criu-devel-3.8.1-lp152.3.9 >  A ^A{/=„#`(?뢯6Gj:4/ϋR\Z+I"<#\YE لC^_˼b0'&@ ~Ф`$DŤNȘVT E| %5?y/V>N ab0y q>W ^u栩E1Ԕԃ97̐qpY]DoGbIph\Tf9 2+gS֫(ўNk9}඾v<\zIUxJAIv ::52d5a93406ea188624f12f7e6dde4f42c68e919a115a2fd89cb2ff6f1d459ff619f8087358e5d027ef17eeab6beae6f9c5b9d26cl^A{/=„2I͊b" jtPŤekS}nq \JtIܙ.Ut *BZ'7ܛp}Fc2Ռd xSWY\8+c=ʁIu7āґ4w E tfZrc0da @I ;lYdi5L"MTvsU?t<>p>?d   S  $DV\d0$0 0 0 0  T0  0d0T0Dd0$Tt (58<"9":"F4GH0H0I0XY\,0]0^ bcldeflu0vw0x0y`zhx|Ccriu-devel3.8.1lp152.3.9Include Files and Libraries mandatory for DevelopmentThis package contains all necessary include files and libraries needed to develop applications with CRIU library.^Aicloud118XopenSUSE Leap 15.2openSUSELGPL-2.1-or-laterhttps://bugs.opensuse.orgDevelopment/Libraries/C and C++https://criu.org/linuxx86_64 1x M-' CG2b2|T\"MAA큤AA큤A큤A큤A큤A큤^Ab^Ab^Ab^Ab^Ab^Ab^Ab^Ab^Ab^Ab^Ab^Ab^Ab^Ab^Ab^Ab^Ab^Ab^Ab^Ab^Ab^Ab^Ab^Ab^Ab^Ab^Ab^Ab^Ab^Ab^Ab^Ab^Ab^Ab^Ab^Ab^Ab^Ab^Ab^Ab^Aa^Aa^Aa^A`^A`^Ab^A`^A`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.so.1.0libcriu.so.1.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootcriu-3.8.1-lp152.3.9.src.rpmcriu-develcriu-devel(x86-64)pkgconfig(criu)@    /usr/bin/pkg-configglibc-devellibcompel1libcriu1rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.8.13.8.13.0.4-14.6.0-14.0-15.2-14.14.1ZZZ@Z>E@Z7Y@YYoIYV=@YI@XXDXXf@X@XN@X)@XWڍ@W:WWaC@W;W @V@Vf@VMU@Uc@UlI@U?v@U#U@T|X@tiwai@suse.detiwai@suse.deavindra@opensuse.orgavindra@opensuse.orgaavindraa@gmail.comaavindraa@gmail.comtiwai@suse.debwiedemann@suse.comtiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.decbosdonnat@suse.comtiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.de- update to criu 3.8.1: a bug-fix release FDstore was initialized twice (re-initialized) causing e.g. - -shell-job restore to fail- Add python-devel to BuildReq explicitly, as a preparation for fallback to asciidoctor (bsc#1075764)- update to criu 3.8: New features * C/R of - Multiple network namespaces - Overmounted tmpfs mounts - Unix sockets and epoll descriptors in SCM messages Improvements * Rework service descriptors not to cause fdtable enormous grows Bugfixes * FP state wasn't reported on Skylake due to a kernel bug * gcc 8 warning fixes * Resource leaked on error paths * Attributes of sit devices with value 0 were not saved into images (and were restored into default values) * Tasks with pgid of a zombie hung the resture * Ghost files on RO bind-mounts of an RW mount couldn't be restored * Random memory corruptions during lazy restore - cleanup with spec-cleaner - switch to https urls - list binaries and man pages explicitly - remove rest of static libs to fix rpm lint errors- update to criu 3.7: New features * Pipes usage statistics * Run page server as non-daemon via RPC * C/R of - SO_REUSEPORT option - IPv4-mapped inet sockets - Net_prio CGroups - Overmounted shared mountpoints - Non-broken and breaking leases Improvements * Show criu and kernel versions in logs * CRIT decodes socket families, protocols and types * Much less pipes is needed for pre-dump, which is especially useful for big mem migration Bugfixes * Files in /proc/pid/map_file could be opened by non-exiting name (with 0x prefix) and it was fixed in kernel * CRIU log levels were used to configure logging for libsoccr thus breaking its logs * Overflow in various IDs caused bad image names * Compat (32bit) syscalls lost signedness in compel * Corked sockets lost cork flag * Preadv() syscall was declared with error which resulted in dump errors on 32-bit processors * Musl compilation failed * Ghost files in / dump failed * Crash when releasing context for ghost files, due to free()-ing shmalloc()-ed area * Lazy restore could receive partial page and crashed * Erroneous closing of lazy pages connection caused restore to hang * Lazy memory fetch restore could start before tasks are restored - Remove 0001-images.py-remove-shebang.patch * upstreamed in 8e45ce4905d186abafb7c20abb3b00207fefdb53- add 0001-images.py-remove-shebang.patch * fixes a lint warning about a non-executable python file being executable due to a superfluous shebang * upstream: https://lists.openvz.org/pipermail/criu/2017-November/039907.html - run spec-cleaner- update to criu 3.6: New features * C/R for files (except for unix sockets, ttys and epolls) sent over unix sockets * C/R for threads with different creds * Ipv6 over ipv4 tunnel (SIT device) Bugfixes * Some s390x registers were not restored by native sigrestore way * Overflow when parsing autofs info from /proc file * Dumps of anon shared memory with sysvipc one raced with each other clashing and corrupting image file names * The "dumpable" flag was not restore on shmem regions * Trash bits leaked into image when dumping fsnotify on some kernels * Lock/unlock of iptables from different criu processes raced with each other * Closed TCP connection with non-empty send queue blocked the dump * When --empty-ns for netns was set on dump only, the restore failed (Docker case) - includes changes from 3.5: see https://criu.org/Download/criu/3.5 for details- update to criu 3.4: New features: * Support for s390x architecture Improvements: * Unexpected death of restored tasks is reported with more details in logs * Merged many images containing info about files into one big files.img * When helper utility fails (ip, iptables, tar) its name is printed in logs Bugfixes: * Compilation failed on newer glibcs (ucontext_t) * Dying helper task could deadlock the restore process * Install-related makefile variables weren't configurable for distro build * SIT (ipv6-to-v4 tunnel) presence on host blocked dump of any containers * Potential NULL dereference when dumping net namespace * Dump via page server might not work across different criu versions * Failure to restore a subtask could be ignored by the restore command * EOF on page-server socket wasn't handled - Dropped obsoleted patch: criu-correct-ppc64-AT_VECTOR_SIZE_ARCH.patch - Add s390x to exclusivearch- update to criu 3.3 * Add --tcp-close option to help migration of Docker containers * Allow to override build time to fix build-compare (boo#1047218)- update to criu 3.2.1: bug fix release, * Restoring a stack fails on recent kernels due to kernel changes * Restoring on a host with LSM profiles failed- update to criu 3.1: New features: * Each boolean option now has the --no-$option pair * RSS explorer in CRIT * Multiple plugins in compel * Run-time check of 32-mmap BUG on x86 * C/R of 32-bit futex robust list on x86 Optimizations/improvements: * Start time is improved significantly with kerndat cache * Sigaction image is merged into Core * Unneeded stages are skipped during restore * Restore w/o namespaces uses host /proc * Restore w/o namespaces doesn't parse host mounts (not needed) * Single-threaded tasks do not parse /proc/pid/task/ in vain * BFD engine is used for more /proc files * More verbosity in libsoccr * Fsnotify dump w/o namespaces doesn't walk mounts tree Bugfixes: * Python bindings left zombie in self-dump mode * The last_pid sys-control was reset by restore * Threads caps were compared with mistake * make install put crit/pycriu to wrong place if DESTDIR was not set * Fsnotifies C/R w/o namespaces restored with errors * Inherited control terminal restore was failed (but dump succeeded) - update to criu 3.2: Optimizations/improvements: * Invisible files restore is de-serialized * VMAs restore performance is improved significantly - Mappings of the same file re-use the descriptor, not re-open it every time - Not-COW-ed mappings are restored in-place and are not mremmap()ed - Empty RO mappings are mmap()ed as such and thus not re-mprotect()ed at the end * More verbosity in case TCP locking fails (#292) * More verbosity in case VDSO magic mismatch * Restore or legacy epoll target descriptors and fsnotify marks is unified with common case Bugfixes: * Restoring fanotify marks from old images (<1.3) dropped the mark * Binfmt_misc mount could be mounted into wrong place * Compilation failed with gcc 6.3.0 (#315) * Waiting helpers could race with sigchild handler and would result in restore failure * Missing VVAR page in 32bit tasks wasn't skipped and resulted in restore failure * After restore consumption of files is increased (was fixed as side effect of mmap optimization) Deprecation/Removal: * Deprecated separate images for fsnotify marks - Fix the installation of python stuff: criu-py-install-fix.diff - Fix the build for ppc64: criu-correct-ppc64-AT_VECTOR_SIZE_ARCH.patch- update to criu 3.0: New features: * Compel library * Support for x86 32-bit arch * Version check via RPC * ASAN support * Force VDSO trampolines via fault injection * C/R of shutdown-ed UDP sockets * C/R of bind-mounts made from external mounts Optimizations/improvements: * SysVIPC shmem segments are now dumped as any other shmem (taking holes into account and sitting in common memory dumps) * CRIT show decodes socket's states and types and task's states into strings * CRIT show prints unix sockets names in more human-readable form Bugfixes: * Unix sockets' names appeared in logs with mistakes * Contents of SysVIPC shmem segments was dumped twice * Dumping of any memory segment more than 4Gigs failed * Migration of unaligned SysvSHM segment on Armv7 failed Deprecation/removal: * Exec action is removed, use compel instead - Create libcompel1 sub-package- update to criu 2.12.1: Fixes: * Content for external bind mounts was erroneously dumped, which could lead to dump failures or huuuge images * Unneeded collection of host mounts on restore could cause restore to fail- update to criu 2.12: New features: * C/R of external TTYs (for Docker C/R) Optimizations/improvements: * Sanitized the way the -v works Fixes: * Checking features via RPC crashed * Resting pipes in user-namespaces could fail on modern kernels * Shutdown state for UNIX sockets could be lost on restore * Dump of huge (over 2Gb) SysV shmem segments didn't work- Update to criu 2.11: New features: * Added "pre-resume" to action scripts * New --status-fd option for better control of page server * C/R OFD file locks, RO root mount for mount namespaces Optimizations/improvements: * More strict checks for extra CLI options * Report errors when probing locks * Restorer logs now contain timestamps Fixes: * Regression: v2.10 was broken on ARM * Use-after-free when restoring ghost directory * Array out-of-bound access when restoring VETH device * Page server exit code could be screwed up * Clang over-optimized string.h routines resulting in random crashes * Parasite failed to send FDs via socket on Alpine Linux * Restore of huge file tables could get stuck * Restore of epoll in epoll could fail * Errno value could be lost when reporting failure to restore invisible files * Dump of sched params didn't work on Alpine * Restore of huge memory dumps (over 2G) failed * Installation guessed /lib vs /lib64 with errors * Migration between xsave and noxsave didn't work for wrong cpu feature being checked - Update to criu 2.11.1: Fixes: * Page server start via RPC was broken * Fedora build didn't work * Ppc64LE restorer switch crashed- Update to criu 2.10: New features: * C/R of SOCK_PACKET sockets * Libsoccr -- library for C/R of TCP sockets Optimizations/improvements: * Logs cleaned up (removed bunch of useless, fixed '\n' in perrors) * Action scripts errors are printed in logs * Removed several iovec-s copying over the pagemap code * Restore degraded linearly on Xen guests. Breakpoints disabled until solution Fixes: * Py bindings fault on restore error delivery * Fd leaked on file restore error path * Fd leaked when restoring invisible files (gets closed with criu exit though) * Link remap restore could fail on kernels 4.8 and higher * Impossible to restore after restore error with link remap file in images * When going daemon a descriptor could be leaked * Custom setting of mmap_min_addr could make restore to fail * Sending pages over UNIX socket could race and fail with EAGAIN * Error getting ID of /proc/pid/ns/foo link not propagated and could result in bogus NS ID generated - Add libnet-devel to buildreq for dependency- Update to criu 2.9: New features: * CRIU can now be built with clang on all supported architectures * Ignore missing sysctls on restore with --weak-sysctl C/R overmounted mountpoints Optimizations/improvements: * Batch restore of memory contents from pages.img files * Link-remap type for invisible files is explicit in images Man page for CRIT Fixes: * C/R with --empty-ns still handled iptables configuration * SCM messages inside UNIX socket got lost after C/R (now dump aborted) * Empty unixsk.img file appeared when dumping tasks without unix sockets * Install procedure wasn't PEP-394 compliant * CRIU blocking netfilter rules were added at the tail of the chain resulting in unlocked TCP connections * Dump/Restore spurious failures when open() returned 0 descriptor * When dumping shmem lots of zero pages were written into image files * Ghost directory with more than zero ghost parents caused restore to fail * Shared mount could escape to different group on restore- Update to criu 2.8: New features: * Ability to configure CRIU build * Show statistics on the screen with --display-stats * C/R of Mac-Vlan devices Optimizations/improvements: * x86 can now be built with clang * When dumping files useless garbage was sent with descriptors from parasite * The clear_tid_address and regs are printed in hex with CRIT * Big code rework for compel (part 1) * Removed duplicate error messages from opening /proc files Fixes: * Restoring cgroup NS could use old path prefix * criu check crashed on btrfs mounts * RO external mounts in userns couldn't be restored * Unmounted on host binfmt_misc could cause dump to fail * Off-by-one could cause criu crash when dumping shared / bind-mount * Mount namespace' roots could have flags changed on restore * Dying tasks could erroneously be tried to dump * Swapped shared memory pages were not dumped * Errno value can be sometimes spoiled by RPC * Restore of netns with newer iproute2 tool could fail Deprecated: * --ext-unix-sk, --veth-pair and --ext-mount-map, by --external - Set BINFMT_MISC_VIRTUALIZED config to build- Update to criu 2.7: New features: * Option --cgroup-root now makes sense on dump too * CLOCK_BOOTTIME timer supported Optimizations/improvements: * Output of iptables command leaked into logs for no use * Helper dev environment installation script for Debian * Man-page updated and prettified :) Fixes: * Unmounted binfmt_misc with rules wasn't dumped at all * Malloc() error could result in crash * Device cgroup restore could fail restoring empty record * Some entries in device cgroups were restored twice * Potential crash when dumping cgroup bindmounts * Sign error caused dump to fail on btrfs partitions * Shared mounts with the same mount path failed the dump * Threads were restored with unshared FS (cwd and root) * Shared memory changes tracking disabled (regression found) * Restore of autofs can hang * LSM profile propagation could be lost * Mountpoint with lots of options blocked the dump (too small buffer for parsing) * External slave mount (with external master) blocked the dump * Mounts with STRICTATIME restored with others flags dropped Deprecated: * No reg-file entry for TTYs- Update to criu 2.6: New features: * Ability to leave process stopped after restore * Memory changes tracking for anonymous shared memory * Deprecation option/environment * First error message is reported back via RPC * C/R of More IPCNS sysctls, xIDs of PTYs, TMEM on PPC64LE Optimizations/improvements: * Use service FD for transport sockets on restore * Ability to turn pagemap-cache off (some kernels are buggy) * The criu --help text has become better Fixes: * R/O-mounted root could block the dump * Restore of cgroup.mm.oom_control could fail * Cgroup fs bind mounts were detected with error * Unaligned futex-es in parasite could cause dump to crash * When compiled with gcc-4.9 parasite code crashed * Failure to freeze cgroup didn't result in aborting of dump * Wrong ns list was parsed when dumping userns (invisible since nesting works only for mntns) * Non-inheritable non-tty as stdin caused shell-job restore to erroneously fail Error path in criu dedup could crash Deprecated: * Per-pid rlimit, itimers and posix-timers * Separate image for epoll tfds (target file descriptors)- Update to criu 2.5: New features: * C/R of fs.mqueue.msg*_default sysctls, Unix sockets with overwritten paths, and Link-remap files in removed directories Optimizations/improvements: * Micro-optimization on namespace ID evaluation * Restoring shared files uses one socket instead of per-fd ones * More verbosity when refusing to dump a file descriptor Fixes: * Restore could fail on openat() with ENXIO when multiple mnt namespaces get restored * The criu exec action got broken * Link-remap and ghost files remained on FS after restore failure * TCP window could remain clamped after restore resulting in connection lockup/slowdown * Dump could stuck when injecting a parasite * The --timeout option wasn't taken into account when freezing tasks using freezecg * Race in freezeing/seizing could result in lost tasks * Memory leaks here and there on error paths * Double free in xvstrcat (crash) * VDSO length was mis-calculated * Symlink on --root path could make restore erroneously fail * Potential memory corruption on reading mntns images * When restoring on systems with low pid_max limit restore could fail * RO-protected SysV shmem segments could be restored with PROT_EXEC * File mode of mapped file was evaluated with errors * Restore of cgroups' mem.swappines and ..use_hierarchy blocked sub-groups creation * Impossible to restore cgoup mem.swappines default value * Zombies living in orphan sessions/groups failed the restore- Update to criu 2.4: New features: * Generate core from images * Ability to forcibly drop half-open TCP connections on C/R * Ability to specify cgroup ctls to dump via API Opened/mapped files' mode is compared between dump and restore times * AutoFS mountpoints * New cgroups (perf_event, net_cls, net_prio and pids) * Memcgroup optional properties * Devices cgroup Optimizations/improvements: * Pagemap image entries are cached in memory Fixes: * Configured kmem cgroup limit restore failed * Mem cgroup oom_control * Cgroup's pids.max was not C/R-ed * Failure to write cgroup property was ignored * No init PID in pre-dump action script * Sigactions inheritance didn't work on ARM * Opened "/proc" dir blocked the dump * Working with iptables was racy * Sibling mounts detection error on dump * Devconf accept_redirects devconf could be restored with errors * "All" devconfs could be overridden by "Default" * Name-less unix sockets got auto-bound * Mode was lost for PTY device file on restore * Newer protobuf compilers didn't recognize PB files * External mounts could be remounted with MS_PRIVATE * Build fail on Alpine Linux Deprecated/removed: * Per-pid file locks images * Per-pid fdinfo images * Ancient pagemap/pages images - Enable builds on 32bit ARM- Update to criu 2.3: New features * Ability not to show payload for some objects in CRIT * Pidfile is written at the end of restore * Ability to join existing namespaces on restore * C/R of Data sitting in TTYs, Partially write-protected SysVIPC segments, Debugfs and tracefs mounts, Overmounted tmpfs, IPv6 devconf sysctls, External block devices, Unix sockets with mismatched shutdown state Optimizations/improvements: * Relaxed calculation of AIO ring size * Tree-based search of tasks by real pid * Less mem-to-mem copies on restore * Saner devconf image format * More verbose explanation of why task cannot be seized * PID is printed in PIE logs Fixes: * Too many mmap-ed files blocked the dump * Potential memory corruption when working with IPv6 sockets * Overmounted bind mounts could cause restore to fail * Overmounted bind mounts could result in badly restored mount tree * Incomplete restoration of RO bind mounts options Deprecated/removed: * Greedy mode of pagemap (non-root) caused dump to fail (disabled)- Update to criu 2.2: mostly bugfixes New features: * "Post-resume" added to action scripts * Root task's PID in environment for action scripts * Devconfs drop_gratuitous_arp and drop_unicast_in_l2_multicast * Serial ttys Optimizations/improvements * Lighter link-remaps restore on newer kernels Fixes: * Race when restoring userns vs setting ns' maps * Tasks with zero fds failed the dump * Restore of TCP recv queue could fail due to kernel mem alloc constraints * No errors were written to logs when launching helper (tar/iptables) app in userns restore * User-mode dumped no memory pages sometimes * Bind mounts considered not as bind sometimes * Two mounts in the same directory blocked the dump * Off-by in on /dev/tty{1,63} dumping * Forking of cgroupns task was done with screwed clone flags Deprecated/removed: * Greedy mode of pagemap dumping (on some kernels we do not support user-mode) * Removed the --namespaces option- Update to criu 2.1: New features: * Checking now classifies features to important/extra/experimental * Ability to bring some disk files into images. * C/R of Completed AIO requests and fallback gre and gretap net devices Optimizations/improvements: * Code coverage collecting now works * Use native rtnl library for netlink messages processing * Using --output - now results in stdout as log, not a file with the name "-" * Signals are printed by names in logs Fixes: * Make tar generated tarbal with bad name * CG restore code lacked rollback in some places * Error code from raw syscalls was treated with errors resulting in wrong criu check reports * Dumping task with HUGE amount of file descriptors failed * Task could be stopped after pre-dump if respective option was used * A /proc/pid directory from dead process conflicting with a new alive one could cause dump to fail * Zombie from alien session/process group caused restore to fail * CGroup fs was wrongly mounted in CGNS on restore * Irmap scan was mis-checking devices numbers * Use-after-free in irmap scan * Btrfs bindmounts detection was mistaken due to 'subvol=' options met * Propagation of mountpoint's shared groups was lost for propagated mounts * Unaligned allocations of restore shared memory could result in codedumps when used by futexes * Temporary mountpoints could result in spurious propagations * When aborting the dump criu could crash on use-after-free objects * Locking the network could stuck doing the DNS resolve * Several build fixes Deprecated/removed * The images from criu prior to 0.4 are deprecated * The --namespaces option makes no sense and is also deprecated * The --ms option for check action is deprecated- Update to criu 2.0: New features: * New code layout for sub-projects (e.g. Compel) * Unprivileged dump * Dump/check cpuinfo support for PPC * Explorers for CRIT * Added "post-setup-namespaces" to action scripts * Added timeout for dump procedure (5 sec by default) * Ability to override LSM profile on restore with CLI/RPC option * External bind mounts can be fs-root mounts too * Skip netns' internals on dump and restore (for Docker integration) * Advanced support for external files * More C/R supports Optimizations/improvements: * Align parasite stack on 16 bits for correctness * Compilation with native libc syscall wrappers and helpers * Parasite code injection done via memfd system call * Make vaddr to pfn conversion with one less syscall * CRIT shows device numbers in "maj:min" manner * CRIT shows mmap's status in verbose * Docker files for builds on all supported arches Fixes: * Absent readlink syscall on ARM (use readlinkat instead) could cause dump to fail * Wrong argument to timer_create system call could cause restore to crash * Extra tasks in freeze cgroup caused dump to fail/hand/crash * Unaligned restore-time object allocations caused lock operations to fail * Opened /proc/pid dir of dead task failed the dump * Unaligned stacks caused criu to fail on aarch64 * Changed device numbers on restore side could cause random failures * Fixes in mount points sharing/slavery/propagation restore * Race between mntns creation and fds closing in different tasks could cause restore to fail * Hard kernel limit on TCP repair recv queue restore could cause big queue restore to fail * Unconnected dgram UNIX socket with data lost packets on restore * CRIT didn't show IPC objects * CRIT didn't convert IP addresses in images * Logs from PIE code contained corrupted addresses and sizes * Not loaded netfilter modules could cause dump/restore to stuck on dumping netlink socket * Shared external mounts were restored with error Security: * When checking for namespaces' CRIU entered userns with host creds * Deprecated/removed: * Completely removed 'show' action. Use CRIT instead.- Update to criu 1.8: * Ability to check CRIU features via RPC * Pre-dump and pre-restore action scripts * The "info" action in CRIT showing stats about image file * Python API * C/R of read-only bind mounts, IPv6 routes and iptables rules, ip rules (it ip tool supports such), ignore_routes_with_linkdown netns devconf, empty bridges in netns, FILTER mode of seccomp, and IP_FREEBIND socket option * Lots of fixes, two security fixes Service run as root could allow users to violate ptrace policies Service run as root could give users access to privileged files and directories - Remove superfluous dependencies - Clean up spec file, as systemd and logrotate supports have been officially dropped- update to criu 1.7.1: Fixes in mounts, notifies and userns found while testing openvz - update to criu 1.7.2: Fixes for IPC in userns, venet C/R, socket buffers overflow and unix sockets name off-by-one - Add the package dependency on python-protobuf- Disable systemd service as a temporary workaround for possibile security issues (CVE-2015-5228, CVE-2015-5231, bsc#943105) - Update to criu 1.7: * Improved cgroups management * Support for seccomp strict mode * Support for stream unix sockets inheritance * Support uid/gid-restricted mounts in userns * Support deleted bind-mounts * Ability to specify maximum ghost file size * OverlayFS support * Support relative unix sockets' bind paths * Altivec and PSX support for PPC * Small PIE loader * Temporary proc mountpoint is mounted with nosuid, noexec and nodev * Less memory copies when preparing restorer binary * CRIT action "show" for less keystrokes on common use-case * Fsnotify log messages now use hex everywhere :) * CRIT output doesn't mix fields any more * Many fixes - Drop obsoleted patches: crit-install-prefix.diff lsm-prototype-fix.diff 4c5b23e5-criu.pc.diff- Fix version in criu.pc file. 4c5b23e5-criu.pc.diff- update to version 1.6: * PowerPC 64bit LE support * Makefile.local for 3-rd party build rules * Ability to "enable" filesystem on dump (--enable-fs) * Ability to skip mountpoint on dump (--skip-mnt) * Prepare to deprecate "criu show" command * External mounts auto-detection * /dev/tty (current terminal) support * Netdev and netns (all/default) confs C/R * Images v1.1 with extra magic at head * Support fusectl (only ctl) mountpoint * Sub-version format is now as of git-describe * Apparamor labels C/R support - Fix library path for aarch64 and ppc64le - Fix the prototype for lsm.c (to fix build errors): lsm-prototype-fix.diff - Refreshed crit-install-prefix.diff- update to version 1.5.2: * fix error in mutli-threaded tasks restore with --restore-sibling (Docker and LXC cases) * fix too big RPC messages error for service (and swrk)- Fix build failure on FACTORY due to comment-in-comment in google/protobuf/descriptor.proto - update to version 1.5.1: * fix crash with 4.0 kernel * legalize swrk API and add the ability for inheriting fds via it * cgroup yard destruction and properties restore- update to version 1.5: New features * CRIT tool * ability to request CPU compatibility on instructions level only * C/R of empty AIO rings * more detailed errno report via RPC * per-feature "criu check" * inheriting FDs on restore * ability to automatically move veth device to host-side bridge on netns restore * VT terminals support * more user namespaces C/R stuff See more details at http://criu.org/Releases#v._1.5 - fix installation of crit: crit-install-prefix.diff- update to version 1.4: New features: * Dump and check cpuinfo * Initial support for user namespaces * The docker_cr.sh script for Docker * New API for writing plugins (old one is still possible) * Service workers change their title to better look in ps output * Ability to feed socket for pre-dump and page-server in swrk mode * Page-server can auto-bind its port * Ability to perform several actions during one connection to RPC service * C/R of opened /proc/$pid/foo files of dead tasks * C/R of /dev/console * C/R of virtualized devtmpfs (openvz and future upstream kernels) * C/R of empty mqueue fs (posix message queues) * C/R of shared bind-mounts See more details at http://criu.org/Releases#v._1.4cloud118 1589657961  !"#$%&'()*+,-./03.8.1-lp152.3.93.8.1-lp152.3.93.8.1 compelasmbreakpoints.hcpu.hfpu.hinfect-types.hprocessor-flags.hsigframe.hcommonasmcompiler.hcompel.hcpu.hhandle-elf.hinfect-rpc.hinfect-util.hinfect.hksigset.hlog.hloglevels.hpluginsplugins.hplugin-fds.hshmem.hstdstd.hasmsyscall-types.hfds.hinfect.hlog.hstring.hsyscall-64.hsyscall-codes-64.hsyscall-codes.hsyscall-types.hsyscall.hptrace.hsigframe-common.htask-state.hcriucriu-log.hcriu-plugin.hcriu.hrpc.protolibcompel.solibcriu.socriu.pc/usr/include//usr/include/compel//usr/include/compel/asm//usr/include/compel/common//usr/include/compel/plugins//usr/include/compel/plugins/std//usr/include/compel/plugins/std/asm//usr/include/criu//usr/lib64//usr/lib64/pkgconfig/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Leap:15.2/standard/b40d6995854423ba93cd05772e87444d-criucpioxz5x86_64-suse-linuxdirectoryC source, ASCII textASCII textpkgconfig filePRZo2߻J5"utf-83f8712cd71af0ccbfb6cfda60998fcc54cd7e4b398f09bc18e73ec0772abcc84? 7zXZ !t/t;PJ] crt:bLL R%M)زI}b,k6tag zct40Ni8 $4w=T ߝP[S(qn,51F2ΰ?Jw~"a? OUtcQX߇ڴ?N'V7mu(m x;8q HRC8dEb=zZ@98hms%;ޡ0ˌ $*7ă>6e >)KqT8S|Mw_v%LIc:j~$Ĥ̙Gק6;\(c{KΒGb=Y,|g$3D zA7ohiR3E׊ H91gtʏĦ3Ġm7UZ$6|m=o&8e,.qfuDఈ܋XP Yto ~S OFESE>kG^Z]PJ|mn%+v_ڍ!˯42N(d{CRP+NE stnUL`a~rr o1u"b8J a*ūL%/g^s SIGl%#hnα C+kI_2`[P-k?Ϧ㚰]N};*=aޫ-9rc`^?ٿَkHF,"=lkSY-KVW44KA94Gbحuj}xja#/R.7"cD`Q*qd4c>kEk'lHm>a gx:?VrQ}2>UԻդDEc3M xr/IJ)&Qb4PCZ,弼Ӛ{3ۋ)U oӡL^vŭ֔2 ;sUAEb&-T424Ya&>V]!W&X/j%>.T|5J]b'B%2ɑ0nfGڟ#TX p7يչ!3~YTTd:\0Tj6N[ʑsYlc~J33e*O=?/vfb4 Gq*Y%Yt.a6IJ Yz_$[oBBDPf%PxT6Wkf7 ty]<iCPc"֔Dt_ KY~jliOjza]Ya`}2dB畟NNx;Te:AccZm 1'im}5+*O@Pٓ8Do Y䎛G3a8zԛ~sW y0P|Ik8!rln۽囱&}p=8?kmplPKPU\9&#G6L4㗵5_{Dg%,l __cd芌9b..m&/^>Wru X{H5Z%( yMfYe[$Lt;"L],*å?[HafTRݩPV# MhaHBR~s9`Nsr_ҢQWپ v垈4Aj mQ@jx~+/z]KSe& 9[0yY+oPeCñ#=mOpWqjO%$T.U79x#me-iKOz 2gbcX9Ssxg 8چb }a,4CP$)h<!yi3BmBt%|3UMFP2kw~Ud}5K FL UL'; qxu^|5ɡR Y)ϕwm}i G*b^8h{,Y]KGCLqVA1nsզ+F fjI71u6āE>(tym,B%W2ڪו?K$` ҳ6ȥ×bOoa;}CʯwEPPX j$5YNkJ>5ekR߼RPnPU'n9$8c, n\#:vSX`g.ЀKvֱ a!}wbF5 ms]~S1m&{ӟSv]ӞO'&su&QAg['lNM 7D诺 >id}KQ?NƓ@v#%-+^ɮc'b}ލ;z2B_cK7i3h,Oq a0t_BhbGb~?h>fhY^ֹGV5v`vSD{r&fLd)c>3>J2k I1*R{C(wonJR6ʑo$y=@p3w&mQcR@6awzק|+Uɨ~/XSz9Ds$T"9QHWfvG@;zֆ'~T<:}&nP M'3-G,>t;`!tuHl!i1RcM'GzE^ E'[r=d}4x3j Mj9{Zq>t%DeS>ɮ/K;[EDGǣHN4>,l F6+ƚ*/Xnn%k(R.` b>hCo #=v0-{fX4rz KWJ<ҳQJ<;hݏG&\x,ܽ3'޻ '/w?DE;Z!qx *lZK|57ssPɣ"$sJ`NY&3[ p>!7dxuTCsǼn`A]̀D;{Xv#]f?R(EnJVѰ(O&V87 G-PaCy|̻([Sļzn(c<{xi+/)59Nބ<]NӅf}Xl-ɰtH޸;ઘj yΘ5]$F,qswo>Sf~aC=*Q0>0M}:#ՆG>;>ǻ24 |璓qraۧh&j>hXkۤ01O3dh\Y \ěXFVԂTcRçT=Kb,"#竝ew ٕlzş^`YΛt"(YfGl~±5#.HUVUy1DEͭ6sk} z.³Z]~Mtj@ xa6!|Ar{A>AOnZçE%H"OCa`6!$lnUmhb{c Γِ#$4cA2Mg+ȶ:ZB T6--ŒY3Ō? 2# /Q!OMZ}ոU)~>o8 &;њީQL)M5 XL00h8*'Ċ|!/R\]݂Y3]C>Q36@zO2Ճ<@שKZ"#t=z_v_ v@8>8O%D_Hǿ0"7#*sxrUmLaA !֞VQ&O!#%F+<9PRSmPGuIA^m-KS *3ͼ*a?xEЭoרkGWeI06$ë U@ i ] v+.Ǘԫj=Pc7wIPΈ+tUCMjPL1U_:FP%FJCqL8: Zp_s. ,F V wp{mJOJXa/Jse^4ΘIZjM^mQQT5~54 Q`yT)ҁ2,[r&#ΚFgW/\BUpZ'4WyO.=m ȯ *ac2e7}gč2H6j⢐c0A ɐ6E dFmڮ;zЛK=Y"NCg6 O BN,}fR`7Bsa$+E^S~^1^G ˅SVcʼnYaw[ue,)m#5 9Li[0/ wv4F P}2.*~/ؠ+ _`[À/зf"[4$r|' Z:VM;1#Hce_߬hXt>@8_ؼSr{m/Iyu-zVItTK 0mƒG겈lu`gDBAd*fb@}bY`UOeNunOǑۂU fP$|r}G(C.™a)Q`136_/.o(,MmTF=hh[V#uxC|@ ?x\s\WN\FKuU΍" sɕJG!%5- %{`f0X̮B#sڶZUt-sIāAv9l¦u4a~iQYnLɟTRuC92L[;1Tβ\\Idg^fc|irUrE=S.<%Cng_-dp÷*{06uzntYzm,X8Yx##H\XsʫͿtk]+yѩޥcEHԤ?$ 4\9mÉ z9}B݃B&xȡVI(8Ѱ?)LC=a3=AΆ_9+p904\2ȖB>^[U^[(T+*nOd3K;{[lT`6Hoo=nI]hl477f\`%fՎUs^:DtvUZ'g 1ց~Q b-HU鏓cuX.ρjĥ;0{`6:Bb"& ?5]VZ{qc)mVv~ra*7X.eFm ~-e[]%KCгFĢMT+sEHY=:$4BgG8EeO975t6xԀW} ^|l]1 P ӯA2yh.cZ z6-Yw?th诬 3-IF*.O/,Bwja[G~J")A"G:4?4GF4<0fn|mD띫No&Vflo(nh#هn ;YZ26*8+[֒PX}<ubIq &T ׀ r~+BIzQZƉ3j !rQ!D /-/.2 Y!{NV"W NyO*C^JMwIDl:',d.WP&0Fl{ljdT"us{#Q ic:H+/~)ŠU#6 1HN 9 awoA[HS<> %鋎L|k 'geWq:Yj (,}ssK:2ʼVq1?v֪BD;!"#hr ]zXyl`u|<8yUIHf#?v_2 ^HO {C^ƌXѕ%Z" q2z}XrA K^")1BjjU\x"H'sMBuO 'Lk3b:giwxCA&neYUxIKlPI2mneySXq|v'nYͽa5Puӟ=MCb`9ЇJ) TyO ^i|[QP(U&B%:_k3W&p1\ջ2Q~?LaƮs\PgCi 2JU.RA;g1Pjk=bmϚ).#HH!51Tsi֭,GO4G SԪy&Ɖ61f.i[Bnt!uLؐ. CHj⺺>f˭G07Ti-PrvWSP}=FLYN G4 ^rp|D|(g?nk$ϑ[/{%;#; Z!@]<~q͡` h]mܑ=x8:`RE ,hBeIC3Lbu c˖tY(w U=G3&:Q )fcȲa $;nWN+59sWL7&f"Mn ܁7Sc< o ]#doRXBs(=Kt޿> \$ɍۤ#Ž\s'8Mh*I#&TӣM@48}ƈpj꾦_Dw7mx}O5ㄹR[t +?/Q,1L!HT $*R+hJL?ڟoyV3QZxYpg>bU'Gߪ?J$ "a` 6re[sı v:F>$$οaFJ15֠GMq%׭x)୏{hs}y"^k"8fOsKj38T3F:: i{& {uunsA0#@Ǟ4&i ݯu$lJ `0adVpxERsC` OZbEʽaҰ~_F&w,yyuۜA(l6)KpB {/ɜmQ(L-NA'h~}_-v:/!#iÞ 'Hf?lċS|*,sK k}͸9' ;IpXg),_ĤV4wr4@ ՠ Os/7Y@tX{/ҩg)PoVHǩ ,v^NJ,By!؁dX 향@/EaZ"<(-UBd؂g?+,LN!t ɻZ<5A(-=OFK<։?g& ;NFb{]-|հvZ Y~|O:}YK'N'0)4EeW]Z>\LڱX3ѭ€cލ=}k}3@O6O"+5 uzy( DtswH<T j-u牺 i;JS헂eqdcp9*%FyQbO(BGɱjwIV-i5ū~[oi HW2\5 W tpyWm>ioWhZ̄NԅJhm8iweA'XM"E|эw/s g+ hҥk,3z]T-̓SAB-Y1\ +seI9]W);<m2[ 3r}J}yfDc mSP?8,;0qA,eW~VoaSLTm:'0olE`+" v!mҍB af Y^; Pt<-.Q, LB#XY,㉡{ǠɛZo`ջX4oB3kISrj Lx_2mɍ{G>,?[Mn_cۊ [7gP ;krdbAcO "6 ;/l_-SP6?A7ԉ+ZU0F|Ji?Yn6,nmQQhuz\<ʪL_kcuTu"eaQ]HljB]Jߵ%\`:vnA|2MpEVø8ż:ǖ*k#b #B#HBp|sv_LBe)]**)!C/IgY<%Mu%87WMkͯ  L {")8~n<%v^UHv㚗(]ꖆx"A[o!?aO# 6rz_U’4]T,w.a h8o[ZZE6TmTj3+"9aa׬J /+$z^zDb&Li k0NNVqL2뀋@FHbL~-i8t'Owu%M綰8)R ܒ H_T=ˢ&u)JN%"Lm\}P5;fNAZF {y$}{ ?WA;I L w;F‚2|RỎGF=RULo)Di~VG8\CQ66$LYVo`28 6!c {=vpM C2ivVB["QdJ԰%|0)DXfDYhN\-џO1`4kǛS4bJ؞@b[ܔP҆jlHfv7$*7bv"u˟l1Y_2)eaq9ludiM#@2*dX[l nD䠒o+0JV^68+a3nVCGثD[TgZD|kHTÖs z~#m`oҿ㿱m|gʓ#O(ǟI(UIz4OVeYƔJD[j|\spXEY󿢤*v-UrGV"a%̩=9M}ʊ룬+$MƽɩP2,:b/pqgorK@l~w|$ޔCR FwGP+-:&)OHdq@]CKP4￝z"RZ"9iy|'{,0PN me"cc\ VQi׍y|s$Pu,37{| eb6whRgx` -`" ݳRdE}`Ft}$.;g\+6z_#ގ_5Ivt壜6~=+Nme@ ǘ06~)'o9)8Y *٨I_r=|I0J-KPǭp*+pVU%|5Pv$P@et,gr^ak۳7Kۜٗ!P%o S*_cmت(dD۝GF@55Bo:$䔰;ƫ`l3"]Fu{,]0ה#w-=Vٓ%ގb. gQ}C|$!ڋסm3@mr<%F!w0+G0'G Gd(䲋,~OA1`dJdJ`zned[AH_fBさs6I9QQq&b$;]r- ŤHElo4LˍG-YfHHJ%lA22Ż&>Mk('Q=Mwm ( (/L_Qܑyz%Q+Lz S=[|.aarDMb; E:I,2HƴhnySW zgx>E|-x"A_@Hѳj1+icb RM=]:m'ivgcǓ@ 8_c v%[wKi:4է*g?w!8DpB2oM:*q]=QIؖMTڑUw Q5Xm`ɓDsen3IP-D#,5(W<\%y*PB-r'\P>0^{s)W.~<$h~m~-ʜyf8;~;xE^<`6_;r947{9`ސUK1jHJ^Sl"sv %r[/~!>$AY ?y],;x}iR+pM`//{eE5%7;U9Fݚd91D s8 RC87jU> і%)-l )7aKev/*=gC;!L4] 4.1RxyU$n#/a>/tZ޿Rk^W6tbp0ڒԯ+L3G]1pͯMSհq"dە x eX_9#ڗHL\d o}7=T̂9i_Wz0}rE Gd>`/Bfn5HIs/Q6cZHuuvDfα6&jslkMn,aZ>).'`2 τA =Cb椱*WPn&ZAoK)Ctp^p稸3Lr!]X2XvmX=)`ojZzoZ? 8|JUߍ=|dft{߭Ju4iڬY81FOxɖ /o$={UEnmY0Y'3%ra0$-oh&J4.%E i({mxq70 afWߚc9<#=e- v ?8oN۟ y/ Z0Yb dOKRs[௺%# Uk(a%N ^#cZx"|R i#<3,_6yDq<nTN ?LnN&\E-G8SFGjc"l>zKE "@$j?-=BR~.%S< ahFs”ɕ"sg(^;HBHGnA蠾.ze?}A5yv9Rάyꗬp̷ ,!d2--(S.VPq"h<:OKPB 5lgh4c;T;Y! K4(y=._k' jnJ@@(m9|TuyfBکJI,} !&}Lٶe_`m=~Z6#Ge~_6+i04b`^ŜU.i NtHx8@ F)N,b>` ?W4, HAaps5j]A(I0D|Z}˃ؐ~ɳߥ70!=~Y72SgU !ϋ|L _ˑ3_U9+vݓ÷Ϸj8W3.Ϻ/4_>#2+XY H<].>Q*u _dH˫ RKبPXiN}.=ApQfIѷy Lyl~L끨I=ˣ,`<( m-"l@.z[f/*^yW57mUGI/-sUʍXvK .WM_>Jv&5C4t>(Բ+< [`U;Mp_R j,N]e>HlLEmKq<67i(Llao#L #kfnUjFmeH޳&nXXm9{oƒ,jSa|ɊA:u7Y7.\pgih0|6gHd ʋPKk=d4* ԾFZD ܲJzčBmD%ݭDfb9O/cJfL$j\gs=3Q c{kթvzZD/!WQ$RqH(L*wߗp Eq|C=ńtZyh؋.'><ᕑ4&"-69:'̩, >kY pqxcd;Γ?ޙ\i'E#Y~T΁ːY 1Rݸ׏p*\ȶ- 5:GQt yf LIx2팱Qcs^cVdrc=Jӆ&vr48Gz:N&h1 SaJS2YE/"lQ! 24/t1R6&(q Mwn*mhlGYno@>RtTU/?zt:H75rI̐&J ʀ~}V|~.n4N*Ѡrz{3fC}oimFoS H@AB:h{܇JG5Lrވ} Ex|oE iTSx n}'a[NNj,xSV&D@Х)O^-oNŠg0tG/}loh0B>V<)eb6enEۊttr!m6;h ;BrTmHF;~ <ź}O.Ug=#X,0ZXM ?uPg@+{B$θm&;`.?_mAm2A0J֌<-vM`vuA$R;0(;Ⱥgx~^&]ݓ7Lm$89\J4y#;~?khjʮ W^>oV>uovQYv7 N Ms=Am"R-) m; {=Lrx1NxeFrJNL@U}9KgN]s n2d)""ːOhM!ebKGc+HCzS WQ[T+XI•H6nŽw>dXU,/8XqHf:\ĝIf) З[S t )& Lv?|ERBx*aM.3kkRa[̑>f1}\*mF`ǣi*l?6Wܓ`$4p=uIwsI9(&:BEqHf 7e)i Dq\)?fרYop")K pR0a'ۉLBI5ozGn1@ѯf B``xռ&0{Z 7[~ua}G˙߼.]syv*2X.+_ѹ=%;9^n#Ju kl<5$y8ozZC/ԠnhL%qi{CEzZDԛK]vD8&=lw}奙O( oX.}HϼQsؽ-z m6iD d#N3[V 㹜~vFA@Wg94'cJƇ[|LCjD֘^2Þ u1DvpXQ;d[;@l9<ڼ<|g/ֺ$2QyZ1'[Nqx7{M)j' OhFEΤ8Ӝ (a 央 ~SBNkҕ#fZf1;&/bvt<0Bv]Dk @p0 j P,yWQ5XKwՁ^.@U.'6T\~X,i#Ҍ'AˋdZ9qťMJy!h^w3IcŠ}7AFw#){'LQۥmowiݑ-#ʱw1mC6zB,AZ*ܞ|K3uen:a_&S &_h({Zʀ/֪f!8߃Z+H1-9Nv#ÂlcwD´})*rhɁFFc-ct--5XYs[a'+@~Oʏg=wηްPwۢd @זMքdy?|@IRDZXG.(?E_iJ'@"}`*N,8]`F(,9 \wMHO;.=Aꁆ5 aUq( H }]\qL)KO1ʱ،D^oᜑS&PXh\zpLM~2]( ! 1p]0k(ov )^}Ll_B 䓍Mo!0,d猕{' hjFذ`|GE/|[/Vx6-"鮍[q_od782 #K.,f ʤew/$G-Ǜu0OEU28mOH Jx"j%-ۡ &]Et\:稨.j^Luʰ?F6MnאddY߃CH@aJ*v/=Ec\f[)5=*t~fONQ2%:2ƫm/{T6K M'F/ `S0rHtfEK ~]D l0!?`'CXt ph"1$dt R|v^<^uR+캃MK%yLwL%O٘KLvg7xʅDo. 쮁uEzETz&ܚ;3!nx1"%/" "@##:f)Jռ˜g]q4eNP$0Z)I641dKnY߃uk taIU>"رį^vrTͩZNd~!mBŶ _xh<.K4i}B5& ]Xs3M@?P&߆,_$ƻ&{D>pAOLeak rhs5ƙ^v(y66r8Ӊ]D?]}t[OEn^s|VXs-E:?U|rtL&Jnek)d߈UܭZg/If#)[doFEy`6 Q;SMB62z)>+I{9jCi7 `ELwy/-je[ȍWG:CDb5D+t4M%LPm;@Zh`b5L*HSYX YZ