Merge pull request #1834 from giuseppe/tag-1.23

NEWS: tag version 1.23

Author: giuseppe

NEWS

@@ -1,3 +1,24 @@
+* crun-1.23
+
+- krun: enable virtio-gpu.  Enable and configure a virtio-gpu device
+  if /dev/dri and /usr/libexec/virgl_render_server are present within
+  the container.
+- krun: add support for nitro enclaves.
+- criu: Add support for tcp-close.
+- linux: fix issue when RestrictAddressFamilies="AF_UNIX AF_NETLINK" is
+  in place in the systemd unit.  Regression introduced in crun 1.17.
+- cgroup,systemd: use BPFProgram=device on systemd to install the device
+  controller eBPF.
+- cgroup,systemd: allow empty slice in cgroupsPath.
+- crun: print the program version even with an invalid rundir.
+- linux: fix regression with idmapped mounts.  Support idmapped mounts
+  also when there is no user namespace specified for the container.
+  crun 1.22 introduced the regression.
+- cgroup: change formula to convert from cpu shares to cpu weight.
+  The OCI CPU shares (range [2-262144]) to cgroup v2 `cpu.weight`
+  (range [1-10000]) conversion formula has been updated to use a
+  quadratic function so that min, max and default  values match.
+
 * crun-1.22
 
 - crun: add a new command crun mounts to dynamically add or remove

src/libcrun/handlers/krun.c

@@ -145,14 +145,17 @@ libkrun_configure_kernel (uint32_t ctx_id, void *handle, yajl_val *config_tree,
   return 0;
 }
 
+#  ifndef KRUN_NITRO_IMG_TYPE_EIF
+#    define KRUN_NITRO_IMG_TYPE_EIF 1
+#  endif
+
 static int
 libkrun_configure_nitro (uint32_t ctx_id, void *handle, yajl_val *config_tree, libcrun_error_t *err)
 {
   int32_t (*krun_nitro_set_image) (uint32_t ctx_id, const char *image_path, uint32_t image_type);
   int32_t (*krun_nitro_set_start_flags) (uint32_t ctx_id, uint64_t start_flags);
   const char *path_eif[] = { "eif_file", (const char *) 0 };
   yajl_val val_eif_image = NULL;
-  uint64_t start_flags = 1;
   char *eif_image = NULL;
   int ret;
 
@@ -347,7 +350,6 @@ libkrun_exec (void *cookie, libcrun_container_t *container, const char *pathname
   int32_t (*krun_set_root) (uint32_t ctx_id, const char *root_path);
   int32_t (*krun_set_root_disk) (uint32_t ctx_id, const char *disk_path);
   int32_t (*krun_set_tee_config_file) (uint32_t ctx_id, const char *file_path);
-  int32_t (*krun_nitro_set_image) (uint32_t ctx_id, const char *image_path, uint32_t image_type);
   struct krun_config *kconf = (struct krun_config *) cookie;
   void *handle;
   uint32_t num_vcpus, ram_mib;