docker: update to v27.4.0-rc.2

Bumping moby to version v27.4.0-rc.2-25-g33b6b826c2, which comprises the following commits:

    151c7565a9 Remove buildkit init timeout
    1abc35f098 Add label on PrepareSnapshot to warn about non-expiring leases
    1d1da55382 Update containerd image builder to use lease prune label
    a3afccd409 Fix lease management during image operations
    33e5f87d0f [27.x] vendor: github.com/moby/buildkit 80e01a9dc7c1 (v0.17.3-dev)
    752c0453d6 vendor: github.com/moby/buildkit v0.17.2
    6cab48bd9b vendor: github.com/containerd/typeurl v2.2.3
    a64812939f Update containerd to v1.7.24
    179c7c7596 vendor: github.com/tonistiigi/go-actions-cache 394979b8119e
    7f9c5b278a vendor: resenje.org/singleflight v0.4.3
    b90c6e922c vendor: github.com/containerd/continuity v0.4.5
    e956d4a370 Dockerfile: update to runc v1.2.2
    b888333fe1 Dockerfile: update containerd to v1.7.24
    6b04fcf560 vendor: github.com/golang-jwt/jwt/v4@v4.5.1
    0f0b83a00b vendor: google.golang.org/grpc v1.66.3
    b859373da2 vendor: tags.cncf.io/container-device-interface v0.8.0
    2f816b2596 [27.x] daemon/containerd: add missing go:build tag
    3e03c979da update go:build tags to use go1.22
    346ac21032 daemon/logger/loggerutils: add //go:build directives to prevent downgrading to go1.16
    f54e5b0b19 libnetwork/networkdb: add //go:build directives to prevent downgrading to go1.16
    6ec5197103 [27.x] vendor: github.com/containerd/containerd v1.7.23
    31c8d23e7e Dockerfile: update compose to v2.30.3
    2ee3796e3f Dockerfile: update buildx to v0.18.0
    2acf9893c6 Increase test handler sleep, replace deprecated assert
    edfb2048ac deprecate pkg/platform and move internal
    5ab7960b46 logger/journald: plumb contexts into reader
    857fc4730c logfile: Close reader when caller cancels
    a7badb2bb5 Logfile: Add tracing spans
    d48c403efa Logfile: skip files that are corrupted
    c9a7391911 Refactor logfile reads
    49f5431807 Fix time comparison in sharedtemp implementation
    173a9f2091 libnet: don't put external DNS answers in OTel spans
    15b69c4200 vendor: update buildkit to v0.17.1
    3280e50f65 vendor: update buildkit to v0.17.0
    00774deb96 vendor: update buildkit to v0.17.0-rc2
    0a67347003 vendor: google.golang.org/protobuf v1.34.2
    033bd73bba [27.x] pin github.com/Microsoft/hcsshim to v0.11.x
    0e4ab47f23 update to go1.22.9
    d3b9ec90ba api/swagger: Improve description for platform in images/push
    c902e1a187 c8d/inspect: Fix duplicate RepoDigests
    b089f36796 volume: VolumesService.Create: fix log-level for debug logs
    afd7c9913f client: prevent idle connections leaking FDs
    de0135965e c8d/httpfallback: Handle connection errors
    ddb56edd00 volume/mounts: fix anonymous volume not being labeled
    b7bc29af50 daemon: use OwnCgroupPath in withCgroups
    1e11f2a1c0 daemon: deprecate Daemon.IsPaused
    0183f5dd13 daemon: deprecate Daemon.Exists
    749f9ccee4 Fix: setup user chains even if there are running containers
    8deb557451 api: GET /images/json: preserve original manifest order
    e4c067af91 gha: shorter time limits for smoke, validate
    525b19ff04 gha: use "ubuntu-24.04" instead of "ubuntu-latest"
    ceb41b83f3 gha: dco: small tweaks to running the container
    2690b70a09 gha: dco: update ALPINE_VERSION to 3.20
    f53efc688f gha: build (binary), build (dynbinary): limit to 20 minutes
    166565e3ac gha: dco: limit to 10 minutes
    57a72c3c9d container: deprecate ErrNameReserved, ErrNameNotReserved
    8804551902 container: viewDB.ReserveName, view.GetID: return errdefs errors
    202aac0eb4 container: viewDB.withTxn: don't wrap errors
    be8be11708 container: TestNames: don't string-match error assertions
    bedbe333bf dockerd-rootless-setuptool.sh: let --force ignore smoke test errors
    ffb5bd905a cmd/dockerd: Add workaround for OTEL meter leak
    12cc7f7696 daemon/containerd: getPushDescriptor: fix formatting of platform in errors
    01412dacf7 daemon/containerd: touch-up platform not found error
    3c93981344 images: GetImage: touch-up error message for missing platform
    03225b1a41 PushImage: remove misleading error about --platform without containerd
    5376990d4d build: create distinct history db for each store
    34d2e5e7e6 vendor: github.com/moby/swarmkit/v2 v2.0.0-20241017191044-e8ecf83ee08e
    0f8fc3105e Enable bridge netfiltering if userland-proxy=false
    505c4c32be Set NODAD on bridge IPv6 addresses
    c00b3108e5 docs: api: document w (width) and h (height) query params as required
    e39ced5c00 api: document w (width) and h (height) query params as required
    3c258e6011 pkg/authorization: update link to API documentation
    29f0dcd902 client: update link to API documentation
    21c974b281 docs/api: version-history: update documentation links
    0bc91d5dc8 gha: restrict cross and bin-image to 20 minutes
    d755573aba vendor: github.com/moby/buildkit v0.17.0-rc1
    32afa26719 gha: add guardrails timeouts on all jobs
    8dc3ce5606 integration/build: remove TestBuildWithSession, and fsutil direct dependency
    136fdfcdfc vendor: google.golang.org/grpc v1.66.2
    6eed19d656 vendor: google.golang.org/protobuf v1.34.1
    f29cc7c2cf vendor: github.com/cespare/xxhash/v2 v2.3.0
    5f92ab397b vendor: golang.org/x/tools v0.25.0
    9af7d06698 vendor: golang.org/x/mod v0.21.0
    8fef24d9d4 vendor: golang.org/x/net v0.29.0
    efc5252041 vendor: golang.org/x/crypto v0.27.0
    a8e92fa662 vendor: golang.org/x/text v0.18.0
    80cd75d7d5 vendor: golang.org/x/sys v0.25.0
    a2a544202b vendor: go.etcd.io/bbolt v1.3.11
    418a79d51b gha: buildkit: make sure expected Go version is installed
    43580ccbc1 update to go1.22.8
    af8b897560 Dockerfile: update compose to v2.29.7
    d91a922ef3 Dockerfile: update docker CLI to v27.3.1
    0138291345 gha: add CodeQL Analysis workflow
    a6b772b24c gha: govulncheck: make sure read permissions are set
    cd21af7e41 Do not DNAT packets from WSL2's loopback0
    5c499fc4b2 Only enable bridge netfiltering when needed
    8adc8e405d Dockerfile: update compose to v2.29.4
    576fc88b1a Dockerfile: update buildx to v0.17.1
    e928a0d22d man: dockerd: add description for --log-format option
    82cf138590 internal/opts: SetOpts: invalidate empty option-names
    487a2f5314 internal/opts: SetOpts.Set: remove redundant var assignment
    6d4a507acc internal/opts: SetOpts,NamedSetOpts: test for optional value
    bae46f6463 man: dockerd: value is optional for --feature flag
    176e04d73b man: fix duplicate word in --feature flag description
    06c9c72269 Update dlv in the dev-env
    15fbba2169 man: update dockerd man-page to include --feature flag
    b262a95d67 c8d/prune: Keep deletion order stable
    39c17094b0 c8d/prune: Add OTEL spans
    343800d7be adjust TestPruneDontDeleteUsedImage for 27.x branch
    95ffe8493e c8d/prune: Keep the last tagged image instead of creating dangling image
    c40cd54593 Add feature to daemon flags
    dbee7b16df TestIPRangeAt64BitLimit: remove colon after XFAIL to help grepping
    bd71b5d319 Explicitly disable nvidia device injection for --gpus=0
    a5478dde0e Dockerfile: update RootlessKit to v2.3.1
    80d0013217 Fix typos
    ce86fade0d Dockerfile: update compose to v2.29.2
    682b96c479 Dockerfile: update buildx to 0.17.0
    c3aaaf2be0 Dockerfile: update docker CLI to v27.2.1
    ce07360a1c vendor: update buildkit to v0.16.0
    ab99508c07 docs/api: update deprecation version for erroneous fields (v1.46, v1.47)
    c7a8942d6d api/swagger: update deprecation version for erroneous fields
    57ba0b05e6 vendor: update buildkit to v0.16.0-rc2
    16bf28ec2d test: update since session signature has changed
    a0650bf67c vendor: update buildkit to v0.16.0-rc1
    f7ea6bb4d9 vendor.mod: golang.org/x/net v0.28.0, etc.
    da2b59d3a2 vendor.mod: golang.org/x/time v0.6.0
    3e60519c9c vendor.mod: golang.org/x/sys v0.24.0
    e6a4c5f840 vendor.mod: golang.org/x/sync v0.8.0
    2514b02677 vendor.mod: golang.org/x/mod v0.20.0
    69f9ab2958 vendor.mod: drop direct dependency on golang.org/x/exp
    70c8d41445 vendor: github.com/containerd/nydus-snapshotter v0.14.0
    54e4cdc044 vendor: github.com/containerd/nydus-snapshotter v0.13.14
    dca7a36092 vendor: google.golang.org/grpc v1.62.0
    458110ccd0 vendor: golang.org/x/time v0.5.0
    27b5c33847 vendor: github.com/moby/sys/sequential v0.6.0
    6e77ead91e vendor: github.com/moby/sys/symlink v0.3.0
    0890631ac7 vendor: github.com/moby/sys/signal v0.7.1
    508173c39d vendor: github.com/moby/sys/mount v0.3.4
    9b26c10e8b vendor: github.com/moby/sys/mountinfo v0.7.2
    d3884731cd Dockerfile: update containerd binary to v1.7.22
    cdbc2b6869 vendor: github.com/containerd/containerd v1.7.22
    d0462c0e80 seccomp: add riscv64 mapping to seccomp_linux.go
    fc774f6dc0 docs: api: fix documentation for image push endpoint (API v1.25-v1.47)
    84d78a8ad5 api: swagger: fix documentation for image push endpoint
    e16197e51d gha/bin-image: Also run on branches like `27.x`
    37bf6e81f9 update to go1.22.7
    3a4c589290 vendor: github.com/opencontainers/runc v1.1.14
    10cf2d64b6 update runc binary to 1.1.14
    84cfcb0893 docs/api: add documentation for API v1.47
    edeb6ba9fb golangci-lint: temporarily disable G115: integer overflow conversion
    adb0b8536d update golangci-lint to v1.60.2
    01f7ec0f21 update to go1.22.6
    442462ad4e hack/make/.binary: set CGO_LDFLAGS=-latomic for arm/v5
    a3eca63b5b hack/make/.binary: set CCGO_CFLAGS=-Wno-atomic-alignment for arm/v5
    d036255b69 c8d/pull: Same error message for non-matching platform
    b9f56706c5 man: create parent directories in install recipe
    12d4379ad1 c8d/list: Don't exclude non-container images
    0fbb78c187 daemon: fix non-constant format string in call (govet)
    2bc17a1e5c api/types: fix non-constant format string in call (govet)
    fe01a5fc30 api/server/router: fix non-constant format string in call (govet)
    bf7ca4dc4b container/stream: fix non-constant format string in call (govet)
    405a163620 libnetwork/drivers/bridge: fix non-constant format string in call (govet)
    812b97d559 volume/testutils: fix non-constant format string in call (govet)
    c4eef2a58c builder/dockerfile: parseChownFlag: fix non-constant format string in call (govet)
    8dec1f216f layer: ignore G602: slice index out of range (gosec)
    068e82bdd2 internal/cleanups: fix non-constant format string in call (govet)
    8ae439ddaa libnetwork/cnmallocator: fix non-constant format string in call (govet)
    c27f7de662 cmd/dockerd: fix non-constant format string in call (govet)
    ec8ff9cbbd libnetwork: fix non-constant format string in call (govet)
    e5bc931f17 integration-cli: fix non-constant format string in call (govet)
    6c3b1992d4 integration-cli: DockerSwarmSuite: rm redundant Fprintf, handle errors
    83171f6b5a integration-cli: DockerNetworkSuite: rm redundant Fprintf, handle errors
    4cfa21bb92 integration-cli: use erors.New() instead of fmt.Errorf
    28bdd819d0 libnetwork: TestDNSOptions: remove redundant skip check
    cb2e98cfbf integration-cli: remove redundant platform checks
    875e8aeef2 vendor: github.com/containerd/containerd v1.7.21
    1900e4d8eb Dockerfile: update containerd binary to v1.7.21 (static binaries and CI only)
    ecd2b6ff09 c8d/image: Add `hostPlatformMatcher`
    d5b03423d1 man: support bringing your own go-md2man
    56c5c23114 man: build dockerd man pages using make
    77b2eb5734 Removed all mentions of "please" from docs and messages
    805becdc7e docs: add default-network-opt daemon option
    a5828ac742 docs: remove devicemapper
    f7246a0e2c man/dockerd.8: assorted formatting fixes
    f110e779f6 man/dockerd.8: escape asterisks and underscores
    edbcbf8da7 docs: update dockerd usage output for new proxy-options
    b7cc16b0b0 Fix styling of arguments
    ecbc4f05bb Fix the max-concurrent-downloads and max-concurrent-uploads configs documentation
    43298ad298 docs: remove documentation about deprecated cluster-store
    8cc7f26f56 Document `--validate` daemon option
    255eaa6647 Update man-page source MarkDown to work with go-md2man v2
    ee27f4cd7f docs: update for cgroup v2 and rootless
    c1d3c952e7 docker run: specify cgroup namespace mode with --cgroupns
    fc9029a2e2 daemon: document --max-download-attempts option
    115b10a467 Update document links and title.
    488872bcb4 Allow user to specify default address pools for docker networks This is separate commit for CLI files to address PR 36054
    f623030fac Update docs and completion-scripts for deprecated features
    ac7032bff9 Added docs for dockerd
    161006302f fix a number of minor typos
    a6de17d230 Introduce/document new IPC modes
    6513e80c84 docs: add documentation for dm.libdm_log_level
    3d917f3fd6 Restore dockerd man page
    e854a5c201 c8d/pull: Replace pointer to interface with interface
    ea58dab95e c8d/pull: Keep the replaced image as dangling
    0a38589add c8d/load: Only unpack host platform images
    7c069d3021 c8d/load: Don't fail whole operation if unpack failed
    5002faebe8 integration/TestAPIImagesListManifests: Check `Containers`
    a15a309832 c8d/list: Update benchmark to also have containers
    fd5cede287 c8d/list: Fix race condition when traversing containers
    65c4e49aff govulncheck to report known vulnerabilities
    7ebb277873 Dockerfile: update xx to v1.5.0
    ad5eb875d4 c8d/list: Don't require `opts.ContainerCount` for manifest containers
    3d845e0e8c c8d/list: Add test for total and content size
    3563a707d0 c8d/list: Fix `Total` size calculation
    89757f83ff api/list: Expose manifests
    bb2fec6425 api: Bump default version to 1.47
    0f8fcec1d9 swagger: Disable ImageSummary model generation
    1ec5e86154 api/types/registry: fix godoc, and add some doc-links
    62f32e9a97 plugin: fix deprecation comments
    830c76c6f2 vendor: update buildkit to v0.15.2
    354bf75675 libcontainerd: gofumpt
    4ab7d90669 pkg/plugins: gofumpt
    c11b2d9c7d pkg/archive: gofumpt
    ccdc79d55a libnetwork: gofumpt
    35b1a30028 layer: gofumpt
    9f63aa7435 internal: gofumpt
    4d16ac993e integration: gofumpt
    6d5266a650 integration-cli: gofumpt
    4084dac566 daemon: gofumpt
    c36ab4c2ca daemon/containerd: gofumpt
    904867593b daemon/config: gofumpt
    72876770d0 builder: gofumpt
    e8109ee4da api/types: gofumpt
    ed65e1224e api/server: gofumpt
    d54aff9312 API 1.46: end per-interface sysctl migration in major release
    8f12906274 Migrate per-endpoint sysctls until 28.0.0
    c53be2f3d5 Allow --ip-range ending on a 64-bit boundary
    fc0150b962 daemon/containerd: rm use of regexp
    73c01d0b6a image/v1: rm regexp use
    c93fe4a27d layer: rm regexp use
    31459c8268 docs/api: swagger: fix x-nullable for SystemInfo.Containerd (api v1.46)
    35d430c62e api/swagger: fix x-nullable for SystemInfo.Containerd
    80a59c2f1a migrate to github.com/moby/sys/userns
    e7fe276c00 update to go1.21.13
    e8cd19e810 gha: set permissions to read-only by default
    e0c52e0ba6 vendor: update buildkit to v0.15.1
    efb67b16b0 api/server/router/grpc: NewRouter: set correct MaxRecvMsgSize, MaxSendMsgSize
    f96e26f68d migrate to github.com/moby/sys/user/userns
    78b59867f2 vendor: github.com/moby/sys/user v0.2.0
    018137b01a vendor: github.com/gofrs/flock v0.12.1
    650e06ac75 vendor: golang.org/x/sys v0.22.0
    bfe5339c7e dockerd-rootless-setuptool.sh: move RootlessKit smoke test
    99471ac2fe hack: explicitly control enabling the journald logging driver
    b9b43b3bdf README: replace obsolete Docker EE mention
    1bc907c97c vendor: github.com/containerd/containerd v1.7.20
    1c0885d60d gha: check-pr-branch: fix branch check regression
    ed83a9e3a1 update containerd binary to v1.7.20
    422ef48c2f gha: check-pr-branch: verify major version only
    c9d37a9198 [27.1] pkg/rootless/specconv: deprecate, and add temporary aliases
    1f16a44b3d pkg/rootless/specconv: move to internal
    c8f1317585 pkg/directory: deprecate, and move to internal
    68587c38fe pkg/directory: fix comment, and remove import comments
    d1ea2b1fec [27.1] pkg/containerfs: deprecate, and add temporary aliases
    31c1b7dc17 pkg/containerfs: move to internal
    6231ea4a34 pkg/containerfs: cleanup GoDoc, and make Windows a proper wrapper
    dc33eb81d8 pkg/containerfs: remove CleanScopedPath and make it internal
    bc6ae42031 Dockerfile: update compose to v2.29.0
    af8866f324 Dockerfile: update buildx to v0.16.1
    5e4ddd81a2 api/types/system: remove Info.ExecutionDriver
    c7e4d181a1 vendor: cloud.google.com/go/logging v1.9.0
    3d7e824bc2 vendor: golang.org/x/oauth2 v0.21.0
    d66b76d2e6 vendor: cloud.google.com/go/compute/metadata v0.3.0
    03dc388f63 c8d/build: Log `image tag` event when image was built with Buildkit
    5ee23b6050 builder-next: Add ImageNamedByBuildkit callback
    53c521a6b2 builder-next: Don't return error from exported callback
    eccccd7577 Fix API version in TestSetInterfaceSysctl
    d9e3d1b815 update containerd binary to v1.7.19
    b91e20cc2e vendor: update buildkit to v0.15.0
    505be6557b vendor: update buildkit to v0.15.0-rc2
    b1613dc2a1 vendor: update buildkit to v0.15.0-rc1
    52f6163746 vendor: golang.org/x/net v0.25.0
    c70e404e9e vendor: golang.org/x/crypto v0.23.0
    d7a3f01421 vendor: golang.org/x/text v0.15.0
    0f2f9e0049 vendor: golang.org/x/sys v0.21.0
    45a1c34202 vendor: github.com/klauspost/compress v1.17.9
    7b31435cf8 Migrate to github.com/containerd/platforms module
    99df4fee0b vendor: github.com/containerd/containerd v1.7.19
    9f08d1e357 vendor: github.com/microsoft/hcsshim v0.11.7
    d1bbb61844 If url includes scheme, urlPath will drop hostname, which would not match the auth check
    0835eaa5a1 Authz plugin security fixes for 0-length content and path validation Signed-off-by: Jameson Hyde <jameson.hyde@docker.com>
    b039de78d7 docs/api: Add missing `
    7d99ebe418 rootless: add `Requires=dbus.socket`

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>

1 files changed, 2 insertions, 2 deletions

diff --git a/recipes-containers/docker/docker-moby_git.bb b/recipes-containers/docker/docker-moby_git.bb
index babac9ae..b16f44fd 100644
--- a/recipes-containers/docker/docker-moby_git.bb
+++ b/recipes-containers/docker/docker-moby_git.bb
@@ -44,7 +44,7 @@ DESCRIPTION = "Linux container runtime \
 # so we get that tag, and make it our SRCREVS:
 #
 
-SRCREV_moby = "7fa33a539a2054417c8aacdd7f92e3f8e50f1dff"
+SRCREV_moby = "33b6b826c26b05c5e68adc106b6c3b4b44ca5360"
 SRCREV_libnetwork = "67e0588f1ddfaf2faf4c8cae8b7ea2876434d91c"
 SRCREV_cli = "d41cb083c352853f94b292a87df4859c4a96dcc2"
 SRCREV_FORMAT = "moby_libnetwork"
@@ -67,7 +67,7 @@ require docker.inc
 LICENSE = "Apache-2.0"
 LIC_FILES_CHKSUM = "file://src/import/LICENSE;md5=4859e97a9c7780e77972d989f0823f28"
 
-DOCKER_VERSION = "27.0.3"
+DOCKER_VERSION = "27.4.0-rc.2"
 PV = "${DOCKER_VERSION}+git${SRCREV_moby}"
 
 CVE_PRODUCT = "docker mobyproject:moby"