* Mon Dec 19 2022 Andrea Manzini <andrea.manzini@suse.com>
- Update to version 1.2.0
* Added a new CPU template called T2S
* Added a new CLI option --metrics-path PATH
* Added baselines for m6i.metal and m6a.metal
* Changed the jailer option --exec-file to fail if the filename does not
contain the string firecracker
* Updated Rust toolchain and all dependencies to their respective newest versions
* Made the T2 template more robust by explicitly disabling additional
CPUID flags that should be off
* Now MAC address is correctly displayed when queried with GET /vm/config
* Fixed a self-DoS scenario in the virtio-queue code
* Fixed the bad handling of kernel cmdline parameters when init arguments were
provided via JSON PUT /boot-source request
* Fixed a bug on ARM64 hosts where the upper 64bits of the V0-V31 FL/SIMD
registers were not saved correctly
* Sat Oct 01 2022 Liang Yan <lyan@opensuse.org>
- Update firecracker to version 1.1.1
https://github.com/firecracker-microvm/firecracker/releases/tag/v1.1.1
https://github.com/firecracker-microvm/firecracker/releases/tag/v1.1.0
- Add build depenceny clang
- Update cargo_config based on new vendor
* Mon Jun 20 2022 William Brown <william.brown@suse.com>
- Automatic update of vendored dependencies
* Tue May 24 2022 William Brown <william.brown@suse.com>
- Automatic update of vendored dependencies
- Remove 0001-cargo-update-regex-dependency.patch due to update of
vendored dependencies
Version: 1.0.0-bp154.1.30
* Wed Mar 16 2022 Liang Yan <lyan@opensuse.org>
- Bump rust to 1.46.0 for vmm-sys-util building
https://blog.rust-lang.org/2020/08/27/Rust-1.46.0.html#const-fn-improvements
- Bump Regex crate to 1.5.5
(CVE-2022-24713, boo#1196972)
0001-cargo-update-regex-dependency.patch
* Mon Feb 14 2022 Liang Yan <ly@xryan.net>
- Update firecracker to version 1.0.0
Detail could be found below:
https://github.com/firecracker-microvm/firecracker/releases/tag/v1.0.0
* Patches dropped:
0001-dependencies-Included-vm-fdt-crate.patch
0002-vm-fdt-Replace-libfdt-with-vm-fdt.patch
0003-libfdt-bindings-Deleted-libfdt-bindings-crate.patch
* Tue Sep 14 2021 Liang Yan <lyan@suse.com>
- Replace libfdt with vm-fdt.
0001-dependencies-Included-vm-fdt-crate.patch
0002-vm-fdt-Replace-libfdt-with-vm-fdt.patch
0003-libfdt-bindings-Deleted-libfdt-bindings-crate.patch
* Wed Sep 08 2021 Liang Yan <lyan@suse.com>
- Update firecracker to version 0.25.0
Add workspace to firecracker. The workspace has three packages,
firecracker,jailer,seccompiler
Detail could be found below:
https://github.com/firecracker-microvm/firecracker/blob/main/CHANGELOG.md
Version: 0.19.1-bp152.1.4
* Mon May 25 2020 Liang Yan <lyan@suse.com>
- Update firecracker to version 0.19.1:
Added:
* New device: virtio-vsock, backed by Unix domain sockets.
* New command-line parameter for firecracker, named --no-api, which
will disable the API server thread. Also, when API server is disabled,
MMDS is no longer available now.
* New command-line parameter for firecracker, named --config-file, which
represents the path to a file that contains a JSON which can be used for
configuring and starting a microVM without sending any API requests.
* The jailer adheres to the "end of command options" convention, meaning
all parameters specified after -- are forwarded verbatim to Firecracker.
* Added KVM_PTP support to the recommended guest kernel config.
* Added entry in FAQ.md for Firecracker Guest timekeeping.
Changed:
* Vsock API call: PUT /vsocks/{id} changed to PUT /vsock and no longer
appear to support multiple vsock devices. Any subsequent calls to this API
endpoint will override the previous vsock device configuration.
Removed:
* Removed experimental support for vhost-based vsock devices.
* Removed unused 'Halting' and 'Halted' instance states.
* Mon May 25 2020 Liang Yan <lyan@suse.com>
- Modify spec file:
* Change the group to "System/Emulators/PC" which is maintained by virt team.
* Use "rm -f " instead of "rm" to remove spurious files
* Remove macro "_missing_doc_files_terminate_build"
* Sun May 24 2020 Liang Yan <lyan@suse.com>
- Fix Tumbelweed builds by removing /usr/.crates2.json.
* Fri Sep 13 2019 Jan Engelhardt <jengelh@inai.de>
- Trim marketing wording from description.
* Tue Sep 10 2019 Marco Vedovati <mvedovati@suse.com>
- Fix aarch64 builds
- Bump min rust version to 1.35.0
* Mon Sep 09 2019 Marco Vedovati <mvedovati@suse.com>
- Update firecracker to version 0.17.0:
Added:
* New API call: PATCH /machine-config/, used to update VM configuration,
before the microVM boots.
* Added an experimental swagger definition that includes the specification
for the vsock API call.
* Added a signal handler for SIGBUS and SIGSEGV that immediately terminates
the process upon intercepting the signal.
* Added documentation for signal handling utilities.
* Added [alpha] aarch64 support.
* Added metrics for successful read and write operations of MMDS, Net and
Block devices.
Changed:
* vcpu_count, mem_size_mib and ht_enabled have been changed to be mandatory
for PUT requests on /machine-config/.
* Disallow invalid seccomp levels by exiting with error.
Fixed:
* Incorrect handling of bind mounts within the jailed rootfs.
* Corrected the guide for Alpine guest setup.
* Wed May 29 2019 Marco Vedovati <mvedovati@suse.com>
- Update firecracker to version 0.16.0:
+ Added [alpha] AMD support.
* Corrected the seccomp filter when building with glibc.
- Removed the seccomp.bad_syscalls metric.
* Dropped the JSON-formatted context command-line parameter from Firecracker
in favor of individual classic command-line parameters.
* Improved multiple error messages.
* Removed all kernel modules from the recommended kernel config.
* Mon May 06 2019 Marco Vedovati <mvedovati@suse.com>
- Fixed vsock support (needed for katacontainers interoperability)
* Use `cargo install` to build and install build artifacts
during the build phase, to avoid building the crate twice.
* Sat Mar 23 2019 Flavio Castelli <fcastelli@suse.com>
- Added patches 0001-Fixed-basic-seccomp-filter-for-glibc.patch and
0002-Fixed-advanced-seccomp-filter-for-glibc.patch: change the
seccomp filtering rules to allow the execution of certain syscalls
that are used when the binary is built with glibc instead of musl.
* Fri Mar 22 2019 Flavio Castelli <fcastelli@suse.com>
- Ensure build happens only on supported architectures
- Enable vsock experimental feature
* Fri Mar 15 2019 opensuse Cloud User <fcastelli@suse.com>
- Make spec file arch independent
* Thu Mar 14 2019 Flavio Castelli <fcastelli@suse.com>
- Initial package version 0.15.2