buildroot/package/docker-containerd, branch 2019.02-op-build

package/runc: blacklist Codesourcery ARM toolchain

2019-03-04T15:25:44+00:00

Fixes: http://autobuild.buildroot.net/results/018e309caa0fc662aa2993e47b2037fb6c569011/ This toolchain uses glibc 2.18, which does not provide O_TMPFILE support. Signed-off-by: Peter Korsgaard

runc: depend on linux headers >= 3.11 for O_TMPFILE

2019-02-27T09:05:49+00:00

Fixes: http://autobuild.buildroot.net/results/63e9d88ae5177541be463f1e2aafec59aa410479 Add dependency on headers >= 3.11 for O_TMPFILE, used by runc after the fix for CVE-2019-5736 and propagate to the reverse dependencies of runc. Notice that C library support for O_TMPFILE is also needed, which was added in glibc 2.19 and musl 0.9.15. Signed-off-by: Christian Stewart [Peter: squash series, extend commit message, mention C library dependency, fix indentation] Signed-off-by: Peter Korsgaard

package/docker-containerd: fix typo in uclibc dependency

2019-02-14T10:06:02+00:00

Commit 6e3f7fbc072c88ab344f2ffa39e402464b566f19 ("package/runc: add upstream security fix for CVE-2019-5736") added a dependency of docker-containerd to uclibc (inherited from runc), but the depends on has a typo that makes it ineffective. Due to this, docker-containerd can still be selected in uClibc configurations, causing runc to be build, and failing to build due fexecve() being missing in uClibc. Fixes: http://autobuild.buildroot.net/results/64ecdb1e007106fdb05979b10b42b90591255504/ Signed-off-by: Thomas Petazzoni Signed-off-by: Peter Korsgaard

docker-containerd: bump to v1.2.3

2019-02-12T19:21:30+00:00

Signed-off-by: Christian Stewart Signed-off-by: Peter Korsgaard

package/runc: add upstream security fix for CVE-2019-5736

2019-02-12T19:04:14+00:00

The vulnerability allows a malicious container to (with minimal user interaction) overwrite the host runc binary and thus gain root-level code execution on the host. The level of user interaction is being able to run any command (it doesn't matter if the command is not attacker-controlled) as root within a container in either of these contexts: * Creating a new container using an attacker-controlled image. * Attaching (docker exec) into an existing container which the attacker had previous write access to. For more details, see the advisory: https://www.openwall.com/lists/oss-security/2019/02/11/2 The fix for this issue uses fexecve(3), which isn't available on uClibc, so add a dependency on !uclibc to runc and propagate to the reverse dependencies (containerd/docker-engine). Signed-off-by: Peter Korsgaard

package/docker-containerd: add missing dependency on host-pkgconf

2018-12-30T15:57:14+00:00

When libsseccomp support is enabled, docker-containerd uses pkg-config to find libsseccomp, so we must depend on host-pkconf. Fixes the following build issue, detected with per-package directory support: pkg-config: exec: "pkg-config": executable file not found in $PATH Signed-off-by: Thomas Petazzoni Signed-off-by: Christian Stewart Signed-off-by: Thomas Petazzoni

package/docker-containerd: bump to version 1.2.1

2018-12-30T13:40:00+00:00

This commit bumps docker-containerd to the latest tagged release, v1.2.1. This release is compatible with the current docker engine release (18.09). Signed-off-by: Christian Stewart Signed-off-by: Thomas Petazzoni

docker-containerd: bump to v1.1.3

2018-09-16T19:39:08+00:00

This commit bumps docker-containerd to v1.1.3. This is a requisite bump for the upgrade of docker-engine to 2018.06. The license file was renamed from LICENSE.code to LICENSE, so we take this opportunity to add the hash for the license file. The only change between LICENSE.code and LICENSE is: - Copyright 2013-2016 Docker, Inc. + Copyright The containerd Authors Signed-off-by: Christian Stewart [Thomas: fix legal info, add hash for license file.] Signed-off-by: Thomas Petazzoni

docker-containerd: add missing docker-containerd symlink

2018-06-07T13:47:53+00:00

Prior to commit 2dccb4f2fefd8a0dbda65dd0f7537f811e920b13 ("package/docker-containerd: convert to golang infrastructure"), the containerd binary was installed as docker-containerd. Following the conversion to the golang package infrastructure, the binary is now installed as "containerd", which breaks some use cases. Let's add a symlink link docker-containerd -> containerd to fix such use cases. Fixes: https://bugs.busybox.net/show_bug.cgi?id=11076 Signed-off-by: Sam Lancia Signed-off-by: Thomas Petazzoni

package/docker-containerd: convert to golang infrastructure

2018-03-31T17:57:31+00:00

Signed-off-by: Angelo Compagnucci Signed-off-by: Thomas Petazzoni Reviewed-by: "Yann E. MORIN" Signed-off-by: Arnout Vandecappelle (Essensium/Mind)