Граф коммитов

4553 Коммитов

Автор SHA1 Сообщение Дата
Tobias Brick 9dc4183cf8
fix tmux crashing bug (#6766)
Co-authored-by: Henry Beberman <henry.beberman@microsoft.com>

Fixes issue #6598 which is a crash on selection in tmux. The fix requires an update to ncurses and a patch to tmux. From the patch comments:

```
ncurses-6.4-20230408 change tparm to require cur_term, which broke tmux usage of it.

ncurses-6.4-20230423 then added tiparm_s that allows usage without cur_term.

tmux change 39d41d0810 uses tiparm_s if it exists, but cannot be cleanly applied to tmux tag 3.2a.

That change uses a config setting to created #defines to determine which version of tparm it should use, and only conditionally uses tiparm_s, because it needs to be backwards compatible with previous versions of ncurses.

But to use that, we would need to get the actual source as it appears in github, rather than the released version (they are different downloads: see https://github.com/tmux/tmux/releases).

Fortunately, we have the luxery of forcing tmux to use a version of ncurses that has the function we want (see above).

Given all this, this patch takes the change to use tiparm_s, removes the conditional compilation portion so it always uses tiparm_s and applies it to the code as it exists in 3.2a.

It has both a build-time and run-time dependency on ncurses-6.4-20230423 or later.
```
2023-11-16 11:49:58 -08:00
CBL-Mariner-Bot e47df523d1
[AUTOPATCHER-CORE] Upgrade vim to 9.0.2068 CVE-2023-46246 (#6758) 2023-11-15 13:22:34 -08:00
Muhammad Falak R Wani f52eea597b
kubernetes: fix version subcommand for components (#6722)
The KUBE_GIT_VERSION_FILE seems to be not present in the release.
Use the alternative KUBE_GIT_VERSION instead.

Fixes: https://github.com/microsoft/CBL-Mariner/issues/6719
Signed-off-by: Muhammad Falak R Wani <falakreyaz@gmail.com>
2023-11-15 07:54:03 +05:30
Nan Liu 85350c6651
Update change logs to sync up with the ones in PMC (#6750) 2023-11-14 17:01:14 -08:00
Chris Gunn bde2e39244
Toolkit: Add retry to safemount.Close(). (#6762) 2023-11-14 16:06:07 -08:00
rlmenge 18dd756586
Add kernel-mos with AMDGPU drivers (#6714)
This change introduces a new x86_64 kernel, kernel-mos, for the purpose of offering a kernel which has newer drivers available then those offered in 5.15 LTS. These newer drivers include newer AMDGPU drivers. This change does not provide an ARM64 kernel.

Kernel-mos pulls from a different source than the generic kernel RPM. The kernel-mos RPM uses the rolling-lts/mariner-2-mos/5.15.y.w tag which contains the additional feature branch for amdgpu drivers.

The kernel-mos.spec also introduces the following subpackages:

kernel-mos-devel: includes the source needed to build kernel-level software
kernel-mos-drivers-accessibility: contains drivers under accessibility
kernel-mos-drivers-gpu: contains drivers under gpu (including amdgpu)
kernel-mos-drivers-sound: contains drivers under sound
kernel-mos-docs: contains the kernel docs
kernel-mos-tools: common linux tools such as cpufreq
kernel-mos-python3-perf: contains the python perf tools
kernel-mos-bpftool: contains bpftool used to inspect btf data

Kernel-mos-signed.spec is also being introduced to allow for signing of the kernel to enable secureboot.
2023-11-14 08:55:00 -08:00
Muhammad Falak R Wani 92a5d7b09e
toolkit: gomod: upgrade gonum 0.11.0 -> 0.14.0 (#6741)
v0.14.0 of the gonum package has a breaking change in the YenKShortestPaths function.
The function now takes an additional argument of cost and returns paths less than the cost.
To have the same semantic behavior prior to this change update arguments in YenKShortestPaths
by assigning `cost == math.Inf(1)`.

Reference: https://github.com/gonum/gonum/pull/1863
Signed-off-by: Muhammad Falak R Wani <falakreyaz@gmail.com>
2023-11-14 08:36:50 +05:30
CBL-Mariner-Bot 370ce67ab4
[AUTO-CHERRYPICK] Rerun toolchain package check sections for fast track builds. - branch main (#6748)
Co-authored-by: Daniel McIlvaney <damcilva@microsoft.com>
2023-11-13 16:18:07 -08:00
Neha Agarwal 209e161eb3
toolkit: fix user instructions on toolchain build error (#6746) 2023-11-13 14:36:47 -08:00
Chris Gunn fcef6c5646
Toolkit: Move `ConfigureDiskBootloader` function. (#6735) 2023-11-13 11:37:25 -08:00
CBL-Mariner-Bot b7cac8052e
[AUTO-CHERRYPICK] Patched `telegraf` CVE-2023-46129. - branch main (#6743)
Co-authored-by: Pawel Winogrodzki <pawelwi@microsoft.com>
2023-11-13 10:09:32 -08:00
CBL-Mariner-Bot 1a5f33330a
[AUTOPATCHER-kernel] Kernel CVE - branch main - CVE-2023-1192 (#6730) 2023-11-13 10:05:28 -08:00
CBL-Mariner-Bot aa9e543b4e
[AUTO-CHERRYPICK] Upgrade memcached to v1.6.22: Fixes CVEs 2023-46852 and 2023-46853 - branch main (#6726)
Co-authored-by: Harshit Gupta <harshitgupta1337@gmail.com>
2023-11-13 12:40:45 -05:00
Muhammad Falak R Wani 867e72b513
toolkit: gomod: bump dependencies to address CVEs (#6721)
Fixes: https://github.com/microsoft/CBL-Mariner/security/dependabot/9
Fixes: https://github.com/microsoft/CBL-Mariner/security/dependabot/10
Signed-off-by: Muhammad Falak R Wani <falakreyaz@gmail.com>
2023-11-13 08:34:40 +05:30
CBL-Mariner-Bot fd9b3a5970
[AUTO-CHERRYPICK] Switched to building with fewer CPUs per package. - branch main (#6731)
Co-authored-by: Pawel Winogrodzki <pawelwi@microsoft.com>
2023-11-10 18:18:18 -08:00
CBL-Mariner-Bot 3602bb5171
Prepare November 2023 Release (#6738) 2023-11-10 20:56:06 -05:00
Chris Gunn e25b8ca2d1
Toolkit: Improvements for UpdateFstab and CreateSparseDisk (#6733) 2023-11-10 16:16:27 -08:00
George Mileka e7a68384a5
Switch ccache to using compiler content instead of its modified time. (#6711) 2023-11-10 10:56:03 -08:00
Sourav Gupta 0776a735d3
Upgrade blobfuse2 2.1.0 -> 2.1.1 (#6658) 2023-11-10 12:03:35 +05:30
CBL-Mariner-Bot 6e870f427c
[AUTO-CHERRYPICK] Upgrade kured to 1.13.2 for CVEs on vendor code - branch main (#6713)
Co-authored-by: rlmenge <rachelmenge@microsoft.com>
2023-11-09 14:39:36 -08:00
Chris Gunn 0fce2cd03d
Fix safechoot unmount ordering. (#6708) 2023-11-09 12:17:51 -08:00
Chris Gunn ed7226875b
Sparse disk creation bug fix. (#6707) 2023-11-09 12:09:48 -08:00
AZaugg aef4bffe04
Cosmetic change with chrony removed references to NetworkManager (#6639) 2023-11-09 09:54:50 -08:00
Pawel Winogrodzki 7cd1a4fa68
Using separate buffer per analyzed spec in `rpmssnapshot.go`. (#6706) 2023-11-08 16:16:25 -08:00
Adub17030MS b371811724
Update multus to v4.0.2 (#6313) 2023-11-08 16:12:37 -08:00
CBL-Mariner-Bot 69a77809e5
[AUTOPATCHER-kernel] Kernel CVE - branch main - CVE-2023-46813 (#6695) 2023-11-08 15:47:52 -08:00
CBL-Mariner-Bot 399a87ab39
[AUTO-CHERRYPICK] Upgraded `PyYAML` to 5.4 to fix CVEs: 2020-1747, CVE-2020-14343. - branch main (#6704)
Co-authored-by: Pawel Winogrodzki <pawelwi@microsoft.com>
2023-11-08 14:53:05 -08:00
CBL-Mariner-Bot cfdaa346f0
[AUTO-CHERRYPICK] Patch frr for CVE-2023-46752 and CVE-2023-46753 - branch main (#6702)
Co-authored-by: rlmenge <rachelmenge@microsoft.com>
2023-11-08 14:52:45 -08:00
Pawel Winogrodzki 641ca09680
Added CredScan exception for doc and test sample secrets. (#6696) 2023-11-08 14:38:21 -08:00
Daniel McIlvaney 294f6810b7
Support N+1 goal nodes for scheduler (#5798)
Co-authored-by: Pawel Winogrodzki <pawelwi@microsoft.com>
2023-11-08 14:33:47 -08:00
CBL-Mariner-Bot 44e68231e2
[AUTO-CHERRYPICK] Patched CVE-2023-46316 for `traceroute` - branch main. (#6701)
Co-authored-by: Sumynwa <sumsharma@microsoft.com>
2023-11-08 14:32:11 -08:00
Dallas Delaney 477311bca6
Upgrade kernel-mshv, kernel-uvm, kernel-uvm-cvm (#6676) 2023-11-08 11:02:30 -08:00
Saul Paredes ee94c2b4a2
Upgrade moby-containerd-cc to 1.7.2 (#6428) 2023-11-08 10:10:27 -08:00
Dallas Delaney ee1937ea30
Upgrade kata-containers-cc to 0.6.2 (#6564)
Co-authored-by: Saul Paredes <saulparedes@microsoft.com>
2023-11-08 10:00:40 -08:00
Neha Agarwal 5fc159878a
containerized-build: Add option to keep container (#6659) 2023-11-08 09:47:05 -08:00
Riken Maharjan 772da334ba
Add debug to PR check pipeline to debug intermittent issue (#6692) 2023-11-08 08:48:18 -08:00
Adub17030MS cd114ea0a2
fix wrong rights for toolkit/imageconfigs/postinstallscripts/remove-tdnf-cache.sh (#6691) 2023-11-07 15:20:23 -08:00
CBL-Mariner-Bot 78f43889f7
[AUTOPATCHER-kernel] Kernel CVE - branch main - CVE-2023-5717 (#6683) 2023-11-07 14:51:17 -08:00
nicolas guibourge f8dccaf140
fix wrong rights for toolkit/imageconfigs/additionalconfigs/configure… (#6690)
Co-authored-by: CBL-Mariner Servicing Account <cblmargh@microsoft.com>
2023-11-07 14:35:49 -08:00
Riken Maharjan 663e2f8d7a
Add retry workaround when Package Installation fail. (#6687) 2023-11-07 13:40:44 -08:00
Chris Gunn 712995da4c
Image Customizer: Move partition utils into their own file. (#6685) 2023-11-06 16:20:08 -08:00
Mykhailo Bykhovtsev c1a06bb534
Add tdnf remove cache script and run it for marketplace images (#6446) 2023-11-06 16:00:56 -08:00
Chris Gunn 09213dcaa2
Use embedded binary resources for grub templates. (#6682) 2023-11-06 15:59:35 -08:00
CBL-Mariner-Bot bba17d6291
[AUTOPATCHER-kernel] Kernel upgrade to version 5.15.137.1 - branch main (#6681) 2023-11-06 15:09:02 -08:00
jslobodzian 75388f10ad
Clarify login instructions (#6677) 2023-11-06 13:17:29 -05:00
Cameron E Baird 9732d2c839
Nopatch kernel CVE-2023-2430, CVE-2023-3338, CVE-2023-39191, CVE-2023-42752 ... (#6651) 2023-11-06 10:05:44 -08:00
jslobodzian 19d3bfac77
Clarify that passwords are not permitted for production use in meta user data configuration file (#6675) 2023-11-06 12:14:48 -05:00
jslobodzian 043908393a
Cherry Pick bug and feature template updates to main (#6674) 2023-11-06 11:57:08 -05:00
himaja-kesari 19157a23e8
upgrade mysql to 8.0.34 (#6666) 2023-11-06 08:47:21 -08:00
Jon Slobodzian f33dbeb07c Revert "[AUTOPATCHER-CORE] Upgrade telegraf to 1.28.3 To pull the fix for Telegraf update for service account token (#6655)"
This reverts commit b779618270.
2023-11-06 02:56:59 -08:00