11443 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Christian Brauner	0196c4df71	oss-fuzz: handle dependencies ... Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>	2022-06-09 23:07:08 +02:00
Christian Brauner	9fec9fef72	build: separate oss-fuzz tests from regular test builds ... Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>	2022-06-09 23:07:08 +02:00
Christian Brauner	a8e5f3623e	github/workflows/cifuzz: update to Ubuntu 22.04 ... Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>	2022-06-09 23:07:07 +02:00
Christian Brauner	d42a3b1366	build: add oss-fuzz switch ... Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>	2022-06-09 23:07:07 +02:00
Christian Brauner	0b9adfdad4	build: add seccomp build option ... Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>	2022-06-09 23:07:07 +02:00
Christian Brauner	826391b2a2	build: fix build with various options turned off ... Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>	2022-06-09 23:07:07 +02:00
Christian Brauner	abc5e6bb94	build: tweak build flags ... Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>	2022-06-09 23:07:07 +02:00
Stéphane Graber	31c831dfe4	Merge pull request #4141 from lxc/dependabot/github_actions/actions/upload-artifact-3 ... build(deps): bump actions/upload-artifact from 1 to 3	2022-06-09 02:02:41 -04:00
dependabot[bot]	cb3178a604	build(deps): bump actions/upload-artifact from 1 to 3 ... Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 1 to 3. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v1...v3) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2022-06-09 06:01:55 +00:00
Stéphane Graber	706b3f2d0a	Merge pull request #4140 from turrisxyz/Dependabot-GitHub-Actions ... chore: Included githubactions in the dependabot config	2022-06-09 02:01:31 -04:00
naveen	7ceb9b99ba	chore: Included githubactions in the dependabot config ... This should help with keeping the GitHub actions updated on new releases. This will also help with keeping it secure. Dependabot helps in keeping the supply chain secure https://docs.github.com/en/code-security/dependabot GitHub actions up to date https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot https://github.com/ossf/scorecard/blob/main/docs/checks.md#dependency-update-tool Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>	2022-06-09 01:29:39 +00:00
Christian Brauner	46341a7598	Merge pull request #4139 from stgraber/master ... Github workflow fixes	2022-06-09 00:46:28 +02:00
Stéphane Graber	554060879b	github: Fix compiler version task for coverity ... Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>	2022-06-08 17:46:50 -04:00
Stéphane Graber	59d1841165	github: Fix bad syntax in cifuzz ... Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>	2022-06-08 17:44:08 -04:00
Christian Brauner	0f8c8f89b3	Merge pull request #4137 from brauner/2022-06-08.stgraber.master ... build: remove autotools and finish meson port	2022-06-08 20:43:10 +02:00
Christian Brauner	b4b1f1498c	github/workflows/sanitizers: port sanitizers builds to meson ... Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>	2022-06-08 20:15:07 +02:00
Christian Brauner	0ab1a63461	github/workflows: port all workflows to Ubuntu 22.04 ... So we have a new enough meson version everywhere. Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>	2022-06-08 20:15:07 +02:00
Christian Brauner	272f1ee460	github/workflows/cifuzz: ensure necessary paths are added ... Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>	2022-06-08 20:15:07 +02:00
Christian Brauner	2fb1430b3f	github/workflows/build: remove sanitizer build ... We have a separate workflow for this. Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>	2022-06-08 20:15:07 +02:00
Christian Brauner	77b2a6c405	github/workflows/build: add -Db_lto_mode=default ... Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>	2022-06-08 20:15:07 +02:00
Christian Brauner	47991ce753	github/workflows/build: install lvvm as well ... Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>	2022-06-08 20:15:07 +02:00
Christian Brauner	b8b31ab36a	oss-fuzz: more meson options ... Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>	2022-06-08 20:15:07 +02:00
Christian Brauner	d679f7d85f	build: lxc-init doesn't need to build the whole config infra ... Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>	2022-06-08 20:03:59 +02:00
Christian Brauner	575d0e34ae	build: add additional command line switches ... In order to compile for fuzzers where we will need and want to turn a bunch of things off add command line switches that allow us to do so. Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>	2022-06-08 20:03:05 +02:00
Christian Brauner	5b726537aa	build: use liblxc_sources everywhere ... The old split didn't buy us a lot and causes problems when buidling with sanitizers enabled so just use the full sources. Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>	2022-06-08 20:01:26 +02:00
Christian Brauner	6bb8d4ce31	config: make lxc-{containers,net}.in executable ... Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>	2022-06-08 18:52:14 +02:00
Stéphane Graber	bb97e07995	Merge pull request #4136 from turrisxyz/Pinned-Dependencies-GitHub ... chore: Set permissions for GitHub actions	2022-06-08 01:26:59 -04:00
Stéphane Graber	cd3d65155b	meson: Always defined IS_BIONIC ... Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>	2022-06-08 01:00:51 -04:00
Stéphane Graber	6ae86a9c17	src: Don't use ifdef/defined for config.h ... Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>	2022-06-08 00:47:05 -04:00
Stéphane Graber	9c3a240bef	github: Update coverity workflow for meson ... Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>	2022-06-08 00:47:04 -04:00
Stéphane Graber	6f9fabfcb8	github: Update build test for meson ... Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>	2022-06-08 00:47:03 -04:00
Stéphane Graber	826cc3ddca	README: Update for meson ... Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>	2022-06-08 00:47:02 -04:00
Stéphane Graber	f2c06c6c2d	doc: Update for meson ... Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>	2022-06-08 00:47:01 -04:00
Stéphane Graber	62423c89e7	meson: Add basic Makefile ... Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>	2022-06-08 00:47:00 -04:00
Stéphane Graber	4c8139f9cf	Remove autotools ... Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>	2022-06-08 00:46:59 -04:00
neilnaveen	fe3add2ab8	chore: Set permissions for GitHub actions ... Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much. - Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs [Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/) Signed-off-by: neilnaveen <42328488+neilnaveen@users.noreply.github.com>	2022-06-08 01:08:12 +00:00
Christian Brauner	099bd13ce5	Merge pull request #4135 from stgraber/meson ... More meson fixes	2022-06-07 23:51:34 +02:00
Stéphane Graber	7eac83c1b1	meson: Fix mntent include condition ... Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>	2022-06-07 17:26:47 -04:00
Stéphane Graber	61c40023d0	lxc/rexec: Use HAVE_FEXECVE ... Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>	2022-06-07 17:26:46 -04:00
Stéphane Graber	faa4ae06ef	meson: Add lxcmntent to unmount-namespace hook ... Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>	2022-06-07 17:18:14 -04:00
Stéphane Graber	199241209f	meson: Add missing prlimit include ... Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>	2022-06-07 17:18:13 -04:00
Stéphane Graber	7a489adb89	meson: Only build seccomp and selinux when needed ... Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>	2022-06-07 17:18:12 -04:00
Stéphane Graber	4c96107d1e	meson: Always define HAVE_LIBURING ... Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>	2022-06-07 17:18:11 -04:00
Stéphane Graber	869deb9173	meson: seccomp is optional ... Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>	2022-06-07 17:18:10 -04:00
Stéphane Graber	f7de7d7adf	meson: Fix on shallow git trees ... Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>	2022-06-07 17:18:09 -04:00
Stéphane Graber	d5dff814ac	meson: Add bionic detection ... Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>	2022-06-07 17:18:08 -04:00
Stéphane Graber	e18dbec746	meson: Fix RPM spec variables ... Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>	2022-06-07 17:18:07 -04:00
Stéphane Graber	8135966d1d	meson: Make lxc-user-nic setuid ... Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>	2022-06-07 17:18:06 -04:00
Stéphane Graber	1ccdc25349	meson: Don't include lxc-test-fuzzers ... Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>	2022-06-07 17:18:05 -04:00
Stéphane Graber	5055c73d91	meson: Skip static library when using sanitizer ... Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>	2022-06-07 17:18:04 -04:00