libcompel1-3.8.1-lp152.3.9 >  A ^A{/=„)=ZNcOO/|aNg2LO/r|[z=~5u;D/_\ID~,[#7}/Gg;S'N.r!Teڤw(G!eqoN!yTEW ۹qh%^@#*vHGi4#!9ݩ<]~bI6%җtcF3 =k|} s?fO#J:F_Hbb6cee6618612440ea3ec8532eb339fa20f4e94a6433a61fdba13d427dc8f8cf7cb7856256f8b89acc10226a1fe9000094f5c54f5è^A{/=„U_"Gqu-h4uRi1/ÑxUH4 3\wF_j~Չ|̬멩OKbԩ #yC'OM+lf %LxfmpO OƎy5۷GD:/{^9ë1pVR>@` )R`>#Dlc3A)ZM.u?Eƕ~Unܔ6fc>}mcq7|d>p@yl?y\d   5     $ f x $ I (m8t"9":">vl@v{FvGvHvIvXvYv\v]v^w bwcwdxex!fx$lx&ux8vx@wxxxyxzxy yyyXClibcompel13.8.1lp152.3.9Compel library for CRIUThis package contains the compel library for CRIU to execute a parasite code.^Aicloud118openSUSE Leap 15.2openSUSELGPL-2.1-onlyhttps://bugs.opensuse.orgSystem/Librarieshttps://criu.org/linuxx86_64^Ab^Ac74f40edea9c72e207a29e4e62feed1465dd25e1159a32af1c0656c433afec3b0libcompel.so.1.0rootrootrootrootcriu-3.8.1-lp152.3.9.src.rpmlibcompel.so.1()(64bit)libcompel1libcompel1(x86-64)@@@@@@    /sbin/ldconfig/sbin/ldconfiglibc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1ZZZ@Z>E@Z7Y@YYoIYV=@YI@XXDXXf@X@XN@X)@XWڍ@W:WWaC@W;W @V@Vf@VMU@Uc@UlI@U?v@U#U@T|X@tiwai@suse.detiwai@suse.deavindra@opensuse.orgavindra@opensuse.orgaavindraa@gmail.comaavindraa@gmail.comtiwai@suse.debwiedemann@suse.comtiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.decbosdonnat@suse.comtiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.de- update to criu 3.8.1: a bug-fix release FDstore was initialized twice (re-initialized) causing e.g. - -shell-job restore to fail- Add python-devel to BuildReq explicitly, as a preparation for fallback to asciidoctor (bsc#1075764)- update to criu 3.8: New features * C/R of - Multiple network namespaces - Overmounted tmpfs mounts - Unix sockets and epoll descriptors in SCM messages Improvements * Rework service descriptors not to cause fdtable enormous grows Bugfixes * FP state wasn't reported on Skylake due to a kernel bug * gcc 8 warning fixes * Resource leaked on error paths * Attributes of sit devices with value 0 were not saved into images (and were restored into default values) * Tasks with pgid of a zombie hung the resture * Ghost files on RO bind-mounts of an RW mount couldn't be restored * Random memory corruptions during lazy restore - cleanup with spec-cleaner - switch to https urls - list binaries and man pages explicitly - remove rest of static libs to fix rpm lint errors- update to criu 3.7: New features * Pipes usage statistics * Run page server as non-daemon via RPC * C/R of - SO_REUSEPORT option - IPv4-mapped inet sockets - Net_prio CGroups - Overmounted shared mountpoints - Non-broken and breaking leases Improvements * Show criu and kernel versions in logs * CRIT decodes socket families, protocols and types * Much less pipes is needed for pre-dump, which is especially useful for big mem migration Bugfixes * Files in /proc/pid/map_file could be opened by non-exiting name (with 0x prefix) and it was fixed in kernel * CRIU log levels were used to configure logging for libsoccr thus breaking its logs * Overflow in various IDs caused bad image names * Compat (32bit) syscalls lost signedness in compel * Corked sockets lost cork flag * Preadv() syscall was declared with error which resulted in dump errors on 32-bit processors * Musl compilation failed * Ghost files in / dump failed * Crash when releasing context for ghost files, due to free()-ing shmalloc()-ed area * Lazy restore could receive partial page and crashed * Erroneous closing of lazy pages connection caused restore to hang * Lazy memory fetch restore could start before tasks are restored - Remove 0001-images.py-remove-shebang.patch * upstreamed in 8e45ce4905d186abafb7c20abb3b00207fefdb53- add 0001-images.py-remove-shebang.patch * fixes a lint warning about a non-executable python file being executable due to a superfluous shebang * upstream: https://lists.openvz.org/pipermail/criu/2017-November/039907.html - run spec-cleaner- update to criu 3.6: New features * C/R for files (except for unix sockets, ttys and epolls) sent over unix sockets * C/R for threads with different creds * Ipv6 over ipv4 tunnel (SIT device) Bugfixes * Some s390x registers were not restored by native sigrestore way * Overflow when parsing autofs info from /proc file * Dumps of anon shared memory with sysvipc one raced with each other clashing and corrupting image file names * The "dumpable" flag was not restore on shmem regions * Trash bits leaked into image when dumping fsnotify on some kernels * Lock/unlock of iptables from different criu processes raced with each other * Closed TCP connection with non-empty send queue blocked the dump * When --empty-ns for netns was set on dump only, the restore failed (Docker case) - includes changes from 3.5: see https://criu.org/Download/criu/3.5 for details- update to criu 3.4: New features: * Support for s390x architecture Improvements: * Unexpected death of restored tasks is reported with more details in logs * Merged many images containing info about files into one big files.img * When helper utility fails (ip, iptables, tar) its name is printed in logs Bugfixes: * Compilation failed on newer glibcs (ucontext_t) * Dying helper task could deadlock the restore process * Install-related makefile variables weren't configurable for distro build * SIT (ipv6-to-v4 tunnel) presence on host blocked dump of any containers * Potential NULL dereference when dumping net namespace * Dump via page server might not work across different criu versions * Failure to restore a subtask could be ignored by the restore command * EOF on page-server socket wasn't handled - Dropped obsoleted patch: criu-correct-ppc64-AT_VECTOR_SIZE_ARCH.patch - Add s390x to exclusivearch- update to criu 3.3 * Add --tcp-close option to help migration of Docker containers * Allow to override build time to fix build-compare (boo#1047218)- update to criu 3.2.1: bug fix release, * Restoring a stack fails on recent kernels due to kernel changes * Restoring on a host with LSM profiles failed- update to criu 3.1: New features: * Each boolean option now has the --no-$option pair * RSS explorer in CRIT * Multiple plugins in compel * Run-time check of 32-mmap BUG on x86 * C/R of 32-bit futex robust list on x86 Optimizations/improvements: * Start time is improved significantly with kerndat cache * Sigaction image is merged into Core * Unneeded stages are skipped during restore * Restore w/o namespaces uses host /proc * Restore w/o namespaces doesn't parse host mounts (not needed) * Single-threaded tasks do not parse /proc/pid/task/ in vain * BFD engine is used for more /proc files * More verbosity in libsoccr * Fsnotify dump w/o namespaces doesn't walk mounts tree Bugfixes: * Python bindings left zombie in self-dump mode * The last_pid sys-control was reset by restore * Threads caps were compared with mistake * make install put crit/pycriu to wrong place if DESTDIR was not set * Fsnotifies C/R w/o namespaces restored with errors * Inherited control terminal restore was failed (but dump succeeded) - update to criu 3.2: Optimizations/improvements: * Invisible files restore is de-serialized * VMAs restore performance is improved significantly - Mappings of the same file re-use the descriptor, not re-open it every time - Not-COW-ed mappings are restored in-place and are not mremmap()ed - Empty RO mappings are mmap()ed as such and thus not re-mprotect()ed at the end * More verbosity in case TCP locking fails (#292) * More verbosity in case VDSO magic mismatch * Restore or legacy epoll target descriptors and fsnotify marks is unified with common case Bugfixes: * Restoring fanotify marks from old images (<1.3) dropped the mark * Binfmt_misc mount could be mounted into wrong place * Compilation failed with gcc 6.3.0 (#315) * Waiting helpers could race with sigchild handler and would result in restore failure * Missing VVAR page in 32bit tasks wasn't skipped and resulted in restore failure * After restore consumption of files is increased (was fixed as side effect of mmap optimization) Deprecation/Removal: * Deprecated separate images for fsnotify marks - Fix the installation of python stuff: criu-py-install-fix.diff - Fix the build for ppc64: criu-correct-ppc64-AT_VECTOR_SIZE_ARCH.patch- update to criu 3.0: New features: * Compel library * Support for x86 32-bit arch * Version check via RPC * ASAN support * Force VDSO trampolines via fault injection * C/R of shutdown-ed UDP sockets * C/R of bind-mounts made from external mounts Optimizations/improvements: * SysVIPC shmem segments are now dumped as any other shmem (taking holes into account and sitting in common memory dumps) * CRIT show decodes socket's states and types and task's states into strings * CRIT show prints unix sockets names in more human-readable form Bugfixes: * Unix sockets' names appeared in logs with mistakes * Contents of SysVIPC shmem segments was dumped twice * Dumping of any memory segment more than 4Gigs failed * Migration of unaligned SysvSHM segment on Armv7 failed Deprecation/removal: * Exec action is removed, use compel instead - Create libcompel1 sub-package- update to criu 2.12.1: Fixes: * Content for external bind mounts was erroneously dumped, which could lead to dump failures or huuuge images * Unneeded collection of host mounts on restore could cause restore to fail- update to criu 2.12: New features: * C/R of external TTYs (for Docker C/R) Optimizations/improvements: * Sanitized the way the -v works Fixes: * Checking features via RPC crashed * Resting pipes in user-namespaces could fail on modern kernels * Shutdown state for UNIX sockets could be lost on restore * Dump of huge (over 2Gb) SysV shmem segments didn't work- Update to criu 2.11: New features: * Added "pre-resume" to action scripts * New --status-fd option for better control of page server * C/R OFD file locks, RO root mount for mount namespaces Optimizations/improvements: * More strict checks for extra CLI options * Report errors when probing locks * Restorer logs now contain timestamps Fixes: * Regression: v2.10 was broken on ARM * Use-after-free when restoring ghost directory * Array out-of-bound access when restoring VETH device * Page server exit code could be screwed up * Clang over-optimized string.h routines resulting in random crashes * Parasite failed to send FDs via socket on Alpine Linux * Restore of huge file tables could get stuck * Restore of epoll in epoll could fail * Errno value could be lost when reporting failure to restore invisible files * Dump of sched params didn't work on Alpine * Restore of huge memory dumps (over 2G) failed * Installation guessed /lib vs /lib64 with errors * Migration between xsave and noxsave didn't work for wrong cpu feature being checked - Update to criu 2.11.1: Fixes: * Page server start via RPC was broken * Fedora build didn't work * Ppc64LE restorer switch crashed- Update to criu 2.10: New features: * C/R of SOCK_PACKET sockets * Libsoccr -- library for C/R of TCP sockets Optimizations/improvements: * Logs cleaned up (removed bunch of useless, fixed '\n' in perrors) * Action scripts errors are printed in logs * Removed several iovec-s copying over the pagemap code * Restore degraded linearly on Xen guests. Breakpoints disabled until solution Fixes: * Py bindings fault on restore error delivery * Fd leaked on file restore error path * Fd leaked when restoring invisible files (gets closed with criu exit though) * Link remap restore could fail on kernels 4.8 and higher * Impossible to restore after restore error with link remap file in images * When going daemon a descriptor could be leaked * Custom setting of mmap_min_addr could make restore to fail * Sending pages over UNIX socket could race and fail with EAGAIN * Error getting ID of /proc/pid/ns/foo link not propagated and could result in bogus NS ID generated - Add libnet-devel to buildreq for dependency- Update to criu 2.9: New features: * CRIU can now be built with clang on all supported architectures * Ignore missing sysctls on restore with --weak-sysctl C/R overmounted mountpoints Optimizations/improvements: * Batch restore of memory contents from pages.img files * Link-remap type for invisible files is explicit in images Man page for CRIT Fixes: * C/R with --empty-ns still handled iptables configuration * SCM messages inside UNIX socket got lost after C/R (now dump aborted) * Empty unixsk.img file appeared when dumping tasks without unix sockets * Install procedure wasn't PEP-394 compliant * CRIU blocking netfilter rules were added at the tail of the chain resulting in unlocked TCP connections * Dump/Restore spurious failures when open() returned 0 descriptor * When dumping shmem lots of zero pages were written into image files * Ghost directory with more than zero ghost parents caused restore to fail * Shared mount could escape to different group on restore- Update to criu 2.8: New features: * Ability to configure CRIU build * Show statistics on the screen with --display-stats * C/R of Mac-Vlan devices Optimizations/improvements: * x86 can now be built with clang * When dumping files useless garbage was sent with descriptors from parasite * The clear_tid_address and regs are printed in hex with CRIT * Big code rework for compel (part 1) * Removed duplicate error messages from opening /proc files Fixes: * Restoring cgroup NS could use old path prefix * criu check crashed on btrfs mounts * RO external mounts in userns couldn't be restored * Unmounted on host binfmt_misc could cause dump to fail * Off-by-one could cause criu crash when dumping shared / bind-mount * Mount namespace' roots could have flags changed on restore * Dying tasks could erroneously be tried to dump * Swapped shared memory pages were not dumped * Errno value can be sometimes spoiled by RPC * Restore of netns with newer iproute2 tool could fail Deprecated: * --ext-unix-sk, --veth-pair and --ext-mount-map, by --external - Set BINFMT_MISC_VIRTUALIZED config to build- Update to criu 2.7: New features: * Option --cgroup-root now makes sense on dump too * CLOCK_BOOTTIME timer supported Optimizations/improvements: * Output of iptables command leaked into logs for no use * Helper dev environment installation script for Debian * Man-page updated and prettified :) Fixes: * Unmounted binfmt_misc with rules wasn't dumped at all * Malloc() error could result in crash * Device cgroup restore could fail restoring empty record * Some entries in device cgroups were restored twice * Potential crash when dumping cgroup bindmounts * Sign error caused dump to fail on btrfs partitions * Shared mounts with the same mount path failed the dump * Threads were restored with unshared FS (cwd and root) * Shared memory changes tracking disabled (regression found) * Restore of autofs can hang * LSM profile propagation could be lost * Mountpoint with lots of options blocked the dump (too small buffer for parsing) * External slave mount (with external master) blocked the dump * Mounts with STRICTATIME restored with others flags dropped Deprecated: * No reg-file entry for TTYs- Update to criu 2.6: New features: * Ability to leave process stopped after restore * Memory changes tracking for anonymous shared memory * Deprecation option/environment * First error message is reported back via RPC * C/R of More IPCNS sysctls, xIDs of PTYs, TMEM on PPC64LE Optimizations/improvements: * Use service FD for transport sockets on restore * Ability to turn pagemap-cache off (some kernels are buggy) * The criu --help text has become better Fixes: * R/O-mounted root could block the dump * Restore of cgroup.mm.oom_control could fail * Cgroup fs bind mounts were detected with error * Unaligned futex-es in parasite could cause dump to crash * When compiled with gcc-4.9 parasite code crashed * Failure to freeze cgroup didn't result in aborting of dump * Wrong ns list was parsed when dumping userns (invisible since nesting works only for mntns) * Non-inheritable non-tty as stdin caused shell-job restore to erroneously fail Error path in criu dedup could crash Deprecated: * Per-pid rlimit, itimers and posix-timers * Separate image for epoll tfds (target file descriptors)- Update to criu 2.5: New features: * C/R of fs.mqueue.msg*_default sysctls, Unix sockets with overwritten paths, and Link-remap files in removed directories Optimizations/improvements: * Micro-optimization on namespace ID evaluation * Restoring shared files uses one socket instead of per-fd ones * More verbosity when refusing to dump a file descriptor Fixes: * Restore could fail on openat() with ENXIO when multiple mnt namespaces get restored * The criu exec action got broken * Link-remap and ghost files remained on FS after restore failure * TCP window could remain clamped after restore resulting in connection lockup/slowdown * Dump could stuck when injecting a parasite * The --timeout option wasn't taken into account when freezing tasks using freezecg * Race in freezeing/seizing could result in lost tasks * Memory leaks here and there on error paths * Double free in xvstrcat (crash) * VDSO length was mis-calculated * Symlink on --root path could make restore erroneously fail * Potential memory corruption on reading mntns images * When restoring on systems with low pid_max limit restore could fail * RO-protected SysV shmem segments could be restored with PROT_EXEC * File mode of mapped file was evaluated with errors * Restore of cgroups' mem.swappines and ..use_hierarchy blocked sub-groups creation * Impossible to restore cgoup mem.swappines default value * Zombies living in orphan sessions/groups failed the restore- Update to criu 2.4: New features: * Generate core from images * Ability to forcibly drop half-open TCP connections on C/R * Ability to specify cgroup ctls to dump via API Opened/mapped files' mode is compared between dump and restore times * AutoFS mountpoints * New cgroups (perf_event, net_cls, net_prio and pids) * Memcgroup optional properties * Devices cgroup Optimizations/improvements: * Pagemap image entries are cached in memory Fixes: * Configured kmem cgroup limit restore failed * Mem cgroup oom_control * Cgroup's pids.max was not C/R-ed * Failure to write cgroup property was ignored * No init PID in pre-dump action script * Sigactions inheritance didn't work on ARM * Opened "/proc" dir blocked the dump * Working with iptables was racy * Sibling mounts detection error on dump * Devconf accept_redirects devconf could be restored with errors * "All" devconfs could be overridden by "Default" * Name-less unix sockets got auto-bound * Mode was lost for PTY device file on restore * Newer protobuf compilers didn't recognize PB files * External mounts could be remounted with MS_PRIVATE * Build fail on Alpine Linux Deprecated/removed: * Per-pid file locks images * Per-pid fdinfo images * Ancient pagemap/pages images - Enable builds on 32bit ARM- Update to criu 2.3: New features * Ability not to show payload for some objects in CRIT * Pidfile is written at the end of restore * Ability to join existing namespaces on restore * C/R of Data sitting in TTYs, Partially write-protected SysVIPC segments, Debugfs and tracefs mounts, Overmounted tmpfs, IPv6 devconf sysctls, External block devices, Unix sockets with mismatched shutdown state Optimizations/improvements: * Relaxed calculation of AIO ring size * Tree-based search of tasks by real pid * Less mem-to-mem copies on restore * Saner devconf image format * More verbose explanation of why task cannot be seized * PID is printed in PIE logs Fixes: * Too many mmap-ed files blocked the dump * Potential memory corruption when working with IPv6 sockets * Overmounted bind mounts could cause restore to fail * Overmounted bind mounts could result in badly restored mount tree * Incomplete restoration of RO bind mounts options Deprecated/removed: * Greedy mode of pagemap (non-root) caused dump to fail (disabled)- Update to criu 2.2: mostly bugfixes New features: * "Post-resume" added to action scripts * Root task's PID in environment for action scripts * Devconfs drop_gratuitous_arp and drop_unicast_in_l2_multicast * Serial ttys Optimizations/improvements * Lighter link-remaps restore on newer kernels Fixes: * Race when restoring userns vs setting ns' maps * Tasks with zero fds failed the dump * Restore of TCP recv queue could fail due to kernel mem alloc constraints * No errors were written to logs when launching helper (tar/iptables) app in userns restore * User-mode dumped no memory pages sometimes * Bind mounts considered not as bind sometimes * Two mounts in the same directory blocked the dump * Off-by in on /dev/tty{1,63} dumping * Forking of cgroupns task was done with screwed clone flags Deprecated/removed: * Greedy mode of pagemap dumping (on some kernels we do not support user-mode) * Removed the --namespaces option- Update to criu 2.1: New features: * Checking now classifies features to important/extra/experimental * Ability to bring some disk files into images. * C/R of Completed AIO requests and fallback gre and gretap net devices Optimizations/improvements: * Code coverage collecting now works * Use native rtnl library for netlink messages processing * Using --output - now results in stdout as log, not a file with the name "-" * Signals are printed by names in logs Fixes: * Make tar generated tarbal with bad name * CG restore code lacked rollback in some places * Error code from raw syscalls was treated with errors resulting in wrong criu check reports * Dumping task with HUGE amount of file descriptors failed * Task could be stopped after pre-dump if respective option was used * A /proc/pid directory from dead process conflicting with a new alive one could cause dump to fail * Zombie from alien session/process group caused restore to fail * CGroup fs was wrongly mounted in CGNS on restore * Irmap scan was mis-checking devices numbers * Use-after-free in irmap scan * Btrfs bindmounts detection was mistaken due to 'subvol=' options met * Propagation of mountpoint's shared groups was lost for propagated mounts * Unaligned allocations of restore shared memory could result in codedumps when used by futexes * Temporary mountpoints could result in spurious propagations * When aborting the dump criu could crash on use-after-free objects * Locking the network could stuck doing the DNS resolve * Several build fixes Deprecated/removed * The images from criu prior to 0.4 are deprecated * The --namespaces option makes no sense and is also deprecated * The --ms option for check action is deprecated- Update to criu 2.0: New features: * New code layout for sub-projects (e.g. Compel) * Unprivileged dump * Dump/check cpuinfo support for PPC * Explorers for CRIT * Added "post-setup-namespaces" to action scripts * Added timeout for dump procedure (5 sec by default) * Ability to override LSM profile on restore with CLI/RPC option * External bind mounts can be fs-root mounts too * Skip netns' internals on dump and restore (for Docker integration) * Advanced support for external files * More C/R supports Optimizations/improvements: * Align parasite stack on 16 bits for correctness * Compilation with native libc syscall wrappers and helpers * Parasite code injection done via memfd system call * Make vaddr to pfn conversion with one less syscall * CRIT shows device numbers in "maj:min" manner * CRIT shows mmap's status in verbose * Docker files for builds on all supported arches Fixes: * Absent readlink syscall on ARM (use readlinkat instead) could cause dump to fail * Wrong argument to timer_create system call could cause restore to crash * Extra tasks in freeze cgroup caused dump to fail/hand/crash * Unaligned restore-time object allocations caused lock operations to fail * Opened /proc/pid dir of dead task failed the dump * Unaligned stacks caused criu to fail on aarch64 * Changed device numbers on restore side could cause random failures * Fixes in mount points sharing/slavery/propagation restore * Race between mntns creation and fds closing in different tasks could cause restore to fail * Hard kernel limit on TCP repair recv queue restore could cause big queue restore to fail * Unconnected dgram UNIX socket with data lost packets on restore * CRIT didn't show IPC objects * CRIT didn't convert IP addresses in images * Logs from PIE code contained corrupted addresses and sizes * Not loaded netfilter modules could cause dump/restore to stuck on dumping netlink socket * Shared external mounts were restored with error Security: * When checking for namespaces' CRIU entered userns with host creds * Deprecated/removed: * Completely removed 'show' action. Use CRIT instead.- Update to criu 1.8: * Ability to check CRIU features via RPC * Pre-dump and pre-restore action scripts * The "info" action in CRIT showing stats about image file * Python API * C/R of read-only bind mounts, IPv6 routes and iptables rules, ip rules (it ip tool supports such), ignore_routes_with_linkdown netns devconf, empty bridges in netns, FILTER mode of seccomp, and IP_FREEBIND socket option * Lots of fixes, two security fixes Service run as root could allow users to violate ptrace policies Service run as root could give users access to privileged files and directories - Remove superfluous dependencies - Clean up spec file, as systemd and logrotate supports have been officially dropped- update to criu 1.7.1: Fixes in mounts, notifies and userns found while testing openvz - update to criu 1.7.2: Fixes for IPC in userns, venet C/R, socket buffers overflow and unix sockets name off-by-one - Add the package dependency on python-protobuf- Disable systemd service as a temporary workaround for possibile security issues (CVE-2015-5228, CVE-2015-5231, bsc#943105) - Update to criu 1.7: * Improved cgroups management * Support for seccomp strict mode * Support for stream unix sockets inheritance * Support uid/gid-restricted mounts in userns * Support deleted bind-mounts * Ability to specify maximum ghost file size * OverlayFS support * Support relative unix sockets' bind paths * Altivec and PSX support for PPC * Small PIE loader * Temporary proc mountpoint is mounted with nosuid, noexec and nodev * Less memory copies when preparing restorer binary * CRIT action "show" for less keystrokes on common use-case * Fsnotify log messages now use hex everywhere :) * CRIT output doesn't mix fields any more * Many fixes - Drop obsoleted patches: crit-install-prefix.diff lsm-prototype-fix.diff 4c5b23e5-criu.pc.diff- Fix version in criu.pc file. 4c5b23e5-criu.pc.diff- update to version 1.6: * PowerPC 64bit LE support * Makefile.local for 3-rd party build rules * Ability to "enable" filesystem on dump (--enable-fs) * Ability to skip mountpoint on dump (--skip-mnt) * Prepare to deprecate "criu show" command * External mounts auto-detection * /dev/tty (current terminal) support * Netdev and netns (all/default) confs C/R * Images v1.1 with extra magic at head * Support fusectl (only ctl) mountpoint * Sub-version format is now as of git-describe * Apparamor labels C/R support - Fix library path for aarch64 and ppc64le - Fix the prototype for lsm.c (to fix build errors): lsm-prototype-fix.diff - Refreshed crit-install-prefix.diff- update to version 1.5.2: * fix error in mutli-threaded tasks restore with --restore-sibling (Docker and LXC cases) * fix too big RPC messages error for service (and swrk)- Fix build failure on FACTORY due to comment-in-comment in google/protobuf/descriptor.proto - update to version 1.5.1: * fix crash with 4.0 kernel * legalize swrk API and add the ability for inheriting fds via it * cgroup yard destruction and properties restore- update to version 1.5: New features * CRIT tool * ability to request CPU compatibility on instructions level only * C/R of empty AIO rings * more detailed errno report via RPC * per-feature "criu check" * inheriting FDs on restore * ability to automatically move veth device to host-side bridge on netns restore * VT terminals support * more user namespaces C/R stuff See more details at http://criu.org/Releases#v._1.5 - fix installation of crit: crit-install-prefix.diff- update to version 1.4: New features: * Dump and check cpuinfo * Initial support for user namespaces * The docker_cr.sh script for Docker * New API for writing plugins (old one is still possible) * Service workers change their title to better look in ps output * Ability to feed socket for pre-dump and page-server in swrk mode * Page-server can auto-bind its port * Ability to perform several actions during one connection to RPC service * C/R of opened /proc/$pid/foo files of dead tasks * C/R of /dev/console * C/R of virtualized devtmpfs (openvz and future upstream kernels) * C/R of empty mqueue fs (posix message queues) * C/R of shared bind-mounts See more details at http://criu.org/Releases#v._1.4/sbin/ldconfig/sbin/ldconfigcloud118 15896579613.8.1-lp152.3.93.8.1-lp152.3.9libcompel.so.1libcompel.so.1.0/usr/lib64/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Leap:15.2/standard/b40d6995854423ba93cd05772e87444d-criucpioxz5x86_64-suse-linuxELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ff48dd8e192a2c6d942d5de44bdd56f3cb7df257, strippedPRRRRRRZo2߻J5"utf-8483f7c885c79476508b2cd6d26369ebb26f879d56ac4637896575aca20390ea0?7zXZ !t/cE] cr$x#+P#y/jAZ <.a&CoRl\Jtftxpn.T./L>O:ݸ+ 9ϡ->(& BB:Ol {\R NbL+D{RiGp0陸 ;laA8֛C=>~0J藹!*HQD϶Ip_9</gCݻC9޽=ySL0+['E=3Ai@[@9^kV+v~5Q8K+KHFg}B3EmLm4- s}S>ו K(tB%ёj#fs)yE[=ԗmb( C~?c+#f47!o\VP4# oK4u!=A<捱ĽcVf~6AiEGǏt[^"lx5;LϩI A=FkC0h%1#W#ڳdqI繑x) nҿוw&! B}`< kG+?0X2ֆ P:`OX'bZ/G˘>GWwu)duUJ ݱT%f";BUоJ|=8Iq~1S%V ,#BZ6|__kȂ6F-\ eTH ˡלt K.gѪNTX)Aj]] A A[S krQ3TB\1𺒑Sn1vc (aZ H召,I5iޱfeʆ(j]Uᯡ$@\ME&ŝXlQ[BANћ]y-P͔il4lmC; -#&vS= W}b$w>'6}4pmvl#G1/w憽'7:oC`8u3K1 ` ې|I%#.0lϪS*JCrA~N`D&: >^E^d@c4tuR{ES-R$l+F(X,! d> qgcy>yi͒qV)CV?br9L ?*+ԑT%jk ]uX0@>H8Voai'ܖ/ )8{Q%_|gUjMΌ|KKJ@i2~~]a>۶~Ș8%f(Gkwޒ9"Pm-t;d%AcNU) p5٘w8uî'Ξ}ҭ(ιS!o(`MРQVB */4|ܦ`CnrFh0Q;w0tMmia9VDZ.BPE_\lƯ8 =ɑ gJL! UUB#"45>=W˴ƍ[! 2bU f.UF"qpxL&ŌQ߳3)g ڈЈ\hC9gl1pŌ2Xp/UD.<{6v0O{4!!.i٣;k`F(Qn٨clUluSMt(!}>WcV;[[O̰E'wY+tJS~>7S&79dذ.!Fehc$jCTֈ-a11X,NXDN kN0II (=s$\]^հ1s!_D]!Ol\fL?syK:lWo'HUG(CyK9^SRWN[56U݀tH5M䨋7&>Gdr_}2 $)}~2*%g|@uy>#6\-WbY hV 2*Ó:6 B 'ʀp@QFṫ 7br @"]ӜTlau-֡?~?PohNI rῪć9lk v9ou#Qwj?fgEur|T W`4GE٪Pfpu-t_²\w\^T53,&㯽Ȳ Oa:.LGq}ǩ?\$̊d`ԭFՖ #/ThP<F߇vߜW2EM ,HA ɧohǧ205:Ӝ-X/aGX~6հf(fuNs*|~uGU4G̀t0bG~*X*I# *.om+jov\UXM|XCHة4/;DU0Is9? ۖn_@HkY\ÝYr3ЖeffV[ `5 D3(YL|%kk0  `Y4H//wT*/$/v!]nΜΡ;r;b;٬F Bo5aNxz{ cE,"$<ֹǤn ɏ qԺ\Ry83J쭈PTi óg 'n5f;+B6F*u ,F`㻛pP7CPbSȐ#|h3B>,Ķř?XdHހ 1-T|V?SI= 0sOfcKթh+mt"sΙCmV>:X^F:=IzG4p=: WSF~i'cB@8<bEÀڀqI_'#0Vi[;Sa@BMI*/MAt\ڵlo}H䲿1lSw:,0P|ʲԬtC Pz7kkplb Qr9D&.;bNwJ&M޳ڡ^iKFՑW~G:HWSspQ=zB%4*LMBqmNgLm?zgI,wz: jE-|8'U2nqZrͨ*#uc\'2M0 wޝa^=luFMf5 WPU+OJf4McWh gC#g!xM *@uxgJqCkK2;͑}Ua#T# U8S6 !G?cޅRWʞB=]Aw H:bG H!:tWG$Te]Ɂ;OX 8{.rﰖTVέnx:~جW< "[PHl>`Ǿ#ԩjW'2&Ӎ wH5V b:5`d I3 ]4ki4["(uc:δJan#8=a0K<"rNv'.mJţ(>/b*֯7`8J|Pkoh "MwQq9ɋIpXj#j3% cuo8eT, e^qk_,_eD]_z3 QC._Ї |VzkR,R^>Q U>2amAxwQ0zE5g-j[WE}TVzY.5%"O!s%ZDvtlc~cNl-İqB3K+1&mJ&x$hk26s-ZX3˨G-Fxpd0vJ{_gGTwhVAw%X";ʼMdtN/!l' R(EcyKjﯸA‘kS\NG[6x̽E<$KWRv㬫hڸA]=e+Փ U/OқM`l+4l~bMB\}ldvXqX|44$*E ypVTg^I)$'rCS§tn>8;a܆~b0sz/v.ڱdp!Yo(7"Vv^3۩G/8>$0mSRQu s}ʞY%zǗmaV{>Nޔo <xrpc`Pæ G@ lkh{D!Y}9岹)1)D #$<9aj4`s#nw{b>*c%FNA=\T]71ώ7; a)86nM\HEl3n.2菦h* cԼ\gDZg|pA3g&9_GFR/( KNYTfSk{MW[>%`z4X퐒ѓԋOoZpl(Yy%[Oj-wr٘#Ze$T&-SߞvJ'MHr 6~L##pڔ ueeQ해 1#5Ɉ=K1lQ>$3PnHJ~pM3<`\.u 10F6y D5,(TgDXBh oi+e"]L,AH?/Ea!D04x~hx{wpӟZ`״2" BԚ}-(xJ*jM8d0 汀Nj6Xb!vz1Wћ}>hsE8j*^#a%"̜3υώ[nS$%9z&9FoZdfXU]̜ m\~;] z;1QP؝VݰD,d+UEA ;!N56ީ{Pt' mˆgzC CB=ѽ$?HR1F\7#>¾W:e'x=coH^u9Lº4V1\D쳶q2KlDahBrp݂DQm Gg8$37lNZf4C2S#yR3\oW;HVᷬ'"&5P.*J-j^:;x*P ԍq@v㬚3/Wiihed񟜺s}㳞*IH͕S=u"6@BgK_t4 k=TYɻHQ<_D'OlX}9#쇨gC'o~OLpt"?3np$Q֚ -X qELu$+SnF'pWD?=Yܨ2Q-]ulf]OwĊ`!8QkHI쇟h厏$ !\HXwWG=5*e(ʣ; , V7!\tp[wD6Iֻeu@Eo"M"o?ep'1"Pq&\SWNBk(XPWg#PZ4k5iuh%;zUhw@QE ؞@>dNqՖܬsH! g"0ZZZq܀K72ʦӻ%V7a7_((! [:|Q(MD,"_1#w'٧\ *+Zrt!#?;*oK2KC`kǓan˭`ϻ4\RÜM %xdH"rM6JŭM@lu=򹟁~zDaB1C(oV9c! ?k8R#_魆^Vfl R];^qvzm_ j84ez`ksK8 Oj:➆NaO q!P@t5%LZ4'25ᚋEb.XMWWM:ep7ӴfIfe x9Tj8W[FXKc`?h-[jN(wLۜsT(Ewfj r~"bGT%qyp]H. ܸK3s:β>}iEyg G&d7oqZG] ]M16ۼpMq?L>=IJ6ƪp FBS*+}Ycqf~p!8~hWW  \}6I964#]<0-8,?\Px F,Y|[_Fe*HĿ^3 X6kbq@ʰg=?؁w~gź(P2U%W׋Puqvm;RS[XNѪH$$:*4-MlƦر3FS+)fx}{KdқcKf֐zL]OKGH H <Y17cX-?6_.RJ5EsOhXT^3bECG f$ 8e7q齶p~?:Y/N7JfsbByN*S(^dܹ`]( PC{^89a_%YvZTװ8\:ulP[5yM!F>Q雏'w\qi4m K? uݽa_H[q Jh\\S͔=`{9;Qmh?W2 {2~kQ8 rjKknK\ *a)E6*K% C@_&*e-Pݽ>U7~gbdB2W6T8@f ;;m7DJt4%<*H{/eH_oh8y^$4GĊ }URs4 lS&/L;,V7J9[I=yͦZT=|(kz1K.Aw׳4O5?hƻtE}{4ieP⹘n>ĎZ*ۏuוFAH{6H=OęL0G /ú^ ~TχHywִS 8H`pI-++§+? x@^{ewGy˝ٛ 1!3h]q^љ+.|d?]<. .#t+۳-b- $L~,yOsMf%J?rm@(ڏ&>#NjEJcwJfaCwUʺcv`x[s>?0DdݝO*j$[[X$}%PE.Mahz]vƧ|uFA"(>ZQ(YӿXdNkȁ;%4&d,A~ ^7+*t$|99r[*)Q~PM4DoΗL,dSF)?08}Dd  %RR@ޖԳ݌q pyXLչpNl{WvqԷUY2ҜWH6Sߔ!hbFM P_3&s_sط;+'!>E|E'g&*Md2S'0cFXAD:P1# zh|@2 Kɔ ƪ,F#l3Jr= ;6v J_NC}72-j辁hr^85WpatokpՋ/)MSU \Ͳ b\uf'j ^> E|\#{LqHAm͊s=׻4o! k̓),zr6Lr%4" \3?e|#}OѳѱHD3pꄛn.1pmdQ}؈êRSB s@oy'~{C#[n|?F@T0Z0O~BJm:nG{?r3^UST^lfvQ8F|_J#u=B*Z^fSou 1)SYπ91zxu}R͡S&Uنm-+0L4]ңsͅ l{eiQB9aimWT7J~o9^ W.P<o%n>!ڋ Cؘ+,<-;h@Օxl2;W`7UaW7#C! э15^zJ1xc.}W2jC2"s1jWx&eOT&LgC'5i}f/ȃ,;Q!hbumM0* [>:.djk:,cJ\Vbؒ՞#gT2Lɓ]UW^LyC4d lF'WIjZ͠!%r}aj3&CԧR%GrvUbʊͿh_|eO|}Z ֪Z!c_N#0b͎ƈz )#D@6U fM(xՄ㖞HV96#E Cʫ %0o 0(m4:$P "}@GV3)Z6B^OVlM#FH0GY,pd~]y &(4QZsnj7 mr Mھ'H}b8,?^;LRγ>ld/@X@~ GZbSu,x79zû^[8.iEsq J,'!(HrcX\M=[8niF`7|qa:&Y窢Þ"[* h]42@<pه -z2+>#V >R&1(W'LgW.l?6)ԕN|AH-(0y.W,eaS$I'liF<0[`P^yXU1O/ay!bCo,b_N|zZnA8s 'V&X=O\ v?EDdKOt\VMqb ž 2r/S0swW.^ IG͒^LU؆rL 8B(`! >&m6cK-onui9-1 1\Ap[wb؅a=Xb*y|y2T}Z!SD? <:0 swi_ȡyhjdL#vvaUҮ j8˱rp(c5z1u!ys,vl=h) g35;zمVmd\F*_u}{N; gPl< UW 0|HzZ.i#ӭgl{4Z{'GpBPΎsURLQ`U/Ef DRepXsz3$Ү<|C@';6)ԛ/CVsKa⓿ "OA9W]JBS[AHyqߍqgyHT\,JBUb LX >a!?-҇< QIOC\Pg ڽ_3ԏh62key"!kub&UJG`JGiSej-Fv4{wvFʰiJgGk* vݸ$Ft!=aq'%sZ{|4`nH~Vȴ8.2t3皠ֽnœIƞW{yQd"ZꨕU@'2zxs֥$գRJvc;49^ `}˛|IS w]Ѕ˻f|0EgnU=W2ԲWgeٶN ׉ ZAoqiQOpRf!:Oh46/p'MY|:z"Y2UPsmx Զ!C8_L$]X@=.n*0JD弅bs, 8j&GQyWНĔ2 p [4 9~}pkGѧRS׍&Fj <=m3I0:1{5{4ʉMk>)|)D:gt04R`!i5)oڻם|9mRZXCII7ֺǓ& ]#DyNqԡwM :Xɟ^}-E&PgQz:=vKA3XPi~iO=;_3n|B >v*l,ƹ^ uO)TT|5{$y] &l s+%|)\`) iOXed YЃ.iwMyy~t1t⸻[|]SI>$IeG@UQd [|QǾA)8iɡ0ȍB!'%6$9:`DOv9F{A/?W=7H4G8X>n ducgY!<{em='ݑt9~~#WȌ3R0O 9\fdj2Ji3iЕi«DԉGcjŨ)P-95HQr}yT*M;T(> qOv|+qF_kVɩ44Jjԑ J]nImA=f; O<"W9Šx2R 6d.0l@貅'Ǽ3;{rayG2ޞmqi䯐ťUBT+(O[Z]mS>zt~t*M? ?&M)$bU`Fx]5K" V\OkNp_愬G;7&8Di4ˤկk"rZš@Q_Dg|̞ f σtkˤu) ;# _bmvYI,y'7Tj|F!Z}|F)sJOdU?+c! Iϋi+ >3a2/j1|F%z'd3hwyU/ \夅DB_$^&.hˎzHZİo5[A{7~pyJCW@V>8sj!?8ٌNdm_˺0`̮mk<`LauyW1@O2ܫ}>{(](Id=l֋U\N۳|Ch\o B'o.gϼ3T6,5Qy60潅gTrl}*R?7 ӹs!M=P/MmfCVUe;ô*&'j5E맥&ZĬUӋsw5/ͣY VWj.\9$"akӜfGi>벇Œ"9$cb5Wk-{CL}I<9[ǃJknP+Y~^gP=@ }r]բvo;k1n,d79bmL{])h4fґ`|Y#@GBhS%2=z08gjvՇ]Nd":JyYC+ÃQ<#31#іu˺%QU6vA.r,*72tJ`UkGhBjRh3ɴ6ITG>+&6\s.QfB-+4'kGe-&qxmx7]Ɇ/N%.򮣝qG\[*PLwFq5Q/x:Sԃ#ܿq+C)To3hF_ƢbنKZhHaRc й؁{"߿;̈ uMuKUk΀">fh:|S8`* la;bB3AQ'Yl,p>Vr!bkbB8k1[B*!DfS; Q wiiX jLI4I:pC}Q 4?[^!ϷDm2azmQ{~' >~ 3<~rd/_+}?M%5M'U{f~@Xa1A\ h%;(FWhkol3ܑ*Ș(*Ej,Hl=)l}q.WF"8\k_4ql8ʖ$b(u_߹;veݶ YZ