVM: x86/mmu: Use fast invalidate mechanism to zap MMIO sptes (bnc#1151927). - media: videobuf-core.c: poll_wait needs a non-NULL buf pointer (bnc#1151927). - media: sn9c20x: Add MSI MS-1039 laptop to flip_dmi_table (bnc#1151927). - media: hantro: Set DMA max segment size (bnc#1151927). - media: don't drop front-end reference count for ->detach (bnc#1151927). - media: vivid: fix device init when no_error_inj=1 and fb disabled (bnc#1151927). - spi: ep93xx: Repair SPI CS lookup tables (bnc#1151927). - spi: spi-fsl-dspi: Exit the ISR with IRQ_NONE when it's not ours (bnc#1151927). - binfmt_elf: Do not move brk for INTERP-less ET_EXEC (bnc#1151927). - ASoC: Intel: NHLT: Fix debug print format (bnc#1151927). - ASoC: Intel: Skylake: Use correct function to access iomem space (bnc#1151927). - ASoC: Intel: Fix use of potentially uninitialized variable (bnc#1151927). - staging: erofs: cannot set EROFS_V_Z_INITED_BIT if fill_inode_lazy fails (bnc#1151927). - ARM: samsung: Fix system restart on S3C6410 (bnc#1151927). - ARM: zynq: Use memcpy_toio instead of memcpy on smp bring-up (bnc#1151927). - arm64: tlb: Ensure we execute an ISB following walk cache invalidation (bnc#1151927). - arm64: dts: rockchip: limit clock rate of MMC controllers for RK3328 (bnc#1151927). - iommu/arm-smmu-v3: Disable detection of ATS and PRI (bnc#1151927). - alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bnc#1151927). - iommu/vt-d: Fix wrong analysis whether devices share the same bus (bnc#1151927). - regulator: Defer init completion for a while after late_initcall (bnc#1151927). - efifb: BGRT: Improve efifb_bgrt_sanity_check (bnc#1151927). - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (bnc#1151927). - z3fold: fix retry mechanism in page reclaim (bnc#1151927). - z3fold: fix memory leak in kmem cache (bnc#1151927). - mm/compaction.c: clear total_{migrate,free}_scanned before scanning a new zone (bnc#1151927). - memcg, oom: don't require __GFP_FS when invoking memcg OOM killer (bnc#1151927). - memcg, kmem: do not fail __GFP_NOFAIL charges (bnc#1151927). - lib/lzo/lzo1x_compress.c: fix alignment bug in lzo-rle (bnc#1151927). - mt76: round up length on mt76_wr_copy (bnc#1151927). - KEYS: trusted: correctly initialize digests and fix locking issue (bnc#1151927). - rtw88: pci: Rearrange the memory usage for skb in RX ISR (bnc#1151927). - rtw88: pci: Use DMA sync instead of remapping in RX ISR (bnc#1151927). - ath10k: fix channel info parsing for non tlv target (bnc#1151927). - i40e: check __I40E_VF_DISABLE bit in i40e_sync_filters_subtask (bnc#1151927). - block: mq-deadline: Fix queue restart handling (bnc#1151927). - block: fix null pointer dereference in blk_mq_rq_timed_out() (bnc#1151927). - smb3: allow disabling requesting leases (bnc#1151927). - smb3: fix unmount hang in open_shroot (bnc#1151927). - smb3: fix leak in "open on server" perf counter (bnc#1151927). - ovl: Fix dereferencing possible ERR_PTR() (bnc#1151927). - ovl: filter of trusted xattr results in audit (bnc#1151927). - btrfs: fix allocation of free space cache v1 bitmap pages (bnc#1151927). - Btrfs: fix use-after-free when using the tree modification log (bnc#1151927). - btrfs: Relinquish CPUs in btrfs_compare_trees (bnc#1151927). - btrfs: adjust dirty_metadata_bytes after writeback failure of extent buffer (bnc#1151927). - btrfs: qgroup: Fix the wrong target io_tree when freeing reserved data space (bnc#1151927). - btrfs: qgroup: Fix reserved data space leak if we have multiple reserve calls (bnc#1151927). - Btrfs: fix race setting up and completing qgroup rescan workers (bnc#1151927). - btrfs: Fix a regression which we can't convert to SINGLE profile (bnc#1151927). - SUNRPC: Dequeue the request from the receive queue while we're re-encoding (bnc#1151927). - SUNRPC: Fix buffer handling of GSS MIC without slack (bnc#1151927). - ACPI / LPSS: Save/restore LPSS private registers also on Lynxpoint (bnc#1151927). - md/raid6: Set R5_ReadError when there is read failure on parity disk (bnc#1151927). - md: don't report active array_state until after revalidate_disk() completes (bnc#1151927). - md: only call set_in_sync() when it is expected to succeed (bnc#1151927). - cfg80211: Purge frame registrations on iftype change (bnc#1151927). - /dev/mem: Bail out upon SIGKILL (bnc#1151927). - fs: Export generic_fadvise() (bnc#1151927). - mm: Handle MADV_WILLNEED through vfs_fadvise() (bnc#1151927). - xfs: Fix stale data exposure when readahead races with hole punch (bnc#1151927). - ipmi: move message error checking to avoid deadlock (bnc#1151927). - mtd: rawnand: stm32_fmc2: avoid warnings when building with W=1 option (bnc#1151927). - ext4: fix warning inside ext4_convert_unwritten_extents_endio (bnc#1151927). - ext4: fix punch hole for inline_data file systems (bnc#1151927). - quota: fix wrong condition in is_quota_modification() (bnc#1151927). - hwrng: core - don't wait on add_early_randomness() (bnc#1151927). - i2c: riic: Clear NACK in tend isr (bnc#1151927). - CIFS: fix max ea value size (bnc#1151927). - CIFS: Fix oplock handling for SMB 2.1+ protocols (bnc#1151927). - drm/amd/display: Restore backlight brightness after system resume (bnc#1151927). - drm/amd/display: dce11.x /dce12 update formula input (bnc#1151927). - drm/amd/display: Add missing HBM support and raise Vega20's uclk (bnc#1151927). - drm/amdgpu/display: fix 64 bit divide (bnc#1151927). - md/raid0: avoid RAID0 data corruption due to layout confusion (bnc#1151927). - mt76: mt7615: always release sem in mt7615_load_patch (bnc#1151927). - mt76: mt7615: fix mt7615 firmware path definitions (bnc#1151927). - platform/chrome: cros_ec_rpmsg: Fix race with host command when probe failed (bnc#1151927). - commit 6a02213 - Linux 5.3.3 (bnc#1151927). - Revert "Linux 5.3.2" (bnc#1151927). - Linux 5.3.2 (bnc#1151927). - commit 98a6219 - iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW version 36 (bnc#1152036). - commit c2cf223 ==== wicked ==== Version update (0.6.57 -> 0.6.60) Subpackages: wicked-service - version 0.6.60 - libwicked: fix versioning and packaging (bsc#1143182,bsc#1132977) shipping the internal helper library inside of the wicked package. -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191009 released!
by Richard Brown 11 Oct '19

11 Oct '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: kernel-source (5.3.2 -> 5.3.4) wicked (0.6.57 -> 0.6.60) === Details === ==== kernel-source ==== Version update (5.3.2 -> 5.3.4) - Linux 5.3.4 (bnc#1151927). - arcnet: provide a buffer big enough to actually receive packets (bnc#1151927). - cdc_ncm: fix divide-by-zero caused by invalid wMaxPacketSize (bnc#1151927). - ipv6: do not free rt if FIB_LOOKUP_NOREF is set on suppress rule (bnc#1151927). - macsec: drop skb sk before calling gro_cells_receive (bnc#1151927). - net/phy: fix DP83865 10 Mbps HDX loopback disable function (bnc#1151927). - net: qrtr: Stop rx_worker before freeing node (bnc#1151927). - net/sched: act_sample: don't push mac header on ip6gre ingress (bnc#1151927). - net_sched: add max len check for TCA_KIND (bnc#1151927). - net: stmmac: Fix page pool size (bnc#1151927). - nfp: flower: fix memory leak in nfp_flower_spawn_vnic_reprs (bnc#1151927). - nfp: flower: prevent memory leak in nfp_flower_spawn_phy_reprs (bnc#1151927). - openvswitch: change type of UPCALL_PID attribute to NLA_UNSPEC (bnc#1151927). - ppp: Fix memory leak in ppp_write (bnc#1151927). - sch_netem: fix a divide by zero in tabledist() (bnc#1151927). - selftests: Update fib_tests to handle missing ping6 (bnc#1151927). - skge: fix checksum byte order (bnc#1151927). - tcp_bbr: fix quantization code to not raise cwnd if not probing bandwidth (bnc#1151927). - usbnet: ignore endpoints with invalid wMaxPacketSize (bnc#1151927). - usbnet: sanity checking of packet sizes and device mtu (bnc#1151927). - net/rds: Check laddr_check before calling it (bnc#1151927). - net/mlx5e: Fix matching on tunnel addresses type (bnc#1151927). - ipv6: fix a typo in fib6_rule_lookup() (bnc#1151927). - selftests: Update fib_nexthop_multiprefix to handle missing ping6 (bnc#1151927). - net: phy: micrel: add Asym Pause workaround for KSZ9021 (bnc#1151927). - net/sched: cbs: Fix not adding cbs instance to list (bnc#1151927). - ipv4: Revert removal of rt_uses_gateway (bnc#1151927). - net_sched: add policy validation for action attributes (bnc#1151927). - vrf: Do not attempt to create IPv6 mcast rule if IPv6 is disabled (bnc#1151927). - net/mlx5e: Fix traffic duplication in ethtool steering (bnc#1151927). - net: sched: fix possible crash in tcf_action_destroy() (bnc#1151927). - tcp: better handle TCP_USER_TIMEOUT in SYN_SENT state (bnc#1151927). - net/mlx5: Add device ID of upcoming BlueField-2 (bnc#1151927). - mISDN: enforce CAP_NET_RAW for raw sockets (bnc#1151927). - appletalk: enforce CAP_NET_RAW for raw sockets (bnc#1151927). - ax25: enforce CAP_NET_RAW for raw sockets (bnc#1151927). - ieee802154: enforce CAP_NET_RAW for raw sockets (bnc#1151927). - nfc: enforce CAP_NET_RAW for raw sockets (bnc#1151927). - ALSA: hda: Flush interrupts on disabling (bnc#1151927). - ASoC: SOF: Intel: hda: Make hdac_device device-managed (bnc#1151927). - cpufreq: ap806: Add NULL check after kcalloc (bnc#1151927). - ALSA: hda/hdmi - Don't report spurious jack state changes (bnc#1151927). - regulator: lm363x: Fix off-by-one n_voltages for lm3632 ldo_vpos/ldo_vneg (bnc#1151927). - regulator: lm363x: Fix n_voltages setting for lm36274 (bnc#1151927). - spi: dw-mmio: Clock should be shut when error occurs (bnc#1151927). - ASoC: tlv320aic31xx: suppress error message for EPROBE_DEFER (bnc#1151927). - ASoC: sgtl5000: Fix of unmute outputs on probe (bnc#1151927). - ASoC: sgtl5000: Fix charge pump source assignment (bnc#1151927). - firmware: qcom_scm: Use proper types for dma mappings (bnc#1151927). - dmaengine: bcm2835: Print error in case setting DMA mask fails (bnc#1151927). - leds: leds-lp5562 allow firmware files up to the maximum length (bnc#1151927). - ASoC: SOF: reset DMA state in prepare (bnc#1151927). - media: dib0700: fix link error for dibx000_i2c_set_speed (bnc#1151927). - media: mtk-cir: lower de-glitch counter for rc-mm protocol (bnc#1151927). - ASoC: SOF: pci: mark last_busy value at runtime PM init (bnc#1151927). - media: exynos4-is: fix leaked of_node references (bnc#1151927). - media: vivid:add sanity check to avoid divide error and set value to 1 if 0 (bnc#1151927). - media: vb2: reorder checks in vb2_poll() (bnc#1151927). - media: vivid: work around high stack usage with clang (bnc#1151927). - media: hdpvr: Add device num check and handling (bnc#1151927). - media: i2c: ov5640: Check for devm_gpiod_get_optional() error (bnc#1151927). - time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (bnc#1151927). - sched/fair: Fix imbalance due to CPU affinity (bnc#1151927). - sched/core: Fix CPU controller for !RT_GROUP_SCHED (bnc#1151927). - x86/apic: Make apic_pending_intr_clear() more robust (bnc#1151927). - sched/deadline: Fix bandwidth accounting at all levels after offline migration (bnc#1151927). - x86/reboot: Always use NMI fallback when shutdown via reboot vector IPI fails (bnc#1151927). - rcu/tree: Call setschedule() gp ktread to SCHED_FIFO outside of atomic region (bnc#1151927). - x86/apic: Soft disable APIC before initializing it (bnc#1151927). - ALSA: hda - Show the fatal CORB/RIRB error more clearly (bnc#1151927). - ALSA: i2c: ak4xxx-adda: Fix a possible null pointer dereference in build_adc_controls() (bnc#1151927). - rcu: Add destroy_work_on_stack() to match INIT_WORK_ONSTACK() (bnc#1151927). - EDAC/mc: Fix grain_bits calculation (bnc#1151927). - arm64: dts: imx8mq: Correct OPP table according to latest datasheet (bnc#1151927). - media: iguanair: add sanity checks (bnc#1151927). - cpuidle: teo: Allow tick to be stopped if PM QoS is used (bnc#1151927). - gpio: madera: Add support for Cirrus Logic CS47L15 (bnc#1151927). - gpio: madera: Add support for Cirrus Logic CS47L92 (bnc#1151927). - arm64: mm: free the initrd reserved memblock in a aligned manner (bnc#1151927). - soc: amlogic: meson-clk-measure: protect measure with a mutex (bnc#1151927). - base: soc: Export soc_device_register/unregister APIs (bnc#1151927). - ALSA: usb-audio: Skip bSynchAddress endpoint check if it is invalid (bnc#1151927). - ia64:unwind: fix double free for mod->arch.init_unw_table (bnc#1151927). - EDAC/altera: Use the proper type for the IRQ status bits (bnc#1151927). - ASoC: rsnd: don't call clk_get_rate() under atomic context (bnc#1151927). - arm64/prefetch: fix a -Wtype-limits warning (bnc#1151927). - md/raid1: end bio when the device faulty (bnc#1151927). - md: don't call spare_active in md_reap_sync_thread if all member devices can't work (bnc#1151927). - md: don't set In_sync if array is frozen (bnc#1151927). - media: media/platform: fsl-viu.c: fix build for MICROBLAZE (bnc#1151927). - media: staging: tegra-vde: Fix build error (bnc#1151927). - RAS: Build debugfs.o only when enabled in Kconfig (bnc#1151927). - ASoC: hdac_hda: fix page fault issue by removing race (bnc#1151927). - ACPI / processor: don't print errors for processorIDs == 0xff (bnc#1151927). - loop: Add LOOP_SET_DIRECT_IO to compat ioctl (bnc#1151927). - perf tools: Fix paths in include statements (bnc#1151927). - EDAC, pnd2: Fix ioremap() size in dnv_rd_reg() (bnc#1151927). - efi: cper: print AER info of PCIe fatal error (bnc#1151927). - firmware: arm_scmi: Check if platform has released shmem before using (bnc#1151927). - sched/fair: Use rq_lock/unlock in online_fair_sched_group (bnc#1151927). - idle: Prevent late-arriving interrupts from disrupting offline (bnc#1151927). - blk-mq: Fix memory leak in blk_mq_init_allocated_queue error handling (bnc#1151927). - media: gspca: zero usb_buf on error (bnc#1151927). - perf config: Honour $PERF_CONFIG env var to specify alternate .perfconfig (bnc#1151927). - perf test vfs_getname: Disable ~/.perfconfig to get default output (bnc#1151927). - media: mtk-mdp: fix reference count on old device tree (bnc#1151927). - media: i2c: tda1997x: prevent potential NULL pointer access (bnc#1151927). - media: fdp1: Reduce FCP not found message level to debug (bnc#1151927). - media: em28xx: modules workqueue not inited for 2nd device (bnc#1151927). - arm64/efi: Move variable assignments after SECTIONS (bnc#1151927). - perf unwind: Fix libunwind when tid != pid (bnc#1151927). - media: rc: imon: Allow iMON RC protocol for ffdc 7e device (bnc#1151927). - dmaengine: iop-adma: use correct printk format strings (bnc#1151927). - ARM: xscale: fix multi-cpu compilation (bnc#1151927). - perf record: Support aarch64 random socket_id assignment (bnc#1151927). - media: vsp1: fix memory leak of dl on error return path (bnc#1151927). - media: i2c: ov5645: Fix power sequence (bnc#1151927). - media: omap3isp: Don't set streaming state on random subdevs (bnc#1151927). - media: imx: mipi csi-2: Don't fail if initial state times-out (bnc#1151927). - kasan/arm64: fix CONFIG_KASAN_SW_TAGS && KASAN_INLINE (bnc#1151927). - net: lpc-enet: fix printk format strings (bnc#1151927). - m68k: Prevent some compiler warnings in Coldfire builds (bnc#1151927). - ARM: dts: imx7d: cl-som-imx7: make ethernet work again (bnc#1151927). - arm64: dts: qcom: qcs404-evb: Mark WCSS clocks protected (bnc#1151927). - ARM: dts: imx7-colibri: disable HS400 (bnc#1151927). - x86/platform/intel/iosf_mbi Rewrite locking (bnc#1151927). - media: radio/si470x: kill urb on error (bnc#1151927). - media: hdpvr: add terminating 0 at end of string (bnc#1151927). - ASoC: uniphier: Fix double reset assersion when transitioning to suspend state (bnc#1151927). - powerpc/Makefile: Always pass --synthetic to nm if supported (bnc#1151927). - tools headers: Fixup bitsperlong per arch includes (bnc#1151927). - ASoC: sun4i-i2s: Don't use the oversample to calculate BCLK (bnc#1151927). - ASoC: mchp-i2s-mcc: Wait for RX/TX RDY only if controller is running (bnc#1151927). - led: triggers: Fix a memory leak bug (bnc#1151927). - ASoC: mchp-i2s-mcc: Fix unprepare of GCLK (bnc#1151927). - nbd: add missing config put (bnc#1151927). - ACPI / APEI: Release resources if gen_pool_add() fails (bnc#1151927). - arm64: entry: Move ct_user_exit before any other exception (bnc#1151927). - s390/kasan: provide uninstrumented __strlen (bnc#1151927). - media: mceusb: fix (eliminate) TX IR signal length limit (bnc#1151927). - media: dvb-frontends: use ida for pll number (bnc#1151927). - posix-cpu-timers: Sanitize bogus WARNONS (bnc#1151927). - media: dvb-core: fix a memory leak bug (bnc#1151927). - EDAC/amd64: Support more than two controllers for chip selects handling (bnc#1151927). - cpufreq: imx-cpufreq-dt: Add i.MX8MN support (bnc#1151927). - libperf: Fix alignment trap with xyarray contents in 'perf stat' (bnc#1151927). - EDAC/amd64: Recognize DRAM device type ECC capability (bnc#1151927). - EDAC/amd64: Decode syndrome before translating address (bnc#1151927). - ARM: at91: move platform-specific asm-offset.h to arch/arm/mach-at91 (bnc#1151927). - soc: renesas: rmobile-sysc: Set GENPD_FLAG_ALWAYS_ON for always-on domain (bnc#1151927). - soc: renesas: Enable ARM_ERRATA_754322 for affected Cortex-A9 (bnc#1151927). - PM / devfreq: Fix kernel oops on governor module load (bnc#1151927). - ARM: OMAP2+: move platform-specific asm-offset.h to arch/arm/mach-omap2 (bnc#1151927). - PM / devfreq: passive: Use non-devm notifiers (bnc#1151927). - PM / devfreq: exynos-bus: Correct clock enable sequence (bnc#1151927). - media: cec-notifier: clear cec_adap in cec_notifier_unregister (bnc#1151927). - media: saa7146: add cleanup in hexium_attach() (bnc#1151927). - media: cpia2_usb: fix memory leaks (bnc#1151927). - media: saa7134: fix terminology around saa7134_i2c_eeprom_md7134_gate() (bnc#1151927). - perf trace beauty ioctl: Fix off-by-one error in cmd->string table (bnc#1151927). - perf report: Fix --ns time sort key output (bnc#1151927). - perf script: Fix memory leaks in list_scripts() (bnc#1151927). - media: aspeed-video: address a protential usage of an unitialized var (bnc#1151927). - media: ov9650: add a sanity check (bnc#1151927). - leds: lm3532: Fixes for the driver for stability (bnc#1151927). - ASoC: es8316: fix headphone mixer volume table (bnc#1151927). - ACPI / CPPC: do not require the _PSD method (bnc#1151927). - sched/cpufreq: Align trace event behavior of fast switching (bnc#1151927). - arm64: dts: meson: fix boards regulators states format (bnc#1151927). - x86/apic/vector: Warn when vector space exhaustion breaks affinity (bnc#1151927). - arm64: kpti: ensure patched kernel text is fetched from PoU (bnc#1151927). - perf evlist: Use unshare(CLONE_FS) in sb threads to let setns(CLONE_NEWNS) work (bnc#1151927). - arm64: Use correct ll/sc atomic constraints (bnc#1151927). - jump_label: Don't warn on __exit jump entries (bnc#1151927). - x86/mm/pti: Do not invoke PTI functions when PTI is disabled (bnc#1151927). - ASoC: fsl_ssi: Fix clock control issue in master mode (bnc#1151927). - x86/mm/pti: Handle unaligned address gracefully in pti_clone_pagetable() (bnc#1151927). - nvmet: fix data units read and written counters in SMART log (bnc#1151927). - nvme-multipath: fix ana log nsid lookup when nsid is not found (bnc#1151927). - ALSA: firewire-motu: add support for MOTU 4pre (bnc#1151927). - iommu/amd: Silence warnings under memory pressure (bnc#1151927). - ASoC: Intel: Haswell: Adjust machine device private context (bnc#1151927). - libata/ahci: Drop PCS quirk for Denverton and beyond (bnc#1151927). - iommu/iova: Avoid false sharing on fq_timer_on (bnc#1151927). - libtraceevent: Change users plugin directory (bnc#1151927). - ASoC: dt-bindings: sun4i-spdif: Fix dma-names warning (bnc#1151927). - ARM: dts: exynos: Mark LDO10 as always-on on Peach Pit/Pi Chromebooks (bnc#1151927). - x86/amd_nb: Add PCI device IDs for family 17h, model 70h (bnc#1151927). - ACPI: custom_method: fix memory leaks (bnc#1151927). - ACPI / PCI: fix acpi_pci_irq_enable() memory leak (bnc#1151927). - closures: fix a race on wakeup from closure_sync (bnc#1151927). - hwmon: (k10temp) Add support for AMD family 17h, model 70h CPUs (bnc#1151927). - hwmon: (acpi_power_meter) Change log level for 'unsafe software power cap' (bnc#1151927). - md/raid1: fail run raid1 array when active disk less than one (bnc#1151927). - dmaengine: ti: edma: Do not reset reserved paRAM slots (bnc#1151927). - kprobes: Prohibit probing on BUG() and WARN() address (bnc#1151927). - x86/mm: Fix cpumask_of_node() error condition (bnc#1151927). - irqchip/sifive-plic: set max threshold for ignored handlers (bnc#1151927). - s390/crypto: xts-aes-s390 fix extra run-time crypto self tests finding (bnc#1151927). - irqchip/gic-v3-its: Fix LPI release for Multi-MSI devices (bnc#1151927). - x86/cpu: Add Tiger Lake to Intel family (bnc#1151927). - platform/x86: intel_pmc_core: Do not ioremap RAM (bnc#1151927). - platform/x86: intel_pmc_core_pltdrv: Module removal warning fix (bnc#1151927). - ASoC: dmaengine: Make the pcm->name equal to pcm->id if the name is not set (bnc#1151927). - tools/power/x86/intel-speed-select: Fix memory leak (bnc#1151927). - spi: bcm2835: Work around DONE bit erratum (bnc#1151927). - io_uring: fix wrong sequence setting logic (bnc#1151927). - block: make rq sector size accessible for block stats (bnc#1151927). - raid5: don't set STRIPE_HANDLE to stripe which is in batch list (bnc#1151927). - mmc: core: Clarify sdio_irq_pending flag for MMC_CAP2_SDIO_IRQ_NOTHREAD (bnc#1151927). - sched/psi: Correct overly pessimistic size calculation (bnc#1151927). - mmc: sdhci: Fix incorrect switch to HS mode (bnc#1151927). - mmc: core: Add helper function to indicate if SDIO IRQs is enabled (bnc#1151927). - mmc: dw_mmc: Re-store SDIO IRQs mask at system resume (bnc#1151927). - raid5: don't increment read_errors on EILSEQ return (bnc#1151927). - mmc: mtk-sd: Re-store SDIO IRQs mask at system resume (bnc#1151927). - libertas: Add missing sentinel at end of if_usb.c fw_table (bnc#1151927). - e1000e: add workaround for possible stalled packet (bnc#1151927). - ALSA: hda - Add a quirk model for fixing Huawei Matebook X right speaker (bnc#1151927). - ALSA: hda - Drop unsol event handler for Intel HDMI codecs (bnc#1151927). - drm/amd/powerplay/smu7: enforce minimal VBITimeout (v2) (bnc#1151927). - media: ttusb-dec: Fix info-leak in ttusb_dec_send_command() (bnc#1151927). - drm: fix module name in edid_firmware log message (bnc#1151927). - ALSA: hda/realtek - Blacklist PC beep for Lenovo ThinkCentre M73/93 (bnc#1151927). - iommu/amd: Override wrong IVRS IOAPIC on Raven Ridge systems (bnc#1151927). - zd1211rw: remove false assertion from zd_mac_clear() (bnc#1151927). - btrfs: delayed-inode: Kill the BUG_ON() in btrfs_delete_delayed_dir_index() (bnc#1151927). - btrfs: extent-tree: Make sure we only allocate extents from block groups with the same type (bnc#1151927). - btrfs: tree-checker: Add ROOT_ITEM check (bnc#1151927). - btrfs: Detect unbalanced tree with empty leaf before crashing btree operations (bnc#1151927). - kvm: Nested KVM MMUs need PAE root too (bnc#1151927). - media: omap3isp: Set device on omap3isp subdevs (bnc#1151927). - PM / devfreq: passive: fix compiler warning (bnc#1151927). - ARM: dts: logicpd-torpedo-baseboard: Fix missing video (bnc#1151927). - ARM: omap2plus_defconfig: Fix missing video (bnc#1151927). - ALSA: firewire-tascam: handle error code when getting current source of clock (bnc#1151927). - ALSA: firewire-tascam: check intermediate state of clock status and retry (bnc#1151927). - scsi: scsi_dh_rdac: zero cdb in send_mode_select() (bnc#1151927). - scsi: qla2xxx: Fix Relogin to prevent modifying scan_state flag (bnc#1151927). - printk: Do not lose last line in kmsg buffer dump (bnc#1151927). - IB/mlx5: Free mpi in mp_slave mode (bnc#1151927). - IB/hfi1: Define variables as unsigned long to fix KASAN warning (bnc#1151927). - IB/hfi1: Do not update hcrc for a KDETH packet during fault injection (bnc#1151927). - RDMA: Fix double-free in srq creation error flow (bnc#1151927). - randstruct: Check member structs in is_pure_ops_struct() (bnc#1151927). - ARM: dts: am3517-evm: Fix missing video (bnc#1151927). - rcu/tree: Fix SCHED_FIFO params (bnc#1151927). - ALSA: hda/realtek - PCI quirk for Medion E4254 (bnc#1151927). - blk-mq: add callback of .cleanup_rq (bnc#1151927). - scsi: implement .cleanup_rq callback (bnc#1151927). - powerpc/imc: Dont create debugfs files for cpu-less nodes (bnc#1151927). - tpm_tis_core: Turn on the TPM before probing IRQ's (bnc#1151927). - tpm_tis_core: Set TPM_CHIP_FLAG_IRQ before probing for interrupts (bnc#1151927). - tpm: Wrap the buffer from the caller to tpm_buf in tpm_send() (bnc#1151927). - fuse: fix deadlock with aio poll and fuse_iqueue::waitq.lock (bnc#1151927). - fuse: fix missing unlock_page in fuse_writepage() (bnc#1151927). - fuse: fix beyond-end-of-page access in fuse_parse_cache() (bnc#1151927). - parisc: Disable HP HSC-PCI Cards to prevent kernel crash (bnc#1151927). - platform/x86: intel_int0002_vgpio: Fix wakeups not working on Cherry Trail (bnc#1151927). - KVM: x86: always stop emulation on page fault (bnc#1151927). - KVM: x86: set ctxt->have_exception in x86_decode_insn() (bnc#1151927). - KVM: x86: Manually calculate reserved bits when loading PDPTRS (bnc#1151927). - KVM: x86: Disable posted interrupts for non-standard IRQs delivery modes (bnc#1151927). - kvm: x86: Add "significant index" flag to a few CPUID leaves (bnc#1151927). - KVM: x86/mmu: Use fast invalidate mechanism to zap MMIO sptes (bnc#1151927). - media: videobuf-core.c: poll_wait needs a non-NULL buf pointer (bnc#1151927). - media: sn9c20x: Add MSI MS-1039 laptop to flip_dmi_table (bnc#1151927). - media: hantro: Set DMA max segment size (bnc#1151927). - media: don't drop front-end reference count for ->detach (bnc#1151927). - media: vivid: fix device init when no_error_inj=1 and fb disabled (bnc#1151927). - spi: ep93xx: Repair SPI CS lookup tables (bnc#1151927). - spi: spi-fsl-dspi: Exit the ISR with IRQ_NONE when it's not ours (bnc#1151927). - binfmt_elf: Do not move brk for INTERP-less ET_EXEC (bnc#1151927). - ASoC: Intel: NHLT: Fix debug print format (bnc#1151927). - ASoC: Intel: Skylake: Use correct function to access iomem space (bnc#1151927). - ASoC: Intel: Fix use of potentially uninitialized variable (bnc#1151927). - staging: erofs: cannot set EROFS_V_Z_INITED_BIT if fill_inode_lazy fails (bnc#1151927). - ARM: samsung: Fix system restart on S3C6410 (bnc#1151927). - ARM: zynq: Use memcpy_toio instead of memcpy on smp bring-up (bnc#1151927). - arm64: tlb: Ensure we execute an ISB following walk cache invalidation (bnc#1151927). - arm64: dts: rockchip: limit clock rate of MMC controllers for RK3328 (bnc#1151927). - iommu/arm-smmu-v3: Disable detection of ATS and PRI (bnc#1151927). - alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bnc#1151927). - iommu/vt-d: Fix wrong analysis whether devices share the same bus (bnc#1151927). - regulator: Defer init completion for a while after late_initcall (bnc#1151927). - efifb: BGRT: Improve efifb_bgrt_sanity_check (bnc#1151927). - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (bnc#1151927). - z3fold: fix retry mechanism in page reclaim (bnc#1151927). - z3fold: fix memory leak in kmem cache (bnc#1151927). - mm/compaction.c: clear total_{migrate,free}_scanned before scanning a new zone (bnc#1151927). - memcg, oom: don't require __GFP_FS when invoking memcg OOM killer (bnc#1151927). - memcg, kmem: do not fail __GFP_NOFAIL charges (bnc#1151927). - lib/lzo/lzo1x_compress.c: fix alignment bug in lzo-rle (bnc#1151927). - mt76: round up length on mt76_wr_copy (bnc#1151927). - KEYS: trusted: correctly initialize digests and fix locking issue (bnc#1151927). - rtw88: pci: Rearrange the memory usage for skb in RX ISR (bnc#1151927). - rtw88: pci: Use DMA sync instead of remapping in RX ISR (bnc#1151927). - ath10k: fix channel info parsing for non tlv target (bnc#1151927). - i40e: check __I40E_VF_DISABLE bit in i40e_sync_filters_subtask (bnc#1151927). - block: mq-deadline: Fix queue restart handling (bnc#1151927). - block: fix null pointer dereference in blk_mq_rq_timed_out() (bnc#1151927). - smb3: allow disabling requesting leases (bnc#1151927). - smb3: fix unmount hang in open_shroot (bnc#1151927). - smb3: fix leak in "open on server" perf counter (bnc#1151927). - ovl: Fix dereferencing possible ERR_PTR() (bnc#1151927). - ovl: filter of trusted xattr results in audit (bnc#1151927). - btrfs: fix allocation of free space cache v1 bitmap pages (bnc#1151927). - Btrfs: fix use-after-free when using the tree modification log (bnc#1151927). - btrfs: Relinquish CPUs in btrfs_compare_trees (bnc#1151927). - btrfs: adjust dirty_metadata_bytes after writeback failure of extent buffer (bnc#1151927). - btrfs: qgroup: Fix the wrong target io_tree when freeing reserved data space (bnc#1151927). - btrfs: qgroup: Fix reserved data space leak if we have multiple reserve calls (bnc#1151927). - Btrfs: fix race setting up and completing qgroup rescan workers (bnc#1151927). - btrfs: Fix a regression which we can't convert to SINGLE profile (bnc#1151927). - SUNRPC: Dequeue the request from the receive queue while we're re-encoding (bnc#1151927). - SUNRPC: Fix buffer handling of GSS MIC without slack (bnc#1151927). - ACPI / LPSS: Save/restore LPSS private registers also on Lynxpoint (bnc#1151927). - md/raid6: Set R5_ReadError when there is read failure on parity disk (bnc#1151927). - md: don't report active array_state until after revalidate_disk() completes (bnc#1151927). - md: only call set_in_sync() when it is expected to succeed (bnc#1151927). - cfg80211: Purge frame registrations on iftype change (bnc#1151927). - /dev/mem: Bail out upon SIGKILL (bnc#1151927). - fs: Export generic_fadvise() (bnc#1151927). - mm: Handle MADV_WILLNEED through vfs_fadvise() (bnc#1151927). - xfs: Fix stale data exposure when readahead races with hole punch (bnc#1151927). - ipmi: move message error checking to avoid deadlock (bnc#1151927). - mtd: rawnand: stm32_fmc2: avoid warnings when building with W=1 option (bnc#1151927). - ext4: fix warning inside ext4_convert_unwritten_extents_endio (bnc#1151927). - ext4: fix punch hole for inline_data file systems (bnc#1151927). - quota: fix wrong condition in is_quota_modification() (bnc#1151927). - hwrng: core - don't wait on add_early_randomness() (bnc#1151927). - i2c: riic: Clear NACK in tend isr (bnc#1151927). - CIFS: fix max ea value size (bnc#1151927). - CIFS: Fix oplock handling for SMB 2.1+ protocols (bnc#1151927). - drm/amd/display: Restore backlight brightness after system resume (bnc#1151927). - drm/amd/display: dce11.x /dce12 update formula input (bnc#1151927). - drm/amd/display: Add missing HBM support and raise Vega20's uclk (bnc#1151927). - drm/amdgpu/display: fix 64 bit divide (bnc#1151927). - md/raid0: avoid RAID0 data corruption due to layout confusion (bnc#1151927). - mt76: mt7615: always release sem in mt7615_load_patch (bnc#1151927). - mt76: mt7615: fix mt7615 firmware path definitions (bnc#1151927). - platform/chrome: cros_ec_rpmsg: Fix race with host command when probe failed (bnc#1151927). - commit 6a02213 - Linux 5.3.3 (bnc#1151927). - Revert "Linux 5.3.2" (bnc#1151927). - Linux 5.3.2 (bnc#1151927). - commit 98a6219 - iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW version 36 (bnc#1152036). - commit c2cf223 ==== wicked ==== Version update (0.6.57 -> 0.6.60) Subpackages: wicked-service - version 0.6.60 - libwicked: fix versioning and packaging (bsc#1143182,bsc#1132977) shipping the internal helper library inside of the wicked package. -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] Improving Release Coordination of Kubernetes componants
by Richard Brown 09 Oct '19

09 Oct '19

Hi all, As discussed with some regular contributors already, today we realised we've made a little faux pas with our release coordination. We started shipping CoreDNS 1.6.3 containers a week ago, which meant our existing CoreDNS 1.3.1 containers got deleted today. But we haven't shipped k8s 1.16.x yet, which will use those CoreDNS 1.6.3 containers. Every current Kubic snapshot needs CoreDNS 1.3.1, which dissapeared today. Fabian and Dominique have got things working again but I'm thinking how to avoid this situation in the future. >From now on I intend to take extreme care to only submit the following 3 packages in conjunction with each other, and expect them to be staged together: coredns cri-tools kubernetes If anyone is submitting any of the above 3 packages to Factory instead of me, please make sure you're only doing so in coordination with appropriate version bumps in the other packages. Are there other packages in Kubic that need that similar treatment & coordination? Regards, -- Richard Brown Linux Distribution Engineer - Future Technology Team Phone +4991174053-361 SUSE Software Solutions Germany GmbH, Maxfeldstr. 5, D-90409 Nuernberg HRB 247165, AG München GF: Felix Imendörffer -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

2 2

[opensuse-kubic] New MicroOS snapshot 20191007 released!
by Richard Brown 09 Oct '19

09 Oct '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apparmor cloud-init gnutls iproute2 (5.2 -> 5.3) iptables libnettle libxslt lvm2-device-mapper open-vm-tools (10.3.10 -> 11.0.0) patterns-microos python-asn1crypto (0.24.0 -> 1.0.0) python-base python-urllib3 (1.25.5 -> 1.25.6) texinfo xen === Details === ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-parser apparmor-profiles apparmor-utils perl-apparmor python3-apparmor - add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys - add apparmor-krb5-conf-d.diff for kerberos client ==== cloud-init ==== - Add cloud-init-after-wicked.patch - Change the service order, the cloud-init service wants to run after networking is started - Add cloud-init-noresolv-merge-no-dns-data.diff - Avoid writing resolv.conf if the network configuration contains no dns entries. - Follow up to update cloud-init-trigger-udev.patch (bsc#1144363) - In this implementation the "name" is not yet an attribute, use get() to obtain the value from a dict. Source code version confusion. ==== gnutls ==== - Install checksums for binary integrity verification which are required when running in FIPS mode (bsc#1152692, jsc#SLE-9518) ==== iproute2 ==== Version update (5.2 -> 5.3) - Update to new upstream release 5.3 * devlink: show devlink port number * devlink: introduce PCI PF and VF port flavor and attribute * ip: support for nexthop objects * ip: add -Numeric option * ip: bond: support peer notification delay * rdma: query/set netns sharing sys parameter * rdma: support setting netns of rdma device * rdma: support "stat qp show" * rdma: support per-port counter mode * rdma: support stat manual mode * rdma: support default counter statistics * rdma: support CQ adaptive moderation * tc: support act_ctinfo action * tc: skbedit: add mask parameter * tc: add mpls actions * tc: stricter parameter parsing * tc: netem: json output * tipc: support interface name when activating UDP bearer * update documentation - refresh * xfrm-support-displaying-transformations-used-for-Mob.patch * bpf-data-section-support-poc.patch * bpf-bss-section-poc.patch - use fallback definition %make_build if it is not defined (fix SLE12 build) ==== iptables ==== Subpackages: libip4tc2 libip6tc2 libxtables12 xtables-plugins - Add Conflicts with iptables-nft = 1.6.2 as during the update to iptables 1.8 ip6tables-restore-translate, ip6tables-translate, iptables-restore-translate and iptables-translate were moved from iptables-nft subpackage (now iptables-backend-nft) to the main package. So we need to add a conflict here otherwise we hit file conflicts error during the update. ==== libnettle ==== Subpackages: libhogweed5 libnettle7 - Install checksums for binary integrity verification which are required when running in FIPS mode (bsc#1152692, jsc#SLE-9518) ==== libxslt ==== - Drop out lilbxslt-python package as it is just py2 based and upstream yet didn't bother to port it to python3. When there is python3 compatible code it should be enabled as multibuild here * Drop now unused libxslt-1.1.24-linkflags.patch and libxslt-do_not_build_doc_nor_xsltproc.patch ==== lvm2-device-mapper ==== Subpackages: device-mapper libdevmapper-event1_03 libdevmapper1_03 - Fix LV activation issues (boo#1152378, rh#1727270) + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch ==== open-vm-tools ==== Version update (10.3.10 -> 11.0.0) Subpackages: libvmtools0 - Update to 11.0.0 (build 14549424) (boo#1151523) + Added appInfo to publish information about running applications inside the guest. + Provided sample tool.conf for ease of administration. - Updated spec file to build 11.0.0 - Removed libgrabbitmqProxy.so, vmware-guestproxycerttool, and guestproxy-ssl.conf - Added %config(noreplace) %{_sysconfdir}/vmware-tools/tools.conf.example - Drop unnecessary patch: - gcc9-warnings.patch ==== patterns-microos ==== Subpackages: patterns-microos-alt_onlyDVD patterns-microos-apparmor patterns-microos-base patterns-microos-basesystem patterns-microos-cloud patterns-microos-defaults patterns-microos-hardware patterns-microos-ima_evm patterns-microos-onlyDVD patterns-microos-selinux patterns-microos-sssd_ldap - Enable armv7 ==== python-asn1crypto ==== Version update (0.24.0 -> 1.0.0) - update to version 1.0.0 * BREAKING CHANGE: Removed functionality to calculate public key values from private key values. Alternatives have been added to oscrypto. (see upstream changelog) * Significantly improved parsing of core.UTCTime() and core.GeneralizedTime() values that include timezones and fractional seconds * core.Choice() may now be constructed by a 2-element tuple or a 1-key dict * No longer try to load optional performance dependency, libcrypto, on Mac or Linux * Add support for explicit RSA SSA PSS to keys.PublicKeyInfo() and keys.PrivateKeyInfo() * Add/improve few algorithms (RC4, secp256k1, SHA-3, SHAKE) * Added asn1crypto_tests package to PyPi * Many bugfixes ==== python-base ==== Subpackages: libpython2_7-1_0 - Add bpo36302-sort-module-sources.patch (boo#1041090) ==== python-urllib3 ==== Version update (1.25.5 -> 1.25.6) - Updae to 1.25.6: * Fix issue where tilde (~) characters were incorrectly percent-encoded in the path. (Pull #1692) ==== texinfo ==== - use filetrigger instead of transfiletrigger - Temporary disable %transfiletriggerin/%transfiletriggerun and reintroduce %post/%preun with %install_info/%install_info_delete as libzypp currentyl can not handle first case (boo#1041742) - Fix patch texinfo-zlib.patch to enable open of compressed info files without using a compressor utility (boo#1152105) - For bug boo#1152105 split of the info pages of package info to be able to preinstall gzip before/with first install-info call - implement file trigger for installing and removing info pages (boo#1152105) ==== xen ==== - bsc#1135799 - Partner-L3: Xen crashes on AMD ROME based machines 5ca7660f-x86-entry-drop-unused-includes.patch 5cf8da09-adjust-sysdom-creation-call-earlier-on-x86.patch 5cab2a6b-x86-ACPI-also-parse-AMD-tables-early.patch 5cab2ab7-x86-IOMMU-introduce-init-ops.patch 5cab2ae8-x86-IOMMU-abstract-iommu_supports_eim.patch 5cab2b4e-x86-IOMMU-abstract-iommu_enable_x2apic_IR.patch 5cab2b95-x86-IOMMU-initialize-iommu_ops-in.patch 5cac9a4b-x86-IOMMU-abstract-adjust_vtd_irq_affinities.patch 5cdeac7f-AMD-IOMMU-adjust-IOMMU-list-head-init.patch 5d0cf4e4-AMD-IOMMU-initialize-IRQ-tasklet-once.patch 5d149bb0-AMD-IOMMU-dont-add-IOMMUs.patch 5d1b3fab-AMD-IOMMU-restrict-feature-logging.patch 5d358508-x86-IRQ-desc-affinity-represents-request.patch 5d358534-x86-IRQ-consolidate-arch-cpu_mask-use.patch 5d358a67-AMD-IOMMU-pass-IOMMU-to-iterate_ivrs_entries-cb.patch 5d358a92-AMD-IOMMU-pass-IOMMU-to-amd_iommu_alloc_intremap_table.patch 5d39811c-x86-IOMMU-dont-restrict-IRQ-affinities.patch 5d417813-AMD-IOMMU-bitfield-extended-features.patch 5d417838-AMD-IOMMU-bitfield-control-reg.patch 5d41785b-AMD-IOMMU-bitfield-IRTE.patch 5d41787e-AMD-IOMMU-pass-IOMMU-to-gfu-intremap-entry.patch 5d4178ad-AMD-IOMMU-128bit-non-guest-APIC-IRTE.patch 5d4178fc-AMD-IOMMU-split-amd_iommu_init_one.patch 5d41793f-AMD-IOMMU-allow-enabling-without-IRQ.patch 5d417a16-AMD-IOMMU-adjust-IRQ-setup-for-x2APIC.patch 5d417ab6-AMD-IOMMU-enable-x2APIC-mode.patch 5d417b38-AMD-IOMMU-correct-IRTE-updating.patch 5d417b6a-AMD-IOMMU-dont-needlessly-log-headers.patch 5d4a9d25-AMD-IOMMU-drop-not-found-message.patch 5d80e7c0-AMD-IOMMU-free-shared-IRT-once.patch 5d80e80d-AMD-IOMMU-valid-flag-for-IVRS-mappings.patch 5d80e82e-AMD-IOMMU-alloc_intremap_table-callers-handle-errors.patch 5d80e857-x86-PCI-read-MSI-X-table-entry-count-early.patch 5d8b72e5-AMD-IOMMU-dont-blindly-alloc-intremap-tables.patch 5d8b730e-AMD-IOMMU-phantom-funcs-share-intremap-tables.patch 5d8b733b-x86-PCI-read-max-MSI-vector-count-early.patch 5d8b736d-AMD-IOMMU-replace-INTREMAP_ENTRIES.patch 5d8b7393-AMD-IOMMU-restrict-intremap-table-sizes.patch - bsc#1145240 - [Migration]Can't pre-allocate 1 shadow pages 5d70bfba-x86-shadow-dont-enable-with-too-small-allocation.patch - bsc#1137717 - [HPS Bug] Unable to install Windows Server 2016 with 2 CPUs setting (or above) under SLES12 SP4 Xen Server on AMD ROME platform 5d89d8d9-libxc-x86-avoid-overflow-in-CPUID-APIC-ID.patch - Upstream bug fixes (bsc#1027519) 5d67ceaf-x86-properly-gate-PKU-clearing.patch 5d779811-x86-fix-CPUID7-0-eax-levelling-MSR.patch 5d77b40f-fix-hvm_all_ioreq_servers_add_vcpu-cleanup.patch 5d80ea13-vpci-honor-read-only-devices.patch 5d8b715f-ACPI-cpuidle-bump-max-num-of-states.patch - bsc#1145774 - Libivrtd segfaults when trying to live migrate a VM Fix crash in an error path of libxl_domain_suspend with libxl.helper_done-crash.patch -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191007 released!
by Richard Brown 09 Oct '19

09 Oct '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apparmor ceph (14.2.4.352+g2060e25d1c -> 14.2.4.373+gc3e67ed133) cloud-init gnutls iproute2 (5.2 -> 5.3) iptables kubic-control (0.8.2 -> 0.9.0) libnettle libxslt lvm2 lvm2-device-mapper open-vm-tools (10.3.10 -> 11.0.0) patterns-microos python-asn1crypto (0.24.0 -> 1.0.0) python-base python-urllib3 (1.25.5 -> 1.25.6) rdma-core rook texinfo xen === Details === ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-parser apparmor-profiles apparmor-utils perl-apparmor python3-apparmor - add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys - add apparmor-krb5-conf-d.diff for kerberos client ==== ceph ==== Version update (14.2.4.352+g2060e25d1c -> 14.2.4.373+gc3e67ed133) Subpackages: ceph-common libcephfs2 librados2 libradosstriper1 librbd1 librgw2 python3-ceph-argparse python3-cephfs python3-rados python3-rbd python3-rgw - Update to 14.2.4-373-gc3e67ed133: + Support iSCSI target-level CHAP authentication (bsc#1145617) + Validation and render of iSCSI controls based "type" (bsc#1140491) + Fix error editing iSCSI image advanced settings (bsc#1146656) + Fix error during iSCSI target edit ==== cloud-init ==== - Add cloud-init-after-wicked.patch - Change the service order, the cloud-init service wants to run after networking is started - Add cloud-init-noresolv-merge-no-dns-data.diff - Avoid writing resolv.conf if the network configuration contains no dns entries. - Follow up to update cloud-init-trigger-udev.patch (bsc#1144363) - In this implementation the "name" is not yet an attribute, use get() to obtain the value from a dict. Source code version confusion. ==== gnutls ==== - Install checksums for binary integrity verification which are required when running in FIPS mode (bsc#1152692, jsc#SLE-9518) ==== iproute2 ==== Version update (5.2 -> 5.3) - Update to new upstream release 5.3 * devlink: show devlink port number * devlink: introduce PCI PF and VF port flavor and attribute * ip: support for nexthop objects * ip: add -Numeric option * ip: bond: support peer notification delay * rdma: query/set netns sharing sys parameter * rdma: support setting netns of rdma device * rdma: support "stat qp show" * rdma: support per-port counter mode * rdma: support stat manual mode * rdma: support default counter statistics * rdma: support CQ adaptive moderation * tc: support act_ctinfo action * tc: skbedit: add mask parameter * tc: add mpls actions * tc: stricter parameter parsing * tc: netem: json output * tipc: support interface name when activating UDP bearer * update documentation - refresh * xfrm-support-displaying-transformations-used-for-Mob.patch * bpf-data-section-support-poc.patch * bpf-bss-section-poc.patch - use fallback definition %make_build if it is not defined (fix SLE12 build) ==== iptables ==== Subpackages: libip4tc2 libip6tc2 libxtables12 xtables-plugins - Add Conflicts with iptables-nft = 1.6.2 as during the update to iptables 1.8 ip6tables-restore-translate, ip6tables-translate, iptables-restore-translate and iptables-translate were moved from iptables-nft subpackage (now iptables-backend-nft) to the main package. So we need to add a conflict here otherwise we hit file conflicts error during the update. ==== kubic-control ==== Version update (0.8.2 -> 0.9.0) Subpackages: kubicctl kubicd - Update to version 0.9.0 - Add Yomi support - Add haproxy support for multi-master loadbalancer - Move config directory to /usr/etc/ - Add kubic-haproxycfg sub-package ==== libnettle ==== Subpackages: libhogweed5 libnettle7 - Install checksums for binary integrity verification which are required when running in FIPS mode (bsc#1152692, jsc#SLE-9518) ==== libxslt ==== - Drop out lilbxslt-python package as it is just py2 based and upstream yet didn't bother to port it to python3. When there is python3 compatible code it should be enabled as multibuild here * Drop now unused libxslt-1.1.24-linkflags.patch and libxslt-do_not_build_doc_nor_xsltproc.patch ==== lvm2 ==== Subpackages: liblvm2cmd2_03 - Fix LV activation issues (boo#1152378, rh#1727270) + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch ==== lvm2-device-mapper ==== Subpackages: device-mapper libdevmapper-event1_03 libdevmapper1_03 - Fix LV activation issues (boo#1152378, rh#1727270) + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch ==== open-vm-tools ==== Version update (10.3.10 -> 11.0.0) Subpackages: libvmtools0 - Update to 11.0.0 (build 14549424) (boo#1151523) + Added appInfo to publish information about running applications inside the guest. + Provided sample tool.conf for ease of administration. - Updated spec file to build 11.0.0 - Removed libgrabbitmqProxy.so, vmware-guestproxycerttool, and guestproxy-ssl.conf - Added %config(noreplace) %{_sysconfdir}/vmware-tools/tools.conf.example - Drop unnecessary patch: - gcc9-warnings.patch ==== patterns-microos ==== Subpackages: patterns-microos-alt_onlyDVD patterns-microos-apparmor patterns-microos-base patterns-microos-basesystem patterns-microos-cloud patterns-microos-defaults patterns-microos-hardware patterns-microos-ima_evm patterns-microos-onlyDVD patterns-microos-selinux patterns-microos-sssd_ldap - Enable armv7 ==== python-asn1crypto ==== Version update (0.24.0 -> 1.0.0) - update to version 1.0.0 * BREAKING CHANGE: Removed functionality to calculate public key values from private key values. Alternatives have been added to oscrypto. (see upstream changelog) * Significantly improved parsing of core.UTCTime() and core.GeneralizedTime() values that include timezones and fractional seconds * core.Choice() may now be constructed by a 2-element tuple or a 1-key dict * No longer try to load optional performance dependency, libcrypto, on Mac or Linux * Add support for explicit RSA SSA PSS to keys.PublicKeyInfo() and keys.PrivateKeyInfo() * Add/improve few algorithms (RC4, secp256k1, SHA-3, SHAKE) * Added asn1crypto_tests package to PyPi * Many bugfixes ==== python-base ==== Subpackages: libpython2_7-1_0 - Add bpo36302-sort-module-sources.patch (boo#1041090) ==== python-urllib3 ==== Version update (1.25.5 -> 1.25.6) - Updae to 1.25.6: * Fix issue where tilde (~) characters were incorrectly percent-encoded in the path. (Pull #1692) ==== rdma-core ==== Subpackages: libefa1 libibverbs libibverbs1 libmlx4-1 libmlx5-1 librdmacm1 - Have rsocket conflicts with older librdmacm-tools (bsc#1137140) - Have librdmacm-utils obsolete and provide librdmacm-tools (bsc#1137138) ==== rook ==== - Force use of ceph kernel client driver (bsc#1152690) - Add 0001-bsc-1152690-ceph-csi-Driver-will-fail-with-error.patch - Define build shell as /bin/bash for usage of `=~` conditional (bsc#1152559) - Fix csi-dummy-images.patch to work with Go linker's -X flag (bsc#1152559) + update linker flags themselves to remove comments from flags + add test to spec file to verify linker flags are working in future ==== texinfo ==== - use filetrigger instead of transfiletrigger - Temporary disable %transfiletriggerin/%transfiletriggerun and reintroduce %post/%preun with %install_info/%install_info_delete as libzypp currentyl can not handle first case (boo#1041742) - Fix patch texinfo-zlib.patch to enable open of compressed info files without using a compressor utility (boo#1152105) - For bug boo#1152105 split of the info pages of package info to be able to preinstall gzip before/with first install-info call - implement file trigger for installing and removing info pages (boo#1152105) ==== xen ==== - bsc#1135799 - Partner-L3: Xen crashes on AMD ROME based machines 5ca7660f-x86-entry-drop-unused-includes.patch 5cf8da09-adjust-sysdom-creation-call-earlier-on-x86.patch 5cab2a6b-x86-ACPI-also-parse-AMD-tables-early.patch 5cab2ab7-x86-IOMMU-introduce-init-ops.patch 5cab2ae8-x86-IOMMU-abstract-iommu_supports_eim.patch 5cab2b4e-x86-IOMMU-abstract-iommu_enable_x2apic_IR.patch 5cab2b95-x86-IOMMU-initialize-iommu_ops-in.patch 5cac9a4b-x86-IOMMU-abstract-adjust_vtd_irq_affinities.patch 5cdeac7f-AMD-IOMMU-adjust-IOMMU-list-head-init.patch 5d0cf4e4-AMD-IOMMU-initialize-IRQ-tasklet-once.patch 5d149bb0-AMD-IOMMU-dont-add-IOMMUs.patch 5d1b3fab-AMD-IOMMU-restrict-feature-logging.patch 5d358508-x86-IRQ-desc-affinity-represents-request.patch 5d358534-x86-IRQ-consolidate-arch-cpu_mask-use.patch 5d358a67-AMD-IOMMU-pass-IOMMU-to-iterate_ivrs_entries-cb.patch 5d358a92-AMD-IOMMU-pass-IOMMU-to-amd_iommu_alloc_intremap_table.patch 5d39811c-x86-IOMMU-dont-restrict-IRQ-affinities.patch 5d417813-AMD-IOMMU-bitfield-extended-features.patch 5d417838-AMD-IOMMU-bitfield-control-reg.patch 5d41785b-AMD-IOMMU-bitfield-IRTE.patch 5d41787e-AMD-IOMMU-pass-IOMMU-to-gfu-intremap-entry.patch 5d4178ad-AMD-IOMMU-128bit-non-guest-APIC-IRTE.patch 5d4178fc-AMD-IOMMU-split-amd_iommu_init_one.patch 5d41793f-AMD-IOMMU-allow-enabling-without-IRQ.patch 5d417a16-AMD-IOMMU-adjust-IRQ-setup-for-x2APIC.patch 5d417ab6-AMD-IOMMU-enable-x2APIC-mode.patch 5d417b38-AMD-IOMMU-correct-IRTE-updating.patch 5d417b6a-AMD-IOMMU-dont-needlessly-log-headers.patch 5d4a9d25-AMD-IOMMU-drop-not-found-message.patch 5d80e7c0-AMD-IOMMU-free-shared-IRT-once.patch 5d80e80d-AMD-IOMMU-valid-flag-for-IVRS-mappings.patch 5d80e82e-AMD-IOMMU-alloc_intremap_table-callers-handle-errors.patch 5d80e857-x86-PCI-read-MSI-X-table-entry-count-early.patch 5d8b72e5-AMD-IOMMU-dont-blindly-alloc-intremap-tables.patch 5d8b730e-AMD-IOMMU-phantom-funcs-share-intremap-tables.patch 5d8b733b-x86-PCI-read-max-MSI-vector-count-early.patch 5d8b736d-AMD-IOMMU-replace-INTREMAP_ENTRIES.patch 5d8b7393-AMD-IOMMU-restrict-intremap-table-sizes.patch - bsc#1145240 - [Migration]Can't pre-allocate 1 shadow pages 5d70bfba-x86-shadow-dont-enable-with-too-small-allocation.patch - bsc#1137717 - [HPS Bug] Unable to install Windows Server 2016 with 2 CPUs setting (or above) under SLES12 SP4 Xen Server on AMD ROME platform 5d89d8d9-libxc-x86-avoid-overflow-in-CPUID-APIC-ID.patch - Upstream bug fixes (bsc#1027519) 5d67ceaf-x86-properly-gate-PKU-clearing.patch 5d779811-x86-fix-CPUID7-0-eax-levelling-MSR.patch 5d77b40f-fix-hvm_all_ioreq_servers_add_vcpu-cleanup.patch 5d80ea13-vpci-honor-read-only-devices.patch 5d8b715f-ACPI-cpuidle-bump-max-num-of-states.patch - bsc#1145774 - Libivrtd segfaults when trying to live migrate a VM Fix crash in an error path of libxl_domain_suspend with libxl.helper_done-crash.patch -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] Virtualization:containers vs kubic, podman dependencies and SLES 12 support
by Romain GEISSLER 08 Oct '19

08 Oct '19

Hi, I would like to have some information on the Kubic project, it's link with the Virtualization:containers [1] project, and how well it supports SLES 12 (SP 4, or the soon to come SP5). First, what is the relationship between Kubic and Virtualization:containers [1]. It looks like Virtualization:containers actually links some of its component directly to Kubic (for example "podman" or "conmon"). If someone goal is to replace docker by podman, shall Kubic be used, or Virtualization:containers ? In Virtualization:containers, it looks like podman is available, however some of its direct dependencies (like "conmon") are not available. It is just because it was forgot, or is it done on purpose ? It looks like "conmon" is available only in Kubic. The reason why I tried to use Virtualization:containers was because apparently it was build for SLES 12 (all SP >= 3), while on the other side Kubic seems to only target "SLE_12_SP3_Backports" but not SLES 12 SP4/SP5, which makes me think Kubic doesn't actually tries to target SLES 12. On a SLES 12 SP4, I did try to install podman from Virtualization:containers, and I hit the issue that it requires podman. Then I tried to add the Kubic SLE_12_SP3_Backports repo (expecting that SP3 and SP4 would be close enough so that it's ok-ish), then zypper complained that I am missing "fuse-overlayfs" which apparently is only available for SLES >= 15. Checking it's Github source code [2], the README reads actually if you ever expect to use podman in rootless mode, then fuse-overlayfs actually requires a Kernel >= 4.18, while the one found on SLES 12 SP4/SP5 is based on 4.12. So I fear more and more trying to use podman in rootless mode on SLES 12 is actually impossible, would anyone be able to confirm that ? Cheers, Romain [1] https://build.opensuse.org/project/show/Virtualization:containers [2] https://github.com/containers/fuse-overlayfs-- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

3 2

[opensuse-kubic] New MicroOS snapshot 20191004 released!
by Richard Brown 07 Oct '19

07 Oct '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: installation-images-MicroOS (14.438 -> 14.439) kernel-source (5.3.1 -> 5.3.2) pam (1.3.1+git20190807.e31dd6c -> 1.3.1+git20190923.ea78d67) systemd (242 -> 243) === Details === ==== installation-images-MicroOS ==== Version update (14.438 -> 14.439) - anticipate pam config might be in /usr/etc (bsc#1152771) - 14.439 ==== kernel-source ==== Version update (5.3.1 -> 5.3.2) - Update config files. Enable CONFIG_X86_5LEVEL (jsc#SLE-9607). - commit 5588b36 - Linux 5.3.2 (bnc#1151927). - objtool: Clobber user CFLAGS variable (bnc#1151927). - platform/x86: i2c-multi-instantiate: Derive the device name from parent (bnc#1151927). - ALSA: hda - Apply AMD controller workaround for Raven platform (bnc#1151927). - ALSA: hda - Add laptop imic fixup for ASUS M9V laptop (bnc#1151927). - ALSA: dice: fix wrong packet parameter for Alesis iO26 (bnc#1151927). - ALSA: usb-audio: Add DSD support for EVGA NU Audio (bnc#1151927). - ALSA: usb-audio: Add Hiby device family to quirks for native DSD support (bnc#1151927). - Revert "mm/z3fold.c: fix race between migration and destruction" (bnc#1151927). - clk: imx: imx8mm: fix audio pll setting (bnc#1151927). - crypto: talitos - fix missing break in switch statement (bnc#1151927). - mtd: cfi_cmdset_0002: Use chip_good() to retry in do_write_oneword() (bnc#1151927). - HID: Add quirk for HP X500 PIXART OEM mouse (bnc#1151927). - HID: hidraw: Fix invalid read in hidraw_ioctl (bnc#1151927). - HID: logitech-dj: Fix crash when initial logi_dj_recv_query_paired_devices fails (bnc#1151927). - HID: logitech: Fix general protection fault caused by Logitech driver (bnc#1151927). - HID: sony: Fix memory corruption issue on cleanup (bnc#1151927). - HID: prodikeys: Fix general protection fault during probe (bnc#1151927). - powerpc/xive: Fix bogus error code returned by OPAL (bnc#1151927). - drm/amd/display: readd -msse2 to prevent Clang from emitting libcalls to undefined SW FP routines (bnc#1151927). - drm/amd/display: Don't replace the dc_state for fast updates (bnc#1151927). - drm/amd/display: Skip determining update type for async updates (bnc#1151927). - drm/amd/display: Allow cursor async updates for framebuffer swaps (bnc#1151927). - clocksource/drivers: Do not warn on probe defer (bnc#1151927). - clocksource/drivers/timer-of: Do not warn on deferred probe (bnc#1151927). - netfilter: add missing IS_ENABLED(CONFIG_NF_TABLES) check to header-file (bnc#1151927). - commit 17d14ca - config: Enable dual-role modes for DWC on arm64 as well - CONFIG_USB_DWC2_DUAL_ROLE=y and CONFIG_USB_DWC3_DUAL_ROLE=y - Previously that was only enabled on armv6/armv7 - commit 4940602 ==== pam ==== Version update (1.3.1+git20190807.e31dd6c -> 1.3.1+git20190923.ea78d67) - Update to version 1.3.1+git20190923.ea78d67: * Fixed missing quotes in configure script * Add support for a vendor directory and libeconf (#136) * pam_lastlog: document the 'unlimited' option * pam_lastlog: prevent crash due to reduced 'fsize' limit * pam_unix_sess.c add uid for opening session * Fix the man page for "pam_fail_delay()" * Fix a typo * Update a function comment - drop usr-etc-support.patch (accepted upstream) - Add migration support from /etc to /usr/etc during upgrade - Update to version 1.3.1+git20190902.9de67ee: * pwhistory: fix read of uninitialized data and memory leak when modifying opasswd - Update to version 1.3.1+git20190826.1b087ed: * libpam/pam_modutil_sanitize.c: optimize the way to close fds ==== systemd ==== Version update (242 -> 243) Subpackages: libsystemd0 libudev1 systemd-logger systemd-sysvinit udev - Some files related to the portable stuff were missing some %exclude - Import commit 9e41d7ec3572d8d5ea1e00f683e9fbf8108e85b4 fb1b9d54f9 tty-ask-pwd-agent: fix message forwarded to wall(1) dd14da3bb6 core: restore initialization of u->source_mtime d62f30f647 resolved: create /etc/resolv.conf symlink at runtime - Slighly rework (mostly reorganization) the portable stuff - Track 0001-resolved-create-etc-resolv.conf-symlink-at-runtime.patch in the git repo This patch has been in the quarantine area long enough, so let's move it in the git repo. - Upgrade to v243 (commit e0b24c4356aa0c1c56ff274ff72228f33482a5be) See https://github.com/openSUSE/systemd/blob/SUSE/v243/NEWS for details. Drop 0001-Revert-insserv.conf-generator.patch as it's been dropped from branch SUSE/v243 while we were rebasing. Drop 0001-rc-local-generator-deprecate-halt.local-support.patch as this functionality had been deprecated during the previous release and now have been dropped by upstream. - enable systemd-portabled - systemd-container creates and owns /etc/systemd/nspawn now -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191004 released!
by Richard Brown 07 Oct '19

07 Oct '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: installation-images-MicroOS (14.438 -> 14.439) kernel-source (5.3.1 -> 5.3.2) pam (1.3.1+git20190807.e31dd6c -> 1.3.1+git20190923.ea78d67) systemd (242 -> 243) === Details === ==== installation-images-MicroOS ==== Version update (14.438 -> 14.439) - anticipate pam config might be in /usr/etc (bsc#1152771) - 14.439 ==== kernel-source ==== Version update (5.3.1 -> 5.3.2) - Update config files. Enable CONFIG_X86_5LEVEL (jsc#SLE-9607). - commit 5588b36 - Linux 5.3.2 (bnc#1151927). - objtool: Clobber user CFLAGS variable (bnc#1151927). - platform/x86: i2c-multi-instantiate: Derive the device name from parent (bnc#1151927). - ALSA: hda - Apply AMD controller workaround for Raven platform (bnc#1151927). - ALSA: hda - Add laptop imic fixup for ASUS M9V laptop (bnc#1151927). - ALSA: dice: fix wrong packet parameter for Alesis iO26 (bnc#1151927). - ALSA: usb-audio: Add DSD support for EVGA NU Audio (bnc#1151927). - ALSA: usb-audio: Add Hiby device family to quirks for native DSD support (bnc#1151927). - Revert "mm/z3fold.c: fix race between migration and destruction" (bnc#1151927). - clk: imx: imx8mm: fix audio pll setting (bnc#1151927). - crypto: talitos - fix missing break in switch statement (bnc#1151927). - mtd: cfi_cmdset_0002: Use chip_good() to retry in do_write_oneword() (bnc#1151927). - HID: Add quirk for HP X500 PIXART OEM mouse (bnc#1151927). - HID: hidraw: Fix invalid read in hidraw_ioctl (bnc#1151927). - HID: logitech-dj: Fix crash when initial logi_dj_recv_query_paired_devices fails (bnc#1151927). - HID: logitech: Fix general protection fault caused by Logitech driver (bnc#1151927). - HID: sony: Fix memory corruption issue on cleanup (bnc#1151927). - HID: prodikeys: Fix general protection fault during probe (bnc#1151927). - powerpc/xive: Fix bogus error code returned by OPAL (bnc#1151927). - drm/amd/display: readd -msse2 to prevent Clang from emitting libcalls to undefined SW FP routines (bnc#1151927). - drm/amd/display: Don't replace the dc_state for fast updates (bnc#1151927). - drm/amd/display: Skip determining update type for async updates (bnc#1151927). - drm/amd/display: Allow cursor async updates for framebuffer swaps (bnc#1151927). - clocksource/drivers: Do not warn on probe defer (bnc#1151927). - clocksource/drivers/timer-of: Do not warn on deferred probe (bnc#1151927). - netfilter: add missing IS_ENABLED(CONFIG_NF_TABLES) check to header-file (bnc#1151927). - commit 17d14ca - config: Enable dual-role modes for DWC on arm64 as well - CONFIG_USB_DWC2_DUAL_ROLE=y and CONFIG_USB_DWC3_DUAL_ROLE=y - Previously that was only enabled on armv6/armv7 - commit 4940602 ==== pam ==== Version update (1.3.1+git20190807.e31dd6c -> 1.3.1+git20190923.ea78d67) - Update to version 1.3.1+git20190923.ea78d67: * Fixed missing quotes in configure script * Add support for a vendor directory and libeconf (#136) * pam_lastlog: document the 'unlimited' option * pam_lastlog: prevent crash due to reduced 'fsize' limit * pam_unix_sess.c add uid for opening session * Fix the man page for "pam_fail_delay()" * Fix a typo * Update a function comment - drop usr-etc-support.patch (accepted upstream) - Add migration support from /etc to /usr/etc during upgrade - Update to version 1.3.1+git20190902.9de67ee: * pwhistory: fix read of uninitialized data and memory leak when modifying opasswd - Update to version 1.3.1+git20190826.1b087ed: * libpam/pam_modutil_sanitize.c: optimize the way to close fds ==== systemd ==== Version update (242 -> 243) Subpackages: libsystemd0 libudev1 systemd-logger systemd-sysvinit udev - Some files related to the portable stuff were missing some %exclude - Import commit 9e41d7ec3572d8d5ea1e00f683e9fbf8108e85b4 fb1b9d54f9 tty-ask-pwd-agent: fix message forwarded to wall(1) dd14da3bb6 core: restore initialization of u->source_mtime d62f30f647 resolved: create /etc/resolv.conf symlink at runtime - Slighly rework (mostly reorganization) the portable stuff - Track 0001-resolved-create-etc-resolv.conf-symlink-at-runtime.patch in the git repo This patch has been in the quarantine area long enough, so let's move it in the git repo. - Upgrade to v243 (commit e0b24c4356aa0c1c56ff274ff72228f33482a5be) See https://github.com/openSUSE/systemd/blob/SUSE/v243/NEWS for details. Drop 0001-Revert-insserv.conf-generator.patch as it's been dropped from branch SUSE/v243 while we were rebasing. Drop 0001-rc-local-generator-deprecate-halt.local-support.patch as this functionality had been deprecated during the previous release and now have been dropped by upstream. - enable systemd-portabled - systemd-container creates and owns /etc/systemd/nspawn now -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20191002 released!
by Richard Brown 04 Oct '19

04 Oct '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: mozilla-nss === Details === ==== mozilla-nss ==== - Small packaging cleanup -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191002 released!
by Richard Brown 04 Oct '19

04 Oct '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: babeltrace mozilla-nss rdma-core (23.1 -> 25.1) === Details === ==== babeltrace ==== - add s390x in ExclusiveArch ==== mozilla-nss ==== Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs - Small packaging cleanup ==== rdma-core ==== Version update (23.1 -> 25.1) Subpackages: libibverbs libibverbs1 libmlx4-1 libmlx5-1 librdmacm1 - Update to rdma-core v25.1 - No release notes available - Add rdma-core-rpmlintrc to hide non applicable rpmlint warnings -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20190930 released!
by Richard Brown 02 Oct '19

02 Oct '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: btrfsprogs (5.2.1 -> 5.2.2) cpio dracut (049+git108.6c9d1156 -> 049+git112.fe41ccd9) installation-images-MicroOS (14.435 -> 14.438) kernel-firmware (20190827 -> 20190909) less (530 -> 551) libcontainers-common (20190802 -> 20190923) libffi (3.2.1.git259 -> 3.2.1.git505) python-Jinja2 python-urllib3 (1.25.3 -> 1.25.5) yast2 (4.2.23 -> 4.2.24) === Details === ==== btrfsprogs ==== Version update (5.2.1 -> 5.2.2) Subpackages: btrfsprogs-udev-rules libbtrfs0 - Update to 5.2.2: * check: * fix false report of wrong byte count for orphan inodes * option -E was not handled correctly * new check and repair for root item generation * balance: check for full-balance before background fork * mkfs: check that total device size does not overflow 16EiB * dump-tree: print DEV_STATS key type * other: * new and updated tests * doc fixups and updates - update to 5.2.1 * scrub status: fix ETA calculation after resume * check: fix crash when using -Q * restore: fix symlink owner restoration * mkfs: fix regression with mixed block groups * core: fix commit to process all delayed refs * other: * minor cleanups * test updates - update to 5.2 * subvol show: print qgroup information when available * scrub: * status: show ETA, revamp the whole output * fix reading/writing of last position on resume/cancel, potentially skipping part of the filesystem on next resume * dump-tree: add new option --noscan to use only devices given on the commandline * all-in-one binary (busybox style) with mkfs.btrfs, btrfs-image, btrfs-convert, btrfstune * image: fix hang when there are more than 32 cpus online and compression is requested * convert: fix some false ENOSPC errors when --rootdir is used * build: fix gcc9 warnings * core changes * command handling cleanups * dead code removal * cmds-* files moved to cmds/ * other shared userspace files moved to common/ * utils.c split into more files * preparatory work for more output formats * libbtrfsutil: fix unaligned access * other * new and updated tests * fix tests so CI passes again * sb-mod can modify more superblock items - update to version 5.1 * repair: flush/FUA support to avoid breaking metadata COW * file extents repair no longer relies on data in extent tree * lowmem: fix false error reports about gaps between extents * add inode mode check and repair for various objects * add check for invalid combination of nocow/compressed extents * device scan option to forget scanned devices [new] * mkfs: use same chunk size as kernel for initial creation * dev-repace: better report when other exclusive operation runs * help for sntax errors on command lines, print relevant msgs * defrag: able to open files in RO mode * dump-tree: --block can be specified multiple times - update to version 4.20.2 * dump-super: minor output fixup * revert fix for prefix detection of receive path, this is temporary and unbreaks existing user setups - Use correct path for dracut-fsck-help.txt in module-setup.sh (bsc#1122539) * Remove module-setup.sh * Add module-setup.sh.in - Advise user of fs recovery options when we fail to mount (fate#320443, bsc#1122539) * Add dracut-fsck-help.txt * Add module-setup.sh - update to version 4.20.1 * libbtrfs: fix build of external tools due to missing symbols * ci: enable library test - update to version 4.20 * new feature: metadata uuid * lightweight change of UUID without rewriting all metadata (incompatible change) * done by btrfstune -m/-M, needs kernel support, 5.0+ * image: * fix block groups when restoring from multi-device image * only enlarge result image if it's a regular file * check * more device extent checks and fixes * can repair dir item with mismatched hash * mkfs: uuid tree created with proper contents * fix mount point detection due to partial prefix match * other: * new tests, build fixes, doc updates * libbtrfsutil: fix tests if kernel lacks support for new subvolume ioctls - partial cleanup with spec-cleaner - drop 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch - drop 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch - drop 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch - drop 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch - drop 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch - Use %license instead of %doc [bsc#1082318] - Implement fate#325871 * Added 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch * Added 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch * Added 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch * Added 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch * Added 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch - update to version 4.19.1 * check * many lowmem mode improvements * properly report qgroup mismatch errors * check symlinks with append/immutable flags * fi usage * correctly calculate allocated/unallocated for raid10 * minor output updates * mkfs * detect ENOSPC on thinly provisioned devices * fix spurious EEXIST during directory traversal * restore: fix relative path for restore target * dump-tree: print symbolic tree names for backrefs * send: fix regression preventing send -p with subvolumes mounted on "/" * corrupt-tree: refactoring and command line updates * build * make it work with e2fsprogs < 1.42 again * restore support for autoconf 2.63 * detect if -std=gnu90 is supported * other * new tests * cleanups - update to version 4.19 * check: support repair of fs with free-space-tree feature * core: * port delayed ref infrastructure from kernel * support write to free space tree * dump-tree: new options for BFS and DFS enumeration of b-trees * quota: rescan is now done automatically after 'assign' * btrfstune: incomplete fix to uuid change * subvol: fix 255 char limit checks * completion: complete block devices and now regular files too * docs: * ship uncompressed manual pages * btrfsck uses a manual page link instead of symlink * other * improved error handling * docs * new tests - update to version 4.17.1 * check: * add ability to fix wrong ram_bytes for compressed inline files * beautify progress output * btrfstune: allow to continue uuid change after unclean interruption * several fuzz fixes: * detect overalpping chunks * chunk loading error handling * don't crash with unexpected root refs to extents * relax option parsing again to allow mixing options and non-options arguments * fix qgroup rescan status reporting * build: * drop obsolete dir-test * new configure option to disable building of tools * add compatibility options --disable-static and --disable-shared * other: * cleanups and preparatory work * new test images - spec cleanup - update to version 4.17 * check * many lowmem mode improvements * properly report qgroup mismatch errors * check symlinks with append/immutable flags * fi usage * correctly calculate allocated/unallocated for raid10 * minor output updates * mkfs * detect ENOSPC on thinly provisioned devices * fix spurious EEXIST during directory traversal * restore: fix relative path for restore target * dump-tree: print symbolic tree names for backrefs * send: fix regression preventing send -p with subvolumes mounted on "/" * corrupt-tree: refactoring and command line updates * build * make it work with e2fsprogs < 1.42 again * restore support for autoconf 2.63 * detect if -std=gnu90 is supported - Removed patches (upstreamed): * 0001-btrfs-progs-convert-fix-support-for-e2fsprogs-1.42.patch * 0002-btrfs-progs-build-autoconf-2.63-compatibility.patch * 0003-btrfs-progs-build-detect-whether-std-gnu90-is-suppor.patch - Don't require libzstd-devel-static on builds that don't use it. - fix installation of btrfs.5.gz - Fix building on SLE11: * btrfs-progs: convert: fix support for e2fsprogs < 1.42 * btrfs-progs: build: detect whether -std=gnu90 is supported * btrfs-progs: build: autoconf 2.63 compatibility * Fixed mismerged addition of libbtrfsutil1 package description - Added patches: * 0001-btrfs-progs-convert-fix-support-for-e2fsprogs-1.42.patch * 0002-btrfs-progs-build-autoconf-2.63-compatibility.patch * 0003-btrfs-progs-build-detect-whether-std-gnu90-is-suppor.patch - update to version 4.16.1 * remove obsolete tools: btrfs-debug-tree, btrfs-zero-log, btrfs-show-super, btrfs-calc-size * sb-mod: new debugging tool to edit superblock items * mkfs: detect if thin-provisioned device does not have enough space * check: don't try to verify checksums on metadata dump images * build: fail documentation build if xmlto is not found * build: fix build of btrfs.static - Remove patch: 0001-btrfs-progs-build-fix-static-build.patch (upstream) - Update initrd script - update to version 4.16 * libbtrfsutil - new LGPL library to wrap userspace functionality * several 'btrfs' commands converted to use it: * properties * filesystem sync * subvolume set-default/get-default/delete/show/sync * python bindings, tests * build * use configured pkg-config path * CI: add python, musl/clang, built dependencies caching * convert: build fix for e2fsprogs 1.44+ * don't install library links with wrong permissions * fixes * prevent incorrect use of subvol_strip_mountpoint * dump-super: don't verify csum for unknown type * convert: fix inline extent creation condition * check: * lowmem: fix false alert for 'data extent backref lost for snapshot' * lowmem: fix false alert for orphan inode * lowmem: fix false alert for shared prealloc extents * mkfs: * add UUID and otime to root of FS_TREE - with the uuid, snapshots will be now linked to the toplevel subvol by the parent UUID * don't follow symlinks when calculating size * pre-create the UUID tree * fix --rootdir with selinux enabled * dump-tree: add option to print only children nodes of a given block * image: handle missing device for RAID1 * other * new tests * test script cleanups (quoting, helpers) * tool to edit superblocks * updated docs - Add patch: 0001-btrfs-progs-build-fix-static-build.patch - Add new library packages: libbtrfsutil - use documentation shipped by upstream tar, reduce dependencies - enable static build again, zstd now has static version - update to version 4.15 * mkfs --rootdir reworked, does not minimize the final image but can be still done using a new option --shrink * fix allocation of system chunk, don't allocate from the reserved area * other * new and updated tests * cleanups, refactoring * doc updates - spec: fix distro version condition - update to version 4.14.1 * dump-tree: print times of root items * check: fix several lowmem mode bugs * convert: fix rollback after balance * other * new and updated tests, enabled lowmem mode in CI * docs updates * fix travis CI build * build fixes * cleanups - update to version 4.14 * build: libzstd now required by default * check: more lowmem mode repair enhancements * subvol set-default: also accept path * prop set: compression accepts no/none, same as "" * filesystem usage: enable for filesystem on top of a seed device * rescue: new command fix-device-size * other * new tests * cleanups and refactoring * doc updates - Removed patches: - rollback-regression-fix.patch - upstreamed - spec: disable static build, missing libzstd-devel-static - spec: disable zstd support for non-Tumbleweed distros - Fix rollback regression which can lead to data corruption Added patches: rollback-regression-fix.patch (bsc#1069478) - Escape the usage of %{VERSION} when calling out to rpm. RPM 4.14 has %{VERSION} defined as 'the main packages version'. - Add dependencies for libreiserfscore0 3.6.27 or newer (bsc#1071085). - update to version 4.13.3: * check: fix --force, wrong check for a mounted block device * build: fix --with-convert parsing * subvol list: don't list TOPLEVEL * other: update tests - update to version 4.13.2: * subvol list: * don't list toplevel subvolume among deleted (broken since 4.8.3) * minor adjustments of uuid print format * subvol delete: * fix swapped behaviour of --commit-each and --commit-after * fix potentially lost sync if subvolumes are from different filesystems * check: add cache for metadata blocks, should improve performance * other: * new tests, testsuite updates * doc updates * cleanups - update to version 4.13.1: * image: speed up generating the sanitized names, do not generate unprintable chars * completion: add missing commands, better mount point detection * restore: add zstd support; libzstd detected automatically, will be requested by default in the future, or can be configured out * other: * misc fixes found by sparse * doc enhancements, ioctl manual page started * updated and new tests * build fixes - update to version 4.13: * convert: reiserfs support * check: new option --force to allow check of a mounted filesystem (no repair) * mkfs: --rootdir will now copy special files * dump-tree: minor output changes * inspect rootid: accept file as arugment * dev usage: don't calculate slack space for missing devices * fi du: don't print error on EMPTY_SUBVOL (inode number 2) * build: * fixed support for sanitization features on gcc (tsan, asan, ubsan) * fix PIE build * other: * misc cleanups and stability fixes * travis CI enhancements * new tests, fuzzed images * testsuite cleanups - Removed patches: - 0163-btrfs-progs-fsck-fix-segfault.patch - will be upstreamed - local-version-override.patch - not needed anymore - btrfs-support-pie.patch - upstremed - Removed patches: - 0167-Btrfs-progs-make-find_and_setup_root-return-an-error.patch - 0168-Btrfs-progs-don-t-bug-out-if-we-can-t-find-the-last-.patch - update to 4.12.1 * build: * fix cross-compilation * use gnu90 explicitly * dump-tree: more relaxed checks so -b can print block on a damaged fs * convert: fix the 1MB range exclusion * check: more dir_item hash checks * other * added missing getopt spec for some options * doc fixes * cleanups * test updates - update to 4.12 * subvol show: new options --rootid, --uuid to show subvol by the given spec * convert: progress report fixes, found by tsan * image: progress report fixes, found by tsan * fix infinite looping in find-root, or when looking for free extents * other: * code refactoring * docs updates * build: ThreadSanitizer support * tests: stricter checks for mounted filesystem - update to -4.11.1 * image: restoring from multiple devices * dev stats: make --check option work * check: fix false alert with extent hole on a NO_HOLE filesystem * check: lowmem mode, fix false alert in case of mixed inline and compressed extent * convert: work with large filesystems (many TB) * convert: fix overwriting of eb header flags * convert: do not clear NODATASUM flag in inodes when run with --no-datasum * docs updates * build: sync Android.mk with Makefile * tests: * new tests * fix 008 and 009, shell quotation mistake - update to 4.11 * receive: fix handling empty stream with -e (multi-stream) * send dump: fix printing long file names * stability fixes for: dump-super, print-tree, check * option parser updates: global options are parsed before the subcommand name (old xfstests will fail) * new and updated tests * documentation updates - btrfs-support-pie.patch: remove CFLAGS usage from linker lines, this will allow the default PIE support to work. - update to 4.10.2 * check: lowmem mode fix for false alert about lost backrefs * convert: minor bugfix * library: fix build, misisng symbols, added tests - update to 4.10.1 * receive: handle subvolume in path clone * convert: rollback fixed (rewrite was needed to address previous design issues) * build: fix build of 3rd party tools, missing <linux/sizes.h> * dump-tree: print log trees * other: new and updated tests - update to 4.10 * send: dump output fixes: missing newlies * check: several fixes for the lowmem mode, improved error reporting * build * removed some library deps for binaries that not use them * ctags, cscope * split Makefile to the autotool generated part and the rest, not needed to autogen.sh after adding a file * shared code: sync easy parts with kernel sources * other * lots of cleanups * source file reorganization: convert, mkfs, utils * lots of spelling fixes in docs, other updates * more tests - update to 4.9.1 * check: * use correct inode number for lost+found files * lowmem mode: fix false alert on dropped leaf * size reports: negative numbers might appear in size reports during device deletes (previously in EiB units) * mkfs: print device being trimmed * defrag: v1 ioctl support dropped * quota: print message before starting to wait for rescan * qgroup show: new option to sync before printing the stats * other: * corrupt-block enhancements * backtrace and co. cleanups * doc fixes - update to 4.9 * check: many lowmem mode updates * send: use splice syscall to copy buffer from kernel * receive: new option to dump the stream in textual form * convert: * move sources to own directory * prevent accounting of blocks beyond end of the device * make it work with 64k sectorsize * mkfs: move sources to own directory * defrag: warns if directory used without -r * dev stats: * new option to check stats for non-zero values * add long option for -z * library: version bump to 0.1.2, added subvol_uuid_search2 * other: * cleanups * docs updates - update to 4.8.5 * receive: fix detection of end of stream (error reported even for valid streams) * other: * added test for the receive bug * fix linking of library-test - update to 4.8.4 * check: support for clearing space cache v2 (free-space-tree) * send: * more sanity checks (with tests), cleanups * fix for fstests/btrfs/038 and btrfs/117 failures * build: * fix compilation of standalone ioctl.h, pull NULL definition * fix library link errors introduced in 4.8.3 * tests: * add more fuzzed images from bugzilla * add bogus send stream checks * fixups and enhancements for CI environment builds * misc refinements and updates of testing framework * other: * move sources for btrfs-image to own directory * deprecated and not build by default: btrfs-calc-size, btrfs-show-super * docs updates - update to 4.8.3 * check: * support for clearing space cache (v1) * size reduction of inode backref structure * send: * fix handling of multiple snapshots (-p and -c options) * transfer buffer increased (should reduce number of context switches) * reuse existing file for output (-f), eg. when root cannot create files (NFS) * dump-tree: * print missing items for various structures * new: dev stats, balance status item * sync key names with kernel (the persistent items) * subvol show: now able to print the toplevel subvolume -- the creation time might be wrong though * mkfs: * store the creation time of toplevel root inode * print UUID in the summary * build: travis CI for devel * other: * lots of cleanups and refactoring * switched to on-stack path structure * fixes from coverity, asan, ubsan * new tests * updates in testing infrastructure * fixed convert test 005 - update to 4.8.2 * convert: also convert file attributes * convert: fix wrong tree block alignment for unalianged block group * check: quota verify fixes, handle reloc tree * build: add stub for FIEMAP_EXTENT_SHARED, compiles on ancient kernels * build: add stub for BUILD_ASSERT when ioctl.h is included * dump-tree: don't crash on unrecognized tree id for -t * tests: * add more ioctl tests * convert: more symlink tests, attribute tests * quota verify for reloc tree * other cleanups - Add ability to provide site specific defaults for mkfs (FATE#320615). * Only used for SLES11 defaults. - Added patch mkfs-default-features.patch - update to 4.8.1 * 32bit builds fixed * build without backtrace support fixed - update to 4.8 * error handling improvements all over the place * new fuzzed images, test updates * doc fixups * minor cleanups and improvements * kernel library helpers moved to own directory * qgroup: fix regression leading to incorrect status after check, introduced in 4.7 - update to 4.7.3 * fixed free space tree compat status * check: low-mem mode: handle partially dropped snapshots * dump-super: consolidate options for superblock copy * tree-stats: check mount status * subvol delete: handle verbosity option * defrag: print correct error string * mkfs: fix reading rotational status * other: * UBSAN build option * documentation updates * enhanced tests: convert, fuzzed images, more tools to run on fuzzed images - removed btrfsprogs-only-install-udev-rules-for-udev-190.patch: fix build - update to 4.7.2 * check: * urgent fix: false report of backref mismatches; do not --repair last unaffected version 4.6.1 (code reverted to that state) * fuzzing and fixes * added more sanity checks for various structures * testing images added * build: udev compatibility: do not install .rules on version < 190 * other: * dump-super: do not crash on garbage value in csum_type * minor improvements in messages and help strings * documentation: * filesystem features - Add new btrfsprogs-udev-rules package to contain the udev rules. - Fix packaging for udev rules: - btrfs builtin didn't exist prior to udev v190, so the rules must depend on that version. - Added patch: * btrfsprogs-only-install-udev-rules-for-udev-190.patch - update to 4.7.1 * check: * new optional mode: optimized for low memory usage (memory/io tradeoff) * --mode=lowmem, not default, still considered experimental * does not work with --repair yet * convert: regression fix, ext2_subvol/image rw permissions * mkfs/convert: * two-staged creation, partially created filesystem will not be recognized * improved error handling (fewer BUG_ONs) * convert: preparation for more filesystems to convert from * documentation updates: quota, qgroup * other * message updates * more tests * more build options, enhanced debugging - update to 4.7 * convert: fix creating discontig extents * check: speed up traversing heavily reflinked extents within a file * check: verify qgroups of higher levels * check: repair can now fix wrong qgroup numbers * balance: new option to run in the background * defrag: default extent target size changed to 32MiB * du: silently skip non-btrfs dirs/files * documentation updates: btrfs(5), btrfs(8), balance, subvolume, scrub, filesystem, convert * bugfixes: * unaligned access (reported for sparc64) in raid56 parity calculations * use /bin/bash * other stability fixes and cleanups * more tests - Removed patches: * 0002-btrfs-progs-btrfsck-verify-qgroups-above-level-0.patch * 0003-btrfs-progs-btrfsck-write-corrected-qgroup-info-to-d.patch - update to 4.6.1 * fi resize: negative resize argument accepted again * qgroup rescan: fix skipping when rescan is in progress * mkfs: initialize stripesize to correct value * testsuite updates, mostly convert tests * documentation updates * btrfs-device, btrfs-restore manual pages enhanced * misc fixups - update to 4.6 * convert - major rewrite: * fix a long-standing bug that led to mixing data blocks into metadata block groups * the workaround was to do full balance after conversion, which was recommended practice anyway * explicitly set the lowest supported version of e2fstools to 1.41 * provide and install udev rules file that addresses problems with device mapper devices, renames after removal * send: new option: quiet * dev usage: report slack space (device size minus filesystem area on the dev) * image: support DUP * build: short options to enable debugging builds * other: * code cleanups * build fixes * more tests and other enhancements * Removed patches: * 0001-btrfs-progs-free-qgroup-counts-in-btrfsck.patch * 0169-btrfs-progs-udev-add-rules-for-dm-devices.patch * btrfs-progs-no-PKG_CHECK_VAR - btrfsck updates for qgroup verification and repair (fate#318144) * We can now check all qgroup levels * btrfsck will write out corrected qgroups when run with --repair - Added patch: 0001-btrfs-progs-free-qgroup-counts-in-btrfsck.patch - Added patch: 0002-btrfs-progs-btrfsck-verify-qgroups-above-level-0.patch - Added patch: 0003-btrfs-progs-btrfsck-write-corrected-qgroup-info-to-d.patch - update to 4.5.3 * ioctl: fix unaligned access in buffer from TREE_SEARCH; might cause SIGBUS on architectures that do not support unaligned access and do not performa any fixups * improved validation checks of superblock and chunk-related structures * subvolume sync: fix handling of -s option * balance: adjust timing of safety delay countdown with --full-balance * rescue super-recover: fix reversed condition check * check: fix bytes_used accounting * documentation updates: mount options, scrub, send, receive, select-super, check, mkfs * testing: new fuzzed images, for superblock and chunks - fix build failure on 13.1: conditional default for udevdir - fix build failure on SLE11SP4: wrong check in makefile - Add udev rules for dm devices (bsc#912170 bsc#888215) - Added patch: 0169-btrfs-progs-udev-add-rules-for-dm-devices.patch - Added patch: btrfs-progs-no-PKG_CHECK_VAR - update to 4.5.2 * new/moved command: btrfs-calc-stats -> btrfs inspect tree-stats * check: fix false alert for metadata blocks crossing stripe boundary * check: catch when qgroup numbers mismatch * check: detect running quota rescan and report mismatches * balance start: add safety delay before doing a full balance * fi sync: is now silent * fi show: don't miss filesystems with partially matching uuids * dev ready: accept only one argument for device * dev stats: print "devid:N" for a missing device instead of "(null)" * other: * lowest supported version of e2fsprogs is 1.41 * minor cleanups, test updates - Removed patch: 2000-btrfs-full-balance-warning.diff - update to 4.5.1 * mkfs: allow DUP on multidev fs * fix static build - update to 4.5 * new/moved commands * btrfs-show-super -> btrfs inspect-internal dump-super * btrfs-debug-tree -> btrfs inspect-internal dump-tree * new commands * btrfs fi du - calculate disk usage, including shared extents * enhancements * device delete - delete by id (needs kernel support, not merged to 4.6) * check - new option to specify chunk root * debug-tree/dump-tree - option -t understands human readable name of the tree (along numerical ids) * btrfs-debugfs - can dump block group information * bugfixes * all commands should accept the option separator "--" * several fixes in device scan * restore works on filesystems with sectorsize > 4k * debug-tree/dump-tree - print compression type as string * subvol sync: fix crash, memory corruption * argument parsing fixes: subvol get-default, qgroup create/destroy/assign, inspect subvolid-resolve * check for block device or regular file in several commands * other * documentation updates * manual pages for the moved tools now point to btrfs-filesystem * testsuite updates - Removed patch (upstream): 0001-btrfs-progs-libbtrfs-remove-max-min-macros-from-API.patch - Recommend btrfsmaintenance - hide min/max macros clashing with gcc 6 (bnc#966257) (0001-btrfs-progs-libbtrfs-remove-max-min-macros-from-API.patch) - update to 4.4.1 * find-root: don't skip the first chunk * free-space-tree compat bits fix * build: target symlinks * documentation updates * test updates - update to 4.4 * mkfs.btrfs --data dup * support balance filters added/enhanced in linux 4.4 * manual pages enhanced (btrfs, mkfs, mount, filesystem, balance) * 'btrfs filesystem usage' works with mixed blockgroups * build: installation to /usr/local * build: the 'ar' tool is properly deteced during cross-compilation * improved stability on fuzzed/crafted images when reading sys array in superblock * debug-tree: option -t understands ids for tree root and chnuk tree * check: properly reset nlink of multi-linked file * chunk recovery: fix floating point exception * chunk recovery: endianity bugfix during rebuild * mkfs with 64K pages and nodesize reported superblock checksum mismatch - Removed patches: * 0001-btrfs-progs-mkfs-use-correct-size-for-superblock-csu.patch * fix-doc-build-on-SLE11SP3.diff - Fix missing dependency on coreutils for initrd macros (boo#958562) - Call missing initrd macro at post / postun (boo#958562) - fix mkfs failure on ppc64 (or with sectorsize > 4k) (bsc#956819) - Added patch: 0001-btrfs-progs-mkfs-use-correct-size-for-superblock-csu.patch - update to 4.3.1 * fixes * device delete: recognize 'missing' again * mkfs: long names are not trimmed when doing ssd check * support partitioned loop devices * other * replace several mallocs with on-stack variables * more memory allocation failure handling * add tests for bugs fixed * cmd-device: switch to new message printing helpers * minor code cleanups - update to 4.3 * mkfs * mixed mode is not forced for filesystems smaller than 1GiB * mixed mode broken with mismatching sectorsize and nodesize, fixed * print version info earlier * print devices sorted by id * do not truncate target image with --rootsize * fi usage: * don't print global block reserve * print device id * minor output tuning * other cleanups * calc-size: * div-by-zero fix on an empty filesystem * fix crash * bugfixes: * more superblock sanity checks * consistently round size of all devices down to sectorsize * misc leak fixes * convert: don't try to rollback with a half-deleted ext2_saved subvolume * other: * check: add progress indicator * scrub: enahced error message * show-super: read superblock from a given offset * add README * docs: update manual page for mkfs.btrfs, btrfstune, balance, convert and inspect-internal * build: optional build with more warnings (W=...) * build: better support for static checkers * build: html output of documentation * pretty-print: last_snapshot for root_item * pretty-print: stripe dev uuid * error reporting wrappers, introduced and example use * refactor open_file_or_dir * other docs and help updates * testing: * test for nodes crossing stripes * test for broken 'subvolume sync' * basic tests for mkfs, raid option combinations * basic tests for fuzzed images (check) * command intrumentation (eg valgrind) * print commands if requested * add README for tests - build btrfsprogs-static package for 13.2 and Factory, package with static versions of the utilities, aimed for rescue environments - update to 4.2.3 - subvol sync: make it actually work again - scanning: do not scan already discovered filesystems (minor optimization) - convert: better error message in case the filesystem is not finalized - restore: off-by-one symlink path check fix - update to 4.2.2 - fi label: use fallback if the label ioctl is not available - convert: check nodesize constraints against commandline features (-O) - scrub: report status 'running' until all devices are finished - device scanning might crash in some scenarios - fi usage: print summary for non-root users - update to 4.2.1 - fix an off-by-one error in cross-stripe boundary check - convert: don't write uninitialized data to image - image: don't loop with option -t0 - image: don't create threads if compression is not requested - Removed patches: * 0001-btrfs-progs-fix-cross-stripe-boundary-check.patch - make mkfs work with 64k nodesize again, notably fixes mkfs on ppc64 (bsc#945229) - Added patch: * 0001-btrfs-progs-fix-cross-stripe-boundary-check.patch - version 4.2 * enhancements: * mkfs: do not create extra single chunks on multiple devices * resize: try to guess the minimal size, 'inspect min-dev-size' * qgroup assign: add option to schedule rescan * chunk-recover: be more verbose about the scanning process * fixes: * check: * find stripes crossing stripe boundary -- created by convert * print correct range for file hole when there are no extents and learn how to fix it * replace: more sanity checks * convert: concurrency fixes related to reporting progress * find-root: option -a will not skip the current root anymore * subvol list: fix occasional crash * do not create stripes crossing stripe boundary * build: * fixes for musl libc * preliminary support for android (not working yet, more code changes needed) * new EXTRA_CFLAGS and EXTRA_LDFLAGS * other: * lots of cleanups * tests: lots of updates, new tests, framework improvements * documentation updates * debugging: print-tree shows stripe length - Removed patches (upstreamed): * 2104-get-min-size-for-resize.patch * 2105-move-min-resize-implementation-to-inspec.patch * 2106-inspect-add-command-min-dev-size.patch - add warning before full balance starts (bsc#940467, fate#319317) - Added patches: 2000-btrfs-full-balance-warning.diff - Add feature to get minimum size a filesystem can be resized to (FATE#317897). - Added patches: * 2104-get-min-size-for-resize.patch * 2105-move-min-resize-implementation-to-inspec.patch * 2106-inspect-add-command-min-dev-size.patch - version 4.1.2 - mkfs: bugfix, previous version does not create entierly correct filesystem (has to be recreated) - version 4.1.1 * bugfixes - defrag: threshold overflow fix - fsck: - check if items fit into the leaf space - fix wrong nbytes - mkfs: - create only desired block groups for single device - preparatory work for fix on multiple devices * enhancements - new alias for 'device delete': 'device remove' * other - fix compilation on old gcc (4.3) - documentation updates - debug-tree: print nbytes - test: image for corrupted nbytes - corupt-block: let it kill nbytes - spec: drop libacl dependency - version 4.1 * bugfixes - fsck.btrfs: no bash-isms - bugzilla 97171: invalid memory access (with tests) - receive: - cloning works with --chroot - capabilities not lost - mkfs: do not try to register bare file images - option --help accepted by the standalone utilities * enhancements - corrupt block: ability to remove csums - mkfs: - warn if metadata redundancy is lower than for data - options to make the output quiet (only errors) - mixed case names of raid profiles accepted - rework the output: - more comprehensive, 'key: value' format - subvol: - show: - print received uuid - update the output - new options to specify size units - sync: - grab all deleted ids and print them as they're removed, previous implementation only checked if there are any to be deleted - change in command semantics - scrub: print timestamps in days HMS format - receive: - can specify mount point, do not rely on /proc - can work inside subvolumes - send: - new option to send stream without data (NO_FILE_DATA) - convert: - specify incompat features on the new fs - qgroup: - show: distinguish no limits and 0 limit value - limit: ability to clear the limit - help for 'btrfs' is shorter, 1st level command overview - debug tree: print key names according to their C name * new - rescure zero-log - btrfsune: - rewrite uuid on a filesystem image - new option to turn on NO_HOLES incompat feature * deprecated - standalone btrfs-zero-log * other - testing framework updates - uuid rewrite test - btrfstune feature setting test - zero-log tests - more testing image formats - manual page updates - ioctl.h synced with current kernel uapi version - convert: preparatory works for more filesystems (reiserfs pending) - use static buffers for path handling where possible - add new helpers for send uilts that check memory allocations, switch all users, deprecate old helpers - Makefile: fix build dependency generation - map-logical: make it work again - Install bash completion for btrfs. - version 4.0 * resize: * don't accept file as an argument (it's confusing) * print better error message in case of an error * restore: optionally restore metadata (time, mode, uid/gid) * receive: optionally enforce chroot * new rescue subcommand 'zero-log', same as btrfs-zero-log, but now also part of the main utility * check: * free space checks match kernel, fixes incorrect reports * convert: fix setting of checksum bit if --no-datasum is used * fsck.btrfs: don't print messages * fix quota rescan on PPC64 (mangled ioctl number) * test updates * documentation: files renamed to .asciidoc, misc fixups - version 3.19.1 - convert: - new option to specify metadata block size - --no-progress actually works - restore: properly handle the page boundary corner case - build fixes: - missing macro from public header, BTRFS_BUILD_VERSION - wrong handling of --enable-convert - fi usage: reports correct space for degraded mounts - other: - mkfs: help string updates - completion: added 'usage' subcommands - cleanups in qgroup code, preparatory work - version 3.19 - btrfs-image - restore can now run in parallel threads - fixed restore of multiple image from multiple devices onto a single dev - introduced metadump v2 - check - make --init-csum-tree and --init-extent-tree work together - find-new - option to search through all metadata even if a root was already found - convert - show progress by default, can be turned off - corrupt-block - option to work on a specific root - bash completion script for all subcommands - spec: convert to autotools Removed patch 0169-btrfs-progs-Check-metadata-mirrors-in-find-root.patch - add COPYING - version 3.18.2 * qgroup show: print human readable sizes, options to say otherwise * check: new option to explicitly say no to writes * mkfs: message about trimming is not printed to stderr * fi show: fixed return value * tests: new infrastructure * btrfstune: force flag can be used together with seeding option * backtrace support is back * getopt cleanups * doc and help updates - version 3.18.1 - minor fixes - documentation updates - version 3.18 - mkfs - skinny-metadata feature is now on by default, first introduced in kernel 3.10 - filesystem usage - give an overview of fs usage in a way that's more comprehensible than existing 'fi df' - device usage - more detailed information about per-device allocations - check: - option to set a different tree root byte number - ability to link lost files to lost+found, caused by a recent kernel bug - repair of severely corrupted fs (use with care) - convert - option to show progress - subvol create - print the commit mode inline, print the global mode only if --verbose - other updates: musl-libc support, coverity bugfixes, new test images, documentation - Removed patches (upstreamed): * 0010-btrfs-progs-move-group-type-and-profile-pretty-print.patch * 0011-btrfs-progs-Enhance-the-command-btrfs-filesystem-df.patch * 0012-btrfs-progs-Add-helpers-functions-to-handle-the-prin.patch * 0013-btrfs-progs-Add-command-btrfs-filesystem-disk-usage.patch * 0014-btrfs-progs-Add-btrfs-device-disk-usage-command.patch * 0015-btrfs-progs-cleanup-dead-return-after-usage-for-fi-d.patch * 0016-btrfs-progs-Fix-memleak-in-get_raid56_used.patch * 0017-Btrfs-progs-fi-usage-free-memory-if-realloc-fails.patch * 0019-btrfs-progs-add-original-df-and-rename-disk_usage-to.patch * 0020-btrfs-progs-move-device-usage-to-cmds-device-more-cl.patch * 0021-btrfs-progs-check-if-we-can-t-get-info-from-ioctls-d.patch * 0022-btrfs-progs-zero-out-structures-before-calling-ioctl.patch * 0024-btrfs-progs-Print-more-info-about-device-sizes.patch * 0025-btrfs-progs-compare-unallocated-space-against-the-co.patch * 0026-btrfs-progs-add-section-of-overall-filesystem-usage.patch * 0027-btrfs-progs-cleanup-filesystem-device-usage-code.patch * 0028-btrfs-progs-rework-calculations-of-fi-usage.patch * 0029-btrfs-progs-replace-df_pretty_sizes-with-pretty_size.patch * 0030-btrfs-progs-clean-up-return-codes-and-paths.patch * 0031-btrfs-progs-move-global-reserve-to-overall-summary.patch - version 3.17.3 - convert: fix conversion of sparse ext* filesystems - show: resolve to the correct path - fsck: more verbose error for root dir problems - version 3.17.2 - check improvements - add ability to replace missing dir item/dir indexes - fix missing inode items - create missing root dirid - corrupt block: enhancements for testing fsck - zero-log: able to reset a fs with bogus log tree pointer (bko#72151) - package mkinitrd scripts conditionally (bsc#893577) - spec: minor updates - version 3.17.1 - fi df: argument handling - fix linking with libbtrfs - replace: better error reporting - fi show: fixed stall if run concurrently with balance - check: fixed argument parsing for --subvol-extents - fi df: SI prefixes corrected - Added patches: * fix-doc-build-on-SLE11SP3.diff - Removed patches: * 0042-btrfs-progs-fix-linking-with-libbtrfs.patch * 0043-btrfs-progs-libbtrfs-make-exported-headers-compatibl.patch - Modified patches: * 0011-btrfs-progs-Enhance-the-command-btrfs-filesystem-df.patch * 0012-btrfs-progs-Add-helpers-functions-to-handle-the-prin.patch * 0019-btrfs-progs-add-original-df-and-rename-disk_usage-to.patch - version 3.17 - check: --init-csum-tree acutally does something useful, rebuilds the whole csum tree - /dev scanning for btrfs devices is gone - /proc/partitions scanning is gone, blkid is used exclusively - new subcommand subvolume sync - filesystem df: new options to set unit format - convert: allow to copy label from the origin, or specify a new one - Modified patches: * 0011-btrfs-progs-Enhance-the-command-btrfs-filesystem-df.patch * 0012-btrfs-progs-Add-helpers-functions-to-handle-the-prin.patch * 0013-btrfs-progs-Add-command-btrfs-filesystem-disk-usage.patch * 0014-btrfs-progs-Add-btrfs-device-disk-usage-command.patch * 0015-btrfs-progs-cleanup-dead-return-after-usage-for-fi-d.patch * 0016-btrfs-progs-Fix-memleak-in-get_raid56_used.patch * 0017-Btrfs-progs-fi-usage-free-memory-if-realloc-fails.patch * 0019-btrfs-progs-add-original-df-and-rename-disk_usage-to.patch * 0020-btrfs-progs-move-device-usage-to-cmds-device-more-cl.patch * 0021-btrfs-progs-check-if-we-can-t-get-info-from-ioctls-d.patch * 0022-btrfs-progs-zero-out-structures-before-calling-ioctl.patch * 0024-btrfs-progs-Print-more-info-about-device-sizes.patch * 0025-btrfs-progs-compare-unallocated-space-against-the-co.patch * 0026-btrfs-progs-add-section-of-overall-filesystem-usage.patch * 0027-btrfs-progs-cleanup-filesystem-device-usage-code.patch * 0029-btrfs-progs-replace-df_pretty_sizes-with-pretty_size.patch * 0030-btrfs-progs-clean-up-return-codes-and-paths.patch * 0031-btrfs-progs-move-global-reserve-to-overall-summary.patch - Added patches: * 0010-btrfs-progs-move-group-type-and-profile-pretty-print.patch * 0028-btrfs-progs-rework-calculations-of-fi-usage.patch * 0042-btrfs-progs-fix-linking-with-libbtrfs.patch * 0043-btrfs-progs-libbtrfs-make-exported-headers-compatibl.patch - Removed patches: * 0006-Btrfs-progs-fsck-clear-out-log-tree-in-repair-mode.patch * 0007-Btrfs-progs-fsck-avoid-pinning-same-block-several-ti.patch * 0008-Btrfs-progs-fsck-add-ability-to-check-reloc-roots.patch * 0018-btrfs-progs-read-global-reserve-size-from-space-info.patch * 0023-btrfs-progs-print-B-for-bytes.patch * 0028-btrfs-progs-extend-pretty-printers-with-unit-mode.patch * 0164-btrfs-progs-convert-set-label-or-copy-from-origin.patch * 0171-btrfs-progs-make-free-space-checker-work-on-non-4k-s.patch ==== cpio ==== - Do not recommend lang package. The lang package already has a supplements. ==== dracut ==== Version update (049+git108.6c9d1156 -> 049+git112.fe41ccd9) Subpackages: dracut-ima - Update to version 049+git112.fe41ccd9: * dracut: move /var/run and /var/lock from directory to symlink (bsc#1149103, ECO#323) * 35network-legacy: signalize the setup in ifup when dhcp (bsc#1146661) * 35network-legacy: fix typo * 35network-legacy: install hostname required by ifup.sh (bsc#1146661) ==== installation-images-MicroOS ==== Version update (14.435 -> 14.438) - merge gh#openSUSE/installation-images#335 - add /etc/zkey to initrd to ensure it is writable (jsc#SLE-7376) - default udev rules are in /usr/lib - 14.438 - merge gh#openSUSE/installation-images#334 - do not stop haveged process in inst_setup (bsc#1140171) - 14.437 - merge gh#openSUSE/installation-images#332 - move setsid and mount to initrd - 14.436 ==== kernel-firmware ==== Version update (20190827 -> 20190909) Subpackages: ucode-amd - Update to version 20190909 (git-commit 6c6918ad8ae0): * linux-firmware: Update firmware file for Intel Bluetooth AX201 * nvidia: Add XUSB firmware for Tegra186 * Add symlinks for Tegra VIC firmware binaries * rtl_bt: Update RTL8723D BT FW to 0x828A_96F1 * rtl_nic: add firmware rtl8125a-3 * linux-firmware: Add firmware file for Intel Bluetooth AX201 * Chelsio driver loads firmware configuration file to allow firmware to distribute resources before chip bring up. Chelsio NIC driver, cxgb4 searches for firmware config file at /lib/firmware/cxgb4/ directory. - Add dependency on dracut >= 049 (boo#1151552) to compressed f/w packages ==== less ==== Version update (530 -> 551) - less 551: * Add --mouse option * Add --wheel-lines option * Add --no-histdups option * Add --save-marks option * Support PCRE2 regular expression library * Redraw screen on SIGWINCH even if screen size doesn't change * Shell-escape filenames in history so they can be used again * Ring bell if user enters invalid long option name * Use PCRE_UTF8 flag for pcre regular expressions when in UTF-8 mode * Don't count lines in initial screen if using -X with -F * Fix bug in v command on empty file * Fix bug in v command when filename contains shell metacharacters - refresh less-429-shell.patch ==== libcontainers-common ==== Version update (20190802 -> 20190923) - Update to image 1.4.4 - Hard-code the kernel keyring use to be disabled for now - Update to libpod 1.5.1 - The hostname of pods is now set to the pod's name - Minor bugfixes - Update to storage 1.12.16 - Ignore ro mount options in btrfs and windows drivers - Check /var/lib/containers if possible before setting btrfs backend (bsc#1151028) ==== libffi ==== Version update (3.2.1.git259 -> 3.2.1.git505) - Update to commit c2a6859 - gccbug.patch: Update check for gccbug target flag - stdcall.patch: Fix FFI_STDCALL ABI - libffi-riscv.patch: Removed - libffi-include-location.patch: Removed - Add libffi-devel-32bit package. ==== python-Jinja2 ==== - Add patch to work with python 3.8: * python38.patch ==== python-urllib3 ==== Version update (1.25.3 -> 1.25.5) - Restrict the tornado dep from tom to 5 or older release as the 6.x changed the API - Update to 1.25.5: * Add mitigation for BPO-37428 affecting Python <3.7.4 and OpenSSL 1.1.1+ which caused certificate verification to be enabled when using cert_reqs=CERT_NONE. (Issue #1682) * Propagate Retry-After header settings to subsequent retries. (Pull #1607) * Fix edge case where Retry-After header was still respected even when explicitly opted out of. (Pull #1607) * Remove dependency on rfc3986 for URL parsing. * Fix issue where URLs containing invalid characters within Url.auth would raise an exception instead of percent-encoding those characters. * Add support for HTTPResponse.auto_close = False which makes HTTP responses work well with BufferedReaders and other io module features. (Pull #1652) * Percent-encode invalid characters in URL for HTTPConnectionPool.request() (Pull #1673) - Drop patch urllib3-ssl-default-context.patch - Drop patch python-urllib3-recent-date.patch the date is recent enough on its own ==== yast2 ==== Version update (4.2.23 -> 4.2.24) - Fix module name inference when reading .desktop files (bsc#1151954) - 4.2.24 -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20190930 released!
by Richard Brown 02 Oct '19

02 Oct '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: btrfsprogs (5.2.1 -> 5.2.2) certstrap (1.1.1+git20190303.350df15 -> 1.2.0+git20190920.dceba24) cpio dracut (049+git108.6c9d1156 -> 049+git112.fe41ccd9) helm (3.0.0alpha.2 -> 3.0.0beta.3) installation-images-MicroOS (14.435 -> 14.438) kernel-firmware (20190827 -> 20190909) kubernetes (1.15.2 -> 1.15.4) less (530 -> 551) libcontainers-common (20190802 -> 20190923) libffi (3.2.1.git259 -> 3.2.1.git505) patterns-base python-Jinja2 python-urllib3 (1.25.3 -> 1.25.5) yast2 (4.2.23 -> 4.2.24) === Details === ==== btrfsprogs ==== Version update (5.2.1 -> 5.2.2) Subpackages: btrfsprogs-udev-rules libbtrfs0 - Update to 5.2.2: * check: * fix false report of wrong byte count for orphan inodes * option -E was not handled correctly * new check and repair for root item generation * balance: check for full-balance before background fork * mkfs: check that total device size does not overflow 16EiB * dump-tree: print DEV_STATS key type * other: * new and updated tests * doc fixups and updates - update to 5.2.1 * scrub status: fix ETA calculation after resume * check: fix crash when using -Q * restore: fix symlink owner restoration * mkfs: fix regression with mixed block groups * core: fix commit to process all delayed refs * other: * minor cleanups * test updates - update to 5.2 * subvol show: print qgroup information when available * scrub: * status: show ETA, revamp the whole output * fix reading/writing of last position on resume/cancel, potentially skipping part of the filesystem on next resume * dump-tree: add new option --noscan to use only devices given on the commandline * all-in-one binary (busybox style) with mkfs.btrfs, btrfs-image, btrfs-convert, btrfstune * image: fix hang when there are more than 32 cpus online and compression is requested * convert: fix some false ENOSPC errors when --rootdir is used * build: fix gcc9 warnings * core changes * command handling cleanups * dead code removal * cmds-* files moved to cmds/ * other shared userspace files moved to common/ * utils.c split into more files * preparatory work for more output formats * libbtrfsutil: fix unaligned access * other * new and updated tests * fix tests so CI passes again * sb-mod can modify more superblock items - update to version 5.1 * repair: flush/FUA support to avoid breaking metadata COW * file extents repair no longer relies on data in extent tree * lowmem: fix false error reports about gaps between extents * add inode mode check and repair for various objects * add check for invalid combination of nocow/compressed extents * device scan option to forget scanned devices [new] * mkfs: use same chunk size as kernel for initial creation * dev-repace: better report when other exclusive operation runs * help for sntax errors on command lines, print relevant msgs * defrag: able to open files in RO mode * dump-tree: --block can be specified multiple times - update to version 4.20.2 * dump-super: minor output fixup * revert fix for prefix detection of receive path, this is temporary and unbreaks existing user setups - Use correct path for dracut-fsck-help.txt in module-setup.sh (bsc#1122539) * Remove module-setup.sh * Add module-setup.sh.in - Advise user of fs recovery options when we fail to mount (fate#320443, bsc#1122539) * Add dracut-fsck-help.txt * Add module-setup.sh - update to version 4.20.1 * libbtrfs: fix build of external tools due to missing symbols * ci: enable library test - update to version 4.20 * new feature: metadata uuid * lightweight change of UUID without rewriting all metadata (incompatible change) * done by btrfstune -m/-M, needs kernel support, 5.0+ * image: * fix block groups when restoring from multi-device image * only enlarge result image if it's a regular file * check * more device extent checks and fixes * can repair dir item with mismatched hash * mkfs: uuid tree created with proper contents * fix mount point detection due to partial prefix match * other: * new tests, build fixes, doc updates * libbtrfsutil: fix tests if kernel lacks support for new subvolume ioctls - partial cleanup with spec-cleaner - drop 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch - drop 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch - drop 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch - drop 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch - drop 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch - Use %license instead of %doc [bsc#1082318] - Implement fate#325871 * Added 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch * Added 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch * Added 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch * Added 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch * Added 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch - update to version 4.19.1 * check * many lowmem mode improvements * properly report qgroup mismatch errors * check symlinks with append/immutable flags * fi usage * correctly calculate allocated/unallocated for raid10 * minor output updates * mkfs * detect ENOSPC on thinly provisioned devices * fix spurious EEXIST during directory traversal * restore: fix relative path for restore target * dump-tree: print symbolic tree names for backrefs * send: fix regression preventing send -p with subvolumes mounted on "/" * corrupt-tree: refactoring and command line updates * build * make it work with e2fsprogs < 1.42 again * restore support for autoconf 2.63 * detect if -std=gnu90 is supported * other * new tests * cleanups - update to version 4.19 * check: support repair of fs with free-space-tree feature * core: * port delayed ref infrastructure from kernel * support write to free space tree * dump-tree: new options for BFS and DFS enumeration of b-trees * quota: rescan is now done automatically after 'assign' * btrfstune: incomplete fix to uuid change * subvol: fix 255 char limit checks * completion: complete block devices and now regular files too * docs: * ship uncompressed manual pages * btrfsck uses a manual page link instead of symlink * other * improved error handling * docs * new tests - update to version 4.17.1 * check: * add ability to fix wrong ram_bytes for compressed inline files * beautify progress output * btrfstune: allow to continue uuid change after unclean interruption * several fuzz fixes: * detect overalpping chunks * chunk loading error handling * don't crash with unexpected root refs to extents * relax option parsing again to allow mixing options and non-options arguments * fix qgroup rescan status reporting * build: * drop obsolete dir-test * new configure option to disable building of tools * add compatibility options --disable-static and --disable-shared * other: * cleanups and preparatory work * new test images - spec cleanup - update to version 4.17 * check * many lowmem mode improvements * properly report qgroup mismatch errors * check symlinks with append/immutable flags * fi usage * correctly calculate allocated/unallocated for raid10 * minor output updates * mkfs * detect ENOSPC on thinly provisioned devices * fix spurious EEXIST during directory traversal * restore: fix relative path for restore target * dump-tree: print symbolic tree names for backrefs * send: fix regression preventing send -p with subvolumes mounted on "/" * corrupt-tree: refactoring and command line updates * build * make it work with e2fsprogs < 1.42 again * restore support for autoconf 2.63 * detect if -std=gnu90 is supported - Removed patches (upstreamed): * 0001-btrfs-progs-convert-fix-support-for-e2fsprogs-1.42.patch * 0002-btrfs-progs-build-autoconf-2.63-compatibility.patch * 0003-btrfs-progs-build-detect-whether-std-gnu90-is-suppor.patch - Don't require libzstd-devel-static on builds that don't use it. - fix installation of btrfs.5.gz - Fix building on SLE11: * btrfs-progs: convert: fix support for e2fsprogs < 1.42 * btrfs-progs: build: detect whether -std=gnu90 is supported * btrfs-progs: build: autoconf 2.63 compatibility * Fixed mismerged addition of libbtrfsutil1 package description - Added patches: * 0001-btrfs-progs-convert-fix-support-for-e2fsprogs-1.42.patch * 0002-btrfs-progs-build-autoconf-2.63-compatibility.patch * 0003-btrfs-progs-build-detect-whether-std-gnu90-is-suppor.patch - update to version 4.16.1 * remove obsolete tools: btrfs-debug-tree, btrfs-zero-log, btrfs-show-super, btrfs-calc-size * sb-mod: new debugging tool to edit superblock items * mkfs: detect if thin-provisioned device does not have enough space * check: don't try to verify checksums on metadata dump images * build: fail documentation build if xmlto is not found * build: fix build of btrfs.static - Remove patch: 0001-btrfs-progs-build-fix-static-build.patch (upstream) - Update initrd script - update to version 4.16 * libbtrfsutil - new LGPL library to wrap userspace functionality * several 'btrfs' commands converted to use it: * properties * filesystem sync * subvolume set-default/get-default/delete/show/sync * python bindings, tests * build * use configured pkg-config path * CI: add python, musl/clang, built dependencies caching * convert: build fix for e2fsprogs 1.44+ * don't install library links with wrong permissions * fixes * prevent incorrect use of subvol_strip_mountpoint * dump-super: don't verify csum for unknown type * convert: fix inline extent creation condition * check: * lowmem: fix false alert for 'data extent backref lost for snapshot' * lowmem: fix false alert for orphan inode * lowmem: fix false alert for shared prealloc extents * mkfs: * add UUID and otime to root of FS_TREE - with the uuid, snapshots will be now linked to the toplevel subvol by the parent UUID * don't follow symlinks when calculating size * pre-create the UUID tree * fix --rootdir with selinux enabled * dump-tree: add option to print only children nodes of a given block * image: handle missing device for RAID1 * other * new tests * test script cleanups (quoting, helpers) * tool to edit superblocks * updated docs - Add patch: 0001-btrfs-progs-build-fix-static-build.patch - Add new library packages: libbtrfsutil - use documentation shipped by upstream tar, reduce dependencies - enable static build again, zstd now has static version - update to version 4.15 * mkfs --rootdir reworked, does not minimize the final image but can be still done using a new option --shrink * fix allocation of system chunk, don't allocate from the reserved area * other * new and updated tests * cleanups, refactoring * doc updates - spec: fix distro version condition - update to version 4.14.1 * dump-tree: print times of root items * check: fix several lowmem mode bugs * convert: fix rollback after balance * other * new and updated tests, enabled lowmem mode in CI * docs updates * fix travis CI build * build fixes * cleanups - update to version 4.14 * build: libzstd now required by default * check: more lowmem mode repair enhancements * subvol set-default: also accept path * prop set: compression accepts no/none, same as "" * filesystem usage: enable for filesystem on top of a seed device * rescue: new command fix-device-size * other * new tests * cleanups and refactoring * doc updates - Removed patches: - rollback-regression-fix.patch - upstreamed - spec: disable static build, missing libzstd-devel-static - spec: disable zstd support for non-Tumbleweed distros - Fix rollback regression which can lead to data corruption Added patches: rollback-regression-fix.patch (bsc#1069478) - Escape the usage of %{VERSION} when calling out to rpm. RPM 4.14 has %{VERSION} defined as 'the main packages version'. - Add dependencies for libreiserfscore0 3.6.27 or newer (bsc#1071085). - update to version 4.13.3: * check: fix --force, wrong check for a mounted block device * build: fix --with-convert parsing * subvol list: don't list TOPLEVEL * other: update tests - update to version 4.13.2: * subvol list: * don't list toplevel subvolume among deleted (broken since 4.8.3) * minor adjustments of uuid print format * subvol delete: * fix swapped behaviour of --commit-each and --commit-after * fix potentially lost sync if subvolumes are from different filesystems * check: add cache for metadata blocks, should improve performance * other: * new tests, testsuite updates * doc updates * cleanups - update to version 4.13.1: * image: speed up generating the sanitized names, do not generate unprintable chars * completion: add missing commands, better mount point detection * restore: add zstd support; libzstd detected automatically, will be requested by default in the future, or can be configured out * other: * misc fixes found by sparse * doc enhancements, ioctl manual page started * updated and new tests * build fixes - update to version 4.13: * convert: reiserfs support * check: new option --force to allow check of a mounted filesystem (no repair) * mkfs: --rootdir will now copy special files * dump-tree: minor output changes * inspect rootid: accept file as arugment * dev usage: don't calculate slack space for missing devices * fi du: don't print error on EMPTY_SUBVOL (inode number 2) * build: * fixed support for sanitization features on gcc (tsan, asan, ubsan) * fix PIE build * other: * misc cleanups and stability fixes * travis CI enhancements * new tests, fuzzed images * testsuite cleanups - Removed patches: - 0163-btrfs-progs-fsck-fix-segfault.patch - will be upstreamed - local-version-override.patch - not needed anymore - btrfs-support-pie.patch - upstremed - Removed patches: - 0167-Btrfs-progs-make-find_and_setup_root-return-an-error.patch - 0168-Btrfs-progs-don-t-bug-out-if-we-can-t-find-the-last-.patch - update to 4.12.1 * build: * fix cross-compilation * use gnu90 explicitly * dump-tree: more relaxed checks so -b can print block on a damaged fs * convert: fix the 1MB range exclusion * check: more dir_item hash checks * other * added missing getopt spec for some options * doc fixes * cleanups * test updates - update to 4.12 * subvol show: new options --rootid, --uuid to show subvol by the given spec * convert: progress report fixes, found by tsan * image: progress report fixes, found by tsan * fix infinite looping in find-root, or when looking for free extents * other: * code refactoring * docs updates * build: ThreadSanitizer support * tests: stricter checks for mounted filesystem - update to -4.11.1 * image: restoring from multiple devices * dev stats: make --check option work * check: fix false alert with extent hole on a NO_HOLE filesystem * check: lowmem mode, fix false alert in case of mixed inline and compressed extent * convert: work with large filesystems (many TB) * convert: fix overwriting of eb header flags * convert: do not clear NODATASUM flag in inodes when run with --no-datasum * docs updates * build: sync Android.mk with Makefile * tests: * new tests * fix 008 and 009, shell quotation mistake - update to 4.11 * receive: fix handling empty stream with -e (multi-stream) * send dump: fix printing long file names * stability fixes for: dump-super, print-tree, check * option parser updates: global options are parsed before the subcommand name (old xfstests will fail) * new and updated tests * documentation updates - btrfs-support-pie.patch: remove CFLAGS usage from linker lines, this will allow the default PIE support to work. - update to 4.10.2 * check: lowmem mode fix for false alert about lost backrefs * convert: minor bugfix * library: fix build, misisng symbols, added tests - update to 4.10.1 * receive: handle subvolume in path clone * convert: rollback fixed (rewrite was needed to address previous design issues) * build: fix build of 3rd party tools, missing <linux/sizes.h> * dump-tree: print log trees * other: new and updated tests - update to 4.10 * send: dump output fixes: missing newlies * check: several fixes for the lowmem mode, improved error reporting * build * removed some library deps for binaries that not use them * ctags, cscope * split Makefile to the autotool generated part and the rest, not needed to autogen.sh after adding a file * shared code: sync easy parts with kernel sources * other * lots of cleanups * source file reorganization: convert, mkfs, utils * lots of spelling fixes in docs, other updates * more tests - update to 4.9.1 * check: * use correct inode number for lost+found files * lowmem mode: fix false alert on dropped leaf * size reports: negative numbers might appear in size reports during device deletes (previously in EiB units) * mkfs: print device being trimmed * defrag: v1 ioctl support dropped * quota: print message before starting to wait for rescan * qgroup show: new option to sync before printing the stats * other: * corrupt-block enhancements * backtrace and co. cleanups * doc fixes - update to 4.9 * check: many lowmem mode updates * send: use splice syscall to copy buffer from kernel * receive: new option to dump the stream in textual form * convert: * move sources to own directory * prevent accounting of blocks beyond end of the device * make it work with 64k sectorsize * mkfs: move sources to own directory * defrag: warns if directory used without -r * dev stats: * new option to check stats for non-zero values * add long option for -z * library: version bump to 0.1.2, added subvol_uuid_search2 * other: * cleanups * docs updates - update to 4.8.5 * receive: fix detection of end of stream (error reported even for valid streams) * other: * added test for the receive bug * fix linking of library-test - update to 4.8.4 * check: support for clearing space cache v2 (free-space-tree) * send: * more sanity checks (with tests), cleanups * fix for fstests/btrfs/038 and btrfs/117 failures * build: * fix compilation of standalone ioctl.h, pull NULL definition * fix library link errors introduced in 4.8.3 * tests: * add more fuzzed images from bugzilla * add bogus send stream checks * fixups and enhancements for CI environment builds * misc refinements and updates of testing framework * other: * move sources for btrfs-image to own directory * deprecated and not build by default: btrfs-calc-size, btrfs-show-super * docs updates - update to 4.8.3 * check: * support for clearing space cache (v1) * size reduction of inode backref structure * send: * fix handling of multiple snapshots (-p and -c options) * transfer buffer increased (should reduce number of context switches) * reuse existing file for output (-f), eg. when root cannot create files (NFS) * dump-tree: * print missing items for various structures * new: dev stats, balance status item * sync key names with kernel (the persistent items) * subvol show: now able to print the toplevel subvolume -- the creation time might be wrong though * mkfs: * store the creation time of toplevel root inode * print UUID in the summary * build: travis CI for devel * other: * lots of cleanups and refactoring * switched to on-stack path structure * fixes from coverity, asan, ubsan * new tests * updates in testing infrastructure * fixed convert test 005 - update to 4.8.2 * convert: also convert file attributes * convert: fix wrong tree block alignment for unalianged block group * check: quota verify fixes, handle reloc tree * build: add stub for FIEMAP_EXTENT_SHARED, compiles on ancient kernels * build: add stub for BUILD_ASSERT when ioctl.h is included * dump-tree: don't crash on unrecognized tree id for -t * tests: * add more ioctl tests * convert: more symlink tests, attribute tests * quota verify for reloc tree * other cleanups - Add ability to provide site specific defaults for mkfs (FATE#320615). * Only used for SLES11 defaults. - Added patch mkfs-default-features.patch - update to 4.8.1 * 32bit builds fixed * build without backtrace support fixed - update to 4.8 * error handling improvements all over the place * new fuzzed images, test updates * doc fixups * minor cleanups and improvements * kernel library helpers moved to own directory * qgroup: fix regression leading to incorrect status after check, introduced in 4.7 - update to 4.7.3 * fixed free space tree compat status * check: low-mem mode: handle partially dropped snapshots * dump-super: consolidate options for superblock copy * tree-stats: check mount status * subvol delete: handle verbosity option * defrag: print correct error string * mkfs: fix reading rotational status * other: * UBSAN build option * documentation updates * enhanced tests: convert, fuzzed images, more tools to run on fuzzed images - removed btrfsprogs-only-install-udev-rules-for-udev-190.patch: fix build - update to 4.7.2 * check: * urgent fix: false report of backref mismatches; do not --repair last unaffected version 4.6.1 (code reverted to that state) * fuzzing and fixes * added more sanity checks for various structures * testing images added * build: udev compatibility: do not install .rules on version < 190 * other: * dump-super: do not crash on garbage value in csum_type * minor improvements in messages and help strings * documentation: * filesystem features - Add new btrfsprogs-udev-rules package to contain the udev rules. - Fix packaging for udev rules: - btrfs builtin didn't exist prior to udev v190, so the rules must depend on that version. - Added patch: * btrfsprogs-only-install-udev-rules-for-udev-190.patch - update to 4.7.1 * check: * new optional mode: optimized for low memory usage (memory/io tradeoff) * --mode=lowmem, not default, still considered experimental * does not work with --repair yet * convert: regression fix, ext2_subvol/image rw permissions * mkfs/convert: * two-staged creation, partially created filesystem will not be recognized * improved error handling (fewer BUG_ONs) * convert: preparation for more filesystems to convert from * documentation updates: quota, qgroup * other * message updates * more tests * more build options, enhanced debugging - update to 4.7 * convert: fix creating discontig extents * check: speed up traversing heavily reflinked extents within a file * check: verify qgroups of higher levels * check: repair can now fix wrong qgroup numbers * balance: new option to run in the background * defrag: default extent target size changed to 32MiB * du: silently skip non-btrfs dirs/files * documentation updates: btrfs(5), btrfs(8), balance, subvolume, scrub, filesystem, convert * bugfixes: * unaligned access (reported for sparc64) in raid56 parity calculations * use /bin/bash * other stability fixes and cleanups * more tests - Removed patches: * 0002-btrfs-progs-btrfsck-verify-qgroups-above-level-0.patch * 0003-btrfs-progs-btrfsck-write-corrected-qgroup-info-to-d.patch - update to 4.6.1 * fi resize: negative resize argument accepted again * qgroup rescan: fix skipping when rescan is in progress * mkfs: initialize stripesize to correct value * testsuite updates, mostly convert tests * documentation updates * btrfs-device, btrfs-restore manual pages enhanced * misc fixups - update to 4.6 * convert - major rewrite: * fix a long-standing bug that led to mixing data blocks into metadata block groups * the workaround was to do full balance after conversion, which was recommended practice anyway * explicitly set the lowest supported version of e2fstools to 1.41 * provide and install udev rules file that addresses problems with device mapper devices, renames after removal * send: new option: quiet * dev usage: report slack space (device size minus filesystem area on the dev) * image: support DUP * build: short options to enable debugging builds * other: * code cleanups * build fixes * more tests and other enhancements * Removed patches: * 0001-btrfs-progs-free-qgroup-counts-in-btrfsck.patch * 0169-btrfs-progs-udev-add-rules-for-dm-devices.patch * btrfs-progs-no-PKG_CHECK_VAR - btrfsck updates for qgroup verification and repair (fate#318144) * We can now check all qgroup levels * btrfsck will write out corrected qgroups when run with --repair - Added patch: 0001-btrfs-progs-free-qgroup-counts-in-btrfsck.patch - Added patch: 0002-btrfs-progs-btrfsck-verify-qgroups-above-level-0.patch - Added patch: 0003-btrfs-progs-btrfsck-write-corrected-qgroup-info-to-d.patch - update to 4.5.3 * ioctl: fix unaligned access in buffer from TREE_SEARCH; might cause SIGBUS on architectures that do not support unaligned access and do not performa any fixups * improved validation checks of superblock and chunk-related structures * subvolume sync: fix handling of -s option * balance: adjust timing of safety delay countdown with --full-balance * rescue super-recover: fix reversed condition check * check: fix bytes_used accounting * documentation updates: mount options, scrub, send, receive, select-super, check, mkfs * testing: new fuzzed images, for superblock and chunks - fix build failure on 13.1: conditional default for udevdir - fix build failure on SLE11SP4: wrong check in makefile - Add udev rules for dm devices (bsc#912170 bsc#888215) - Added patch: 0169-btrfs-progs-udev-add-rules-for-dm-devices.patch - Added patch: btrfs-progs-no-PKG_CHECK_VAR - update to 4.5.2 * new/moved command: btrfs-calc-stats -> btrfs inspect tree-stats * check: fix false alert for metadata blocks crossing stripe boundary * check: catch when qgroup numbers mismatch * check: detect running quota rescan and report mismatches * balance start: add safety delay before doing a full balance * fi sync: is now silent * fi show: don't miss filesystems with partially matching uuids * dev ready: accept only one argument for device * dev stats: print "devid:N" for a missing device instead of "(null)" * other: * lowest supported version of e2fsprogs is 1.41 * minor cleanups, test updates - Removed patch: 2000-btrfs-full-balance-warning.diff - update to 4.5.1 * mkfs: allow DUP on multidev fs * fix static build - update to 4.5 * new/moved commands * btrfs-show-super -> btrfs inspect-internal dump-super * btrfs-debug-tree -> btrfs inspect-internal dump-tree * new commands * btrfs fi du - calculate disk usage, including shared extents * enhancements * device delete - delete by id (needs kernel support, not merged to 4.6) * check - new option to specify chunk root * debug-tree/dump-tree - option -t understands human readable name of the tree (along numerical ids) * btrfs-debugfs - can dump block group information * bugfixes * all commands should accept the option separator "--" * several fixes in device scan * restore works on filesystems with sectorsize > 4k * debug-tree/dump-tree - print compression type as string * subvol sync: fix crash, memory corruption * argument parsing fixes: subvol get-default, qgroup create/destroy/assign, inspect subvolid-resolve * check for block device or regular file in several commands * other * documentation updates * manual pages for the moved tools now point to btrfs-filesystem * testsuite updates - Removed patch (upstream): 0001-btrfs-progs-libbtrfs-remove-max-min-macros-from-API.patch - Recommend btrfsmaintenance - hide min/max macros clashing with gcc 6 (bnc#966257) (0001-btrfs-progs-libbtrfs-remove-max-min-macros-from-API.patch) - update to 4.4.1 * find-root: don't skip the first chunk * free-space-tree compat bits fix * build: target symlinks * documentation updates * test updates - update to 4.4 * mkfs.btrfs --data dup * support balance filters added/enhanced in linux 4.4 * manual pages enhanced (btrfs, mkfs, mount, filesystem, balance) * 'btrfs filesystem usage' works with mixed blockgroups * build: installation to /usr/local * build: the 'ar' tool is properly deteced during cross-compilation * improved stability on fuzzed/crafted images when reading sys array in superblock * debug-tree: option -t understands ids for tree root and chnuk tree * check: properly reset nlink of multi-linked file * chunk recovery: fix floating point exception * chunk recovery: endianity bugfix during rebuild * mkfs with 64K pages and nodesize reported superblock checksum mismatch - Removed patches: * 0001-btrfs-progs-mkfs-use-correct-size-for-superblock-csu.patch * fix-doc-build-on-SLE11SP3.diff - Fix missing dependency on coreutils for initrd macros (boo#958562) - Call missing initrd macro at post / postun (boo#958562) - fix mkfs failure on ppc64 (or with sectorsize > 4k) (bsc#956819) - Added patch: 0001-btrfs-progs-mkfs-use-correct-size-for-superblock-csu.patch - update to 4.3.1 * fixes * device delete: recognize 'missing' again * mkfs: long names are not trimmed when doing ssd check * support partitioned loop devices * other * replace several mallocs with on-stack variables * more memory allocation failure handling * add tests for bugs fixed * cmd-device: switch to new message printing helpers * minor code cleanups - update to 4.3 * mkfs * mixed mode is not forced for filesystems smaller than 1GiB * mixed mode broken with mismatching sectorsize and nodesize, fixed * print version info earlier * print devices sorted by id * do not truncate target image with --rootsize * fi usage: * don't print global block reserve * print device id * minor output tuning * other cleanups * calc-size: * div-by-zero fix on an empty filesystem * fix crash * bugfixes: * more superblock sanity checks * consistently round size of all devices down to sectorsize * misc leak fixes * convert: don't try to rollback with a half-deleted ext2_saved subvolume * other: * check: add progress indicator * scrub: enahced error message * show-super: read superblock from a given offset * add README * docs: update manual page for mkfs.btrfs, btrfstune, balance, convert and inspect-internal * build: optional build with more warnings (W=...) * build: better support for static checkers * build: html output of documentation * pretty-print: last_snapshot for root_item * pretty-print: stripe dev uuid * error reporting wrappers, introduced and example use * refactor open_file_or_dir * other docs and help updates * testing: * test for nodes crossing stripes * test for broken 'subvolume sync' * basic tests for mkfs, raid option combinations * basic tests for fuzzed images (check) * command intrumentation (eg valgrind) * print commands if requested * add README for tests - build btrfsprogs-static package for 13.2 and Factory, package with static versions of the utilities, aimed for rescue environments - update to 4.2.3 - subvol sync: make it actually work again - scanning: do not scan already discovered filesystems (minor optimization) - convert: better error message in case the filesystem is not finalized - restore: off-by-one symlink path check fix - update to 4.2.2 - fi label: use fallback if the label ioctl is not available - convert: check nodesize constraints against commandline features (-O) - scrub: report status 'running' until all devices are finished - device scanning might crash in some scenarios - fi usage: print summary for non-root users - update to 4.2.1 - fix an off-by-one error in cross-stripe boundary check - convert: don't write uninitialized data to image - image: don't loop with option -t0 - image: don't create threads if compression is not requested - Removed patches: * 0001-btrfs-progs-fix-cross-stripe-boundary-check.patch - make mkfs work with 64k nodesize again, notably fixes mkfs on ppc64 (bsc#945229) - Added patch: * 0001-btrfs-progs-fix-cross-stripe-boundary-check.patch - version 4.2 * enhancements: * mkfs: do not create extra single chunks on multiple devices * resize: try to guess the minimal size, 'inspect min-dev-size' * qgroup assign: add option to schedule rescan * chunk-recover: be more verbose about the scanning process * fixes: * check: * find stripes crossing stripe boundary -- created by convert * print correct range for file hole when there are no extents and learn how to fix it * replace: more sanity checks * convert: concurrency fixes related to reporting progress * find-root: option -a will not skip the current root anymore * subvol list: fix occasional crash * do not create stripes crossing stripe boundary * build: * fixes for musl libc * preliminary support for android (not working yet, more code changes needed) * new EXTRA_CFLAGS and EXTRA_LDFLAGS * other: * lots of cleanups * tests: lots of updates, new tests, framework improvements * documentation updates * debugging: print-tree shows stripe length - Removed patches (upstreamed): * 2104-get-min-size-for-resize.patch * 2105-move-min-resize-implementation-to-inspec.patch * 2106-inspect-add-command-min-dev-size.patch - add warning before full balance starts (bsc#940467, fate#319317) - Added patches: 2000-btrfs-full-balance-warning.diff - Add feature to get minimum size a filesystem can be resized to (FATE#317897). - Added patches: * 2104-get-min-size-for-resize.patch * 2105-move-min-resize-implementation-to-inspec.patch * 2106-inspect-add-command-min-dev-size.patch - version 4.1.2 - mkfs: bugfix, previous version does not create entierly correct filesystem (has to be recreated) - version 4.1.1 * bugfixes - defrag: threshold overflow fix - fsck: - check if items fit into the leaf space - fix wrong nbytes - mkfs: - create only desired block groups for single device - preparatory work for fix on multiple devices * enhancements - new alias for 'device delete': 'device remove' * other - fix compilation on old gcc (4.3) - documentation updates - debug-tree: print nbytes - test: image for corrupted nbytes - corupt-block: let it kill nbytes - spec: drop libacl dependency - version 4.1 * bugfixes - fsck.btrfs: no bash-isms - bugzilla 97171: invalid memory access (with tests) - receive: - cloning works with --chroot - capabilities not lost - mkfs: do not try to register bare file images - option --help accepted by the standalone utilities * enhancements - corrupt block: ability to remove csums - mkfs: - warn if metadata redundancy is lower than for data - options to make the output quiet (only errors) - mixed case names of raid profiles accepted - rework the output: - more comprehensive, 'key: value' format - subvol: - show: - print received uuid - update the output - new options to specify size units - sync: - grab all deleted ids and print them as they're removed, previous implementation only checked if there are any to be deleted - change in command semantics - scrub: print timestamps in days HMS format - receive: - can specify mount point, do not rely on /proc - can work inside subvolumes - send: - new option to send stream without data (NO_FILE_DATA) - convert: - specify incompat features on the new fs - qgroup: - show: distinguish no limits and 0 limit value - limit: ability to clear the limit - help for 'btrfs' is shorter, 1st level command overview - debug tree: print key names according to their C name * new - rescure zero-log - btrfsune: - rewrite uuid on a filesystem image - new option to turn on NO_HOLES incompat feature * deprecated - standalone btrfs-zero-log * other - testing framework updates - uuid rewrite test - btrfstune feature setting test - zero-log tests - more testing image formats - manual page updates - ioctl.h synced with current kernel uapi version - convert: preparatory works for more filesystems (reiserfs pending) - use static buffers for path handling where possible - add new helpers for send uilts that check memory allocations, switch all users, deprecate old helpers - Makefile: fix build dependency generation - map-logical: make it work again - Install bash completion for btrfs. - version 4.0 * resize: * don't accept file as an argument (it's confusing) * print better error message in case of an error * restore: optionally restore metadata (time, mode, uid/gid) * receive: optionally enforce chroot * new rescue subcommand 'zero-log', same as btrfs-zero-log, but now also part of the main utility * check: * free space checks match kernel, fixes incorrect reports * convert: fix setting of checksum bit if --no-datasum is used * fsck.btrfs: don't print messages * fix quota rescan on PPC64 (mangled ioctl number) * test updates * documentation: files renamed to .asciidoc, misc fixups - version 3.19.1 - convert: - new option to specify metadata block size - --no-progress actually works - restore: properly handle the page boundary corner case - build fixes: - missing macro from public header, BTRFS_BUILD_VERSION - wrong handling of --enable-convert - fi usage: reports correct space for degraded mounts - other: - mkfs: help string updates - completion: added 'usage' subcommands - cleanups in qgroup code, preparatory work - version 3.19 - btrfs-image - restore can now run in parallel threads - fixed restore of multiple image from multiple devices onto a single dev - introduced metadump v2 - check - make --init-csum-tree and --init-extent-tree work together - find-new - option to search through all metadata even if a root was already found - convert - show progress by default, can be turned off - corrupt-block - option to work on a specific root - bash completion script for all subcommands - spec: convert to autotools Removed patch 0169-btrfs-progs-Check-metadata-mirrors-in-find-root.patch - add COPYING - version 3.18.2 * qgroup show: print human readable sizes, options to say otherwise * check: new option to explicitly say no to writes * mkfs: message about trimming is not printed to stderr * fi show: fixed return value * tests: new infrastructure * btrfstune: force flag can be used together with seeding option * backtrace support is back * getopt cleanups * doc and help updates - version 3.18.1 - minor fixes - documentation updates - version 3.18 - mkfs - skinny-metadata feature is now on by default, first introduced in kernel 3.10 - filesystem usage - give an overview of fs usage in a way that's more comprehensible than existing 'fi df' - device usage - more detailed information about per-device allocations - check: - option to set a different tree root byte number - ability to link lost files to lost+found, caused by a recent kernel bug - repair of severely corrupted fs (use with care) - convert - option to show progress - subvol create - print the commit mode inline, print the global mode only if --verbose - other updates: musl-libc support, coverity bugfixes, new test images, documentation - Removed patches (upstreamed): * 0010-btrfs-progs-move-group-type-and-profile-pretty-print.patch * 0011-btrfs-progs-Enhance-the-command-btrfs-filesystem-df.patch * 0012-btrfs-progs-Add-helpers-functions-to-handle-the-prin.patch * 0013-btrfs-progs-Add-command-btrfs-filesystem-disk-usage.patch * 0014-btrfs-progs-Add-btrfs-device-disk-usage-command.patch * 0015-btrfs-progs-cleanup-dead-return-after-usage-for-fi-d.patch * 0016-btrfs-progs-Fix-memleak-in-get_raid56_used.patch * 0017-Btrfs-progs-fi-usage-free-memory-if-realloc-fails.patch * 0019-btrfs-progs-add-original-df-and-rename-disk_usage-to.patch * 0020-btrfs-progs-move-device-usage-to-cmds-device-more-cl.patch * 0021-btrfs-progs-check-if-we-can-t-get-info-from-ioctls-d.patch * 0022-btrfs-progs-zero-out-structures-before-calling-ioctl.patch * 0024-btrfs-progs-Print-more-info-about-device-sizes.patch * 0025-btrfs-progs-compare-unallocated-space-against-the-co.patch * 0026-btrfs-progs-add-section-of-overall-filesystem-usage.patch * 0027-btrfs-progs-cleanup-filesystem-device-usage-code.patch * 0028-btrfs-progs-rework-calculations-of-fi-usage.patch * 0029-btrfs-progs-replace-df_pretty_sizes-with-pretty_size.patch * 0030-btrfs-progs-clean-up-return-codes-and-paths.patch * 0031-btrfs-progs-move-global-reserve-to-overall-summary.patch - version 3.17.3 - convert: fix conversion of sparse ext* filesystems - show: resolve to the correct path - fsck: more verbose error for root dir problems - version 3.17.2 - check improvements - add ability to replace missing dir item/dir indexes - fix missing inode items - create missing root dirid - corrupt block: enhancements for testing fsck - zero-log: able to reset a fs with bogus log tree pointer (bko#72151) - package mkinitrd scripts conditionally (bsc#893577) - spec: minor updates - version 3.17.1 - fi df: argument handling - fix linking with libbtrfs - replace: better error reporting - fi show: fixed stall if run concurrently with balance - check: fixed argument parsing for --subvol-extents - fi df: SI prefixes corrected - Added patches: * fix-doc-build-on-SLE11SP3.diff - Removed patches: * 0042-btrfs-progs-fix-linking-with-libbtrfs.patch * 0043-btrfs-progs-libbtrfs-make-exported-headers-compatibl.patch - Modified patches: * 0011-btrfs-progs-Enhance-the-command-btrfs-filesystem-df.patch * 0012-btrfs-progs-Add-helpers-functions-to-handle-the-prin.patch * 0019-btrfs-progs-add-original-df-and-rename-disk_usage-to.patch - version 3.17 - check: --init-csum-tree acutally does something useful, rebuilds the whole csum tree - /dev scanning for btrfs devices is gone - /proc/partitions scanning is gone, blkid is used exclusively - new subcommand subvolume sync - filesystem df: new options to set unit format - convert: allow to copy label from the origin, or specify a new one - Modified patches: * 0011-btrfs-progs-Enhance-the-command-btrfs-filesystem-df.patch * 0012-btrfs-progs-Add-helpers-functions-to-handle-the-prin.patch * 0013-btrfs-progs-Add-command-btrfs-filesystem-disk-usage.patch * 0014-btrfs-progs-Add-btrfs-device-disk-usage-command.patch * 0015-btrfs-progs-cleanup-dead-return-after-usage-for-fi-d.patch * 0016-btrfs-progs-Fix-memleak-in-get_raid56_used.patch * 0017-Btrfs-progs-fi-usage-free-memory-if-realloc-fails.patch * 0019-btrfs-progs-add-original-df-and-rename-disk_usage-to.patch * 0020-btrfs-progs-move-device-usage-to-cmds-device-more-cl.patch * 0021-btrfs-progs-check-if-we-can-t-get-info-from-ioctls-d.patch * 0022-btrfs-progs-zero-out-structures-before-calling-ioctl.patch * 0024-btrfs-progs-Print-more-info-about-device-sizes.patch * 0025-btrfs-progs-compare-unallocated-space-against-the-co.patch * 0026-btrfs-progs-add-section-of-overall-filesystem-usage.patch * 0027-btrfs-progs-cleanup-filesystem-device-usage-code.patch * 0029-btrfs-progs-replace-df_pretty_sizes-with-pretty_size.patch * 0030-btrfs-progs-clean-up-return-codes-and-paths.patch * 0031-btrfs-progs-move-global-reserve-to-overall-summary.patch - Added patches: * 0010-btrfs-progs-move-group-type-and-profile-pretty-print.patch * 0028-btrfs-progs-rework-calculations-of-fi-usage.patch * 0042-btrfs-progs-fix-linking-with-libbtrfs.patch * 0043-btrfs-progs-libbtrfs-make-exported-headers-compatibl.patch - Removed patches: * 0006-Btrfs-progs-fsck-clear-out-log-tree-in-repair-mode.patch * 0007-Btrfs-progs-fsck-avoid-pinning-same-block-several-ti.patch * 0008-Btrfs-progs-fsck-add-ability-to-check-reloc-roots.patch * 0018-btrfs-progs-read-global-reserve-size-from-space-info.patch * 0023-btrfs-progs-print-B-for-bytes.patch * 0028-btrfs-progs-extend-pretty-printers-with-unit-mode.patch * 0164-btrfs-progs-convert-set-label-or-copy-from-origin.patch * 0171-btrfs-progs-make-free-space-checker-work-on-non-4k-s.patch ==== certstrap ==== Version update (1.1.1+git20190303.350df15 -> 1.2.0+git20190920.dceba24) - Build pie binary - Update to version 1.2.0+git20190920.dceba24: * Bump Go to 1.13 * Automatically inject version from tag in CI * Bump github.com/urfave/cli from 1.21.0 to 1.22.1 * Allow to override default file inputs and outputs * Bump github.com/urfave/cli from 1.20.0 to 1.21.0 * avoid using global variables ==== cpio ==== - Do not recommend lang package. The lang package already has a supplements. ==== dracut ==== Version update (049+git108.6c9d1156 -> 049+git112.fe41ccd9) Subpackages: dracut-ima - Update to version 049+git112.fe41ccd9: * dracut: move /var/run and /var/lock from directory to symlink (bsc#1149103, ECO#323) * 35network-legacy: signalize the setup in ifup when dhcp (bsc#1146661) * 35network-legacy: fix typo * 35network-legacy: install hostname required by ifup.sh (bsc#1146661) ==== helm ==== Version update (3.0.0alpha.2 -> 3.0.0beta.3) - Update to version 3.0.0beta.3: * fix(pkg/cli): do not override users xdg directories * Unifity environment variable naming and use * Displaying environment variables in alphanum order for env cmd * Remove ability to have duplicates in environment variables * fix: clear the discovery cache after CRDs are installed (#6332) * ref(pkg/engine): cleanup of development `hack` * Poposal: Hook to run acceptance tests (#6256) * fix BusyBox sed (#6340) * Distinct doc strings for repository-cache and repository-config * doc(cli): restore help text for helm configuration * docs: Add best practices compliance badge (#6320) * Move the logic for checking env in pkg/cli and store all envs in a central place * Updated to get Helm env Paths and XDG env paths only * Logic for the helm env command * helm-v3: Dynamic completion for "helm repo" and "helm plugin" (#6263) * fix(cmd/helm): user friendly error message when repos are not configured * Make the lint cmd output a bit easier to follow * Revert "fix(cmd/helm): user friendly error message when repos are not configured" * fix(cmd/helm): user friendly error message when repos are not configured * return namespace assigned to --namespace * fix(cmd/helm): Missing params for dir locations (#6300) * fix(cmd/helm): Remove mention of init from help (#6298) * Stop multiple error messages in lint results * Fix: set config dir in repo update cmd (#6292) * Applied check to actions * Add IsReachable to /pkg/kube/client to see if connected to the internet * chore(*): Add GPG key for Adam * ref(cmd/helm): remove init command * chore(registry): upgrade to oras v0.7.0 (#6285) * chore(OWNERS): sync with master (#6224) * feat(cmd/helm): remove need for helm init command * Fix Adding Errors from Linter.Messages to result.Errors * ref(*): remove dead code * Test for Linting multiple charts with the same vals instance * Clone the vals map for every path to avoid mutation * Remove mention of 'helm update' * feat: Add support for a crds/ directory * chore(*): Add GPG key for Taylor * fix(registry): Updates registry to handle go 1.12.8 changes * fix(chartutil): remove executable bits from chartutil generated files * ref(test): join all hook manifests before building * style(action): fix style tests * fix(action): return an error if len > 0 * fix(test): restore --cleanup * Updating the search language and flags for consistency * Breaking up the search command into multiple commands based on type * Exposing Helm Hub search via the search command * ref(internal/experimental/registry): pkg refactor (#6205) * ref(cmd/helm): unify log functions * fix(pkg/kube): only wait for events from Jobs and Pods * Updated upgrade to give more verbose output * Updating the httpgetter to use the new user agent function * Making the monocular client search path a const * Moving monocular client to internal and adding user agent to version pkg * Adding a monocular client as a package * ref(*): Moves packages to internal * ref(cmd/helm): remove helm home command * feat(hooks): add Running phase * feat(getter): set default User-Agent * feat(cmd): use alt dest for chart export (#6193) * fix(action): return nil if no errors occurred * feat(cmd): put OCI commands behind a feature gate * Move KEYS from master to dev-v3 * fix(helmpath): fix syntax errors for windows tests * fix(chartutil): Ensure nested template dir on save (#6177) * refactor(hooks): replace hook execution Successful bool with HookPhase * Fix make test * fix(kube): Fixes nil panic with stateful set waiting * chore(cmd): Updates --wait flag help * docs(chart): updates APIVersionV2 comment to reflect the proper name * pkg/cli/values/options_test.go: re-add MergeValues test with mergeMaps * fix(plugin): add HELM_HOME back * feat(cli): support XDG base directory specification * ref(client): use three-way merge patch strategy * Remove the chart lock file as its v1 structure * Update linting and checking for apiVersion v1/v2 * fix(test): wait for pods and record status * review: move ValueOptions to SDK * cmd/*,pkg/*: move ValueOptions to cmd package and decouple from SDK * doc(hooks): note helm 2 test annotation support requirement * refactor(release): track test executions via Hook type * feat(client): wait for Pods during hook execution * feat(test): define tests as Jobs and allow arbitrary supporting resources * Fix values being ignored when reusing values on upgrade * fix(rollback): fix revision argument not being handled * fix(pkg/action): Allow name re-use for helm template * Removes clientset method from interface in favor of the configuration struct * Fixed object typing for watching Jobs/hooks * Fixes issues with delete * ref(*): Refactors kube client to be a bit more friendly * ref(kube): Renames `Result` type to `ResourceList` * Allow missing trailing '/' in --repo url * Enable style conformance test in circleci build * Fix style conformance issue * Switch to a more unique delimiter for template execution errors * Fix style conformance issues * Update scaffold chart to v2 apiVersion * Added List mode for Role, ClusterRole and Bindings * Removing the stable repository * test: add test * fix: use repo default client to download index * Fix a parsing issue with command line arguments * fix: call chartutil.ProcessDependencies in action.Install * ref(action): remove ParseReferenceWithChartDefaults * fix(engine): Fix eating too many colons during template execution * Use chart version as default tag when saving * feat(helm:create): allow absolute paths ==== installation-images-MicroOS ==== Version update (14.435 -> 14.438) - merge gh#openSUSE/installation-images#335 - add /etc/zkey to initrd to ensure it is writable (jsc#SLE-7376) - default udev rules are in /usr/lib - 14.438 - merge gh#openSUSE/installation-images#334 - do not stop haveged process in inst_setup (bsc#1140171) - 14.437 - merge gh#openSUSE/installation-images#332 - move setsid and mount to initrd - 14.436 ==== kernel-firmware ==== Version update (20190827 -> 20190909) Subpackages: ucode-amd - Update to version 20190909 (git-commit 6c6918ad8ae0): * linux-firmware: Update firmware file for Intel Bluetooth AX201 * nvidia: Add XUSB firmware for Tegra186 * Add symlinks for Tegra VIC firmware binaries * rtl_bt: Update RTL8723D BT FW to 0x828A_96F1 * rtl_nic: add firmware rtl8125a-3 * linux-firmware: Add firmware file for Intel Bluetooth AX201 * Chelsio driver loads firmware configuration file to allow firmware to distribute resources before chip bring up. Chelsio NIC driver, cxgb4 searches for firmware config file at /lib/firmware/cxgb4/ directory. - Add dependency on dracut >= 049 (boo#1151552) to compressed f/w packages ==== kubernetes ==== Version update (1.15.2 -> 1.15.4) Subpackages: kubernetes-client kubernetes-kubeadm kubernetes-kubelet - Drop obsolete cve-2019-9512-and-cve-2019-9514.patch - Drop obsolete fix-cgroup-kubeadm.patch - Update to version 1.15.4: * Omit openapi properties if spec.preserveUnknownFields=true * Ensure all conditions for publishing openapi are satisfied in kubectl e2e tests * [kubectl cp] Reorder symlinks to prevent path escapes * in GuaranteedUpdate, retry on precondition check failure if we are working with cached data * test * Remove usage of kubectl log in tests * Fix windows kubectl log -f. * Fix kubectl e2e test * fix: azure disk name matching issue * Add/delete load balancer backendPoodID in VMSS. * fix: disk not found issue in detaching azure disk * fix: detach azure disk issue using dangling error * Removes conflicting Quobyte tenant test error from API validation * Fix panic when errors are nil * Add/Update CHANGELOG-1.15.md for v1.15.3. * Kubernetes version v1.15.4-beta.0 openapi-spec file updates * Only advertise supported patch types * Update generated protobufs * Update golang/x/net dependency * update go to 1.12.9 * Fix malformed port in vsphere cloud provider test * Fix up failing boilerplate test * Update to go 1.12.8 * Fix a bug in the IPVS proxier where virtual servers are not cleaned up even though the corresponding Service object was deleted. * remove iSCSI volume storage cleartext secrets in logs * fix: use Create for attach/detach disk * Fix events test * Fix GetReference function * Fix Azure client requests stuck issues on http.StatusTooManyRequests * Fix conflicted cache when the requests are canceled by other Azure operations * Continue admitting the pod regardless of return value from killPodFunc * gofmt * address comments * fix gofmt * Make kubelet report usageNanoCores for node on Windows * Update the Windows node image 1809 version to 0709 * Skip tests is fstype is xfs and node distro is gci, cos, or windows * Do not delete an incorrect pod when replacing a mirror pod * Fix the public IP getting issues for VMSS nodes * Validate CSI Inline Migration unconditionally * add unit tests for attacher DisksAreAttached and BulkDisksAreAttached * implement functionality to return all found instances * move getInstancesByName logic to helper function * add ability for gce to bulk verify attached disks * Don't expect pod to stay up during node upgrade * Add/Update CHANGELOG-1.15.md for v1.15.2. * Kubernetes version v1.15.3-beta.0 openapi-spec file updates * Reduce GCE PD Attach Limits by 1 because Node Boot Disk counts as 1 attached disk * Update kube-addon-manager to v9.0.2. * kubeadm: update the supported version for 1.15 * kubeadm: apply a number of _test fixes * Register Kubelet server metrics * Return MetricsError with ErrCodeNotSupported code * quote container name in container already use error matching * feedback 1 * fix-file-discovery * autogenerated * Fix nil pointer dereference in metrics value calculator. * make node lease renew interval more heuristic * Add supportedMountOptions for GCE PD CSI Driver tests * Add passthrough for MountOptions for NodeStageVolume for CSI * Update unit test with expected query parameters * Remove manual conversions for ListOptions * Bugfix: csi raw block that does not need attach mounted failed * Update publishing/rules to go 1.12.7 * Update to go 1.12.7 * kunsupported cgroup setup causes kubelet to emit a warning rather than exiting * Fix the creation of load balancer policy for the NodeIp when NodePort specified is same as service Port * Fix cgroup hugetlb size prefix for kB * Fix a bug that StatefulSet applies the revision incorrectly * printer: fix a nil pointer dereference - cve-2019-9512-and-cve-2019-9514.patch: * bsc#1147142: CVE-2019-9512 and CVE-2019-9514 (http2: limit number of queue from an attacker) ==== less ==== Version update (530 -> 551) - less 551: * Add --mouse option * Add --wheel-lines option * Add --no-histdups option * Add --save-marks option * Support PCRE2 regular expression library * Redraw screen on SIGWINCH even if screen size doesn't change * Shell-escape filenames in history so they can be used again * Ring bell if user enters invalid long option name * Use PCRE_UTF8 flag for pcre regular expressions when in UTF-8 mode * Don't count lines in initial screen if using -X with -F * Fix bug in v command on empty file * Fix bug in v command when filename contains shell metacharacters - refresh less-429-shell.patch ==== libcontainers-common ==== Version update (20190802 -> 20190923) - Update to image 1.4.4 - Hard-code the kernel keyring use to be disabled for now - Update to libpod 1.5.1 - The hostname of pods is now set to the pod's name - Minor bugfixes - Update to storage 1.12.16 - Ignore ro mount options in btrfs and windows drivers - Check /var/lib/containers if possible before setting btrfs backend (bsc#1151028) ==== libffi ==== Version update (3.2.1.git259 -> 3.2.1.git505) - Update to commit c2a6859 - gccbug.patch: Update check for gccbug target flag - stdcall.patch: Fix FFI_STDCALL ABI - libffi-riscv.patch: Removed - libffi-include-location.patch: Removed - Add libffi-devel-32bit package. ==== patterns-base ==== Subpackages: patterns-base-apparmor patterns-base-minimal_base - Need to explicitly have glibc-locale-base in patterns to make 32bit pattern have it too (boo#1142156). ==== python-Jinja2 ==== - Add patch to work with python 3.8: * python38.patch ==== python-urllib3 ==== Version update (1.25.3 -> 1.25.5) - Restrict the tornado dep from tom to 5 or older release as the 6.x changed the API - Update to 1.25.5: * Add mitigation for BPO-37428 affecting Python <3.7.4 and OpenSSL 1.1.1+ which caused certificate verification to be enabled when using cert_reqs=CERT_NONE. (Issue #1682) * Propagate Retry-After header settings to subsequent retries. (Pull #1607) * Fix edge case where Retry-After header was still respected even when explicitly opted out of. (Pull #1607) * Remove dependency on rfc3986 for URL parsing. * Fix issue where URLs containing invalid characters within Url.auth would raise an exception instead of percent-encoding those characters. * Add support for HTTPResponse.auto_close = False which makes HTTP responses work well with BufferedReaders and other io module features. (Pull #1652) * Percent-encode invalid characters in URL for HTTPConnectionPool.request() (Pull #1673) - Drop patch urllib3-ssl-default-context.patch - Drop patch python-urllib3-recent-date.patch the date is recent enough on its own ==== yast2 ==== Version update (4.2.23 -> 4.2.24) - Fix module name inference when reading .desktop files (bsc#1151954) - 4.2.24 -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20190927 released!
by Richard Brown 01 Oct '19

01 Oct '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: glibc (2.29 -> 2.30) kernel-source (5.2.14 -> 5.3.1) rebootmgr (0.18 -> 0.20) sysvinit (2.95 -> 2.96) tcpd transactional-update (2.16 -> 2.17) === Details === ==== glibc ==== Version update (2.29 -> 2.30) Subpackages: glibc-locale glibc-locale-base - Package gconv-modules.cache as %ghost - Regenerate it also in the %post of glibc-local-base-<targettype> - move mo files to glibc-locale as that's where all the other informations for those locales are. glibc-locale-base only has English anyways. - riscv-vfork.patch: Fix RISC-V vfork build with Linux 5.3 kernel headers - Remove NoSource tags (bsc#994835) - pwdutils is long gone and replaced by shadow - Update to glibc 2.30 * Unicode 12.1.0 Support * The dynamic linker accepts the --preload argument to preload shared objects * The twalk_r function has been added * On Linux, the getdents64, gettid, and tgkill functions have been added * Minguo (Republic of China) calendar support has been added * The entry for the new Japanese era has been added * Memory allocation functions malloc, calloc, realloc, reallocarray, valloc, pvalloc, memalign, and posix_memalign fail now with total object size larger than PTRDIFF_MAX * The dynamic linker no longer refuses to load objects which reference versioned symbols whose implementation has moved to a different soname since the object has been linked * Add new POSIX-proposed pthread_cond_clockwait, pthread_mutex_clocklock, pthread_rwlock_clockrdlock, pthread_rwlock_clockwrlock and sem_clockwait functions * On AArch64 the GNU IFUNC resolver call ABI changed * The copy_file_range function fails with ENOSYS if the kernel does not support the system call of the same name * The functions clock_gettime, clock_getres, clock_settime, clock_getcpuclockid, clock_nanosleep were removed from the librt library for new applications (on architectures which had them) * The obsolete and never-implemented XSI STREAMS header files <stropts.h> and <sys/stropts.h> have been removed * Support for the "inet6" option in /etc/resolv.conf and the RES_USE_INET6 resolver flag (deprecated in glibc 2.25) have been removed * The obsolete RES_INSECURE1 and RES_INSECURE2 option flags for the DNS stub resolver have been removed from <resolv.h> * With --enable-bind-now, installed programs are now linked with the BIND_NOW flag. * On 32-bit Arm, support for the port-based I/O emulation and the <sys/io.h> header have been removed * The Linux-specific <sys/sysctl.h> header and the sysctl function have been deprecated and will be removed from a future version of glibc * CVE-2019-7309: x86-64 memcmp used signed Jcc instructions to check size * CVE-2019-9169: Attempted case-insensitive regular-expression match via proceed_next_node in posix/regexec.c leads to heap-based buffer over-read - pthread-rwlock-trylock-stalls.patch, arm-systemtap-probe-constraint.patch, pthread-mutex-barrier.patch, fork-handler-lock.patch, pthread-join-probe.patch, riscv-clone-unwind.patch, add-new-Fortran-vector-math-header-file.patch, regex-read-overrun.patch, japanese-era-name-may-2019.patch, dl-show-auxv.patch, s390-vx-vxe-hwcap.patch, taisho-era-string.patch, malloc-tracing-hooks.patch, pldd-inf-loop.patch, malloc-large-bin-corruption-check.patch, wfile-sync-crash.patch, malloc-tests-warnings.patch, fnmatch-collating-elements.patch, iconv-reset-input-buffer.patch: Removed - malloc-info-whitespace.patch: Remove unwanted leading whitespace in malloc_info (BZ #24867) - Move /var/lib/misc/Makefile to /usr/share/misc/Makefile.makedb (bsc#1138726) ==== kernel-source ==== Version update (5.2.14 -> 5.3.1) Subpackages: kernel-debug kernel-default - Linux 5.3.1 (bnc#1012628). - media: technisat-usb2: break out of loop at end of buffer (bnc#1012628). - floppy: fix usercopy direction (bnc#1012628). - phy: qcom-qmp: Correct ready status, again (bnc#1012628). - ovl: fix regression caused by overlapping layers detection (bnc#1012628). - Revert "arm64: Remove unnecessary ISBs from set_{pte,pmd,pud}" (bnc#1012628). - nl80211: Fix possible Spectre-v1 for CQM RSSI thresholds (bnc#1012628). - tty/serial: atmel: reschedule TX after RX was started (bnc#1012628). - serial: sprd: correct the wrong sequence of arguments (bnc#1012628). - firmware: google: check if size is valid when decoding VPD data (bnc#1012628). - Documentation: sphinx: Add missing comma to list of strings (bnc#1012628). - KVM: coalesced_mmio: add bounds checking (bnc#1012628). - net: stmmac: Hold rtnl lock in suspend/resume callbacks (bnc#1012628). - net: dsa: Fix load order between DSA drivers and taggers (bnc#1012628). - xen-netfront: do not assume sk_buff_head list is empty in error handling (bnc#1012628). - udp: correct reuseport selection with connected sockets (bnc#1012628). - net_sched: let qdisc_put() accept NULL pointer (bnc#1012628). - net/sched: fix race between deactivation and dequeue for NOLOCK qdisc (bnc#1012628). - ip6_gre: fix a dst leak in ip6erspan_tunnel_xmit (bnc#1012628). - phy: renesas: rcar-gen3-usb2: Disable clearing VBUS in over-current (bnc#1012628). - media: tm6000: double free if usb disconnect while streaming (bnc#1012628). - USB: usbcore: Fix slab-out-of-bounds bug during device reset (bnc#1012628). - commit f187578 - Update config files. Disable CONFIG_ARM_SMMU_DISABLE_BYPASS_BY_DEFAULT. Not all drivers are ready for this yet, so enabling this config option causes regressions. See bsc#1150577 for an example. - commit f759adc - Update to 5.3 final - Eliminated 3 patches - Refresh configs - NF_CONNTRACK_SLP is gone - commit 6baef36 - Btrfs: fix unwritten extent buffers and hangs on future writeback attempts (btrfs hangup). - commit 7f85414 ==== rebootmgr ==== Version update (0.18 -> 0.20) - Fix %config for backward compatibility - Update to version 0.20 - add support to write changes back to /etc/rebootmgr.conf - Preserve /etc/rebootmgr.conf if modified - Update to version 0.19 - use libeconf for /usr/etc move ==== sysvinit ==== Version update (2.95 -> 2.96) - Update to sysvinit 2.96 * Added -z command line paramter to pidof which tells pidof to try to find processes in uninterruptable (D) or zombie (Z) states. This can cause pidof to hang, but produces a more complete process list. * Reformatted init code to make if/while logic more clear. * Make sure src/Makefile cleans up all executable files when parent Makefile calls "make clean". - Update to killproc 2.23 * killproc has its upstream at https://github.com/bitstreamout/killproc * Use new system call statx(2) to replace old stat(2)/lstat(2) - Remove patches now upstream: * killproc-2.18-open_flags.dif * killproc-2.21.dif * killproc-sysmacros.patch * killproc-mntinf-optional.patch ==== tcpd ==== - Add tcp_wrappers_7.6-ipv6.fix.fix3.diff in order to fix boo#1149708. ==== transactional-update ==== Version update (2.16 -> 2.17) Subpackages: transactional-update-zypp-config - Update to version 2.17 - Provide network in shell on systems where resolv.conf is pointing to /run directly [boo#1151081] - Print new snapshot number at the end - Always mount /root subvolume when using shell command to preserve history -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20190927 released!
by Richard Brown 01 Oct '19

01 Oct '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: glibc (2.29 -> 2.30) kernel-source (5.2.14 -> 5.3.1) lttng-ust (2.10.2 -> 2.10.5) rebootmgr (0.18 -> 0.20) rook (1.1.0+git0.g2f9db0e1 -> 1.1.1+git0.g9a2641a6) sysvinit (2.95 -> 2.96) tcpd transactional-update (2.16 -> 2.17) === Details === ==== glibc ==== Version update (2.29 -> 2.30) Subpackages: glibc-locale glibc-locale-base - Package gconv-modules.cache as %ghost - Regenerate it also in the %post of glibc-local-base-<targettype> - move mo files to glibc-locale as that's where all the other informations for those locales are. glibc-locale-base only has English anyways. - riscv-vfork.patch: Fix RISC-V vfork build with Linux 5.3 kernel headers - Remove NoSource tags (bsc#994835) - pwdutils is long gone and replaced by shadow - Update to glibc 2.30 * Unicode 12.1.0 Support * The dynamic linker accepts the --preload argument to preload shared objects * The twalk_r function has been added * On Linux, the getdents64, gettid, and tgkill functions have been added * Minguo (Republic of China) calendar support has been added * The entry for the new Japanese era has been added * Memory allocation functions malloc, calloc, realloc, reallocarray, valloc, pvalloc, memalign, and posix_memalign fail now with total object size larger than PTRDIFF_MAX * The dynamic linker no longer refuses to load objects which reference versioned symbols whose implementation has moved to a different soname since the object has been linked * Add new POSIX-proposed pthread_cond_clockwait, pthread_mutex_clocklock, pthread_rwlock_clockrdlock, pthread_rwlock_clockwrlock and sem_clockwait functions * On AArch64 the GNU IFUNC resolver call ABI changed * The copy_file_range function fails with ENOSYS if the kernel does not support the system call of the same name * The functions clock_gettime, clock_getres, clock_settime, clock_getcpuclockid, clock_nanosleep were removed from the librt library for new applications (on architectures which had them) * The obsolete and never-implemented XSI STREAMS header files <stropts.h> and <sys/stropts.h> have been removed * Support for the "inet6" option in /etc/resolv.conf and the RES_USE_INET6 resolver flag (deprecated in glibc 2.25) have been removed * The obsolete RES_INSECURE1 and RES_INSECURE2 option flags for the DNS stub resolver have been removed from <resolv.h> * With --enable-bind-now, installed programs are now linked with the BIND_NOW flag. * On 32-bit Arm, support for the port-based I/O emulation and the <sys/io.h> header have been removed * The Linux-specific <sys/sysctl.h> header and the sysctl function have been deprecated and will be removed from a future version of glibc * CVE-2019-7309: x86-64 memcmp used signed Jcc instructions to check size * CVE-2019-9169: Attempted case-insensitive regular-expression match via proceed_next_node in posix/regexec.c leads to heap-based buffer over-read - pthread-rwlock-trylock-stalls.patch, arm-systemtap-probe-constraint.patch, pthread-mutex-barrier.patch, fork-handler-lock.patch, pthread-join-probe.patch, riscv-clone-unwind.patch, add-new-Fortran-vector-math-header-file.patch, regex-read-overrun.patch, japanese-era-name-may-2019.patch, dl-show-auxv.patch, s390-vx-vxe-hwcap.patch, taisho-era-string.patch, malloc-tracing-hooks.patch, pldd-inf-loop.patch, malloc-large-bin-corruption-check.patch, wfile-sync-crash.patch, malloc-tests-warnings.patch, fnmatch-collating-elements.patch, iconv-reset-input-buffer.patch: Removed - malloc-info-whitespace.patch: Remove unwanted leading whitespace in malloc_info (BZ #24867) - Move /var/lib/misc/Makefile to /usr/share/misc/Makefile.makedb (bsc#1138726) ==== kernel-source ==== Version update (5.2.14 -> 5.3.1) Subpackages: kernel-debug kernel-default - Linux 5.3.1 (bnc#1012628). - media: technisat-usb2: break out of loop at end of buffer (bnc#1012628). - floppy: fix usercopy direction (bnc#1012628). - phy: qcom-qmp: Correct ready status, again (bnc#1012628). - ovl: fix regression caused by overlapping layers detection (bnc#1012628). - Revert "arm64: Remove unnecessary ISBs from set_{pte,pmd,pud}" (bnc#1012628). - nl80211: Fix possible Spectre-v1 for CQM RSSI thresholds (bnc#1012628). - tty/serial: atmel: reschedule TX after RX was started (bnc#1012628). - serial: sprd: correct the wrong sequence of arguments (bnc#1012628). - firmware: google: check if size is valid when decoding VPD data (bnc#1012628). - Documentation: sphinx: Add missing comma to list of strings (bnc#1012628). - KVM: coalesced_mmio: add bounds checking (bnc#1012628). - net: stmmac: Hold rtnl lock in suspend/resume callbacks (bnc#1012628). - net: dsa: Fix load order between DSA drivers and taggers (bnc#1012628). - xen-netfront: do not assume sk_buff_head list is empty in error handling (bnc#1012628). - udp: correct reuseport selection with connected sockets (bnc#1012628). - net_sched: let qdisc_put() accept NULL pointer (bnc#1012628). - net/sched: fix race between deactivation and dequeue for NOLOCK qdisc (bnc#1012628). - ip6_gre: fix a dst leak in ip6erspan_tunnel_xmit (bnc#1012628). - phy: renesas: rcar-gen3-usb2: Disable clearing VBUS in over-current (bnc#1012628). - media: tm6000: double free if usb disconnect while streaming (bnc#1012628). - USB: usbcore: Fix slab-out-of-bounds bug during device reset (bnc#1012628). - commit f187578 - Update config files. Disable CONFIG_ARM_SMMU_DISABLE_BYPASS_BY_DEFAULT. Not all drivers are ready for this yet, so enabling this config option causes regressions. See bsc#1150577 for an example. - commit f759adc - Update to 5.3 final - Eliminated 3 patches - Refresh configs - NF_CONNTRACK_SLP is gone - commit 6baef36 - Btrfs: fix unwritten extent buffers and hangs on future writeback attempts (btrfs hangup). - commit 7f85414 ==== lttng-ust ==== Version update (2.10.2 -> 2.10.5) - Update to version 2.10.5: * New tracef() instrumentation facility. Excerpt from the lttng-ust(3) man page. * Perf PMU counters support from user-space on x86. * Library base address dump is now stable (thanks to Mentor for their contribution). * fixes boo#1149704. ==== rebootmgr ==== Version update (0.18 -> 0.20) - Fix %config for backward compatibility - Update to version 0.20 - add support to write changes back to /etc/rebootmgr.conf - Preserve /etc/rebootmgr.conf if modified - Update to version 0.19 - use libeconf for /usr/etc move ==== rook ==== Version update (1.1.0+git0.g2f9db0e1 -> 1.1.1+git0.g9a2641a6) - Fix 2 improper RPM spec variable references in specfile - Use lightweight git tags when determining Rook version from source in tarball script (bsc#1151909) + Build should now be tagged appropriately as version 1.1.1.0 instead of 1.1.0.x - Override some Rook defaults with linker flags at build time: + CSI image -> SUSE image + FlexVolume dir (for Kubic) - Add patches for: + updating CSI image to a dummy value later changed at linker time + updating CSI template paths to the ones installed by rook-k8s-manifests + update the FlexVolume dir path to be compatible with Kubic - Remove previously applied SUSE-specific changes that are now taken care of by the above patches - Add patch: csi-dummy-images.patch - Add patch: csi-template-paths.patch - Add patch: flexvolume-dir.patch - rook-k8s-yaml: Fix YAML indentation of cephcsi image value (bsc#1152008) - Update Rook to match upstream version v1.1.1 (bsc#1151909) + Disable the flex driver by default in new clusters + MDB controller to use namespace for checking ceph status + CSI liveness container socket file + Add list of unusable directories paths + Remove helm incompatible chars from values.yaml + Fail NFS-ganesha if CephFS is not configured + Make lifecycle hook chown less verbose for OSDs + Configure LVM settings for rhel8 base image + Make kubelet path configurable in operator for csi (#392 + OSD pods should always use hostname for node selector + Deactivate device from lvm when OSD pods are shutting down + Add CephNFS to OLM's CSV + Tolerations for drain detection canaries + Enable ceph-volume debug logs + Add documentation for CSI upgrades from v1.0 (#386 + Add a new skipUpgradeChecks property to allow forcing upgrades + Include CSI image in helm chart values (#385 + Use HTTP port if SSL is disabled + Enable SSL for dashboard by default + Enable msgr2 properly during upgrades + Nautilus v14.2.4 is the default Ceph image + Ensure the ceph-csi secret exists on upgrade + Disable the min PG warning if the pg_autoscaler is enabled + Disable the warning for bluestore warn on legacy statfs - add SUSE-specific changes to manifests: + uncomment ROOK_CSI_CEPH_IMAGE var + set FlexVolume dir path for Kubic + add ROOK_CSI_*_TEMPLATE_PATH configs ==== sysvinit ==== Version update (2.95 -> 2.96) - Update to sysvinit 2.96 * Added -z command line paramter to pidof which tells pidof to try to find processes in uninterruptable (D) or zombie (Z) states. This can cause pidof to hang, but produces a more complete process list. * Reformatted init code to make if/while logic more clear. * Make sure src/Makefile cleans up all executable files when parent Makefile calls "make clean". - Update to killproc 2.23 * killproc has its upstream at https://github.com/bitstreamout/killproc * Use new system call statx(2) to replace old stat(2)/lstat(2) - Remove patches now upstream: * killproc-2.18-open_flags.dif * killproc-2.21.dif * killproc-sysmacros.patch * killproc-mntinf-optional.patch ==== tcpd ==== - Add tcp_wrappers_7.6-ipv6.fix.fix3.diff in order to fix boo#1149708. ==== transactional-update ==== Version update (2.16 -> 2.17) Subpackages: transactional-update-zypp-config - Update to version 2.17 - Provide network in shell on systems where resolv.conf is pointing to /run directly [boo#1151081] - Print new snapshot number at the end - Always mount /root subvolume when using shell command to preserve history -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0