Sandbox/rdutta/3.0/update 3.0.20250521 3.0 v1 by ranjan-dutta · Pull Request #178 · open-edge-platform/edge-microvisor-toolkit

ranjan-dutta · 2025-06-04T01:17:30Z

Merge Checklist

All boxes should be checked before merging the PR

[] The changes in the PR have been built and tested
[] cgmanifest file has been updated if required
[] Ready to merge

Description

this is for AZL update to 3.0.20250521-3.0

Any Newly Introduced Dependencies

How Has This Been Tested?

…(#13249)

…tapackage (#12298)

This is early work to build a kernel in the extended repo that includes LVBS support.

…ch 3.0-dev (#13365) Co-authored-by: Archana Shettigar <v-shettigara@microsoft.com>

…3.0-dev (#13366) Co-authored-by: jykanase <v-jykanase@microsoft.com>

….0-dev (#13367) Co-authored-by: Ankita Pareek <56152556+Ankita13-code@users.noreply.github.com>

….0-dev (#13368) Co-authored-by: Sreenivasulu Malavathula (HCL Technologies Ltd) <v-smalavathu@microsoft.com>

…-dev (#13369) Co-authored-by: Kanishk Bansal <103916909+Kanishk-Bansal@users.noreply.github.com>

…3.0-dev (#13370) Co-authored-by: Kevin Lockwood <57274670+kevin-b-lockwood@users.noreply.github.com>

…h 3.0-dev (#13371) Co-authored-by: jykanase <v-jykanase@microsoft.com>

…Medium] - branch 3.0-dev (#13372) Co-authored-by: Rohit Rawat <rohitrawat@microsoft.com>

…ev (#13373) Co-authored-by: kgodara912 <kshigodara@outlook.com>

…m] - branch 3.0-dev (#13374) Co-authored-by: Sumedh Alok Sharma <sumsharma@microsoft.com>

…h 3.0-dev (#13375) Co-authored-by: Kanishk Bansal <103916909+Kanishk-Bansal@users.noreply.github.com>

…2024-11053 [High] - branch 3.0-dev (#13376) Co-authored-by: Kanishk Bansal <103916909+Kanishk-Bansal@users.noreply.github.com>

…ch 3.0-dev (#13389) Co-authored-by: Ankita Pareek <56152556+Ankita13-code@users.noreply.github.com>

…3.0-dev (#13390) Co-authored-by: Rohit Rawat <rohitrawat@microsoft.com>

…[Medium] - branch 3.0-dev (#13391) Co-authored-by: Rohit Rawat <rohitrawat@microsoft.com>

…v (#13392) Co-authored-by: jykanase <v-jykanase@microsoft.com>

… branch 3.0-dev (#13393) Co-authored-by: Ankita Pareek <56152556+Ankita13-code@users.noreply.github.com>

…nch 3.0-dev (#13394) Co-authored-by: Kanishk Bansal <103916909+Kanishk-Bansal@users.noreply.github.com>

…0-dev (#13395) Co-authored-by: kgodara912 <kshigodara@outlook.com>

…4-7246 - branch 3.0-dev (#13396) Co-authored-by: jykanase <v-jykanase@microsoft.com>

…gs (#13674) Updated the config options in config_aarch64 as per nvidia's recently published patch guide. The config options are related to GB200 and GB200F helps h/w team to run the diagnostics. Made modification to config_aarch64 based on nvidia's recommendation. nvidia patch guide: https://docs.nvidia.com/grace-patch-config-guide.pdf Co-authored-by: Rachel Menge <rachelmenge@microsoft.com>

Signed-off-by: Sreenivasulu Malavathula <v-smalavathu@microsoft.com>

Co-authored-by: Rachel Menge <rachelmenge@microsoft.com>

…gs (#13674) Updated the config options in config_aarch64 as per nvidia's recently published patch guide. The config options are related to GB200 and GB200F helps h/w team to run the diagnostics. Made modification to config_aarch64 based on nvidia's recommendation. nvidia patch guide: https://docs.nvidia.com/grace-patch-config-guide.pdf Co-authored-by: Rachel Menge <rachelmenge@microsoft.com>

Co-authored-by: Rachel Menge <rachelmenge@microsoft.com>

# By CBL-Mariner-Bot (78) and others # Via GitHub (6) and others * tag '3.0.20250521-3.0': (271 commits) Fixed reporting of build errors (CP: #13889) (#13897) Revert "Revert "Merge 3.0-dev for May 2025 2 release"" (#13847) Revert "Anphel/3 mid may 2025 update b" (#13846) kernel-64k: Added a new patch to solve EFI slack slots issue (#13783) kernel-64k: enabling config options required for GB200 and GB200F diags (#13674) Prepare May 2025 Update 2 (#13808) Revert "Merge 3.0-dev for May 2025 2 release" (#13833) kernel-64k: Added a new patch to solve EFI slack slots issue (#13783) Patch docker-buildx for CVE-2025-0495 [Medium] (#13768) [Medium] Patch yasm for CVE-2023-51258 and CVE-2023-37732 (#13792) [Medium] Patch iniparser for CVE-2023-33461 (#13804) [Medium] patch rpm-ostree for CVE-2024-2905 (#13818) kernel-64k: enabling config options required for GB200 and GB200F diags (#13674) [3.0] bmake: move tests to check section (#13815) Updated lua-json to version 1.3.4 (#11179) Upgrade kyotocabinet to version 1.2.80 (#10802) Extended build failure logging (#13705) Prepare May 2025 Update 2 (#13808) dom0 packages: Update to dom0 release v2411.19.1 (#13648) [AUTO-CHERRYPICK] Upgrade SymCrypt-OpenSSL to 1.8.1 - branch 3.0-dev (#13805) ... # Conflicts: # .pipelines/prchecks/PackageBuildPRCheck.yml # .pipelines/templates/PackageTestResultsAnalysis.yml # LICENSES-AND-NOTICES/SPECS/LICENSES-MAP.md # LICENSES-AND-NOTICES/SPECS/data/licenses.json # SPECS-EXTENDED/kernel-ipe/config_aarch64 # SPECS-EXTENDED/kernel-ipe/kernel-ipe.signatures.json # SPECS-EXTENDED/kernel-ipe/kernel-ipe.spec # SPECS-SIGNED/mft_kernel-signed/mft_kernel-signed.spec # SPECS-SIGNED/mlnx-ofa_kernel-modules-signed/mlnx-ofa_kernel-modules-signed.spec # SPECS/azcopy/azcopy.spec # SPECS/azurelinux-release/azurelinux-release.spec # SPECS/blobfuse2/blobfuse2.spec # SPECS/busybox/busybox.spec # SPECS/cf-cli/cf-cli.spec # SPECS/cni-plugins/cni-plugins.spec # SPECS/containerd/containerd.spec # SPECS/containerd2/containerd2.spec # SPECS/containerized-data-importer/containerized-data-importer.spec # SPECS/coredns/coredns.spec # SPECS/dcos-cli/dcos-cli.spec # SPECS/docker-buildx/docker-buildx.spec # SPECS/docker-compose/docker-compose.spec # SPECS/elfutils/elfutils.spec # SPECS/etcd/etcd.spec # SPECS/flannel/flannel.spec # SPECS/fluent-bit/fluent-bit.spec # SPECS/fwctl/fwctl.spec # SPECS/gh/gh.spec # SPECS/git-lfs/git-lfs.spec # SPECS/grub2/grub2.spec # SPECS/helm/helm.spec # SPECS/ig/ig.spec # SPECS/influxdb/influxdb.spec # SPECS/iser/iser.spec # SPECS/isert/isert.spec # SPECS/kata-containers-cc/kata-containers-cc.spec # SPECS/kata-containers/kata-containers.spec # SPECS/keda/keda.spec # SPECS/kernel-headers/kernel-headers.signatures.json # SPECS/kernel-headers/kernel-headers.spec # SPECS/kernel-mshv/config # SPECS/kernel-mshv/kernel-mshv.signatures.json # SPECS/kernel-mshv/kernel-mshv.spec # SPECS/kernel-rt/config # SPECS/kernel/config # SPECS/kernel/config_aarch64 # SPECS/kernel/kernel-uki.spec # SPECS/kernel/kernel.signatures.json # SPECS/kernel/kernel.spec # SPECS/knem/knem.spec # SPECS/kube-vip-cloud-provider/kube-vip-cloud-provider.spec # SPECS/kubernetes/kubernetes.spec # SPECS/kubevirt/kubevirt.spec # SPECS/libguestfs/libguestfs.spec # SPECS/mesa/mesa.spec # SPECS/mft_kernel/mft_kernel.spec # SPECS/mlnx-nfsrdma/mlnx-nfsrdma.spec # SPECS/mlnx-ofa_kernel/mlnx-ofa_kernel.spec # SPECS/moby-containerd-cc/moby-containerd-cc.spec # SPECS/moby-engine/moby-engine.spec # SPECS/multus/multus.spec # SPECS/nvidia-container-toolkit/nvidia-container-toolkit.spec # SPECS/openssh/openssh.spec # SPECS/packer/packer.spec # SPECS/prometheus-adapter/prometheus-adapter.spec # SPECS/prometheus-node-exporter/prometheus-node-exporter.spec # SPECS/prometheus-process-exporter/prometheus-process-exporter.spec # SPECS/prometheus/prometheus.spec # SPECS/qemu/CVE-2023-6683.patch # SPECS/qemu/CVE-2023-6693.patch # SPECS/qemu/CVE-2024-3567.patch # SPECS/qemu/qemu.spec # SPECS/selinux-policy/selinux-policy.spec # SPECS/skopeo/skopeo.spec # SPECS/sriov-network-device-plugin/sriov-network-device-plugin.spec # SPECS/srp/srp.spec # SPECS/supermin/supermin.spec # SPECS/systemd/systemd.spec # SPECS/telegraf/telegraf.spec # SPECS/vitess/vitess.spec # SPECS/xpmem/xpmem.spec # cgmanifest.json # toolkit/resources/manifests/package/pkggen_core_aarch64.txt # toolkit/resources/manifests/package/pkggen_core_x86_64.txt # toolkit/resources/manifests/package/toolchain_aarch64.txt # toolkit/resources/manifests/package/toolchain_x86_64.txt # toolkit/scripts/toolchain/container/Dockerfile # toolkit/scripts/toolchain/container/toolchain-sha256sums # toolkit/scripts/toolchain/container/toolchain_build_temp_tools.sh

.github/workflows/check-srpm-duplicates.yml

+      - name: Workflow trigger checkout
+        uses: actions/checkout@v4
+
+      # For consistency, we use the same major/minor version of Python that Azure Linux ships


.github/workflows/check-srpm-duplicates.yml

+    name: SRPMs duplicates check
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        # Each group is published to a different repo, thus we only need to check
+        # for SRPM duplicates within the group.
+        specs-dirs-groups: ["SPECS SPECS-SIGNED", "SPECS-EXTENDED"]
+
+    steps:
+      # Checkout the branch of our repo that triggered this action
+      - name: Workflow trigger checkout
+        uses: actions/checkout@v4
+
+      # For consistency, we use the same major/minor version of Python that Azure Linux ships
+      - name: Setup Python 3.12
+        uses: actions/setup-python@v5
+        with:
+          python-version: 3.12
+
+      # Generate the specs.json files. They are the input for the duplicates check script.
+      - name: Generate specs.json
+        run: |
+          set -euo pipefail
+
+          for spec_folder in ${{ matrix.specs-dirs-groups }}; do
+            echo "Generating specs.json for spec folder '$spec_folder'."
+
+            sudo make -C toolkit -j$(nproc) parse-specs REBUILD_TOOLS=y DAILY_BUILD_ID=lkg SPECS_DIR=../$spec_folder
+            cp -v build/pkg_artifacts/specs.json ${spec_folder}_specs.json
+          done
+
+      - name: Check for duplicate SRPMs
+        run: python3 toolkit/scripts/check_srpm_duplicates.py *_specs.json


To fix the issue, we need to add a permissions block to the workflow. Since the workflow only performs read-only operations, the minimal required permission is contents: read. This ensures the GITHUB_TOKEN has the least privilege necessary to execute the workflow.

The permissions block should be added at the root level of the workflow, so it applies to all jobs within the workflow. No additional changes are required to the existing functionality.

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>

v-smalavathu and others added 30 commits April 11, 2025 13:01

hyphen-it: Update Version from 0.20071127 -> 5.1.1 (#10957)

55b0aa9

Upgrade: os-prober version to 1.81 (#11494)

448cb19

[3.0] Fix Patch Application for skopeo (#13340)

f33d943

[3.0] Fix Patch Application for nvidia-container-toolkit (#13345)

9efb56d

flux warnings (#13385)

4b7b5be

Fix to include idmapd.conf and id_resolver.conf in nfs-utils for 3.0 …

840cde4

…(#13249)

[Medium] patch dwarves for CVE-2025-29481 (#13384)

dea7b3a

[Medium] Patch libbpf for CVE-2025-29481 (#13382)

d6f51a5

[3.0] Introduce debug and metapackage and reduce size of non-debug me…

5e37eeb

…tapackage (#12298)

extended repo LVBS kernel (#12064)

a7a419d

This is early work to build a kernel in the extended repo that includes LVBS support.

[AUTO-CHERRYPICK] [MEDIUM] Patch numpy to fix CVE-2018-1999024 - bran…

fe43366

…ch 3.0-dev (#13365) Co-authored-by: Archana Shettigar <v-shettigara@microsoft.com>

[AUTO-CHERRYPICK] [Medium] Patch dietlibc for CVE-2015-1473 - branch …

ff1447f

…3.0-dev (#13366) Co-authored-by: jykanase <v-jykanase@microsoft.com>

[AUTO-CHERRYPICK] Patch gnutls for CVE-2024-12133 [Medium] - branch 3…

4541f4a

….0-dev (#13367) Co-authored-by: Ankita Pareek <56152556+Ankita13-code@users.noreply.github.com>

[AUTO-CHERRYPICK] [Medium] Patch vitess for CVE-2025-22870 - branch 3…

1050cd8

….0-dev (#13368) Co-authored-by: Sreenivasulu Malavathula (HCL Technologies Ltd) <v-smalavathu@microsoft.com>

[AUTO-CHERRYPICK] Patch ceph for CVE-2021-28361 [High] - branch 3.0…

1b8b37e

…-dev (#13369) Co-authored-by: Kanishk Bansal <103916909+Kanishk-Bansal@users.noreply.github.com>

[AUTO-CHERRYPICK] [Low] Patch subversion for CVE-2024-46901 - branch …

d9ccd92

…3.0-dev (#13370) Co-authored-by: Kevin Lockwood <57274670+kevin-b-lockwood@users.noreply.github.com>

[AUTO-CHERRYPICK] [Medium] patch memcached for CVE-2021-44647 - branc…

540b2d2

…h 3.0-dev (#13371) Co-authored-by: jykanase <v-jykanase@microsoft.com>

[AUTO-CHERRYPICK] Patch prometheus-node-exporter for CVE-2025-22870 […

fbfacda

…Medium] - branch 3.0-dev (#13372) Co-authored-by: Rohit Rawat <rohitrawat@microsoft.com>

[AUTO-CHERRYPICK] Patch expat for CVE-2024-8176 [HIGH] - branch 3.0-d…

8fa8595

…ev (#13373) Co-authored-by: kgodara912 <kshigodara@outlook.com>

[AUTO-CHERRYPICK] Upgrade libssh2 to 1.11.1 for CVE-2023-48795 [Mediu…

8fd0d89

…m] - branch 3.0-dev (#13374) Co-authored-by: Sumedh Alok Sharma <sumsharma@microsoft.com>

[AUTO-CHERRYPICK] Patch blobfuse2 for CVE-2025-30204 [High] - branc…

3fd4c10

…h 3.0-dev (#13375) Co-authored-by: Kanishk Bansal <103916909+Kanishk-Bansal@users.noreply.github.com>

[AUTO-CHERRYPICK] Upgrade mysql to 8.0.41 for CVE-2025-21490 & CVE-…

91dd93a

…2024-11053 [High] - branch 3.0-dev (#13376) Co-authored-by: Kanishk Bansal <103916909+Kanishk-Bansal@users.noreply.github.com>

[AUTO-CHERRYPICK] Patch fluent-bit for CVE-2025-31498 [High] - bran…

8611275

…ch 3.0-dev (#13389) Co-authored-by: Ankita Pareek <56152556+Ankita13-code@users.noreply.github.com>

[AUTO-CHERRYPICK] Patch git-lfs for CVE-2025-22870 [Medium] - branch …

ba1ccd5

…3.0-dev (#13390) Co-authored-by: Rohit Rawat <rohitrawat@microsoft.com>

[AUTO-CHERRYPICK] Patch prometheus-process-exporter for CVE-2025-22870 …

a09e742

…[Medium] - branch 3.0-dev (#13391) Co-authored-by: Rohit Rawat <rohitrawat@microsoft.com>

[AUTO-CHERRYPICK] [Low] patch clang for CVE-2024-7883 - branch 3.0-de…

b397f4c

…v (#13392) Co-authored-by: jykanase <v-jykanase@microsoft.com>

[AUTO-CHERRYPICK] Patch rabbitmq-server for CVE-2025-30219 [Medium] -…

c045460

… branch 3.0-dev (#13393) Co-authored-by: Ankita Pareek <56152556+Ankita13-code@users.noreply.github.com>

[AUTO-CHERRYPICK] Patch wpa_supplicant for CVE-2025-24912 [Low] - bra…

b43cf80

…nch 3.0-dev (#13394) Co-authored-by: Kanishk Bansal <103916909+Kanishk-Bansal@users.noreply.github.com>

[AUTO-CHERRYPICK] Patch augeas for CVE-2025-2588 [MEDIUM] - branch 3.…

c08a8b7

…0-dev (#13395) Co-authored-by: kgodara912 <kshigodara@outlook.com>

[AUTO-CHERRYPICK] [Medium] Upgrade grpc version to 1.62.3 for CVE-202…

1c49dbb

…4-7246 - branch 3.0-dev (#13396) Co-authored-by: jykanase <v-jykanase@microsoft.com>

PawelWMS and others added 22 commits May 15, 2025 13:35

Extended build failure logging (#13705)

8a67fc4

Latest 3.0-dec update.

28f87c2

Merge 3.0-dev for May 2025 2 release (#13809)

cab4240

Upgrade kyotocabinet to version 1.2.80 (#10802)

469ae7b

Updated lua-json to version 1.3.4 (#11179)

293fd84

[3.0] bmake: move tests to check section (#13815)

10abee5

[Medium] patch rpm-ostree for CVE-2024-2905 (#13818)

837e7d7

[Medium] Patch iniparser for CVE-2023-33461 (#13804)

d944fbb

Signed-off-by: Sreenivasulu Malavathula <v-smalavathu@microsoft.com>

[Medium] Patch yasm for CVE-2023-51258 and CVE-2023-37732 (#13792)

98835ba

Patch docker-buildx for CVE-2025-0495 [Medium] (#13768)

91ef9b2

kernel-64k: Added a new patch to solve EFI slack slots issue (#13783)

e19b003

Co-authored-by: Rachel Menge <rachelmenge@microsoft.com>

Revert "Merge 3.0-dev for May 2025 2 release" (#13833)

dc78d7c

Prepare May 2025 Update 2 (#13808)

4754737

kernel-64k: Added a new patch to solve EFI slack slots issue (#13783)

696dc13

Co-authored-by: Rachel Menge <rachelmenge@microsoft.com>

Anphel/3 mid may 2025 update b (#13839)

1de4113

Revert "Anphel/3 mid may 2025 update b" (#13846)

8fd0667

Revert "Revert "Merge 3.0-dev for May 2025 2 release"" (#13847)

da84812

Sync 3.0-dev to 3.0 as of e19b003 (#13848)

3d04526

Fixed reporting of build errors (CP: #13889) (#13897)

3cd11c5

ranjan-dutta requested a review from a team as a code owner June 4, 2025 01:17

github-advanced-security bot found potential problems Jun 4, 2025

View reviewed changes

cheeyanglee added 3 commits June 5, 2025 13:51

remove .pipelines

dbdb73e

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>

update pkggen and toolchain manifest

2b44d54

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>

update cgmanifest

005dcef

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>

anujm1 closed this Jul 10, 2025

anujm1 deleted the sandbox/rdutta/3.0/update-3.0.20250521-3.0-v1 branch August 28, 2025 11:31

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Sandbox/rdutta/3.0/update 3.0.20250521 3.0 v1#178

Sandbox/rdutta/3.0/update 3.0.20250521 3.0 v1#178
ranjan-dutta wants to merge 283 commits into3.0-devfrom
sandbox/rdutta/3.0/update-3.0.20250521-3.0-v1

ranjan-dutta commented Jun 4, 2025

Uh oh!

Check warning

Check warning

Copilot Autofix

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

20 participants

@@ -7,2 +7,5 @@
+            permissions:
+              contents: read
             on:

Conversation

ranjan-dutta commented Jun 4, 2025

Merge Checklist

Description

Any Newly Introduced Dependencies

How Has This Been Tested?

Uh oh!

Check warning

Check warning

Copilot Autofix

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

20 participants