lxd-5.1-bp154.1.5

- Update to LXD 5.1. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-5-1-has-been-released/13956
  boo#1199216
  + Sysinfo system call interception
  + lxc cluster role sub-command
  * lxc storage volume info shows volume total size
  + Configurable host network interface naming pattern
  * Overrideable evacuation mode
  * Setting profiles during an image copy
- Backport upstream patch to fix build on x32 systems.
  + 0001-lxd-secommp-Fix-sysinfo-syscall-interception-on-32-b.patch
- Make CRIU a Recommends so that we can still use LXD on 32-bit openSUSE.

- Update to LXD 4.24. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-24-has-been-released/13550
  boo#1199215
  This is the last release before LXD 5.0 (which does not support the Leap 15.3
  kernel -- LXD 5.0 requires kernel 5.4 or newer). Thus this will be the last
  LXD release for Leap 15.3.
  + lxc file mount and new files API
  + Cluster event hub role
  * Reworked lxc storage volume info
  + AppArmor profiles for image extractors
  + Grafana dashboard
  + Degraded startup (missing disk)
  + restricted.containers.interception project option
  + core.metrics_authentication server option
  + Network interface name and MTU in virtual machines
  + I/O uring support for VM storage
  + ipv4.neighbor_probe and ipv6.neighbor_probe NIC options

- Update to LXD 4.21. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-21-has-been-released/12860
  boo#1193649
  + Cluster member groups
  * Reworked cloud-init support
  + Trust certificate self-renewal
  + Restricted disk passthrough in projects
  + Restricted idmap uid/gid in projects
  + List all lxc commands with --sub-commands
  + List instances across all projects with --all-projects
  + New database-leader cluster role
  * Consistent units for byte sizes.
  * Routed networking in virtual machines
  + Support for ipv4.routes and ipv6.routes on routed type NICs
  + Option to skip records for NAT-ed addresses in network zones
  + Allow blocking an IP address family with security filtering options
  + New ceph.rbd.du storage config option to disable potentially slow rbd du
  * Optimized moving of instances and volumes between projects
  * Support for copying/moving custom volumes between cluster members

- Update to LXD 4.20. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-20-has-been-released/12540
  boo#1192432
  + Live migration of virtual machines
  + Network peering for OVN
  + Network zones (DNS)
  + SR-IOV acceleration for OVN networking
  + Linux sysctl configuration on containers
  + Core scheduling for virtual machines
  + Cluster member configuration
  * Improvement to network leases

- Update to LXD 4.18. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-18-has-been-released/12068/2
  boo#1190323
  + Network forwards (floating IPs)
  + Native BGP support
  * NAT address customization with OVN
  * lxd cluster edit for cluster disaster recovery
  + Refresh support for custom volume copies
  + Additional device restrictions for projects
  * --minimal option for lxd init
  * Additional network counters in instance state
- Disable stripping of binaries, which seems to be causing issues at runtime
  due to some ld.so assertion failing. In particular it seems that libdqlite is
  getting corrupted somehow.

- Update to LXD 4.2. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-2-has-been-released/8071
  bsc#1172605
  + VLAN filtering on bridges
  * Expanded network state information
  + Support for custom search domains
  + New IPv4 and IPv6 columns in network lists
  * mips & riscv64 support for containers and s390x support for VMs
  * Using pidfds for all container subprocesses
  * LVM volumes only active when needed
  + DB query tracing support
  * Better cluster life-cycle handling
  * Cleaned up database functions

- Update to LXD 4.1. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-1-has-been-released/7737
  + Push and relay support for images
  + Routing table support for routed NIC devices
  + L2 mode for ipvlan NIC devices
  * Tweaks to the resources API
  * Addition of OS data in the server information
  + New lxd cluster remove-raft-node command
  * Improved table sorting in the command line tool

- Update to LXD 4.0.1. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-0-1-lts-has-been-released/7515
  boo#1170404
  * Tweaked and improved the resources API
  * Added lxd cluster remove-raft-node disaster recovery function
  * Implemented ceph rbd/fs disk devices can now be attached to virtual machines
  * Fixed some data migration issues for users of < 3.0 upgrading to 4.0 directly
  * Fixed file descriptor leakage in exec

- Update to LXD 4.0.0. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-0-lts-has-been-released/7231
  boo#1168338
  Breaking Changes:
  * Removal of --container-only, replaced by --instance-only
  + VM: Support for backup (import/export)
  + PCI and USB devices in the resource API
  + Support for multiple ipvlan NIC devices
  + Support for host addresses on routed NIC
  + Support for editing cluster roles
  + Disk usage for custom volumes
  + Disk usage for snapshots
  + Support for passwordless PKI mode

- Update to LXD 3.23. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-3-23-has-been-released/7140
  boo#1167304
  + Custom storage volumes in projects
  + Schedule snapshots for custom storage volumes
  + Expiry for custom storage volumes
  + Limits for projects
  + Restrictions for projects
  + Improved backup/export logic
  + VM: Support for migration
  + VM: Support for publishing

- Update to LXD 3.22. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-3-22-has-been-released/7027
  boo#1165976
  + Resource limits for projects
  + nftables backend for firewalling
  + Container: Hugepages in unprivileged containers
  + VM: Support for 9p disk devices
  + VM: File templating support

- Update to LXD 3.21. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-3-21-has-been-released/6802
  boo#1163651
  + New way to attach to LXD managed networks
  + Clustering: Configurable number of active and standby database members
  * Ceph ported to new storage driver infrastructure
  * VM: CPU pinning and topology
  * VM: Network and storage optimizations
  * VM: Agent-less reporting of IPv6 addresses
- Remove upstreamed patch. boo#1156336
  - boo1156336-0001-vfs-vfs__delete-fix-double-unlock-of-root-mutex.patch

- BuildRequire pkgconfig(libudev) instead of libudev-devel: Allow
  OBS to shortcut through the -mini flavors.

- Fix bash-completion by installing it to the correct path. boo#1162426

- Backport https://github.com/canonical/dqlite/pull/207 to fix boo#1156336.
  + boo1156336-0001-vfs-vfs__delete-fix-double-unlock-of-root-mutex.patch

- Update to LXD 3.20. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-3-20-has-been-released/6673
  boo#1162299
  + Server side support of API collections
  + New unix-hotplug device type
  + Support for standby cluster members
- Update packaging to use GOPATH="_dist" rather than trying to move everything
  to vendor/. This is the recommended approach by upstream (and makes our
  specfile marginally less horrific).

- Update to LXD 3.19. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-3-19-has-been-released/6529
  boo#1161615
  + Virtual machine support
  + Reworked storage layer
  + Routed networking mode
  + Custom mount options for disk devices
  + Interception of the mount system call
  + Multi-architecture clustering
  + ...
- Rework package handling to fake Go module builds.

- Support older SLE systems which don't have "usermod -w -v".

- Update to LXD 3.18. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-3-18-has-been-released/5869
  boo#1152846
  + New /1.0/instances endpoint
  + Support for storing VM images
  + Extended disk resources information
  + Modification of image expiry date
  + Clustering roles
  + IPv4 configuration when in Fan mode

- Clean up a few remaining specfile bits left over from the 3.17 update.

- Completely drop all stripping -- it appears to cause all sorts of problems
  with unresolved symbol errors.
- Update to LXD 3.17. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-3-17-has-been-released/5679
  boo#1151874
  + Storage pool backed image tarballs and backups
  + Container configuration as YAML on lxc init and lxc launch
  * Ported to final Dqlite 1.0
  * Database rework
  * Container devices rework
  * Storage rework

- Update to LXD 3.15. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-3-15-has-been-released/5218
  + Switch to dqlite 1.0.
  * Reworked DHCP lease handling
  * Reworked cluster heartbeat handling
  * Better syscall interception framework
  * More reliable unix socket proxying
  + Hardware VLAN and MAC filtering on SR-IOV
  + New storage-size option for lxd-p2c
  + IPv4 and IPv6 filtering (spoof protection)
  * Reworked resources API (host hardware)
  + Control over uid, gid and cwd during command execution
  + Quota support for custom storage volumes on dir backend
  * Lots of bug fixes...

- Update to LXD 3.14. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-3-14-has-been-released/5045
  boo#1138770
  + Cluster: Re-worked DNS forwarding
  + Script to factory reset LXD
  + Improvements to syscall interception
  * Lots of bug fixes...

- Update build to use go_nostrip, in order to attempt to fix the broken
  binaries on Leap 15.1. boo#1138769

- Explicitly require lxcfs-hooks-lxc. LXD supports lxcfs but it requires tha
  the LXC configuration files be present.

- Update to LXD 4.17. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-17-has-been-released/11812
  boo#1189645
  + lxd import replaced by new lxd recover
  + Cluster member evacuation
  * Reworked lxc info output
  + Requestor address in lifecycle event
  + USB GPU support in the resources API
  + Monitoring of all projects in lxc monitor
  + Alternative format options in lxc monitor

- Update to LXD 4.16. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-16-has-been-released/11547
  boo#1188946
  + Cluster certificate update
  + Copy/move of custom volumes between projects
  + lxc monitor --pretty now works with all event types
  + Easier revocation of cluster join tokens
  + IP filtering on unmanaged bridges
  + New warnings
  + New lifecycle events
- Remove upstreamed patches:
  + boo1186786-0001-forkexec-handle-broken-close_range-backport-in-openS.patch

- Build with go1.15 for reproducible build results (boo#1102408)

- Add backport for <https://github.com/lxc/lxd/pull/8908> which fixes a
  Leap-specific kernel backport bug (close_range(2) was backported but not the
  flags that it supported in the first version). boo#1186786
  + boo1186786-0001-forkexec-handle-broken-close_range-backport-in-openS.patch

- Build lxd-agent and lxd-p2c statically to match upstream LXD build scripts
  (and to make VMs work properly -- lxd-agent is injected into the VM).
- Update lxd-rpmlintrc to match this.

- Update to LXD 4.15. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-15-has-been-released/11252
  bsc#1186906
  + Network interface hotplug in VMs
  + Configurable shutdown timeout
  + New persistent warnings (time skew, apparmor and virtiofsd)
  + Location field in /dev/lxd API
  + New type and name columns in lxc config trust list
  + Cluster members acting as database stand-by now visible
  + lxc monitor --pretty now supported with lifecycle events
  + New --expire flag for lxc publish
  + Requestor now recorded in lifecyle events
  + Proxy header support on main API endpoint
  + Full swagger coverage of REST API

- fix dependencies for aarch64/armv7l

- Fix build on i586 by if_arch-ing out the VM support on non-x86_64 platforms.

- Update to LXD 4.14. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-14-has-been-released/11008
  bsc#1186647
  + ACL support on managed bridges
  + Cluster member certificates
  + Cluster member description
  + Cluster token based join
  + Server warnings
  + Backup and snapshot project restrictions
  + User keys in device configuration
  + More auto-generated REST-API documentation
- Remove upstreamed patches:
  - boo1181549-0001-vm-qemu-configure-spice-using-spice-parameter.patch

- Don't use SecureBoot OVMF blobs, they don't work with LXD.
- Add backport of <https://github.com/lxc/lxd/pull/8700> to fix LXD VMs on
  openSUSE. boo#1181549
  + boo1181549-0001-vm-qemu-configure-spice-using-spice-parameter.patch

- Update to LXD 4.13. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-13-has-been-released/10737
  boo#1184580
  + Support for instance filters in "lxc list"
  + NVIDIA MIG support for containers
  + System wide configuration in /etc/lxd
  + Project resource usage
  + Snapshot schedule aliases (cron-like @... aliases)
  + images.default_architecture for multi-architecture setups
  + New description column in "lxc {project,profile,storage} list"
  + Reworked handling of default action in network ACLs
  + "lxc stop --console"
  + More auto-generated REST-API documentation

- Move OVMF symlinks to /usr/share, /opt is not allowed in SUSE
  packages.

- Update to LXD 4.12. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-12-has-been-released/10424
  boo#1183111
  + Initial Network ACLs support (OVN-only)
  + Project restricted certificates
  + Server configuration options now supported at the project level
  + Configuration option for Ceph features
  * Projects now supported by lxd init --dump and --preseed
  * Initial auto-generated REST-API documentation
  + VM: Stateful stop and stateful snapshots for virtual machines
- Updated packaging to support VMs, though note that LXD's usage of QEMU causes
  issues with QEMU 5.2 on openSUSE (because of how we package it). See
  <https://github.com/lxc/lxd/issues/8416> for more details. bsc#1181549
- Prefix all binaries with lxd- if they don't start with "lx[cd]". This is to
  avoid having cases like lxd-generate where there's a binary in /usr/bin that
  has a super-generic name.

- Update to LXD 4.11. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-11-has-been-released/10135
  boo#1181825
  + Bulk instance state change API
  + GVRP support for dynamic vlan configuration
  + Server-side instance storage pool migration
  + Volume usage API
  + VM: SR-IOV GPU Support
  + VM: PCI Device Type
  + VM: ISO images now exposed as cdrom

- Update to LXD 4.10. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-10-has-been-released/9894
  boo#1180772
  + VLAN information in network state
  + Proxy device support for VMs (NAT only)
  + Bridge port isolation
  + New sub-commands for image properties
  + Multi-queue networking in VMs

- Update to LXD 4.9. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-9-has-been-released/9673
  boo#1179972
  + Mediated GPU devices for Virtual Machines
  + IOMMU groups for PCI devices
  + QEMU version in server environment information
  * Improved lifecycle events
  + "user." keys allowed on all objects
  + usb_address and pci_address properties in USB/network resources
  + ipv4.dhcp and ipv6.dhcp on OVN networks
  + ovn.ingress_mode on physical networks
  + ipv4.routes.anycast and ipv6.routes.anycast on physical networks
  + limits.instances project option
  + zstd compression for images and backups

- Update to LXD 4.8. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-8-has-been-released/9458
  boo#1178759
  + vTPM support
  + VirtioFS support for virtual machines
  + Full CGroup2 support
  + rebase mode for zfs.clone_copy
  + --reuse option in lxc snapshot and lxc storage volume snapshot
  * restarted lifecycle event
  * Improved logging of user requests

- Update to LXD 4.7. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-7-has-been-released/9213
  boo#1177825
  + Backup (export/import) of custom storage volumes
  + Import of instances with alternative name
  + Virtual machine memory shrinking (and re-grow)
  + USB device passthrough for virtual machines
  + Configurable rsync compression in migration
  + Restrict available uplinks for project networks
  + Add new physical managed network type
  + Support for external routed addresses/subnets on OVN

- Update to LXD 4.6. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-6-has-been-released/8981
  boo#1176737
  + Networks in projects
  + AppArmor profiles for qemu
  - Removal of custom sqlite fork.

- Update to LXD 4.5. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-5-has-been-released/8824
  boo#1175910
  + Initial support for OVN virtual networks
  + Initial bpf syscall interception
  * Support for native terminal device allocation
  * VGA console now working on Windows
  * Improved handling of remote storage pools
  * forkdns and forkproxy now running under AppArmor confinement
  + lxc move now let?s you select a cluster target too

- Update to LXD 4.4. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-4-has-been-released/8574
  boo#1174789
  + VGA console for virtual machines
  + Clustering failure domains
  + /dev/lxd API in virtual machines
  + Graceful daemon shutdown
  + macvlan and sriov managed network types
  + Disk usage limits in projects
  + AppAmor confinement for dnsmasq
  + GPU mediated devices in resources API
  + --console option in lxc launch

- Update to LXD 4.3. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-3-has-been-released/8303
  boo#1173608
  + Block custom storage volumes
  + VM: Initial work for graphical console
  * VM: Rework of PCIe layout
  + VM: GPU passthrough
  * Direct console attach on lxc start and lxc restart
  * Isolated CPUs reporting in resources API