Update third-party packages

[tjkirch]

Description of changes:

85d26800 Update runc to 1.0.0-rc95
ef4746db Update ca-certificates to 2021.05.25
ab4364ca Update chrony to 4.1
70d999e4 Update containerd to 1.4.6
14bafe46 Update dbus-broker to 29
897f520d Update kernel-5.4 to 5.4.117
7164b2a6 Update kernel-5.10 to 5.10.35
2a894ed0 Update kmod to 29
bbcaae4c Update kubernetes-1.18 to 1.18.19
10c2431e Update kubernetes-1.19 to 1.19.11
f7f5bf19 Update kubernetes-1.20 to 1.20.7
1883f159 Update libaudit to 3.0.2
57f21cfd Update libcap to 2.50
d6249804 Update libexpat to 2.4.1
dcc3c3df Update libglib to 2.68.3
256cea5b Update libnftnl to 1.2.0
05a8b22a Update libpcap to 1.10.1
56765ee2 Update libpcre to 10.37
3344a864 Update libtirpc to 1.3.2
0142d5b1 Update libxcrypt to 4.4.22
aa37b1ac Update systemd to 247.7
4969ee46 Update tcpdump to 4.99.1
5bdca3cd Update wicked to 0.6.66

Not updated:

• bash
• aws-iam-authenticator
• grub - 2.06 just came out and has 5k+ lines of changelog; we should wait and collect data.
• containerd to 1.5+ - this is a bigger change that deserves separate investigation and PR.
• systemd to 248+ - 248.2+ have this change which breaks dbus-broker startup unless you disable private mount namespaces for the service unit. The same commit was implicated in another issue with the expected pushback, so for now we're hoping things will become clearer / fixed by 249. Thanks to @bcressey for help figuring this out.
  • The error:

Failed to set up mount namespacing: /run/systemd/unit-root/./x86_64-bottlerocket-linux-gnu/sys-root/usr: Device or resource busy
Jun 16 18:31:47 localhost systemd[1405]: dbus-broker.service: Failed at step NAMESPACE spawning /usr/bin/dbus-broker-launch: Device or resource busy

Testing done:

Built and ran each of ecs x86, 1.18 x86, 1.19 x86, 1.20 x86, ecs arm, 1.18 arm, 1.19 arm, and 1.20 arm. Tested a pod/task, systemctl status, API changes, dmesg, and journal, and all looked OK.

Terms of contribution:

By submitting this pull request, I agree that this contribution is dual-licensed under the terms of both the Apache License, version 2.0, and the MIT license.

[tjkirch]

^ This push updates to the new Kubernetes point releases. Retested each on x86.

[zmrow]

🍔

[arnaldo2792]

👢