Compare commits

...

10 Commits

Author SHA1 Message Date
openeuler-ci-bot
b17921bc2f
!24 [sync] PR-22: Disable criu dependency for riscv
From: @openeuler-sync-bot 
Reviewed-by: @yangzhao_kl 
Signed-off-by: @yangzhao_kl
2024-05-07 04:38:07 +00:00
Yinsist
1ef85dcafa Disable criu dependency for RISC-V as criu does not currently support RISC-V
(cherry picked from commit c162f227745c0d9f9edc37b932ebc9c43e254d69)
2024-04-29 18:22:08 +08:00
openeuler-ci-bot
5ff4878ef6
!21 [sync] PR-19: update to 1.8.7
From: @openeuler-sync-bot 
Reviewed-by: @yangzhao_kl 
Signed-off-by: @yangzhao_kl
2024-04-26 02:47:32 +00:00
jianli-97
71523aaf8a update to 1.8.7
(cherry picked from commit 47f7678a447d8e3ad39a45200e5310bbfd20b595)
2024-04-26 09:26:57 +08:00
openeuler-ci-bot
9144ae565a
!18 [sync] PR-16: linux: readonlyPaths should inherit flags from parent mount
From: @openeuler-sync-bot 
Reviewed-by: @yangzhao_kl 
Signed-off-by: @yangzhao_kl
2024-04-25 02:42:24 +00:00
ayomi
ba3ef02e9f linux: readonlyPaths should inherit flags from parent mount
(cherry picked from commit e8058178d39fc8b11ce36a48cb4bc552198e2016)
2024-04-18 10:03:13 +08:00
openeuler-ci-bot
dd4a9dbb64
!14 update to 1.8.1
From: @zmr_2020 
Reviewed-by: @biannm 
Signed-off-by: @biannm
2023-05-10 08:08:11 +00:00
zmr_2020
7c5a3432a4 update to 1.8.1 2023-05-10 10:04:22 +08:00
openeuler-ci-bot
36c0f16993
!9 update to 1.4.5
From: @fu-shanqing 
Reviewed-by: @yangzhao_kl 
Signed-off-by: @yangzhao_kl
2022-07-25 03:18:51 +00:00
fu-shanqing
04e3d92f9e update to 1.4.5 2022-07-20 09:49:58 +08:00
4 changed files with 38 additions and 22 deletions

Binary file not shown.

BIN
crun-1.8.7.tar.xz Normal file

Binary file not shown.

View File

@ -1,17 +1,28 @@
Name: crun
Version: 1.4.3
Version: 1.8.7
Release: 2
Summary: A fast and low-memory footprint OCI Container Runtime fully written in C.
URL: https://github.com/containers/%{name}
Source0: https://github.com/containers/crun/releases/download/%{version}/%{name}-%{version}.tar.xz
Patch0: fix-CVE-2022-27650.patch
License: GPLv2+ and LGPLv2.1+
BuildRequires: autoconf automake gcc python
BuildRequires: libcap-devel systemd-devel yajl-devel libseccomp-devel libselinux-devel
BuildRequires: libtool make glibc-static protobuf-c-devel
%ifnarch %ix86
BuildRequires: criu-devel >= 3.15
License: GPL-2.0-only
BuildRequires: autoconf
BuildRequires: automake
BuildRequires: gcc
BuildRequires: git-core
BuildRequires: gperf
BuildRequires: libcap-devel
BuildRequires: systemd-devel
BuildRequires: yajl-devel
BuildRequires: libseccomp-devel
BuildRequires: python3-libmount
BuildRequires: libtool
BuildRequires: protobuf-c-devel
%ifnarch riscv64
BuildRequires: criu-devel
Recommends: criu
Recommends: criu-libs
%endif
BuildRequires: python3
Provides: oci-runtime
%description
@ -43,6 +54,25 @@ rm -rf %{buildroot}%{_prefix}/lib*
%{_mandir}/man1/*
%changelog
* Sun Apr 28 2024 yinsist <jianhui.oerv@isrc.iscas.ac.cn> - 1.8.7-2
- Disable criu dependency for RISC-V as criu does not currently support RISC-V
* Thu Apr 25 2024 lijian <lijian2@kylinos.cn> - 1.8.7-1
- update to 1.8.7
- crun: new command "crun features".
- linux: support io_priority from the OCI specs.
- cgroup: allow setting swap to 0.
- cgroup, systemd: set the memory limit on the system scope.
* Wed Apr 17 2024 huayumeng <huayumeng@kylinos.cn> - 1.8.1-2
- readonlyPaths should inherit flags from parent mount
* Wed May 10 2023 zmr_2020 <zhang_jian7@hoperun.com> - 1.8.1-1
- update to 1.8.1
* Wed Jul 20 2022 fushanqing <fushanqing@kylinos.cn> - 1.4.5-1
- update to 1.4.5
* Mon May 23 2022 fushanqing <fushanqing@kylinos.cn> - 1.4.3-2
- fix CVE-2022-27650.

View File

@ -1,14 +0,0 @@
diff -Naru crun-1.4.3/src/exec.c crun-1.4.3-new/src/exec.c
--- crun-1.4.3/src/exec.c 2021-11-05 14:53:28.000000000 +0800
+++ crun-1.4.3-new/src/exec.c 2022-05-23 13:51:13.000000000 +0800
@@ -304,8 +304,8 @@
capabilities->effective = exec_options.cap;
capabilities->effective_len = exec_options.cap_size;
- capabilities->inheritable = dup_array (exec_options.cap, exec_options.cap_size);
- capabilities->inheritable_len = exec_options.cap_size;
+ capabilities->inheritable = NULL;
+ capabilities->inheritable_len = 0;
capabilities->bounding = dup_array (exec_options.cap, exec_options.cap_size);
capabilities->bounding_len = exec_options.cap_size;