summaryrefslogtreecommitdiffstats
path: root/recipes-containers/containerd
Commit message (Collapse)AuthorAgeFilesLines
* containerd-opencontainers: fix wrong version displayChangqing Li2024-05-022-4/+31
| | | | | | | | | | | | | | * Update containerd to v2 to fix following containerd version: containerd github.com/containerd/containerd/v2 2.0.0-beta.0+unknown it should be like: containerd github.com/containerd/containerd/v2 v2.0.0-beta.2-204-gb1624c362.m b1624c3628954e769dd50783b63823040b2db38c.m * Remove CONTAINERD_PKG, it is not used * Update default PACKAGE in Makefile to v2 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to v2.0.0-beta-tipBruce Ashfield2024-03-151-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping containerd to version v2.0.0-beta.2-204-gb1624c362, which comprises the following commits: 5351ad6b4 .github: windows should use fix critool version a2768f19d plugins/sandbox: move local plugin into services 464319b3a Remove pause package from runc shim 2cd08156e cri: Expose runtimeHandler support for userns 358aef4bc go.mod: Update cri-api to include userns changes 105f2d727 build(deps): bump google.golang.org/grpc from 1.61.0 to 1.62.0 02db6beb8 build(deps): bump github.com/prometheus/client_golang 75f58579c build(deps): bump github.com/opencontainers/runtime-spec 522130a66 sandbox: support vsock connection to task api f0e874941 Add ttrpc generated services 65031eade Update protobuild to build ttrpc services 04c37d565 build(deps): bump the k8s group with 5 updates bd4810415 ci: update crun version to 1.14.3 50d0de96a Update 1.7 support timeline 4fbc9842d Changes to configuring otel from env only 753a525b3 Deprecate otel configs 0693b936d replace deprecated Prestart to CreateRuntime hook 6a21c96b5 Replace go-grpc-prometheus with go-grpc-middleware/providers/prometheus 567e56a20 build(deps): bump github.com/opencontainers/image-spec 6a759713a Update golangci-lint to v1.56.1 f44d90be4 Rename variables and snapshotter option to resolve lint warnings 5611db530 cri: Make sure host sandbox files exist before adding them to mounts 9077d1372 KEP-3857: Recursive Read-only (RRO) mounts 83ad4367d script/test/utils.sh: readiness_check: print daemon log f8f1e5f7a Add container monitor plugin type for restart c86c8a16f integration: add case related to ContainerStats in upgrade suite acec60f55 integration: update recover case for upgrade e659cd275 integration: connect to shim by bridge client 51689b661 integration: introduce hook for upgrade test suite a95c8ed59 integration: check data dir after delete container or pod ec759f5be integration/*: extend Runtime.Status response 401d4b491 integration: add some helper function to release upgrade cases 7cf8a00c7 Run failpoints tests only for runc a890c8e53 Add job to report statuses from matrix jobs 132485adb Convert CLI to urfave v2 c8766123d Prevent GC from schedule itself with 0 period. a086125ae Move config version to version package 99721c27e Disable the support for Schema 1 images b9dfba5b8 Add CRIImageService.RemoveImage() 4c775fcfb Pass runtimehandler from CRI pull image request 4dcf089fa Move high volume event logs to Trace level 1b3a96da6 cri: propagate deprecation list to runtime status ac7febc93 moving up for new CRI changes ccec1e6e4 Remove internal LoopConfig struct 3d8da2ebf build(deps): bump the golang-x group with 1 update a274439f2 build(deps): bump golangci/golangci-lint-action from 3 to 4 468bee9a7 ctr: print deprecation warnings on every invocation c2dfae8d0 go.mod: Bump golang.org/x/sys to v0.17.0 41bb8b816 Revert "Fix for k8s nfs related tests" 48c8c5f50 Remove ParseSignal from client 281eb22cc Remove deprecated dialer 1ce7b9951 Remove deprecated filesys funcs 5ca56ddbb Remove deprecated funcs from restart package 653b80899 Remove deprecated docker package 413fbe82c Fix unpacker link in remote snapshotter docs 23ebfd030 Fix for k8s nfs related tests 25ab90219 Update to v0.29.1 cri-api 5e3e12d2a build(deps): bump the otel group with 8 updates c4bb72ae4 Remove CRI plugin path note 87aa9e800 Drop go 1.20 and build against 1.22 276384695 Update codeql-action/upload-sarif dependency in scorecards workflow 634ac2f8f Update migration script for transfer packages f46aea618 Move transfer and unpack packages d9b95ab68 Update gce configure.sh to use registry config_path 360fbf197 Fix windows integration tests 2820343d4 Update workflow files to install Go via composite action 488b56361 Extract a composite action to install Go 5aa05481d Add OSVersion to platform protobuf d9cae66d8 Extend string match in make protos c58b1fb40 Update github.com/containerd/console to v1.0.4 06ed897b2 cri/server: Add userns tests in PodSandboxStatus 6c356a5c7 cri: Expose userns in PodSandboxStatus rpc 1eaf0c1f0 bug fix: make sure cri image is pinned when it is pulled outside cri 9eb9038a9 Avoid publishing data events during transaction 86530c0af Move image event publishing to metadata store 32bd8eff9 Move inline PS scripts into files 4e8e21a7d go.{mod,sum}: update NRI dependency, re-vendor. 5cbe92e88 Clean up repeated package import 72950c00b Treat PRs that require rebase > 90 days as stale db437580b build(deps): bump github.com/opencontainers/image-spec 2c7d69530 build(deps): bump github.com/klauspost/compress from 1.17.5 to 1.17.6 da1673f55 Update vendor 047d42e90 Update ttrpc to v1.2.3 64e96c7d4 Update hcsshim to v0.12.0-rc.3 a9060cda4 Support inject delay running with the old version (4.x) of strace for test case. 9ef94fe52 fix(docs): fix cp and add step to include binaries in the $env:Path fe24b918f pkg/nri, docs: enable NRI by default. e230ed939 sandbox: add sandbox recover ut and e2e test 312496474 sandbox: fix recover status set issue 256637249 Fix config import relative path glob 667069583 Revert "cri: make read-only mounts recursively read-only" a9152ebf8 copy: prevent potential deadlock if close before fully written b48e1141e copy: setError should imply Close e4f91c2df copy: remove max number of ErrResets 651cfa2a2 pushWriter: refactor reset pipe logic into separate function 9d7641ff3 copy: improve error detection from closed pipes 91a50f70b copy: check if writer was closed before setting a pipe 4660f6303 copy: remove wrapping io.NopCloser from push writer pipe 0facc8592 Fix proto formatting 7f2d2c4f4 Move Message proto to types 287524733 Fix formatting after moving CRI bbac058cf Move CRI from pkg/ to internal/ 6e365e925 CRI: An empty DNSConfig != unspecified 9340be717 Remove duplicated TOML duration parsers b2f254fff cri: make read-only mounts recursively read-only f74e5ce7e Move differ default to its own file 82fb589ff Update runc binary to v1.1.12 87a9835f1 docs: fix typo 81409e937 Add a default differ that matches the snapshotter 2369185aa CI: update Rocky Linux to 8.9 d8460a702 CI: bump up crun to 1.14 ebbce7423 rm docs/cri/installation.md 49d5cc7f9 build(deps): bump github.com/klauspost/compress from 1.17.4 to 1.17.5 4d33170ea build(deps): bump github.com/google/uuid from 1.5.0 to 1.6.0 3a5b47d73 build(deps): bump google.golang.org/grpc from 1.60.1 to 1.61.0 9a983caad build(deps): bump github.com/containerd/plugin 495afb0c0 build(deps): bump lycheeverse/lychee-action from 1.9.1 to 1.9.3 5365a1089 build(deps): bump google-github-actions/upload-cloud-storage 64b4778fc Add deprecation warnings to CRI image server configuration 65b3922df Split streaming config from runtime config 58ff9d368 Move cri plugin to plugins subpackage d29a1bc6a Move sandbox info to cri types packages 9795677fe Move cri base plugin to CRI runtime service 966d51801 The `Links` workflow should be disabled in forks. e15f191a2 Fix func (m manager) Info in containerd-shim-runc-v2 4f570db1a refactor: remove containerd/containerd/log 010857d33 Add errdefs and platforms to migration script 7cf54b437 Remove unused pkg/errdefs package fb9b59a84 Switch to new errdefs package 6b906a22d Prepare release notes for v2.0.0-beta.2 b608c6f73 doc: fix package import path in sample code b16e3572a refactor: move plugin/fieldpath to api/types/ 22d586e51 api/services/instrospection: add PluginInfo ad869e905 Use tags.cncf.io CDI url in config.md eb8981f35 mv contrib/seccomp/kernelversion pkg/kernelversion a6e52c74f seccomp: kernel 6.7 ed4710241 Code clean for nri_api. ade80789b Remove walker diff plugin for Windows af6a90bf5 remotes/docker/authorizer.go: invalidate auth tokens when they expire. e79ec7a09 Remove deprecated platforms package 3f620143f Use github.com/containerd/platforms package 9dd29b3cf Update container-device-interface to v0.6.2 7eccde5d0 Clean plugin indent in containerd-config.toml.5.md b16d46740 pod: CreatedAt time will be 269 years ago while creating cri network failed. 378e9f443 build(deps): bump actions/cache from 3 to 4 748fe2035 integration: add test for recovering images 2e8e03389 Add multi-subscriber support to GetContainerEvents CRI API e7eb08eb5 Add support for multiple subscribers to CRI container events cfe8321b4 strip-volatile-option-tmp-mounts d34725f85 CI: use standard GHA runners 9d2c22123 Prepare release notes for v2.0.0-beta.1 e9f2bba1f remotes: FetchByDigest: propagate media type from config to desc d7689ae8b Remove CRI plugin config after migrating f48f61fd8 Add migration integration test eb9925d88 Update config migrations to decode using the plugin type 15713014d Update server config slice merge strategy cf6f439eb Fix transfer plugin unpack configuration eb123db5f ctr: use transfer service by default 94d1b2098 Add migration script to contrib 9ee1f4716 Rebuild protos with updated runtime location dbc74db6a Move runtime to core/runtime df9b0a067 Move metrics to core/metrics 19e763553 Move pkg/truncindex to internal/truncindex 764c90700 Move pkg/tomlext to internal/tomlext 1c4be2d88 Move pkg/testutil to internal/testutil 114df368f Move pkg/registrar to internal/registrar 4ee6419fa Move pkg/randutil to internal/randutil 696cf2565 Move pkg/kmutex to internal/kmutex 5e1d9543b Move pkg/hasher to internal/hasher 23914a01b Move pkg/failpoint to internal/failpoint c79ecfe24 Move pkg/cleanup to internal/cleanup 8f0eb2631 Move tracing to pkg/tracing 6be90158c Move sys to pkg/sys de606680b Move rootfs to pkg/rootfs fdb8a527c Move reference to pkg/reference e59f64792 Move oci to pkg/oci fa8cae99d Move namespaces to pkg/namespaces b76236bb4 Move labels to pkg/labels bb71c2835 Move identifiers to pkg/identifiers 5e00f63ce Move gc to pkg/gc 11114b0a9 Move gc/scheduler to plugins/gc c38f2ab72 Move filters to pkg/filters 44a836c9b Move errdefs to pkg/errdefs 70ed2696f Move events to pkg/events b0c3d00e9 Move cio to pkg/cio 8e14c39e8 Move archive to pkg/archive fcd39ccc5 Move snapshots to core/snapshots e0fe656da Move snapshots/windows to plugins/snapshots/windows 57bdbfba6 Move snapshots/overlay to plugins/snapshots/overlay 9b8c558f9 Move snapshots/native to plugins/snapshots/native 5c07d5d36 Move snapshots/lcow to plugins/snapshots/lcow 8473322f0 Move snapshots/devmapper to plugins/snapshots/devmapper 7dd96fe34 Move snapshots/btrfs to plugins/snapshots/btrfs 2909f07f8 Move snapshots/blockfile to plugins/snapshots/blockfile 92d2a5fc0 Move services to plugins/services ce41d1c90 Move services/server to cmd/containerd/server 228ad5a5c Move sandbox to core/sandbox d133019c9 Move runtime/restart/monitor to plugins/restart 0dabf6f15 Move remotes to core/remotes 6e5408dce Move mount to core/mount 1a1e0e8c8 Move metadata to core/metadata 18b3cbe4f Move metadata/plugin to plugins/metadata f80760f9f Move leases to core/leases cc6a5c9c6 Move leases/plugin to plugins/leases 57ea8aef3 Move images to core/images 913edcd48 Move diff to core/diff d14350376 Move diff/windows to plugins/diff/windows 2d861b6ea Move diff/walking to plugins/diff/walking aaf6ac04c Move diff/lcow to plugins/diff/lcow 9456048f4 Move containers to core/containers 21b4f3f0a Move content to core/content 846f7d4e6 Move content/local to plugins/content/local 725c92e7c include image name in error message 18b0d236c build(deps): bump actions/upload-artifact from 3 to 4 f45b46b67 runtime/v2: reduce shim plugin log 20619a7c9 ci: make artifact name unique in linux integration 2053d9157 build(deps): bump lycheeverse/lychee-action from 1.9.0 to 1.9.1 d4396c96b mount: UnmountRecursive return nil if path doesn't exist 8aa2551ce Move DefaultSnapshotter constants c8e8a093c config: enable CDI by default 5a3d3f613 Update load image test to use local import 6041d4e60 Update fuzz contrib for updated image service 2a476d421 Move ParseImageReferences to cri util 3baf5edb8 Separate the CRI image config from the main plugin config ad4c9f8a9 Update CRI runtime platform and pinned image configuration 11f311fdd Add minimal interface to CRI image store 02a9a456e Split image config from CRI plugin d23ac1122 Split CRI image service from GRPC handler a2472c0b5 transfer: add OCI descriptors to Progress structure f26196950 Move certain debug logs to trace logs a5d958706 update to go1.21.6, go1.20.13 21640c57a Uninstall mingw before attempting upgrade 174efb1e0 update imgcrypt binary to v1.1.9 dfb175380 build(deps): bump the golang-x group with 2 updates 2b415c911 build(deps): bump lycheeverse/lychee-action from 1.8.0 to 1.9.0 7dadd5f1b sandbox: remove sandboxStore from podsandbox a3c62e698 add label flags to ctr import, add integration tests d01056555 Handle failure when stopping a sandbox 8235665e7 content: Add InfoReaderProvider fa83bc8de integration: remove use of golang.org/x/sys/execabs dffeea471 add get cgroupdriver from RuntimeConfig to integration 46b2f1d16 Use latest VM image to get Windows updates regularly a8d39666d Move cimfs OS build compat check to the operation functions instead of init() 0d3c3efe3 integration/import-export: Add WithSkipMissing tests b9af453f0 export: Copy distribution source labels to manifest annotations 61a7c4999 import/export: Support references to missing content 1ab4fac94 update runc binary to v1.1.11 5387747e9 build(deps): bump github.com/containerd/cgroups/v3 from 3.0.2 to 3.0.3 a1e0601e0 fix: Update go.opentelemetry.io/otel/sdk/trace to satisfy traceProvider interface 78421616e deps: Update otelgrpc bd4c281c5 build(deps): bump github.com/fsnotify/fsnotify from 1.6.0 to 1.7.0 62a824a4b build(deps): bump github.com/intel/goresctrl from 0.5.0 to 0.6.0 7fe038e4a build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.32.0 81bb66942 build(deps): bump github.com/google/uuid from 1.3.1 to 1.5.0 9d328410a shim: Create pid-file with 0644 permissions daa1ea522 Add cimfs differ and snapshotter c19193574 fix: return gRPC code "unavailable" if server is not initialized yet 1f9151af6 build(deps): bump google.golang.org/grpc from 1.58.3 to 1.60.1 0b48b5659 build(deps): bump google-github-actions/upload-cloud-storage 97ec26a5e build(deps): bump actions/download-artifact from 3 to 4 22138541a tracing/plugin: newTracer: ignore context.Canceled errors on Close() 7c651e183 docs: fix CI badge in README e10c82e4c build(deps): bump github.com/google/uuid from 1.3.1 to 1.5.0 25dc823bf integration: fix format string for klog.Infof fc4b78c05 build(deps): bump github.com/intel/goresctrl from 0.3.0 to 0.5.0 1c96087ce build(deps): bump github.com/Microsoft/hcsshim 7e3c8af52 build(deps): bump github.com/prometheus/client_golang f9303d04d build(deps): bump github/codeql-action from 2 to 3 4c1ebe33b build(deps): bump docker/setup-buildx-action from 2 to 3 51fd1d47e dependabot: enable groups 4a71a9360 build(deps): bump github.com/moby/sys/mountinfo from 0.6.2 to 0.7.1 344fe957f build(deps): bump golang.org/x/mod from 0.13.0 to 0.14.0 6726a2aeb build(deps): bump k8s.io/component-base from 0.28.2 to 0.28.4 0c98f1063 build(deps): bump github.com/klauspost/compress from 1.17.2 to 1.17.4 39ba0347e build(deps): bump go.etcd.io/bbolt from 1.3.7 to 1.3.8 db43e3d1f build(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 4660090ba build(deps): bump actions/stale from 8 to 9 ace8ab1bd build(deps): bump docker/login-action from 2 to 3 0b94716e8 build(deps): bump actions/github-script from 6 to 7 9133ad811 build(deps): bump actions/upload-artifact from 1 to 3 c1823a7c6 build(deps): bump ossf/scorecard-action from 2.0.3 to 2.3.1 36b12cbcb build(deps): bump crazy-max/ghaction-github-runtime from 2 to 3 dc5a6cfae build(deps): bump google-github-actions/auth from 0 to 2 f6a9c6966 build(deps): bump actions/setup-go from 3 to 5 e27ea7d1a build(deps): bump google-github-actions/upload-cloud-storage 3ca95282e build(deps): bump actions/checkout from 3 to 4 1398186ca WithAppendAdditionalGroups: better /etc/group handling 5a140dca5 CI: enable dependabot c1197995b go.mod: Bump up github.com/pelletier/go-toml to v2.1.1 23278c81f *: introduce image_pull_with_sync_fs in CRI bd5c602c4 api: introduce sync_fs to diff.ApplyRequest 6bb81ee57 Document `ns` query string added to mirror requests 98526c9d3 Exclude releases directory from links checker f67c1632f Add ignore list for links e740dd3d6 Add links status badge bfa651c69 Fix broken links c9fa5b980 Add nighly job to verify doc links 25b052cbc Move GenerateRuntimeOptions() to pkg/cri/config cb5a48e64 *: enable ARM64 runner 596ada3ac release: add .dockerignore to fix repeated builds cf4b57989 Remove deprecated tracing function 8203bb997 Add HTTP client update function to tracing library ad3b806a4 fix(tracing): use latest version of semconv 22db60b6b upgrade crun version from 1.9 to 1.12 993790969 go.mod: Bump up github.com/containernetworking/plugins to v1.4.0 734219a21 update to go1.21.5, go1.20.12 212200452 update to go1.21.4, go1.20.11 ad96fded4 Don't block snapshot garbage collection on Remove failures 8bbce8d37 pkg/process: Check using idmap mount options too 96aaf5a3b Add core and internal root packages 6c6dfcbce contrib/apparmor: deny /sys/devices/virtual/powercap 106a9b776 oci/spec: deny /sys/devices/virtual/powercap Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd-opencontainers: Use RDEPENDS:${PN} instead of RDEPENDS:${BPN}Peter Kjellerstedt2024-01-191-1/+1
| | | | | | | | | | | | | | | | | | | The original purpose of using BPN vs PN in the RDEPENDS was due to 32bit multilib issues. Those problems are no longer present, so we can adjust this recipe to use the standard PN in rdepends. This change avoids the following warning: WARNING: .../containerd-opencontainers_git.bb: Variable key RDEPENDS:${PN} (...) replaces original key RDEPENDS:containerd-opencontainers ( ${VIRTUAL-RUNTIME_container_runtime}). if, e.g., RDEPENDS:${PN}:append = " ..." is used in a bbappend or bbclass. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to 2.0-betaBruce Ashfield2024-01-042-11/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We refresh our GO_FLAGS patch for new context, and drop the install of v1 or unversioned shims as the runtime-v1 has been dropped Bumping containerd to version v2.0.0-beta.0-88-g87bf39a7f, which comprises the following commits: 96aaf5a3b Add core and internal root packages c0363754f sandbox: get runtime info from sandbox or container 95d2a3b7c upgrade: add cri upgrade test case 0bc963341 runtime/v2: net.Dial gRPC shim sockets before trying grpc e1b495866 sandbox: keep rootDir and stateDir compatible b0fef6738 sandbox: migrate sandbox_mode to sandboxer c8012b6d7 sandbox: make a clear dependency of cri plugins 2ead89509 Support gzip and zstd HTTP transport compression to fetch remote resources 8e567aa58 mv pkg/process cmd/containerd-shim-runc-v2/process a813097dc Bump up github.com/fsnotify/fsnotify to v1.7.0 c384e3717 containerd-stress: use config address for CRI test d4c828c2c integration: add new binary upgrade case 8e91edb71 fix(pkg/dialer): minor fix on dialer function for windows ad3f8c563 tomlext.Duration add MarshalText method 6da015284 go.mod: github.com/containerd/continuity v0.4.3 cd348e6ef .golangci.yml: remove directories that don't exist 4b556a6e0 Bump up golangci-lint to v1.55.2 c51d4f9b6 push: always inherit distribution sources from parent e15c24655 Move CRI image service into a separate plugin 80dd779de remotes/docker: close connection if no more data 7f410ae05 integration: reproduce #9347 2e9686c05 fix: deflake TestCRIImagePullTimeout/HoldingContentOpenWriter 4aa932337 CI: update Fedora to 39 f6c4de6b5 fix: podsandbox depends on Lease plugin 1b65fe264 fix ticker leak 1af0cba1a Update documentation for containerd v2.0 packages 4f42da416 adopters.md: remove Eliot project 01c442147 Enhance container image unpack client logs e7390d4ed vendor: upgrade OpenTelemetry to v1.19.0 / v0.45.0 1a1bd6d0a runtime/v2/shim: use structured log for plugin ID 71fd85f5e runtime/v2/shim: run(): remove unused "name" argument 0a59c33be runtime/v2/shim: rename var that shadowed package var be22e12d5 services/server: use structured log for plugin ID 09de4f1fc services/server: rename var that collided with import 14e621cf9 services/server: gofumpt 32bf805e5 sandbox: add a sandboxService interface to criService 25a4c3d23 sandbox: remove SandboxersServicePlugin 0cf48bab2 sandbox: podsandbox init its own client 7d65a4563 Move runc shim implementation to cmd e682da76c fix labels in pod sandbox 64c41162c update tests to use labels from cri/labels 7e79225ce refactor labels used in cri server 274a16282 update runc binary to v1.1.10 2e014fa2a cri: fix update of pinned label for images cb555fa16 golangci-lint: enable depguard to prevent re-introducing libcontainer dac056fe7 integration: deflake TestIssue9103 7b9fcfd7c add default enable unprivileged icmp/ports a7cd49c68 expected and actual field position adjustment e099717f9 validate kernel version for unprivileged icmp/port 76049170b document runtime and shim configuration and selection 2fab240f2 integration: init release upgrade test 2af6db672 switch back from golang.org/x/sys/execabs to os/exec (go1.19) a596d09ec cri: add deprecation warning for configs 35924bccc cri: add deprecation warning for auths d7cb25d77 cri: add deprecation warning for mirrors 58cc275eb cri: add ability to emit deprecation warnings 68cac3f62 client: remove obsolete ErrCheckpointRWUnsupported df19888f8 add warning use inheritable Capabilities 411e2bce4 Remove plugins package 9db21401c Switch to github.com/containerd/plugin a48ddf4a2 Don't allow io_uring related syscalls in the RuntimeDefault seccomp profile. 2dfae4c4b Prepare release notes for v2.0.0-beta.0 6ca4b5260 Update mailmap a67efe88d Add tests cases f1d659dc5 Update package name in Makefile 0ffc3e987 Handle ArgsEscaped for new Sb Server b85df264e Rename opt to avoid stutter 261e01c2a Move client to subpackage b6adf43d4 test: use 'Autoclear: ture' in TestRwLoop and add Autoclear test 124d3a20a Sync ops.md, update CLI --help output to be consistent in descriptions 5fdf55e49 Update go module to github.com/containerd/containerd/v2 abfc8be53 Fix lint in integration/client ddd73ad30 Move protofiles generated into v2 directory 638b474c8 Temporarily remove imgcrypt in CRI to fix circular dependency 192168038 Temporarily remove integration/client submodule 4e3fbd36e vendor: github.com/klauspost/compress v1.17.2 856d1053f vendor: google.golang.org/grpc v1.58.3 466ee870d Check scheme and host of request on push redirect 3fff8b4f6 ctr: new deprecations command 079383dbe dynamic: record deprecation for dynamic plugins 260e71abc server: add ability to record config deprecations bc861b66f pull: record deprecation warning for schema 1 9aab44673 introspection: add support for deprecations 57c897f10 api/introspection: deprecation warnings in server 240733ce2 warning: new service for deprecations aff5b809c deprecation: new package for deprecations d48ceb606 Avoid TLS fallback when protocol is not ambiguous ed759bae3 Update go fuzz to directly instantiate server 09e40511a fix bug that using invalid token to retry fetching layer 2fea521d0 Disable windows-2019 integration test temporarily 9fc407d8c ci: bump up golangci-lint to v1.55.0 8b4f9656d sandbox: remove ValidateMode as it is not used 337cc2171 pkg/cri: should ignore no sandbox bucket f515cd5c5 Reorder fields when writing bootstrap params 3d53fbe85 Fix CRI integration tests f76eaf5a6 Fix 'not a directory' error when restoring bootstrap.json cf75cfa32 Add more logs around shim restore 8061cb023 Save bootstrap.json instead of address file e03bf32b8 Switch runc to v3 7a2d801d6 Expose shim instance version f66c46806 Bridge task service v2 daaf67662 Switch runc shim to task v3 bb64e6a8e Initialize sandbox controller list on CRI server creation 03d81f595 Use cri streaming pkg from k8s staging b006f1c15 integration/client: replace hardcoded strings for OCI-spec consts d3f5e0c90 images/archive: replace hardcoded strings for OCI-spec consts 8e7c10c6d CRI: enhance ImageFsInfo() to support multiple snapshotters e4639ad18 Add exports to proxy plugin config 3986f80c3 go.mod: bump up github.com/opencontainers/image-spec to v1.1.0-rc5 f7c9e9942 vendor: golang.org/x/net v0.17.0 c3652540c vendor: golang.org/x/text v0.13.0 ff602c213 vendor: golang.org/x/sys v0.13.0 39b168cdb vendor: google.golang.org/grpc v1.57.1 930ee552e Fix typos 3ef300ca7 sandbox: remove global variable of podsandbox controller 7bca70c0c sandbox: do not call Connect when loadShim d2d434b7d sandbox: add all sandbox information to Create method 0707f6869 sandbox: ignore not found error when remove sandbox 2951fb6dc sandbox: support more sandbox controllers 8b3597685 sandbox: add Sandboxer field to sandbox metadata 69e501e7c sandbox: change SandboxMode to Sandboxer f372b3501 sandbox: add sandboxer field of sandbox requests a782fd6da Use LOOP_CONFIGURE when creating loop devices 771237563 Add a new image label if it is docker schema 1 5ad6f3432 CRI: use (snapshotter_id, snapshot_key) to uniquely identify snapshots 41b2b2a7b go.mod: bump up github.com/klauspost/compress from v1.17.0 to v1.17.1 4febb0852 deprecated: go-plugin library as runtime plugin 51c9ffe46 remotes: add handling for missing basic auth credentials 4f339b5b5 RELEASES.md: mark legacy CRI as removed status 0a4f79211 Remove use of v1 runtime plugin type for Unix 71f8b4357 Move dynamic plugins to a subpackage 7b2a91821 Generalize the plugin package a80606bc2 Move plugin type definitions to containerd plugins package cb969085f Temporarily remove zfs as built in plugin 2486c1298 Exit shim when shutdown manager is done 1b3199324 Rename sbserver to server 4edc6c2d9 Add note about configuration versions in releases c5c94dc86 Fix CRI tests panic on CI a3c2c1e4d Clean shell scripts fa1d3a9cc Fix dependencies after remove 3742f7f0d idmapped: use pidfd to avoid pid reuse issue 2332b9ba1 Remove legacy CRI from CI 536abf1b3 Remove legacy CRI 33b1a833c Move CRI testing package out 016114ff6 Move bandwidth package out of CRI server 3c1e7ffb8 Integration: Alter TestContainerPids for Windows 8f013bb71 Add migration for older configuration versions 313f514fd update to go1.21.3. gp1.20.10 6b752b536 update to go1.21.2, go1.20.9 8f3d1c9d9 add cpu-burst param to ctr command 3ddcd6120 add Duration type to compatible toml v1 version 535916d1d Skip exec.LookPath if a specific gzip implementation is disabled 4b59d67dd add a new flag "skip-reference-check" to skip reference name check 34378ec9b Use Intel ISA-L's igzip if available 7d6369087 Fix windows default path overwrite issue 13dcf558e Fix windows default path overwrite issue 39478eeec go.mod: Bump up github.com/klauspost/compress v1.16.7 to v1.17.0 859c2651e remotes/docker: Fix MountedFrom prefixed with target repository c85b1d1e4 Bump up golangci-lint to v1.54.2 6169433b6 Fix linter issues for golangci-lint 1.54.2 e3cb7471a CRI: Snapshotter per runtime handler adjustments 42dc8faba Bump x/net to 0.13 79772a0dd remotes: always try to establish tls connection when tls configured 11a7751af *: add runc-fp as runc wrapper to inject failpoint 68dd47ef7 containerd-shim-runc-v2: avoid potential deadlock in create handler 6604ff6c5 containerd-shim-runc-v2: remove unnecessary `s.getContainer()` 0d76fe5c1 Fix some assertions for integ tests 1dced31c3 ci-fix: pin the mingw version 12.2.0.3042023 aae71aa8e update gitignore to indicate that where contributors can use global gitignore 8ffb03d68 cri: stop recommending disable_cgroup 5365f4b29 cri: call RegisterReadiness after NewCRIService 46645b393 Call migrations per version 5518a5026 remotes: simplify mediatype logic 8b105984b pkg/transfer/local: simplify mediatype logic 79acce462 integration: use mediatype helpers 0ba5b4b62 oci: use mediatype helpers cdba61603 remotes: use mediatype helpers 69034f755 pkg/display: use mediatype helpers 5ab04ac5a pkg/unpack: use mediatype helpers da1196979 pkg/snapshotters: use mediatype helpers f1cbc5f90 containerd: use mediatype helpers 4b1bb1293 remove github.com/opencontainers/runc dependency 62f621a34 images: simplify mediatype logic 377c5ca9c images/archive: use mediatype helpers bb8a472f2 images: use mediatype helpers e7254406c Require plugins to succeed after registering readiness 62f273d50 Add migrate subcommand to config command 0320ad184 Add config migration to plugin package f58158e2d Add config migration and bump config version bf4fbe4e8 docs: Update `transfer` service docs to reflect completed implementations for 1.7 b40e95e0e images: Config: explicitly return nil-error 36c2222d3 Add usage calculation test 3b60e9366 Create new imagetest package 4c344f2fa Add warning for plugin configs with unknown fields a9ba33f8f Allow for images with artifacts to pull 650148313 Add warning log for unknown config fields b5615caf1 Update go-toml to v2 8b413daff Remove log package except for exported const used by hcsshim 2f1b92710 Update zfs library to use new log repository 508aa3a1e Move to use github.com/containerd/log f1070c4e1 docs/userns: Clarify requirements for k8s 1.25/1.26 42eee8bf0 fix: Add `containerd` to the message type reference 9e819fb4a Update CRI image store to not use containerd client dcb2e7447 Improve doc of func NewNetNS 2ce971d89 Add delete target to image remove f8fb2dad3 api: update image service to support target in delete request 8e3722c7d CI: Set slow_chown for overlayfs snapshotter 46d3094aa docs/userns: Fix small typo d008d64a8 docs/userns: Clarify containerd 1.7 limitations e37908200 docs/userns: Document the need to opt-in for a slow chown 8bf8e2b97 snapshotter: Use capa prefix consistently for capabilities ec9e0dca9 overlay: Require opt-in if idmap mounts are not supported. 03b9ce56b deprecate logs package, but disable linter (for transitioning) d69ae811d alias log package to github.com/containerd/log v0.1.0 729c97cf3 Handle unexpected shim kill events ed5f7e7c8 Update image in client to use new usage package 96a23ccc1 Create new usage package 79f781d00 Refactor: Removing inherently flaky and unused SourceDateEpochOrNow function. 8cbb4ea5d vendor: github.com/containerd/nri v0.5.0 3ca39ef01 fix: Remove `LimitNOFILE` from `containerd.service` 83240a4f7 Bump crun to 1.9 967313049 doc: Add documentation about CRI user namespaces 2e13d3954 pkg/process: Only use idmap mounts if runc supports it fce1b9507 go.mod: Update runtime spec to include features.MountExtensions a81f80884 Revert "cri: Throw an error if idmap mounts is requested" e832605a8 integration: Simplify WithVolumeMount() 24aa808fe integration: Add userns test with volumes ab5b43fe8 cri/sbserver: Pass down UID/GID mappings to OCI runtime e916d77c8 platforms: move ToProto, FromProto to api/types 381442945 platforms: remove errdefs dependency e0b2b17de cri/server: Add tests for the linux-specific parts of VolumeMounts() 10cb112e4 cri/server: Add tests for ContainerMounts() 97dfa7f55 cri/server: Pass down uidMappings to OCI runtime b42bdd125 release: remove `cri-containerd-*.tar.gz` release bundles 9656b8c0d nri: update mock plugin handlers 6f9de91ef vendor: update github.com/containerd/nri@v0.4.0 f7089ba22 leases: add WithLabel 1480e3bd4 leases: cleanup TestWithLabels d94a789d1 Fix usages of `mountinfo.PrefixFilter` 45e303eea task: expose criu work path opt f77185f9e Fix "even if IPv4 comes first" test to have IPv4 first 88a849626 Don't use `To16() != nil` to detect IPv6 addresses eaf607101 update to go1.21.1, go1.20.8 1a7490c5a Add link to CONTRIBUTING from README 0413f1272 Add contributors guide 05093d7c0 vendor: github.com/cncf-tags/container-device-interface v0.6.1 ac1d556b9 Add image verifier transfer service plugin system based on a binary directory 55b2df560 go.mod: github.com/grpc-ecosystem/grpc-gateway/v2 v2.16.2 a00888db8 fix reference to canonical fieldmask type 0041996ca CI: bump up crun to 1.8.7 4bc0b2660 Revert the removal of the parameter Container 6ec0d4a3a prevent ctr from creating tags with forbidden characters a4bdbf784 content: reduce the contention between ref lock and boltdb lock abfabb6d8 contrib/fuzz: fix redeclared issue 295bcec07 snapshotter: implement unit tests for idmapped mounts for overlay 9d01ed1c3 integration: add test for idmapped mounts e49e6d6fd snapshotter: implement slow path for idmapped mounts check for overlay 1555a31bf mount: support idmapped mount points 723c88ce3 snapshotter: add "--remap-labels" support to overlayfs e8ddf669f snapshotter: support "remap-ids" capability for overlayfs ef6b91947 fix(docs): fix on the windows installation script 5d31e9378 pkg/systemd: use sync.Once for systemd detection 7d0ab4fc2 remove uses of github.com/runc/libcontainer/cgroups 9bc6441c2 vendor: github.com/google/uuid v1.3.1 13ff185ba Blockfile: Enlighten blockfile copy on Darwin a3e8503ed .github: enable fuzz build cd705af89 metadata: add image delete events during garbage collection 3f9756c18 gc: add support for image expiration b32638e21 ctr: pull or fetch image metadata by default 20f79300c push: inherit distribution sources from parent 24aca53fa Update use of content.Infoprovider f8c789f31 content: add InfoProvider interface 02d519ad6 Update hcsshim tag in runhcs-version script a2817ca16 CRI: Include sandbox ID in failed to load error 492347090 replace reference/docker for github.com/distribution/reference v0.5.0 26dcae2f6 fix ossfuzz building error 19d6c37a3 Revert "log: define G() as a function instead of a variable" fd5d92a7f Update hcsshim tag versioning to v0.12.0-rc.0 779875a05 Add missing unpacker.Wait for image import 4f5db2bc0 metadata: format unit test output 15b13fb3e Windows: Supply windows shim version via file 7a0ad09a0 make repositories of install dependencies configurable 34def8b33 Remove redundant nil check fc45365fa Remove most logrus f9c35feb3 Makefile: allow overriding GO_BUILD_FLAGS via environment 490905be6 go.mod: github.com/containerd/continuity v0.4.2 03abceac5 Update LTS description 34f32043b Blockfile: Expose RecreateScratch option b4f487ce9 Apply suggestions from code review 1e3540e11 Add stale bot 4e236962f Update critools to 1.28.0 c92f4a160 Update RELEASES c3f3cad28 Use sandboxed CRI by default b76cd4d9f replace some fmt.Sprintfs with strconv bbdbf7ab6 Add inspect image commands 78308b4a4 Add manifest printer library 11a5dd826 snapshots: replace some fmt.Sprintfs with strconv 06765c9ef oci: replace some fmt.Sprintfs with strconv 710d22366 removes/docker: replace some fmt.Sprintfs with strconv d7bc8694b pkg/cri: replace some fmt.Sprintfs with strconv 73e9cfd1c append k8s 1.28 to releases 6d8329d7f Remove unnecessary joinError unwrap 8399a4ee7 Remove temporary replace 7ad0a6ccf Update to latest releases in RELEASES.md cd8c8ae4b Remove hashicorp/go-multierror 1571a5aa0 ctr: metrics: drop unused retval from printWindowsStats() 7063ae1f6 Makefile: add rule for installing documentation de4c338ab Docs: Document proxy plugin diff support d09f7cbe0 cri: Fix sandbox_mode "shim" 60b2cb143 cmd: containerd: allow building w/o systemd notify 23c95359a Add WithMetaStore to overlay snapshotter to allow bringing your own 0c1ad52ea cri: spec_linux: drop unused retvals eacd74c2b Go 1.21.0 5756cb00e CI: increase timeout for Binaries c883410c9 CI: Explicitly upgrade MinGW on Windows 2019 GitHub runners. 0f043ae43 seccomp, apparmor: add go:noinline 5d9bf7d13 CI: temporarily disable ci_fuzz due to incompatibility with recent Go e2ce4f58f Populate commit memory for windows memory usage stats 823e0420e Fix transfer service dependencies: cfb30a31a Invoke Stable ABI compatibility function in windows platform matcher 0cea317a5 FreeBSD: set default runtime def5ff3c4 Sandbox: Add annotations to controller CreateOptions 939ccbed4 Sandbox: Add annotations to CreateSandbox surface 1fd3a4652 archive/tarheader: fix FreeBSD hdr for regular files f8edd5555 update runc binary to v1.1.9 f35d1f08e go.mod: github.com/opencontainers/runc v1.1.9 00ef8ba99 Vagrantfile: add strace tool 601699a18 integration: add ShouldRetryShutdown case based on #7496 8dcb2a6e6 pkg/cri/sbserver: fix leaked shim issue for podsandbox mode 72bc63d83 pkg/cri/server: fix leaked shim issue 5bdd9ca93 integration: add case to reproduce #7496 b451fa96a bump client-go v0.26.4 a645ff2e6 Update dependencies after protobuf update in hcsshim e7e5619fe Update hcsshim tag to v0.10.0 54baf766e add metrics for discarding events 189a1599c archive/compression: update out of date RFC draft link cac8b6f4b Makefile: allow overriding the binary executable target dir 90443f038 CI: update Rocky Linux to 8.8 0a57dc2a0 CI: update Fedora to 38 30dd0a17f CI: install Vagrant from Hashicorp 965641dbc Makefile: allow REVISION be overwritten by environment fc32197d4 Makefile: fix overriding go command 2d3360ec7 CI: move Vagrant tests to GitHub Actions (larger runners) 4f3c8c468 replace mcr.microsoft.com registry to ghcr.io/containerd registry d41c62a55 .github/workflows: add dmesg step for integration-linux fd8778fba delete checkout branch in doc c62abcb14 docs: document CRI cgroup driver auto detection c80a3ecaf cri/sbserver: Use platform instead of GOOS for userns detection 157dff281 update to go1.20.7, go1.19.12 687a5f51a fix: allow attaching to any combination of stdin/stdout/stderr aa8b094ab platforms: clarify docs for amd64/arm64 variant normalization 710d987d2 Fix default platform matcher when ctr import 2d64ab8d7 cri: Don't use rel path for image volumes 85a2c9a01 log: swap logrus functions with their equivalent on default logger 6baff1694 log: add package documentation and summary of package's purpose 238da2c52 log: make Fields type a generic map[string]any 634a4a1bb log: add log.Entry type dd67240f1 log: define OutputFormat type 778ac302b log: define G() as a function instead of a variable 81ac648d9 log: add all log-levels that are accepted 0b6333a41 log: group "enum" consts and touch-up docs 4a36022e2 log: WithLogger: remove redundant intermediate var 40ee5fb11 log: SetFormat: include returns in switch 6fe7e03b8 log: remove testify dependency e2ad5a985 removes/docker: remove unnecessary conversion (unconvert) ed47d6ba7 cri: implement RuntimeConfig rpc a1cdf60cb docker: add test to ensure not found error is returned by resolve b4814a29d docker: return most relevant error from docker resolution 7f7ba31b6 cri: fix using the pinned label to pin image 480757135 pkg/epoch: fix Y2038 on 32-bit hosts 98974117b migrate to community owned bucket a3404ac42 docker: add missing info log for 4XX/5XX responses 850b2e1bf go.mod: update cri-api to v1.28.0-beta.0 480bc8a2b .github/workflows/ci.yml: upgrade Ubuntu from 20.04 to 22.04 bc96b9039 go.mod: github.com/AdamKorcz/go-118-fuzz-build v0.0.0-20230306123547-8075edf89bb0 da2740885 go.mod: google.golang.org/genproto v0.0.0-20230720185612-659f7aaaa771 73dc13ad6 go.mod: github.com/urfave/cli/compare v1.22.14 1c4fc568b go.mod: github.com/prometheus/client_golang/compare v1.16.0 68abb525a go.mod: github.com/minio/sha256-simd v1.0.1 1f2216cc7 go.mod: github.com/klauspost/compress v1.16.7 3c6ab0420 go.mod: dario.cat/mergo v1.0.0 4bda0a69e go.mod: github.com/grpc-ecosystem/go-grpc-middleware v1.4.0 0f033b612 go.mod: github.com/emicklei/go-restful/v3 v3.10.2 90e050298 go.mod: github.com/containernetworking/plugin v1.3.0 0498acefb go.mod: github.com/.../container-device-interface v0.6.0 74b8cb850 go.mod: github.com/opencontainers/runc v1.1.8 895dd2e93 go.mod: github.com/opencontainers/image-spec v1.1.0-rc4 235a4452d go.mod: github.com/opencontainers/runtime-spec v1.1.0 06f18c69d cri: memory.memsw.limit_in_bytes: no such file or directory f3daf32c7 Fix ro mount option being passed b2967a8d6 update runc binary to v1.1.8 90ecb8104 fix: `ctr images check` outputs not unpacked images in quite mode 98f27e1d9 Revert "Add support for mounts on Darwin" e939d1319 Revert "Revert 416899fc8e81a80a4b09b59c801f98d36ddc0e74" 6c9c71112 Revert 416899fc8e81a80a4b09b59c801f98d36ddc0e74 2799b28e6 Add support for mounts on Darwin 56d80f81a Update hcsshim tag to v0.10.0-rc.9 9c673f967 pkg/cri/server: TestImageGetLabels: use registry.k8s.io f914edf4f [cri] Handle Windows pod transitions gracefully 52ef3468b Update Go to 1.20.6,1.19.11 48cdf1fe2 integration: Enable userns tests for sbserver 9160386ec cri/sbserver: Test net.ipv4.ping_group_range works with userns 1c6e26844 cri/sbserver: Fix net.ipv4.ping_group_range with userns 36a96d7f3 cri/sbserver: Remap snapshots for sbserver too 508e6f6e0 cri/sbserver: Add userns tests to TestLinuxSandboxContainerSpec() fb9ce5d48 cri/sbserver: Support pods with user namespaces c99cb95f0 cri/sbserver: Let OCI runtime create netns when userns is used 73c75e2c7 cri/sbserver: Copy userns helpers to podsandbox 0b6a0fe77 cri/sbserver: Move runtimeStart to match position with cri/server 90087ac44 WithRemapperLabels: Update doc to mention overlay supports it 9d9903565 cri: Fix comment typos 9e34b8b44 Uncopypaste parsing of OCI Bundle spec file 232538b76 bugfix(port-forward): Correctly handle known errors 5c480d9c8 Modify loopback size 7ef133ad4 Fix mount pkg typo 83ff030e4 Change http.Header copy to builtin Clone cdb153ec9 Resolve docker.NewResolver race condition 01a6e1c73 Dedup WithNewSnapshotView 6a913ac82 Cirrus CI: configure apt-get to wait for locks 38f9bc3e0 fix ci Linux Integration test fail c17d3bdb5 pkg/cri/server: Test net.ipv4.ping_group_range works with userns 9bf5aeca7 pkg/cri/server: Fix net.ipv4.ping_group_range with userns 05fef52b6 vendor: github.com/containerd/zfs v1.1.0 073de9308 Fix the auto restart fail when using LogURI and TTY together 00e5ae211 shim: change ttrpcService and ttrpcServerOptioner to exported interfaces e9f63f64f update go to go1.20.5, go1.19.10 22a7c63c0 Sandbox: Change to mount.Mount for CreateOptions 51a1e7f0b Fix example shim to actually use its task service a9cb6090e ci: remove libseccomp-dev installation for nightly 0607e7326 Move GetTopic function out of runc shim 5dedb6d0d archive: use 1970-01-01 as the whiteout timestamp d6dbc4040 go.mod: Update cgroups to 3.0.2 f3b7436b6 Platforms: Add From/ToProto helpers for types b3ab1f26c Snapshots: Add From/ToProto helpers for types 0a6b8f0ee OCI: Add From/ToProto helpers for Descriptor 4df27fd77 Update ginkgo to match cri-tools' version 9a202e342 seccomp: always allow name_to_handle_at 55a8102ec mount: Add From/ToProto helpers e85352183 integration/client: Rework withBytesBuffers 54a93c6c5 Make ptypes.Empty a var in contentserver cdc90c838 Remove duplicated code in content Copy 50376ec9f remotes: allow FetchByDigest client to pass mediatype as header 0a92661e6 Add a platform.ParseAll helper e89d7204e MergeStringSlices use sets 8760b8717 pkg/epoch: extract parsing SOURCE_DATE_EPOCH to a function 9924e56f4 pkg/epoch: fix tests on macOS dfd7ad8b3 Reword Windows file related TODO 44e2b26a8 pkg/epoch: replace some fmt.Sprintfs with strconv f82d9b799 Integration: Align empty IO func on Windows f3124d569 Makefile: Remove hcsshim related TODO 2aeac9a8f Remove duplicated writeIndex func 7601dd9a9 Dedup manifest config platform helper f3df7f739 log when a lease expires a01118bbe Minor changes to sandbox metadata f60a4a271 cri: drop unused arg from generateRuntimeOptions 1fb835f04 Remove unnecessary label bucket loop a207b430e snapshots/blockfile: fix lint issue 59b0b39af vendor: update github.com/containerd/continuity d358f1680 fix unbound variable f4ad68d5f fix-push-image-rate 7de95cbc4 snapshots/blockfile: deflaky the testsuite 6dfb16f99 snapshots|pkg: umount without DETACH and nosync after umount 72b7d1650 mount: support direct-io for loopback device 437f13410 Don't run CI on push e26c97cb8 Save marshalled empty response in streaming service 9e09bfb59 Use RWMutex in NSMap and reduce lock area 38b0f970f No more nondistributable layers in MS registry d278d37ca Sandbox: Add Metrics rpc for controller d115129d1 Add configurable mount options to overlay d56722ef2 Sandbox: Add SandboxMetrics rpc 4bb709c01 avoid "any" as variable name 577696f60 replace some basic uses of fmt.Sprintf() 5cd6210ad runtime/v2/runc: handle early exits w/o big locks df280942a integration/client: add timeout to `TestShimOOMScore` 6dd529e40 Pass in imagespec.Platform to WithVolumes() d18026592 release ticker correctly 28a5199ff Add a check to skip stats for containers that are not running 34a93a0c2 task: don't `close()` io before `cancel()` 007c5b6e3 Setup otlp from env 104b9ef9e Update x/sys to 0.8.0 69b451af5 RELEASES.md: de-deprecation of CNI conf_template will be v1.7.3 ab5365222 ctr: update WritePidFile to use atomicfile c409c631c shim: WritePidFile & WriteAddress use atomicfile 3c4a1ab1c cri: write generated CNI config atomically on Unix f3ba7c8a3 atomicfile: new package for atomic file writes 28d8c79de Replace atomicBool with the standard library atomic.Bool fe4f8bd88 Pinned image support a85b12d4d docs: cherry-pick individual commits instead of merge commit 738c4c6fa Fix issue for HPC pod metrics 52997ea98 remotes/docker: ResolverOptions: fix deprecation comments a35ead5b9 bugfix: add nil pointer check for cgroup v1 mem usage 2a60fe5a6 Remove events from init context d3887b2e6 Support CDI devices in ctr --device flag 3ca5b4437 Remove cni conf_template deprecation 94f0af3ec Image.IsUnpacked(): make error-handling more iodiomatic 54658a115 Image: rename variable that shadowed import d2b7a1e29 cleanup DEPRECATED TLS config f857626d6 Move PLEG event back to CRI fc50334ca Generate sandbox exit events from CRI d2605de73 add handling of a '.' commondir and bounds checking to mount_linux cf5605459 Move pod sandbox recovery to podsandbox/ package 45dbb4e54 Publish sandbox events 65906335b Add sandbox events protos 21b3318eb Fix several conversions of "ocispec.Image" to "ocispec.Platform" f2bc73782 Add cpuset-mems flag to 'ctr run' command f642c0a5f ctr: add cpuset-cpus flag to 'ctr run' command 314d758fa update auths code comment 9702d4aee snapshots/blockfile: use passed in dst in scratchGenerator bb82f3683 snapshots/blockfile: use loop if options is empty 9287711b7 upgrade registry.k8s.io/pause version fbb38ab6b Fix the spelling of repository within the NRI plugin documentation. 752e13d9a fix(docs): minor fix on the windows installation steps c1b926800 Windows Integration: Switch Azure-based CI to vanilla 2019 image. b9dfd29b7 Update tests to use volume-copy-up:2.2 4bfcac85f notify readiness when registered plugins are ready 7819da843 Document Protocol Buffer Setup 579b5596c Update volume-ownership image with latest hashes 88a3e25b3 Add targetOS to WithVolumes() c7ec95caf Reword comment and make slight change to code ec2bec648 Fix non C volumes on Windows 3d7522b7f ctr: allow run to override mounts 7beaa5e85 Add mount options to blockfile snapshotter 261d45efe docs/remote-snapshotter.md: update links and description 7274e33e3 CRI: Make stats respect sandbox's platform 82deabf9d Optimize metadata Schema notes to correctly match metadata structures a6cd5e3f4 bugfix: resolve symlink when looking up mountpoint b9f2e48e3 feat: make overlay sync removal configurable becf04a59 Update to docker/login-action V2 79709a205 disable provenance 1be571b14 Add sync before unmount on snapshotter layer test b729962e3 Add blockfile snapshotter to snapshotters doc 798dba9fa Add blockfile as a builtin 0c386e2eb Add blockfile snapshotter d280cb83b chore: update comment for NetworkPluginSetupSerially f8907ab87 Update volume-copy-up 811456b31 go.mod: github.com/containerd/continuity v0.4.0 6f715ab10 go.mod: github.com/containerd/go-runc v1.1.0 85cf9a09e Bump seccomp version to be the same as one in runc repo cdaa4025e Fix some typos 3d9dd2022 ctr: fix the cleanup of task 66307d0b4 CRI: Support Linux usernames for !linux platforms 5dbae3819 snapshots/testsuite: Rename: fix fuse-overlayfs incompatibility df65e321e Simplify closing bundle dir fd 718250b6b Update ttrpc to v1.2.2 7e42dc34d improve container Task comment 4347fc8bc go.mod: github.com/opencontainers/image-spec v1.1.0-rc3 5e054ee63 go.mod: github.com/opencontainers/runtime-spec v1.1.0-rc.2 bb61a6d4b cache diffIDs 6e2c915a4 Bump up golangci-lint to v1.52.2 ecb693ec7 bump typeurl to v2.1.1 f5211ee3f Change to Readdirnames for some cases e60a17925 .github: disable cache for actions/setup-go@v4 52afa34f5 cri: update WithoutDefaultSecuritySettings comment 6f34da5f8 Cleanup logrus imports 717169bb8 plugin: remove go < 1.8 stub, enable on windows and arm64 28d749c9e move to CRI-TOOLS v1.27.0 27f56e607 Fix umarshal metrics for CRI server b947a6f52 update go to go1.20.4, go1.19.9 c54b706c0 Add faasd and actuated into the ADOPTERS file d56466cf3 [transfer] avoid setting limiters when max is 0 2e53c0ec8 Windows integration: fix critest binary path in Azure-based workflow. 9e7f8fe30 Update CRI registry configuration docs 0d975230e Fix panic when remote differ returns empty result c58a229e5 Run CI when adding to the merge queue 0ba066474 vendor: github.com/opencontainers/runc v1.1.7 cbd10e41a vendor: github.com/opencontainers/runc v1.1.6 27c0fe3eb update runc binary to v1.1.7 4891bba83 Update tar tests to run on Darwin d9f3e387c Remove entry for container from container store on error 8ba285f6b fix unable to checkpoint the container more than once 370be0c18 Move logrus setup code to log package 92b93e376 cri: Vendor v0.27.1 8c80ccc7f Update external repo links that changed default branch to main 519457e3e ctr: Add sandbox flag to ctr run c786994ea Update transfer configuration 4e5693938 Add platform config to proxy plugins 4192ca8f8 pkg/cri/server: sub-test uses array and capture range var 8bcfdda39 pkg/cri/sbserver: sub-test uses array and capture range var 745ec84e5 Add diffservice to contrib 3784c1c91 Add proxy differ cb2c3ec8f oci: partially restore comment on read-only mounts for uid/gid uses f23816740 go.mod: add comment explaining go-fuzz-headers replace rule ec9e74ed9 go.mod: remove replace for github.com/opencontainers/runtime-tools 6c40cf305 go.mod: integration: use non-pre-release of containerd 92d1e9bee go.mod: integration: move indirect dependencies to the right group 18d7e84f9 runtime/shim: fix the nil checkpoint options cd16b31cd Get CDI devices from CRI Config.CDIDevices field da4de96e2 containerd support k8s 1.27 4b35c3829 update shim example 71ababe30 runtime/shim: remove runc/v2/services b71f4b751 runtime/shim: rename RunManager to Run 49111b115 update runc binary to v1.1.6 85df1cc6b doc: update CI signal info in README 7e6ab8488 cri: Throw an error if idmap mounts is requested 85afda6f5 cri: Vendor v0.27.0-beta.0 for mounts uid/gid mappings f7b8b1181 update the version of the runc shim in the readme and examples dc2fc987c capture desc variable in range variable just in case that it run in parallel mode 05bb52b27 Use t.TempDir instead of os.MkdirTemp 7a7519a78 CRI Sbserver: Make PodSandboxStatus friendlier to shim crashes 79cb4b000 [sbserver] handle missing cpu stats 464a4977a [sbserver] Refactor usageNanoCores be to used for all OSes e0b817ec1 Fix argsEscaped tests aee358765 Update to setup-go@v4 action 811be6085 Update Azure-based Windows workflow image SKUs. dfc7590d5 remotes/docker: Add MountedFrom and Exists push status db223271e Register imagePullThroughput and count with MiB 6f0714efc Use RunWithPrivileges b41ca1159 Fix access denied on mounted vhdx root a7fddb40b Use wait instead of a sleep to check for startup delay d0527e228 Support for dropping inheritable capabilities 0fb2d9132 update go to go1.20.3, go1.19.8 cab056226 oci: Use WithReadonlyTempMount when adding users/groups c9e5c33a1 UnmountAll is a no-op for missing mount points 8538e7a2a Improve error messages and remove check ba74cdf15 Make ReadOnly() available on all platforms 7bb2756bc Increase integration test tmieout to 20m 1279ad880 Remove bind code path in mount() 6a5b4c9c2 Remove "bind" code path from diff 76690706f CI: bump up crun to 1.8.3 d373ebc4d Properly mount base layers ca5605b4a Skip parent layer options on bind mounts 7f82dd91f Add ReadOnly() function 157fe6a13 docs: fix typo in comment of ExitStatus.Exit(Code|Time) 4012c1b85 Remove escalated privileges 54f8abe55 Use DefaultSnapshotter 47dd3dcff use t.Fatal if we cannot enable process privileges e31bef15f Update continuity 95687a932 Fix go.mod, simplify boolean logic, add logging 7a36efd75 Ignore ERROR_NOT_FOUND error when removing mount db3279859 Update continuity, go-winio and hcsshim 00efd3e6d Remove unused function dc980b14a Grant needed privileges for snapshotter tests feb637f92 Fix layer comparison and enable read-only checks 36dc2782c Use bind filer for mounts d591bb042 Enable TestSnapshotterClient on Windows 7b36becd2 Run Windows snapshotter through the test suite ac30eabbd Fix misspelling of 'Native' as 'Naive' 639c5799a Add paired 'mount' log for 'unmount' 8395e3a89 Don't use all-upper-case filenames in snapshot tests 909730dec Skip tests that do not apply to WCOW on Windows 469c13997 Ensure mounts are unmounted before leaving the test 84cc3e496 Unify testutil.Unmount on Windows and Unix 474a257b1 Implement Windows mounting for bind and windows-layer mounts 34b07d3e2 Implement WCOW parentless active snapshots and view snapshots 82ec62b86 fix: cio.Cancel() should close the pipes ac84bf7c8 Update sbserver to add noexec nodev and nosuid to /etc/resolv.conf mount bind. 126ab72fe Keep linux mounts for linux sandboxes on Windows/Darwin 990199a02 Test to ensure nosuid,nodev,noexec are set on /etc/reolv.conf mount. 96490734b update runc binary to v1.1.5 b55dad06a go.mod: github.com/opencontainers/runc v1.1.5 c89438e83 integration: add container start test using abs runtime path 3557ac884 Extract image service from CRI 97064b077 WithRuntimePath uses the TaskInfo.RuntimePath field c56f54aa1 devmapper plugin: skip plugin when not configured a11e47b48 Use built in atomic.Bool 87346df54 Defer uid lookups on Darwin ae4dbb60d Add noexec nodev and nosuid to sandbox /etc/resolv.conf mount bind. 1be08b10f ctr/tasks: fix unmarshal the task metrics for cgroups v1 8322bcb88 Adds a file header 50b576a94 Adds a dev container and Codespaces docs 0bbca7f1b Cleanup protobuild config daa3a7665 Add `WithReadonlyTempMount` to create readonly temporary mounts f48ae2227 fix: Update error message format based on feedback 3193650f1 fix: 'failed to resolve symlink' error messaging 14714b94d Fold the output of `crictl info` 5fdca538d adding cni metadata to the container in the `ctr run --config` 32d431a7c Update crictl doc 690ae58ca Update cri-tools version on windows 5956cdea8 Remove third-party package cri-api c011502bd Remove cri v1alpha1 services 23d288a80 Remove the CriuPath field from runc's options 62f98a1c1 CRI: Don't always close netConfMonitor channel a4d33a784 Remove support for config.toml `version = 1` 3e87f05b6 Fix image pulling with Transfer service c5f1086ad Update docs fda5c84bc Update gce contrib to use v2 by default 8bd82e355 Remove no_pivot when creating container from CRI 07c2ae12e Remove v1 runctypes c50a3ef04 Update Makefile and CI ef516a150 Remove runtime v1 76778aee6 integration: add restart monitor test for paused task 35a103d32 Remove "containerd.io/restart.logpath" label (deprecated since v1.5) 08337f356 Pre-splice strings and determine whether it is a file and check criCleanup err. e0d9b9663 Fix restarting the paused containers 86fc1ccab Remove `aufs` snapshotter (deprecated since v1.5) 50740a1a0 use strings.Cut instead of strings.Split for parsing imageConfig.User b39ac5d09 docs: fix typo in comment of plugin.Plugin.Err() d835fd2a3 Sandbox: Correct/add some fields to Status() d3e856da7 export: add test for WithSkipDockerManifest 70da5c783 Sandbox: Cleanup shim on Start failure 406583165 archive: consistently respect value of WithSkipDockerManifest 727b25403 fix userstr for dditionalGids on Linux Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to 1.7.7Bruce Ashfield2023-11-061-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping containerd to version v1.7.7-5-g5e21abb18, which comprises the following commits: d0a1fedb5 *: add runc-fp as runc wrapper to inject failpoint 04491240a containerd-shim-runc-v2: avoid potential deadlock in create handler 6982a0df5 containerd-shim-runc-v2: remove unnecessary `s.getContainer()` 0e2320398 Uncopypaste parsing of OCI Bundle spec file a34fa5681 Prepare release notes for v1.7.7 6ca0aebf0 Allow for images with artifacts to pull 7df492a95 remotes/docker: Fix MountedFrom prefixed with target repository 7779ce64e remotes: always try to establish tls connection when tls configured b3db314a5 Bump x/net to 0.13 a83c66813 Require plugins to succeed after registering readiness 171d76849 cri: call RegisterReadiness after NewCRIService 6013b5e03 cri: stop recommending disable_cgroup 3d27bc738 Handle unexpected shim kill events 4ffa3ed29 Build binaries with 1.21.1 5756f6064 [release/1.7] vendor: github.com/Microsoft/hcsshim v0.11.1 09633b539 deprecate logs package, but disable linter (for transitioning) cb201519f alias log package to github.com/containerd/log v0.1.0 a5024e6dd vendor: github.com/stretchr/testify v1.8.4 7bd976af3 vendor: github.com/sirupsen/logrus v1.9.3 3ca015e55 nri: update mock plugin handlers 4cd208c1f vendor: update github.com/containerd/nri@v0.4.0 8cd2d33c2 [release/1.7] remotes/docker: Add MountedFrom and Exists push status 3e09c65b2 Prepare release notes for v1.7.6 5ebf05d97 push: inherit distribution sources from parent d206896dd content: add InfoProvider interface 423693d7b [release/1.7] update to go1.20.8 c7a35ccdc Fix transfer service dependencies: 38d4e506d Invoke Stable ABI compatibility function in windows platform matcher ddffc7c9a Update hcsshim tag to v0.11.0 b449440a4 CRI: Support Linux usernames for !linux platforms Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to 1.7.5Bruce Ashfield2023-09-151-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping containerd to version v1.7.5-8-g86dc86e62, which comprises the following commits: ed4bac11e Blockfile: Enlighten blockfile copy on Darwin 4d1cfbbdd Revert "log: define G() as a function instead of a variable" a34e93241 make repositories of install dependencies configurable b449440a4 CRI: Support Linux usernames for !linux platforms 503ab21bf go.mod: github.com/containerd/continuity v0.4.2 93b23eb10 Prepare release notes for v1.7.5 fb1292c8d Bump version to v1.7.4 7a0cae3ca [release/1.7] Prepare release notes for v1.7.4 537d7526e integration: issue7496 case should work for runc.v2 only 0f4885c16 Add configurable mount options to overlay 8804a27d7 feat: make overlay sync removal configurable 5add172be Vagrantfile: add strace tool 207e28f36 integration: add ShouldRetryShutdown case based on #7496 b4f480fb3 pkg/cri/sbserver: fix leaked shim issue for podsandbox mode 88ff575c5 pkg/cri/server: fix leaked shim issue 9f61dfb7c integration: add case to reproduce #7496 2a9ae3c51 log: swap logrus functions with their equivalent on default logger 01445bb73 log: add package documentation and summary of package's purpose 932795f45 log: make Fields type a generic map[string]any 707ca94d8 log: add log.Entry type 0a79e67e4 log: define OutputFormat type dbbe28b7d log: define G() as a function instead of a variable 93b6cb784 log: add all log-levels that are accepted e8e086e02 log: group "enum" consts and touch-up docs 7aa4f8fdc log: WithLogger: remove redundant intermediate var bfdce4ce4 log: SetFormat: include returns in switch 6621e0888 log: remove testify dependency df76aaede removes/docker: remove unnecessary conversion (unconvert) 1c2dd5198 Remove temporary replace 2bf6bd143 vendor: update github.com/containerd/continuity 30a163086 snapshots|pkg: umount without DETACH and nosync after umount c9eebe3d1 mount: support direct-io for loopback device 1c2977db0 Modify loopback size cf9c78d2d snapshots/blockfile: fix lint issue b823b4f54 snapshots/blockfile: deflaky the testsuite 6daeceb11 snapshots/blockfile: use passed in dst in scratchGenerator 99b61aee3 snapshots/blockfile: use loop if options is empty fd39769ac Add mount options to blockfile snapshotter 8d732c6c2 Add sync before unmount on snapshotter layer test 8472a407e Add blockfile snapshotter to snapshotters doc 6740d77ca Add blockfile as a builtin 07cc24b32 Add blockfile snapshotter 32e3b76ee Add diffservice to contrib 661e505c8 Add proxy differ af79c07fd update runc binary to v1.1.9 c0b1c8f74 fix ci Linux Integration test fail 4e97a115f cri: Don't use rel path for image volumes 34a5d0330 fix: allow attaching to any combination of stdin/stdout/stderr c5e7b84c0 update to go1.20.7, go1.19.12 2eaeb3205 Fix ro mount option being passed Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* recipes/classes/scripts: Drop SRCPV usageBruce Ashfield2023-08-241-1/+1
| | | | | | | | | bitbake has been enhanced such that SRCPV is no longer needed in PV to handle updating git hashes and task signatures. We can simplify our PV by dropping SRCPV Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to 1.7.2Bruce Ashfield2023-08-241-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping containerd to version v1.7.3-2-g98e8e05b6, which comprises the following commits: 2eaeb3205 Fix ro mount option being passed 4cb2f1515 [release/1.7] Add release notes for v1.7.3 b461ecacf cri: memory.memsw.limit_in_bytes: no such file or directory 14328ae03 migrate to community owned bucket b985f7ef1 update runc binary to v1.1.8 f7a20e17c Move logrus setup code to log package 7353c0286 ctr: update WritePidFile to use atomicfile ae7021300 shim: WritePidFile & WriteAddress use atomicfile 186eb64b7 cri: write generated CNI config atomically on Unix 64c3dcd8e atomicfile: new package for atomic file writes 083f57160 capture desc variable in range variable just in case that it run in parallel mode a9440ce6b Use t.TempDir instead of os.MkdirTemp eea3440d8 use strings.Cut instead of strings.Split for parsing imageConfig.User eace67180 fix userstr for dditionalGids on Linux 973778193 Update Go to 1.20.6,1.19.11 60a6db9c2 Cirrus CI: configure apt-get to wait for locks 6b6b0c828 bugfix(port-forward): Correctly handle known errors 898eca21e Change http.Header copy to builtin Clone fa2efc406 Resolve docker.NewResolver race condition 241514815 pkg/cri/server: Test net.ipv4.ping_group_range works with userns 801e8c806 pkg/cri/server: Fix net.ipv4.ping_group_range with userns d5639a5a8 vendor: github.com/containerd/zfs v1.1.0 403033e52 update go to go1.20.5, go1.19.10 15d65709e ci: remove libseccomp-dev installation for nightly a08ae718c [release/1.7] go.mod: Update cgroups to 3.0.2 c2c54af9d Update ginkgo to match cri-tools' version 6281d46df seccomp: always allow name_to_handle_at 3bf3996d9 integration/client: add timeout to `TestShimOOMScore` 699d6701a Pinned image support 18c6503d9 runtime/v2/runc: handle early exits w/o big locks dafbeb5b1 No more nondistributable layers in MS registry Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to 1.7.2Bruce Ashfield2023-07-251-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping containerd to version v1.7.2-13-ga766dc550, which comprises the following commits: dafbeb5b1 No more nondistributable layers in MS registry e5b2a0131 task: don't `close()` io before `cancel()` a6a15afe3 move to CRI-TOOLS v1.27.0 58b6b99cd Add a check to skip stats for containers that are not running 0b2b96479 RELEASES.md: de-deprecation of CNI conf_template will be v1.7.3 a24267b28 Remove cni conf_template deprecation 89415fe36 Fix issue for HPC pod metrics e134b6393 Fix panic when remote differ returns empty result 0e41daaea [release/1.7] Prepare release notes for v1.7.2 99582fb1a fix: cio.Cancel() should close the pipes eeda70fb0 remotes/docker: ResolverOptions: fix deprecation comments 313c226b8 Update continuity to a tagged version e21c8beee Post cherry-pick fixes 246240f71 Move PLEG event back to CRI 16f3726dd Generate sandbox exit events from CRI 0c8cfb1a7 Move pod sandbox recovery to podsandbox/ package 91d9f5c64 Publish sandbox events 4b77683b4 Add sandbox events protos 8dd16285a UnmountAll is a no-op for missing mount points acff3eefa Improve error messages and remove check b4dd3bf4e Make ReadOnly() available on all platforms 08d8baf3f Increase integration test tmieout to 20m 1f0dbd011 Remove bind code path in mount() 8f37b1c63 Remove "bind" code path from diff 9139208b3 Properly mount base layers e61e7b312 Skip parent layer options on bind mounts e4307926f Add ReadOnly() function 0277b9b01 Remove escalated privileges d5c18dfb7 Use DefaultSnapshotter 853179366 use t.Fatal if we cannot enable process privileges 5b3ee413f Update continuity 375172604 Fix go.mod, simplify boolean logic, add logging 600abd137 Ignore ERROR_NOT_FOUND error when removing mount df7295dcd Update continuity, go-winio and hcsshim 0db78c482 Remove unused function 219058766 Grant needed privileges for snapshotter tests 96fbe5bc8 Fix layer comparison and enable read-only checks 279e0d3c9 Use bind filer for mounts 93e94da40 Enable TestSnapshotterClient on Windows 3a3da693a Run Windows snapshotter through the test suite e7b62322f Fix misspelling of 'Native' as 'Naive' e1f999a18 Add paired 'mount' log for 'unmount' 5788d6e52 Don't use all-upper-case filenames in snapshot tests 3cdcb2f10 Skip tests that do not apply to WCOW on Windows b0968b8bb Ensure mounts are unmounted before leaving the test b57424851 Unify testutil.Unmount on Windows and Unix b9a8aad45 Implement Windows mounting for bind and windows-layer mounts 1a64ee183 Implement WCOW parentless active snapshots and view snapshots 7851b0a9f CRI: Make stats respect sandbox's platform 8d7c340ca [sbserver] handle missing cpu stats d08b2a088 [sbserver] Refactor usageNanoCores be to used for all OSes 2c38cad77 notify readiness when registered plugins are ready 08de6e7b8 Update volume-ownership image with latest hashes 6a5e54c15 Get CDI devices from CRI Config.CDIDevices field Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: fix HOMEPAGEChen Qi2023-06-261-1/+1
| | | | | | | The previous HOMEPAGE has been archived. Use the active one. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to 1.7.1Bruce Ashfield2023-06-071-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping containerd to version v1.7.1-4-g835383b17, which comprises the following commits: 6a5e54c15 Get CDI devices from CRI Config.CDIDevices field 9e60300ea snapshots/testsuite: Rename: fix fuse-overlayfs incompatibility 7b288e2d7 Update ttrpc to v1.2.2 27a0d957b Prepare release notes for v1.7.1 0e0532eb2 bump typeurl to v2.1.1 35e86f96c [transfer] avoid setting limiters when max is 0 f7233811f Update transfer configuration 4510eac00 Fix image pulling with Transfer service aaa65e8c1 Update hcsshim tag to v0.10.0-rc.8 95ef67e19 Fix umarshal metrics for CRI server 3ef5b689a runtime/shim: fix the nil checkpoint options 021bba28b update go to go1.20.4, go1.19.9 6b3ae0129 Remove entry for container from container store on error c0e128624 skip TestContainerStartWithAbsRuntimePath if the runtime is v1 aa3c63c15 integration: add container start test using abs runtime path d2d9eedb1 WithRuntimePath uses the TaskInfo.RuntimePath field fae4b6223 update runc binary to v1.1.7 571715a9d cri: Vendor v0.27.1 a6d336c1f Fix argsEscaped tests 1bbf98e53 oci: partially restore comment on read-only mounts for uid/gid uses 8f6e86fec go.mod: add comment explaining go-fuzz-headers replace rule 1ece0cb50 go.mod: remove replace for github.com/opencontainers/runtime-tools e9f962187 go.mod: integration: use non-pre-release of containerd 84393b005 go.mod: integration: move indirect dependencies to the right group dec2595af update runc binary to v1.1.6 7de8629be cri: Throw an error if idmap mounts is requested 75ac7e0d8 cri: Vendor v0.27.0-beta.0 for mounts uid/gid mappings 54d12b872 oci: Use WithReadonlyTempMount when adding users/groups 624327651 update go to go1.20.3, go1.19.8 1d6641b7c export: add test for WithSkipDockerManifest 0e0d84f6b archive: consistently respect value of WithSkipDockerManifest 9b4935d86 Update sbserver to add noexec nodev and nosuid to /etc/resolv.conf mount bind. 5e953cfa6 Test to ensure nosuid,nodev,noexec are set on /etc/reolv.conf mount. 0aad93f08 Add noexec nodev and nosuid to sandbox /etc/resolv.conf mount bind. 1a64f1b43 ctr/tasks: fix unmarshal the task metrics for cgroups v1 17c52a26d Keep linux mounts for linux sandboxes on Windows/Darwin d81fc15af update runc binary to v1.1.5 755efbe64 go.mod: github.com/opencontainers/runc v1.1.5 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to 1.7.0Bruce Ashfield2023-04-051-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping containerd to version v1.7.0-11-g6ea9bc57f, which comprises the following commits: d81fc15af update runc binary to v1.1.5 755efbe64 go.mod: github.com/opencontainers/runc v1.1.5 90591db47 Defer uid lookups on Darwin b7d87b190 Add `WithReadonlyTempMount` to create readonly temporary mounts 1c1b6bcb2 CRI: Don't always close netConfMonitor channel cf2e454bf Sandbox: Correct/add some fields to Status() ce68e8e0d Sandbox: Cleanup shim on Start failure e13a9165e Prepare release notes for v1.7.0 625217d5f RELEASES.md: describe the deprecated config properties 703e2ba4b docs: link docs/managed-opt.md to client.Install f2bb9c9b0 Go 1.20.2 56354c7de Update ttrpc to v1.2.1 5144ba9c4 sandbox: create sandbox with network namespace path dd3eedf3c labels: Add LabelDistributionSource 5c9c630c3 use uppercase letters for flag usage 0efc498d3 Prepare release notes for v1.7.0-rc.3 ff4acdc42 metadata: add comments about Image.CreatedAt 6d46bb410 go.mod: go.opentelemetry.io/otel/* v1.14.0 d26587c72 archive: disable looking up usernames and groupnames on the host 535ef5054 go.mod: github.com/stretchr/testify v1.8.2 2b4f830ed go.mod: github.com/opencontainers/selinux v1.11.0 6bfc82daf go.mod: github.com/opencontainers/runtime-spec v1.1.0-rc.1 7c70185ae go.mod: github.com/klauspost/compress v1.16.0 8e67b2731 go.mod: github.com/imdario/mergo v0.3.13 6afec5558 go.mod: github.com/emicklei/go-restful/v3 v3.10.1 c4f928f88 go.mod: github.com/containerd/ttrpc v1.2.0 5630d6a84 go.mod: github.com/containerd/fifo v1.1.0 6d9513231 go.mod: github.com/containerd/cgroups/v3 v3.0.1 da1ffdd75 go.mod: github.com/Microsoft/hcsshim v0.10.0-rc.7 60738e31d Update imgcrypt to v1.1.7 8a4d409b9 Add release notes for v1.7.0-rc.2 d602c9aec docs: fix typo of shim.RunManager's function comment f70657650 feat: tag image using Transfer api f7eb86ef3 Sandbox: Delete shim+shutdown sandbox on create failure 6b4b6956e Sandbox: Fix/enhance error messages for Create 8ce3e4e15 epoch: fix unit test when SOURCE_DATE_EPOCH is set 32ed559c8 Add Windows Sandbox Stats (sbserver) 08aa576a9 Add Windows Sandbox Stats 8137e41c4 Add ArgsEscaped support for CRI 5946c1051 *: fix code style issue 98cb6d7eb cri/sbserver: ignore the NOT_FOUND error in exec cleanup 01671e9fc cri: add config ut for invalid drain io timeout value 55e25f164 integration: add testcase to drain exec IO in time ffebcb122 cri: disable drain-exec-IO if it is empty timeout 791f137a5 *: update drainExecSyncIO docs and validate the timeout 13bf5565e [transfer] update export to use image store references e2283edef [transfer] update export API types f6491b004 feat: export images using Transfer api b9d7eae1a feat(api): add fields to ImageExportStream 3c18decea *: add DrainExecSyncIOTimeout config and disable as by default a9cbddd65 *: fix typo and skip exec-io-drain-testcase in win b91f42a14 ctr/tasks: support remapped UID/GID 2e96ba95e Create config struct to take user input f25ec98d0 Fix linting error `sets.String is deprecated` 8145b15f0 Bump k8s.io deps 04dfd6275 pkg/cri/sbserver: add timeout to drain exec io 82c0f4ff8 pkg/cri/server: add timeout to drain exec io 43d36a254 Add experimental section to RELEASES.md cd84f752c Prepare release notes for v1.7.0-rc.1 ae42f836f Update mailmap 4522ad886 Update CRI guide link 57fb2d30f Add max shim version environment variable 5c6e9f83d Fix streaming manager deadlock on collection acf6e9411 Update README with location of security audits 30883d831 Increase CI workflow timeout on Windows. af7477e43 docs: fix typos in historical/design/data-flow.md 6b589a89f releases: mark 1.5 as EOL dba6f9db1 Add version to shim protocol 36ae2f6b9 bump go-cni to v1.1.9 cf46d3c6f Treat sandboxes as root gc resources and scan referenced objects 35d42b47f Add Linux arm64 arch to install-protobuf script 727f8530c Prepare release notes for v1.7.0-rc.0 2e9aaf094 docs: update instructions for enabling NRI. 310be5ce6 pkg/nri: update NRI configuration. 8a47c6910 Add a leading space after the comment sign f53417921 Add unit test to getSupportedPlatform a6ad9e04e Rewrite install-protobuf script 3769b4840 Rewrite install-protobuf script 47305392c Add configuration options to local transfer service bd0a2a927 CRI: remove duplicated snapshotters code 49abbe4f2 fix failing TestCDIInjections 30e4a1409 update CDI version to v0.5.4 4728800ab runtime/v2: Get rid of last logrus.Fields usage 4278fbbc7 runtime/v2: Call onCloseWithShimLog for grpc shims 06e085c8b Add Fields type alias to log package 0ecdd341d docs: add more comment to logging.LoggerFunc ea83632a8 docs: Show how to select GRPC for shims 369339897 Migrate from k8s.gcr.io to registry.k8s.io a48dbefc1 Fix concurrent writes for UpdateContainerStats dc27cc0a2 Add macOS build notes 56274749c sandbox: start sandbox with options 2716fd041 dependency: bump go.etcd.io/bbolt to v1.3.7 979a74412 runtime/v2: Log BootstrapParams 4baa1876b contrib/apparmor: remove code related to apparmor_parser version 0ced6ac64 Prepare release notes for v1.7.0-beta.4 90d004ae8 Go 1.20.1 281f89a9d go.mod: go 1.19 d8b68e3cc Stop using math/rand.Read and rand.Seed (deprecated in Go 1.20) a9ac5f9cb lint: remove `//nolint:dupword` that are no longer needed 9b510e9a8 lint: silence "SA1019: tar.TypeRegA has been deprecated... (staticheck)" 8bf975b4f lint: silence "type `HostFileConfig` is unused (unused)" 4b9fd6ba5 golangci-lint v1.51.1 ac31c9a53 Clean up repeated package import 39bac0dbe error strings should not be capitalized 9a9cfe85e Go 1.19.6 0166783c7 cni: pass in the cgroupPath capability argument d14758b60 go.mod: bump to go-cni main e855a5998 cmd/ctr/commands/images: support usage subcommand 9c82e929f release: xx v1.2.1 844252164 Add fallback for windows platforms without osversion 081601f52 Update imagestore interface to support multiple references 646bc3a94 CRI: Create DefaultCRIAnnotations helper 5aab634e1 CRI: Pass sandbox annotations to _other platforms 2b24af8d1 Use options to pass PodSandboxConfig to shims ebbcb57a4 pkg/cri/sbserver: experimental NRI integration for CRI. 8a1dca0f4 pkg/cri: split out NRI API from pkg/cri/server. a8bb1ad2a loadConfig pre-inspection in advance 36e7dbdcb ctr version: add args check, prohibit incoming args 750d18ace Extract CRI instrument package 60d04b0b0 pkg: rename {blockio,rdt}_default.go -> nonlinux.go b61988670 go.mod: github.com/containerd/typeurl/v2 v2.1.0 74b371b98 CRI: Mirror generic toml runtime config under server 8ef298d86 Add transport credentials GRPC opt 77fc0948c Use switch when creating TTRPC/GRPC client a82e37a5a Add shim bootstrap params fc2e761e2 Initial GRPC client support 9e5c207e4 Wire up client bridges 4b1ebef3c Add Sandbox service GRPC bridge 47cb5f64b Add Task Service GRPC bridge 51a8db233 Send container events with nil PodSandboxStatus 27c8f4085 Move PLEG event generation back to sbserver to avoid missing pod sandbox status 7cf556075 test: add hostNetwork tests for both windows and linux d33a43cc2 pkg/apparmor: clarify Godoc a3265102d Revert "Don't check for apparmor_parser to be present" c990e3f2e contrib/apparmor: remove version-dependent rules fe0116ec2 CI: skip some jobs when `repo != containerd/containerd` 3eda46af1 oci: fix additional GIDs ef2560d16 oci: fix loop iterator aliasing 52f82acb7 btrfs: depend on kernel UAPI instead of libbtrfs 62df35df6 *: introduce wrapper pkgs for blockio and rdt 6cdc221f5 'go routine' should be 'goroutine' b0e97c0f9 Use multierror for cleanup error 34314717b Remove sandox store and controller service type a788f6c79 Move local sandbox controller under plugins package 2717685da Refactor sandbox controller interface 0b33a45fa cri: fix Mirrors deprecation comment 5bc3fea62 update fuzz function names in docs with golang naming convention 904a87d26 docs: fix function names in fuzzing test documentation 9e4acc028 importer: stream oci-layout and manifest.json Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containers: use VIRTUAL-RUNTIME variable to allow container runtime flexibilityBruce Ashfield2023-03-081-1/+1
| | | | | | | | | Rather than using virtual-runc (which choses between the old docker and opencontainer variants), use the newly added VIRTUAL-RUNTIME_container-runtime variable, which allows switching betwen runc and crun. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to v1.7.0-beta3Bruce Ashfield2023-02-101-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping containerd to version v1.7.0-beta.3-71-gfdfdc9bfc, which comprises the following commits: fe0116ec2 CI: skip some jobs when `repo != containerd/containerd` b944b108d Clean up repeated package import 76a62e52a Use http constants instead of string 13652e081 fetch: Use data from descriptor when available. 6ae3e5df6 Fix retry logic within devmapper device deactivation 6adb6a727 Rename release CI job aed3b0a70 Clean CI file 617c66dcc Add critest.exe in $PATH 757b8f702 keep the uppercase letter for flag info e5c57f242 update hcsshim tag to v0.10.0-rc.5 and revendor 1f35b0336 Fix sandbox exit monitor d1cd9757e Generate GRPC for runtime task service 86c238c87 Generate GRPC for runtime sandbox API 99580e0aa Update TTRPC and Protobuild dependencies b9b44ed5c Removing end of line for last line dbf384a5a Export remote snapshotter label handler d6070f8a7 go.mod: github.com/urfave/cli v1.22.12 2f1aad03a cleanup useless IntToInt32Array func e551d734f pkg/epoch: drop timezone eeab05242 Make `mount.UnmountRecursive` compatible to `mount.UnmountAll` 58bd5a094 go.mod: update github.com/containerd/nri. c46aaa8df Add integration test for tracing on image pull 7ec75b120 Update CNI to 1.2.0 306db3e70 go.mod: github.com/containerd/cgroups/v3 v3.0.0 5082fb395 go.mod: go.opentelemetry.io/otel v1.12.0 8886b05dc integration: use sleep inf with busybox:1.36 005d30e84 deflake: TestContainerPids 6de94a4cc log/logtest: add `testcase` as debug field 97ddac539 RELEASES.md: update release status b36b41552 cri: mkdir /etc/cni with 0755, not 0700 7eb652830 release: Ubuntu 18.04 -> 20.04 (glibc 2.27 -> 2.31) b473c2922 release: Add "cri-containerd.DEPRECATED.txt" in the deprecated cri-containerd-* bundles d00655092 Update the EOL date for 1.5 release 336c0cd2c Prepare release notes for v1.7.0-beta.3 77e51e9b0 Adding support to run hcsshim from local clone 27cf7f87d fix(docs): minor fix on the windows installation steps d21578674 runtime docs: Clarify delete cwd behavior 34d587818 Use mount.Target to specify subdirectory of rootfs mount 21fe0ceaa Move PLEG events for pause container to podsandbox 12359559d reused package errdefs for not supported err 4f39b164f pkg/cri: optimize slice initialization 9f6058d02 pushWriter: correctly propagate errors 361291559 Update vendored files d845b2a9c go.mod: update goresctrl to v0.3.0 ac72483e8 Fix syntax errors in the document f9f845533 Backport #7393 to sbserver 0cbfb3375 Backport #7661 to sbserver 41eabf134 Backport #7685 to sbserver b0d7a9697 Backport unit test from #7882 to sbserver b1c5c57be Fix Memory Limit test d1e1a1646 release/Dockerfile: set DEBIAN_FRONTEND=noninteractive 7ddd8add4 CI: remove redundant archs from ci.yml ffabc8a29 CI: test release.yml on every PR b9bd10c14 use local variable for rt when iterating collectors 1ade777c2 Add basic spec and mounts for Darwin 66eeee043 Update hcsshim tag to v0.10.0-rc.4 3c8469a78 Use Platform instead of generated API 802c6c5c0 fuzzing: improve archive fuzzer 40be96efa Have separate spec builder for each platform fdfa3519a Remove unused params from platformSpec 1c1d8fb05 Update OCI spec tests for generic platform f43d8924e Move most of OCI spec options to common builder 21338d277 Add stub to build common OCI spec f318e5630 Update sandbox API to return target platform dd22a3a80 Move WithMounts to specs 0ae0399b1 Make OCI spec opts available on all platforms 5f1a42543 shim: move reap log line to debug 515d68099 shim: enable debug logging for delete c8f4ab3b0 update to go1.19.5, go1.18.10 9c8c4508e cri: Fix TestUpdateOCILinuxResource for host w/o swap controller 82d6c2f93 Revert container_stats_test.go change which caused Windows CRI integration test failure 0b9313c42 ctr/run: flags --detach and --rm cannot be specified together 6f9936e30 mod: update github.com/pelletier/go-toml@v1.9.5 f0917fb6e archive: improve TestSourceDateEpoch 9df5a1714 snapshots: refactor metastore transaction f9a702105 docs/content-flow: update the description of the content labels fc905324a docs/content-flow: update the digests of the redis:5.0.9 0de12cf7e Add tracing plugin test b550526cc Use cleanup.Background instead of context.Background for cleanup 38159694f Prepare release notes for v1.7.0-beta.2 88c8d2e39 docs: fix a typo in tracing documentation 79d09c69b CI: Pass GITHUB_TOKEN to containerd/project-checks 06bfcd658 Enable dupword linter 0abc2f160 ctr: Add platform flag to 'oci spec' command f606c4eba Add cleanup package for context management during cleanup 419b5ab04 Cirrus CI (Fedora 37, Rocky 8): enable cri-integration 7b1f08bf5 nri_test.go: skip if SELinux is enabled dcbb32d6f cri-integration: set SelinuxRelabel 0f163d696 TestVolumeOwnership: compare GID, not group name 76d68b080 container_stats_test.go: avoid checking snapshot size 12955d291 Vagrantfile: fix comments about SELinux bb86c6e57 contrib/Dockerfile.test: add "integration", "cri-integration", "critest" stages 5e84f08c4 Vagrantfile: fix disk resize error with VirtualBox 778e8f2af Use the const labels.LabelUncompressed a5b979623 Add lease to transfer to preserve streams during transfer 3f0edb249 CRI: Comment cleanup/misc fixes 1753e5af7 Reused errdefs for error 5a00d28a6 Fix TestUpdateContainerResources_Memory* on cgroup v2 hosts a5ea5935b integration/images: switch away from Docker Hub to avoid rate limit 119bbec9e Vagrantfile: install-rootless-podman: remove `setenforce 0` d7ef6cbfa [streaming] move response packet after registration 72ef98622 cri: Simplify parseUsernsIDs() 4eed20fc3 cri: Verify userns container config is consisten with sandbox a44b35627 cri: Fix assert vs require in tests 6b333fd21 `ctr contents ls` sorts the labels of the content 3b48fb5b5 cri: Shadow variables to avoid t.Parallel() issues 6b7e237fc chore: use `go fix` to cleanup old +build buildtag 1d0619bc0 Refactor metastore transaction ca69ae265 Add integration tests for CRI userns 09243e43f make runc 1.1 for oss_fuzz_build.sh 94c68aa00 oci: appendOSMounts(): remove unused error, and move d66afd211 add kube v1.26: remove v1alpha2 cri support e94d92571 CRI sbserver: Prevent server reuse after Shutdown. b10536d64 Reused errdefs define error 229779a4e oci: Add WithDomainname ba0a7185f add network plugin metrics a2df12d1a fix `ctr tasks kill` does not remove cni network under windows 0bc9f7b54 Avoid using canceled context in unpacker cleanup b6df6708b Check containerd's readiness before calling critest a27e09548 Fix grammar and spelling mistakes in README a7adeb697 cri: Support pods with user namespaces 31a644973 Add capability for snapshotters to declare support for UID remapping 36f520dc0 Let OCI runtime create netns when userns is used 47fee791f Add sandbox store plugin type 6e55234c3 Add unit test to function GetCPUVariantFromArch 8d5c04543 Use uname machine field to get CPU variant if fails at /proc/cpuinfo 3ee6dd5c1 CRI: Fix no CNI info for pod sandbox on restart aa8a389c5 overlay snapshotter: Make use of WithTransaction 2c573de6d Move snapshot event publishing into metadata store d5dd11dcd Enable checkRename test 415750388 cri: fix `memory.memsw.limit_in_bytes: no such file or directory` 791428005 Prevent a race condition in testHook 54f1bdee3 "make proto-fmt" doesn't like spaces 52a748039 Remove github.com/gogo/protobuf again ce4ea2695 go.mod: update fuzz-headers and fuzz-build a4d5c3e5c Support sandboxed shims shutdown fb7a04234 move up to CRI-TOOLS v1.26.0 84529072d CRI: Add host networking helper 0e33a8fa4 [sb] Fix status ce3a73270 nil check to avoid panic on upgrade 5a3a9baec fatal error: concurrent map iteration and map write c5fff10fe Bump golangci-lint to v1.50.1 d7507c3c1 Bump grpc to v1.51.0 b94c1018a disable tracing while handling token f219f7d1e fix sdNotify func when debug level 75b09ac4a images: support specifying SourceDateEpoch via ctx dc4834924 epoch: propagate SOURCE_DATE_EPOCH via ctx 66f71ea4d Enable GitHub Actions local Linux CI runs 14a38e12b Upgrade GitHub actions packages in release workflow 33e706aec Prepare release notes for v1.7.0-beta.1 d65269fda Add sandbox shutdown API 423f4388b integration: increase timeout in container_event_test.go 80839f11e allow client to remove created tasks with PID 0 a6929f9f6 Add Evented PLEG support to sandbox server a338abc90 Add container event support to containerd 69975b92b cri: make swapping disabled with memory limit cde949077 digest: use github.com/minio/sha256-simd 3b71cfd40 metastore: Add WithTransaction convenience method 9df96dc46 support fetching containerd from non public GCS buckets c59f1635f add metrics for image pulling: success/failure count; in progress count; thoughput 74813786c fuzzing: improve archive fuzzer 176e8d35c image/label: print more characters of label keys 7afe6d92d Fix incorrect defer usage and refactor judgement 20e7b399f prevent Server reuse after a Shutdown ccd1d22ad fix incorrect namespace of event when create/update namespace Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to 1.7.0-betaBruce Ashfield2023-02-102-13/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping containerd to version v1.7.0-beta.0-284-gf2cf411b7, which comprises the following commits: d5010a12d docs: Authorizer.Authorize could return ErrUnexpectedStatus 2eabcf702 fix: check for tmpfs when evaluating if userxattr should be used a6929f9f6 Add Evented PLEG support to sandbox server a338abc90 Add container event support to containerd e14753fc5 Respect no_cri constraint 3bc8fc4d3 Cleanup build constraints c040f8382 Fix default config for Darwin 0b349428e CI: Vagrant: pin rockylinux/8 to v5.0.0 662d8a085 vendor: golang.org/x/net v0.4.0 f9295aa49 Fix context when waiting sandbox 8ab1d4496 Pass runtime configuration as TOML blob 3e92dedc2 Update runtime options to include bytes blob a113737cc sbserver bug fixing 85776d2c6 update to go1.19.4, go1.18.9 840a657eb Change PushContent to require only Provider 847294679 Adding unit tests to opentelemetry tracing 8a25fa584 Unwrap proto errors in streaming client b0dd50655 fix panic when containerd-stress density --count 0 39cc684c6 docs: Add extra security instructions afa19a0a7 Fix process_vm_* syscall names in seccomp 740e90177 go.mod: re-vendor NRI from the official repo. 345332175 upgrade the ops.md output for current 1.7 version . f88162587 Rename transferer to transferrer fc2754204 Cleanup code comments and lint fixes f1598cf5e Update transfer docs 01bd314b1 Rename local transfer plugin c387a5205 Add variables names to transfer interface 8304a61b5 Combine stream fuzz tests 0762a3a75 Add media type to export stream 52341a234 Update export API types 42eedc0bc Update ctr to make local the default for distribution ef61e13a6 Update import cli to use transfer service 11c1c8e6f Update import logic 66dc4d106 Update API for import types b991c71e9 Update pull command to use filter arguments 40d3fa3af Add filter fields to image store types 9ae92f16e Improve push handler ordering 737257bb4 Add push progress e88baa087 Fixup pull authorization and labeling 478f1c934 Lint fixes 28ea75456 Regenerated protobuf files with updated version b0f519703 Add transfer docs cd67a98ec Add transfer integration test 0aca4bb1f Update ctr commands to use transfer interface 6b5df1ee1 Update transfer packages 2a8d7a744 Update transfer API 7318a2def Add transfer plugin registration d1627e3c7 Add basic import and export handlers adfaeeff0 Add binary stream functionality and helpers e506cd103 Implement client interface for transfer service 81afd9c36 Add progress 0e4e96544 Add transfer proxy client 6f64cb859 Transfer interface and plugin work in progress f61ed7e94 Transfer API types a24ea31c2 Add transfer API dcf5687ca Add streaming service 08d5879f3 Added nullptr checks to pkg/cri/server and sbserver 8e0a3c51a Add ctr image prune ceab73007 use MaxConcurrentDownloads instead of MaxConcurrentUploadedLayers f012617ed CRI stream server: Fix goroutine leak in Exec 9f4ba4883 [sandbox] Fix panic when waiting for sandbox controller dbc6d33ac [sandbox] Specify sandbox ID when using sandboxed shims 9a53a6c34 [sandbox] Don't access pause container when creating pod container cc111eef6 [sandbox] Move sandbox info to podsandbox controller a0daf1c28 docs: add NRI-related documentation. 02f0a8b50 pkg/cri/server: nuke old v0.1.0 NRI hooks. ca84aba6c integration: add first NRI integration tests. b27ef6f16 pkg/cri/server: experimental NRI integration for CRI. 43704ca88 nri: add experimental NRI plugin. a6d1d53cc [sandbox] Update Controller.Status protos 2136736f5 go.mod: golang_protobuf_extensions v1.0.4 - prevent incompatible versions 63c6c55ab go.mod: roll back github.com/containerd/cgroups to v1.0.4 release 3c1c0878e integration/client: update containerd version to v1.7.0-beta.0 ebd63adac integration/client: fix go.mod grouping 8d868dadb Add ptrace readby and tracedby to default AppArmor profile 8c035d387 Resolve warnings in Windows GitHub Actions periodic workflows ae0da7dc5 Use sandbox store to retrieve runtime info for sandboxed containers 3ddaa3444 Retrieve sandbox creation time from store. 4b3281982 Remove duplicated helpers 3f331e7d1 Specify runtime configuration for sandbox shims c4dee237f Fix order of operations when setting lease labels a22f0a4c3 archive: set WithModTimeUpperBound when WithSourceDateEpoch is set ed3a49c0e fix for OSS-Fuzz infra changes ac4af4df8 integration: enable CNI slow test for sbserver a74f7e902 sbserver: save netns in sandbox metadata on create 085d8e633 integration: enable tests for sbserver 1deaedd38 sbserver: persist sandbox during partial teardown 5a7c108ba Resolve Scorecards GitHub Actions workflow warnings b7b185c92 update github.com/cpuguy83/go-md2man/v2 to v2.0.2 6142a2a24 sys: remove unused GetOpenFds() f0ce2f6d3 remotes/docker: remove deprecated NewAuthorizer alias c71a31156 sys: remove aliases for deprecated EpollCreate1, EpollCtl, EpollWait 3e5b444ac pkg/cri/util/: remove deprecated NormalizeImageRef alias 3a7cfaebb sys: remove alias for deprecated sys.RunningInUserNS() bd912bbee go.mod: github.com/matttproud/golang_protobuf_extensions v1.0.2 5f23daeb2 go.mod: github.com/moby/sys/sequential v0.5.0 763ec7c86 go.mod: github.com/cpuguy83/go-md2man/v2 v2.0.2 0f616e354 go.mod: github.com/AdaLogics/go-fuzz-headers v0.0.0-20221118232415-3345c89a7c72 df4d07352 go.mod: golang.org/x/sys v0.2.0 4e68634ef go.mod: github.com/sirupsen/logrus v1.9.0 579c7f43d Change fsnotify event status condition. 2cea525ee Bump fsnotify to v1.6.0 73c6db881 Bump urfave-cli to v1.22.10 bf777a70b remove duplicated tx rollback 70b65062c Missed out `platform interface` when reused the conn for Client. 0c4d32c13 cri: add pod uid annotation 438db09b0 Fix building.md for btrfs 792294ce0 Update to cri-api v0.26.0-beta.0 234bf990d Copy cri-api v1alpha2 from v0.25.4 to containerd internal directory e224f77eb Add process_vm read and write calls to default seccomp profile e4130b2a0 overlay: Remove unused method param 661aaae3b introspection: expose the daemon's PID and PIDNS f6232793b can set up the network serially by CNI plugins 2f5dd7c66 CI: update Fedora to 37 3fc5802d1 gotestsum match go version 1.19 aaf59efd2 Expose Done and Err in Shutdown service 5d0457df9 Refactored ctr to allow for tty allocation when container has {terminal:true} within Spec c245347e9 tx rollback when GetInfo return error 14a08721c Remove OpenTelementry imports from remotes/docker package 405024db0 complement sub-command note for containerd-main e38e2c8a4 make status more readable and update easy. 3abcfb5c0 keep the lower case letter for flag info 69af001b3 Replace broken and redirection link for CRI and kubelet in docs b0133882f bump critools into ca1571e6edd116b2c95f52e3dfa0b4779b74223a 8bb599973 Remove the outdated comment dd86128e0 Convert hcsshim's stats to cgroups' stats 6596a7086 Use github.com/containerd/cgroups/v3 to remove gogo 38ad785ce Bump k8s.io deps to v0.25.4 bd66f588b Bump OpenTelemetry contrib to v0.36.4 3fca677c1 Release: add static binaries 0c63c42f8 Fix slice append error b829e6f2d Bump OpenTelemetry to v1.11.1 7def13dde Add a thin wrapper around otel Span object ab194e65f Bump grpc to v1.50.1 b742aa2e7 fuzzing: bump go-fuzz-headers 91e295d76 Add `--debug` args 0f54c4740 feat add sandbox api status func c953eecb7 Sandbox API: Add a new mode config for sandbox controller impls 99ac7a771 add oci.WithCPURT 717aa5929 Remove uses of deprecated go-digest.NewDigestFromHex, go-digest.Digest.Hex 3a9044f24 Rename darwin-kubelet to containerd 5f48e00af Extra documentation for content interfaces. 202abf8fc Bump k8s.io deps to v0.25.3 eaedadbed replace strings.Split(N) for strings.Cut() or alternatives f90219d47 services/server/config: TestMergeConfigs(): use correctly formatted values 4866d8ba4 registry: support ipv6 addresses 8bec2b652 Replace references to `re` with `regexp.MustCompile` 5c510e47a Improve how reference regexps are built 98ff27265 Clarify repo name regex intention 2a8a53178 go.mod: change imports to github.com/distribution/distribution/v3 a97eb6955 Update repo normalize error message to include the name of the repo. b979f0069 Fix bug in parsing domain from repository reference f96660286 reference/docker: add unit-tests from upstream distribution/distribution 7de88c5ba reference/docker: align files with original code f32595a0c Fix "getCPUInfo for OS freebsd: not implemented" on FreeBSD/arm64 11a06c1a3 ctr: add `ctr content fetch-blob` dfd6a3aa6 remotes: add FetcherByDigest for fetching blobs without foreknown descriptors c607f83c3 Fix missing closed fifo a24ef0993 Replace mount fork hack with CLONE_FS 8b1b81eef Update hosts doc f0bf9e7f8 Support default hosts.toml configuration 81bbd9dac add option to resolve symlinks to linux device ee64926a7 add SpanAttribute 2d9f0f2fb add additional info in backport process 3b87d46ce Add tracing spans in CRI image service and pull.go 902b96cf2 fix comments 30c3078ae go.mod: golang.org/x/*: use tagged versions 422a24066 Bump go version to 1.19.3 9c2a63440 Fix ctr crash when pulling with http-trace and http-dump 78ac0046a ctr export strictly match default platform a270d6e8a Harden GITHUB_TOKEN permissions 98269c061 s390x: initial enabler 4b2a23e7e overlayutils: Add fastpath for userxattr check 2da782468 Add sequence diagram for shim runtime v2 0be981595 Sandbox API: Move remote impls to /sandbox/proxy 2e83d885d fuzzing: improve archive fuzzer 7c77b3540 Add Workflow for running critest with Hyper-V Containers on Windows. 9494f0b80 Add HyperV config in tests 53f67705c Add release notes for v1.7.0-beta.0 c776a3631 Update mailmap b7d0d1271 Cleanup sandbox interfaces be3987a92 Migrate away from GitHub actions set-output 9a0331c47 maintenance: Remove WithWindowsNetworkNamespace from pkg/cri 3f3e2b3cc Fix LogURI generation-related tests on Windows. ddb8a65be update codeql-action to v2 727b33c71 Retry client connection in waitForStart 3e4449862 Add logging volume metrics to Containerd CRI plugin 3ddcbf5f1 Update 1.5 release support timeframe 9a8611d63 bump go-fuzz-headers fc86be501 not init a tracing processor when not loaded 47fa603e1 Update required Go version in BUILDING.md 8e7ef890a Use logtest if possible to clean up logs a76d68ee4 Separate containerd logs in GitHub Actions' console e47bdbd16 Upgrade critools from 1.24.1 to 1.25.0 878dbc7af Upgrade actions/upload-artifact from v2 to v3 198277202 Use `go env` to determine GOPATH in Makefile. 6a07a1c07 go.mod: matttproud/golang_protobuf_extensions v1.0.2 (use tag) 972399538 sys: synchronize mkdirall() with latest os.MkDirAll() 063c5f980 sys: create SecurityAttribute only once (Windows) a983599e2 sys: update volumePath regex to allow returning earlier d422c87e4 sys: compile volume-path regex once, and update GoDoc f8f052482 Vagrantfile: explicitly specify rsync as the shared folder driver 4839f1bdf Add timeouts to all CI jobs 890398677 cri: PodSandboxStatus should tolerate missing task fb6a40dc9 Don't unmount on Darwin when deleting bundle c7e6a889b sys: remove unused IsAbs() (windows) 48daccb4d fix the --no-pivot flag being ignored by `ctr tasks start` ea53e52fc CI: update GHA instances from Ubuntu 18.04 to 20.04 49a54e23c Stats() shouldn't assume s.container is non-nil e7c8a5ab0 Move up actions versions to prep for deprecation 752bff981 cmd/containerd: use golang.org/x/sys/windows.SetStdHandle() 8b5df7d34 update golangci-lint to v1.49.0 f9c80be1b remove unneeded nolint-comments (nolintlint), disable deprecated linters 29c7fc952 clean-up "nolint" comments, remove unused ones d21572513 pkg/cri/(server|sbserver): criService.getTLSConfig() add TODO to verify nolint 0eaace306 golangci-lint: sort linters in config file 3ebeb6d79 linting: address gosec G112/G114 347397cf2 update go.mod and go.sum 643dc1656 improve CDI logging 8ed910c46 CDI: configure registry on start eec7a76ec move WithCDI to pkg/cri/opts 634bf0dd3 cmd/containerd: use golang.org/x/sys Service.SetRecoveryActions() 17a932403 Update the default seccomp to block socket calls to AF_VSOCK d4b9dade1 Updates oci image config to support upstream ArgsEscaped 047e684bb fix install cni script b7f6a6804 runtime/v2/shim: clean up the use of containerdBinary b41d6f40b Update container with sandbox metadata after NetNS is created 8fc68db0c cmd/containerd: replace deprecated windows.IsAnInteractiveSession() 63a7d8a7f fix pusher concurrent close channel 260af5e1d TestTaskResize must use a terminal 39158629f diff/apply.readCounter: check negative size 70fbedc21 archive: add WithSourceDateEpoch() for whiteouts 0aefb5280 archive: windows: chtimes(): remove redundant conversion f9c9121e5 archive: validate digests before use 8162e044b Add long term stable release branches e2d8f3859 vendor: github.com/opencontainers/selinux v1.10.2 011fca6ed fuzzing: create structured tar bytes in archive fuzzer 54f2b5121 Update to go 1.19.2 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 f330ffd83 cri doc: Update kata containers reference 0119d43a4 use raw link to containerd.servic config a59ecc50e CRI: implement Controller.Delete for SandboxAPI 9d18b5746 Modify WithDiscardUnpackedLayers 4333e6a6d Swap to net.ErrClosed checks for services acb2964d6 go.mod: Bump go-winio to v0.6.0 4196fad02 Add integration tests with failpoint 4f4aad057 Persist container and sandbox if resource cleanup fails, like teardownPodNetwork 396b6d670 fix missing close 7a66f70b5 cri-integration: pass ENABLE_CRI_SANDBOXES to test 2432b54a5 Add new ctr option for discarding unpacked layers b4558bedc Add test flag for skipping shim cgroup test c6f571fc7 Set grpc code for unimplemented cri-api methods 82890dd29 CRI: implement Controller.Stop for SandboxAPI 927906992 CRI: implement Controller.Wait for SandboxAPI dcb0d8f9e remove stray .zuul.yaml e22a7a383 reference CDI configuration details bc01f8fc0 Add reader option to local content reader at c8010b9cb sbserver: return resources in ContainerStatus b92f3160a cri-integration: propagate ENABLE_CRI_SANDBOXES b79dcabd6 chore: enable Scorecard Github Action 8f4c23b69 retry request on writer reset a37c64b20 Refactor CRI fuzzers bf26140d9 Fix LogURIGenerator on Windows adfbda464 Add ext2 fs support to devmapper snapshotter f0fbc8dfd Upgrade fuzzing-related packages to reduce dependencies e7c593edd Fuzzing: Instrument with new sanitizers 9cdf9f6c6 Use jq and only show failed tests on summary 34ad96bab CI: Output a summary using GITHUB_SUMMARY 524d3aca8 github.com/emicklei/go-restful CWE-285: Improper Authorization 3cfde732e remotes/docker/config: Skipping TLS verification for localhost 0f51aa874 Add NoSameOwner option when unpacking tars b2a7183a8 matching the casing of other flags for ctr's pull command. 829dd2145 update cdi version to v0.5.1 0f743ce4f vendor: golang.org/x/net v0.0.0-20220906165146-f3363e06e74c 8f2bbd5e8 Update to go 1.19.1, 1.18.6 to address CVE-2022-27664, CVE-2022-32190 6ce0f6a26 Fix missing close 8575a0d6f Remove unused variable from images action 5e57d463d feature: use client default namespace 3c0e6c40a feat: upgrade registry.k8s.io/pause version f9166aa53 .zuul: remove the zuul because it is offline e041d1a2c integration: TestUpdateContainerResources_MemoryLimit: remove TODO comment 3a2197f5f metrics/cgroups/v1: Remove unused event parameter bfb280fb3 Update golangci-lint timeout to match config 407703f09 Make checkContainerTimestamps less strict on Windows 344b25995 delete redundent import alias and and type conversion 17e436c20 Pin github.com/AdamKorcz/go-118-fuzz-build a3bfa58b0 Make oss-fuzz mandatory 2e677c932 sys: move ForceRemoveAll to integration/client 19db697a5 archive: replace tarName() with filepath.ToSlash() 3cc3d8a56 mount: use ioctl helpers from x/sys/unix 0c6553bfd go.mod, vendor: bump golang.org/x/sys to latest version 93342d637 replace sys Sequential funcs with moby/sys/sequential 9ae2cc3a8 mount: remove unused ErrNotImplementOnWindows dcfaa30ba chore: remove duplicate word in comments b170eb3ca Add Kubernetes v1.25 supported version as v1.24 fdff11def ctr: add privileged-without-host-devices for run command d063597e8 Upgrade github.com/klauspost/compress from v1.11.13 to v1.15.9 eb664aed0 go.mod: github.com/opencontainers/runc v1.1.4 ad597015c update runc binary to v1.1.4 962841fc7 Clarify containerd 1.5.0+ for k8s 1.20,1.21 90f6bd21c script/setup: handle cnidir with SUDO 331066f87 update intergration 49e2fe2ab bump cri-api b7b1200dd ContainerStatus to return container resources 9525b3148 migrate from k8s.gcr.io to registry.k8s.io f0036cb9d windows: Add runhcs-wcow-hypervisor runtimeclass to the default config f318947b0 Do not rename test files on-the-fly to share functions 912d43b2b Revert "Downgrade MinGW to version 10.2.0" 850f667f5 contrib/fuzz/daemon.go: reformat the fileheader 460b0533b pkg/cri/streaming: increase ReadHeaderTimeout 9d286baed crypto/sha256 must be imported adc7d5b2e Don't patch github.com/cilium/ebpf 470d3ee05 Upgrade containerd/cgroups to remove github.com/cilium/ebpf's fuzzer 43907515b adding support of CAP_BPF and CAP_PERFMON 13b14736a Don't fail test when GOOGLE_APPLICATION_CREDENTIALS is unset 095044710 Remove Windows special case in TestContainerdRestart 1f8db2467 go.mod: Bump hcsshim to v0.10.0-rc.1 396d2a7e4 ci: remove GOPROXY environment variable due to https://github.com/go-yaml/yaml/issues/887 1d8b1bc75 Cleanup shim manager ff65fc2d0 Make TaskList generic 6e4b6830f Update CRI-API 782fd3c8e Vagrantfile: dump containerd log after critest 74c09b756 Fix contrib/ header 8add7e5d3 Rework permission handling in scripts 6ba91de84 release workflow: remove Go setup action f8add9263 release workflow: increase timeout to 30 minutes 2dbff1dbc oci: skip checking gid for WithAppendAdditionalGroups 481861020 release: rollback Ubuntu to 18.04 (except for riscv64) 68bae258a Update protobuf definitions ca3b9b50f Run gofmt 1.19 4a11a4018 Update golangci-lint to 1.48 with Go 1.19 support ea6613029 Switch to Go 1.19 7787168cc Use global env variable to specify Go version on CI 5cf77fc43 Add TODOs for the remaining work e1c5d71c0 Update golang to 1.18.5, 1.17.13 ee0f2e906 Change os.Stderr reassign for Windows service 426fcfbc5 fix protobuf aarch64 aa3303b69 Update sandbox protobuf to match CRI 882322417 Update controller's start response to incldue pid and labels 3d028308e Cleanup CRI files c085fac1e Move sandbox start behind controller f51014f8d Add sandbox to in memory services 6c14ca25d Fix cleanup in critest e47c433d5 Add sandbox store helpers f5fb2c32d Regenerate protos with updated protoc-gen-go b16c3e9ad Windows HostProcess container CRI stats test 106433b79 Use httputil.DumpRequestOut for dumping client req 2fa84b1b8 Add extra context to error when push unauthorized f4d05f207 chore: bump macos runner version 276a6f133 test: error strings should not be capitalized 2b92c70fa Fix command line parsing for image list 14003683f go.mod: Bump hcsshim to v0.9.4 1e0698e8e Fix CRI image pull timeout test for ppc64le c15d8e156 go.mod: Bump hcsshim to 0.9.3 a9514da75 Update image references for Windows tests 2ae5f405d Use image lists instead of hardcoded images 552d76344 Use image lists in client tests d121efc6d replace with selinux label e6a2c0790 integration: simplify CNI-fp and add README.md 344431cdd fix: support simultaneous create diff for same parent snapshot 050cd58ce Drop deprecated `ioutil` 500ff95f0 Make getServicesOpts a helper ee6fc5c2e adds an env var commented out for sandboxed mode cbebeb944 pkg/failpoint: add FreeBSD link and update pkg doc 3c5e80b63 integration: Add injected failpoint testing for RunPodSandbox be91a219c integration: CNI bridge wrapper with failpoint 1ae6e8b07 pkg/failpoint: add DelegatedEval API b297775ea runtime/v2/shim: return if error in load plugin 5f9b318e5 bin/ctr,integration: new runc-shim with failpoint 822cc51d8 runtime/v2: manager supports server interceptor ffd59ba60 pkg/failpoint: init failpoint package 3125f7e1a cri_stats: handle missing cpu stats 7eeec8987 adds support for using env file for systemd boot 7dc66eee6 using ContextDialer instead 6639b2b02 test: Add ability to switch between cgroupv1 or cgroupv2 0d6881898 Refactor usageNanoCores be to used for all OSes f6bc986dc go.mod: github.com/stretchr/testify v1.8.0 628f6ac68 code cleanup cc30880e8 ci: workaround Cirrus CI's INVALID_ARGUMENT d8d63a7aa docs: Fix sample config.toml syntax 88bcbb036 adds a comment explaining how to disable experimental sbserver 3a3f43f72 Fix linter warnings 60f51c1aa Update and align golangci-lint version 98a1b7ff1 Add log messages when choosing CRI server bbb8d3470 seccomp: add get_mempolicy, mbind, set_mempolicy, with CAP_SYS_NICE 19e847983 seccomp: seccomp: add syscalls related to PKU in default policy 2ba635331 Change metrics namespace for sandboxed CRI to prevent panic b8e93774c Enable integration tests against sandboxed CRI cf5df7e4a Fork CRI server package 4ffef752d update golang to 1.18.4, 1.17.12 c733119db cri doc: fix formatting for CDI options f77d45e3b ctr: support --user for run/create 22dfc68ad Fix protobuf script to install protobuf on darwin bcdc8468f Fix out of date comments for CRI store packages 174b01344 update some devmapper docs 575095fcd seccomp: allow clock_settime64 when CAP_SYS_TIME is added e9e33f847 Copy fuzzers from github.com/cncf/cncf-fuzzing b31631859 Upgrade github.com/AdaLogics/go-fuzz-headers 6d4b61007 integration/client: fix typo in export_test.go b8bb33b92 fix can't edit object by using ctr content edit command 548c9c317 Fix WWW-Authenticate parsing b8403d2e1 Update k8s.io/cri-api to v0.25.0-alpha2 a44cabf51 Update go-restful/v3 to latest release c2703c08c pkg/cri: use marshal wrapper for version convertor d2588b3fa LCOW differ return ErrNotImplemented for wrong mount type 0a240ff81 Fix missing closed HTTP Body f7de1c8f9 Do not hardcode fuzzers 2b60770c4 Move container_fuzzer.go under integration/client/ 66cc0fc87 Copy FuzzCRI from cncf/cncf-fuzzing ca5637104 Remove mainfuzz package and StartDaemonForFuzzing 17f9c3a0e Move builtins_*.go to cmd/containerd/builtins to make the files reusable d97b754a5 Cleanup metadata tests 1ef4bda43 Downgrade MinGW to version 10.2.0 1ab42be15 refactor: reduce duplicate code 47ad5f70e Fix Doc: fb5b6612a ctr: Fix `ctr c create` fails to parse arguments 68a55fe8b make xattr EPERM non-fatal in createTarFile 99e210c50 Move metadata plugin registration to seperate package 4f0ea7831 fix: missing sudo for devmapper doc 72b87ad00 add WithAdditionalGIDs test 5bf705255 add WithAppendAdditionalGroups helper 5cde04bc7 Forward ctr snapshotter flags on Windows 4ac1031e0 Add snapshotter key to snapshot events b27a229df Move contrib/fuzz/docker_fuzzer.go to remotes/docker f91616e45 Copy FuzzConvertManifest from cncf/cncf-fuzzing c9c5fee37 Do not hardcode fuzzing targets 50f1a4e42 Don't log "ignored xattr ..." warnings 112497bc3 Make oss_fuzz_build.sh quiet 6e53ffb10 ctr: add --hostname flag to create, run 7002fc2c4 Ensure Windows Periodic workflow errors out while still uploading results. 2e288f5b1 improve content-flow d4ab64988 Revert MinGW to oldest known working version in Windows setup script. 55dd56e52 Make CI Fuzz optional 82adbc849 Run fuzzing tests with go test -fuzz a1eb2d8a6 Use testing.F on FuzzPlatformsParse 57200edf2 Use testing.F on FuzzParseProcPIDStatus 0b3c31dd7 Downgrade MinGW in Windows setup scripts. 42a386c81 CRI: change the /dev/shm mount options in Sandbox. a62a95789 CRI: remove default /dev/shm mount in Sandbox. 8245e35eb Make test path a constant ee14f9316 Run fuzzers in CI 52593cfc8 containerd-stress: add support for running through CRI 5560b622d archive: Explicitly specify stdio for tar(1) 95f1d7971 platforms: Run goimports for FreeBSD 42e019e63 cri/server: Disable tests on FreeBSD ad8e59806 oci: Remove empty mount option slice for FreeBSD c15f0cdaf oci: FreeBSD devices may have major number 0 2ab8c12fc archive: use Linkat on FreeBSD for hardlinks 61690d76d Improve naming consistencies in comments in snapshotter.go c101f7999 Allow CRI on Darwin 0167e55ab update runc binary to v1.1.3 c3fb7dfa7 go.mod: github.com/moby/sys/mountinfo v0.6.2 fa4720fa1 fix add ro mount for userattr-unmount unexpected timeout 92d360b58 fix minor spelling mistake: lablel -> label 6190b0f04 Correct spelling mistake ("sanbdox" to "sandbox") 5a6e4144a go.mod: github.com/containerd/cgroups v1.0.4 088c8df3a go.mod: github.com/containerd/continuity v0.3.0 012d68ff9 add gc scheduler metrics: collection count 44e12dc5d Windows snapshotter touch ups and new functionality 40aa4f3f1 Implicitly discard the input to drain the reader 00eb74a4c Make building static binaries simpler d25b4e6f3 Bump Golang and MinGW versions in Windows setup script. 7b9f1d405 Added support for runtime level snapshotter, issue 6657 8bc6ccc07 Bump k8s.io deps to v0.24.1 5fcde823d Bump grpc to v1.47.0 1b3c3860d update golang to 1.18.3, 1.17.11 e3b4d750d update go-cni/for cni update fixing plugins that don't respond with version 8ed54849a Move docker reference logic to reference/docker package f7aa90d27 Fix containerd-stress duration flag ae22854e2 Linux containers on FreeBSD 49ca87d72 Limit the response size of ExecSync 1cf6f2032 promote pause image to 3.7 b5e1b8f61 Use t.Run for /pkg/cri tests b572a82ad CRI: Remove deprecated error types and update error msg 978ff393d Add validations for Windows HostProcess CRI configs 1a8024b46 Makefile: use urfave_cli_no_docs for binaries that don't need it 5bb47fb95 vendor: github.com/urfave/cli v1.22.9 a3a2d14ec fix verify-vendor if go.mod does not contain replace rules 688b30cf5 CRI: Move truncindex to pkg e44335800 CRI: Move reference sorting to reference package b5366f8d7 CRI: Retrieve image spec on client 4ba5415fb build: Fix references to check-protos target in Makefile 8a3114b37 Fix broken oss-fuzz build d2f30150b archive: add human-readable hint to Lchown error 9f9ebbd99 Fix tx closed error when upperdirlabel specified 739cb4c99 config: improve config v1 deprecation message b5107a898 Fix Windows install powershell script b69182c71 add note that a namespace cannot be named "version" 8d95f2b59 fix comments on metadata schema 900019b30 ctr sandbox: handle sandbox config 8ec1fc70d adjust format a42688639 Restore decompression benchmarks 8494f7f11 adjust format in comment 92b7bc9ed ctr: fix label args used in NewContainer 4da4a8879 update doc url eaec6530d fix some confusing typos 65150600d Separate windows-2019 and windows-2022 test results 7300296cb reverts removal of parallel run from critest 523d069a2 sandbox: replace github.com/pkg/errors with native errors c4ce13a28 vendor: github.com/opencontainers/runc v1.1.2 25858d621 update runc binary to v1.1.2 c1140aef6 Bump OpenTelemetry dependencies f710505f4 shim: fix debug flag not working 72cd3b476 update golang to 1.18.2, 1.17.10 f5b7a4b3d CI: update Fedora to 36 a3ac15600 oci: WithDefaultUnixDevices(): remove tun/tap from the default devices ad8b87ba2 Add `Wait` to `binaryProcessor` d9fc5f4b0 Enable git commands due to git CVE fix 09c2c2a75 Pass explicit JUnit outfile to critest.exe in Windows workflow. 2c98a7b09 ctr import: strictly match platform d1c49781e go.mod: Bump k8s deps to v0.24.0 c721c8e27 devmapper docs: small fixes bb11c9d24 update critools to v1.24 8a2e8cd8d move report dir option to eol af24e3871 Update Kubernetes version matrix in release docs 7a834516f Share images between TestRestartMonitor and TestRestartMonitorWithOnFailurePolicy cedb7d3bd containerd 1.6.4 k8s 1.24 readme announce 57d2bce74 docs: minor fixes in snapshots.Snapshotter comments 42584167b Officially deprecate Schema 1 55401ac9c Update k8 docurl in file d4127a9f2 CI: add riscv64 builds 0e56e4f9f release/Dockerfile: update Ubuntu to 22.04 for supporting riscv64 4b412b800 seccomp: support riscv64 8160a3efc Reduce the number of the concurrent HTTP requests in TestUserNamespaces 7183fc81d Skip TestImagePullWithConcurrencyLimit on Cirrus CI 10576c298 cri: support blockio class in pod and container annotations 9b04d2fae docs: Adding windows installation steps to getting-started.md 227156dac Add ctr support for CPUMax and CPUShares b5370b040 Fix comment for metadata/db.go 5d0730370 Update go-cni to v1.1.5 180c7535d Upgrade protoc, protoc-gen-go and protoc-gen-go-grpc 2c6760005 go mod tidy & go mod vendor 29b937956 make protos fcba48636 Remove gogo from .proto files ae29594d0 Bump opencontainers/selinux from 1.10.0 to 1.10.1 46773c341 Cleanup leaked shim process 7f23296b9 Upgrade google.golang.org/grpc and google.golang.org/protobuf 7353006f6 Remove kzys/typeurl 7215f85ac Don't use "uname -a" as Cirrus CI's cache key 45c0cbec5 Create ppc64le release 5f43118ce Move Vagrant-based tests from GitHub Actions to Cirrus CI 00d102da9 feature: support image pull progress timeout fceab7f4c remove duplicate 0e6c7bf93 Fix undefined error in use of errors package a9f5190fb images/image.go: typo da3e2f985 fix incorrect syntax in comments 7a4f81d8b Fix tests aefd1849b go mod tidy and go mod vendor f616dd471 Upgrade containerd/typeurl 9dbe000a3 make protos 1a095e18b Rename Size_ to Size e3db7de8f Remove gogo/protobuf and adjust types fd37cc75b Use protoc-gen-go instead of protoc-gen-gogoctrd e044759eb Upgrade containerd/ttrpc 8710d4d01 cri: close fifos when container is deleted 7331b2af4 Add Container-Optimized OS into Adopters dfa6e8763 diff: hide types.Any from clients 01dfb110c Add go_package on all proto files aa1526def Use proto.Marshal instead of calling Marshal() on objects 95dde4959 Embed "Unimplemented" structs as proto recommended 35994a475 fix monitor restart 237ef0de9 Remove all gogoproto extensions 22cd13b37 fix nil pointer panic for monitor bd90ce043 Keep shim API backward compatible 39692e767 unpack: return error when no platforms defined 8017daa12 Add unpack interface to be used by client e2fd25f3d Move runtime v2 proto Move runtime v2 protos to api/runtime package. 3742c756e Don't generate a Go file, if that would be empty 5f3b72432 Fix protoc-gen-go-fieldpath 3b82f9e33 metadata: use resource max and end on registration 88c0c7201 Consolidate gogo/protobuf dependencies under our own protobuf package 80b825ca2 Remove gogoproto.stdtime dbdf50cc0 update golang to 1.18.1, 1.17.9 fd704d334 Build bin/gen-manpages instead of using "go run" b497e6414 Fuzz filter package with Go 1.18's fuzzer 94faa70df allow ptrace(2) by default for kernel >= 4.8 fe8da6dca Move lease manager plugin to separate package 147f0a7e0 check for duplicate nspath possibilities 942af1203 fix pool_device_test.go 5f3ce9512 Do not append []string{""} to command to preserve Docker compatibility 8367f69fb Add collectible resources to metadata gc c525aa5f8 Set timeout when collecting metrics from shim's Stat 49235ccba Change architecture path in README.md 8a1280b2b metrics/cgroups: fix deadlock issue in Add during Collect a5dfbfcf5 cri: load sandboxes/containers/images in parallel 6d69aca56 make consistent for checkpoint path 6341e0696 ADOPTERS: Update AKS Info b446c7647 [Sandbox] Remove outdated documentation d0b32c053 [sandbox] Migrate from gogo to Any 85a49e4ee [sandbox] Cleanup interfaces de4974572 [sandbox] Fix CI b7a36950f [Sandbox] Add Wait and PID 0d165e654 Restore sandboxes on daemon restart 0c5e5c357 Fix protobuf after rebase fa02477ca [sandbox] Add sandbox shim skeleton 35195737e [sandbox] Register shim plugin after #6301 17a2aaded [sandbox] Add ctr support 982de8a5d Launch sandboxed containers from task service 00f7a6bf2 [sandbox] Address PR review comments 6343fe3ea [sandbox] Implement sandbox controller eaccbf1d0 [sandbox] Add clients df234edeb [sandbox] Add controller service a433beb79 [sandbox] Update vendor 0e77f758a [sandbox] Implement store service 13eb1a4bb [sandbox] Revendor API changes d7ece8724 [sandbox] Save sandbox ID to container's store cab7d5b3d [sandbox] Implement metadata store 87d4c8923 [sandbox] Add basic sandbox structures and interfaces 4445d0a8d [sandbox] Add protobuf definitions 3df767405 add restart policy for enhanced restart manager 7e70ad9fb Pin upload-cloud-storage action to 0.8.0 in Windows workflow. 927b34e41 tracing: fix panic on startup when configured 1a45c2c5f docs: add Deckhouse to the list of adopters 825c1c58a CDI: update go.mod and vendor deps ff5c55847 move CDI calls to the linux-only code c9b4ccf83 add configuration for CDI aed0538da cri: implement CDI device injection 35383fb42 docs/cri: simplify 493baa6e7 Add docs/snapshots 811375856 CRI: improve image pulling performance 16fbbaeee Skip flaky test on Windows 44d7cd152 mv design docs/historical/design 195fc7424 docs: migrate config v1 to v2 84cebafe8 docs: remove deprecated `io.containerd.runtime.v1.linux` 83665bf8d docs/getting-started.md: typo ccea927d9 Move historical docs to `docs/historical` 50921e71b Run go mod tidy in integration tests 99c194e03 go.mod: move indirects, and update integration go.mod to 1.18 6ccec53d3 Remove gotest.tools 871b6b6a9 Use testify 6da318310 Disable writing freelist to make the file robust against data corruptions 62c846b17 Update linters to use t.Setenv 2d59a3944 Use t.Setenv instead of os.Setenv 4bdac2b43 Adding multi-arch support for the configure.sh script 6f269ccb3 docs/getting-started.md: massive update c7bdcdfbe Address some timeout issues in the Windows CI a2d22ac05 BUILDING.md: update supported Go versions d0bd65d3c Remove unmaintained contrib/linuxkit f2d5f71a7 update runc binary to v1.1.1 11a31320b go.mod: github.com/opencontainers/runc v1.1.1 0b2a95e10 Add no_tracing tag b42e936c5 CI: add Rocky Linux 8 b1030e7b6 CI: bump up crun to 1.4.4 b737cb10e Update README.md cf571fa96 added make help for cri integration 44a8ac7b0 Turn paths from cmdline into absolute paths 2689432bf Fix error message in TestNewBinaryIO 96b16b447 Use typeurl.Any instead of github.com/gogo/protobuf/types.Any fe426227d native: fix deadlock from leaving transactions open a51da91c1 moving up to go-cni v1.1.4 36612d692 go.mod: remove replace and update github.com/gogo/googleapis v1.4.1 df93940fb fix: ctr images mount with snapshotter option can't get snapshotter c091d48cb Use cgroups.AddProc() for cgroups v1 d2013d2c9 runtime: deprecate runc --criu / -criu-path option 388ee880d Upgrade containerd/imgcrypt and opencontainers/image-spec 70a06d0c8 Upgrade to Go 1.18 067611fde Remove enumvalue_customname, goproto_enum_prefix and enum_customname bfde58e3c Bug fix for mount path handling e9bb9c3bc Skip tty critest testcase on Windows Server 2022 3eeeb9429 Remove gogoproto.customtype 040babe00 Vendor dependencies with module graph pruning a19ad9bb6 Use Go 1.18 to build and test containerd 56f95e3d8 Test turning off golang CI lint cache ee49c4d55 Add nolint:staticcheck to platform-specific calls c56875233 Update prometheus client vendor 9aadef1be vendor: golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd fdb746442 document log level and format 52d307ac1 test: remove redundant `mountPoint` 2a0b2ee9e fix: ctr run --cni get failed 18ec2761c test: use `T.TempDir` to create temporary test directory b8bf504e9 Enable gosec linter for golangci-lint 2ddcb2019 Make OpenLab's CI jobs blocking cc526a98a Make mkfs.xfs available on OpenLab's CI environment ba1674389 typo fixes under cmd. 2e080bf49 Add shared content label to namespaces 2a425990c Implement `--device idType://id` for `ctr run` on Windows 39d52118f Plumb CRI Devices through to OCI WindowsDevices 6a25be94e CRI integration test for Windows Device mounts 622a35a4f Upgrade golangci-lint and its GitHub Action 59b1871b3 Fix link in getting-started.md 88de65112 Don't build a second copy of containerd-shim-runhcs-v1.exe 807ded41f Update TestNormalize to only test Windows 80bc32f06 Use temp file for export/import test 0d0b2bd4f Mount devmapper xfs file system with "nouuid" option. 14901335c Increase wait timeout for TestDaemonRestart 718adfe06 Use the latest image for Windows test workers 894e78001 Improve ErrUnexpectedStatus default string 48b478381 Skip most of script/setup/prepare_env_windows.ps1 768bf73dd Enable cri-tools critest on Windows 59b978847 Enable CRI Integration tests on Windows 5b78a9a8f Remove hardcoded /tmp in tempfile paths 03a5e648b Use version 2 config and mention containerd config command e0a6f9c7d update to go 1.16.15, 1.17.8 to address CVE-2022-24921 b90c466c3 Add ErrUnexpectedStatus to resolver fdaf859aa Update status of 1.4 release 7b045ea5f ctr: improve error relative shim path error msg e5efc260d Update latest release versions 63dd929af Update release process to include Kubernetes test infrastructure 0c79257f5 Add --user support for ctr run Windows de3d9993f Adds support for Windows ArgsEscaped images 775facd57 cri: fix integration test on cgroupsv2 system f1f69d4ee integration: remove duplicated util pkg 352a8f49f cri: relax test for system without hugetlb ec90efbe9 Make the temp mount as ready only in container WithVolumes ea3d2e643 go.mod: update to github.com/tchap/go-patricia/v2 v2.3.1 2b68c03a6 Update Go version recommendation in getting started 77c0539e9 Use containerd/protobuild instead of stevvooe/protobuild d28981d48 Fix build with gccgo f4f41296c Replace golang.org/x/net/context with std library 296f75bd0 Do not use weak import 3febabffe Add protoc-gen-go-fieldpath 7901f4b33 containerd-shim-runc-v1: return init pid when clean dead shim a3303e721 Update TestContainerSymlinkVolumes to use windows path 481fb923c go.mod: update to github.com/emicklei/go-restful/v3 v3.7.3 fb0b8d617 Use fs.RootPath when mounting volumes 1a31772a7 go.mod: github.com/moby/sys/signal v0.7.0 b1881bdc0 go.mod: github.com/moby/sys/mountinfo v0.6.0 b6a6757c1 go.mod: github.com/fsnotify/fsnotify v1.5.1 83c80388b Initialize platform matchers for current platform b63000c65 [Windows][Integration] Enable TestRestartMonitor 7275411ec cgroup2: monitor OOMKill instead of OOM to prevent missing container OOM events 6906b57c7 Fix the Inheritable capability defaults. fdbfde5d8 cmd/containerd-shim: add -v (version) flag e79aba10d integration/images/volume-ownership: strip path information from usage output b8cadf753 runtime/v2/shim: strip path information from version output 356ca7575 containerd-shim-runc-v2: return init pid when clean dead shim 86d52fc26 Fuzzing: refactor metadata fuzzers 894af07e3 integration: Adds Windows equivalent for TestSandboxRemoveWithoutIPLeakage 54e95e6b8 fix Implicit memory aliasing in for loop 5d4dc5780 remotes/docker: log registry URLs as info instead of debug afe39bebf add oci.WithAllDevicesAllowed flag for privileged_without_host_devices Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to 1.6.12Bruce Ashfield2023-02-101-3/+3
| | | | | | | | | | | | | | | | | | | Bumping containerd to version v1.6.12-2-gccfc27e30, which comprises the following commits: 3595dd04b fix: check for tmpfs when evaluating if userxattr should be used 1899ebcd8 Prepare release notes for v1.6.12 ec5acd4c1 CRI stream server: Fix goroutine leak in Exec 9743dbae8 [release/1.6] update to go1.18.9 3d24d97ba Prepare release notes for v1.6.11 bb96b21e5 fix: support simultaneous create diff for same parent snapshot 15b541238 Fix order of operations when setting lease labels 9fdf713e5 Added nullptr checks to pkg/cri/server and sbserver 56593cca5 cri: add pod uid annotation 8ec051a6b [release/1.6] go.mod: use golang_protobuf_extensions v1.0.4 e639ecd7c Prepare release notes for v1.6.10 5af8d89ce overlayutils: Add fastpath for userxattr check Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* treewide: bulk update patches with status fieldBruce Ashfield2023-01-272-0/+4
| | | | | | | | | | | | | | | While the insane.bbclass upstream-status check hasn't been made default, users of meta-virtualization may have it enabled in their distros .. so the effect is the same. We must have this tracking tag in out patches. This is a bulk update to add the tag and silence the QA message. As packages get updated, the normal/routine process of checking the patches will continue, and the status fields may (or may not) get more useful. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd-opencontainers: fix Upstream-Status formatMartin Jansa2023-01-271-1/+1
| | | | | Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to v1.6.9Bruce Ashfield2022-12-071-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping containerd to version v1.6.9-12-g6c41694da, which comprises the following commits: 5af8d89ce overlayutils: Add fastpath for userxattr check 303f608dd [release/1.6] update to Go 1.18.8 to address CVE-2022-41716 3f9f9508d ctr export strictly match default platform df73acad5 [release/1.6] go.mod: Bump hcsshim to v0.9.5 658490b78 ctr import: strictly match platform 4907b4d72 Migrate away from GitHub actions set-output f1493f665 Prepare release notes for v1.6.9 346412f5a adding support of CAP_BPF and CAP_PERFMON 99578d1fc Update mailmap a956d8415 Add logging volume metrics to Containerd CRI plugin 29e2dea50 fix pusher concurrent close channel 8a9d69385 [release/1.6] Stats() shouldn't assume s.container is non-nil a9adc7938 cri: PodSandboxStatus should tolerate missing task b66eb726a migrate from k8s.gcr.io to registry.k8s.io 5b40993a5 [release/1.6] upgrade containerd/continuity from v0.2.2 to v0.3.0 f2376e659 Update container with sandbox metadata after NetNS is created 06f82efef archive: validate digests before use 28324c529 [release/1.6] Update go 1.18.7, addresses CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 0aeeb62cb [release/1.6] update golangci-lint to v1.19.0 7db9d1f76 Fix linter warnings 4dc932e62 [release/1.6] gofmt with go1.19 7b8d679ad [release/1.6] integration: remove use of deprecated io/ioutil 926b9c72f retry request on writer reset b9a35c6af Add integration tests with failpoint 1f29fac48 Persist container and sandbox if resource cleanup fails, like teardownPodNetwork a85709c6c integration: simplify CNI-fp and add README.md d89a8d223 pkg/failpoint: add FreeBSD link and update pkg doc b0ce2965a integration: Add injected failpoint testing for RunPodSandbox a7f956d86 integration: CNI bridge wrapper with failpoint 07c479471 pkg/failpoint: add DelegatedEval API 4a5bc05aa runtime/v2/shim: return if error in load plugin 71ee7de24 bin/ctr,integration: new runc-shim with failpoint 3e2e77849 runtime/v2: manager supports server interceptor cb935bf49 pkg/failpoint: init failpoint package 2fdfd564c make xattr EPERM non-fatal in createTarFile 89e49609d remotes/docker/config: Skipping TLS verification for localhost b720be2ce remove stray .zuul.yaml 6b30bc4b4 .zuul: remove the zuul because it is offline 0f7e258ee Set grpc code for unimplemented cri-api methods fb753e5cd update intergration 6ee5bb7ea bump cri-api ae8598615 ContainerStatus to return container resources d3c7e31c8 Update CRI-API 5b44c5271 vendor: golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd 3507d600b update runc binary to v1.1.4 1efd8b947 ci: remove GOPROXY environment variable due to https://github.com/go-yaml/yaml/issues/887 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: fix final TMDIR referencesBruce Ashfield2022-09-154-47/+21
| | | | | | | restructure the containerd source layout to avoid symlinking vendor dependencies. This avoid go recording paths in the final binaries. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: improve reproducibilityBruce Ashfield2022-09-123-35/+33
| | | | | | | | | | | | | | | | | | | | | We get the following QA warning on build: WARNING: containerd-opencontainers-v1.6.8+gitAUTOINC+579a6380ec-r0 do_package_qa: QA Issue: File /usr/bin/containerd-shim-runc-v2 in package containerd-opencontainers contains reference to TMPDIR File /usr/bin/containerd-ctr in package containerd-opencontainers contains reference to TMPDIR File /usr/bin/containerd-shim-runc-v1 in package containerd-opencontainers contains reference to TMPDIR File /usr/bin/containerd in package containerd-opencontainers contains reference to TMPDIR File /usr/bin/containerd-shim in package containerd-opencontainers contains reference to TMPDIR [buildpaths] This is the first step in fixing the QA warning, by dropping our debug patch, passing -trimpath and not defining GO_DEBUG. This leaves a final reference similar to: path _/opt/poky/build/tmp/work/core2-64-poky-linux/containerd-opencontainers/v1.6.8+gitAUTOINC+579a6380ec-r0/git/src/import/cmd/ctr That is being stored in the .rodata of the binaries. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to 1.6.8Bruce Ashfield2022-08-251-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping containerd to version v1.6.8-8-g579a6380e, which comprises the following commits: 1efd8b947 ci: remove GOPROXY environment variable due to https://github.com/go-yaml/yaml/issues/887 0448673af Do not append []string{""} to command to preserve Docker compatibility 5c230ece0 Fix cleanup in critest ed9d3dc37 oci: WithDefaultUnixDevices(): remove tun/tap from the default devices 3364f411e Prepare release notes for v1.6.8 390920429 release workflow: remove Go setup action cf48ba6e8 release workflow: increase timeout to 30 minutes 57873e652 release: rollback Ubuntu to 18.04 (except for riscv64) eccb82f6d Update release build timeout to 20 minutes 6a854d4b5 Update mailmap 61612e1a2 Prepare release notes for 1.6.7 d199ee462 Update golang to 1.17.13 0578d20c5 Change os.Stderr reassign for Windows service 12cae4961 Update Vagrant CI to macos-12 bc4091aae chore: bump macos runner version cb73bd050 Windows HostProcess container CRI stats test ac388525a Add validations for Windows HostProcess CRI configs 0007f40fe [release/1.6] go.mod: Bump hcsshim to v0.9.4 c9607e78c Update Fedora version to 36 2952b66c0 CI: add riscv64 builds 6b2dc9a37 release/Dockerfile: update Ubuntu to 22.04 for supporting riscv64 745dc07c4 seccomp: support riscv64 c2f841f21 Create ppc64le release 86b55bd8d seccomp: allow clock_settime64 when CAP_SYS_TIME is added f3da3e51f allow ptrace(2) by default for kernel >= 4.8 aa1101068 [release/1.6] update golang to 1.17.12 37dfc5c9d [release/1.6] Fix WWW-Authenticate parsing Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to 1.6.6Bruce Ashfield2022-08-031-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping containerd to version v1.6.6-10-g4e92d8e7e, which comprises the following commits: 37dfc5c9d [release/1.6] Fix WWW-Authenticate parsing fa2016d58 [release/1.6] Downgrade MinGW to version 10.2.0 99c56d217 ctr: fix label args used in NewContainer 51de785f8 [release/1.6] Make building static binaries simpler 2ea4e6348 update runc binary to v1.1.3 61213742a Prepare release notes for v1.6.6 f92068350 Implicitly discard the input to drain the reader 2eb67213b [release/1.6] Limit the response size of ExecSync 185e87275 Prepare release notes for v1.6.5 5c9c83d3e [release/1.6] update golang to 1.17.11 fdcdc27bc update go-cni/for cni update fixing plugins that don't respond with version e33b9e709 archive: add human-readable hint to Lchown error 3bb5a9d19 config: improve config v1 deprecation message 6eff5b6c0 [release/1.6] go.mod: Bump hcsshim to 0.9.3 f1d2d9260 [release/1.6] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 9f99be51b [release/1.6] update golang to 1.17.10 246a1b42e vendor: github.com/opencontainers/runc v1.1.2 43717e03a update runc binary to v1.1.2 82a77be2d reverts removal of parallel run from critest 06bdfeb67 Allow git commands in Vagrantfile 70839a344 Bug fix for mount path handling 1520bae0f update critools to v1.24 0d1d2953b Prepare release notes for 1.6.4 42d691fe6 Bump opencontainers/selinux from 1.10.0 to 1.10.1 e9f22e008 Update go-cni to v1.1.5 be4909e95 cri: close fifos when container is deleted baa386dc0 Prepare release notes for v1.6.3 e8da82adc tracing: fix panic on startup when configured 1764ea9a2 CRI: improve image pulling performance 9cd76d465 [release/1.6] update golang to 1.17.9 c09cc1242 check for duplicate nspath possibilities fe6ba62ce metrics/cgroups: fix deadlock issue in Add during Collect 8b81a7843 [release/1.6] go.mod: update image-spec to merge-commit of v1 into main f2ba2041b update runc binary to v1.1.1 b736b4dab go.mod: github.com/opencontainers/runc v1.1.1 72f1e58c7 CI: add Rocky Linux 8 7ede40c5c [release/1.6] vendor: github.com/containerd/imgcrypt v1.1.4 5538be6cf cgroup2: monitor OOMKill instead of OOM to prevent missing container OOM events da35c19da Test turning off golang CI lint cache a0213573b Add nolint:staticcheck to platform-specific calls ad0036ed6 Update prometheus client vendor c7bbf316f Mount devmapper xfs file system with "nouuid" option. a1de89c3e Make the temp mount as ready only in container WithVolumes 82a12edf2 moving up to go-cni v1.1.4 28b44826b native: fix deadlock from leaving transactions open 8461dd6e5 Prepare release notes for v1.6.2 91800c4e9 Add static checks to shim for Windows ca51d7f85 Update go.mod go version 765df6609 [release/1.6] remove empty go mod to allow building for go 1.18 e9af80859 Fix the Inheritable capability defaults. 7c929318a Update TestNormalize to only test Windows 06985e7d0 Upgrade golangci-lint and its GitHub Action b13d3e05c cri: relax test for system without hugetlb Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd-opencontainers: add CVE_VERSION settingChen Qi2022-04-261-0/+1
| | | | | | | | | | | | | The NVD database uses version without a prefixing 'v' for containerd. e.g. https://nvd.nist.gov/vuln/detail/CVE-2022-23648 So we need to explictly set CVE_VERSION. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to v1.6.1Bruce Ashfield2022-03-211-4/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping containerd to version v1.6.1-4-gd12516713, which comprises the following commits: b13d3e05c cri: relax test for system without hugetlb b325d5647 update to go 1.16.15, 1.17.8 to address CVE-2022-24921 787b4671d Prepare release notes for v1.6.1 444eba43d containerd-shim-runc-v1: return init pid when clean dead shim 37bb915c6 containerd-shim-runc-v2: return init pid when clean dead shim 9f316fa4b Use fs.RootPath when mounting volumes 8713c0472 Prepare release notes for v1.6.0 f261498e0 Update Go to 1.16.14, 1.17.7 fa19714db Update go-cni to v1.1.3 6e3cc28a6 Wait for containerd installation in GCE scripts c0f818846 Update go-cni to v1.1.2 dea7ae27a Add instructions on using go with admin perms 4f0d5f0ee Enable TestContainerPTY and TestContainerUsername 732103271 Change the context to avoid misunderstandings 6827eec7a Prepare release notes for v1.6.0-rc.4 b0623a06e Change file name for shim binary path daaf031e2 Use white logo in github dark mode efc6ca4c4 Prepare release notes for v1.6.0-rc.3 7e821fb61 fix: .dockerignore makes git working tree dirty ac2692d30 containerd-stress: introduce option for specifying image 8b9571e34 containerd-stress: start task ctr before starting execs 9b1fb8258 cri: fix handling of ignore_rdt_not_enabled_errors config option dcbe3e471 docs: add Talos Linux to the list of adopters 821c961c8 pkg/oom/v2: handle EventChan routine shutdown quietly 2d9d5fddb Document fs_type and fs_options in snapshots/devmapper/README.md a31e28e2c Prepare release notes for v1.6.0-rc.2 8944c12f5 Update releases document 8d69c041c Update cgroups to v1.0.3 bec6e4dd6 platforms.Normalize(): do not reset OSVersion and OSFeatures 34f717349 seccomp: kernel 5.16 (futex_waitv) 8632bdcb7 seccomp: kernel 5.15 (process_mrelease) c013db696 seccomp: kernel 5.14 (quotactl_fd, memfd_secret) 17a2831f7 seccomp: kernel 5.13 (landlock_{add_rule,create_ruleset,restrict_self}) 1329ea371 seccomp: kernel 5.12 (mount_setattr) cc59ae4d9 tracing: return (ctx, span) from StartSpan e751f1f44 tracing: support OTLP/HTTP in addition to gRPC 813a061fe oci: use readonly mount to read user/group info c0e00f19a fix acr fetch token 400 4cd9f37f5 Fix windows periodic workflow 4aff7431f Fix possibly incorrect media type default on import 3ffb6a611 shimv2: handle sigint/sigterm f048a2593 docs: add doc-comments on GC-related methods 31a710c49 fix: should not send 137 code event if cmd is notfound 936faf9c9 fix empty scopes return c1e17d8ba Prepare release notes for v1.6.0-rc.1 4f552b077 Compile binaries for go1.16 and go1.17 in CI 7d7064e6b Integration: Change to Windows Server 2022 build number constant 2898004a5 Update kubernetes vendor to 0.22.5 4e9e14c2b Fix rdt build tags for go 1.16 af83e9af1 platforms: add support for matching amd64 variants af39d2ad7 go.mod: Update hcsshim to v0.9.2 fcb7bd699 Remove api go submodule 46312f4a1 Update makefile to remove API submodule ed0828bb6 delete useless code 21a748e38 go.mod: github.com/opencontainers/runc v1.1.0 dba897c35 update runc binary to v1.1.0 d5e8edf2d Do not automatically inject client traces 69ae95531 tracing: fix OTLP tracer's initialization 8dd36423b Revert "Add shared content label to namespaces" a1ba38056 Update caching logic to avoid map access ce3871966 services/introspection: support to show introspection grpc service a018ae3f6 Prepare release notes for v1.6.0-rc.0 919797163 Integration: Switch to `upload-cloud-storage` Gcloud action. 8a2b61356 Integration: Switch to using `auth` Gcloud action in Windows workflow. c0a31a7a4 Add ppc64 support for test images a303d552a ctr: Unify the delete subcommand alias b35fb7d44 remove io/ioutil d05194f0a ctr: flag to toggle non-distributable blob push f77989036 Add image handler to skip non-distributable blobs. 8c194d8f3 gha: run CodeQL scan on pull requests f99e92359 Enable critest tests on Windows Server 2022. 55b89eabf Parametrize CRITest test images in Windows Periodic workflow. 18592b2f5 Fix wrong log message bdc852190 test: e2e node COS cgroupv2 script e38946d86 Updating adoption of containerd for AKS 8aca314dd Update error message for apparmor parser 48c7529de Fix incorrect error wrapped when closing ingest file 0c2c289d4 Fix seek error used without nil check 8816006d1 Fix followup items from errors replacement a94f32ce0 update the adoption status of containerd in GKE adee2c797 seccomp: add support for "swapcontext" syscall in default policy 4f0f36350 corrected link in cri architecture documentation d3724a6c1 go.mod: update github.com/containerd/{continuity,go-cni,imgcrypt} bbe46b8c4 feat: replace github.com/pkg/errors to errors e43d4206a Update k/k to 1.23.0 8d5af6be8 Prepare release notes for v1.6.0-beta.5 9c2e3835f cri: add ignore_rdt_not_enabled_errors config option eba104816 Update dependencies f4a191917 cri: annotations for controlling RDT class eae14688c tasks: add Linux rdt support 9e755d12e cmd: add --rdt-class command line option 2946db890 oci: implement WithRdt df21828d2 content/local: use syscall.Timespec.Unix 85326d76f fix: only test abstract unix socket on linux 90426378e Integration: Check GCP secrets on Windows CI artifact upload. 97623ab0c remotes/docker: allow fetching "refresh token" (aka "identity token") 8094f50dd remotes/docker/config: allow setting custom AuthorizerOpts 8e6afaa20 Fix $(PWD) issue for Windows makefile 653b8b02a Expect ErrorNotFound on Windows after Kill() ac8129706 fix: use _ for consistency f39b3ac7e fix(ctr): enable networking for Windows containers 0ff87a892 Replace tskill with taskkill aadae6d50 Fix flakiness on Windows for list stats d53c43133 Fix no-daemon flag for integration/client tests 5c2edeffb Upgrade k8s.io/klog/v2 from 2.9.0 to 2.20.0 2ee3ce510 Use insecure.NewCredentials instead of grpc.WithInsecure 2fb739aa2 Upgrade OpenTelemetry dependencies 34c4abc34 Fix default makefile target for windows 78ad7a2d3 cri-integration: Add Windows default paths abcf7c2f6 Disable TestContainerHook on Windows f1c799331 seutil: Fix setting the "container_kvm_t" label c8a009d18 add-list-stat: return container list if filter is nil f83ab813d Use task plugin for runc shim 04e57d71b Seperate shim manager and task service 44b28b61f medatada: make namespaces' deletion error less cryptic 20419feaa cri, sandbox: pass sandbox resource details if available, applicable 9e9ee66bf integration: deflake TestContainerdRestart dd26d3d09 feat: support custom timeout for blot open c0d07094b feat: Errorf usage 0e472420b Update Go to 1.17.5 569042e6d Prepare release notes for v1.6.0-beta.4 552a27081 Disable restart monitor test in Windows b7f673790 OCI: Mount (accessible) host devices in privileged rootless containers 7f70ff967 oci.getDevices(): move "non-dir, non '/dev/console'" case into switch 2c96d5b06 Run windows parallel integration test as short 807213fd3 Update restart monitor test to output daemon logs on failure 9b0303913 only relabel cri managed host mounts 90cdc6c9a images/converter: remove deprecated types fc8138468 go.mod: update image-spec to latest (v1.0.3-dev) 2d3009038 cri/server: use consistent alias for pkg/ioutil dc13bcd51 Enable lazy init for ext4 with devicemapper 68dabdcc6 Use RFC3339 format so rg cleanup works 6f9d80907 Remove Windows integration testing for 2004. 77a321a07 Replace find with native Go code 22dc60e05 Enable TestVolumeOwnership on Windows 441bcb56d Skip WithAdditionalGIDs on Darwin 4c1e26cd5 Don't fail-fast on Windows integration tests c9d1e155c go.mod: github.com/opencontainers/runc v1.0.3 44995d483 update runc binary to v1.0.3 416899fc8 Allow native snapshotter on Darwin 6b0e2414c Do not use `go get` to install executables d2f1dda0f Include runtime v2 in default builtins 392f604eb Use a single RUN command 533dd1c0e fixup: check for swap accounting f33d38c7c integration: align tags of test images c5b0a18b6 fixup: handle diff between cgroupsv1 and v2 9cc0d1f07 Set explicit ACL on test files 4ccf287da Set CONTAINERD_ROOT in Windows cri-integration ff77dd112 Add Windows Server 2022 CI runs fd0850e9e Update continuity dependency ff9d7aef3 Update volume test images 2fa4e9c0e cri: add support for configuring swap bae0d88ae Add error logging on cleanup 6bccd67e8 Revert shim plugin migration 665877a5b Move volume images from gcr to ghcr 323a62d7b Add permissions f3195b3b5 export oci.DeviceFromPath() c6d26f0d3 Authenticate against ghcr.io 2a6857d06 Skip TestExportAndImportMultiLayer on Windows 6ff1a5934 fix when kernel version < 4.13rc1 by using index=off cause overlay test error 94462d8f5 oci/deviceFromPath(): correctly check device types 7a4415dd5 Add VMware TKG & TCE to Containerd adopters 46892d340 Vagrantfile: update to Fedora 35 8de1117c9 integration: add stats result in error message 6681cc4b9 ctr/snapshots/diff: don't show the media-type in output a97564411 remotes: fix dockerPusher to handle abort correctly 1698d061c Build volume test images on Windows 7ccd733d2 Add image build workflow 95b3ab2a4 ctr: Add Linux Capabilities control flags 3d318b3bb docs: mark 1.4 as Extended 9a994877c docs: fix RELEASES.md gRPC API anchor 0a25bc1aa Integration: Separate Windows Periodic Tests workflow trigger. 507bfc91b feat: skip ci for fork 9dfbcbbc4 content/local: Close the file if Seek fails 5015130f7 Fix executable file not found when restoring shims 2b28dd363 Fix wrong make target on documentation cb1359fa8 Integration: Remove explicit version passing to `azure/CLI`. fa6759ae5 fix: server error return 5e4b033ec Update README.md repo->org 5f293d9ac [CRI] Fix panic when registry.mirrors use localhost 674b94c42 Prepare release notes for v1.6.0-beta.3 f5863e22f Update API version in go.mod 5df9ec366 Update release name to use consistent format f8d734e40 fix: make max recv/send msg size setting default 63895de45 Add support for TMP override on toml 444ef2f6d Generalize Windows CI setup script for any user. 3d6bfa3f5 Standardize cmdlet capitalization in Windows CI scripts. 6835a9470 Split runc shim into plugin components 6eea8f3f6 Add shutdown package 547040cd5 feat:support custom callopts on client side bef792b96 feat: use rwmutex instead 2f31dcda7 release: change tar name to match prior releases 70c88f507 schema1: reject ambiguous documents eb9ba7ed8 images: validate document type before unmarshal 2a81c9f67 CRI: Support enable_unprivileged_icmp and enable_unprivileged_ports options db124c560 Close file if permission modification fails 526defb57 Fix containerd fails to pull OCI image with non-`http(s)://` urls 89eebc4c0 Fix wrong error returned for image index lookup be84932e1 Rename release dockerfile to omit distro name 28126fd60 release: improve dockerfile 27d7c5038 Add arm64 to releases 6765524b7 use write lock when updating container stats b103bee4c go.mod: Bump hcsshim to v0.9.1 e17fe37e0 Fix package alias 920b24793 go.mod: Bump ttrpc to 1.1.0 6870f3b1b Support custom runtime path when launching tasks 91bbaf679 [cri] add sandbox and container latency metrics a3b756ce1 Prepare release notes for v1.6.0-beta.2 574800633 cleanup: add more description on comment a22346622 CI: bump up crun: 1.0 -> 1.3 97073c943 go.mod: github.com/moby/sys/mountinfo v0.5.0 19d9d0d2a go.mod: github.com/moby/sys/signal v0.6.0 9c455ded6 go.mod: github.com/moby/sys/symlink v0.2.0 fa12f4e69 go.mod: golang.org/x/sys v0.0.0-20211025201205-69cdffdb9359 869ccc01c Update Go to 1.17.3 3196e65f5 docs: document the runtime shim plugin config options 0d8e07681 docs: use proper markdown lists in containerd-config.toml.5.md 54c0cdae6 Update TestRestartMonitor expected time check d4f4c1380 Add runtime path in CreateTaskRequest 548579d0e Pin az CLI version 2e6d5709e Implement CRI container and pods stats b69bbe25a Vendor latest k8s.io/cri-api and netlink 9bfec3980 test: Add grace period for restart monitor test d022fbe78 Address PR comments 82cb0a63e Add mkdir on Dockerfile 6fa1bb4a5 Fix build after rebase 2cec3a34b Migrate task directory 8b788d9df Expose shim process interface 733519677 Fix after rebase df8c206a9 Cleanup shim loading b554b577b Move shim restore to a separate file a3d298193 Fix backward compatibility with old task shims 33786ee4d Add plugin dependency between shim and shim services fb5f6ce3c Rework task create and cleanup flow 7c4ead285 Add task manager 2d5d3541e Rename task manager to shim manager ea8978810 adds additional debug out to timebox cni setup 6fa9f22fa compression: support zstd with skippable frame f0d3ea96c converter: Allow hooks during image conversion 6ee8577e5 sys/reaper: avoid leaky goroutine when exec timeout 88fc5cf2d Adding scope tests for ParseAuthHeader 3e51312a6 fix shim reaper wait command execute blocked 7438edc7e Adding tests for GenerateTokenOptions 9b4a6f129 Generate token options with each scope as a separate string. b8f3ebb03 vendor: update moby/sys for darwin support 0ccc386c8 Prepare release notes for v1.6.0-beta.1 e5fc3b38e Update mailmap 37720fc6f Update api vendor a217b5ac8 bump CNI to spec v1.0.0 010a9e2bc content: close stream after commit request ebc5cf19a feat(doc): update to version 2 syntax 294143bf3 Inject otel traces to grpc client. cd2f2b0af client: expose (*image).platform 535191abf fix #6054 MaxConcurrentDownloads is not effect when Unpack is true 3b73922fb feat(doc): add Core Scheduling documentation c18c2e735 Fix spelling mistake in Windows snapshotter 130a9c7dd Ensure namespace is proxied to grpc/ttrpc plugins 2a8dac12a Output a warning for label image labels instead of erroring 602018900 integration: Enable some tests for Windows 1f1cad391 io/ioutil package has been deprecated in Go 1.16 that replaces io/ioutil functions 46be06937 close Writer after use which may leak mem 1abe50512 Prepare release notes for v1.6.0-beta.0 c5947557d Add error message to in TestContainerdRestart integration test 072a7074b Fix typo in the NewContainer function documentation ac2df3ba9 test: check file content after mount 18d483b23 Update cgroups to v1.0.2 4ed3c524c Update test timeout based on recent cancellations d252a293d Remove extra test_teardown 4a569c889 Check the pid in cri test teardown f1054dbbd fix integration client vendor e48bbe839 add runc shim support for sched core de1a39bf3 Update Go to 1.17.2 46b152f81 vendor: Bump hcsshim to 0.9.0 fb4432c24 integration: Enables TestVolumeCopyUp for Windows 0ba3532f5 integration: Enables TestRuntimeHandler for Windows 830b3c26e integration: Enable some tests for Windows (part 2) 3a713811b run `gofmt` with Go 1.17 96018b7db vendor: Updates go-cni 703b86533 pkg/cap: remove an outdated comment 1ee2bff0e Update go otel 1.0.1 b9a0c5080 modify the way for checking cos c528d2c39 Update ADOPTERS.md with additional uses 5b222d54a commands: Enables task metrics for Windows 9734b4039 Pin mingw to version 10.2.0 d19af5afb Update to golang 1.17.1 3cb0ec01e Install nssm 02e77bcdc task service: return known error type 791e175c7 Windows: Fixes Windows containers with image volumes 049042382 fix: update vendor 5c2426a7b cleanup: import from k8s.io/utils/clock/testing instead 6484fab1e cleanup: import from k8s.io/utils/clock instead d16942cf1 feat: enable cri remote client to call with grpc calloptions ca35f4e82 Windows: Cleanup rm- prefixed layers f6b7e07fd cleanup k8s ansible yaml (carry for https://github.com/jayonlau <jayonlau@gmail.com>) 933ddaa6f fix: wrong flag type da16d492c feat: support import image for specific platform 67b883146 Update mirror images to take target image name e6ddffc2a fix: make exec-id flag required in exec command 09c9270fe images: enable converter to uncompress zstd 694a00754 replace deprecated function 2bc77b8a2 Adds Windows resource limits support 224454062 Fix main branch build is broken 7c621e1fc btrfs: reduce permissions on plugin directories fcffe0c83 switch usage directly to errdefs.(ErrAlreadyExists and ErrNotFound) b9cf0d75a Fix panic in metadata content writer on copy error 6886c6a2e v1 runtime: reduce permissions for bundle dir 7d56b24f1 v2 runtime: reduce permissions for bundle dir 7a7a9a282 integration: Adds test for multilayer image import f7658e37d runtime: should fail fast if dial error on shim 483d2e947 go.mod: update opentelemetry modules to v1.0.0 084387e0b Move tracing to plugin 45c3453a7 Add open telemetry logging hook for logrus 16f3d67b5 add current process state to the error message 407d60694 Add github action to mirror image 97df73004 gha: collect Vagrant VMs' IP addresses 2bffb5f9b FreeBSD: fix tar headers & the nil check on getxattr 7854e0bff bump continuity and console version that remove pkg/errors 16d3f48a2 ctr namespaces: improve usage string 50da67359 refactor: move from io/ioutil to io and os package a68fb7add bump console version to v1.0.3 that remove pkg/errors 3e72e335f Use github images for integration tests 55893b9be Add CNI conf based on runtime class 50a568595 Change oci.WithUser behavior for LCOW 65f6a896c Fuzzing: Add 4 fuzzers + small modifications 2fecf5b02 Make sure exit signals trigger an exit during init f40df3d72 Enable image config labels in ctr and CRI container creation 6875aa5d3 import: Add option to skip creating digest image f700ae873 CI: bump up crun to 1.0 55923daa9 seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted) 8596d1188 Fix typo 73dbbf5bf Update to Go 1.17.1 498e5b27f fix error string format 6d961f967 CI: Switch to available latest images e087b47e9 import: Raise error if the imported image is filtered out 91b64c58b add xfs support to devicemapper snapshotter 8ff8b1b82 vendor: update continuity for darwin support 1efed4309 add ip_pref CNI options for primary pod ip 16cd6ed13 Additional integration tests for pulling image with labels 756f4a314 cri: add devices for privileged container 9954147c0 pin protobuild version to tag 2458afeb1 Fix content copy to not ignore unexpected EOF 6bec0d39b use a const metric for build_info ae27a6b05 Add metric exposing build version&revision 8e850bc0f replace deprecated Dail with DailContext aeea697d8 Add WS2022 support in Windows Periodic tests 55faa5e93 task delete: Closes task IO before waiting f42513112 integration: Adds Windows HostProcess tests ccc5ee303 archive: Add WriteDiff error logs 820bd9269 fix document non-synchronous in crictl.md 2bcd6a4e8 cri: patch update image labels 789abc936 using Hosts replace deprecated field 57e10439d Fixes task kill --force on Windows abf4de498 integration: Enables Windows containerd restart test 96ec0b6f3 content fuzzer: Clean up tempdir eb2530be8 Makefile.linux: build on riscv with PIE 6b0b64a51 ctr: Fixes Windows image import a43fa9f28 darwin: runtime support 5dd38792a darwin: use the default values for socketRoot variable 27046a9e0 Fix cwd flag for `ctr tasks exec` 24cec9be5 sandbox: Allows the sandbox to be deleted in NotReady state 1dd0d59b7 go.mod: Update hcsshim to v0.8.21 6d3d34b85 Update Pause image in tests & config 278176db1 Address issue forms feedback 838afd211 Adding testing of two devices e0f8c04da cri: Devices ownership from SecurityContext 7bc5aa74c Fix pull fails on unexpected EOF 11ab3cba0 Use issue forms for bug reporting e2c769d6f windows: The DefaultSpec platform should match the Default matcher 7826a21ac Update RELEASES.md 2ac996840 replace uses of os/exec with golang.org/x/sys/execabs 25644b461 Add RunAsUserName functionality for the Windows Pod Sandbox Container e18516767 go.mod: update runc to v1.0.2 3f8ea1b6a update runc binary to v1.0.2 429296910 go.mod: github.com/pelletier/go-toml v1.9.3 f8dfbee17 add cri test case 9a8bf1315 feature: add field LinuxContainerResources.Unified on cri d3aa7ee9f Run `go fmt` with Go 1.17 c3609ff4c cri: filter selinux xattr for image volumes 4dd5ca70f script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0 f7b1ceb9f integration: investigate TestRestartMonitor's failure acb81bbda integration: fix TestContainerPids 9fe7bc938 Bump integration timeout to 35 min 7fba86264 Fix dir support for devices V3 (#4847) 6f60b3016 [ctr] add HOSTNAME env for host network 8d135d284 Add support for shim plugins f8602c372 Update to Go 1.17 c9b1b2fd5 Fuzzing: Add fuzzer 9e1b57ca0 Add env for SystemdCgroup driver 1224060f8 Allow expanded DNS configuration 538d93d2f Fuzzing: Add 4 fuzzers 79b369a0b Added windows hostProcess cni skip 82fe0db9a Fix bad `make protos` failure 1c47fb17f docs: remove FOSSA's badge bc4cea4e4 docs: rename main to master 5e49ec27d Use http.Get to download binaries instead of exec.Command e6538b8bc Add trap to cri-integration test script d2f3b7146 add cpu-shares to ctr 30b832e49 archive docs and point to new location fix #https://github.com/containerd/cri/issues/1624 9cc179aa7 BUILDING.md: remove some bits about building runc 42b57cc73 BUILDING.md: markdown fixes a3d6edc0e content: return the error with its timestamp a5468852f docs: list all snapshotter-related build flags e634f04d8 go.mod: update kubernetes to v1.22.0 11a90c7ff Fuzzing: Add experimental version of container fuzzer 42a28ad2c Update Go to 1.16.7 534685f95 Fix Linux CI Linter using go 1.15.14 10eab21a4 Cleanup CI 0a0621bb4 Move plugin context events into separate plugin 6f027e38a Remove redundant build tags 3c5424454 [otel-tracing] vendor and go modules changes 3597ac859 [otel-tracing] Initial opentelemetry support 7917da764 Change default directories on Darwin 10824eaf2 remove go 1.13 from containerd d30d897ef Cleanup v2 shim c3c276ae1 Fuzzing: Fix for OSS-fuzz issue 36825 6c257552a scripts: declare ROOT closer to where it's used, and some DRY changes dba0ef4eb scripts: add missing quotes, and minor linting issues 0cb656860 test/build-utils.sh: remove support for Debian Jessie 41a04246f Fuzzing: Add two more fuzzers 2c699cc35 Fuzzing: Remove panics of container_fuzzer f2c3122e9 platforms: Format(): use path.Join() instead of joinNotEmpty() acecd6603 Change protoc link ce437864b mergo: Upgrade to 0.3.12 to fix panic d1e868c83 ci: install criu from PPA e692a0192 Add shared content label to namespaces 3a8622e30 Updates the location of protobuf downloads in docs 0d9393650 Update protobuf install to use correct repository d62d6c11d Split release steps into multiple tasks b4807122d Update release workflow to upload binary without CNI 67406b373 overlay: add an optional label of upperdir location of each snapshot 43117cf91 Script to check if entries in go.mod files are in sync 4ab3e7a53 runtime: fix the issue of create new socket with abstract address cc88f8e0a Split fuzzer to two fuzzers 7a10fd4fc respect context timeout in shim binary call 23bc3db91 Enable critest on Windows 494b940f1 Introduce a new go module - containerd/api for use in standalone clients 4fdb88464 add CRI support matrix to RELEASES.md b5fc7846c adding a little more clarity 1d3d08026 Support SIGRTMIN+n signals 18d6cc1b0 update gotestsum to v1.7.0 efa8ab715 Add runtime label to metrics 6294235d8 Fuzzing: Add container fuzzer 2405671d4 platforms: add "ios" as known OS, "loong64" as known ARCH 2556aac67 Fuzzing: Add archive fuzzer 0d45ac14e interface about shim build check 00d52bb15 integration: log all processes to investigate the test failure f1d79d33b Discard blocks when removing a thin device d2b6d192d Update cpuguy83/go-md2man binary to v2.0.1 53ec1abec remotes/docker/pusher.go: Fix missing Close() 67d07fe5c remotes/docker/fetcher.go: Fix missing Close() 0789a0c02 Add docker fetch fuzzer b483177ee Support custom compressor for walking differ 150e07b64 Use systemd cgroup driver for cgroupv2 tests 603962bc8 update gotestsum to current master a12c7bd1c go.mod: runc v1.0.1 43e0594ae update runc binary to v1.0.1 9537bc265 Dockerfile.test: build containerd in separate stage 36be5ef3a Dockerfile.test: add GOLANG_IMAGE build arg to allow overriding 8faacfca1 Dockerfile.test: clean up apt indexes after installing 9f7e6335c Dockerfile.test: build critools in a separate stage 7ec8e2d36 Dockerfile.test: build cni in a separate stage f9f423c07 Dockerfile.test: standard directory to collect build aftifacts e9f26eb87 Dockerfile.test: split dev stage, and optimize order 25fada0cc Dockerfile.test: skip curl, gcc, git and make install 546538971 install-critools: make sure DESTDIR exists dbef1d56d runtime: runc v2: remove redundant validation 18321f539 Move loop check to before sleep 2e8a572df Add timestamp to flaky restart monitor test 55fd2ab5d integration/client: go mod tidy e72046f86 Update Go to 1.16.6 bc4e416c8 Add test for archive breakout test for lchmod 894b6ae39 Fix missing Body.Close() calls on push to docker remote ac75071b4 remove pkg/cri/platforms package 0a8802df6 Allow WithServices to use custom implementations aefabe546 Dockerfile.test: add "cri-in-userns" (aka rootless) test stage 53835221f Cleanup lchmod logic in archive d1c105192 use fu wei's suggeted interface pick for marshaling 14962dcbd add alpha version 4c6e4a06f gha: make release workflow work in forks 73d28ddeb client: surface a connection error more clearly a7ad6b3be Add support for registry host path override 3a0b9ec6b Add unit test for plugin 95c708572 Update documenation for OCI distribution 1.0 a81f05f36 [Vendor] Update hcsshim to 0.8.18 16deba098 integration: Windows volume-copy-up images 63fe34add grpc config add options tcp_tls_ca a5c417ac0 move up to CRI v1 and support v1alpha in parallel bda7b5866 feat: Add snapshotter label to the new snapshot for container. 2019a1e68 Makefile: fix DESTDIR and PREFIX concatenation 04ab4418f test integration: Adds a test that restarts a failed container 03ee45006 snapshot/devmapper: log exported methods correctly a964cf0cc un-export mount.FMountat 21f532d51 move sys.FMountat() into mount package dac2543a0 sandbox: send pod UID to CNI plugins as K8S_POD_UID 5a0beaefb sys: remove StatAtime(), StatCtime(), StatMtime() and StatATimeAsTime() utils f913a4275 go.mod: runc v1.0.0 28bb59c08 update runc binary to v1.0.0 GA 63c185da9 content/local: inline sys.StatATimeAsTime() 09d78bb6b allow multi gpu to be specified via ctr 560e7d479 fixing some doc links d9694b297 Sync integration/go.mod with root go.mod 4a46ea2f4 archive: Expose ChangeWriter to allow customized diff computing cd33c007c CI: Switch to available latest images 75b4c83f0 fix deprecation config for default runtime 1bbee573a github.com/golang/protobuf/proto is deprecated 91c8fa452 Update github.com/golang/protobuf from v1.3.5 to v1.4.3 b7e79dc5a Update google.golang.org/grpc from v1.27.1 to v1.38.0 8d2e156dd Increase golangci-lint timeout 87a2e0b2a runtime,v2: Enable debug when containerd is on debug+ log level 05e51539a command line flags of setting container rootfs propagation 394f86475 Re-enable criu in main integration runs 1dada3fc2 add cgroupv2 setup for cos with a flag bfbebf02b Update gotestsum to add timestamps to junit output 2bb8ad7c9 Makefile: pass build tags to manpage build process f60d447c1 Makefile: fix tags parameter computation 9c01fe20d Allow to pass --no-cgroup option to nvidia-container-cli 77374e8b3 Makefile: FHS conformant manpage installation pathes 3ab974433 Add proper Go version before project checks af5a130bc Enable cri-integration in Windows Periodic Tests 7a2b04758 adds explanation for seccomp unset/unconfined default vs runtime default 01585595a update integration/client go.sum 419d616fe Install specific golang version in Windows CI. 69f43d458 Revert diff/walking error change 728743eb2 Fix cleanup context of teardownPodNetwork 014748bc0 fix invalid validation error checking cabe67736 tests: Use EnsureImageExists for image pulling a78bdf22d tests: Refactors PodSandbox creation 9a451d103 Update opencontainers/selinux to v1.8.2 93e268f62 tests: Symlink volume tests edfd8d599 Change Wrapf of non-error to an actual error a93b5cbc2 Install apparmor parser for arm64 environment 5f0fc4893 Add creation timestamp to RG 75daf45be docs: explicitly mention containerd's Prometheus path 2f870aa89 integration: Cleanup containerd on test teardown 558fdc680 diff/walking: fix defer cleanup b5f530a15 Makefile: fix DESTDIR environment variable behaviour 498bb36f6 scrub the stale TODO 93d4541a2 docs/cri: update ocicrypt link 792466495 docs/cri: fix broken links 05c03de94 Update Windows periodic tests 9fcea1d3f Rename atomicWrite to writeToCompletion b996e49c5 Do not run btrfs tests if btrfs kernel module is not loaded 50ad4b96c Fix incorrect UA used for registry authentication 923ab5b7c Makefile: use $@ for target file names 535d9cc59 ctr: parse mount options with embedded = character a4f97d45d Add ruleset=4 option 5dec27b6f ctr: exec handle pty resize after Start e1c845df5 Fix small typo b9378b452 ctr: exec setup IO with console 869375a41 Remove useless lines 79e345221 update the link 1acca8bba Don't check for apparmor_parser to be present ec28288f4 bump runc version to v1.0.0-rc95 599127f4d update runc binary to v1.0.0-rc95 a5b1740bb fixed typos 77285e311 Schedule Windows job daily after midnight. 2b58782df Update windows-periodic.yml 5dbae87c5 Bump github.com/Microsoft/go-winio from 0.4.15 to 0.5.0 1093f05ab Bump github.com/opencontainers/selinux from 1.8.0 to 1.8.1 b6a251749 bump hcsshim version to v0.8.17 b1d4140a2 Update docker resolver to authorize redirects 09a0c9471 tests: Adds support for Windows cri-integration tests 315739251 just release ctd-decoder not ctr-enc 1442fee22 Remove mountpoints not commonly mounted on FreeBSD fc4da9728 Pin integration test image for alpine 9643c9965 Makefile: allow overriding install command via environment 4b1b8346b Makefile: make sure manpages are built before install-man 6e249b1ae adds credentials description de04b3243 Add copyright header & make sure compilation succeeds on all platforms e1fd6be7e Fix mounts for FreeBSD de6db4038 Update vendored runc to v1.0.0.0-rc94 5c99f150a Update the runc binary used with containerd to runc v1.0.0-rc94 b890f056e Fix content.ReaderAt close c5797c8fc Update releases doc with updated support timeline c74a6c419 update to new cri-tools make install e37ddafab metadata: modify NewLeaseManager to return leases.Manager 79d800b9b Update Go to 1.16.4 0ba7303ee Prepare default branch rename 7d70992d3 tests: add test for adaptor e120261ee windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink 0b786908c doc: add missing namespaces package b0d3b35b2 windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink 9ea25634b Makefile: allow overriding go command by environment 81402e475 Fix different registry hosts referencing the same auth config. b56527cb7 update seccomp version 8014d9fee Skip TLS verification for localhost b538d8f1a Update golang.org/x/sys to add linux/ppc support b59e29773 adds description for hosts.toml e26fc8472 go.mod: cut circular dependency on github.com/containerd/containerd 15e0bd513 integration/client: go mod tidy 98f5922b5 plugin: optimize the check for the last registration 273c2bb16 tests: Prepull images used in tests 402acd7c1 Small typo fix "reimporst" f21627059 Use DeactivateLayer to recover layers that we cannot rename 421fc6ea7 Add CI periodic Windows Jobs. c0e2f4b5d Try next mirror in case of non-404 errors, too f8538b5e1 Fix error case in Windows layer cleanup b592a4c1e oci: fix WithDevShmSize Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to 1.5.8Bruce Ashfield2021-11-221-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping containerd to version v1.5.8, which comprises the following commits: ef071b07b mailmap: Add Kevin Parsons 2385fd14d Prepare release notes for v1.5.8 15d8c03e3 schema1: reject ambiguous documents 833407fbf images: validate document type before unmarshal 01428ec40 Fix containerd fails to pull OCI image with non-`http(s)://` urls 2bd3f18d9 [release/1.5] go.mod: Bump hcsshim to v0.8.23 047ea15d2 [release/1.5] go.mod: Bump ttrpc to 1.1.0 7b20299bc [release/1.5] update Go to 1.16.10 641976bea [release/1.5] update Go to 1.16.9 b988fc918 Output a warning for label image labels instead of erroring 3109820f5 Update test timeout based on recent cancellations 16762f3e5 Fix spelling mistake in Windows snapshotter 6094bc770 Use DeactivateLayer to recover layers that we cannot rename bf02a8330 task delete: Closes task IO before waiting aa7c9d9da Fix pull fails on unexpected EOF bc2f973ff Prepare release notes for v1.5.7 f95fca079 btrfs: reduce permissions on plugin directories 68119b417 v1 runtime: reduce permissions for bundle dir 97db45e83 v2 runtime: reduce permissions for bundle dir bc8fdf832 Update release notes and mailmap 77dafa20c Prepare release notes for v1.5.6 a4b51d119 Fix panic in metadata content writer on copy error 147705920 Use github images for integration tests 514137aa0 cri: add devices for privileged container 6bfd09f7c Enable image config labels in ctr and CRI container creation 923088852 seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted) 4133c775c go.mod: update runc to v1.0.2 011fb4c0b update runc binary to v1.0.2 210d3bc15 Fix content copy to not ignore unexpected EOF a863339c5 [release/1.5] update Go to 1.16.8 f3d46f828 CI: Switch to available latest images c7ed09d55 Adding testing of two devices in a directory 0ca2e2751 Fix dir support for devices V3 (#4847) 0fd19511e go.mod: Update hcsshim to v0.8.21 c0534c168 [release/1.5 backport] cri: filter selinux xattr for image volumes 27e164648 Allow expanded DNS configuration Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* global: convert github SRC_URIs to use https protocolBruce Ashfield2021-11-021-1/+1
| | | | | | | | | | | github is removing git:// access, and fetches will start experiencing interruptions in service, and eventually will fail completely. bitbake will also begin to warn on github src_uri's that don't use https. So we convert the meta-virt instances to use protocol=https (done using the oe-core contrib conversion script) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* virtual/containerd: don't rprovide virtual/Bruce Ashfield2021-09-061-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Similar to the oe-core commit: commit 93ac180d8c389f16964bce8bd5538d9389e970e6 Author: Michael Opdenacker <michael.opdenacker@bootlin.com> Date: Wed Sep 1 11:20:20 2021 +0200 meta: stop using "virtual/" in RPROVIDES and RDEPENDS Fixes [YOCTO #14538] Recipes shouldn't use the "virtual/" string in RPROVIDES and RDEPENDS. That's confusing because "virtual/" has no special meaning in RPROVIDES and RDEPENDS (unlike in PROVIDES and DEPENDS). Instead, using "virtual-" instead of "virtual/" as already done in the glibc recipe. We stop rproviding virtual/containerd to keep the namespace clean. There aren't many users of this virtual provides, but we keep it around (for now) to maintain compatibility. At the same time we convert the RPROVIDES to virtual-containerd, to keep it available and consistent with oe-core use virtual-libc, etc. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* virtual/runc: don't rprovide virtual/Bruce Ashfield2021-09-061-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Similar to the oe-core commit: commit 93ac180d8c389f16964bce8bd5538d9389e970e6 Author: Michael Opdenacker <michael.opdenacker@bootlin.com> Date: Wed Sep 1 11:20:20 2021 +0200 meta: stop using "virtual/" in RPROVIDES and RDEPENDS Fixes [YOCTO #14538] Recipes shouldn't use the "virtual/" string in RPROVIDES and RDEPENDS. That's confusing because "virtual/" has no special meaning in RPROVIDES and RDEPENDS (unlike in PROVIDES and DEPENDS). Instead, using "virtual-" instead of "virtual/" as already done in the glibc recipe. We stop rproviding virtual/runc to keep the namespace clean. There aren't many users of this virtual provides, but we keep it around (for now) to maintain compatibility. At the same time we convert the RPROVIDES to virtual-runc, to keep it available and consistent with oe-core use virtual-libc, etc. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to v1.5.5Bruce Ashfield2021-08-271-2/+2
| | | | | | | | | | | | | | | Bumping containerd to version v1.5.5-11-g69e5db821, which comprises the following commits: 27e164648 Allow expanded DNS configuration 8cfab161f CI: Switch to available latest images b9d5cff5d Update Go to 1.16.7 fe195c343 mergo: Upgrade to 0.3.12 to fix panic 677fade0f Prepare release notes for v1.5.5 166a81f88 snapshot/devmapper: log exported methods correctly eb4ba99fe Install apparmor parser for arm64 environment 0bc1e1d8a update seccomp version Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* global: overrides syntax conversionBruce Ashfield2021-08-021-6/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | OEcore/bitbake are moving to use the clearer ":" as an overrides separator. This is pass one of updating the meta-virt recipes to use that syntax. This has only been minimally build/runtime tested, more changes will be required for missed overrides, or incorrect conversions Note: A recent bitbake is required: commit 75fad23fc06c008a03414a1fc288a8614c6af9ca Author: Richard Purdie <richard.purdie@linuxfoundation.org> Date: Sun Jul 18 12:59:15 2021 +0100 bitbake: data_smart/parse: Allow ':' characters in variable/function names It is becomming increasingly clear we need to find a way to show what is/is not an override in our syntax. We need to do this in a way which is clear to users, readable and in a way we can transition to. The most effective way I've found to this is to use the ":" charater to directly replace "_" where an override is being specified. This includes "append", "prepend" and "remove" which are effectively special override directives. This patch simply adds the character to the parser so bitbake accepts the value but maps it back to "_" internally so there is no behaviour change. This change is simple enough it could potentially be backported to older version of bitbake meaning layers using the new syntax/markup could work with older releases. Even if other no other changes are accepted at this time and we don't backport, it does set us on a path where at some point in future we could require a more explict syntax. I've tested this patch by converting oe-core/meta-yocto to the new syntax for overrides (9000+ changes) and then seeing that builds continue to work with this patch. (Bitbake rev: 0dbbb4547cb2570d2ce607e9a53459df3c0ac284) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to 1.5.4Bruce Ashfield2021-07-271-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | Bumping containerd to version v1.5.4-12-g1c13c54ca, which comprises the following commits: 7b17268fd remotes/docker/pusher.go: Fix missing Close() 2f11d5855 remotes/docker/fetcher.go: Fix missing Close() 4c1722e2b Update docker resolver to authorize redirects 166a81f88 snapshot/devmapper: log exported methods correctly d2cb9949b go.mod: runc v1.0.1 6807d070e update runc binary to v1.0.1 81cfab8f5 Prepare release notes for v1.5.4 d9b284bfd Try next mirror in case of non-404 errors, too 48d7a5c5c Prepare release notes for 1.5.3 defaec610 Update mailmap 43d089233 integration/client: go mod tidy ac7bd5483 Update Go to 1.16.6 (cont.) 385d9ed00 Update Go to 1.16.6 a695a0704 [Vendor] Update hcsshim to 0.8.18 0515f9d2d Fix missing Body.Close() calls on push to docker remote f5c7cb6e0 Add test for archive breakout test for lchmod 37a44de17 Cleanup lchmod logic in archive 78b95dff2 update runc binary to v1.0.0 GA Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to v1.5.2 latestBruce Ashfield2021-07-201-1/+1
| | | | | | | | | | | | | | | | | Bumping containerd to version v1.5.2-18-g9be04c276, which comprises the following commits: 78b95dff2 update runc binary to v1.0.0 GA a2dc682f1 sandbox: send pod UID to CNI plugins as K8S_POD_UID 9d8880816 content/local: inline sys.StatATimeAsTime() 3735a7dfe Fix incorrect UA used for registry authentication 31ecdf77d Fix cleanup context of teardownPodNetwork b441ec19f Add proper Go version before project checks d31f5e6b6 fix invalid validation error checking 3fd01c4ea Change Wrapf of non-error to an actual error cba7b44b6 windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink 354f729a4 Prepare release notes for v1.5.2 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd-opencontainers: update to 1.5.2Bruce Ashfield2021-06-042-4/+47
| | | | | | | | | | | | | | | | | Updating to the released 1.5.x containerd. We also add a patch to fix the following: Since our oe-core go infrastructure insists on both -pie and static builds (for the most part), and that is not recommended by many packages, we end up with errors like: cannot find package runtime/cgo (using -importcfg) ... recipe-sysroot-native/usr/lib/aarch64-poky-linux/go/pkg/tool/linux_amd64/link: cannot open file : open : no such file or directory Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: add CVE_PRODUCT to recipeRalph Siemsen2021-04-291-0/+2
| | | | | | | | Allows the yocto cve-checker to flag CVEs, which would otherwise go unreported due to the package name not matching NIST NVD data. Signed-off-by: Ralph Siemsen <ralph.siemsen@linaro.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to 1.5-rc -latestBruce Ashfield2021-04-291-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Adding the following commits into our containerd build: 3187b6dc8 tests: Adds consumed memory stats test 969ec8949 Specify seccomp target arch for CC c19b7b64d RELEASES.md: recommend alternatives for deprecated features 8a62aa1c3 Deprecate built-in aufs snapshotter 4e7915f80 CI: allow Go 1.13 for Docker/Moby compatibility 8e589e873 Vagrantfile: update to Fedora 34 5847340a7 tests: Refactors container image usage 9f43eade6 Prepare v1.5.0-rc.3 release notes 4c7b960cb prow needs some additional setup for docker buildx 2e4c1d4b7 Use the multi-arch version of the test images 4e00c4b65 integration tests needs lsof 177273680 Add script to build test images 1b5d59dfe Add multi-arch support for test images 78e529727 add integration tests 2b0e6cdd4 Separate jobs for build and test for openlab/arm64 cdd075853 Release artifacts for Linux ARM64 efcb18742 Add unit tests for PID NamespaceMode_TARGET validation b48f27df6 Support PID NamespaceMode_TARGET 909660ea9 process: use the unbuffered channel as the done signal 0f332dadd Update cgroups for regenerated protos 391b123a5 adds quiet option for ref ab1654d0e Fix PushHandler cannot push image that contains duplicated blobs 00f8d32ef add not found debug out for check cmd; update usage 55734b1c5 Prepare 1.5.0-rc.2 release notes 3ef337ae3 Update containerd vendors to tags fbe1e140f Update Go to 1.16.3 c1d1edbad gha: use sudo -E in some places to prevent dropping env-vars 7966a6652 Cleanup code 5d79d3adb go.mod: update kubernetes to v1.20.6 1c03c377e go.mod: github.com/containerd/fifo v1.0.0 12a2a2108 go.mod: github.com/google/uuid v1.2.0 3292ea586 pkg/seccomp: use sync.Once to speed up IsEnabled 00b5c99b1 pkg/seccomp: simplify IsEnabled, update doc 6dd29c25f go.mod: github.com/containerd/aufs 330a2a809 go.mod: github.com/containerd/zfs 34780d67a runtime/shim: check the namespace flag first c3dde8c4b freebsd: add zfs to the default plugins b431fe4fc freebsd: don't run shim delete in deleted dir 1f4192daf freebsd: exclude v1 runtimes cb1580937 metadata: improve deleting a non-empty namespace's error message 5bf84034d Remove junit test result processor b83d04f91 Add variable names to runtime's interface definitions 993b86399 Add shim start opts 8a4cbabc6 Reimport windows layers when comitting snapshots af1e2af72 ci: upload junit formatted test results Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to v1.5.x seriesBruce Ashfield2021-04-152-25/+20
| | | | | | | | | Bumping containerd to the 1.5.x development series. We refresh patches and add new build dependencies, but otherwise the overall structure is the same. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: initial READMEBruce Ashfield2021-03-161-0/+30
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: add runc runtime dependencyBruce Ashfield2021-03-151-1/+2
| | | | | | | containerd is rarely used without runc, so we add the runtime dependency to make installation and image construction easier. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: export GO111MODULE=offBruce Ashfield2021-03-011-0/+1
| | | | | | | | | | With the latest go version bump in oe-core export GO111MODULE is on by default. Our build is not setup to use go modules, so we disable it and avoid configuration errors: no required module provides package ... : working directory is not part of a module Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: use service file from source treeBruce Ashfield2021-02-242-13/+1
| | | | | | | We no longer need to support both the docker and opencontainer variants, so we can just grab the service file from the source tree. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: fix service file to not reference containerd-dockerBruce Ashfield2021-02-231-1/+1
| | | | | | | | | We are not building containerd-docker anymore, so the containerd service file should not be changing it in as the binary. It is confusing when you see 'containerd-docker' in the process list, when you've built and installed containerd-opencontainers. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: remove container-docker and consolidate .inc filesBruce Ashfield2021-02-053-129/+104
| | | | | | | | | | | | | | | | There has been a warning in the containerd-docker recipe for quite some time, which indicates that it will be removed in the future. That time has come and we delete that recipe. It is no longer updated and everyone should be using the opencontainers variant. Now that we don't need the .inc, we delete it and consolidate in the single recipe. We also enable the systemd service by default, since docker is no longer in the picture and starting the daemon/service. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd/opencontainers: update to latest 1.4.x SRCREVBruce Ashfield2021-02-051-1/+1
| | | | | | | | | | | | | | | This includes the following commits: 232cee448 Update to go 1.15.8 f087d7849 runtime: fix shutdown runc v2 service edffc830b change flag from RDONLY to RDWR and close the fifo correct e7cd2030e pusher: add missing authentication support for requests ec752e8ba docker: avoid concurrent map access panic b73052d34 runtime/v2: should use defer ctx to cleanup 8cff6b375 [release/1.4 backport] Return GRPC not found error instead of plain one a6f6eb00c Add bounds on max oom_score_adj value for AdjustOOMScore Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: bump to v1.4.3Bruce Ashfield2020-12-071-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This version bump incorporates the following fixes: 727e1728d Prepare 1.4.3 release notes ae3a64aa1 containerd-shim: use path-based unix socket 428f10fd2 Use path based unix socket for shims f2e4291b6 Prepare 1.4.2 release 76f3d1955 Update mailmap for 1.4.2 release ca9950755 Update cri version to pickup unknown state fix 0b97c6204 Update cri plugin c0f1add3c Fix Windows service panic file to not be read-only fbe18caa1 Update btrfs vendor for chkptr fix for Go >= 1.14 cbbf257ab Add Go test runs to GitHub Actions CI 19776b75b Adjust overlay tests to expect "index=off" 7eb852214 Allow oom adj test to run in environments with a score 036ede698 Import crypto for all snapshotters during testsuite 5618423a0 Add comments clarifying copyWithBuffer implementation a2ebee357 replicate io.Copy optimizations 9b2156aa8 Improve image pull performance from http 1.1 container registries 56291a221 bug fix:#3448 16e51fc31 Fix integer overflow on windows 6ebd9a94a Update other actions for env/path CVE fix 0a3488c71 Fix GH Actions CI deprecations cc3be9ae3 Bump Golang 1.15.5 ebffce3ad seccomp: add pidfd_getfd syscall (gated by CAP_SYS_PTRACE) 229f5ea4e seccomp: add pidfd_open and pidfd_send_signal e45f41e3a update to golang 1.15.2 695516287 Remove setuid gosu in favor of "sudo -E PATH=$PATH ..." 77931f801 ci: run critest target for all runtimes c745d237e Revendor CRI to get disabled annotation config default 88e7f23bc Read trailing data from tar reader 856a12fca Update github.com/Microsoft/hcsshim to v0.8.10 cc6f72a00 Check if a process exists before returning it 9a44af11d Windows CNI install script using lowercase "destdir" Runtime testing completed on arm64 and x86-64, as well as with orchestration engines. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: provide 'ctr' along with 'containerd-ctr'Bruce Ashfield2020-10-271-0/+2
| | | | | | | | Historically we copied ctr into the install as containerd-ctr, but many different guides expect 'ctr' to be present. So we make the copy and then create a symlink to make both variants available. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: fix x86-64 buildBruce Ashfield2020-10-152-4/+4
| | | | | | | | | | | | | | | | | | | | Since our oe-core go infrastructure insists on both -pie and static builds (for the most part), and that is not recommended by many packages, we end up with errors like: containerd-opencontainers/v1.4.1+gitAUTOINC+e44e8ebeaa-r0/git/src/import/cmd/containerd-shim cannot find package runtime/cgo (using -importcfg) containerd-opencontainers/v1.4.1+gitAUTOINC+e44e8ebeaa-r0/recipe-sysroot-native/usr/lib/x86_64-overc-linux/go/pkg/tool/linux_amd64/link: cannot open file : open : no such file or directory In a similar manner to: https://www.yoctoproject.org/pipermail/meta-virtualization/2019-March/004084.html We introduce '-a -pkgdir dontusecurrentpkgs' to mask/fix the problem, and continue to work towards non-static builds. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: package runc shimsBruce Ashfield2020-10-141-0/+2
| | | | | | | | With the newer containerd, we need the runc shims in order to properly start a container. So we add the v1 and v2 variants to our install and packaging. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: depreciate containerd-dockerBruce Ashfield2020-10-141-0/+8
| | | | | | | | | | The containerd-docker fork has been abandoned for a while now. We take the first step in removing it, but making it generate a warning if someone attempts to use it. Next release, we'll consolodate the .inc and remove the recipe. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: upgrade to 1.4.xBruce Ashfield2020-10-144-39/+58
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updating containerd to the 1.4.x release series, which contains the following changes: 97d690d20 Prepare v1.4.1 release 42f387186 Always consume shim logs f247618a3 Report correct stats for windows containers cc5d1518f Update go list to respect build tags 086e859d2 BUILDING.md: fix description about static builds 16712ae49 bump cni version to v0.8.0 1575c88cc seccomp: add `faccessat2` syscall. 8bd2becea seccomp: add `openat2` syscall. 4e3397e05 shimv1: downgrade poroccess missing log to debug d118c90d3 Ignore SIGURG signals in signal forwarder 3ee6189fe Exit signal forward if process not found a1289d6b8 tasks: Monitor v2 tasks in initFunc as well 1f823f76d seccomp: allow io-uring related system calls 3d28944be seccomp: allow clock_settime when CAP_SYS_TIME is added e5cc7d527 seccomp: allow quotactl with CAP_SYS_ADMIN 20273a803 seccomp: allow sync_file_range2 on supported architectures. 357d10021 seccomp: allow personality with UNAME26 bit set 0c9de6629 seccomp: allow syscall membarrier caa461167 seccomp: allow adjtimex get time operation 2b80b7dc4 seccomp: allow add preadv2 and pwritev2 syscalls e71eccbca seccomp: move the syslog syscall to be gated by CAP_SYS_ADMIN or CAP_SYSLOG feff914af runtime: ignore ErrNotExist when remove rootfs 23e0ea27b snapshots/devmapper: fix rollback d68ddb0c0 Prepare v1.4.0 6be2eccd7 Update releases page for v1.4.0 d469bffcd CI: disable crun on Vagrant to decrease flakiness 77a33e3db systemd: add license header to systemd unit 8d39722fe Vagrantfile: increase memory 41469ed72 Update version for 1.4.0-rc.1 60fa35f11 Fix DCO commit limit d2472ecc5 Add CRI release build 1c7312e5d Update containerd systemd unit file ccda53760 Create etcd user in cloud init. e973719cc use containerd/project header test cb7ffd4b0 Fix indent in cni.template. 3e03ba7aa Update deployment and integration test 9c5451792 Add TaskMax=infinity 523b0b3c6 Remove `noSnat` 231d291b2 Use v2 config. 1e1688d21 Use per-pod shim. 87bd84a7b Add DefaultRuntimeName option. cfab98a5f Use ctr images import. 5e3ac16cc Add `cri` as required plugin. 5b9d8476e Use runc.v1 for now for debugging. e6e272e74 Enable runc.v2 as the default runtime in test. d19aa0fd2 Use local env to avoid writing to passed-in readonly env. ee6d69bbc Set default "" to extra runtime handler. 474c79bd5 Expose vars to configure an additional runtime handler ce12477f4 Support docker 18.09 in the test script. 146712101 Remove the unused `health-monitor.sh`. 201ad4d3c Support netd in GCE bootstrap. 5ce705750 Serve streaming on localhost by default to match k8s 1.11 default. b553fdaf3 Remove crictl on GCE for all cases. d8ce08fd9 Set stream server to serve on localhost on GCE. 1629bab7f Make max container log line size configurable through cloud init. 042378dcf Disable TLS streaming to work with new kubelet streaming proxy. 37f2ecad9 Update cni.template b58b6fef8 Disable restart plugin on GCE. f938a166c Fix kube-container-runtime-monitor. 91f8e61bd Use crictl installed in kube-up.sh 5161f663e Add `unix://` prefix for socket addresses used by CRI remote client. 1b995fcaf Add KUBE_CONTAINER_RUNTIME_NAME to fix fluentd support. 48457a254 Try using preloaded containerd if no version is specified. c67a38b0b Add log level support. 4453aac00 Improve gce bootstrapping in various ways. 1bd3cdc57 Add cni config template support. d520fac50 Enable TLS streaming in all the setup. cdb4aec93 Use systemd service cgroup and oom score adj. af8bd8068 Fix for kube-up.sh and update several documments. 005da4a9b Replace `ctrcri` with `ctr cri`. 0e2bd216c Update GCE cluster bootstrapping and e2e test 59e65e1f3 Enable container log rotation. 85b4e69c9 Do not block on stream server close. 2ea6584ca Add initial wait for health-monitor and use pkill -x. 56b7ef2c4 The ENV is finalized as KUBE_KUBELET_EXTRA_ARGS. 24a3a0a06 change crictl sandboxes to pods; other references to sandboxes 8bc30e7a2 Update ocicni to main stream. a01071558 Add a separate CLI for cri-containerd `ctrcri`. a843a3064 Use registry-1.docker.io as backup ec649079a Put version into metadata so that version won't be changed across restart. 7cbc1c8dc Set registry mirror. 9f0816ac4 Configure container runtime cgroups for cgroup. be72f47ec Add runtime cgroup and fix a cli panic. 680e21c43 Update all glog flags to `log-level`. d50b9dd64 Update containerd to 6c7abf7c76c1973d4fb4b0bad51691de84869a51. 869ea6b0c Add document for kube-up.sh 30cbfb62e Add OS and arch in release tarball. 0512d1e0b Add `cluster` directory and health-monitor.sh. a1736f98a vendor: containerd/cri 4e6644c8cf7fb825f62e0007421b7d83dfeab5a1 15fa7f378 vendor: update kubernetes v1.19.0-rc.4 4a0ac319c vendor: golang.org/x/sys v0.0.0-20200622214017-ed371f2e16b4 f80b4dc58 vendor: golang.org/x/net v0.0.0-20200707034311-ab3426394381 5a9a6a145 vendor: golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9 aa40ebb41 vendor: json-iterator/go v1.1.10 b4376e986 Update Vagrantfile for testing SELinux 55c9eade3 Bump Golang 1.13.15 e3e2c3946 update docs/rootless.md 843360298 update runc to v1.0.0-rc92 e20a5079e Add --cpu-quota, --cpu-period flag to ctr 3cc2be2a8 Update cri-tools to v1.18.0-100-g2bf7674 for Go 1.15 compatibility 628855923 Prepare 1.4.0-rc.0 release 74e9aa7ab snapshots/devmapper: don't hardcord the platform strings adeba792f Add namespace query parameter for registry proxying 5a190c707 Remove seccomp/Linux deps steps in GH Actions 6988b4d64 remove `seccomp` buildtag 362b7167a vendor: update cri (no more libseccomp cgo dependency) 03b5a053e remotes: mark GetTokenScopes public b43a01a22 Change nodeset to `ubuntu-xenial-arm64-openlab` 04b98bb0e Deprecate legacy shims b87023185 vendor runc library to v1.0.0-rc91-48-g67169a9d 02afa9425 Add --cpus flag to ctr aa56cfc0a Import Windows manifest into test build, rather than copying by script 5b1627410 vendor: update containerd/continuity efbc4488d8fe1bdc16bde3b2d2990d9b3a899165 1ec1e9eab Add Windows 10/Windows Server 2004 for integration tests faa4ff56e Usefully fail tests with unknown or bad Windows Build version 3795dd41a Always report server log from verbose integration test runs 4318f93f9 Add Spec() method to task 3611efdce update cri to 8448b92d237e877bed1e4aa7a0baf0dee234 1b320bcc2 update for cni config c2081369c Add doc about remote snapshotter 403dc83a2 mount: retry executing the helper binary on ECHILD 06fb93e0f Reject host-mode networking on Windows ca15cb0d8 Fix incorrect (cut-and-paste) method comment c8b14ae4c Set content labels based on content type d7b9cb001 shim: move event context timeout to publsher b97c660e1 cgroup2 CI: add RUNC_FLAVOR=runc 1a7bbd1f7 vendor: update containerd/cri 96099550b parseIDMapping: accept 32-bit IDs 089672fff Bump Golang 1.13.14 c383436af snapshots/devmapper: suspend a device to avoid data corruption 71f11db8a Annotate bare ErrNotImplemented returns 061d338ec CI: run CRI tests on Fedora 32 decbb0499 RELEASES.md: fix a dead link b2ee43206 CI: add back shim v1 test c4418bb3a CI: remove an unreferenced variable 212c29833 Updates to go-systemd and selinux b47c7ec27 Update to later version of critools with timing fix. 7af3d7e17 Don't clash with GH Actions runner's containerd c520f819a Bump Go 1.13.13 7119a2a15 platforms: don’t log arm variant error on darwin fc0448518 Update version to 1.4.0-beta.2 cc493eba3 vendor: containerd/cgroups 318312a373405e5e91134d8063d04d59768a1bff 7855b0a78 Make title similar with other CI workflow jobs 852587cd1 [events/exchange_test] Fix deadlock in TestExchangeFilters d47c0392d Updating build doc to require Go 1.13 09f453394 CI: {v1, v2} -> io.containerd.runc.{v1,v2} d7e59b141 enable removecontainer to forcibly remove containers 963625d7b Update runc to v1.0.0-rc91 c041970e9 update crun to v0.14 a6dd1f27d update urfave/cli v1.22.1, go-md2man v2.0.0, blackfriday v2.0.1 68b736ddf cio: should not open fifo for stderr if terminal 57a9f0b50 Minor actions fixes/updates 148cc8f71 [events] Fix deadlock in TestExchangeBasic aa191deff Change log for unknown mt to debug 45c28f56b Add ability to use remapper labels versus remapping snapshot helper c76bf5504 Make unique snapshotter opt for label-assisted remapping 331793118 allow user namespace remapping using snapshotters e977564a8 seccomp: allow 'rseq' syscall in default seccomp profile e7f069e2c describe content flow and dependencies b96f5f4b5 Fix deprecation warnings in CRI tests due to missing unix:// scheme fd99b6566 decrease log level of cgroup2 ToggleController error when running in UserNS 2b0a994cc explicitly fail apparmor when !linux bebfbab03 vendor: update bbolt to v1.3.5 1a83f9a63 Bump Golang 1.13.12 03ab1b2ca Add config for allowing GC to clean unpacked layers up ee734e867 Add test case with backticks ea0687769 vendor: golang.org/x/text v0.3.3 f1a469a03 shim v2 runc: propagate options.Root to Cleanup 8897e1520 Add more test cases with single quotes cb91b1724 Add testcase containing mountpoint with escaped backslash 87f9fdb06 Cope with double quotes in Linux Mountinfo 4c49ff88c integration: assume TEST_RUNTIME to be io.containerd.runc.v2 by default 785f4c5cd Bump CRI for 1.4x release 730b7a932 Change the type of PdeathSignal d656fa38c restart plugin: support binary log uri 0f831093c Update usage of whitelist in project d36810d66 overlay: use index=off to fix EBUSY on mount 7213cd89d Process I/O: Fix goroutine leak ae08491bf waitForPid: fix goroutine leak 8fcd5a1f2 Streamline hcs shim release flow ef0cf1264 Match version used in CRI project 2be80f999 Add windows hcsshim to release pipeline 3e95727f3 Make killing shims more resilient e64b14820 Revendor CRI to 62c91260d2f43b57fff408a9263a800b7a06a647 3dd8242a6 Add host specific headers 2f601013e cgroup2: implement `containerd.events.TaskOOM` event 62fd1750e Revendor CRI to 8898550e348932e406049e937d98fb7564ac4e7a 2bc4e90f6 Don't inadvertently clip release notes 636c533d9 Add ctr subcommand to print default OCI spec 230cf6ded Add unit test for func in remotes/docker/handler.go bb2b2825b Add release GH Action triggered by signed tag 8f1ddb142 Update release for 1.4.0-beta.1 c376f4f76 Move Windows testing to GH Actions 322628347 Fix client tests to work on Windows. b8ccdcb07 Add `ctr` flags for configuring default TLS credentials. c5273930b Update CRI to 52c2c6b5df15790b671ebd6cbbc6039a4d30 af131d725 cgroup2 CI e34bf08e5 riscv64 arch does not support -buildmode=pie 0c9b05fa6 Fix image usage calculation error 84619ee99 Fix configurations with no server provided 06b0cd45b Fix nil pointer errors 03755821d seccomp: remove the unused query_module(2) 5765991f2 seccomp: Whitelist `clock_adjtime` db74d3115 unpacker: Fix data race and possible data corruption 232518252 docker: fix data race on err d07a71b97 Bump Golang 1.13.11 0207b7ff0 Enable running CodeQL on PRs that modify Action 1a06884f1 Add CodeQL Analysis workflow 563964e9d Trigger nightly builds on pull reuqest events 77ab0104e Add release notes for 1.4 beta 6eeed18cb vendor: opencontainers/go-digest v1.0.0 7cdacdda8 Set codecov to not comment on PRs 3e7bbb8a4 vendor: update containerd/cri, remove "docker/distribution" dependency 9898dc2a6 Code about `task` in "README.md" is out of date f09e99909 vendor: containerd/go-runc 7016d3ce2328dd2cb1192b2076ebd565c4e8df0c d9d1d5b62 vendor: containerd/fifo f15a3290365b9d2627d189e619ab4008e0069caf c5078a5b7 vendor: containerd/continuity d3ef23f19fbb106bb73ffde425d07a9187e30745 b437938d2 Transfer error to ErrNotFound when kill a not exist container, also add test case. 2c77dc63a vendor: update containerd/cri to current master a4f8be1d4 vendor: kubernetes v1.18.2 0d198fd09 vendor: roll docker/distribution back to latest (v2.7.1) release 1b9640496 ConfigureHosts: remove deprecated DualStack option e9e765d6e Use tagged versions in vendor file bd3210d29 remove releases/*-beta.toml ed261720c Update ttrpc/typeurl to v1.0.1 dc92ad652 Replace errors.Cause() with errors.Is() f212e7d1f vendor: github.com/pkg/errors v0.9.1 63b7587cd snapshots/devmapper: fix race windown causing IO hangup 24b331ad1 omit sudo when EUID eqto 0 0088c2de8 sys: RunningInUserNS(): use sync.Once 76c62f272 sys: simplify RunningInUserNS to original implementation 6a9b94927 Remove remaining uses of libcontainer/system package 37c839e59 sys/proc: remove GetSystemCPUUsage as it is unused 1b66fecad Integrate sys.SetSubreaper, sys.GetSubreaper in sys/reaper package fffea312a move sys.Reap() into sys/reaper package 295e74008 sys: remove custom setChildSubreaper const ec12d3042 vendor: sirupsen/logrus v1.6.0 23aab35fd Remove libcontainer from containerd-shim ae7cdc814 vendor: update containerd/cri c1096864a Update to latest hcsshim - 0.8.9 ea182aec8 vendor: sirupsen/logrus v1.5.0 68f151593 vendor konsorten/go-windows-terminal-sequences v1.0.3 046a520c9 vendor: update containerd/cri dc7afe8fbe53db06c3f883f6f8c9895a9dfb2314 8e76d18ef remove if condition because it is handled by the sdNotify daemon func 1a10211e3 WithLease: always return context and done fn 98b30f469 Add commands to mount/unmount image from ref cd0e62f5c Allow more time for containerd to start for integration 9687ba631 test: TestRuntimeWithEmptyMaxEnvProcs should cleanup b566859ac .zuul: update go version to 1.13.10 32649fe30 Fix retrieval of golangci-lint specific version 126e497e6 vendor: update ttrpc with 6e416eafd26e6e738df716b21d421d5b59702bb4 0116352e1 runtime: ignore ttrpc.ErrClosed when delete task 917e7646a Add binary IO tests 9175401b2 Cleanup binary IO resources on error 0dc7c8595 Don't use timeout package when stopping shim logger 857408315 This config no longer exists, so remove from docs. e79d666cd vendor: update containerd/cri 61b7af7564602234662562a9d37e772f5a54facb 61597b431 Disable Travis CI on master 74ceb35f5 Small fixes to our Actions CI workflow 7a252f3ca Build runc with selinux support 041545cd6 Fix protobuild and CI check protos e3bc5c487 Use GH Actions CI status for badge 49200a1dd CRI plugin needs selinux tag as well d97cca47e RELEASES.md: update release1.2 status 4615111ba content/local: validate digest before calculating path a6828e8c3 CI: Some Go 1.13.10 updates that were missed 7da1e13b5 Bump Golang 1.13.10 35c14c6b5 sys/mount_linux: use pipe for communicating mount result f328f61b8 Update to selinux 1.5.1 f7c2bf544 Migrate functions to actions d7c2513ff Update integration test timeout 0caa23315 Rework shim logger shutdown process 067aba732 Add test for default setup for host configuration d9a1c3f9e bugfix: add default host config if not set 6d4429edd Setup dependencies between jobs e598e5e0c Add CRI tests 4175ebf23 Move integration tests to Github Actions 599547d9c Make binaries with Github Actions 3968fb0a4 Revert "vendor: update go.etcd.io/bbolt v1.3.4" 056d60224 vendor: update go-events to fix alignment for 32bit systems 4fb3410f6 vendor: cilium/ebbf 4032b1d8aae306b7bb94a2a11002932caf88c644 e822296fc vendor: runtime-spec v1.0.2 3261fb5c4 vendor: containerd/cgroups b4448137398923af7f4918b8b2ad8249172ca7a6 aa76d9537 Bump Golang 1.13.9 ad090e67e man: move ctr.1, containerd-config to section 8, and fix generation 356782cb4 Makefile: man page: rename containerd.1 to containerd.8 547301cb0 Update ctr resolver to use new config package 17b6050d2 Add Docker resolver configuration package dc131aa86 support loading certs from a directory c263c5b14 Add unit test for func in remotes/docker/handler.go c8d9c6f2a Add unit test for func in remotes/docker/handler.go fb9e3d9f2 vendor: update go.etcd.io/bbolt v1.3.4 e4cbbc78b Move checks to Github actions c1a218195 Add docs for build tags used by cri. d654dbafa Allow the id for cgroup metrics to be changed 78ab1d13d Correct logic of FIFO cleanup 92a36dc10 Add version numbers for newly tagged repos 0c78dacbc Move isFifo from process/io to sys/ and make public 9529c69b8 seccomp: add 64-bit time_t syscalls ebd745f91 ctr: do not assume runc options by default e2269f2ae archive: skip chmod IsNotExist error bd2265300 Add devmapper configuration examples 5ef66e48f ParseSignal: drop add'l check for numeric signals 649f2aac6 add -v to shim binaries 4ff9d6996 Increase golangci-lint timeout c00cf9a67 vendor: containerd/cri 92cb4ed9786a6cd271152ba1f862183d84701003 488d6194f fix dial error when clean up a dead shim 6e638ad27 Nit: fix use of bufio.Scanner.Err 4326fc624 Update Golangci-lint v1.23.8 4756258fa service_windows.go: remove unused "service" variable a9bd451ab Avoid duplicate imports of github.com/gogo/protobuf/types cad67b73f Update btrfs dependencies in docs for debian buster and ubuntu 19.10 * Fixes: #4090 632023698 Partial revert of sys: windows: use golang.org/x/sys/windows 0a7fd55f3 sys: deprecate EpollCreate1, EpollCtl, EpollWait 7b06192f6 sys: windows: use golang.org/x/sys/windows 1b7d1e81b vendor: golang.org/x/sys 5c8b2ff67527cb88b770f693cebf3799036d8bc0 ddae905b8 Support NOTIFY_SOCKET b78dfbdfb vendor: golang.org/x/sys 52ab431487773bc9dd1b0766228b1cf3944126bf ba6796abd vendor: update kubernetes v1.18.0-beta.1 f3d062423 vendor: sigs.k8s.io/yaml v1.2.0 04c805e63 vendor: github.com/google/gofuzz v1.1.0 12c7d6976 vendor: update containerd/cri 1a00c068864a59835ff442e0dddfa5a254be6bb3 5607b23b0 vendor.conf: move some imports to match position with containerd/cri e3ab8bda6 Avoid allocating slice for finding Process 1239f5403 export cgroups collectors 8c9e84174 RELEASES.md: update release status e0a8fe7cb vendor: bump golang.org/x/crypto bac4c82f6975 a687d3a36 Check error return from json.Unmarshal a3ca8a0df Add linux resource oci.SpecOpts 00e6be9f4 Add ctr c info --spec flag to output spec 3be12fe1c Do not loose snapshotter options 8cddb5f91 Pass snapshotter opts during Pull a3685262f snapshots/devmapper: do not stop snapshot GC when one snapshot removing fails b6bf7b97c devmapper: async remove device using Cleanup c7eec0c17 Fix file header in builtins_cri.go f2edc6f16 vendor: update gotest.tools v3.0.2 026e43806 Update to a released version of opencontainers/selinux (1.3.3) f8ade8deb Use named error return for service#StartShim 985b26f2f AppVeyor: disable download progress on choco installs 4105135e3 fix killall when use pidnamespace 4dd75be2b Unify dialer implementations 8e448bb27 vendor protobuf & grpc c134a9bef Use spec's mountLabel when mounting the rootfs 1d888ad6a cleanup the image synchronously for Usage case 18e581dd9 bugfix: cleanup dangling shim by brand new context fed8890e9 Enable CRI plugin for Windows builds as well 84464b801 v2: Cancel shim log ctx when ttrpc is closed f3652d068 vendor: golang.org/x/crypto 1d94cc7ab1c630336ab82ccb9c9cda72a875c382 773adf7ab Remove the executable bit for api/*.txt files 8e685f78c support building with BUILDTAGS="no_zfs no_aufs" 61596169b Update .mailmap f44d36099 Update .mailmap with changes from release-branches 499ab8a99 Update Golang 1.13.8 246a560ed script: use github.com/kubernetes-sigs/cri-tools directly 75d0c5f2e Fix incorrect comment from copy/paste of starting script 0dd6d24d2 Fix reference to LICENSE in README.md 89de113de Support 32-bit userspace on 64-bit ARM cores d8a0d29c2 Set octet-stream content-type on put request 348e683ce Fix zsh autocomplete script 263ab7014 vendor: bump gopkg.in/yaml.v2 v2.2.8 4c3827889 vendor: update containerd/cri c0294ebfe0b4342db85c0faf7727ceb8d8c3afce f0652e143 Make tests less flaky bb8af922b Add support for custom wcow and lcow sandbox scratch sizes 5e6d56ee2 Fix startup_delay within default configuration 833701165 ctr events: do not exit on an error 200241163 vendor: update golang.org/x/crypto 69ecbb4d6d5dab05e49161c6e77ea40a030884e1 32ba75f0f Update Golang 1.13.7 (CVE-2020-0601, CVE-2020-7919) e42110f32 Fix broken link to release-tool e2e07c9bc RELEASES.md update links to latest v1.2.11 and v1.3.2 0dc69620b update dependencies of containerd/cri 53ced5ffe update to latest containerd/cri (master) faf03c3d2 Pick up fix for CVE-2019-16884 in opencontainers/selinux 923c05bed Bump to opencontainers/runc new version - v1.0.0-rc10 e44d00865 Appveyor on_success field should be an array. a224937d2 Disable CGO for AppVeyor build steps 75af17946 Pull: create image record after blobs download 45a17cffb Vendor Microsoft/hcsshim with CGO removal 94964b36d Update Golang 1.13.6 22b73a9a7 vendor: bump containerd/btrfs to 153935315f4ab9be5bf03650a1341454b05efa5d 1189cc40f snapshots: fix flaky TestMetastore 35a8e6e58 sys: clean up process after test 3eb57b01b Added IO metrics e859b8a92 gc: increase sleep time in test 486d33631 test runtime v2 CPU settings 66508589d fix: eventfd leak for v2 runtime with v1 cgroups 9456040ac fix: eventfd leak 2f0db8e2a vendor: bump prometheus/client_golang v1.3.0 e10c91187 vendor: bump prometheus/client_golang v1.1.0 845b91d6b vendor: bump prometheus/client_golang v0.9.4 04506b87d vendor: bump docker/go-metrics v0.0.1: 99911ea66 vendor: bump prometheus/procfs v0.0.8 ed6ae8186 vendor: bump prometheus/common v0.7.0 c02dc24ec vendor: bump prometheus/client_model v0.1.0 77a3780c2 vendor: bump beorn7/perks v1.0.1 e1221e69a revendor containerd/cgroups 4d62d8795 bump microsoft/hcsshim to 0.8.7 95fbf3dc2 Fix unpacker to pass use apply options 3af3a7602 Fix filter errors 7b52bc506 Add unit test for func in filter.go cd1cad9d5 Support disk usage in windows-lcow snapshot f3090ce80 ci: set pipefail in zuul script 90cd777a6 platforms: fill default arm variant when parse platform specifier b553bc14a update docs/rootless.md 94d499843 Add Makefile variable to skip test packages 123af61c0 Add Cleanup to snapshot API 465c11dc8 Fix build with gccgo 52e477f94 Fix outdated comments b127b666a ctr: support $CONTAINERD_ADDRESS env var a4b423b19 overlay: test actual Opts 067a66b90 .travis.yml: run test with crun 1fb1d9321 v2: Fix missing ns when openShimLog on windows a18f77bea create local version of introspection service e739314ed mount: support FUSE helper 87e2a9595 Fix a typo in task.go d82fa4319 v2: Call shim.Delete at first when create is failed 493a36de9 Move label filter to snapshots package 06f6ea099 switch nighly builds to Go 1.13.5 c07e356d2 Update Golang 1.13.5 072dfbaf3 Support pushing a specific platform of a multi-architecture docker image to a registry 4ccb7aa22 Enable to propagate necessary information to snapshotter during unpack 496836c09 Update containerd/console vendor for fix a057bfbd7 Add more adopters to ADOPTERS.md facedf898 Remove an empty line 05d192929 Update checkImages to accept images.MediaTypeDockerSchema2Manifest c4ed3ff1e Replace ocispec.MediaTypeImageManifest with manifest.MediaType fbd46d709 runtime v2: Close platform in runc shim's Shutdown method. 02dcf384b Disable criu tests in Travis CI 62adc516d sys: mkdirAs: do chown if dir already exists 49e7039a8 cpu metrics consistency b9d9bdf1f make cpu metrics consistent with v2 docs 929ab521c fix system usage naming 659c971ca task metrics fix 23dbae3e7 Schema name fix 17d61d6b7 Units fix f287bc229 Schema names fix 6bfb24824 Fix prometheus metrics units b98cc7918 Added memory and cpu metrics for cgroupv2 75efbaf67 Attempt to make device mapper snapshotter tests less flaky 9eef69e3a Update after review comments 43fca9eba metrics: rename pids_v2 to pids a022c2181 Improve host fallback behaviour in docker remote fa62b6d23 Use logrus instead of printf for warning 08517e586 Allow empty scope authorization 499fbb033 Improve install scripts e0011978f start.go: Improve help text 9862cb8f8 support user remapping in ctr b02e20f12 cgroup2: enable controllers automatically 8f870c233 support cgroup2 caeacfce3 Correct grammar/typo in BUILDING.MD 51a6813c0 Split uid and gid user ns remapping in oci 30d92eff1 Defer layer download until unpack 9d5a095b0 Bump containerd console for os.File changes cd23ad244 Bump go-runc for buffer race fix 6a22a8fc9 Return the underlying images metadata 787be0efe Modify ctr run to search for read-only flag instead of readonly cfb4f734d Make sure for next release branch appveyor runs f92470b3e Fix dependency in BUILDING.md a6b6097c9 Fix container pid. 726dcaea5 update cpuinfo to make variant matches aarch64 and so on 6fa9a42ea vendor.conf: sort imports alphabetically a44189d2f vendor.conf: pin all dependencies by git-sha 55ea3dc9b vendor.conf: reformat to use columns 8da434668 Fix cleanup error on content client test 252d6550f Update cri and docker vendors 8a66dc6ed bump containerd/go-runc a2952bc25f5116103a8b78f3817f6df759aa7def 526c0db69 Support target snapshot references on prepare d1261b508 Update snapshot parent filter property to always exist 11ef041ff Update golang.org/x/sys to recent commit afd33bce8 test add tests to spec_opts 731e144a4 devmapper: update example base image size in README 19f7f3ccc test: Do SynchronousDelete cleanup before testing ImageIsUnpacked 0bb48aef0 Add `--log-file` flag for windows service. c56059162 Avoid deadlock in unpacker. 32ef2e630 Update README 82651d386 Cross build nightly builds (arm64, s390x, ppc64el) c479156b8 Add Github workflow for nightly builds 856ea3055 Add client unpack opts 3db1c3b8f Better support windows binaries. 843423ec3 snapshots: return error if readSnapshot fails 5bf2c6fc2 Fix panic on reference.Spec.Hostname() fda652be5 Update name for btrfs headers package a647407ca Fix dependency in BUILDING.md 608791bfc Update to Golang 1.13.4 cfb425fc1 Update .mailmap to reduce duplicates 15669a1d3 Update to Golang 1.12.13 8f74de9e9 ctr: allow specifying --runc-systemd-cgroup 7f5d90076 ctr: allow specifying --runc-binary 0f4374169 Add proto path /usr/include to Protobuild 4c99c8132 mips: -buildmode=pie is not supported for the mips arch fdf7a795b Clarify requirements for identifiers validation 76aa4e546 Use common identifiers package with less restrictive regex 84879b7c4 Add CGO makefile flag 7c016b655 add tests to server_test 8f9eff4fe Support disk usage in windows snapshot. d21f0f116 windows process shim installer a2688b972 bring back aufs and zfs 78be73662 Return not found error if no platform matched. d12b53a07 ppc64: -buildmode=pie is not supported 5e5584196 Makefile: Drop vndr whitelist 20e844a22 Use logrus trace support. 66aa1d3ef Add snapshot walk implementations e8c14c07c Added filters to snapshots API f593efdf0 RELEASES.md: 1.1 EOL aaccfcbe2 Fix `containerd config dump`. c224edc5c apply: use naive applier when running in UserNS 37b56cafc Add ctr metrics support for Windows/LCOW containers 178469e2a Update Microsoft/hcsshim vendor 3bf461ae8 Move autocomplete files to contrib/ 885232b72 bump google.golang.org/grpc v1.23.1 6356e55be Update Golang 1.12.12 (CVE-2019-17596) 074b453ac vendor: call vndr to remove useless pkgs and update vendor 7177af84a Allow 202 response code for commit d52cbc19b snapshots/native: ignore xattr errors during CopyDir f8cca26f3 Handle large output in v2 shim with TTY d5b7bf51a Move flag.Parse in tests to TestMain 54257bb5e Add local-fs.target to service file a6d3f4d30 Add device opts to ctr --privileged ffcb1cc9b Fix delete error code on the containerd daemon side. 036db34f3 build: Fix manpage generation 06be794cb Fix shim delete error code. 901bcb223 Add distribution subpkgs to core eaef634ef version: use runtime.Version() directly 25947db04 Add support for spec generation with host devices c0984941e adding go version to client description fe947e83d bump runc v1.0.0-rc9 772032598 Fix flaky btrfs test e4e7e554d Make client's WithLease more flexible. 18be6e371 Use cached state instead of `runc state`. f277665ed Bump runc to 1b8a1eeec3f337ab5d94f28980 e33f70385 Add more detail on releases 8ff5827e9 Update cri and cgroup packages b5fa55b0c ctr: Enable shell autocompletion 45ce73567 Limit travis release script to a single build 0cb7e4d5f Perfect documentations b172b7f9d Update release docs for 1.3.0 394db03f1 Fix all media types in Accept header to match RFC 90735a5d1 Update cri to 5d49e7e51b43e36a6b9c4386257c7d08c602237f. 1b1b862eb Get CRI dependency versions from containerd vendor.conf. 35d3bae1e AppVeyor: bump golang 1.12.10 (CVE-2019-16276) 95dbbdc8c Bump runc for CVE-2019-16884 62c2eea78 fix-up typo c5821baa4 Sync and stat btrfs loopback in tests 5ea936362 Perfect documentation a0ae24b98 Word spelling correction 85eac2550 Add release note for gc fix cbbb6a229 Update release note. fc31fa176 Update cri to 4ea022f82a55c449bf15bfc62ac8b0de968d81be. 0b224ac7d Update metadata interfaces for containers and leases 2a636f8c3 gen-manpages: Create man directory if it does not exist 0a2129222 Check for more kill error types dd5122809 Don't search for state.json path 6f31417d4 Generalize media types f3148d0b9 Add metrics type alias 57b51b948 Move golangci-lint deadline to config file e84a84a5a Add function to set custom auth scope in context bca374aa1 Get media type key from context 20d3fae3d Add Opt for modifying shm size 83a72858f Makefile: increase deadline to 2m for golangci-lint b4211d94e fail on file not found for shim reconnect on containerd restart fd6299be9 Fix density spec generation 3bc99755d Try set GOGC for golint 19ecd49ed implement ctr -connect-timeout 58892a3ba Skip darwin deploy 5bb0281d1 Fix missing vendor packages 5a656cacb Move manpage gen to separate binary 6ed809168 Publish cri release to gs://cri-containerd-release. f997c30ec Skip cleanup in travis deploy and avoid gcs race condition. 36c543a72 Remove extra CI testing on older Ubuntu 4e8a49948 Encrypt the secret file in containerd/containerd. f3a5b8c0a Add command to generate man pages d1a12823b Update gcs cri release. 424d33c5b Update go-runc to e029b79d8cda8374981c64eba71f28e 3db5a5ad2 Fix darwin build for cri release 1b4cec979 Update cri test to fix image reference test and fix gcs deploy. e3abd03ae Fix CRI release build. 61f113e60 Automate CRI tarball release. c1fc21e92 ctr: use NewDockerAuthorizer instead of deprecated NewAuthorizer fa11147e5 Add --env-file to ctr 5c576b026 Update and simplify mailmap c8cb864ce platforms: update known OS and arch values 3d1fdaccc config_test: sort result before check 8788af7f8 modify-document-duplicate-word d6a6e0b8b Support foreign and encrypted layers in the unpacker. a4482d9a6 Fix proxy plugin config validation 01f726589 Support v1 configurations for config dump cd79e0edf travis: fix Xenial tests not being run on master 555cb31fd Support configurable default platform in the client. c410f0eae Fix potential panic for task in unknown state. dd24d76a1 Fix potential containerd panic during graceful shutdown. fa546dc3e travis: don't run old Xenial LTS on pull requests 94e4b6879 travis.yml: add TRAVIS_DISTRO env-var for easier identification 214b8328d travis: add Bionic (Ubuntu 18.04 LTS) to test matrix b6c811b7a Update cri to 0165d516161e25e52b4ab52a404a00823f8f0ef6 db3a71173 Add 'containerd config dump' subcommand 779701b29 Add --seccomp flag to ctr 86f8be86e Add sigprocmask to default profile f4927a298 fix mis-spelling in nvidia.go bc692cc59 Use default UNIX env when image has no environment a292bf0f2 bump containerd/zfs 2ceb2dbb8154202ed1b8fd32e4ea25b491d7b251 97962976a Update ttrpc to 92c8520ef9f86600c650dd540266a00 92a5b08a6 fix-grammar-mistake 372472b5f archive: truncate modification time 2d8a65b1b Export shim publisher functions 6624a70d9 runtime/opts: move WithNamespaceCgroupDeletion from containerd to its own package 8266a3c5e fix-up spelling mistake 09b184c15 rootfs: use new ctx to cleanup instead of canceled one 2f54a7cb6 bump containerd/ttrpc 9abb3e268010ea188f4e4051f77eb5aca49315fb eb7a6bf02 bump google.golang.org/grpc v1.23.0 56bcc7767 Handle layers with the same digest in unpacker. 6f8fb9ee5 add WithImageName container opt a40c3830d Add option to pull all metadata 55f737bd3 bump hashicorp/golang-lru v0.5.3 ed1df65c2 bump hashicorp/go-multierror v1.0.0 cbb3a3790 bump hashicorp/errwrap v1.0.0 5cab0d3f3 update the max if cur will be greater than max for setting the limit 24b9e2c1a Merge configs section by section 8ebffecbc Use map for stream processors aae2d0d75 delete unnecessary checks and fix a test 9e183f5e5 add cli option to download all manifests ea6c749e3 Update config doc 19cd0a4f1 Append slices when importing config files b5f03eacd Pin to libseccomp 2.3.3 4d11bb36a devmapper: activate dm device if snap device marked as activated bca085753 Fix toml plugin decoding a1e3779ca Support config imports #3289 6e2228df7 Vendor github.com/imdario/mergo 6cf031e1e Pass ttrpc address to shim via env 89eae6429 Cleanup: fix some typos in code comment d7e1b2538 Allow explicit configuration of TTRPC address 03aafaa1c Update the integration test. 60f73b6cf Support simultaneous image unpack. 550518ab8 Read trailing data on apply 348e9f7c3 Update release notes and mailmap 8acf5a142 Update release note for CRI plugin for 1.3. 041e9debb Revendor github.com/Microsoft/hcsshim 21174cb49 Change bufferSize back to 32 1073868e5 runtime: only check killall for init process 64a0b2eb2 Revendor to remove unused dependencies 7379fa663 Remove the process default ENV 5023d96ad Remove Windows EventLog logging hook 276363938 Try to preserve exit event order 04caf1fc4 Ignore fifo error when using v2 multi-container shim 9cbd18ac7 Update cri to f1d492b0cdd14e76476ee4dd024696ce3634e501. bcc4a146e Support applying with parent directories 5a0ff41c8 Update continuity vendor 80d31d15b Update fifo for typed errors 6d0e355c6 cleanup code typos in leases.go bee4c1a8a Add retry and non-blocking send for exit events 0d27d8f4f Unifi reaper logic into package bb4c92c77 Fix shim hung 1c30d4d04 bugfix: override image.Env with process.Env, rather than be contrary 7682acb9e AppVeyor: update to go 1.12.9 81386df91 Add direct unpack support for overlay and aufs 1b389b362 AppVeyor: update to go 1.12.8 (CVE-2019-9512, CVE-2019-9514) 2e8ea9fd6 Allow timeouts to be configured in config a80db38c3 blkio.go: correct help message word spells. 3ef26cd87 bump x/sys to fix riscv64 epoll 2ff7183cc AppVeyor: update to go 1.12.7 c017e0efe Use a child context for errgroup in dispatch 75771c463 Add usage function to client b6fca48fe bump go.etcd.io/bbolt v1.3.3 0dadef19c Add docs for stream processors d085d9b46 Remove encryption code from containerd core 282b19efd remotes: remove useless line a3a30635e namespace: Copy ttrpc metadata before setting header 04b7f1b59 Remove ppc64le from travis 2fac3ee27 Add release notes for stream processor 116140977 Limit multiple platform manifests to one for size check fe3638e88 Add UnpackOpts to RemoteContext d8322e38c cast Rdev of Stat_t to uint64 for mips af7b7cdb0 Save default namespace in the client. 552a0b1be Handle stderr in stream processors 3fded74bc Add unpack opts 26b90619e Pass apply opts through rootfs/* code e1489f93c Use named pipes for windows processors 134d3c815 Add windows apply code f867401c6 Use fds and pass Payloads over diff api 366823727 Add server config for stream processors 97a98773c Add StreamProcessor for apply 0bc5df035 Clarify text on `ctr` support/inclusion 0a3769eec pusher.go: error message typo correction 635ccc067 Add cri release notes 4667ee47a Update Microsoft/go-winio v0.4.14 7792c23b1 Limit default matrix to runc v2 runtime 9f0bc2b53 Add UUID and server info to introspection 08483d18a v2: Close ttrpc connection when `Delete()` 4b5dfaee1 Completely remove Windows v2 in-tree shim 2398421d5 Fix travis matrix a5940da62 Remove `ctr cri load` and update cri-tools to v1.15.0 0a4bf1bd1 Mark faulty devices c99961c6c Update cri to b213648c5bd0a1d2ee42709c10dff63fbfee3ad7 4b4ce4a26 remotes: remove unnecessary string formatting d1b9ee543 travis: Enable travis CI for ppc64le arch bb9968891 Fix containerd on windows. 3e52e2902 Fix bug in export named manifest option 594f42319 protobuf: Bump Protobuf version to 3.7.0 c965a6c4d Prevent push by tag for sub-manifests 5cf79913e gpg: Use a Pipe() rather than a file 6a2512879 gpg: Pass the passphrase to the gpg2 tool using a file 3741fd859 Remove deferred flag when removing devmapper device b16e7c5de Update pkg/ttrpcutil with improved pipe dial logic daf12cd19 Improve error return from AnonDialer on Windows 4d5a0e19e Mark faulty device in one transaction 878a3205c Better error recovery in devmapper 578216950 Add note about pb.txt files f68186e10 Improve custom cgroup test 8a6190856 Add 1.3 beta release note 612628c2f fix wrong spells in compression.go 98ead46d1 Call Update of snapshotter plugin f543f2fbc Call CloseIO when stdin closes in ctr eb4b3e877 Fast path getting pid from task 8cd480c23 Specify protocols in ctr encrypt recipients e3cc9c20c bug fix:#3448 c27e48d66 fix mis-spelling in client.go 22f44c44d Add garbage collection doc 02826345c Add option to compress blobs on import 9da7d3036 archive: return chtimes error with path information 3d1fa6969 Implemented constructors for both encryption and decryption 392668d00 ctr:Support deleting multiple tasks at a time 05a2b63e8 Create CryptoConfig constructors in place of dcparameters 1c7eab197 Allocate a conhost during Windows service startup 364de4c35 Wrap creation of CryptoConfig in constructors 51bc61533 Update releases doc for 1.1 release 101d4b78e Add timeout to task state calls e097ab8bb Disable windows integration tests f055bdb0a Remove windows v1 runtime d531e7849 Modified image_enc_test to use a different image from other tests 5e5ae23d8 test: Check manifest.Platform before dereferencing 1945e26ac Add concurrent execs in stress tests ffa86b25f Add new shims for checking binary sizes c118c45f8 Change image_enc_test so that it more reliably delete images c6d437fd7 Corrected lease implementation c00517a94 Made fixes and optimizations to encryption GC 725d3ad8c Add --device flag to ctr 518be1cb0 Fix bug in setting request body dd0a45dfe Add flat GC label for leases dca17853d Add WithLinuxDevices Opt 804ae89be errors: use errdefs errors in client and commands dde436e65 Crypto library movement and changes to content helper interfaces bf8804c74 Implemented image encryption/decryption libraries and ctr commands 30c344394 Add crypto dependencies/vendoring a1f3ebaec Update cgroups to c4b9ac5c7601384c965b9646fc51588 b72673fdc Makefile: allow custom base path to install fab016c7a runtime/v1/linux: ignore ErrCgroupDeleted in Task.Start ce0d2489a Fix regiression from #3403 with snapshot cmd 0b29c9c37 Update resolver to handle endpoint configuration 63ceaf877 Add testing log context f63eab32e Add testing log hook to context 61d930ad5 Move specific errors to their respective packages 82826df9b Small refactor due to CI linter changes ef7f46eb7 Fix linter errors 2b521e25a Switch to golangci-lint abc152d14 fix name in containers file 70b00a0fa fix variable name 4988424fc * fix: view snapshot is deleted before diff db95af43f centralize harded-code message d643f1dc8 images: only fetch the best matched manifest info 550a6f1d7 Fix integration tests 1918ee4d1 Respect default snapshotter label 47d2ac090 Improve default label handling 4e2fc81ed Add aliases to namespaces subcommand 2a92c2741 Bump travis to criu 3.12 5ed1a3ce0 Add RELEASE note about config versioning 6601b406b Refactor runtime code for code sharing 7d2117245 Fix metadata content store to call writer digest after commit af93e4009 ctr: Add images tag subcommand ec8d9d3d7 shimv2: remove the dead task from runtime task list d3e1a51f8 vendor: bump go-runc 46af8ccd2 Check exec log flags compatibility 9fda4a5fe Bumps the version of go-winio. 6b59b425e Support --log-uri for exec subcommand 844c58102 Add cgroup delete opt for ns deletion 3d3dbc8fb Handle RequestTimeout and TooManyRequests 7dfc605fc Set shim OOM scores to +1 containerd daemon score 719a2c594 Robust pid locking for shim processes 2d0379115 docs: remove shim_no_newns in ops.md 0886e4f1b No need to keep 2017 DockerCon doc 650a7e5c1 Add hashsum for release archives cb4a8f51a bump runc v1.0.0-rc8-32-gf4982d86 bb41ef87f bump libseccomp-golang v0.9.1 174c4907d Fix shim's file IO logging 1a8df3f23 Reserve exec id to prevent race 245052243 Add timeout for I/O waitgroups 12a14c442 fix: polish log to make more clear ec78305c4 Close the inherited socket fd fbf96d302 Fix path in LogFile creator 63a8dee60 Switch to GitHub's new issue templates. 341c7c144 Update dependency containerd/cgroups 5e0d79380 Fix bugs in BinaryIO creator 75f183887 Allow opts to flow to the backend snapshotter during snapshot creation. 95f9bbf18 Add timeout in load shim v2 62e9e1169 switch to a working link 41e1bb832 Fix snapshotter getter in client code 052551573 Ensure labels is not nil in differ 67cf9f7f0 AppVeyor: Bump golang 1.12.6 0b7abc02b ttrpc updates for interceptors, close, and metadata d15a06b19 docs: Fix typo to some markdown files in /docs. dd7c0aabc remotes: support cross-repo-push bca566736 Make newBinaryIO public 31afff294 Fix backwards compat with v2 containerd configs bb0087280 Add user agent header to all requests 9547d269a Add v2 server config support with plugin URIs 9e0cd529d fix shim std logs not close after shim exit fb6b0ae4c Update x/sys, x/net and bbolt modules to support Risc-V ed308ea1e Unmount rootfs with separate Remove() in bundle cf7fb14ef Update timestamp atomic write 4f6ba8286 Ensure close in content test faf925ba2 Handle EOF from ReadAt in content.ReadBlob fa6a9f063 Add ttrpc namespace support 42f24b57e Update ttrpc to a5bd8ce9e40bc7c065a11c6936f4d032ce 7531c66d5 Ensure that the rootfs dir is created in the bundle bf24fb0ca Close file r.log after used to release resources. 5b9a43d2e Fix seccomp contributed profile for clone syscall cee19d1e6 Change restart delay for Windows service to 15s 8a388d623 leases: support resource management ac4485c76 Add support to gRPC errdefs for context cancel/deadline exceeded bbe45e446 add Restart=always to unit file a274dbe82 Fix run with specified platform 48b81e872 Do not return error when rootfs already exists. e0c4fe411 Forcibly sync writes on lcow layer.vhd after write 5e2d7efd8 Use a single custom annotation for export 41b7b0e0d Ensure namespaced writer commit has correct namespace 7f79fbb24 Move ttrpc client to pkg/ttrpcutil 5b7a327c4 Improve atomic delete fe6a2b03e Add shim cgroup support for v2 runtimes 62609d66d Fix typo in description comment 90c6c1af4 Pass options on shim create for v2 690706286 ctr: make ctr shim command easy to use 7b06c9a1c Add TTRPC client 5e962dd8b Remove unused Resize method from initState 66036d920 v1: Respect the `shim_debug` flag when load tasks a6a888cb5 Bump ttrpc fbb80b951 containerd-shim: redirect output into stdout fifo 543d1e807 Add travis_wait to prevent vndr timing out 00bc2f5cf Update to Golang 1.12, and prepare for ppc64le 67b45aef4 Add WithoutRefreshed metadata ad25c1a9c Improve ARM platform matching bd27bef4a Move checkpoint and restore commands to new files cf6e00854 Fix fd leak of shim log 6f463d350 test/snapshots: umount before committing snapshot 388705317 snapshots/devmapper: deactivate thin device after committed bdd7dce31 Add OpenLab CI configuration 660554d67 Fix error handling for task deletion. 2ed8e60fa bump google.golang.org/grpc v1.20.1 d1c59513d bump google.golang.org/grpc v1.12.2 2f22d8e67 Fix broken link to containerd logo cb7c780af ctr images import: add --no-unpack option ee902afa5 Compute manifest metadata when not provided. 5c9811ded Cleanup dead v2 shim. cfc36388b Remove redundant error checks 38e369657 Use cancel on errors eded188f4 Fix misspells 969035bcb Stop logging error on v2 multi shim log failure c7f067f27 Update vendor/ with new required vndr go.mod files 8c5779c32 bump containerd/ttrpc 699c4e40d1e7416e08bf7019c7ce2e9beced4636 dff745680 Return NotFound error for kill and delete in deleted state. 5d17ed230 Update cri to 2fc62db8146ce66f27b37306ad5fda34207835f3. e5aab17a0 bump opencontainers/selinux v1.2.2 dd85aea62 bump runc v1.0.0-rc8 5b9bd993a differ: fix deadlock on commit error 48f46516a Support disabling default setup of shim logger. c79c7921c bump docker/go-units v0.4.0 dfa51c927 runtime-v1: kill shim in cleanupAfterDeadShim 0376dd460 Don't write dumped stacks to file for ETW capture state e6fc0ed22 Convert Windows CI to use Microsoft MCR image urls 06a3a480c bump containerd/console 0650fd9eeb50bab4fc99dceb9f2e14cf58f36e7f a333dbcfb Update x/crypto to 88737f569e3a9c7ab309cdc09a07fe7fc87233c3 0fd02564a bump gocapability 7718d060e Write stack dump to `os.TempDir()` as well a4942ca4f Fix error on pull hang in CI 6bcf463b0 Move to sha-specified test image for nanoserver cfb8b5573 .mailmap: update Akihiro Suda's email address be2cbd0b2 Access to client's GRPC connection object 78f3dc433 Allow dumping stacks via ETW capture state 05dd66b2e Update go-winio in vendor.conf c9059c767 bump mistifyio/go-zfs f784269be439d704d3dfa1906f45dd848fed2beb 63c7a879b Requeue events in the shim publisher fc167f957 Correct PusherFunc helper to match Pusher intf a7af3c13a Correct import path in services/server package 9cc58781f Check task list to avoid unnecessary cleanup. 97d247cd0 Rename `hrpc` to `tcpServer` 047348e19 Add dialer for events service ae87730ad Improve shim shutdown logic a12f836d5 Use $TEST_RUNTIME for cri test. 4b3b99ea1 Add support for required plugins. 4ba756edd Fix API forward events for shims 1a1f8f11a Set nofile to 1048576 b911ae342 Add tcp service for grpc listeners a6f587e4c Use ttrpc to publish runtime v2 events a8a805cad Add ttrpc server to containerd c93d64543 Add GetOOMScore function ae5ca8177 Refactor mount path check and add comments 7045801fd delete the ingest when any errors happen during resuming status dcf6023c4 Extend release timeline d5b770aa8 Introduce 'clean-test' target in Makefile 2583d9e42 update gogo/googleapis v1.2.0 a98df70da update containerd/btrfs af5082808c833de0e79c1e72eea9fea239364877 aa8dccd22 update containerd/aufs f894a800659b6e11c1a13084abd1712f346e349c ed61d7f68 bump containerd/zfs and dependencies d667628ca bump github.com/pkg/errors v0.8.1 68ef17835 bump github.com/BurntSushi/toml v0.3.1 1978c0b74 bump gotest.tools v2.3.0, google/go-cmp v0.2.0 2741dbe2c contrib: Dockerfile: bump go 1.12 a84f87d84 contrib: Dockerfile: add a base stage a07e12cde contrib: Dockerfile: reformat, and use --no-install-recommends ba9e1ea23 contrib: Dockerfile: use build-arg for go-version 4754d2aee Update image export to support Docker format 74eb0dc81 Return event publish errors. 10cf21dcf Export ExitStatus init func a73358749 Update cri to 6d353571e64417d80c9478ffaea793714dd539d0. de1da8be3 Update handling of registry errors 8d1ae237e Always add compressed blobs to Docker import manifest c0f0b2131 Apply PR feedback 2a5e4c4be Skip rootfs unmount when no mounts are provided abfc89ce0 Update CRI to master 4730088cb Update runc to resolve selinux issues 2d11f5e6d Regenerate protobufs 830b0294c Update protobuf v1.2.0 7c1365b46 bump sirupsen/logrus v1.4.1 01310eaeb do not use unkeyed fields in compose literals 90085a7ac Add empty file to prevent build from failing baf340343 Extend Applier's Apply() method with an optional options parameter 8784eb630 Move snapshotters benchmark to a separate package adc4fa217 Use pkg/errors for all errors c22effb16 fix parseInfoFile does not handle spaces in filenames 559dfa59a Add configurable plugin path d9526f5c4 Move CloudFormation template to contrib ae04c1660 runtime: guard Close() until both streams are complete e96ac2040 runtime: log IO error when copying output streams 515be73c8 Add snapshotters benchmark 872296642 fix shouldKillAllOnExit check for v2 fa5f744a7 fix shouldKillAllOnExit check f7f6dd7b4 test: add custom cgroup test 2b8df8309 bump containerd/cgroups 4994991857f9b0ae8dc439551e8bebdbb4bf66c1 bc6ac0878 update opencontainers/runc v1.0.0-rc7 808b22353 Fix race and panic. 87289a0c6 devmapper: implement Usage 010b4da36 devmapper: implement dmsetup status 871094016 Windows: Build shim binary from Microsoft/hcsshim e16e99593 Vendor Microsoft/hcsshim@8abdbb82 5d50b9c2b Extend adaptImage function with annotations case 388c8a176 Fastpath opt and ExecProcess loading a84966451 Windows:ProgramFiles to ProgramData 6034c1950 Windows:Create root/state with ACL 7361b1987 Update Windows lcow differ to set NT VIRTUAL MACHINE\Virtual Machines SID 4c9b5ef8e Update vendor github.com/Microsoft/go-winio d15832a4c Address review comments 8f8fd3c3a seccomp: whitelist statx syscall 908b77108 Add code to return message field of returned registry errors 9a8727cf0 Allow to import an image for the default platform only. 4506eb45b seccomp: whitelist io_pgetevents f3ff95ab7 decouple api.ContentServer implementation package from bbolt dependency 14a050688 ctr: fix image cmd ArgsUsage bdd84abf0 Add additional capability handling opts a631796fd horten the unix socket path for shim b858cfb41 Makefile: allow overriding package name 7ca2c3d68 contrib/nvidia: export helper binary path and list of Nvidia capabilities a7aeffc22 Update mailmap for cgroup authors e6ae9cc64 Shim pluggable logging 506b81548 remotes: add distribution labels to blob data b8d40b353 update runc to 2b18fe1d885ee5083ef9f0838fee39b62d653e30 09cf2a629 Extend metadata images test with fieldpaths for Annotations 5124f9ee5 Write the Annotations map into the bolt db 02cc1485d Prepare boltutil for reading and writing another map 1e893b19c devmapper: add no_devmapper build tag 79248fea2 Add test for ocispec.Descriptor Annotations 34f377295 Allow WithNewSnapshot and WithNewSnapshotView to take in snapshotter options. aaae81189 Update checkpoint opts with runtime handling 160737d2c Fix no pivot and keyring opts 0b711d616 Copy annotations around where necessary 4d2a26d75 BUILDING.md: update testing section 6424a3603 ctr/commands/images/push: don't show progress if it is debug mode 7cfb99ab9 Add content gc ref labels from containers, images, and snapshots f0d5dd3c8 Use unix.SignalNum in ParseSignal on unix platform 1745951ba Vendor golang.org/x/sys d455e41777fca6e8a5a79e34a14b8368bc11d9ba e13a4b67e Update the snapshotter docs to refer to the snapshots package for WithLabels. 277147135 Fix issue with NewFIFOSetInDir with Terminal true 828f6eb84 Fix a bug in shim log on Windows that can cause 100% CPU utilization c6703d4c7 Add missing annotations map to Descriptor for gRPC transfer d2bec5422 Bump cgroups to dbea6f2bd41658b84b00417ceefa416b97 208957ba3 devmapper: proper cleanup in pool device test 734989c2a Update README fb8048371 docs: Add NAME section in all manpages 95f0a4903 devmapper: rollback thin devices on error adf5c640f devmapper: don't create or reload thin-pool from snapshotter 7efda48c5 devmapper: more precise way of checking if device is activated 37cdedc61 devmapper: add linux tags, fix build 0c6d194cc devmapper: add README and minor fixes 2218275ec devmapper: register plugin cec72efc2 devmapper: add snapshotter 3a7588252 devmapper: add pool device manager 6e0ae68e1 devmapper: add snapshotter config fcd9dc274 devmapper: add pool metadata 809e5fd3b devmapper: add dmsetup fe05e4d1a devmapper: add losetup d83e4e9b3 Vendor Microsoft/go-winio@v0.4.12 e0d7ed12a Windows: Enable ETW logging cbc032ed3 Update go.etcd.io/bbolt to v1.3.2 5e8406984 Update travis to xenial worker 84a24711e Add runc.v2 multi-shim 6bcbf88f8 Move runc shim code into common package fd6ac5d02 Vendor sirupsen/logrus@1.3.0 b553a12be runtime: allow specifying supported platforms with config f6ac73d71 fixing typo and added a missing comment. 4b3e0a8aa metadata: merge snapshot labels with metadata's labels 88f19a90a Windows: Update stackdump event name 14f7e5272 Unpack should set 0755 when the parent directory doesn't exist. a6f43b549 Add website update to release process 17b2c8498 Update supported versions b87e9eef3 Add ExecID for StateResponse bfb266ab5 Fix some misspells in helpers_test.go dc09ed1e1 Add image handler wrapper a4f7b3758 Add support for TaskDelete event on exec in RuntimeV2 00895670e Stop sending stderr with TTY on Windows 6a21728fb Use defaults package for listing namespace labels 14eaad0cd Update runc to 6635b4f0c6af3810594d2770f662f34ddc15b40d (CVE-2019-5736) 98766e863 Vendor opencontainers/runtime-spec 29686dbc 225d9b120 Fix LCOW layer ordering 0190e5f39 Removes the oci.test.exe binary. 525802f9c Use distribution's reference.ParseDockerRef 3538174e6 Bump github.com/docker/distribution to 0d3efadf0154c2b8a4e7b6621fff9809655cc580 2dacef07c Add shim skeleton code 59ea134ce OCI Modifiers for Windows d25007e54 Add structure documentation for metadata 823b7a8a0 Cleanup releases directory 7bd8dcd0d Fix potential containerd panic. 41f540621 Add release documentation f014adfa1 readme: fix example for checkpoint dfcc5942f Fix deadlock in Windows runhcs shim exec da2ab865e Add documentation for using namespace labels for configuring defaults. 952d58297 Add a separate lock for pid. 9777d7689 Revert "use state machine management for exec.Pid()" 34323985a Use labels only when default namespace is provided and prefer given options. 59432aaec Take default runtime and snapshotter from namespace labels 6629f853a BUILDING: update BUILDING.md d7ed40307 Add image pull concurrency limit. 7f5d7ff6b Update snapshots docs with garbage collector label 34672d483 metadata/gc: remove the noop-loop for snapshot reference 6ed293ba9 Fix bug in shim path lookup d63099c4a Allow matching shim path side by side with containerd 764afa0d1 Include extension for shim binary format on Windows dfebb404c remove excessive []byte(s) conversion 85aa8ad36 Move task events to runc v2 shim 28f8a90bd Update cri plugin to 4dd6735020f5596dd41738f8c4f5cb07fa804c5e. bb32c0f61 Revendor github.com/Microsoft/hcsshim v0.8.4 f44469698 Return out of windows signal handler 26ab393e7 Use context.Background for `O_NONBLOCK` `OpenFifo`. 7db569771 unix.UtimesNanoAt now supported on Darwin 132ee9b82 fix: linter issue 6468619d7 Implement the Runtime v2 Shim async task model for runhcs b444d7d50 Handle additional cleanups from prior PR 4ef9bf5c8 Windows: Publish exit status correctly in TaskExit 90caf6f6a Windows:NewDirectIOFromFIFOSet 3aec9e7be bump up runc 0befa457d Update ttrpc to support context timeout. 946e40266 Update releases files c5a8c9fc1 Fix issue in runhcs shim CloseIO 31616e794 Fix runhcs shim bug in Create with "len(Rootfs) == 0" bcd4cc51c Fixes a bug in runhcs shim Exec.Pid bc76e01a8 Update runhcs options to include CRI Sandbox support a79879e9d Add security audit report to README dee0945e1 Fix spurious ttrpc client shutdown error log on success 64a004641 Update cri-tools to v1.13.0. b55c9c6c3 Update cri to 4b4b2abb2eb19ad6913a6c5d2a6869a0a43a3fc1. 17b77aeb0 Fix annotation typo errors 5137fc6f1 bugfix: support application/octet-stream during pull 568b5be93 runtime: add Add/Delete method in PlatformRuntime interface 7faaa64cf fix: miss remove temp file in createSnapshot 4247f2684 metadata: define content sharing policy 1be86af10 add test for WithImageConfigArgs 36e4dc603 Ensure bundle removal is atomic 723797d32 docs: remove website leftovers d4ecb00f6 checkpoint: return empty image if checkpointPath exist f2344db40 do not mutate defaults in replaceOrAppendEnvValues da9471fb1 fix oci.WithImageConfigArgs for windows 897afeaf3 Revert "Fix CI due to Golang 1.10.6 / 1.11.3 regressions (workaround)" 0ec6526fd Update the delete docs for Runtime V2 on Windows e20ba5fa5 test: add test for c/r without image 40267382c fix ctr image export not found error 8be05eb23 Fix freebsd build 7b1e6f323 fix: use func args instead of build new one 9baecf66b fix: fix defer in loop 903abf33c Fix annotation typo error 52de37170 Fix CI due to Golang 1.10.6 / 1.11.3 regressions (workaround) 2d96aad77 bugfix: unpack should always set the snapshot gc label a2a424197 Add timeout and cancel to shim fifo open 6f944e419 fix: SCHILY.xattrs should be SCHILY.xattr 6ccb0d062 fix: remove dead code 2db0c6c26 Explicitly stating utf-8 when fetching oauth token 603e97a9e ctr/content: make editor flag is required 7ac221e8d Adding ctr memory and cpu flags 822ae18b1 Update cgroups to 1152b960fcee041f50df15cdc67c29db 3ae8e8a30 Add shim config for shim binary options 66c20f2b7 Update runc to 96ec2177ae841256168fcf76954f7177af 79499980e Kill should still work in stopped state. 27ba2db10 Revendor github.com/Microsoft/hcsshim to v0.8.3 2d3a4f99e should no defer when detach 70084ea6c Add /proc/asound to masked paths 6daf8b778 Eliminate misuses of errors.Wrapf a404f27a0 Add more adopters 6593399e9 cr: support checkpoint/restore without image 996c60616 fix: fix error info start capitalized b4a642f6a Add dumpStacks support for containerd on Windows 40d898a82 Windows: Allow running as a service 97dd5df66 Update runc to v1.0.0-rc6 09bf314bf Cache shim v2 exec.LookPath results fd16bf6d4 runtimev2: add image-path and work-path for c/r 83ebcf999 runtimev1: add image-path and work-path for c/r f90e5d564 Move ctr run --isolation to Windows only bbc2a995f use state machine management for exec.Pid() 461222dba fix: should get runtime name from container info 2101b1362 add ctr delete --exec-id to debug DeleteProcess a2e8ab9ff remotes: avoid panic with default resolver conf 7d91d631e Lock `KillAll`. 9639db552 refactor: no need defer in closeAll e76a8879e fix pipe in broken may cause shim lock forever for runtime v1 b3438f7a6 fix pipe in broken may cause shim lock forever for runtime v2 956e49a36 Revert v2 dropped events 1d4105cac Use named pipes for shim logs 581a63ce4 Add build requirement doc on fedora/centos 01f5aa387 add flag -d for ctr t exec to run a service in container 51ad4d302 change args usage for ctr c create bd2a21985 fix container cmd args may parsed as ctr args 90880078b Adding a --load-kmods flag to the NVIDIA OCI hook e1a59ba0f Update runc to 10d38b660a77168360df3522881e2dc2be 8e25ca6bf Revendor github.com/sirupsen/logrus to v1.0.3 0e7a70dbf skip already exists content 6f2f4e434 checkpoint: add copts to checkpoint; save snapshotter to annotation 40caece8d update tests 4fdf720b8 move rw to opt; make snapshot opt; move to NewContainerOpts 147208061 add image name and runtime name media types; remove task operation on checkpoint ce0673fd7 Restore take image 0e4d9da75 remove task handling from Restore 2d3db08da refactor spec and snapshot restore into opts 45c700a95 refactor checkpoint and restore to client 555ea3fb4 Ignore modprobe failures in ExecStartPre (systemd unit) abd971cfb Revendor github.com/Microsoft/hcsshim 831a41b95 Fix process locking and state management c4feaa75c fix: fix failed to get container-shim relation with io.containerd.runc.v1 c524b9ce4 Partially revert the event discard change in #2748. 38d7d59e8 enhance: update v1/v2 runtime ce6d4c9a9 add docs/rootless.md dd0539b09 ctr: add --cgroup for oci.WithCgroup 18363d0c9 Add ADOPTERS.md file 354dab0ca Forward ctr.exe --debug as io.containerd.runhcs.v1 options a33ad4024 Implement io.containerd.runhcs.v1 shim log opts ec3dbd155 Add io.containerd.runhcs.v1 shim proto options 7d70d2b78 Fix Makefile to run protobuild on paths with spaces 83f4ab885 makefile: remove emoji on Linux 8329a491b Build Windows V1 and V2 runtimes always 124194b98 check task existence before new task a02f7cea8 bugfix: use skip-verify flag in ctr instead of insecure 2bb7da843 Fix mingw version back to working version with Golang 068880ff1 Add custom headers option to dockerResolver fa912a79b update link for slack invite 7c85d873a fix typo in ResolverOptions.Credentials documentation 232a06349 Increase reaper buffer size and non-blocking send 00ba92364 bugfix: CloseIO should return correct status code 1cc93460d Bump aufs for unsupported errors 1301813f7 Update ZFS for unsupported warnings 16aaf6c06 Change unsupported snapshot warnings to INFO 07237e34e Bump to Go 1.11.x c206da795 optimize shim lock in runtime v1 c5a0c7f49 Add build option "GODEBUG=1" Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-07-21 22:41:37 +0000