Mailinglist Archive: opensuse-kubic (68 mails)

< Previous Next >
[opensuse-kubic] New Kubic snapshot 20200229 released!
  • From: Richard Brown <rbrown@xxxxxxx>
  • Date: Mon, 02 Mar 2020 19:04:15 +0000
  • Message-id: <158317585558.29798.2266213975784466582@go-agent-stagingbot-5>

Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.

Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=Tumbleweed&build=20200229
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&component=Kubic&query_format=advanced&resolution=---

Please do not reply to this email to report issues, rather file a bug on
bugzilla.opensuse.org.
For more information on filing bugs please see
https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
cilium (1.6.5 -> 1.7.0)
ipset (7.5 -> 7.6)
libzypp (17.22.1 -> 17.23.0)
mozilla-nss
patterns-containers
python-ecdsa (0.13.3 -> 0.15)
python-requests (2.22.0 -> 2.23.0)
rakkess (0.4.3 -> 0.4.4)
sysconfig (0.85.3 -> 0.85.4)
transactional-update (2.20.1 -> 2.20.2)
wicked (0.6.61 -> 0.6.62)
xfsprogs (5.0.0 -> 5.4.0)
yomi-formula (0.0.1+git.1579090265.ecae64c -> 0.0.1+git.1582036279.1c70638)
zypper (1.14.33 -> 1.14.34)

=== Details ===

==== cilium ====
Version update (1.6.5 -> 1.7.0)

- Use %requires_eq for cilium-proxy.
- Add cilium-proxy as a runtime dependency.
- Build with correct cilium-proxy version string.
- Add upstream patches which fix running Cilium on aarch64 and
remove dependency on glibc:
* 0001-option-mark-keep-bpf-templates-as-deprecated.patch
* 0002-make-remove-the-need-for-go-bindata.patch
* 0003-bpf-don-t-use-fixed-size-integer-types-from-stdint.h.patch
- Add downstream patch which makes helm charts compatible with
openSUSE images:
* 0004-helm-Allow-variables-for-compatibility-with-openSUSE.patch
- Update to version 1.7.0:
* Major changes
- Add direct server return (DSR) for NodePort BPF
- Add support for k8s 1.17
- Add support for k8s endpoint slice
- Add support for L7 visibility via pod annotations
- Clusterwide K8s Cilium Network Policies
- Envoy TLS support with header imposition
* Bugfixes
- Add better mechanism to detect if k8s caches are synced
against k8s
- api: Add missing annotations to generate DeepCopy for new
status fields
- bpf: Fix proxy redirection for egress programs
- bpf: Remove POLICY_MAP from bpf_netdev and bpf_overlay
- cilium: use %v for dumping frontend struct on error
- Correct clustermesh identity sync kvstore backend usage (to
actually use the remote)
- daemon: Upgrade spf13/viper
- eni: Check instance existence before resolving deficit
- Filter out bpftool probes emitting dmesg messages
- Fix cilium daemonset deletion on AKS
- Fix concurrent access of a variable used for metrics
- Fix issue (#10092) which incorrectly configured route MTU
with encryption and tunnel enabled.
- Fix memory corruption on clusters with IPv6 and NodePort
enabled
- Fix node-port default route detection in case there multiple
default entries with same ifindex.
- Fix regression to avoid freeing alive IPs
- Fix regular service lookup in node-port range in case of
host-reachable services.
- Fix Unlock handling for kvstore locks
- Fix vishvananda/netlink library's VethPeerIndex() stack
corruption with 4.20+ kernels.
- fqdn: Support setting tofqdns-min-ttl to 0
- health: add ipv6 health check status to cilium health status
output
- HostToContainer propagation for /sys/fs/bpf
- ipam: Protect release from releasing alive IP
- ipcache: Add probe to check for dump capability to support
delete
- ipsec: fix connectivity after node reboots
- k8s: Fix Service.DeepEquals for ExternalIP
- kubernetes: Disable LocalNodeRoute while chaining
- node: Provide context in log when restoring router addresses
- operator: only enable kvstore watcher if kvstore is enabled
- pkg/bpf: Protect each uintptr with runtime.KeepAlive
- pkg/endpoint: access endpoint state safely across go routines
- pkg/ip: fix cilium status output for big CIDR ranges
- policy: Don't open localhost when allowing L7 traffic
- policy: Expose L3 selectors within endpoint JSON
- Remove quick-install.yaml file, ship only helm chart instead.

==== ipset ====
Version update (7.5 -> 7.6)
Subpackages: libipset13

- Update to release 7.6
* Add checking system_power_efficient_wq in the source tree.

==== libzypp ====
Version update (17.22.1 -> 17.23.0)

- Log patch status changes to history (jsc#SLE-5116)
- Allow to disable all WebServer dependent tests when building. OBS
wants to be able to get rid of the nginx/FastCGI-devel build
requirement. Use 'rpmbuild --without mediabackend_tests' or
'cmake -DDISABLE_MEDIABACKEND_TESTS=1'.
- version 17.23.0 (22)

==== mozilla-nss ====

- Package also the cmac.h needed by blapi.h
- Disable LTO on %arm as LTO fails on neon errors

==== patterns-containers ====
Subpackages: patterns-containers-container_runtime
patterns-containers-container_runtime_kubernetes patterns-containers-kubeadm
patterns-containers-kubernetes_utilities patterns-containers-kubic_admin
patterns-containers-kubic_loadbalancer patterns-containers-kubic_worker

- Prevent building of kubic-specific patterns in SLE/Leap

==== python-ecdsa ====
Version update (0.13.3 -> 0.15)

- update to 0.15
- fix fdupes usage
* extra long changelog - see NEWS file

==== python-requests ====
Version update (2.22.0 -> 2.23.0)

- update to 2.23.0
- dropped merged_pr_5049.patch
- refreshed requests-no-hardcoded-version.patch
* Remove defunct reference to prefetch in Session __attrs__
* Requests no longer outputs password in basic auth usage warning

==== rakkess ====
Version update (0.4.3 -> 0.4.4)

- Fix building on %arm architectures
- Update to version 0.4.4
- Upstream release script fixes

==== sysconfig ====
Version update (0.85.3 -> 0.85.4)
Subpackages: sysconfig-netconfig

- version 0.85.4
- Add Upstream First openSUSE Build Service Policy to the spec
- Mark /etc/yp.conf as %config(noreplace): this is the same as the
file shipped by ypbind has as mode. In sysconfig we create a
symlink, in ypbind, the file is actually only owned for
reference. Having the same modes allows for the bots to do their
work properly (boo#1159566).

==== transactional-update ====
Version update (2.20.1 -> 2.20.2)
Subpackages: transactional-update-zypp-config

- Update to version 2.20.2
- Use full names for zypper options [bsc#1164543]
- Ignore /var/lib/rpm in shadowed file output
- Optimize create-dirs-from-rpmdb

==== wicked ====
Version update (0.6.61 -> 0.6.62)
Subpackages: wicked-service

- version 0.6.62
- dhcp4: discard lease on client-id mismatch (CVE-2020-7217,bsc#1160906)
- dhcp4: free lease on response without message type (CVE-2020-7216,bsc#1160905)
- dhcp6: don't add free'd IA to ia_pd_list on T1>T2 (CVE-2019-18903,bsc#1160904)
- dhcp6: fix use-after-free on option parsing failure
(CVE-2019-18902,bsc#1160903)
- utils: don't reject NULL var array names/keys breaking wicked duid dump
- routes: schema fix to avoid not applying rto_min incl. new time format
(bsc#1160939)
- systemd: order start wicked after network-pre.target and openvswitch.service
start
- packaging: use pkgconfig(libsystemd) instead of systemd-devel
- misc bug fixes by Malte Kraus including undefined behaviour, memory access
alignment
- corrections, use-after-free, missed initialization and format errors

==== xfsprogs ====
Version update (5.0.0 -> 5.4.0)

- split xfs scrubbing scripts and service files into a separate optional
package, in order to avoid having python as a dependency in the main
xfsprogs rpm (bsc#1157438).
- update to v5.4.0:
* xfsprogs: Release v5.4.0
* xfsprogs: Release v5.4.0-rc1
* mkfs: tidy up discard notifications
* mkfs: Break block discard into chunks of 2 GB
* xfs_admin: enable online label getting and setting
* xfs_admin: support external log devices
* xfsprogs: add missing line feeds in libxfs/rdwr.c
* xfsprogs: remove stray libxfs whitespace
* xfsprogs: Release v5.4.0-rc0
* xfs: change the seconds fields in xfs_bulkstat to signed
* xfs: move local to extent inode logging into bmap helper
* xfs: remove broken error handling on failed attr sf to leaf change
* xfs: log the inode on directory sf to block format change
* xfs: remove unused flags arg from xfs_get_aghdr_buf()
* xfs: log proper length of superblock
* xfs: revert 1baa2800e62d ("xfs: remove the unused XFS_ALLOC_USERDATA flag")
* xfs: convert inode to extent format after extent merge due to shift
* xfs: define a flags field for the AG geometry ioctl structure
* xfs: add a xfs_valid_startblock helper
* xfs: remove the unused XFS_ALLOC_USERDATA flag
* xfs: allocate xattr buffer on demand
* xfs: consolidate attribute value copying
* xfs: move remote attr retrieval into xfs_attr3_leaf_getvalue
* xfs: remove unnecessary indenting from xfs_attr3_leaf_getvalue
* xfs: make attr lookup returns consistent
* xfs: reverse search directory freespace indexes
* xfs: speed up directory bestfree block scanning
* xfs: factor free block index lookup from xfs_dir2_node_addname_int()
* xfs: factor data block addition from xfs_dir2_node_addname_int()
* xfs: move xfs_dir2_addname()
* xfs: remove all *_ITER_CONTINUE values
* xfs: remove all *_ITER_ABORT values
* xfs: reinitialize rm_flags when unpacking an offset into an rmap irec
* xfs: remove unnecessary int returns from deferred bmap functions
* xfs: remove unnecessary int returns from deferred refcount functions
* xfs: remove unnecessary int returns from deferred rmap functions
* xfs: remove unnecessary parameter from xfs_iext_inc_seq
* xfs: fix sign handling problem in xfs_bmbt_diff_two_keys
* xfs: don't return _QUERY_ABORT from xfs_rmap_has_other_keys
* xfs: fix maxicount division by zero error
* xfs: remove excess function parameter description in
'xfs_btree_sblock_v5hdr_verify'
* xfs: add kmem allocation trace points
* fs: xfs: Remove KM_NOSLEEP and KM_SLEEP.
- update to v.5.3.0
* mkfs.xfs: use libfx to write out AGs versus open coding
* mkfs.xfs: fix incorrect error message during AG init
* xfs_repair: better info when metadata updates fail
* xfs_growfs: allow mounted device node as argument
* xfs_spaceman: always report sick metadata
* xfs_io: add a bulkstat command
* xfs_io: encrypt command enhancements
* xfs_io: copy_file_range fixes
* man: document several new ioctls
* xfs_scrub: copious rewriting
* libfrog: header moves, refactoring, updates
* libxfs: fix buffer refcounting
- update to v5.2.0
- libxfs: cosmetic changes to trans.c to match kernel (Eric Sandeen)
- libxfs changes merged from kernel 5.2
- mkfs: enable reflink by default (Darrick Wong)
- mkfs: fix stripe unit handling (Allison Collins)
- mkfs: remove useless log options in usage() (Yang Xu)
- mkfs: validate start and end of aligned logs (Darrick Wong)
- xfs_quota: fix built-in help for project setup (Eric Sandeen)
- xfs_io: allow passing an open file to copy_range (Amir Goldstein)
- xfs_info: limit findmnt to mounted xfs filesystems (Amir Goldstein)
- man: break out several ioctl man pages (Darrick Wong)
- man: Fix an inconsistency in the mkfs man page (Alvin Zheng)
- xfs_scrub: fix background-mode sleep throttling (Darrick Wong)
- libxfs: sync up xfs_trans_inode.c with the kernel (Eric Sandeen)
- libfrog: fix bitmap return values (Darrick Wong)
- libfrog: don't set negative errno in conversion f'ns (Darrick Wong)

==== yomi-formula ====
Version update (0.0.1+git.1579090265.ecae64c -> 0.0.1+git.1582036279.1c70638)

- Update to version 0.0.1+git.1582036279.1c70638:
* Revert "init: drop namespace for the check"
- Update to version 0.0.1+git.1581958876.d324e18:
* metadata: support "after" ordering
- Adjust the ordering of the forms
- Move out the user modules from the susemanager domain

==== zypper ====
Version update (1.14.33 -> 1.14.34)
Subpackages: zypper-needs-restarting

- Do not allow the abbreviation of cli arguments (bsc#1164543)
- accoring to according in all translation files.
- Always show exception history if available.
- Use default package cache location for temporary repos (bsc#1130873)
- version 1.14.34


--
To unsubscribe, e-mail: opensuse-kubic+unsubscribe@xxxxxxxxxxxx
To contact the owner, e-mail: opensuse-kubic+owner@xxxxxxxxxxxx

< Previous Next >
List Navigation
This Thread
  • No further messages