From f527f614c1be4b22cd2683983c32d2ad655ecddc Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fabiano=20Fid=C3=AAncio?= Date: Fri, 19 May 2023 09:26:36 +0200 Subject: [PATCH] release: Kata Containers 3.2.0-alpha1 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - runtime: Use static_sandbox_resource_mgmt=true for TEEs - update tokio dependency - resource-control: fix setting CPU affinities on Linux - runtime: use enable_vcpus_pinning from toml - gha: k8s: Make the tests more reliable - gha: Enable SEV-SNP tests on main - gha: tdx: Use the k3s overlay for kata-cleanup - runtime: Port sev package to main - gpu: Rename the last bits from `gpu` to `nvidia-gpu` - deploy: fix shell script error - ppc64le: switch virtiofsd from C to rust version - osbuilder: Fix indentation in rootfs.sh - virtcontainers/qemu_test.go: Improve coverage - agent: Add context to errors that may occur when AgentConfig file is … - virtcontainers/pkg/compatoci/: Improved coverage for for Kata 2.0 - kata-manager: Fix '-o' syntax and logic error - kata-ctl: Add the option to install kata-ctl to a user specified directory - runtime-rs: fix building instructions to use correct required Rust ve… - Dragonball: use LinuxBootConfigurator::write_bootparams - kata-deploy: Add http_proxy as part of the docker build - kata-deploy: Do not ship the kata tarball - kata-deploy: Build improvements - deploy: Fix arch in image tag - Revert "kata-deploy: Use readinessProbe to ensure everything is ready" - virtcontainers: Improved test coverage for fc.go from 4.6% to 18.5% - main | release: Fix multi-arch publishing is not supported - cache: More fixes to nvidia-gpu kernels caching - runtime: remove overriding ARCH value by default for ppc64le - gha: Fix Body Line Length action flagging empty body commit messages - gha: Fix snap creation workflow - cache: Fix nvidia-gpu version - cache: Update the KERNEL_FLAVOUR list to include nvidia-gpu - packaging: Add SEV-SNP artifacts to main - docs: Mark snap installation method as unmaintained - packaging: Add sev artifacts to main - kata-ctl: add generic kvm check & unit test - Log-parser-rs - warning_fix: fix warnings when build with cargo-1.68.0 - cross-compile: Include documentation and configuration for cross-compile - runtime: Fix virtiofs fd leak - gpu: cold plug VFIO devices - pkg/signals: Improved test coverage 60% to 100% - virtcontainers/persist: Improved test coverage 65% to 87.5% - virtcontainers/clh_test.go: improve unit test coverage - virtcontainers/factory: Improved test coverage - gha: Also run k8s tests on qemu-snp - gha: sev: fix for kata-deploy error - gha: Also run k8s tests on qemu-sev - Implement the "kata-ctl env" command - runtime-rs: support keep_abnormal in toml config - gpu: Build and Ship an GPU enabled Kernel - kata-ctl: checks for kvm, kvm_intel modules loaded - osbuilder: Fix D-Bus enabling in the dracut case - snap: fix docker start fail issue - kata-manager: Fix containerd download - agent: Fix ut issue caused by fd double closed - Bump ttrpc to 0.7.2 and protobuf to 3.2.0 - gpu: Add GPU enabled confguration and runtime - gpu: Do not pass-through PCI (Host) Bridges - cache-components: Fix caching of TDVF and QEMU for TDX - gha: tdx: Ensure kata-deploy is removed after the tests run - versions: Upgrade to Cloud Hypervisor v31.0 - osbuilder: Enable dbus in the dracut case - runtime: Don't create socket file in /run/kata - nydus_rootfs/prefetch_files: add prefetch_files for RAFS - runtime-rs/virtio-fs: add support extra handler for cache mode. - runtime-rs: enable nerdctl to setup cni plugin - tdx: Add artefacts from the latest TDX tools release into main - runtime: support non-root for clh - gha: ci-on-push: Run k8s tests with dragonball - rustjail: Use CPUWeight with systemd and CgroupsV2 - gha: k8s-on-aks: {create,delete} AKS must be a coded-in step - docs: update the rust version from version.yaml - gha: k8s-on-aks: Set {create,delete}_aks as steps - gha: k8s-on-aks: Fix cluster name - gha: Also run k8s tests on AKS with dragonball - gha: Only push images to registry after merging a PR - gha: aks: Use D4s_v5 instance - tools: Avoid building the kernel twice - rustjail: Fix panic when cgroup manager fails - runtime: add filter metrics with specific names - gha: Use ghcr.io for the k8s CI - GHA |Switch "kubernetes tests" from jenkins to GitHub actions - docs: Update CNM url in networking document - kata-ctl: add function to get platform protection. f6e1b1152 agent: update tokio dependency 4cb83dc21 kata-ctl: update tokio dependency df615ff25 runk: update tokio dependency ca6892ddb runtime-rs: update tokio dependency ca1531fe9 runtime: Use static_sandbox_resource_mgmt=true for TEEs fa832f470 gha: k8s: Make the tests more reliable cbb9fe8b8 config: Use standard OVMF with SEV 724437efb kata-deploy: add kata-qemu-sev runtimeclass 521dad2a4 Tests: skip CPU constraints test on SEV and SNP 72308ddb0 gha: ci-on-push: Don't skip tests for SEV da0f92cef gha: ci-on-push: Don't skip tests for SEV-SNP 12f43bea0 gha: tdx: Use the k3s overlay for kata-cleanup 1a3f8fc1a deploy: fix shell script error 87cb98c01 osbuilder: Fix indentation in rootfs.sh c5a59caca ppc64le: switch virtiofsd from C to rust version bfdf0144a versions: Bump virtiofsd to 1.6.1 dd7562522 runtime: pkg/sev: Add kbs utility package for SEV pre-attestation 05de7b260 runtime: Add sev package 3a9d3c72a gpu: Rename the last bits from `gpu` to `nvidia-gpu` 4cde844f7 local-build: Fix kernel-nvidia-gpu target name 593840e07 kata-ctl: Allow INSTALL_PATH= to be specified bdb75fb21 runtime: use enable_vcpus_pinning from toml 20cb87508 virtcontainers/qemu_test.go: Improve test coverage b9a1db260 kata-deploy: Add http_proxy as part of the docker build 3e85bf5b1 resource-control: fix setting CPU affinities on Linux 5f3f844a1 runtime-rs: fix building instructions with respect to required Rust version 777c3dc8d kata-deploy: Do not ship the kata tarball 50cc9c582 tests: Improve coverage for virtcontainers/pkg/compatoci/ for Kata 2.0 136e2415d static-build: Download firecracker instead of building it 3bf767cfc static-build: Adjust ARCH for nydus ac88d34e0 static-build: Use relased binary for CLH (aarch64) 73913c8eb kata-manager: Fix '-o' syntax and logic error 2856d3f23 deploy: Fix arch in image tag e8f81ee93 Revert "kata-deploy: Use readinessProbe to ensure everything is ready" cfe63527c release: Fix multi-arch publishing is not supported 197c33651 Dragonball: use LinuxBootConfigurator::write_bootparams to writes the boot parameters into guest memory. 4d17ea4a0 cache: Fix nvidia-snp caching version a133fadbf cache: Fix nvidia-gpu-tdx-experimental cache URL b9990c201 cache: Fix nvidia-gpu version c9bf7808b cache: Update the KERNEL_FLAVOUR list to include nvidia-gpu 3665b4204 gpu: Rename `gpu` targets to `nvidia-gpu` 2c90cac75 local-build: fixup alphabetization 4da6eb588 kata-deploy: Add qemu-snp shim 14dd05375 kata-deploy: add kata-qemu-snp runtimeclass 0bb37bff7 config: Add SNP configuration af7f2519b versions: update SEV kernel description dbcc3b5cc local-build: fix default values for OVMF build b8bbe6325 gha: build OVMF for tests and release cf0ca265f local-build: Add x86_64 OVMF target db095ddeb cache: add SNP flavor to comments f4ee00576 gha: Build and ship QEMU for SNP 7a58a91fa docs: update SNP guide 879333bfc versions: update SNP QEMU version 38ce4a32a local-build: add support to build QEMU for SEV-SNP 5f8008b69 kata-ctl: add unit test for kvm check a085a6d7b kata-ctl: add generic kvm check 772d4db26 gha: Build and ship SEV initrd 45fa36692 gha: Build and ship SEV OVMF 4770d3064 gha: Build and ship SEV kernel. fb9c1fc36 runtime: Add qemu-sev config 813e4c576 runtimeClasses: add sev runtime class af18806a8 static-build: Add caching support to sev ovmf 76ae7a3ab packaging: adding caching capability for kernel 12c5ef902 packaging: add support to build OVMF for SEV b87820ee8 packaging: add support to build initrd for sev e1f3b871c docs: Mark snap installation method as unmaintained 022a33de9 agent: Add context to errors when AgentConfig file is missing b0e6a094b packaging: Add sev kernel build capability a4c0303d8 virtcontainers: Fixed static checks for improved test coverage for fc.go 8495f830b cross-compile: Include documentation and configuration for cross-compile 13d7f39c7 gpu: Check for VFIO port assignments 6594a9329 tools: made log-parser-rs 03a8cd69c virtcontainers: Improved test coverage for fc.go from 4.6% to 18.5% 9e2b7ff17 gha: sev: fix for kata-deploy error 5c9246db1 gha: Also run k8s tests on qemu-snp c57a44436 gha: Add the ability to test qemu-snp 406419289 env: Utilize arch specific functionality to get cpu details fb40c71a2 env: Check for root privileges 1016bc17b config: Add api to fetch config from default config path b908a780a kata-env: Pass cmd option for file path b1920198b config: Workaround the way agent and hypervisor configs are fetched f2b2621de kata-env: Implement the kata-env command. c849bdb0a gha: Also run k8s tests on qemu-sev 6bf1fc605 virtcontainers/factory: Improved test coverage 0d49ceee0 gha: Fix snap creation workflow warnings 138ada049 gpu: Cold Plug VFIO toml setting defb64334 runtime: remove overriding ARCH value by default for ppc64le f7ad75cb1 gpu: Cold-plug extend the api.md 0fec2e698 gpu: Add cold-plug test f2ebdd81c utils: Get rid of spurious print statement left behind. 9a94f1f14 make: Export VERSION and COMMIT 2f81f48da config: Add file under /opt as another location to look for the config 07f7d17db config: Make the pipe_size field optional 68f635773 config: Make function to get the default conf file public 7565b3356 kata-ctl: Implement Display trait for GuestProtection enum 94a00f934 utils: Make certain constants in utils.rs public 572b338b3 gitignore: Ignore .swp and .swo editor backup files 376884b8a cargo: Update version of clap to 4.1.13 17daeb9dd warning_fix: fix warnings when build with cargo-1.68.0 521519d74 gha: Add the ability to test qemu-sev 205909fbe runtime: Fix virtiofs fd leak 5226f15c8 gha: Fix Body Line Length action flagging empty body commit messages 0f45b0faa virtcontainers/clh_test.go: improve unit test coverage dded731db gpu: Add OVMF setting for MMIO aperture 2a830177c gpu: Add fwcfg helper function 131f056a1 gpu: Extract VFIO Functions to drivers c8cf7ed3b gpu: Add ColdPlug of VFIO devices with devManager e2b5e7f73 gpu: Add Rawdevices to hypervisor 6107c32d7 gpu: Assign default value to cold-plug 377ebc2ad gpu: Add configuration option for cold-plug VFIO c18ceae10 gpu: Add new struct PCIePort 9c38204f1 virtcontainers/persist: Improved test coverage 65% to 87.5% 1c1ee8057 pkg/signals: Improved test coverage 60% to 100% cc8ea3232 runtime-rs: support keep_abnormal in toml config 96e8470db kata-manager: Fix containerd download 432d40744 kata-ctl: checks for kvm, kvm_intel modules loaded b1730e4a6 gpu: Add new kernel build option to usage() 3e7b90226 osbuilder: Fix D-Bus enabling in the dracut case 53c749a9d agent: Fix ut issue caused by fd double closed 2e3f19af9 agent: fix clippy warnings caused by protobuf3 4849c56fa agent: Fix unit test issue cuased by protobuf upgrade 0a582f781 trace-forwarder: remove unused crate protobuf 73253850e kata-ctl: remove unused crate ttrpc 76d2e3054 agent-ctl: Bump ttrpc from 0.6.0 to 0.7.1 eb3d20dcc protocols: Add ut for Serde 59568c79d protocols: add support for Serde a6b4d92c8 runtime-rs: Bump ttrpc from 0.6.0 to 0.7.1 ac7c63bc6 gpu: Add containerd shim for qemu-gpu a0cc8a75f gpu: Add a kube runtime class a81fff706 gpu: Adding a GPU enabled configuration 8af6fc77c agent: Bump ttrpc from 0.6.0 to 0.7.1 009b42dbf protocols: Fix unit test 392732e21 protocols: Bump ttrpc from 0.6.0 to 0.7.1 f4f958d53 gpu: Do not pass-through PCI (Host) Bridges 825e76948 gpu: Add GPU support to default kernel without any TEE e4ee07f7d gpu: Add GPU TDX experimental kernel a1272bcf1 gha: tdx: Fix typo overlay -> overlays 3fa0890e5 cache-components: Fix TDVF caching 80e3a2d40 cache-components: Fix TDX QEMU caching 87ea43cd4 gpu: Add configuration fragment aca6ff728 gpu: Build and Ship an GPU enabled Kernel dc662333d runtime: Increase the dial_timeout eb1762e81 osbuilder: Enable dbus in the dracut case f478b9115 clh: tdx: Update timeouts for confidential guest 3b76abb36 kata-deploy: Ensure node is ready after CRI Engine restart 5ec9ae0f0 kata-deploy: Use readinessProbe to ensure everything is ready ea386700f kata-deploy: Update podOverhead for TDX e31efc861 gha: tdx: Use the k3s overlay 542bb0f3f gha: tdx: Set KUBECONFIG env at the job level d7fdf19e9 gha: tdx: Delete kata-deploy after the tests finish da35241a9 tests: k8s: Skip k8s-cpu-ns when testing TDX db2cac34d runtime: Don't create socket file in /run/kata 6d315719f snap: fix docker start fail issue e4b3b0887 gpu: Add proper CONFIG_LOCALVERSION depending on TEE 69ba2098f runtime-rs: remove network entities and netns b31f103d1 runtime-rs: enable nerdctl cni plugin 69d7a959c gha: ci-on-push: Run tests on TDX 5a0727ecb kata-deploy: Ship kata-qemu-tdx runtimeClass 98682805b config: Add configuration for QEMU TDX 3e1580019 govmm: Directly pass the firmware using -bios with TDX 3c5ffb0c8 govmm: Set "sept-ve-disable=on" ed145365e runtime/qemu: Drop "kvm-type=tdx" 25b3cdd38 virtcontainers: Drop check for the `tdx` CPU flag 01bdacb4e virtcontainers: Also check /sys/firmwares/tdx for TDX 9feec533c cache: Add ability to cache OVMF ce8d98251 gha: Build and ship the OVMF for TDX 39c3fab7b local-build: Add support to build OVMF for TDX 054174d3e versions: Bump OVMF for TDX 800fb49da packaging: Add get_ovmf_image_name() helper fbf03d7ac cache: Document kernel-tdx-experimental 5d79e9696 cache: Add a space to ease the reading of the kernel flavours 6e4726e45 cache: Fix typos fc22ed0a8 gha: Build and ship the Kernel for TDX 502844ced local-build: Add support to build Kernel for TDX b2585eecf local-build: Avoid code duplication building the kernel f33345c31 versions: Update Kernel TDX version 20ab2c242 versions: Move Kernel TDX to its own experimental entry 3d9ce3982 cache: Allow specifying the QEMU_FLAVOUR 33dc6c65a gha: Build and ship QEMU for TDX eceaae30a local-build: Add support to build QEMU for TDX f7b7c187e static-build: Improve qemu-experimental build script 3018c9ad5 versions: Update QEMU TDX version 800ee5cd8 versions: Move QEMU TDX to its own experimental entry 1315bb45f local-build: Add dragonball kernel to the `all` target 73e108136 local-build: Rename non vanilla kernel build functions 1d851b4be local-build: Cosmetic changes in build targets 49ce685eb gha: k8s-on-aks: Always delete the AKS cluster e2a770df5 gha: ci-on-push: Run k8s tests with dragonball d1f550bd1 docs: update the rust version from versions.yaml f3595e48b nydus_rootfs/prefetch_files: add prefetch_files for RAFS 3bfaafbf4 fix: oci hook c1fbaae8d rustjail: Use CPUWeight with systemd and CgroupsV2 375187e04 versions: Upgrade to Cloud Hypervisor v31.0 79f3047f0 gha: k8s-on-aks: {create,delete} AKS must be a coded-in step 2f35b4d4e gha: ci-on-push: Only run on `main` branch e7bd2545e Revert "gha: ci-on-push: Depend on Commit Message Check" 0d96d4963 Revert "gha: ci-on-push: Adjust to using workflow_run" c7ee45f7e Revert "gha: ci-on-push: Adapt chained jobs to workflow_run" 5d4d72064 Revert "gha: k8s-on-aks: Fix cluster name" 13d857a56 gha: k8s-on-aks: Set {create,delete}_aks as steps dc6569dbb runtime-rs/virtio-fs: add support extra handler for cache mode. 85cc5bb53 gha: k8s-on-aks: Fix cluster name 1688e4f3f gha: aks: Use D4s_v5 instance 108d80a86 gha: Add the ability to also test Dragonball 2550d4462 gha: build-kata-static-tarball: Only push to registry after merge e81b8b8ee local-build: build-and-upload-payload is not quay.io specific 13929fc61 gha: publish-kata-deploy-payload: Improve registry login 41026f003 gha: payload-after-push: Pass registry / repo as inputs 7855b4306 gha: ci-on-push: Adapt chained jobs to workflow_run 3a760a157 gha: ci-on-push: Adjust to using workflow_run a159ffdba gha: ci-on-push: Depend on Commit Message Check 8086c75f6 gha: Also run k8s tests on AKS with dragonball fe86c08a6 tools: Avoid building the kernel twice 3215860a4 gha: Set ci-on-push to run on `pull_request_target` d17dfe4cd gha: Use ghcr.io for the k8s CI b661e0cf3 rustjail: Add anyhow context for D-Bus connections 60c62c3b6 gha: Remove kata-deploy-test.yaml 43894e945 gha: Remove kata-deploy-push.yaml cab9ca043 gha: Add a CI pipeline for Kata Containers 53b526b6b gha: k8s: Add snippet to run k8s tests on aks clusters c444c24bc gha: aks: Add snippets to create / delete aks clusters 11e0099fb tests: Move k8s tests to this repo 73be4bd3f gha: Update actions for release.yaml d38d7fbf1 gha: Remove code duplication from release.yaml 56331bd7b gha: Split payload-after-push-*.yaml a552a1953 docs: Update CNM url in networking document 7796e6ccc rustjail: Fix minor grammatical error in function name 41fdda1d8 rustjail: Do not unwrap potential error with cgroup manager a914283ce kata-ctl: add function to get platform protection. 0f7351556 runtime: add filter metrics with specific names cbe6ad903 runtime: support non-root for clh d3bb25418 utils: Add function to check vhost-vsock Signed-off-by: Fabiano Fidêncio --- VERSION | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/VERSION b/VERSION index 2f81ab203..dcd25b873 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -3.2.0-alpha0 +3.2.0-alpha1