NetCube-Systems-Austria/kumquat-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
b922c5071e
kumquat-buildroot/package/docker-containerd/Config.in

40 lines
1.4 KiB
Plaintext
Raw Normal View History

docker-containerd: new package docker-containerd is a daemon and API for controlling and managing runC containers. https://containerd.tools/ Signed-off-by: Christian Stewart <christian@paral.in> Reviewed-by: Romain Naour <romain.naour@gmail.com> [Thomas: - simplify a bit the comments about the runtime dependencies - add missing comment on wchar, and take into account the BR2_USE_MMU dependency in the comment - factorize the build step with a foreach loop.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-07-05 00:30:32 +02:00
config BR2_PACKAGE_DOCKER_CONTAINERD
bool "docker-containerd"
depends on BR2_PACKAGE_HOST_GO_ARCH_SUPPORTS
docker-containerd: needs CGO linking Fixes: http://autobuild.buildroot.net/results/09a23c8926ce32408fbbfa1fb5b3ed7c4f8733e3/ Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-07-06 23:06:02 +02:00
depends on BR2_PACKAGE_HOST_GO_CGO_LINKING_SUPPORTS
docker-containerd: new package docker-containerd is a daemon and API for controlling and managing runC containers. https://containerd.tools/ Signed-off-by: Christian Stewart <christian@paral.in> Reviewed-by: Romain Naour <romain.naour@gmail.com> [Thomas: - simplify a bit the comments about the runtime dependencies - add missing comment on wchar, and take into account the BR2_USE_MMU dependency in the comment - factorize the build step with a foreach loop.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-07-05 00:30:32 +02:00
depends on BR2_TOOLCHAIN_HAS_THREADS
runc: depend on linux headers >= 3.11 for O_TMPFILE Fixes: http://autobuild.buildroot.net/results/63e9d88ae5177541be463f1e2aafec59aa410479 Add dependency on headers >= 3.11 for O_TMPFILE, used by runc after the fix for CVE-2019-5736 and propagate to the reverse dependencies of runc. Notice that C library support for O_TMPFILE is also needed, which was added in glibc 2.19 and musl 0.9.15. Signed-off-by: Christian Stewart <christian@paral.in> [Peter: squash series, extend commit message, mention C library dependency, fix indentation] Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2019-02-19 23:35:28 +01:00
depends on BR2_TOOLCHAIN_HEADERS_AT_LEAST_3_11 # runc
package/docker-containerd: fix typo in uclibc dependency Commit 6e3f7fbc072c88ab344f2ffa39e402464b566f19 ("package/runc: add upstream security fix for CVE-2019-5736") added a dependency of docker-containerd to uclibc (inherited from runc), but the depends on has a typo that makes it ineffective. Due to this, docker-containerd can still be selected in uClibc configurations, causing runc to be build, and failing to build due fexecve() being missing in uClibc. Fixes: http://autobuild.buildroot.net/results/64ecdb1e007106fdb05979b10b42b90591255504/ Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2019-02-14 09:53:10 +01:00
depends on !BR2_TOOLCHAIN_USES_UCLIBC # runc
package/runc: blacklist Codesourcery ARM toolchain Fixes: http://autobuild.buildroot.net/results/018e309caa0fc662aa2993e47b2037fb6c569011/ This toolchain uses glibc 2.18, which does not provide O_TMPFILE support. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2019-03-03 21:38:45 +01:00
depends on !BR2_TOOLCHAIN_EXTERNAL_CODESOURCERY_ARM # runc
docker-containerd: new package docker-containerd is a daemon and API for controlling and managing runC containers. https://containerd.tools/ Signed-off-by: Christian Stewart <christian@paral.in> Reviewed-by: Romain Naour <romain.naour@gmail.com> [Thomas: - simplify a bit the comments about the runtime dependencies - add missing comment on wchar, and take into account the BR2_USE_MMU dependency in the comment - factorize the build step with a foreach loop.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-07-05 00:30:32 +02:00
depends on BR2_USE_MMU # util-linux
select BR2_PACKAGE_RUNC # runtime dependency
select BR2_PACKAGE_UTIL_LINUX # runtime dependency
select BR2_PACKAGE_UTIL_LINUX_BINARIES
select BR2_PACKAGE_UTIL_LINUX_PIVOT_ROOT
select BR2_PACKAGE_UTIL_LINUX_MOUNTPOINT
select BR2_PACKAGE_UTIL_LINUX_MOUNT
help
containerd is a daemon to control runC.
https://github.com/docker/containerd
docker-containerd: bump to v1.1.3 This commit bumps docker-containerd to v1.1.3. This is a requisite bump for the upgrade of docker-engine to 2018.06. The license file was renamed from LICENSE.code to LICENSE, so we take this opportunity to add the hash for the license file. The only change between LICENSE.code and LICENSE is: - Copyright 2013-2016 Docker, Inc. + Copyright The containerd Authors Signed-off-by: Christian Stewart <christian@paral.in> [Thomas: fix legal info, add hash for license file.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2018-09-13 07:22:24 +02:00
if BR2_PACKAGE_DOCKER_CONTAINERD
config BR2_PACKAGE_DOCKER_CONTAINERD_DRIVER_BTRFS
bool "btrfs snapshot driver"
depends on BR2_USE_MMU # btrfs-progs
depends on BR2_TOOLCHAIN_HAS_THREADS # btrfs-progs
select BR2_PACKAGE_BTRFS_PROGS
help
Build the btrfs snapshot driver for containerd.
endif
package/runc: add upstream security fix for CVE-2019-5736 The vulnerability allows a malicious container to (with minimal user interaction) overwrite the host runc binary and thus gain root-level code execution on the host. The level of user interaction is being able to run any command (it doesn't matter if the command is not attacker-controlled) as root within a container in either of these contexts: * Creating a new container using an attacker-controlled image. * Attaching (docker exec) into an existing container which the attacker had previous write access to. For more details, see the advisory: https://www.openwall.com/lists/oss-security/2019/02/11/2 The fix for this issue uses fexecve(3), which isn't available on uClibc, so add a dependency on !uclibc to runc and propagate to the reverse dependencies (containerd/docker-engine). Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2019-02-12 14:15:04 +01:00
comment "docker-containerd needs a glibc or musl toolchain w/ threads"
docker-containerd: new package docker-containerd is a daemon and API for controlling and managing runC containers. https://containerd.tools/ Signed-off-by: Christian Stewart <christian@paral.in> Reviewed-by: Romain Naour <romain.naour@gmail.com> [Thomas: - simplify a bit the comments about the runtime dependencies - add missing comment on wchar, and take into account the BR2_USE_MMU dependency in the comment - factorize the build step with a foreach loop.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-07-05 00:30:32 +02:00
depends on BR2_PACKAGE_HOST_GO_ARCH_SUPPORTS
docker-containerd: needs CGO linking Fixes: http://autobuild.buildroot.net/results/09a23c8926ce32408fbbfa1fb5b3ed7c4f8733e3/ Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-07-06 23:06:02 +02:00
depends on BR2_PACKAGE_HOST_GO_CGO_LINKING_SUPPORTS
docker-containerd: new package docker-containerd is a daemon and API for controlling and managing runC containers. https://containerd.tools/ Signed-off-by: Christian Stewart <christian@paral.in> Reviewed-by: Romain Naour <romain.naour@gmail.com> [Thomas: - simplify a bit the comments about the runtime dependencies - add missing comment on wchar, and take into account the BR2_USE_MMU dependency in the comment - factorize the build step with a foreach loop.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-07-05 00:30:32 +02:00
depends on BR2_USE_MMU
runc: depend on linux headers >= 3.11 for O_TMPFILE Fixes: http://autobuild.buildroot.net/results/63e9d88ae5177541be463f1e2aafec59aa410479 Add dependency on headers >= 3.11 for O_TMPFILE, used by runc after the fix for CVE-2019-5736 and propagate to the reverse dependencies of runc. Notice that C library support for O_TMPFILE is also needed, which was added in glibc 2.19 and musl 0.9.15. Signed-off-by: Christian Stewart <christian@paral.in> [Peter: squash series, extend commit message, mention C library dependency, fix indentation] Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2019-02-19 23:35:28 +01:00
depends on !BR2_TOOLCHAIN_HAS_THREADS || \
!BR2_TOOLCHAIN_HEADERS_AT_LEAST_3_11 || BR2_TOOLCHAIN_USES_UCLIBC
package/runc: blacklist Codesourcery ARM toolchain Fixes: http://autobuild.buildroot.net/results/018e309caa0fc662aa2993e47b2037fb6c569011/ This toolchain uses glibc 2.18, which does not provide O_TMPFILE support. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2019-03-03 21:38:45 +01:00
depends on !BR2_TOOLCHAIN_EXTERNAL_CODESOURCERY_ARM
Reference in New Issue Copy Permalink