Skip to content
This repository has been archived by the owner on Feb 19, 2024. It is now read-only.

Fork Sync #96

Open
wants to merge 287 commits into
base: latest-candidate
Choose a base branch
from

Conversation

github-actions[bot]
Copy link

No description provided.

simondeziel and others added 30 commits February 15, 2024 13:45
Even if not primed (anymore), it seems to make its way into the
snap, probably because edk2 uses it.

Signed-off-by: Simon Deziel <[email protected]>
…directly used by the `ceph` admin python tool

Signed-off-by: Gabriel Mougard <[email protected]>
UI is no longer preview/experimental.

Signed-off-by: Thomas Parrott <[email protected]>
snapcraft deduplication is not applied to files from packages listed in
stage-packages.  To avoid duplicating lz4's .so, make it explicit that we don't
want to prime it and instead relying on the one provided in the base snap.

Signed-off-by: Simon Deziel <[email protected]>
netbase is already in the base snap and nothing of either packages is primed
into the resulting snap anyway.

Signed-off-by: Simon Deziel <[email protected]>
This makes sure that anything that would be primed by accident isn't anymore.
On riscv64 that would be those (non-exhaustive list):

```
$ du -shc lib/riscv64-linux-gnu/libnet.so.1* lib/riscv64-linux-gnu/libprotobuf-c.so.1* share/qemu/
0	lib/riscv64-linux-gnu/libnet.so.1
68K	lib/riscv64-linux-gnu/libnet.so.1.7.0
0	lib/riscv64-linux-gnu/libprotobuf-c.so.1
28K	lib/riscv64-linux-gnu/libprotobuf-c.so.1.0.0
256K	share/qemu/
352K	total
```

Signed-off-by: Simon Deziel <[email protected]>
pciutils depends on libpci3 which depends on pci.ids but we only want the
later. Also make it explicit that we only want the ids file.

The pciutils package stopped prividing the pci.ids file a while ago:

```
pciutils (1:3.6.2-4) unstable; urgency=medium

  * Switch to use pci.ids package instead of embedded database:
    - Add a Build-Depends on pci.ids to inject the file into pciutils-udeb.
    - Add a Depends on pci.ids to pciutils instead of shipping it.
    - Remove patch updating the pci.ids.
    - Remove now unnecessary update-ids target from debian/rules.

 -- Guillem Jover <[email protected]>  Sun, 10 Nov 2019 15:04:55 +0100
```

Signed-off-by: Simon Deziel <[email protected]>
In 2019, when commit cddfdfc was added, LXD used core (16) as base
which probably came with a rather old libseccomp not adequate for modern
kernels at that time (4.15+).  Now that we are on core22, we get 2.5.3 instead
of pulling 2.5.5 from upstream. With core24, we will get 2.5.4 or maybe newer.

For some reason, virtiofsd used the libseccomp-dev package despite having a
newer lib shipped in the snap.

With the intention of using QEMU from deb sources, using the same libseccomp
version makes even more sense.

Signed-off-by: Simon Deziel <[email protected]>
QEMU is built from https://git.launchpad.net/ubuntu/+source/qemu

The ROM files are used from pre-build packages in core22 base (for now).

Signed-off-by: Thomas Parrott <[email protected]>
Those would require one to override the QEMU config and replace the virtio GPU
by one of those emulated devices. Situations where that would be useful are
probably very rare and many of the QEMU CVEs were due to those emulated
devices.

The goal is to limit the user's choice to a smaller list of hopefully safer
alternatives GPUs.

Signed-off-by: Simon Deziel <[email protected]>
Signed-off-by: Thomas Parrott <[email protected]>
tomponline and others added 30 commits July 8, 2024 09:18
lxd: Update snap release version to 6.1 (latest-candidate)
Signed-off-by: David Edler <[email protected]>
lxd-ui: Bump to 0.10 (latest-candidate)
lxd-migrate: Remove left over files
As netfilter's git repo service is unreliable.

Signed-off-by: Thomas Parrott <[email protected]>
(cherry picked from commit 03a4fcc)
Signed-off-by: Thomas Parrott <[email protected]>
Signed-off-by: Thomas Parrott <[email protected]>
lxd: Cherry-picks (latest-candidate)
Signed-off-by: Thomas Parrott <[email protected]>
lxd: Cherry-picks (latest-candidate)
Signed-off-by: David Edler <[email protected]>
lxd-ui: Bump to 0.11 (latest-candidate)
Signed-off-by: Thomas Parrott <[email protected]>
lxd: Cherry-picks (latest-candidate)
Signed-off-by: David Edler <[email protected]>
Let's ship newer version of AppArmor with support of new features.
Only needed for core22. But we will use with core24 based series for consistency.

Also bumped apparmor to v4.0.2.

Signed-off-by: Alexander Mikhalitsyn <[email protected]>
(cherry picked from commit 8591ed4)
Signed-off-by: Thomas Parrott <[email protected]>
(cherry picked from commit 7ff32ec)
…idate) (#534)

This allows unmodified Oracular unprivileged containers to run from
`ubuntu*:` remotes in LXD.
This reverts commit 14cf45b.

Signed-off-by: Mark Bolton <[email protected]>
(cherry picked from commit 39bd791)
- Fix Dell Powerflex migrations from
canonical/lxd#13934
- Fix snap preseed support from
#532
- Fix snapshot importing from
canonical/lxd#13899
 - lxd/apparmor/instance_lxc: allow procfs for unprivileged containers (canonical/lxd#13997)
 - lxd/apparmor/instance_lxc: allow sysfs for unprivileged containers (canonical/lxd#14010)

Signed-off-by: Thomas Parrott <[email protected]>
…te) (#541)

- lxd/apparmor/instance_lxc: allow procfs for unprivileged containers
(canonical/lxd#13997)
- lxd/apparmor/instance_lxc: allow sysfs for unprivileged containers
(canonical/lxd#14010)
Signed-off-by: David Edler <[email protected]>
* include recent changes in preparation of 6.2, see
https:/canonical/lxd-ui/releases/tag/0.13 for changes
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

8 participants