summaryrefslogtreecommitdiff
path: root/package/runc
AgeCommit message (Collapse)Author
2017-01-23runc: security bump to fix CVE-2016-9962Peter Korsgaard
RunC allowed additional container processes via runc exec to be ptraced by the pid 1 of the container. This allows the main processes of the container, if running as root, to gain access to file-descriptors of these new processes during the initialization and can lead to container escapes or modification of runC state before the process is fully placed inside the container. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-12-21runc: pass -extldflags '-static' in correct variableFabrice Fontaine
commit 9101ce5800 (runc: pass -extldflags '-static' on when BR2_STATIC_LIBS=y) contained a small copy/paste error, FLANNEL_GLDFLAGS was used instead of RUNC_GLDFLAGS. [Peter: refer to exact commit] Signed-off-by: Fabrice Fontaine <fabrice.fontaine@orange.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-10-19runc: bump version to v1.0.0-rc2Christian Stewart
Signed-off-by: Christian Stewart <christian@paral.in> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-08-26package/runc: bump version to cc29e3Christian Stewart
Bump runc to cc29e3dded8e27ba8f65738f40d251c885030a28 This version is required by Docker Engine v1.12.0. Signed-off-by: Christian Stewart <christian@paral.in> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> (cherry picked from commit 6ad14a368798619d67d68a3b297333c153230ae1)
2016-07-24runc: pass -extldflags '-static' on when BR2_STATIC_LIBS=yThomas Petazzoni
There is no reason to link Go binaries statically, unless when BR2_STATIC_LIBS=y. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Tested-by: Christian Stewart <christian@paral.in> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-07-08package/runc: use BR_PATH to find pkg-configRomain Naour
When BR2_PACKAGE_LIBSECCOMP is set, go will try to find libseccomp library using pkg-config. But pkg-config is not in the PATH when go is called during the runc build. Set the correct PATH in RUNC_MAKE_ENV. Fixes: http://autobuild.buildroot.net/results/fea/fea069fec671b32bffd3d133898d71d45abab552 Signed-off-by: Romain Naour <romain.naour@gmail.com> Cc: Christian Stewart <christian@paral.in> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-07-06runc: add missing dependency on host-pkgconfThomas Petazzoni
runc uses pkg-config to detect libseccomp, so we need to depend on it. Fixes: http://autobuild.buildroot.net/results/72f1cf194843b8519a3ebf213cdbf06873809055/ Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-07-06runc: depends on CGO linking being supportedVicente Olivert Riera
Fixes: http://autobuild.buildroot.net/results/35d72aac0b0cc0ac92bf309d1a957d7903b1411a/ Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-07-05runc: new packageChristian Stewart
runC is a CLI tool for spawning and running containers according to the OCP specification. runC is used by the latest Docker engine versions, however, runc itself is standalone and has no other dependencies. https://runc.io/ Signed-off-by: Christian Stewart <christian@paral.in> Reviewed-by: Romain Naour <romain.naour@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>