b12f/nixpkgs
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity
271735 commits 2 branches 0 tags 3.3 GiB
Commit graph

1929 commits

Author SHA1 Message Date
Ivan Babrou e431ff7e2e docker-buildx: init at 0.5.1 
Installing docker-buildx enables buildx subcommand on the client:

* https://github.com/docker/buildx
 2021-01-21 12:52:45 -08:00
zowoq 30ab92ea31 conmon: 2.0.24 -> 2.0.25 
https://github.com/containers/conmon/releases/tag/v2.0.25
 2021-01-21 18:35:16 +10:00
R. RyanTM a17adff3e9 docker-compose: 1.27.4 -> 1.28.0 2021-01-21 07:50:25 +00:00
Mario Rodas 369e772cda
Merge pull request #109955 from r-ryantm/auto-update/dumb-init 
dumb-init: 1.2.4 -> 1.2.5
 2021-01-20 21:24:40 -05:00
zowoq 31f5dd3f36 treewide: editorconfig fixes 
- remove trailing whitespace
- use spaces for indentation
 2021-01-20 09:11:11 +10:00
Drew Risinger 9e403b19a1 qemu: 5.1.0 -> 5.2.0 
Updates to latest version of QEMU.
The build system has changed to ninja.
There are several configuration flags that aren't enabled. I will
defer to maintainers on those.

Adds autoPatchelfHook for patching output dynamically linked binaries.

qemu: use Nix's meson vs bundled

qemu: remove custom directory locations

It appears that these directories are no longer automatically prefixed
with $out/, so they are now trying to write to the system /etc/, /var/
directories, which is not permitted in sandbox.
The default directories seem to work OK, so using those.
 2021-01-19 14:06:28 -05:00
R. RyanTM 2ed911999c dumb-init: 1.2.4 -> 1.2.5 2021-01-19 12:17:33 +00:00
R. RyanTM d71bca5967
cri-o-unwrapped: 1.19.0 -> 1.20.0 (#109920) 2021-01-19 18:58:49 +10:00
Sandro 1afec60627
Merge pull request #95274 from misuzu/qemu-iscsi 2021-01-17 20:16:06 +01:00
Ben Siraphob 5d566c43b4 pkgs/applications: pkgconfig -> pkg-config 2021-01-16 23:49:59 -08:00
Jörg Thalheim f3042e3078
Merge pull request #108862 from cpcloud/refactor-nvidia-containers 2021-01-15 11:10:09 +00:00
Ben Siraphob 108bdac3d9 pkgs/applications: stdenv.lib -> lib 2021-01-15 14:24:03 +07:00
zowoq 93e5d99592 conmon: 2.0.22 -> 2.0.24 
https://github.com/containers/conmon/releases/tag/v2.0.24
 2021-01-15 13:03:08 +10:00
zowoq 8a4b39330f Revert "conmon: 2.0.22 -> 2.0.23" 
This reverts commit 59d4583cf3.

Broken release.
 2021-01-15 04:44:13 +10:00
Sascha Grunert 59d4583cf3 conmon: 2.0.22 -> 2.0.23 
Signed-off-by: Sascha Grunert <sgrunert@suse.com>
 2021-01-14 08:03:25 -08:00
Mark Vainomaa b451286b1f
docker: 19.03.4 -> 20.10.2 (#108960) 
This commit refactors the build process to handle Docker engine and
CLI split.
 2021-01-13 11:33:14 +01:00
Sandro e12409de89
Merge pull request #108959 from mikroskeem/docker-proxy-update 
docker-proxy: 7b2b1fe -> fa125a3
 2021-01-13 09:18:19 +01:00
Profpatsch 4a7f99d55d treewide: with stdenv.lib; in meta -> with lib; 
Part of: https://github.com/NixOS/nixpkgs/issues/108938

meta = with stdenv.lib;

is a widely used pattern. We want to slowly remove
the `stdenv.lib` indirection and encourage people
to use `lib` directly. Thus let’s start with the meta
field.

This used a rewriting script to mostly automatically
replace all occurances of this pattern, and add the
`lib` argument to the package header if it doesn’t
exist yet.

The script in its current form is available at
https://cs.tvl.fyi/depot@2f807d7f141068d2d60676a89213eaa5353ca6e0/-/blob/users/Profpatsch/nixpkgs-rewriter/default.nix
 2021-01-11 10:38:22 +01:00
Mark Vainomaa 855bf1a311
docker-proxy: 7b2b1fe -> fa125a3 2021-01-10 17:31:10 +02:00
Phillip Cloud 4cd4468144 nvidia-container-toolkit: remove unused input 2021-01-10 08:54:38 -05:00
Phillip Cloud 5af3dd4a96 nvidia-container-toolkit: fix license 2021-01-10 08:54:38 -05:00
Phillip Cloud 8f33bef20f nvidia-container-runtime: fix license 2021-01-10 08:54:38 -05:00
Phillip Cloud 7eed27754c libnvidia-container: fix license 2021-01-10 08:54:38 -05:00
Phillip Cloud 8169d5c644 nvidia-container-toolkit: pass nvidia-container-runtime into drv 2021-01-10 08:54:38 -05:00
Phillip Cloud f91f9eacd6 nvidia-container-toolkit: format 2021-01-10 08:54:37 -05:00
Phillip Cloud bc43141b48 nvidia-container-runtime: format 2021-01-10 08:54:37 -05:00
Phillip Cloud b0b92e598d libnvidia-container: remove line break 2021-01-10 08:54:37 -05:00
Phillip Cloud d93754bb40 nvidia-docker: fix lib access 2021-01-10 08:54:37 -05:00
Phillip Cloud e94a0228c5 nvidia-docker: clean up drv inputs 2021-01-10 08:54:37 -05:00
Phillip Cloud 6b5b64173f nvidia-docker: no longer perform templating of container runtime config files 2021-01-10 08:54:37 -05:00
Phillip Cloud 91b47ae43c nvidia-docker: podman-config.toml -> nvidia-podman/config.toml 2021-01-10 08:54:37 -05:00
Phillip Cloud e67c679649 nvidia-docker: split out nvidia-container-toolkit into separate drv 2021-01-10 08:54:37 -05:00
Phillip Cloud 610ec202dc nvidia-docker: split out nvidia-container-runtime into separate drv 2021-01-10 08:54:37 -05:00
Phillip Cloud 27cd42fd6d nvidia-docker: use pname for repo attribute 2021-01-10 08:54:37 -05:00
Phillip Cloud b578c28217 nvidia-docker: split out libnvidia-container into separate drv 2021-01-10 08:54:37 -05:00
Michael Weiss 8ae8602bf7
Merge branch 'master' into staging-next 
Manually resolved a conflict in
pkgs/development/libraries/libbladeRF/default.nix.
 2021-01-09 12:16:11 +01:00
Phillip Cloud 7115e5ac8d nvidia-docker: fix pname of nvidia-container-runtime 2021-01-08 09:29:56 -05:00
Phillip Cloud 890a298409 nvidia-docker: wrapProgram to pickup needed runc executable 2021-01-08 09:29:56 -05:00
Phillip Cloud df43c0f9da nvidia-docker: install podman config 2021-01-08 09:29:56 -05:00
Jan Tojnar e6c0c98940
Merge branch 'master' into staging-next 
zynaddsubfx conflict has been updated to 3.0.1, which conflicted with rewrite after 3.0.5 update on a different branch.
 2021-01-08 02:07:34 +01:00
Phillip Cloud 976c3999a2 nvidia-docker: fix VERSION reporting bug 2021-01-07 15:56:08 -05:00
github-actions[bot] 5c072a088d
Merge master into staging-next 2021-01-07 18:40:50 +00:00
Phillip Cloud 6468f2cb69 nvidia-docker: 2.0.3 -> 2.5.0 2021-01-07 07:50:01 -05:00
Ben Siraphob b04fc593e7 treewide: cmake buildInputs to nativeBuildInputs, minor cleanups 2021-01-01 11:52:33 +07:00
Jörg Thalheim f91d7cf059
cntr: 1.2.1 -> 1.4.1 2020-12-30 07:09:54 +01:00
misuzu c5dd597870 qemu: libiscsi support 2020-12-29 16:19:42 +02:00
Florian Klink f13837054b
Merge pull request #107778 from zowoq/containerd 
containerd: misc fixes
 2020-12-29 01:04:10 +01:00
zowoq 824cfdd019 docker: disable containerd completion 
not available in containerd prior to 1.4
 2020-12-29 09:33:28 +10:00
zowoq d7d6f5507c containerd: misc fixes 
- build man during buildPhase
- use `src.rev` for `commit`
- install completion
 2020-12-29 09:33:28 +10:00
freezeboy 8ab8ada2f5 charliecloud: 0.20 -> 0.21 2020-12-27 22:34:18 +01:00
zowoq 70bcf62c05 conmon: 2.0.21 -> 2.0.22 
https://github.com/containers/conmon/releases/tag/v2.0.22
 2020-12-21 05:28:42 +10:00
Michael Weiss 52424415bc
vpcs: 0.8 -> 0.8.1 
Thanks to Repology / Alpine Linux I noticed that the GNS3 team continued
the development. From their README:
> This is a continuation of VPCS, based on the last development version
> and improved with patches wrote by various people from the community.
> The original VPCS code, which is unfortunately not maintained anymore,
> can be viewed on https://sourceforge.net/p/vpcs/code/
 2020-12-18 20:45:54 +01:00
Mario Rodas 9c8a7716d3 docker-slim: 1.32.0 -> 1.33.0 
https://github.com/docker-slim/docker-slim/releases/tag/1.33.0
 2020-12-15 13:45:00 -05:00
R. RyanTM 4cddb0930d dumb-init: 1.2.3 -> 1.2.4 2020-12-10 15:01:17 +00:00
zowoq cfbc1af189 podman: 2.2.0 -> 2.2.1 
https://github.com/containers/podman/releases/tag/v2.2.1
 2020-12-09 05:37:31 +10:00
R. RyanTM bbbb6dfa36 dumb-init: 1.2.2 -> 1.2.3 2020-12-04 10:05:05 +00:00
Maximilian Bosch ccb3f1c9dd
Merge pull request #105591 from mweinelt/qemu 
qemu: fix CVE-2020-28916
 2020-12-02 21:14:16 +01:00
Sergey Lukjanov b999879206 docker: 19.03.13 -> 19.03.14 2020-12-01 23:34:59 -08:00
Martin Weinelt 2d55b8def4 containerd: update commit id for version indicator 
I forogt to update the `commit` value in 8884729, which is why this the
version output was wrong:

```
❯ ./result/bin/containerd -v
containerd github.com/containerd/containerd v1.4.3 7ad184331fa3e55e52b890ea95e65ba581ae3429
```

This change corrects it.

```
❯ ./result/bin/containerd -v
containerd github.com/containerd/containerd v1.4.3 269548fa27e0089a8b8278fc4fc781d7f65a939b
```
 2020-12-01 18:55:01 +01:00
Martin Weinelt 8884729f19
containerd: 1.4.2 -> 1.4.3 
Access controls for the shim’s API socket verified that the connecting
process had an effective UID of 0, but did not otherwise restrict
access to the abstract Unix domain socket. This would allow malicious
containers running in the same network namespace as the shim, with an
effective UID of 0 but otherwise reduced privileges, to cause new
processes to be run with elevated privileges.

Fixes: CVE-2020-15257
 2020-12-01 17:10:19 +01:00
Martin Weinelt c3f268000e
qemu: fix CVE-2020-28916 
While receiving packets via e1000e_write_packet_to_guest an infinite
loop could be triggered if the receive descriptor had a NULL buffer
address.

A privileged guest user could use this to induce a DoS Scenario.

Fixes: CVE-2020-28916
 2020-12-01 16:54:21 +01:00
Sascha Grunert bd6067cd5d podman: 2.1.0 -> 2.2.0 
Signed-off-by: Sascha Grunert <sgrunert@suse.com>
 2020-12-01 22:20:11 +10:00
Martin Weinelt 3200eaef74
Merge pull request #105157 from mweinelt/libslirp 
libslirp: fix CVE-2020-29129
 2020-11-30 15:56:09 +01:00
Martin Weinelt bd3ce46719
qemu: fix CVE-2020-29129, CVE-2020-29130 in vendored libslirp 
Fixes out-of-bounds access in libslirp while processing ARP/NCSI packets.

Fixes: CVE-2020-29129, CVE-2020-29130
 2020-11-28 02:47:44 +01:00
Sandro 1542fd8e8d
Merge pull request #77421 from Shados/xen-build-efi-binaries 2020-11-27 23:49:07 +01:00
Sandro e6126df5d9
Merge pull request #105132 from r-ryantm/auto-update/containerd 
containerd: 1.4.1 -> 1.4.2
 2020-11-27 13:15:31 +01:00
R. RyanTM 706ed34eb3 containerd: 1.4.1 -> 1.4.2 2020-11-27 10:28:11 +00:00
Sandro d3badf3b43
Merge pull request #105075 from r-ryantm/auto-update/singularity 
singularity: 3.6.4 -> 3.7.0
 2020-11-26 23:10:50 +01:00
Florian Klink 1cdbdc3278
Merge pull request #104545 from zowoq/runc 
runc: add wrapper for systemd
 2020-11-26 22:16:53 +01:00
R. RyanTM 1b0e3aa842 singularity: 3.6.4 -> 3.7.0 2020-11-26 20:28:31 +00:00
Sandro 3d4e98ea6e
Merge pull request #103466 from CheariX/open-vm-tools-11.2.0 2020-11-25 11:25:26 +01:00
Graham Christensen bc49a0815a
utillinux: rename to util-linux 2020-11-24 12:42:06 -05:00
Sascha Grunert 52271f44b1 crun: 0.15.1 -> 0.16 
Signed-off-by: Sascha Grunert <sgrunert@suse.com>
 2020-11-24 19:35:46 +10:00
zowoq 50e24b8e0a runc: add wrapper for procps, systemd 
for cgroupsv2 it needs `busctl` and `systemctl` in its PATH.
 2020-11-23 08:46:34 +10:00
zowoq a82d8ca64d runc: add docker to passthru.tests 2020-11-23 08:43:08 +10:00
zowoq cdf6ffdf2e docker: add passthru.tests 2020-11-23 08:43:08 +10:00
zowoq fe78178e09 containerd: add passthru.tests 2020-11-23 08:43:08 +10:00
zowoq 90bb6fbb24 singularity: drop unneeded removeReferencesTo 2020-11-18 08:13:34 +10:00
zowoq 33822cb12f docker: drop redundant removeReferencesTo 2020-11-18 08:13:34 +10:00
Oleksii Filonenko 512c3c0a05 maintainers: rename filalex77 -> Br1ght0ne 2020-11-17 13:09:31 +02:00
Austin Seipp a83e5c4245
firecracker: 0.22.0 -> 0.23.0 
Closes #102789.

Signed-off-by: Austin Seipp <aseipp@pobox.com>
 2020-11-15 21:28:29 -06:00
Christian Mainka 44e2d0d402 open-vm-tools: 11.1.5 -> 11.2.0 2020-11-11 16:22:41 +01:00
Alexander Bich fae02c06b8 ocaml-libvirt: 0.6.1.4.2017-11-08-unstable -> 0.6.1.5 2020-11-10 05:57:39 +01:00
Maximilian Bosch 50957910fc
Merge pull request #102481 from mweinelt/qemu/cve-2020-27617 
qemu: apply patch for CVE-2020-27617
 2020-11-09 23:51:22 +01:00
Jörg Thalheim feeda77ec2
Merge pull request #101820 from Chiiruno/dev/looking-glass 
looking-glass-client: B1 -> B2
 2020-11-09 14:43:27 +01:00
Okina Matara 56fb786f82
looking-glass-client: B1 -> B2 2020-11-07 02:41:16 -06:00
markuskowa b580137d40
Merge pull request #100777 from jbedo/singularity 
singularity: 3.6.3 -> 3.6.4
 2020-11-06 00:13:36 +01:00
Sascha Grunert d48026dc5b crun: 0.15 -> 0.15.1 
Signed-off-by: Sascha Grunert <sgrunert@suse.com>
 2020-11-04 08:28:22 +10:00
Phillip Cloud ea270c00b0
bug: fix libnvidia-container build (#101665) 2020-11-03 13:17:06 +01:00
R. RyanTM 2702aced5e charliecloud: 0.19 -> 0.20 2020-11-02 08:19:19 -08:00
Martin Weinelt 0c54b757e9
qemu: apply patch for CVE-2020-27617 
An assert(3) failure issue was found in the networking helper functions of QEMU. It could occur in the eth_get_gso_type() routine, if a packet does not have a valid networking L3 protocol (ex. IPv4, IPv6) value. A guest user may use this flaw to crash the QEMU process on the host resulting in DoS scenario.

Fixes: CVE-2020-27617
 2020-11-02 14:01:01 +01:00
WORLDofPEACE f2d8aebe8e
Merge pull request #101493 from Magicloud/vbox6116 
virtualbox: 6.1.14 -> 6.1.16
 2020-10-27 12:37:16 -04:00
Milan Pässler 0dc4ced3eb docker: 19.03.12 -> 19.03.13 
Added libseccomp and pkgconfig inputs to containerd, because 1.3.x requires them.
However containerd 1.2.x and 1.4.x do not.
 2020-10-27 12:48:51 +01:00
R. RyanTM 6a42a70023 open-vm-tools: 11.1.0 -> 11.1.5 2020-10-25 09:39:40 +01:00
Magicloud e416dc89a1 virtualbox: 6.1.14 -> 6.1.16 
6.1.16 is the latest release of Virtualbox. And it is necessary to have it when using Linux 5.9 kernel.
 2020-10-24 02:53:08 +08:00
Sandro Jäckel e44cc1404b docker: use upstream repo for containerd 
http://github.com/docker/containerd is archived and redirects to
https://github.com/docker-archive/containerd.

To make updates easier track the upstream repo which Docker uses.
 2020-10-24 00:12:06 +10:00
Josh Holland 802e9ea3a6 open-vm-tools: fix build w/glibc-2.32 2020-10-21 14:21:49 +01:00
Andreas Rammhold 2451796b49
qemu: make ncurses optional for the test runner 
This shaves another 3MB off the closure size of QEMU.
 2020-10-19 17:49:31 +02:00
Andreas Rammhold e79eed4840
qemu: strip down the features for the test runner 
This allows much faster VM-test based systemd testing as the closure of
qemu suddenly shrinks to reasonable sizes again.
 2020-10-19 17:39:47 +02:00
Justin Bedo 8a788b8587
singularity: 3.6.3 -> 3.6.4 
Important security release addressing CVE-2020-15229.
 2020-10-19 09:11:34 +11:00