Signed-off-by: Ivan Milchev <[email protected]>

Exporting this utility, so that consumers of the containerd/cgroups
package can use this, without having to duplicate this functionality.

Signed-off-by: Sebastiaan van Stijn <[email protected]>

utils: export RunningInUserNS()

Support updates for net_cls

These have been deprecated (related to CVE-2020-15228):
https://github.blog/changelog/2020-10-01-github-actions-deprecating-set-env-and-add-path-commands/

This fixes CI failing;

    Error: Unable to process command '::set-env name=GOPATH::/home/runner/work/cgroups/cgroups' successfully.
    Error: The `set-env` command is disabled. Please upgrade to using Environment Files or opt into unsecure command execution by setting the `ACTIONS_ALLOW_UNSECURE_COMMANDS` environment variable to `true`. For more information see: https://github.blog/changelog/2020-10-01-github-actions-deprecating-set-env-and-add-path-commands/
    Error: Unable to process command '::add-path::/home/runner/work/cgroups/cgroups/bin' successfully.
    Error: The `add-path` command is disabled. Please upgrade to using Environment Files or opt into unsecure command execution by setting the `ACTIONS_ALLOW_UNSECURE_COMMANDS` environment variable to `true`. For more information see: https://github.blog/changelog/2020-10-01-github-actions-deprecating-set-env-and-add-path-commands/

Signed-off-by: Sebastiaan van Stijn <[email protected]>

gha: replace uses of deprecated "set-env", "add-path"

full diff: cilium/ebpf@1c8d4c9...v0.2.0

v0.1.0 - Deprecate MapABI and ProgramABI
---------------------------------------------------------------------------

This release deprecates MapABI and ProgramABI in favour of straight up getters on Map and Program.

v0.2.0 - Support LSM hook and add network namespace link
---------------------------------------------------------------------------

The library now understands lsm/ sections. There is a new link.NetNsLink which allows attaching sk_lookup and flow_dissector programs.

- btf: add go-fuzz targets
- btf: avoid Type copy in FuncProto.walk
- btf: check err in loadSpecFromVmlinux
- btf: handle type name flavours
- CI: test on 5.9 kernel
- cmd/bpf2go: output ELF .o next to the .go file
- link: add AttachSkLookup
- Remove two unused functions
- Support LSM attach
- use buffered I/O to cut down on read syscalls
- Various doc link fixes

Signed-off-by: Sebastiaan van Stijn <[email protected]>

full diff: coreos/go-systemd@v22.0.0...v22.1.0

- docs: update docs links in README
- unit: do not export private constants
- unit: deserialize keeps all semantic data
- deserialize: Use quote to print possibly-invalid string
- login1: support getting active session and session details

Signed-off-by: Sebastiaan van Stijn <[email protected]>

full diff: sirupsen/logrus@v1.6.0...v1.7.0

removes dependency on github.com/konsorten/go-windows-terminal-sequences

Features:

* a new buffer pool management API has been added
* a set of `<LogLevel>Fn()` functions have been added

Signed-off-by: Sebastiaan van Stijn <[email protected]>

go.mod: update dependencies

Signed-off-by: Shengjing Zhu <[email protected]>

Only append Hugetlb in Subsystems list when available

full diff: cilium/ebpf@v0.2.0...v0.4.0

Signed-off-by: Sebastiaan van Stijn <[email protected]>

Signed-off-by: Sebastiaan van Stijn <[email protected]>

go.mod: github.com/cilium/ebpf v0.4.0

Caught by golangci-lint when enabling golint:

    v2/ebpf.go:45:12: SA1019: prog.Attach is deprecated: use link.RawAttachProgram instead. (staticcheck)
        if err := prog.Attach(dirFD, ebpf.AttachCGroupDevice, unix.BPF_F_ALLOW_MULTI); err != nil {
                  ^
    v2/ebpf.go:49:13: SA1019: prog.Detach is deprecated: use link.RawDetachProgram instead. (staticcheck)
        if err := prog.Detach(dirFD, ebpf.AttachCGroupDevice, unix.BPF_F_ALLOW_MULTI); err != nil {
                  ^

worth noting that we currently call prog.Detach() with unix.BPF_F_ALLOW_MULTI;
https://github.com/golang/sys/blob/22da62e12c0cd9c1da93581e1113ca4d82a5be14/unix/zerrors_linux.go#L178

    BPF_F_ALLOW_MULTI = 0x2

Looking at the source code for prog.Detach(); https://github.com/cilium/ebpf/blob/v0.4.0/prog.go#L579-L581,
this would _always_ produce an error:

    if flags != 0 {
        return errors.New("flags must be zero")
    }

Note that the flags parameter is not used (except for that validation)

Signed-off-by: Sebastiaan van Stijn <[email protected]>

v2: ebpf: replace deprecated prog.Attach/prog.Detach and fix closer

Looks like commit 5157b33 updated gogo/protobuf,
but did not regenerate protos.

Signed-off-by: Sebastiaan van Stijn <[email protected]>

update gogo/protobuf and regenerate protos to address CVE-2021-3121
(https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3121)

Signed-off-by: Sebastiaan van Stijn <[email protected]>

go.mod: github.com/gogo/protobuf v1.3.2 and generate protos