hc-github-team-nomad-core
17f752e896
backport of commit cb2363f2fbbb771af9c8a62ed09a60250df647a2 ( #18763 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-16 08:47:57 +01:00
hc-github-team-nomad-core
a532f3c321
chore(deps): bump golang.org/x/net from 0.14.0 to 0.17.0 ( #18734 ) ( #18738 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-12 08:43:51 +01:00
hc-github-team-nomad-core
f6900307e8
backport deps: remove Vault SDK into release/1.6.x ( #18727 )
...
Co-authored-by: Tim Gross <tgross@hashicorp.com>
2023-10-11 12:02:48 -04:00
hc-github-team-nomad-core
20a928805f
backport of commit 9a38a9c188533c856affda84f272a83856085942 ( #18711 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-10 09:37:13 +01:00
hc-github-team-nomad-core
db61b01482
backport of commit fbf792f895dffbf7e53fd9922de1a8d50a5ab58a ( #18708 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-10 08:46:09 +01:00
hc-github-team-nomad-core
7685e62494
chore(deps): bump google.golang.org/protobuf from 1.30.0 to 1.31.0 ( #18694 ) ( #18700 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-09 12:12:11 +01:00
hc-github-team-nomad-core
57c97b39b1
backport of commit ccafb946452c68e781bf9758a52ea2263143a158 ( #18632 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-02 08:49:05 +01:00
hc-github-team-nomad-core
3b6ff9b56d
backport of commit a8a1e5a1c5a098f0b27b121a237db261c4b2dc77 ( #18246 )
...
This pull request was automerged via backport-assistant
2023-08-17 09:04:46 -05:00
Seth Hoenig
a45b689d8e
update go1.21 ( #18184 )
...
* build: update to go1.21
* go: eliminate helpers in favor of min/max
* build: run go mod tidy
* build: swap depguard for semgrep
* command: fixup broken tls error check on go1.21
2023-08-15 14:40:33 +02:00
hc-github-team-nomad-core
c25c04816d
Backport of e2e: modernize vaultcompat testing into release/1.6.x ( #18182 )
...
This pull request was automerged via backport-assistant
2023-08-09 09:25:32 -05:00
dependabot[bot]
7120cbefb1
build(deps): bump github.com/hashicorp/go-kms-wrapping/v2 ( #17957 )
...
Bumps [github.com/hashicorp/go-kms-wrapping/v2](https://github.com/hashicorp/go-kms-wrapping ) from 2.0.8 to 2.0.12.
- [Commits](https://github.com/hashicorp/go-kms-wrapping/compare/v2.0.8...v2.0.12 )
---
updated-dependencies:
- dependency-name: github.com/hashicorp/go-kms-wrapping/v2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-03 15:43:42 -04:00
dependabot[bot]
5f078adade
build(deps): bump github.com/opencontainers/runc from 1.1.5 to 1.1.8 ( #18037 )
...
Bumps [github.com/opencontainers/runc](https://github.com/opencontainers/runc ) from 1.1.5 to 1.1.8.
- [Release notes](https://github.com/opencontainers/runc/releases )
- [Changelog](https://github.com/opencontainers/runc/blob/v1.1.8/CHANGELOG.md )
- [Commits](https://github.com/opencontainers/runc/compare/v1.1.5...v1.1.8 )
---
updated-dependencies:
- dependency-name: github.com/opencontainers/runc
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-03 15:37:32 -04:00
dependabot[bot]
9fda7305b7
build(deps): bump github.com/hashicorp/consul/api from 1.18.0 to 1.23.0 ( #18038 )
...
Bumps [github.com/hashicorp/consul/api](https://github.com/hashicorp/consul ) from 1.18.0 to 1.23.0.
- [Release notes](https://github.com/hashicorp/consul/releases )
- [Changelog](https://github.com/hashicorp/consul/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/consul/compare/api/v1.18.0...api/v1.23.0 )
---
updated-dependencies:
- dependency-name: github.com/hashicorp/consul/api
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-03 15:03:16 -04:00
Seth Hoenig
4771690582
deps: update cronexpr to capture license file in SBOM tools ( #17733 )
2023-06-27 07:58:20 -05:00
dependabot[bot]
05a8ccff26
build(deps): bump github.com/containerd/go-cni from 1.1.7 to 1.1.9 ( #17582 )
2023-06-26 16:47:20 +01:00
dependabot[bot]
e93af16008
build(deps): bump github.com/opencontainers/runtime-spec ( #17719 )
...
Bumps [github.com/opencontainers/runtime-spec](https://github.com/opencontainers/runtime-spec ) from 1.0.3-0.20210326190908-1c3f411f0417 to 1.1.0-rc.3.
- [Release notes](https://github.com/opencontainers/runtime-spec/releases )
- [Changelog](https://github.com/opencontainers/runtime-spec/blob/main/ChangeLog )
- [Commits](https://github.com/opencontainers/runtime-spec/commits/v1.1.0-rc.3 )
---
updated-dependencies:
- dependency-name: github.com/opencontainers/runtime-spec
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-26 08:03:50 -05:00
dependabot[bot]
0c63019c92
build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.4 ( #17584 )
2023-06-19 08:21:45 +01:00
dependabot[bot]
d45bb4bab9
build(deps): bump github.com/hashicorp/go-plugin from 1.4.9 to 1.4.10 ( #17486 )
2023-06-12 14:22:33 +01:00
dependabot[bot]
8bd3bdab42
build(deps): bump github.com/shoenig/go-m1cpu from 0.1.5 to 0.1.6 ( #17487 )
2023-06-12 12:08:16 +01:00
dependabot[bot]
c1f5ffb3bc
build(deps): bump github.com/fatih/color from 1.13.0 to 1.15.0 ( #17485 )
2023-06-12 10:44:18 +01:00
dependabot[bot]
2f4fe019db
build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7 ( #16228 )
...
* build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7
Bumps [go.etcd.io/bbolt](https://github.com/etcd-io/bbolt ) from 1.3.6 to 1.3.7.
- [Release notes](https://github.com/etcd-io/bbolt/releases )
- [Commits](https://github.com/etcd-io/bbolt/compare/v1.3.6...v1.3.7 )
---
updated-dependencies:
- dependency-name: go.etcd.io/bbolt
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
* cl: update cl for bbolt
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Seth Hoenig <shoenig@duck.com>
2023-06-05 10:19:14 -05:00
dependabot[bot]
b83a26a8d8
build(deps): bump github.com/dustin/go-humanize from 1.0.0 to 1.0.1 ( #16227 )
...
Bumps [github.com/dustin/go-humanize](https://github.com/dustin/go-humanize ) from 1.0.0 to 1.0.1.
- [Release notes](https://github.com/dustin/go-humanize/releases )
- [Commits](https://github.com/dustin/go-humanize/compare/v1.0.0...v1.0.1 )
---
updated-dependencies:
- dependency-name: github.com/dustin/go-humanize
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-05 10:17:04 -05:00
dependabot[bot]
c585cc68db
build(deps): bump github.com/hashicorp/raft from 1.3.11 to 1.5.0 ( #17421 )
...
* build(deps): bump github.com/hashicorp/raft from 1.3.11 to 1.5.0
Bumps [github.com/hashicorp/raft](https://github.com/hashicorp/raft ) from 1.3.11 to 1.5.0.
- [Release notes](https://github.com/hashicorp/raft/releases )
- [Changelog](https://github.com/hashicorp/raft/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/raft/compare/v1.3.11...v1.5.0 )
---
updated-dependencies:
- dependency-name: github.com/hashicorp/raft
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
* cl: add cl for raft 1.5.0
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Seth Hoenig <shoenig@duck.com>
2023-06-05 09:03:02 -05:00
dependabot[bot]
ff4c2e2ea0
build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.30.0 ( #17420 )
...
Bumps google.golang.org/protobuf from 1.28.1 to 1.30.0.
---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-05 08:57:33 -05:00
dependabot[bot]
fd52020560
build(deps): bump github.com/shirou/gopsutil/v3 from 3.23.1 to 3.23.4 ( #17338 )
...
Bumps [github.com/shirou/gopsutil/v3](https://github.com/shirou/gopsutil ) from 3.23.1 to 3.23.4.
- [Release notes](https://github.com/shirou/gopsutil/releases )
- [Commits](https://github.com/shirou/gopsutil/compare/v3.23.1...v3.23.4 )
---
updated-dependencies:
- dependency-name: github.com/shirou/gopsutil/v3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-02 19:30:59 -04:00
dependabot[bot]
bdd4a55738
build(deps): bump github.com/elazarl/go-bindata-assetfs ( #17339 )
...
Bumps [github.com/elazarl/go-bindata-assetfs](https://github.com/elazarl/go-bindata-assetfs ) from 1.0.1-0.20200509193318-234c15e7648f to 1.0.1.
- [Release notes](https://github.com/elazarl/go-bindata-assetfs/releases )
- [Changelog](https://github.com/elazarl/go-bindata-assetfs/blob/master/.goreleaser.yml )
- [Commits](https://github.com/elazarl/go-bindata-assetfs/commits/v1.0.1 )
---
updated-dependencies:
- dependency-name: github.com/elazarl/go-bindata-assetfs
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-31 10:19:59 -04:00
dependabot[bot]
deaf4c4240
build(deps): bump github.com/grpc-ecosystem/go-grpc-middleware ( #16551 )
...
Bumps [github.com/grpc-ecosystem/go-grpc-middleware](https://github.com/grpc-ecosystem/go-grpc-middleware ) from 1.3.0 to 1.4.0.
- [Release notes](https://github.com/grpc-ecosystem/go-grpc-middleware/releases )
- [Commits](https://github.com/grpc-ecosystem/go-grpc-middleware/compare/v1.3.0...v1.4.0 )
---
updated-dependencies:
- dependency-name: github.com/grpc-ecosystem/go-grpc-middleware
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-23 09:01:26 -04:00
dependabot[bot]
9ad9505ba0
build(deps): bump github.com/hashicorp/vault/sdk from 0.7.0 to 0.9.0 ( #17031 )
...
Bumps [github.com/hashicorp/vault/sdk](https://github.com/hashicorp/vault ) from 0.7.0 to 0.9.0.
- [Release notes](https://github.com/hashicorp/vault/releases )
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/vault/compare/v0.7.0...v0.9.0 )
---
updated-dependencies:
- dependency-name: github.com/hashicorp/vault/sdk
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-23 08:40:32 -04:00
dependabot[bot]
74b55ba1ed
build(deps): bump github.com/docker/distribution ( #17162 )
...
Bumps [github.com/docker/distribution](https://github.com/docker/distribution ) from 2.8.1+incompatible to 2.8.2+incompatible.
- [Release notes](https://github.com/docker/distribution/releases )
- [Commits](https://github.com/docker/distribution/compare/v2.8.1...v2.8.2 )
---
updated-dependencies:
- dependency-name: github.com/docker/distribution
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-23 08:40:18 -04:00
Charlie Voiselle
fc313b7f8f
[api] Return a shapely error for unexpected response ( #16743 )
...
* Add UnexpectedResultError to nomad/api
This allows users to perform additional status-based behavior by rehydrating the error using `errors.As` inside of consumers.
2023-05-22 11:45:31 -04:00
dependabot[bot]
31a38d750b
build(deps): bump github.com/shoenig/test from 0.6.4 to 0.6.6 in /api ( #17178 )
...
* build(deps): bump github.com/shoenig/test from 0.6.4 to 0.6.5 in /api
* deps: update shoenig/test to v0.6.5
* deps: update again to v0.6.6
---------
Co-authored-by: Tim Gross <tgross@hashicorp.com>
Co-authored-by: Seth Hoenig <shoenig@duck.com>
2023-05-22 07:53:12 -05:00
Luiz Aoqui
d800dc3367
deps: update go-metrics to prevent panic ( #17133 )
...
nomad#15861 describes intermitent panics caused by go-metrics Prometheus
client. We have not been able to further debug this problem due to the
lack of information when the panic happens.
go-metrics#146 prevents the panic from happening and also logs
additional information that can help us understand the root cause of the
problem.
This commits pins the go-metric dependency to this branch until we can
better debug the issue.
2023-05-10 21:33:15 -04:00
Michael Schurter
3b3b02b741
dep: update from jwt/v4 to jwt/v5 ( #17062 )
...
Their release notes are here: https://github.com/golang-jwt/jwt/releases
Seemed wise to upgrade before we do even more with JWTs. For example
this upgrade *would* have mattered if we already implemented common JWT
claims such as expiration. Since we didn't rely on any claim
verification this upgrade is a noop...
...except for 1 test that called `Claims.Valid()`! Removing that
assertion *seems* scary, but it didn't actually do anything because we
didn't implement any of the standard claims it validated:
https://github.com/golang-jwt/jwt/blob/v4.5.0/map_claims.go#L120-L151
So functionally this major upgrade is a noop.
2023-05-03 11:17:38 -07:00
Charlie Voiselle
8f6fa14e9e
[deps] Update consul-template to v0.31.0 ( #16908 )
...
* Update consul-template to v0.31.0
* Add changelog
2023-05-03 09:15:17 -04:00
Luiz Aoqui
7b5a8f1fb0
Revert "hashicorp/go-msgpack v2 ( #16810 )" ( #17047 )
...
This reverts commit 8a98520d56eed3848096734487d8bd3eb9162a65.
2023-05-01 17:18:34 -04:00
Michael Schurter
d3b0bbc088
deps: update go-bexpr from 0.1.11 to 0.1.12 ( #16991 )
...
Pulls in https://github.com/hashicorp/go-bexpr/pull/38
Fixes #16758
2023-04-27 09:01:42 -07:00
dependabot[bot]
1633cab363
build(deps): bump github.com/shoenig/test from 0.6.3 to 0.6.4 in /api ( #16895 )
...
Bumps [github.com/shoenig/test](https://github.com/shoenig/test ) from 0.6.3 to 0.6.4.
- [Release notes](https://github.com/shoenig/test/releases )
- [Commits](https://github.com/shoenig/test/compare/v0.6.3...v0.6.4 )
---
updated-dependencies:
- dependency-name: github.com/shoenig/test
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-24 11:39:37 -05:00
dependabot[bot]
801e4f961c
build(deps): bump github.com/hashicorp/vault/api from 1.8.3 to 1.9.1 ( #16966 )
...
Bumps [github.com/hashicorp/vault/api](https://github.com/hashicorp/vault ) from 1.8.3 to 1.9.1.
- [Release notes](https://github.com/hashicorp/vault/releases )
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/vault/compare/v1.8.3...v1.9.1 )
---
updated-dependencies:
- dependency-name: github.com/hashicorp/vault/api
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-24 09:00:54 -05:00
Ian Fijolek
619f49afcf
hashicorp/go-msgpack v2 ( #16810 )
...
* Upgrade from hashicorp/go-msgpack v1.1.5 to v2.1.0
Fixes #16808
* Update hashicorp/net-rpc-msgpackrpc to v2 to match go-msgpack
* deps: use go-msgpack v2.0.0
go-msgpack v2.1.0 includes some code changes that we will need to
investigate furthere to assess its impact on Nomad, so keeping this
dependency on v2.0.0 for now since it's no-op.
---------
Co-authored-by: Luiz Aoqui <luiz@hashicorp.com>
2023-04-17 17:02:05 -04:00
Seth Hoenig
ec1a8ae12a
deps: update docker to 23.0.3 ( #16862 )
...
* [no ci] deps: update docker to 23.0.3
This PR brings our docker/docker dependency (which is hosted at github.com/moby/moby)
up to 23.0.3 (forward about 2 years). Refactored our use of docker/libnetwork to
reference the package in its new home, which is docker/docker/libnetwork (it is
no longer an independent repository). Some minor nearby test case cleanup as well.
* add cl
2023-04-12 14:13:36 -05:00
Seth Hoenig
378c3582ff
deps: update go-m1cpu with fix for BigSur users ( #16793 )
...
https://github.com/shoenig/go-m1cpu/releases/tag/v0.1.5
which may also help with the Nix package for Nomad, which makes use of
the older IOKit framework version
https://github.com/shoenig/go-m1cpu/issues/5
2023-04-05 11:44:31 -05:00
James Rasell
cb6ba80f0f
cli: stream both stdout and stderr when following an alloc. ( #16556 )
...
This update changes the behaviour when following logs from an
allocation, so that both stdout and stderr files streamed when the
operator supplies the follow flag. The previous behaviour is held
when all other flags and situations are provided.
Co-authored-by: Luiz Aoqui <luiz@hashicorp.com>
2023-04-04 10:42:27 +01:00
dependabot[bot]
afa9608475
build(deps): bump github.com/opencontainers/runc from 1.1.4 to 1.1.5 ( #16712 )
...
* build(deps): bump github.com/opencontainers/runc from 1.1.4 to 1.1.5
Bumps [github.com/opencontainers/runc](https://github.com/opencontainers/runc ) from 1.1.4 to 1.1.5.
- [Release notes](https://github.com/opencontainers/runc/releases )
- [Changelog](https://github.com/opencontainers/runc/blob/v1.1.5/CHANGELOG.md )
- [Commits](https://github.com/opencontainers/runc/compare/v1.1.4...v1.1.5 )
---
updated-dependencies:
- dependency-name: github.com/opencontainers/runc
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
* changelog entry
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tim Gross <tgross@hashicorp.com>
2023-03-29 15:05:05 -04:00
Seth Hoenig
87f4b71df0
client/fingerprint: correctly fingerprint E/P cores of Apple Silicon chips ( #16672 )
...
* client/fingerprint: correctly fingerprint E/P cores of Apple Silicon chips
This PR adds detection of asymetric core types (Power & Efficiency) (P/E)
when running on M1/M2 Apple Silicon CPUs. This functionality is provided
by shoenig/go-m1cpu which makes use of the Apple IOKit framework to read
undocumented registers containing CPU performance data. Currently working
on getting that functionality merged upstream into gopsutil, but gopsutil
would still not support detecting P vs E cores like this PR does.
Also refactors the CPUFingerprinter code to handle the mixed core
types, now setting power vs efficiency cpu attributes.
For now the scheduler is still unaware of mixed core types - on Apple
platforms tasks cannot reserve cores anyway so it doesn't matter, but
at least now the total CPU shares available will be correct.
Future work should include adding support for detecting P/E cores on
the latest and upcoming Intel chips, where computation of total cpu shares
is currently incorrect. For that, we should also include updating the
scheduler to be core-type aware, so that tasks of resources.cores on Linux
platforms can be assigned the correct number of CPU shares for the core
type(s) they have been assigned.
node attributes before
cpu.arch = arm64
cpu.modelname = Apple M2 Pro
cpu.numcores = 12
cpu.reservablecores = 0
cpu.totalcompute = 1000
node attributes after
cpu.arch = arm64
cpu.frequency.efficiency = 2424
cpu.frequency.power = 3504
cpu.modelname = Apple M2 Pro
cpu.numcores.efficiency = 4
cpu.numcores.power = 8
cpu.reservablecores = 0
cpu.totalcompute = 37728
* fingerprint/cpu: follow up cr items
2023-03-28 08:27:58 -05:00
Michael Schurter
f8884d8b52
client/metadata: fix crasher caused by AllowStale = false ( #16549 )
...
Fixes #16517
Given a 3 Server cluster with at least 1 Client connected to Follower 1:
If a NodeMeta.{Apply,Read} for the Client request is received by
Follower 1 with `AllowStale = false` the Follower will forward the
request to the Leader.
The Leader, not being connected to the target Client, will forward the
RPC to Follower 1.
Follower 1, seeing AllowStale=false, will forward the request to the
Leader.
The Leader, not being connected to... well hoppefully you get the
picture: an infinite loop occurs.
2023-03-20 16:32:32 -07:00
Seth Hoenig
5b1970468e
artifact: git needs more files for private repositories ( #16508 )
...
* landlock: git needs more files for private repositories
This PR fixes artifact downloading so that git may work when cloning from
private repositories. It needs
- file read on /etc/passwd
- dir read on /root/.ssh
- file write on /root/.ssh/known_hosts
Add these rules to the landlock rules for the artifact sandbox.
* cr: use nonexistent instead of devnull
Co-authored-by: Michael Schurter <mschurter@hashicorp.com>
* cr: use go-homdir for looking up home directory
* pr: pull go-homedir into explicit require
* cr: fixup homedir tests in homeless root cases
* cl: fix root test for real
---------
Co-authored-by: Michael Schurter <mschurter@hashicorp.com>
2023-03-16 12:22:25 -05:00
dependabot[bot]
5b9bbd12ea
build(deps): bump go.uber.org/goleak from 1.2.0 to 1.2.1 ( #16439 )
...
Bumps [go.uber.org/goleak](https://github.com/uber-go/goleak ) from 1.2.0 to 1.2.1.
- [Release notes](https://github.com/uber-go/goleak/releases )
- [Changelog](https://github.com/uber-go/goleak/blob/master/CHANGELOG.md )
- [Commits](https://github.com/uber-go/goleak/compare/v1.2.0...v1.2.1 )
---
updated-dependencies:
- dependency-name: go.uber.org/goleak
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-13 11:23:56 -05:00
Seth Hoenig
b3cec771d6
deps: remove replace statement for go-discover ( #16304 )
...
Which we no longer need since we no longer have consul as a dependency
2023-03-13 10:40:35 -05:00
dependabot[bot]
de766a4239
build(deps): bump golang.org/x/crypto from 0.5.0 to 0.7.0 ( #16337 )
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.5.0 to 0.7.0.
- [Release notes](https://github.com/golang/crypto/releases )
- [Commits](https://github.com/golang/crypto/compare/v0.5.0...v0.7.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-08 09:14:49 -06:00
Seth Hoenig
1c8b408a81
deps: update test to 0.6.2 for new functions ( #16326 )
2023-03-06 09:24:45 -06:00