criu-3.16.1-bp154.1.33

- Enable nftables for SLE15-SP3 / openSUSE Leap 15.3, too (bsc#1193486)

- Update to criu 3.16.1:
  see details at https://criu.org/Download/criu/3.16.1
  Bugfixes:
  * Switch criu-ns helper script from unversioned 'python' to
    'python3' for easier distribution packaging
  Improvements:
  * Add '--join-ns' interface to libcriu to allow joining namespaces
    via libcriu like CLI and RPC already allow
- Change Source URL to github

- Update to criu 3.16:
  see details at https://criu.org/Download/criu/3.16
  New features:
  * criu-ns helper script
  * support checkpoint/restore of stacked apparmor profiles
  * add nftables based network locking/unlocking
  * allow restoring of precreated veth devices
  Improvements:
  * better support for restoring containers into existing pods
  * pidfd based pid reuse detection for RPC clients
  * license change for all files in the images/ directory to MIT
  * use clang-format for automatic code indentation
- Drop criu-protobuf-c-1.4-underscore-fix.patch
  as obsoleted

- update to criu 3.6:
  New features
  * C/R for files (except for unix sockets, ttys and epolls) sent
    over unix sockets
  * C/R for threads with different creds
  * Ipv6 over ipv4 tunnel (SIT device)
  Bugfixes
  * Some s390x registers were not restored by native sigrestore way
  * Overflow when parsing autofs info from /proc file
  * Dumps of anon shared memory with sysvipc one raced with each
    other clashing and corrupting image file names
  * The "dumpable" flag was not restore on shmem regions
  * Trash bits leaked into image when dumping fsnotify on some
    kernels
  * Lock/unlock of iptables from different criu processes raced with
    each other
  * Closed TCP connection with non-empty send queue blocked the dump
  * When --empty-ns for netns was set on dump only, the restore
    failed (Docker case)
- includes changes from 3.5:
  see https://criu.org/Download/criu/3.5 for details

- Fix the build with protobuf-c 1.4:
  criu-protobuf-c-1.4-underscore-fix.patch

- Update to criu 3.15:
  see details at https://criu.org/Download/criu/3.15
  New features:
  * Introduced criu-image-streamer
  * Added MIPS support
  * Allow checkpointing out of existing PID namespace and restoring
    into existing PID namespace
  * Added additional file validation mechanisms
  * Added support to checkpoint and restore BPF hash maps
  (BPF_MAP_TYPE_HASH) and array maps (BPF_MAP_TYPE_ARRAY)
  * Initial cgroups v2 support
- Fix build with nftables package:
  0002-Fix-build-with-nftables-installed-in-different-direc.patch

- fix filelist mismatch after libexecdir change

- Update to criu 3.14:
  New features:
  * C/R of memfd memory mappings and file descriptors
  * Add time namespace support
  * Add the read pre-dump mode which uses process_vm_readv
  * Add --cgroup-yard option
  * Add support of the cgroup v2 freezer
  * Add support of opened O_PATH fds
  Bugfixes:
  * Fix C/R ia32 processes on AMD #398
  * Fix cross-compilation
  * Many fixes here and there
  Improvements:
  * Use clone3() with set_tid to restore processes
  * Clean up compel headers
  * Use the new mount API
- Add libgnutls-devel to buildreq

- Disable LTO on aarch64 and armv7
- Add '-Wno-error=deprecated' to fix build on armv7
- Exclude armv6 since criu/arch/arm/bitops.S uses 'dmb ish' which
  is armv7+

- Update to criu 3.13:
  New features:
  * VDSO: arm32 support
  * Add TLS support for page server communications
  * "Ignore" mode for --manage-cgroups
  * Restore SO_BROADCAST option for inet sockets
  Bugfixes:
  * Auxiliary events were left in inotify queues
  * Lazy-pages daemon didn't detect stack pages and surrounders
    properly and marked them as "lazy"
  * Memory and resource leakage were detected by coverity, cppcheck
    and clang
  Improvements:
  * Use gettimeofday() directly from vdso for restore timings
  * Reformat all .py code into pep8 style

- Fix build on Tumbleweed: Add -ffat-lto-objects to lto cflags.

- Update to criu 3.12:
  New features:
  * build CRIU with Android NDK
  * C/R of IP RAW sockets
  * lsm: dump and restore any SELinux process label
  * support restoring ghost files on readonly mounts
  Bugfixes:
  * Do not lock network if running in the host network namespace
  * Fix RPC configuration file handling
  * util: don't leak file descriprots to third-party tools
  * small fixes here and there
  Improvements:
  * travis: switch to the Ubuntu Xenial
  * travis-ci: Enable ia32 tests
  * Many improvements and bug fixes in the libcriu
  * Changes in the API and ABI (SONAME increased from 1 to 2)
- Updated to libcriu2 subpackage to follow SONAME 2
- Dropped obsoleted patch:
  criu-asciidoctor.patch

- Update to criu 3.10:
  New features:
  * Support Python3 in ZDTM and CRIT
  * Keep names for UNIX sockets, that are unlinked from the FS
  * IPVv6 support for page server
  * Set page server socket fd via CLI
  * Large pages support for aarch64/ppc64
  * C/R of Per-thread seccomp chains
  Bugfixes:
  * Failed non-container restore could kill random task on the host
  * Failure to dump namespaces was erroneously ignored
  * CRIT didn't show cpuinfo image file
  * Tasks that got PID-reuse couldn't be dumped iteratively because
    previous images were missing
- Update to criu 3.11:
  New features:
  * cpuinfo: Detect compact frames and handle noxsaves
  * Add support for configuration files
  * Add support for external net namespaces
  * Punch holes in input files when restoring anonymous non-shared
    memory ( --auto-dedup )
  * C/R of
    + epoll: Add support for duped targets
    + tun: Add support for multiple net ns
    + x86: Support extendable fpu frames
  Bugfixes:
  * mount: Better handling of mount points propagation
  * nmk: Make collect-deps to be more precise about targets
  * lazy-pages: Don't mark current stack page as lazy
  * x86: CPU -- Rework feature testing
  * files: Fix O(n^2) restore in terms of the number of fds
  * fdstore: Unlimit fdstore queue on start
  * mount: Fix regression where open_mountpoint failed on readonly fs
  * page server: Handle partial splicing
  * ... lots of small fixes here and there
  Improvements:
  * Remove all magic of service descriptors when it isn't required
- Switch to python3
- Use asciidoctor instead of asciidoc for formatting manuals:
  criu-asciidoctor.patch

- update to criu 3.9:
  New features
  - C/R of
    + Tun-Tap devices in sub-netns
    + File descriptors which were opened with O_TMPFILE
  Improvements
  - Restore of inotify watchers
  - Restore unix sockets in proper mount namespaces
  - Print CRIU and kernel version also in RPC mode
  Bugfixes
  - Random memory corruptions during lazy restore
  - Workaround the iptables issue
  - Don't use standard descriptors when tar is running to dump
    tmpfs mounts
  - Fail dump if dump_one_file() fails
  - Fill kerndat with zero-s before reading it from cache
- cleanup with spec-cleaner