crun: update to 1.27.1 #3

Merged

sbelikov merged 1 commit from update-crun-1.27.1 into niceos-5.2

2026-05-24 19:40:35 +03:00

sbelikov commented

2026-05-24 19:31:38 +03:00

Owner

Summary

Update crun from 1.26 to 1.27.1.

Upstream notes

Upstream 1.27.1 is a normal stable release with bug fixes and one krun feature addition:

fix bind-mount propagation regression
fix AppArmor profile handling inside a user namespace
fix recursive cgroup cleanup failures
fix startup failures when --cgroup-manager=disabled is used on systems with non-standard /sys/fs/cgroup mounts
fix unlink /dev/console: Read-only file system with --read-only
add passt-based networking support for krun
ignore RAM values below 128MB in krun

Risk assessment

Stability risk: low
ABI/API break: none indicated by upstream notes
Security/CVE: no new CVE or advisory is called out in the 1.27.1 release notes
Main risk: behavioral changes in container edge cases (mount propagation, cgroups, read-only containers)

Packaging impact

Version bump only; source URL is versioned and lookaside/source metadata must be refreshed.
No new BuildRequires/Requires are indicated by upstream notes.
Build and runtime smoke tests are recommended before merge.

References

## Summary Update `crun` from 1.26 to 1.27.1. ## Upstream notes Upstream 1.27.1 is a normal stable release with bug fixes and one `krun` feature addition: - fix bind-mount propagation regression - fix AppArmor profile handling inside a user namespace - fix recursive cgroup cleanup failures - fix startup failures when `--cgroup-manager=disabled` is used on systems with non-standard `/sys/fs/cgroup` mounts - fix `unlink /dev/console: Read-only file system` with `--read-only` - add passt-based networking support for `krun` - ignore RAM values below 128MB in `krun` ## Risk assessment - Stability risk: low - ABI/API break: none indicated by upstream notes - Security/CVE: no new CVE or advisory is called out in the 1.27.1 release notes - Main risk: behavioral changes in container edge cases (mount propagation, cgroups, read-only containers) ## Packaging impact - Version bump only; source URL is versioned and lookaside/source metadata must be refreshed. - No new BuildRequires/Requires are indicated by upstream notes. - Build and runtime smoke tests are recommended before merge. ## References - https://github.com/containers/crun/releases/tag/1.27.1 - https://github.com/containers/crun/compare/1.26...1.27.1 - https://github.com/containers/crun/releases - https://github.com/containers/crun/tree/1.27.1

sbelikov added 1 commit

2026-05-24 19:31:38 +03:00