packages/utils/oci-runtime-tools/patches/050-validation-misc_props-run-a-process-the-bundle-contains.patch, branch masterMirror of packages feedhttps://git.openwrt.org/feed/packages/atom?h=master2026-10-20T19:03:57Zoci-runtime-tools: carry the pending validation fixes2026-10-20T19:03:57ZDaniel Golle2026-10-20T15:41:30Zurn:sha1:5035328d8dca877ce789d90783f399aba6490402
Most cgroup tests fail on OpenWrt because the test suite can only read
cgroup v1, and several assertions contradict the runtime-spec or depend
on the test host. Carry the fixes pending upstream in
opencontainers/runtime-tools until they are merged: #812 (cgroup v2
reader), #813 (lifecycle assertions), #814 (pids limit by value), #816
(device rules checked from inside the container), #820 (misc_props
process), #821 (blkio rules on an existing block device) and #822
(RLIMIT_NOFILE read from a child process).
The default seccomp profile of the test configurations lists only the
32-bit time syscalls. On 32-bit targets the Go runtime of runtimetest
uses futex_time64 on Linux 5.1 and later, which the profile denies, so
runtimetest crashes inside every container and most tests report
nothing on i386. Add a patch allowing the time64 variant of every
syscall the profile already allows.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>