| Commit message (Collapse) | Author | Age | Files | Lines |
|---|
| ... | |
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping compose to version v2.26.1-364-geaf980094, which comprises the following commits:
eaf980094 build(deps): bump github.com/opencontainers/image-spec
4c2ecb542 reject compose file with bind mounts
bcd000ab4 refuse to publish compose file with local include
8092ce941 build(deps): bump github.com/docker/buildx from 0.21.1 to 0.21.2
97595066e build(deps): bump github.com/docker/docker
508309414 build(deps): bump github.com/docker/cli
b6c8a2b9f display the location of OCI or GIT Compose stack download
19571c2c8 e2e test for watch.include
0ef7bbcdd introduce watch.include
66dfa7d18 block the publication of an OCI artifact if one or more services contain only a build section
876ecc48b Test version command
c7bf302c2 wrap builder execution within a project/build span
7b3bdbe03 otel attribute to track builder implementation selected
094b48fd7 build(deps): bump github.com/google/go-cmp from 0.6.0 to 0.7.0
43c52e2a8 build(deps): bump tags.cncf.io/container-device-interface
6c1ee1069 support refresh pull policy
e38b729a3 fix service: additional_contexts running internal buildkit client
145bb8466 Update yaml docs
acac18413 Link to configuration file docs
3292740c1 build: only print COMPOSE_BAKE recommendation when disabled
cae8e8463 require go 1.23|1.24 (stable)
da2eff4ba add support for gw_priority, enable_ipv4 (requires docker v28.0)
20f780e95 make the mocks generator happy
cf2fc2005 go.mod: docker/docker, docker/cli v28.0.0, buildx v0.21.1
d0398a468 go.mod: github.com/moby/buildkit v0.20.0
ac40aae4c go.mod: golang.org/x/exp v0.0.0-20241108190413-2d47ceb2692f
f25fea5e6 pkg/compose: stopDependentContainers: rename var that shadowed
b27f56eb1 fix error message when detach is implied by wait
4e593ed07 Fix pull --parallel and --no-parallel deprecation warnings missing
d956ff13d don't display bake suggestion when using --progress with quiet or json option
5f7c9a2b4 report error using non-file secret|config with read-only service
fd0c23a1c build(deps): bump google.golang.org/grpc from 1.68.1 to 1.70.0
7aa64ae9c run watch standalone if menu fails to start
c23eea934 build(deps): bump github.com/spf13/cobra from 1.8.1 to 1.9.1
036da4795 go.mod: remove toolchain directive
33172d5e4 let user know bake is now supported
3f1a6b72a build(deps): bump gotest.tools/v3 from 3.5.1 to 3.5.2
f9a6e6c41 build(deps): bump golang.org/x/sync from 0.10.0 to 0.11.0
18ef6e592 build(deps): bump github.com/spf13/pflag from 1.0.5 to 1.0.6
2884d6df0 Fix ls --quiet help description
4459012a4 Dockerfile: update golangci-lint to v1.63.4
6f1f76c0e pkg/e2e: fix contains: use assert.Contains (testifylint)
ed72c2187 use BlockUntilContext
fa4cfb652 build(deps): bump github.com/jonboulle/clockwork from 0.4.0 to 0.5.0
200638b02 build(deps): bump github.com/otiai10/copy from 1.14.0 to 1.14.1
a0320f12e build(deps): bump golang.org/x/sys from 0.28.0 to 0.30.0
f8a912ab9 bump compose-go v2.4.8
c23a7e728 golangci-lint: enable copyloopvar linter
49575ef49 gha: add docker engine v28.x to the test-matrix
faa46d374 go.mod: github.com/moby/term v0.5.2
6ecb8d40a Full test coverage for convert compatibility cmd
a6a39422e remove cli.args opentelemetry attribute
40cd08f31 Update link in stats --help output
5e2abb6c2 support additional_context reference to another service
4db5fcd56 fix bake uses selected builder
f14c15fa5 capture error message reported by bake and forward to compose
8d68ef587 fix exporter to only load image for default platform
cde9ae595 pass --allow for filesystem read access
806ac91cf add warning when trying to publish env variables with OCI artifact
1c073c0a0 watch should ony build selected services
840288895 add --with-env flag to publish command this flag allow publishing env variables in the Compose OCI artifact
4b70ff0cc fix support for ssh key from CLI flags
23351ece8 remove exit code per error type used by legacy metrics system
7c7407672 bump docker to v27.5.1
25cfa66a9 bump buildx v0.20.1 and docker v27.5.0
f160333e9 ci: use main branch for docs upstream validation workflow
d04b3f48e e2e test covering multi-service rebuild with common resources
ed10804e0 manage `watch` applied to mulitple services
52578c099 Properly handle "builtin" seccomp profile
bd2b49a1c add codeowners file
433a60e12 ci: fix provenance for binaries and generate sbom
489fe9cf0 add support for BUILDKIT_PROGRESS
ef1931c8d add missing tag for build during merge workflow
9be7a3c9a ci: re-use local source to build binary images
666996bee ci: use local source for binary builds
083f67621 ci: update bake-action to v6
e81de103d simplification
fa3950346 image can be set to a local ID, that isn't a valid docker ref
a35158502 can't render progress concurrently with buildkit
b6db1380e exclude one-off container running convergence
2ebb47543 Only override service mac if set on the main network.
d474515d4 remove engine v25 from e2e test matrix The 1st version available for Ubuntu 24.x is Docker Engine v26
2b21c5df9 fix relative path in compose file
1f3c10eb4 bump compose-go to v2.4.7
68ad165a5 replace tibdex/github-app-token by official GitHub create-github-app-token
3060ed279 bump golang.org/x/net to v0.33.0 to fix potential security issue https://github.com/golang/go/issues/70906
be09b2e8c checkExpectedVolumes must ignore anonymous volumes
571a1af01 When retrying to resolveOrCreateNetwork, retry with a valid network name
8f644eea7 only check bind mount conflict if sync action is involved
56e92e34b use the 3 latest major versions of the engine to run e2e step
a42a04dfe bump Golang version to v1.22.10 and update CI actions
34bcd03a7 add --pull to run command
ed61e42f9 CI to validate fmt
65696bb1c `make fmt` so any contributor can enforce formatting
446e00520 format code with gofumpt
c01c9c29f e2e test to prevent future regression
038c81f34 only check volume mounts for updated config
a20b69ac5 e2e test for recreate volume
977530c22 build(deps): bump google.golang.org/grpc from 1.68.0 to 1.68.1
d4db8b6b1 build(deps): bump golang.org/x/crypto from 0.27.0 to 0.31.0
f8ce0f04e build(deps): bump golang.org/x/sys from 0.27.0 to 0.28.0
8e0520e71 prompt user to confirm volume recreation
332311358 Recreate container on volume configuration change
df9e420dd introduce watch restart action
142f5dba8 bump otel dependencies to v1.28.0 and v0.53.0 to align with buildx, buildkit and engine versions
700c586bc bump docker/buildx to latest release
fc566509d fix support for service.mac_address
e73c2303f update xx to v1.6.1 for compatibility with alpine 3.21 and file 5.46+
624303233 build(deps): bump golang.org/x/sync from 0.9.0 to 0.10.0
a1729c52d Update pkg/e2e/watch_test.go
254224c18 first watch action for a file event wins
0861e6845 fix
af5b74850 revisit TestDebounceBatching
32a22c1f4 introduce sync+exec watch action
e6ea8fb96 log configuration error as a watch log event
043465448 do not require a build section but for `rebuild` action
1d0839086 pull --quiet should not drop status message, only progress
69a83d130 use latest engine tags
781b9f1cd Bump buildx to 0.19.1
cbff0e555 be sure everything has been cleanup at the end of each tests
e4222bff5 add local config.json to test configuration dir if exists
25197fe6d disable failing TestBuildSSH test
85cdaf9dd fix build with bake
a8469db83 bump containerd to v1.7,24
08488dae5 bump google.golang.org/grpc to v1.68.0
cc3a216f2 build(deps): bump github.com/moby/buildkit from 0.17.1 to 0.17.2
6e818b9ae build(deps): bump github.com/compose-spec/compose-go/v2
6b3e57503 only stop dependent containers ... if there's some
8e497a128 disable TestNetworkConfigChanged which is unstable on CI
5aed70437 only check attached networks on running containers
1ff9b758d fix: commit tests
9eaba5597 feat: add commit command
a85f8a40a run build tests against bake
095f65cb4 delegate build to buildx bake
208e57ded build(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0
2d148faed use service.stop to stop dependent containers
43ac1e31c Update wait-timeout flag usage to include the unit
5561a778c go.mod: github.com/docker/cli v27.4.0-rc.2
ae48f488d go.mod: github.com/docker/docker v27.4.0-rc.2
5e3a09538 go.mod: github.com/docker/cli 8d1bacae3e49 (v27.4.0-rc.2-dev)
a2a3eb72e go.mod: github.com/docker/cli v27.4.0-rc.1
3513b4242 go.mod: github.com/docker/docker v27.4.0-rc.1
d4fa63fdc Update pkg/compose/convergence.go
c21d4cfb4 detect network config changes and recreate if needed
61f1d4f69 go.mod: github.com/docker/buildx v0.18.0
f7cce281d go.mod: github.com/moby/buildkit v0.17.1
bcaacc7f2 gha: test against docker engine v27.4.0
3f5898f8d push empty descriptor layer when using OCI version 1.1 for Compose artifact it fixes a repository creation issue when pushing the 1st time a Compose OCI artifact on the Hub
2bb67f270 remove ddev e2e tests
bf521fe3a implement remove-orphans on run
11e9621da ci: enable testifylint linter
a9de9abcf Emit events for building images
799ab842a Fix compose images that reutn a different image with the same ID
2f65ace2a remove obsolete containers first on scale down
aa0a4189e pass stal bot inactivity limit from 6 to 3 months
eba3ff8f3 fix(config): Print service names with --no-interpolate
6313365ba build(deps): bump golang.org/x/sys from 0.26.0 to 0.27.0
dbd51745c build(deps): bump golang.org/x/sync from 0.8.0 to 0.9.0
a8bfbc147 bump compose-go v2.4.4
fbbd6f83d Avoid starting all services on rebuild
a00097898 remove ArtifactType from Config in OCI v1.1 definition of the artifact
361c0893a build(deps): bump github.com/compose-spec/compose-go/v2
513b6128c Service being declared in a profile must not trigger re-creation
eececb9ad Add profile e2e test case to document in compose
501b5acde Update `MAINTAINERS` file
f51bc4cd0 bump compose-go to version v2.4.2
517f87a37 bump google.golang.org/grpc to v1.67.1
718049cbd bump go.uber.org/mock to v0.5.0
02371f312 bump golang minimal version to 1.22 in go.mod
a7c9de82b build(deps): bump github.com/containerd/containerd from 1.7.22 to 1.7.23
51ebeb544 introduce generate command as alpha command
fafaa9c5b bump compose-go to version v2.4.1
fc9c3cde0 Add license header to dockerignore_test.go
73bfbab54 fix
2ac081b4c fix(dockerignore): Add wildcard support to dockerignore.go
eeea049f1 push: Fix error message typo
26064d4b6 allow usage of -f flag with oci Compose artifact
7c46beb8a resurrect --all flag for cp to target oneoff container
aa1ec4524 connect to external networks by name
a4ee6ca7a don't warn about uid/gid not being supported while ... they are
5617eff0c bump compose-go to v2.4.0
fa24ab8e2 one-off container are not indexed, and must be ignored by exec --index command
0aad9595a don't use progress to render restart, which hides logs
813900180 compose-go clean volume target to avoid ambiguous comparisons
82417bd5b add support for bind.recursive
0cbb73c02 Improve error message to include expected network label
38e3d670a desktop: allow this client to be identified via user-agent
24c78728e bump compose-go to v2.3.0
9eeb2d315 convert gpus to DeviceRequests with implicit "gpu" capability
8da82c98e gha: set default permissions to "contents: read"
1a8c85548 Add security policy
15bd0b0c5 add support for raw env_file format
39d0f6477 build(deps): bump golang.org/x/sys from 0.25.0 to 0.26.0
3a95a0872 add support for CDI device request using `devices`
f794c79eb Support Dockerfile-specific ignore-file with watch
407d82570 Remove feature flag integration with Docker Desktop for ComposeUI and ComposeNav
82b41b9eb introduce service hooks
6c06170eb pass device.options to engine
60c1311f6 chore: remove errors depricated pkg
17add87e4 fix: validate-go-mod
bf0418bac fix: lint
b9d0c77cd feat: add export command
bdb854561 fix(convergence): Serialize access to observed state
41df35c1f Remove bind options when creating a volume type
3ef5045a0 Bump docker v27.3.1
d9df7aab6 fix(push): Fix unexpected EOF on alpha publish
c9d96b449 use compose-go version fixing extra_hosts unicity issue
1744b4576 Show watch error message and open DD only when w is pressed
87f457e7d add tests to down.go
abcc91e2b fix(down): Fix down command if specified services are not running
8b9fe8984 After container restart register printer consumer
34b18194f check secret source exists, as bind mount would create target as a folder otherwise
ce27dba52 wait for dependent service up to delay set by --wait-timeout
d2b945613 append unix-style relative path when computing container target path
9c60fe67d revert commits link to mount API over bind changes
c16df17e1 don't set propagation if target engine isn't linux
20404db12 build(deps): bump github.com/docker/docker v27.3.0-rc.2
f2ff7fd75 build(deps): bump github.com/docker/cli v27.3.0-rc.2
cb00aaad2 set propagation default
e885bc084 Remove custom codeql workflow
73d3a25eb fix import
3524bcfad chore(watch): Add debug log when skipping service without build context
1076f1d9a stop dependent containers before recreating diverged service
16652ed26 Fixed possible `nil` pointer dereference
c6a76b9bd bump github.com/docker/buildx v0.17.1
3a0e3ba7e build(deps): bump docker, docker/cli to v27.3.0-rc.1
86ef8e62c gha: test against docker engine v27.3.0
8bf0627ea show sync files only in debug level
2e1419168 chore(watch): Add changed files path/count to log
155f64182 build(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0
8db0cba0a bump compose-go to version v2.2.0
a7424435b Restore compose v1 behavior to recreate containers when ran with -V
d445ebba3 fix linting issues with golangci-lint 1.60.2
f592aad10 bump golang to version 1.22.7
ef46445ed bump dependencies versions, engine and cli v27.2.1 containerd v1.7.22 buildx v0.17.0 buildkit v0.16.0
150593298 build(deps): bump golang.org/x/sys from 0.22.0 to 0.25.0
524a97e55 Fix typos
1d608e033 Use logrus instead of direct output to stderr.
329ad7392 attach: close streams when done
b633c5c3e Fix typo in pull.go
e6ef8629a Allow combination of bind mounts and 'rebuild' watches
d658fecc6 service hash must exlude depends_on
f9c7a0cc0 prefer mount API over bind
6e172d6b8 docs: duplicate documentation for root cmd
98e261ba3 docs(wait): Fix wait command description
11c7a25ae allow to add empty line in the logs when nav menu activated
234036756 upgrade docker versions
9c03797f9 initial sync files that modified after image creation
485c0eba5 initial sync for root directory
69384a9a0 Removes redundant condition from toAPIBuildOptions in build.go
1601ead7b docs: Update docker compose kill usage
ea4ccf639 Fix stop on file chane for sync-restart action
b1850ea4d bump engine and cli to v27.1.1, buildx to v0.16.1
adba639e8 remove all dependabot update PRs for OTel dependencies
d8518529c gp.mod: github.com/gofrs/flock v0.12.1
c79f15da9 go.mod: golang.org/x/sys v0.22.0
3f55382ff update to go1.21.12
44337d2bb Enhance JSON progress events with more fields.
bc733508d bump compose-go v2.1.5
c422b5447 bump github.com/docker/cli v27.1.0
e74441c90 bump github.com/docker/docker v27.1.0
2bac32a46 bump github.com/containerd/containerd v1.7.20
f278400fb gha: add docker 27.1.0
4f9db4d3e fix(containers): fix sorting logic by adding secondary sorting for one-off containers
06bf339a4 fix: typos
231ea1005 update docs generation to avoid man pages generation
46679150d bump compose-go to v2.1.4, buildx to v0.16.0, containerd to v1.7.19 and buildx to v0.15.0
d3d378b92 restore setEnvWithDotEnv
163cdfd31 empty env variable with no value must be unset in container
25f85938b exclude unnecessary resources after services have been selected
cacbca859 change time for stale bot
ecac13f27 Remove debug mode and run twice a week
14793cc2e Add stale workflow
11d5ecdc7 update docs
9549a213b feat(watch): Add --prune option to docker-compose watch command
da434013e Remove COMPOSE_MENU env from e2e tests
ace69c96a Use rawjson for the build backend.
2db04c1e4 Set logging format to JSON.
8f7cd0048 Format errors as JSON when in JSON progress mode.
5a6e1a7e2 Pass 'plain' instead of 'json' to build backend
06545d066 Add JSON stream progress writer
075fd9345 go.mod: docker/cli, docker/docker v27.0.3
d062ad739 gha: test against docker v27.0.3
7cd5209cc go.mod: docker/cli, docker/docker v27.0.2
f79c28168 Remove `console.Terminal` check and use `IsTerminal` from `streams.Out`
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping moby to version v28.0.1, which comprises the following commits:
18143632f7 Revert "contrib/check-config: add ipset related flags"
558da63444 Jump to DOCKER-INGRESS from DOCKER-FORWARD
76417bf763 Don't use ipset
c35159ed7d c8d/manifests: Fix Content size including missing content
468c2c814d Fix swarm network creation from a config-only network
8e6cc4ac48 Fix swarm net validation for config-from networks
8cc4d1d4a2 Fix daemon startup on a no-IPv6 host
341cafa611 Test with a drop rule appended to filter-FORWARD
984a610a21 Add chain DOCKER-FORWARD
21582b84fb c8d/list: Fix empty Manifests for some images
6b1b170708 c8d/inspect: Fix image not found error for index-only image
5ced8fd377 vendor: tags.cncf.io/container-device-interface v0.8.1
a92d20bcc4 Better error message for missing ip_set kernel modules
73f2a5336d libnet/d/bridge: fix compilation on i386
013c43fb56 Mark default-bridge-only opts in --help and manpage
3cf4ff971d Fix network inspect IPv6 gateway address format
501ce33bab Fix v28 regression `protocol "tcp" is not supported by the RootlessKit port driver "slirp4netns"`
ccdfac5328 contrib/check-config: add ipset related flags
ac8b4e3e75 daemon: handleContainerExit: ignore networking errors
d67f035d31 vendor: github.com/moby/buildkit v0.20.0
1fde8c4615 builder-next: fix cdi manager
cde9f0752e vendor: github.com/moby/buildkit v0.20.0-rc3
b2b55903d0 Dockerfile: fix linting warnings
a3628f3f8e docs/api: add documentation for API v1.48
9eccc20a17 c8d/list: Fix panic when listing images
4e97729f14 c8d/list: Test with SharedSize = true
322eddfb41 api/swagger: remove custom example from /containers/{id}/json endpoint
60539d0956 api/swagger: remove custom example from /containers/json endpoint
119b52f302 golangci-lint: ignore "nested context" (fatcontext) in tests
15fbd67407 Dockerfile: update golangci-lint to v1.64.5
7b6c3ebe7b api/swagger: inline Exec example values
2fc90096bf project: update status of branches
bd92f2bb92 daemon/logger/splunk: New(): combine switches for format validation
eac39ffdb8 daemon/logger/splunk: remove some intermediate variables
9bb3900c30 daemon/logger: Info.ExtraAttributes: make env-var handling conditional
cbbff10b01 daemon/logger: use consistent name for "extra attributes"
ba559c4f12 daemon/logger/fluentd: fix minor (linting) issues
b9e7e82b66 daemon/logger/splunk: plunkLogger.postMessages(): improve logs
2f82cbb5f8 daemon/logger/splunk: suppress some unhandled errors
f049d0c66b daemon/logger/splunk: don't defer in a loop
0d938b6bb3 daemon/logger/splunk: rename var that shadowed import
529a56d31a container: Container.StopSignal: fix handling of invalid signals
ef0fe1ac00 container: define defaultStopSignal as a syscall.Signal
0a4c4c9e82 container: some cleanups in view tests
49f2320bc7 container: some cleanups in tests
07aa4d96ea container: TestReplaceAndAppendEnvVars: assert with gotest.tools
0914e97df2 container: rename test file
9bcac6d573 c8d/progress: Fix panic when pulling some images
acc4d45278 container: ensure image manifest is deep copied from the container into the snapshot
903ba2f487 client: Move opts to separate files
b9319f64ed client: Change ImageSave to use functional options
ae4c688fd8 client: Change ImageLoad to use functional options
85808a6abf client: Change ImageHistory to use functional options
5719e8edf9 Don't create iptables rules when iptables is disabled
068aa86c23 client: Group deprecated functions into ImageAPIClientDeprecated
d1c6550f71 daemon: use structured logs for printing reloaded config, move to cli
838ae09a23 Dockerfile: update runc binary to v1.2.5
707d8d80b9 vendor: update buildkit to v0.20.0-rc2
c9f8758570 golangci-lint: enable reassign linter
04ae510a1e golangci-lint: enable gocheckcompilerdirectives linter
179e621019 golangci-lint: enable exhaustive linter
1f9ada6668 golangci-lint: enable errchkjson linter
8b2439a383 golangci-lint: enable durationcheck linter
d62e499bfe golangci-lint: enable dogsled linter
75fc4de8c3 golangci-lint: enable asasalint linter
7218a64e87 golangci-lint: enable wastedassign linter
55b047e49c golangci-lint: enable fatcontext linter
a97d6fe84f golangci-lint: enable nosprintfhostport linter (again)
fc09a52d85 golangci-lint: enable spancheck linter
a0ef452f0c golangci-lint: enable mirror linter
0de3c1b7e3 golangci-lint: enable makezero linter
e6e68278f6 golangci-lint: enable iface linter (with default settings)
c8ee8c6302 golangci-lint: enable nilnesserr linter
081fac187e golangci-lint: enable exptostd linter
927e07e46e API: add Platform (OS and Architecture) to /containers/json
e364e28ec8 vendor: update buildkit to v0.20.0-rc1
d47eb241bf vendor: github.com/vishvananda/netlink 655392bc778a
47ff7969b4 Add experimental feature warning for image mount
3e51818c5c Add ability to return warnings from host config
c5b226e377 vendor: github.com/miekg/dns v1.1.61
56a6383883 api: deprecation of "error" and "progress" fields in streaming responses
e36fb45eec vendor: github.com/spf13/pflag v1.0.6
bd13fc37b0 pkg/jsonmessage: JSONMessage: fix deprecation of ProgressMessage, ErrorMessage
66910da5a3 vendor: github.com/containerd/go-cni v1.1.12
3d72df0e89 vendor: google.golang.org/grpc v1.69.4
72c91e378d client: remove serverResponse and use http.Response directly
b99b5422b0 api/types: deprecate IDResponse
96dc9cb693 Don't log a warning when an IP address is already in an ipset
b23b8f1567 Restore more iptables rules on firewalld reload
9a20edf7b6 api/types/container: introduce ExecCreateResponse type
0df3a0047a api/types/container: introduce CommitResponse type
be1ac5d8e5 api/types/container: rename ContainerTopOKBody to TopResponse
f4dc38cd36 api/types/container: rename ContainerUpdateOKBody to UpdateResponse
85ff36de26 Dockerfile: update docker CLI to v28.0.0-rc.1
cc6754f3fa Dockerfile: update buildx v0.20.1
b90a2bac7d Dockerfile: bump gotest.tools/gotestsum v1.12.0
c786cdf124 update authors and mailmap
b4af9341af client: fix deprecation comment for ImageInspectWithRaw
6ba4e78066 vendor: gotest.tools/v3 v3.5.2
43532eb1e1 daemon: Daemon.Containers: make switches exhaustive (exhaustive)
10ebdbbb92 daemon: Daemon.ProcessEvent: make switches exhaustive (exhaustive)
f448d5ae3b daemon/events: make switches exhaustive (exhaustive)
d9cf097402 daemon/cluster/executor/container: make switches exhaustive (exhaustive)
bf3b4d4986 daemon/cluster/convert: make switches exhaustive (exhaustive)
4d8dfc1409 daemon/cluster: make switches exhaustive (exhaustive)
6929a3fd22 libnetwork/networkdb: make switches exhaustive (exhaustive)
827f84d3ef volume/mounts: parseMountSpec: make switch exhaustive (exhaustive)
0ee343222b daemon: eventTimestamp: make switch exhaustive (exhaustive)
b343d235a0 container: State.conditionAlreadyMet: make switch exhaustive (exhaustive)
8a35300b4a integration/internal/swarm: make switch excaustive (exhaustive)
66ab2e9e77 plugin/executor/containerd: Executor.ProcessEvent: make switch excaustive (exhaustive)
1a047bbe8b libnetwork: ignore unchecked json (Un)Marshal errors (errchkjson)
63deb55263 libnetwork/drivers/bridge: bridgeEndpoint.UnmarshalJSON: fix unhandled errors (errchkjson)
ccbcce2169 daemon/logger/templates: ignore unchecked error (errchkjson)
32153dee9f daemon: Daemon.Reload: fix unhandled errors printing config (errchkjson)
664558f916 daemon/cluster/convert: tmpfsOptionsToGRPC: ignore unchecked error (errchkjson)
4a7f891fc3 integration/plugin: fix unhandled errors in tests (errchkjson)
196a66a643 integration-cli: fix unhandled errors in tests (errchkjson)
26d30159f7 libnetwork/driverapi: ignore unchecked error (for now) (errchkjson)
b87c9fb3f4 libnetwork/diagnostic: ignore unchecked error (errchkjson)
7dbceec8aa api/server/router/volume: fix unhandled errors in tests (errchkjson)
07e2fc83ae pkg/plugins: fix "Multiplication of durations" (durationcheck)
1ffbcb566b pkg/jsonmessage: fix "Multiplication of durations" (durationcheck)
eac45daf06 runconfig: fix declaration has 3 blank identifiers (dogsled)
09c5a01346 pks/plugins/pluginrpc-gen: fix unused value assign (wastedassign)
a4dba91424 daemon/containerd: fix unused value assign (wastedassign)
f1d7bd60ab integration/image: TestRemoveByDigest fixed unused values (wastedassign)
9f8eafc101 plugin: withFetchProgress work around "nested context in loop (fatcontext)"
e9c90834fa opts: host:port should be constructed with net.JoinHostPort (nosprintfhostport)
0bf8c8b99e pkg/tailfile: avoid allocations with (*os.File).WriteString (mirror)
4e6c91cc56 pkg/pools: avoid allocations with (*bufio.Writer).WriteString (mirror)
f0a233bdc3 pkg/archive: avoid allocations with strings.Compare (mirror)
17f32e8822 libnetwork/internal/resolvconf: avoid allocations with bytes.NewBufferString (mirror)
0c8d086ed3 libnetwork: avoid allocations with regexp.Match (mirror)
6ff3dfd88a integration-cli: avoid allocations with (*os.File).WriteString (mirror)
405ce2ef15 distribution/xfer: avoid allocations with bytes.NewBufferString (mirror)
d50492a70d container/stream: avoid allocations with (*bytes.Buffer).WriteString (mirror)
dbf2cdd06c integration/networking: fix append to non-zero initialized length (makezero)
dd8ee9eeb1 libnetwork/cnmallocator: fix append to non-zero initialized length (makezero)
8e9fce7970 libnetwork/bitmap: fix append to non-zero initialized length (makezero)
f9890d97d1 libnet: kvstore/boltdb: fix append to non-zero initialized length (makezero)
1f7d497a99 errdefs: remove duplicate "causer" interface definition (iface)
1784026740 client: custom trace options
cab2157182 Dockerfile: update golangci-lint to v1.63.4
f34a1aafe9 vendor: cloud.google.com/go/compute/metadata v0.5.2
9c7112d118 daemon: configureMaxThreads: remove unused arg
9e77d05967 add //go:build directives to prevent downgrading to go1.16 language
192431cb35 pkg/idtools: un-deprecate Windows consts for now
5a703c2eda libnet/osl: scan ns ifaces to generate ifname
78b0475605 libnet/osl: AddInterface: un-alias props into local vars
56a7817b2d libnet: add support for custom interface names
6a8360012c libnet/osl: distinguish dstName & dstPrefix
2e9e7989f8 cmd/dockerd: initBuildkit: return close-func
2dc03f934f cmd/dockerd: refactor buildkit init in daemon startup
9509f27e28 rootless: use `getsubids` tool for validation if possible
a096045678 all: Replace deprecated ImageInspectWithRaw usage
3d37537f75 c8d/inspect: Add Manifests field
639a1214fa client/image-inspect: Introduce client opts
6664f1220a c8d/inspect: Avoid interim images.Image conversion
bdb6a7abdc c8d/list: multiPlatformSummary
d4fa252cd3 Wait for a route to ff02::1 before sending NAs
1126d477fd Add live-restore tests for mount image
90aea3b85f Add image subpath mounting functionality
634951457d Implement GwAllocChecker for the remote network driver
12756071f1 update to go1.23.6
294df1c447 volumes/service: OpErr: implement go1.13 unwrapper
db68c99d4b distribution: fallbackError, notFoundError implement go1.13 unwrapper
b96b14d078 cluster/executor/container: exitError: implement go1.13 unwrapper
2997c0ddc0 client: deprecate CommonAPIClient interface
846b2272e6 client: deprecate ErrorConnectionFailed helper
e93ff742e8 client: doRequest: use errors.As for error-detection
3725998e7d client: define interface for all Swarm-specific methods
a57d737a86 client: define separate interface for HijackDialer
902c06fdf0 client: make setupHijackConn a regular function
e6dabfa3b1 client: move resetting mediaType for hijack to where applicable
b0e206b807 client: separate Dialer() implementation from public API
fcb924712b integration/internal: JobComplete: require shallower interface
0f04532956 errdefs: touch-up godoc for helpers
329b2a26f3 client: normalize and validate empty ID / name arguments to fail early
844797348e Implement image mount for the snapshotter
8c58934106 Implement mount from image
c935a4609d Fix typo in API docs
30e75b8396 client: improve handling of JSON error-responses with incorrect schema
9a6e96fd9c Before sending ARPs/NAs, check the bridge is ready
8e529682af builder: wire up new gc types for buildkit prune functionality
52ea449c55 daemon: Daemon.restore: make legacy-link code conditional
9a69161992 daemon: remove Daemon.children(), Daemon.parents() wrappers
513fd86710 daemon: Daemon.getNetworkedContainer: fix errors for invalid network container
51cb066ec8 daemon: Daemon.rmLink: don't fuzzy-match container when using ID
79b0e89628 github: Clarify release notes description
c43aa0b6aa Fix concurrency issue in dind
7ac0e34dba gha/validate-pr: Also run when PR has new commits
9b5a51a881 api/types/container: remove use of errdefs package in test
02eb72380f client: remove uses of pkg/errors in tests
3f354e8c1b api/types/registry: use stdlib errors package
0ca0ccd37a client: improve test-coverage for error-responses
9fdcde7618 Add bridge gateway mode "isolated"
97b50bca2c client: WithVersion: strip v-prefix when setting API version
bbaa8af8f3 libnetwork/drivers/bridge: un-export errors
3f9698e1f6 libnetwork/drivers/bridge: TestLinkDelete: use gotest.tools
74fd2ec0cf libnetwork/drivers/bridge: TestLinkCreateNoEnableIPv6: use gotest.tools
6e9ba725f8 libnetwork/drivers/bridge: TestLinkCreateTwo: use gotest.tools
bf3323fd40 libnetwork/drivers/bridge: TestLinkCreate: use gotest.tools
7012e3ce14 libnetwork/drivers/bridge: remove NonDefaultBridgeExistError
47f6d4e1bc libnetwork/drivers/bridge: internalize ErrInvalidGateway
3a9f4e0146 libnetwork/drivers/bridge: remove ErrInvalidMtu
2f42aa0e26 libnetwork/drivers/bridge: remove IPv4AddrNoMatchError
0c1b660048 libnetwork/drivers/bridge: remove IPv4AddrAddError
dc52ecb1d0 libnetwork/drivers/bridge: remove ErrNoIPAddr
77261b5e42 libnetwork/drivers/bridge: remove "InternalError()" method from errors
2766298f49 libnetwork/drivers/bridge: remove unused errors
59c2d2a4b3 libnetwork/drivers/bridge: remove ErrInvalidDriverConfig
6bb9f581a5 libnetwork/drivers/windows: remove ErrUnsupportedAddressType
54a969d1a4 Dockerfile: Use CLI generated completions in the dev shell
510e6f4f8a libnetwork/options: rewrite tests with gotest.tools
af9ffb64cd builder/dockerfile: more consistently put "expected" on the right
86a8bfdce4 remove redundant uses of api/types/strslice.StrSlice
d216084185 libnet/d/bridge: drop remote connections to port mapped on lo
27adcd596b libnet/d/bridge: port mappings: drop direct-access when gw_mode=nat
8474153e13 integration: accessing mappings from another docker network
a7e6d0a8a3 libnet/d/bridge: releasePortBindings: append directly into 'errs'
aa3a23d4f9 Temporary debug for unsolicited NA
49b1ed6d27 libnetwork: remove ErrInvalidName
a98ecc5f79 libnetwork: remove ErrInvalidID
548b0b6290 libnetwork: remove ErrNoSuchEndpoint
7cc81407aa Add trace/logging in waitForIfUpped
30601d96b7 Dump daemon logs when TestAdvertiseAddrs fails
8705018705 daemon/cluster/executor: containerConfig: store Network instead of envelope
90323ae123 daemon/cluster/executor: networkCreateRequest: not a method
f5f4a062a5 daemon/cluster/executor: networkCreateRequest: slight DRY cleanup
16770340ea daemon/cluster/executor: networkCreateRequest don't shadow config
cef6fd2fa2 libnetwork: remove Network.EndpointByID as it must not be used
4e6535fd3e man: vendor github.com/cpuguy83/go-md2man/v2 v2.0.6
5c1fe287fc libnetwork: remove UnknownNetworkError
8f4c98e1eb libnetwork: TestControllerGetSandbox: use errdefs for error asserts
d34ca256b8 libnetwork: TestNetworkConfig: use gotest.tools for errdefs assertions
c6f0fe5fc0 libnetwork: parallelTester.Do: use errdefs for error assertions
11a6cb5fac libnetwork: TestEndpointJoin: use gotest.tools for errdefs assertions
ea7d17376e libnetwork: TestInvalidRemoteDriver: use gotest.tools for error assertions
01c87cc809 libnetwork: TestContainerInvalidLeave: use gotest.tools for errdefs assertions
9472c860de libnetwork: TestEndpointMultipleJoins: use gotest.tools for errdefs assertions
ab9d250876 libnetwork: TestEndpointDeleteWithActiveContainer: use gotest.tools for errdefs assertions
56debcfc1c libnetwork: TestNetworkQuery: use gotest.tools for errdefs assertions
874fb4d2f4 libnetwork: TestControllerQuery: use gotest.tools for errdefs assertions
53bf2e8960 libnetwork: TestUnknownEndpoint: use gotest.tools for errdefs assertions
895ee1214a libnetwork: TestDuplicateEndpoint: use gotest.tools for errdefs assertions
678a8a27f5 libnetwork: TestUnknownNetwork: use gotest.tools for errdefs assertions
9304d98757 libnetwork: TestDeleteNetworkWithActiveEndpoints: use gotest.tools for errdefs assertions
01b0fe1172 libnetwork: TestNetworkName: use gotest.tools for errdefs assertions
24df497674 libnetwork: TestNilRemoteDriver: use gotest.tools for errdefs assertions
532d36c251 libnetwork: TestUnknownDriver: use gotest.tools for errdefs assertions
400ad04c74 libnetwork: TestNull: use gotest.tools for errdefs assertions
3bb40af036 dockerd: enable shell-completion; add (hidden) completion subcommand
816f3fa516 integration: remove assertAttachedStream, check both STDERR and STDOUT
2197549e4f daemon: health: getShell: simplify logic (LCOW remnants)
d3c0825439 daemon: make daemon.getEntrypointAndArgs a regular function
65120d586b Create bridge veth in container netns
b3b9e990ee Get netns before calling moveLink
357fb9d58d Add trace/logging in waitForIfUpped
203d6530d0 libnetwork: use gotest.tools assertions
a39bee9b71 libnetwork: suppress some unhandled errors in tests
376ff6add6 libnetwork: use assert.Check in defers
71c9a45672 libnetwork: use assert.NilError (step 2)
231012996f libnetwork: use assert.NilError (step 1)
6bb69a21bf EnableIPv4:false is no longer --experimental
9a37ae3657 Test unsolicited ARP/NA on interface creation
bc130f367d bridge/macvlan endpoints always use a random MAC address
a900e0b5bb libn/netutils: put more entropy into random MACs
422e056b0f Treat failure to send an initial ARP/NA as an error
522016a842 Configurable count and interval for gratuitous ARP/NA messages
eaa84bc8f4 Send unsolicited ARP/NA requests when bringing up interfaces
2f84e2b208 libnetwork/drivers/bridge: driver.configure: move vars close to where used
3955c021ff libnetwork: remove redundant type conversion
41d502892d libnetwork/drivers/bridge: remove redundant type conversion
6e6cf999ed libnetwork: remove isNotfound test-utility
c9c322785c libnetwork: Controller.defaultGwNetwork: use errdefs to check for not-found
59722228d7 libnetwork/types: compareIPMask: make error more readable
768b152494 libnetwork/types: TestUtilGetBroadcastIP: use gotest.tools, table-tests
06ae35afb9 libnetwork/types: TestUtilGetHostPartIP: use gotest.tools, table-tests
9e11ea9287 libnetwork/types: TestCompareIPMask: use gotest.tools, table-tests
85cd2b7c94 libnetwork/types: TestErrorConstructors: use errdefs for asserting
afcf1b92a5 libnetwork: TestErrorInterfaces: use errdefs helpers to check error-types
2b4aa5eb52 gha: update DCO check to alpine 3.21
9dab00554d libnetwork/driverapi: fix GoDoc for UpdateIpamConfig
52d2d28148 libnetwork/types: align error-types with errdefs
836a5fac10 Dockerfile: update compose to v2.32.4
b75a75017d Dockerfile: update buildx to v0.20.0
1e2a828ed5 Dockerfile: update docker CLI to v27.5.0
c52c68a709 vendor: update buildkit to v0.19.0
366f2b563d Clarify code/comments in defaultipam.newPoolData
bc93bba099 Use addrset.AddrSet instead of bitmap.Bitmap in IPAM
7e247e8b13 Add addrset.AddrSet to track a set of IP addresses
46e290fec6 Don't increment "unselected" in Bitmap when clearing a 0
5e9ee1a849 gha: Adjust release branches
ae0fda655b update to go1.23.5 (fix CVE-2024-45341, CVE-2024-45336)
fc7caf96d2 Revert "libnet/d/bridge: port mappings: filter by input iface"
f658ea3152 Fix parsing of user/group during copy operation
131441b37f daemon: NewDaemon: align max backoff delay with containerd 2.0
76a496a482 daemon/links: fix duplicate env-vars and cleanup range-detection
fcdd6f4ad2 daemon/links: fix port-ranges with mixed protocols
251c68c647 daemon/links: fix port-sorting with mixed protocols
3d37d54b8c daemon/links: Link.ToEnv: simplify adding default port env-var
c508919b7c daemon/links: add BenchmarkLinkMultipleEnv
3b27e36d67 daemon/links: add EnvVars function
b54053d5da daemon/links: NewLink: simplify map to string conversion
53fec9813f daemon: Daemon.setupLinkedContainers: don't fetch linked containers if not used
6b14bdb7c7 daemon/config: validate network-diagnostic-port
370c7a30e2 libnetwork/diagnostic: rename methods
16cc0be0e1 libnetwork/diagnostic: move and improve logs for starting/stoping
8f1a49fa8c libnetwork: Controller: remove redundant mutex for diagnosticServer
e4abcad7ac libnetwork/diagnostic: make EnableDiagnostic, DisableDiagnostic idempotent
e899092b25 libnetwork/diagnostic: make DisableDiagnostic idempotent
1e6449dfc7 libnetwork/diagnostic: print newline after stackdump log path
8cc0e11823 libnetwork: un-export Controller.DiagnosticServer
bf7a87a15a docs: clarify fromImage vs tag behavior in ImageCreate
aa565ec1ef Dockerfile: update RootlessKit to v2.3.2
f3f9641f5d vendor.mod: github.com/rootless-containers/rootlesskit/v2 v2.3.2
912a64e22a vendor.mod: golang.org/x/sys v0.29.0
e8c6e7ceb0 build: don't print warning when connection was terminated
52774154c9 distribution: continueOnError: handle context cancellation / timeout
6b5f14a7bb distribution/utils: WriteDistributionProgress simplify check for broken pipe
61aa1657f7 layerStore.registerWithDescriptor: improve logs for cleaning up cache
e7bd60ee2d Allow users to ignore missing br_netfilter
66e6a0b7a1 vendor: update buildkit to v0.19.0-rc3
21870ad796 daemon: NewDaemon: update grpc options for containerd 2.0
22c02219de Bridge: on network delete, make sure it's deleted from store
feb2dabaa9 Ignore error when adding a bridge already in the ipset
0fad8324a8 libcontainer/supervisor: monitorDaemon: move options inline again
29ce3633e5 libcontainerd/supervisor: remove grpc options that are the default
b750eb87cd daemon: NewDaemon: remove grpc options that are the default
e94114305e daemon: NewDaemon: align grpc options with containerd's defaults
80b0570445 spelling fix in comments
8c236de735 ci: switch from jenkins to gha for arm64 build and tests
c817ea2159 api/server/middleware: log before, not after the request
d86920b9b3 ci(bin-image): fix bake build
078c5edcd7 Adjust test to support cgroupv1
c75e333b6f Satisfy linter
ce3e34816a Add support for bare `writable-cgroups` security-opt
f8187c0214 Error on invalid requests for writable-cgroups
bc7d118fd7 Adjust TestCgroupRW to test output before exit code
081b9d97db Update TestCgroupRW with subtests + nil case fix
b5b5b7e983 integration/container: test the writable-cgroups security option
e3cdd59a82 daemon/&container/: enable `--security-opt writable-cgroups=true` as an option
b1ea8032fa api: swagger: document StatsResponse
9ed85f487d daemon: don't discard "invalid parameter" errors for archive endpoints
c6d8a93d58 daemon: containerExtractToDir: remove handling for read-only paths on windows
ca0158b235 daemon: containerExtractToDir: combine checks for read-only target
0530750d7e daemon: containerExtractToDir: remove named error return
9ed662e72e daemon: containerExtractToDir: remove handling for copyUIDGID on windows
ca06b222e3 api/types/container: merge Stats and StatsResponse
16cbb27e4e use StatsResponse instead of Stats in tests
390cb4c2f1 Increase integration test timeout from 5m to 10m
0aa8fe0bf9 Update to containerd v2.0.2, buildkit v0.19.0-rc2
a63602472d Use local cleanup method rather than dependency
3db60168e7 pkg/ioutils: remove crypto/sha256, crypto/sha512 imports
f68eb9c3cb vendor: github.com/Microsoft/hcsshim v0.12.9
488d6972b2 vendor: github.com/stretchr/testify v1.10.0
2008799026 vendor: k8s.io/klog/v2 v2.130.1
adec695d36 vendor: github.com/fsnotify/fsnotify v1.7.0
1ef5957089 vendor: github.com/vbatts/tar-split v0.11.6
de86c46158 vendor: github.com/containernetworking/cni v1.2.3
6dd592bd49 vendor: github.com/containerd/go-cni v1.1.11
2ea97aec2d vendor: github.com/containerd/ttrpc v1.2.7
cc120c4c05 testutil: update to semconv v1.26.0
6439c46e06 vendor: github.com/containerd/errdefs v1.0.0
f40b92272c vendor: github.com/AdamKorcz/go-118-fuzz-build v0.0.0-20231105174938-2b5cbb29f3e2
eb592fecad vendor: github.com/AdaLogics/go-fuzz-headers v0.0.0-20240806141605-e8a1dd7889d6
48e6b4e8f7 vendor: otel v0.56.0 / v1.31.0
d60f164e21 vendor: github.com/creack/pty v1.1.24
a78b84c212 vendor: github.com/aws/aws-sdk-go-v2 v1.30.3
d5fe43335f vendor: google.golang.org/grpc v1.68.1, google.golang.org/genproto
5066658f39 vendor: golang.org/x/oauth2 v0.23.0
81d5487330 vendor: cloud.google.com/go/compute/metadata v0.5.0
433b1f9b17 libnet/d/bridge: port mappings: filter by input iface
49ec488036 logger/fluentd: remove deprecated fluentd-async-connect option
d560704c91 libnet/d/bridge: init driver.nlh in newDriver
5a6a980dad daemon/export: Stop when context is canceled
15df1c9c40 imageService: Remove PerformWithBaseFS
2f60d15ddf Internal macvlan networks don't need a gateway address.
8b13cde274 L3 and internal ipvlans don't need a gateway address
43f71fb582 Bridge - skip gateway allocation if no gateway is needed
38e76ebea9 Only allocate a gateway if the n/w driver wants one
64006f964a Simplify selection of gateway address
24f09ef13c Update MAINTAINER file email for laurazard
e26122c609 pkg/ioutils: remove unused NewReaderErrWrapper
2b4db9383c pkg/archive: nosysFileInfo: implement tar.FileInfoNames to prevent lookups
ce8d3d1c78 pkg/ioutils: remove deprecated NopWriteCloser
39f1abb1fb pkg/ioutils: remove deprecated NopWriter
3faa170371 pkg/ioutils: deprecate NopWriteCloser
7fa3c553e7 pkg/ioutils: deprecate NopWriter
ad860173a2 vendor: github.com/containerd/containerd v1.7.25
c12bfda3cd Dockerfile: update containerd to v1.7.25
d80e3410bc vendor: github.com/containerd/containerd/api v1.8.0
d23871469b pkg/sysinfo: Remove deprecated `NumCPU`
cdd4a7429f pkg/ioutils: remove errWriteFlusherClosed
034cd27da0 pkg/ioutils: remove deprecated NopFlusher
e183df63f9 pkg/ioutils: remove deprecated WriteCounter, NewWriteCounter
15ce2914a5 pkg/ioutils: move BytesPipe to container/streams/bytespipe
8f9c09edd4 Fix unit tests for an nftables host
818a180fce pkg/ioutils: deprecate NopFlusher
18f1ecafea c8d/snapshot: Rename variable that collided with import
15d3c99ff6 daemon: Remove "Error: " error message prefix
cd9c292de9 imageService: Unify `Mount` and `Unmount`
0cbb604665 c8d: Implement `RWLayer` and remove `PrepareSnapshot`
daed0bd4d6 container/rwLayer: Remove unused TarStreamer, ApplyDiff, Size and Name
85de28901d container/rwLayer: Remove Changes
bafebbbd8a container: Decouple RWLayer from graphdriver implementation
383503d382 pkg/ioutils: deprecate WriteCounter, NewWriteCounter
60971a66b4 pkg/ioutils: deprecate BytesPipe, NewBytesPipe, ErrClosed
3db72b255d pkg/sysinfo: Deprecate NumCPU
6d24a21643 improve validation of cpu-shares, and migrate TestRunInvalidCPUShares
400f1ed95c runconfig: TestValidateResources: use subtests
93907c904d runconfig: TestValidateResources: fix duplicate test-case
5b18a7914c deprecate pkg/parsers.ParseKeyValueOpt and move internal
aad7bcedd2 Dockerfile: update runc binary to v1.2.4
35932cdeec pkg/ioutils: un-export readCloserWrapper
392d33c98c image/save: set a stable timestamp for assets
e324df3f1b image/tarexport: patch MkDirall to accept atime, mtime
ca962cecfd image/tarexport: add fork of os.MkdirAll (non-buildable commit)
ee1a15a970 daemon: ImageService.LogImageEvent: pass through context
ea00e72c21 libnetwork/drivers/bridge: processIPAM: remove unused arg
f8a973ba4e ci: update bake-action to v6
586556eda7 runconfig: return correct error-types and touch-up error messages
fbb421efaa runconfig: cleanup TestDecodeContainerConfig
c76cab29df runconfig: cleanup TestValidatePrivileged
ff64a348cc runconfig: fix and refactor TestDecodeContainerConfigIsolation
7864454792 pkg/ioutils: move atomic file-writers to a separate (pkg/atomicwriter) package
34ab9570ad daemon/links: TestLinkMultipleEnv: assert with gotest.tools, remove TestLinkPortRangeEnv
97dc3056c6 Clear RWLayer reference under container lock
080d8e7d63 daemon/links: TestLinkEnv: assert with gotest.tools
702df89d9b daemon/links: TestLinkNaming: assert with gotest.tools
51eb0c6a24 daemon/links: TestLinkNew: assert with gotest.tools
382fb41563 daemon/links: remove newPortNoError utility
3fa5e7e6a9 Update internal use of idtools to usergroup
9c368a93b6 Split internal idtools functionality
a4ae38b010 Use bridge consts for "DefaultGatewayIPv[46]" aux-addr keys
0f7a43271c daemon/events: Move metrics to internal/metrics
90e2afd0be daemon: Move direct usages of go-metrics to internal/metrics
438f5801e1 daemon/images: Move ImageActions to metrics
51c2689427 daemon/metrics: Move out to `internal/metrics`
048fece105 Alias github.com/docker/go-metrics imports
24ad9bef9d pkg/idtools: rewrite to use moby/sys/user
f4e2cfa209 libnetwork/osl: Namespace.setSysctls: use stdlib errors
064cdf475c pkg/parsers: deprecate ParseUintListMaximum, ParseUintList
39c05177ef Check network connect/disconnect after live-restore
c2fe1d31e9 Fix live-restore of the osSbox
a77ee8b9c0 Mark endpoints as "populated" after live restore
db1ed280f1 Live-restore gw-priority
9138195cef Rename Controller.sandboxCleanup to sandboxRestore
1359772433 pkg/sysinfo: parse cpuset.cpus/mems once and memoize
35fcbc1d1a Test a container attached to l3-ipvlan and bridge networks
81f6e087c1 Treat connected routes to unspecified addrs like default gws
725defe1e9 Include iface routes to unspecified addrs when looking for default gws
0416e31876 Add comments to selectGatewayEndpoint
1b9c09e10a daemon/logger: un-export RingLogger
263c46d755 integration/internal/container: IsInState: touch up error-logs
2282279180 pkg/sysinfo: internalize parsing cpusets
aa696ffbb1 pkg/sysinfo: touch-up docs for cgroupCpusetInfo.Cpus, Mems
4597396cb5 pkg/sysinfo: define const for default Max CPUs
799501d172 pkg/sysinfo: rename vars/arguments for clarity
0d51680f91 pkg/sysinfo: stub out parsing cpusets on non-linux
b7ed099727 daemon: isOnlineFSOperationPermitted: cleanup confusing syntax
fb03a3c403 vendor: github.com/moby/term v0.5.2
be39e4f732 man: remove --allow-nondistributable-artifacts
4f9150cee5 Update swarm to latest for server alpn config
a51baca00d pkg/fileutils: move GetTotalUsedFds internal in daemon
ba8279bf1f golangci-lint: remove temporary exception for deprecated code
e45f20352d pkg/fileutils: deprecate GetTotalUsedFds
a079f62f47 Add testutil daemon.WithResolvConf
d7f59cec05 daemon/config: add basic validation of exec-opt options
a646467a66 integration-cli: migrate TestCreateByImageID to integration suite
5b31a5b370 libnetwork/drivers/windows: fix error-matching for hcsshim "not found"
1f4c9f23c3 libnetwork/drivers/bridge: format errors with '%v' for consistency
3b8ba71fe3 libnetwork/drivers/windows: fix non-constant format string
8c96e45375 distribution: fix non-constant format string
e451b698d3 golangci-lint: add forbidigo rules to prevent regex.MustCompile
86e470fe3a daemon/names: use lazyregexp
b7c88502fb internal/testutils/networking: use lazyregexp
ae13510577 daemon/logger/awslogs: use lazyregexp to compile regexes on first use
690e00733e volume/mounts: use lazyregexp to compile regexes on first use
72ebf2c309 testutil: use lazyregexp to compile regexes on first use
b5d90d746b registry: use lazyregexp to compile regexes on first use
b6b19059c5 plugin: use lazyregexp to compile regexes on first use
0fe953dff0 pkg/idtools: use lazyregexp to compile regexes on first use
48d63b99ef opts: use lazyregexp to compile regexes on first use
06948b83f3 oci: use lazyregexp to compile regexes on first use
98f7c45e7f integration-cli: use lazyregexp to compile regexes on first use
bc1dbd9ea6 daemon: use lazyregexp to compile regexes on first use
d61a6924d7 client: use lazyregexp to compile regexes on first use
0672b3b7f7 builder: use lazyregexp to compile regexes on first use
43b3aaa62d implement lazyregexp package
ce37cb3ea0 Down with the sickness (AUTO_GOPATH)
839b0afbc7 integration/container: use is.ErrorType for some tests
4504ca6bf6 integration/container: rename vars that shadowed imports
6b0085eebd integration/container: use consistent name for api-client
fa0b9f9505 integration/container: use consistent alias for test-container pkg
547151abd2 pkg/sysinfo: cleanup tests
25009ed5c0 Restore labels when re-creating Windows networks
7bd1b64058 daemon/logger/loggertest: remove workaround for OSC string terminator parsing
5149401665 vendor: github.com/Azure/go-ansiterm faa5f7b0171c
ddd885a961 daemon: don't repeatedly call NumCPU if not needed
aa7493f953 daemon: minor cleanups for getting system info
1c37a4454b daemon: adjust tests for changes in go1.24 JSON errors
c5575b5119 daemon: add missing "//go:build" directive
f8524ab041 daemon: remove workaround for go1.21 compiler bug
8e9213a6b6 daemon: remove kernel-version check for kernel < 4.0.0
86a2df8be6 pkg/parsers: rename var that collided with builtin
cfc988e4da integration-cli: TestRunInvalidCpuset.. create instead of run
8d5cf1db1e Use the roundtripper during build
f321120767 daemon: parseSecurityOpt: rename var that shadowed function
44db31b9cc remove pkg/broadcaster and make it internal to container/streams
6ab9212168 pkg/ioutils: remove OnEOFReader and move it internal
be4eac753f Remove use of bufio in cli import tests
4c251b6b03 Add pool for archive decompress stream
9189a6e0ab Fix chrootarchive test
a93a079cb4 Remove use of pools in archive
8d787e3461 builder/dockerfile: unconvert
e19e4de775 daemon: ignore some errors when setting env-vars
c759fb20d6 daemon: remove uses of deprecated system.MkdirAll
1e060d3315 daemon/graphdriver/windows: remove uses of deprecated system.MkdirAll
05ec732667 libcontainerd/supervisor: remove uses of deprecated system.MkdirAll
84bb6e5afb container: remove uses of deprecated system.MkdirAll
c02c2a3a79 cmd/dockerd: remove uses of deprecated system.MkdirAll
e783bb5c69 builder/dockerfile: remove uses of deprecated system.MkdirAll
bc61b31935 pkg/idtools: remove uses of deprecated system.MkdirAll
4472e9b7f8 pkg/system: deprecate MkdirAll and remove custom volume GUID handling
e5bf6d8ba0 libnet: pass store as an arg to netdrivers
93e9f7f75f distribution: Pass Traceparent OTEL HTTP header
524a63a958 pkg/chrootarchive: remove "// import" comments
302ca6227f pkg/chrootarchive: use stdlib errors
727ab584bb vendor: github.com/containerd/cgroups v3.0.5
275bbcd300 builder: don't fall back to defaultKeepStorage when set to zero
315891dd2e Remove import comments
e4236c93d9 Remove unused pkg/system functions
12b2b56fa6 Update archive to use fs.FileInfo over custom stat
bb3e95dfdc Update archive to use unix.Mknod directly
35b9525f9a Update archive to use its own xattr funcs
1b4cbea3a8 Update archive to use time operations directly
90fef061ec daemon/c8d: Force c8dimages alias for containerd/images
8c30e11321 c8d/delete: Consistent method receiver
1ad78f00b1 daemon/c8d: Fix duplicate containerd/images import
6bd5840675 vendor: golang.org/x/net v0.33.0
364e4790e1 docs/api: allow for an empty string for Isolation (api v1.25-v1.47)
7e9a5064dc api: Remove unused imageStore and layerStore
c452af6651 image: Remove unused `Details` fields
d9795da33e image: Remove `GetImageManifest`
4f5ec9994c pkg/reexec: deprecate and migrate to github.com/moby/sys/reexec
7fbbd52b0e add Shaun Thompson as curator
b0be1f3af8 Enable external DNS if a network has an IPv6 gateway
ec8a5b0f4c libnet/d/bridge: move iptRule to iptables pkg
1b823fb54e libnet: don't put external DNS answers in OTel spans
1aecca8bbd docs: Update example section for SwarmJoinRequest
b6594353f8 libnetwork/iptables: remove deprecated Passthrough()
d34d092b42 libnetwork/iptables: remove deprecated IPV, Iptables, IP6Tables
820dea0d2b libnet/d/bridge: hardcode chain names
bd30a51ea7 libnet/iptables: split ProgramChain and move to bridge driver
df3c78d061 Combine outgoing and ICC iptables rules
0f259dd76d Rename setupIPTablesInternal -> setupNonInternalNetworkRules
556b8eed16 Tidy setupIPTablesInternal
8fd177d79b pkg/reexec: Command: separate public API from implementation
6568c06d12 pkg/reexec: make platform-agnostic (again)
7672d60033 pkg/reexec: use const for name of test binary
0ef2b24c80 Make libnetwork responsible for DOCKER-USER setup/reload
9699284e8f Add iptablesdoc for a swarm network
6473d37002 Run commands in an L3Segment netns without failing the test.
3bf9a80818 Rename L3Segment Host.Run -> Host.MustRun
29e20fc904 Add static filter-FORWARD rules during bridge driver init
5ccc699513 Use golden testdata in TestUserChain
cd81985bfa vendor: update buildkit to v0.18.2
d688389f4a libnetwork/iptables: deprecate Passthrough
8991c4e382 Deprecate BridgeNfIptables and BridgeNfIp6tables fields
30a365f543 docs/api: version-history.md: fix markdown
01a55860c6 libnetwork/drivers/bridge: setupIPChains: fix defer checking wrong err
31fc7dd750 libcontainer: ReplaceContainer: fix var shadowing import
4e9df46a6e docs/api: document correct case for Api-Version header
53a9127349 integration/build: make TestBuildEmitsImageCreateEvent less noisy
504e1d4686 pkg/archive: replace uses of pkg/errors for stdlib errors
f0ce367e1e pkg/system: deprecate types and functions that are only used internally
f053beb34c libnet/osl: drop netns path GC
27deff4da1 libnet/iptables: deprecate type IPV
c8f19e5e4c libnet/iptables: remove mutex-based serialization
537eea8744 vendor: golang.org/x/net v0.32.0
678ef1a267 libnet/d/bridge: unconditionally error out if LinkSetMTU fails
5c358743af daemon: info: remove bridge-nf-call-iptables / ip6tables warnings
d8358ebc87 otel: Use non-noop tracer provider for grpc
96ef85272f c8d/pull: Show `Extracting` layer status
899360b649 integration/build_traces: Create own tracer provider
4847557d1b otel: Avoid excessive memory allocations if not configured
927ff16860 vendor: github.com/opencontainers/runc v1.2.3
88a08a070e vendor: github.com/cyphar/filepath-securejoin v0.3.5
ba90fd8da0 Decouple pkg/archive from pkg/ioutils
ec5c9e06e3 Dockerfile: update runc binary to v1.2.3
e6443e4af2 vendor: golang.org/x/crypto v0.31.0
035eeee209 vendor: golang.org/x/text v0.21.0
df8b3e787c vendor: golang.org/x/sync v0.10.0
c4f80dd931 vendor: golang.org/x/sys v0.28.0
8b243a1a82 docs/api: deprecate non-distributable artifacts
1932091e21 remove support for non-distributable artifacts and deprecate API fields and config
e394ff695c Dockerfile: remove libbtrfs-dev dependency
7d79b301bc Dockerfile: remove libsecret-1-dev dependency
3192b2aba7 Dockerfile: remove libudev-dev dependency
7c4afb1e6b Dockerfile: remove dpkg-dev dependency
7bba43a731 Dockerfile: remove libapparmor-dev dependency
b08ff81204 builder: fall back to defaultKeepStorage if keepStorage is unset for GC policy
1a453abfb1 integration-cli: don't skip AppArmor tests on SLES
be9e39b48b registry: ConvertToHostname: use strings.Cut to reduce allocations
a6f98dc60d registry: Service.lookupV2Endpoints: add arg to skip mirrors
50215913db registry: loginV2: move variables closer to where they're used
c1ef39e56e registry: loginV2: don't contact registry when failing to construct request
a7da6fb2a7 man: vendor: github.com/cpuguy83/go-md2man v2.0.5
89899b71a0 update xx to v1.6.1 for compatibility with alpine 3.21
9da0e69608 api/server: Server.CreateMux: pass context and use structured logs
9c1ff095e8 cmd/dockerd: pass debug-router instead of constructing in CreateMux
27294df576 api/server: Server.CreateMux: also register API-version debug endpoints
e2d2834be1 api/server: Server.CreateMux: register debug endpoints with correct methods
2f5412de8d api/server: set /debug prefix as part of debug-router routes
694c01620b chore: fix some function names in comment
76a5ca1d4d Accurately reflect the canonical casing of `API-Version` and `OS-Type` headers
5fc32c12c7 cmd/dockerd: ignore some unhandled errors
b0ec823cc7 daemon: remove Daemon.NetworkControllerEnabled
59bfc32a33 daemon/containerd: hostsWrapper: remove unused regService argument
3014d6d7a3 registry: deprecate APIEndpoint.TrimHostName
fe2637a05b api/types/network: add godoc for EndpointSettings.GwPriority
15ba03c8fc Jenkins: don't modprobe kernel module
2af19b6b7c Don't try to modprobe ip6_tables in the moby dev container
f2e1f52a04 Try to load kernel module ip6_tables, when necessary.
4740820716 Use ioctl to try to trigger kernel module loads
56eb47c622 Ignore kernel-assigned LL addrs when selecting "bip6"
404118c22b vendor: google.golang.org/protobuf v1.35.2
20ddbe2a0b vendor: golang.org/x/exp v0.0.0-20241108190413-2d47ceb2692f
1e51b7a28c vendor: golang.org/x/tools v0.27.0
750d6f4423 vendor: golang.org/x/mod v0.22.0
99f593b762 vendor: golang.org/x/net v0.31.0
e5895eacac vendor: golang.org/x/crypto v0.29.0
fb9977e42e vendor: golang.org/x/text v0.20.0
115acf7c15 vendor: golang.org/x/sync v0.9.0
e542dee0a6 vendor: golang.org/x/sys v0.27.0
8fee8a759f Remove test env var DOCKER_TEST_CREATE_DEFAULT_BRIDGE
0eb3d431c0 Run tests that change docker0 in their own netns
52d7e407b7 update to go1.23.4
504ee465fc vendor: update buildkit to v0.18.1
4e30acb63f Dockerd rootless: make {/etc,/var/run}/cdi available
820520affd distribution: verifySchema1Manifest: pass through context
9a0b61ab29 daemon/daemon_linux.go: Fix a minor typo
d75394bf77 Wait longer for a stable goroutine count in tests
dd7831187d Fix typo in waitForStableGourtineCount
f91afea6ea c8d/commit,import,build: Preserve overriden image
f0c8becffb c8d/tag: Extract createOrReplaceImage
0194a18ca8 registry: remove assignment of default values in some tests
a93f6c61db c8d/tag: Don't log a warning if the source image is not dangling
28a700bf5b registry: override net.LookupIP per test, not globally
d17cd847ea registry: isCIDRMatch: don't try to resolve host if not needed
5f91c769f5 registry: deprecate RepositoryInfo.Class
3903f71f9f registry: remove deprecated APIEndpoint.Version and APIVersion type
0bd8738e33 registry: isCIDRMatch: return early if no CIDRs are set
cce5dfe1e7 Jenkinsfile: modprobe br_netfilter
59c5919b12 Put --help before --host in the dockerd manpage
2fbb18ece2 Add --host-gateway to the dockerd manpage
0aba67203a Implement gateway mode "nat-unprotected"
07dff11a7e Wrap errors rather than using err.Error()
d3c2376ff1 cmd/dockerd: change routerOptions.Build to a regular func
5b752fab32 api: add Priority field to EndpointSettings
229dc6676c daemon: early-return from buildJoinOptions
c9f17bedc7 daemon/config: extract validation of userland-proxy config
83f8f4efd7 daemon/config: deprecate Config.ValidatePlatformConfig
74a00f183b daemon/config: move utility-functions separate from Config methods
a4714fa04d daemon/config: verifyDefaultCgroupNsMode: update error message for consistency
2c000b8ac4 daemon: Daemon.RegistryHosts: use internal method to get daemon config
16be996b6b ci: use edge releases of buildx
3e4f437697 cmd/dockerd: newRouterOptions: rename arg that shadowed import
68a98a7263 daemon: getCD: remove use of parsers.ParseKeyValueOpt
003e35fea5 libnetwork/ipams/null: gofumpt code
a8e5a19706 libnetwork/drivers/bridge: gofumpt code
da5e86a82b daemon: gofumpt code
fb6e650ab9 integration: add wait
e7d15d4d58 daemon/graphdriver/zfs: ignore non-existent dataset on removal
264c15bfc4 Fix br_netfilter module loading logic
b4769e86a4 vendor: update buildkit to v0.18.0
b57aa7f3b7 integration: remove default poll delay and timeouts
c9a1e4dc8c Test host-gateway addresses from docker0
af0b973595 Allow IPv4 and IPv6 host-gateway-ip addresses
01e2168c1e Move Linux-only integration/network tests into Linux-only file
90250ce93a vendor: update buildkit to v0.18.0-rc2
b7f43c3729 Remove buildkit init timeout
0b5b1db1c1 Use default ULA prefix if fixed-cidr-v6 is not specified
fdd2591cbe Separate IPv4 IPAM conf from the rest of default bridge conf
cc538b2bf0 Drop fixed-cidr if not within user-managed bridge subnet
311a8bc899 Allow increase of fixed-cidr subnet size
85159ce09f Allow non-overlapping change of fixed-cidr
237654a553 Refactor IPAM config for default bridge
90baa2bc36 Fix selection of subnet from user-managed default bridge
63b558af77 Don't clear top bits of IP then check if it's global unicast
facb2323a0 Add tests for IPAM Config of default bridge
4a2bd1085e Move default bridge test into linux-only file
46a91a947e api/types/filters: reduce uses of non-exported fields in tests
cffee85725 api/types/filters: also test generated JSON
848f11aa7c api/types/filters: rewrite tests with gotest.tools
4becdaca72 Add label on PrepareSnapshot to warn about non-expiring leases
eef6b83e53 Update containerd image builder to use lease prune label
e6170a5c4f Fix lease management during image operations
1a26e627bc vendor: github.com/vishvananda/netns v0.0.5
0666d4a585 vendor: github.com/moby/buildkit 94d0f6ed85e5 (master / v0.18.0-rc.2)
557e4ed83b tests: migrate simple cases to assert.ErrorIs
caae3c051d tests: migrate to assert.ErrorContains when possible
1b470d15d8 tests: migrate away from assert.Assert(v == nil)
0553d3d994 tests: migrate away from assert.Assert(err == nil)
5e4e34a966 tests: migrate strings.Contains -> is.Contains in assertions
48b237f7af vendor: update buildkit to v0.18.0-rc1
44f9eec1ae vendor: github.com/tonistiigi/go-actions-cache 394979b8119e
1551d95727 vendor: resenje.org/singleflight v0.4.3
b9a904c48a integration/container: TestCDISpecDirsAreInSystemInfo: use fixtures
d23bc11b97 vendor: github.com/containerd/continuity v0.4.5
8cecf3a71c Dockerfile: update containerd to v1.7.24
a650dbd951 Update containerd to v1.7.24
821d974789 volume/testutils: simplify fakePluginGetter
b656cffe4c Disallow "network generic data" with type options.Generic
223929a44d Test routed n/w inter-network communication
0546d9084f Routed networks accept traffic from anywhere.
10338053f0 Don't add default-RETURN rules to DOCKER-ISOLATION chains
939bc14616 Tidy bridgeNetwork.isolateNetwork
255fff4acd Propagate error from INC rule setup
d3b7d84b23 Simplify setINC()
1a607cf257 Rename gwMode.natDisabled() to gwMode.routed()
9c9eccfb23 client: support multiple platforms on save and load
e257856116 Dockerfile: update to runc v1.2.2
44ed3067ca c8d/container/inspect: Return `ImageManifestDescriptor`
0020c41e3a daemon: Best-effot container `OS` to `ImagePlatform` migration
638172417c container: Add `ImagePlatform` field and deprecate `OS`
60cd165012 Dockerfile/frozen-images: Add amd64 and arm64 hello world
f303531757 client: ImageImport: omit empty query-parameters
f96994ec17 Skip tests that are flaky for 4 already
be36ac13e5 .golanci.yml: rm runc exception
acf920823b update golangci-lint to v1.62.0
329d35bcca vendor: github.com/opencontainers/runc v1.2.2
4b26582bc6 vendor: google.golang.org/grpc v1.66.3
1eccc326de vendor: github.com/golang-jwt/jwt/v4@v4.5.1
a333c2990f client: TestImageImport: use table-test, asserts, add platform test-case
2bab030d6c client: TestImageSave: use table-test, asserts, add platform test-case
1ea24b7be3 client: TestImageLoad: add test-case for platform
613538469b client: TestImageLoad: rewrite to use table-tests, use asserts
b0b6357701 Makefile: don't automatically inherit graph-driver from host
d88ab0f3a2 c8d/image/inspect: Return `Descriptor`
c2c0046d11 remove logentries check and migration code
5ef5ca3adc EnableIPv4 will be in API 1.48, not 1.47
1a16f5099b daemon/logger: logDriverError: use WithFields for logs
451fee91c5 libnetwork: add missing go:build tag
0f0c5eeaca api/server/router/container: add missing go:build tag
835b1f1063 daemon/containerd: add missing go:build tag
354dfdb928 Delete /etc/hosts entries on network disconnect
c1bf84fdbc Move Austin Vazquez (austinvazquez) to maintainers
82fdae7730 daemon/images: fix godoc for ImageActions
4a2c48e231 Dockerfile: update compose to v2.30.3
ee95c7bd89 Dockerfile: update buildx to v0.18.0
8a81a97af5 Only delete /etc/hosts entries for disconnected network
b034dc41a2 deprecate pkg/platform and move internal
b15cd283d8 c8d/list: Return `Descriptor`
fc590032f3 hack: Add explicit containerd feature to `daemon.json`
7d89d83485 golangci-lint: enable copyloopvar linter
d67a21b6fc pkg/idtools: remove redundant capturing of loop vars (copyloopvar)
3350920788 integration/service: remove redundant capturing of loop vars (copyloopvar)
70b354713b runconfig: remove redundant capturing of loop vars (copyloopvar)
1a89c1e4a6 pkg/archive: remove redundant capturing of loop vars (copyloopvar)
517baee5f2 distribution: remove redundant capturing of loop vars (copyloopvar)
04d8766d4e integration/network/bridge: remove redundant capturing of loop vars (copyloopvar)
020b7102e3 daemon/logger/syslog: remove redundant capturing of loop vars (copyloopvar)
59f68d3f99 api/server/middleware: remove redundant capturing of loop vars (copyloopvar)
243442280e integration/system: remove redundant capturing of loop vars (copyloopvar)
bb682f75f9 integration-cli: remove redundant capturing of loop vars (copyloopvar)
a19b892c29 integration/volume: remove redundant capturing of loop vars (copyloopvar)
cd5e043aff daemon/cluster/executor/container: remove redundant capturing of loop vars (copyloopvar)
f797d70649 api/types/container: remove redundant capturing of loop vars (copyloopvar)
08dbb7a593 integration/build: remove redundant capturing of loop vars (copyloopvar)
ee54e43bf1 integration/daemon: remove redundant capturing of loop vars (copyloopvar)
9a7278fbdc integration/capabilities: remove redundant capturing of loop vars (copyloopvar)
ff97ff8320 daemon/logger/loggerutils: remove redundant capturing of loop vars (copyloopvar)
67d91e7622 volume/local: remove redundant capturing of loop vars (copyloopvar)
f7b547ba0d integration/network/ipvlan: remove redundant capturing of loop vars (copyloopvar)
b5c0f6cd70 daemon: remove redundant capturing of loop vars (copyloopvar)
d885d097ef libnetwork/ipams/defaultipam: remove redundant capturing of loop vars (copyloopvar)
7db58fefdc internal/mod: remove redundant capturing of loop vars (copyloopvar)
74e44345e7 distribution/xfer: remove redundant capturing of loop vars (copyloopvar)
874ad2fcf0 api/types/filters: remove redundant capturing of loop vars (copyloopvar)
3a34264129 volume/mounts: remove redundant capturing of loop vars (copyloopvar)
a505b19170 integration/plugin/common: remove redundant capturing of loop vars (copyloopvar)
742509150b libnetwork/bitmap: remove redundant capturing of loop vars (copyloopvar)
082a52e8ac oci: remove redundant capturing of loop vars (copyloopvar)
e9b009fef5 integration/networking: remove redundant capturing of loop vars (copyloopvar)
53d78d73e6 integration/container: remove redundant capturing of loop vars (copyloopvar)
0b2d687b06 daemon/containerd: remove redundant capturing of loop vars (copyloopvar)
b5b077f2ea api/types/network: remove redundant capturing of loop vars (copyloopvar)
0fc7b1c201 daemon/cluster/convert: remove redundant capturing of loop vars (copyloopvar)
6a85a13c0a internal/testutils/specialimage: remove redundant capturing of loop vars (copyloopvar)
1c6958bf13 integration/network/macvlan: remove redundant capturing of loop vars (copyloopvar)
88e24ccda6 image/cache: remove redundant capturing of loop vars (copyloopvar)
89add8c64f libnetwork/drivers/overlay: remove redundant capturing of loop vars (copyloopvar)
ce1a39ab34 client: remove redundant capturing of loop vars (copyloopvar)
ea10382ffa integration/image: remove redundant capturing of loop vars (copyloopvar)
69d0c773ca daemon/logger/fluentd: remove redundant capturing of loop vars (copyloopvar)
c2e22d85b3 api/server/httputils: remove redundant capturing of loop vars (copyloopvar)
aea8a0724a integration/network: remove redundant capturing of loop vars (copyloopvar)
f0b896c5f2 builder/remotecontext/git: remove redundant capturing of loop vars (copyloopvar)
4768d680d1 libcontainerd/remote: remove redundant capturing of loop vars (copyloopvar)
443a074fa4 profiles/seccomp: remove redundant capturing of loop vars (copyloopvar)
93f98535c3 daemon/logger/loggertest: remove redundant capturing of loop vars (copyloopvar)
35aa84fbc2 pkg/plugins: remove redundant capturing of loop vars (copyloopvar)
63f0b9a1d5 opts: remove redundant capturing of loop vars (copyloopvar)
c0de852afa integration/config: remove redundant capturing of loop vars (copyloopvar)
41bf78226f daemon/config: remove redundant capturing of loop vars (copyloopvar)
b01a37a6b7 libnetwork/drivers/bridge: remove redundant capturing of loop vars (copyloopvar)
53e48e8623 libnetwork: remove redundant capturing of loop vars (copyloopvar)
8b190b16df registry: remove redundant capturing of loop vars (copyloopvar)
21e1038d12 golanci-lint: sync comments with docker/cli
b453aa65fa update go:build tags to use go1.22
bf251c33d0 Only masquerade access to own published ports for userland-proxy=false
3dea9fd4e6 Add TestFilterForwardPolicy
3cadadb4eb Add daemon option --ip-forward-no-drop
5823b05c97 Modify IP forwarding and filter-FORWARD DROP setup.
a4d74c6383 Move setupIPv6Forwarding() to setup_ip_forwarding.go
24f53eba7f Move integration/network/bridge_test.go to bridge subdir
ca273f465a Dockerfile: update registry to v3.0.0-rc.1
c9570da15b chore(libnetwork): fix some comments
756586e437 vendor: update buildkit to v0.17.1
a6e5f7f86b Structured logs in sbJoin/sbLeave and funcs they call
18327745c0 Allow separate IPv4/IPv6 gateway endpoints.
869f7996fc Option to disable implicit mapping IPv6 host to IPv4.
4ac7f14e99 Add EnableIPv4 to the bridge driver
c0045476b8 all: Remove redundant `units` alias for `go-units`
20818454c4 update to go1.23.3
16f6fd1a95 Add a comment explaining host-networking hosts file generation
7c1e41a06d libnetwork: Sandbox.buildHostsFile: remove intermediate var
6a5ab42f28 libnetwork/etchosts: Delete: truncate file instead of close and write
7d98e45a6e libnetwork/etchosts: Add: combine with "mergeRecords()"
28d029cf9f libnetwork/etchosts: don't panic on invalid regex
80e4631998 Use netip.Addr instead of string when building /etc/hosts
c2a09d2721 Don't update /etc/hosts separately for each initial network
0af6203b46 vendor: github.com/containerd/typeurl v2.2.3
84965c0752 Windows: Run containerd as managed process
5014c90516 api/swagger: Improve description for platform in images/push
7766b35d74 golangci: govet: enable more rules
24bd11ce22 pkg/plugins: TestLocalSocket ignore deepequalerrors (govet)
626d9b421b distribution: TestLayerAlreadyExists: fix deepequalerrors (govet)
06bf2a2699 distribution: manifestStore.Put: fix unusedwrite (govet)
facdfc1751 daemon/images: onlyFallbackMatcher.Match: fix unusedwrite (govet)
406e3a0ff7 daemon/containerd: storeJson: fix redundant err-check (govet)
8e76998aee integration-cli: loadSpecialImage: fix shadowed variables (govet)
a0b84a34c2 layer: verifiedReadCloser.Read: fix shadowed variables (govet)
38db7265fc pkg/plugins: loadWithRetry: fix shadowed variables (govet)
a28e6e2d21 daemon/graphdriver/btrfs: Driver.parseStorageOpt: fix shadowed variables (govet)
b3705f12cd distribution: pushDescriptor.layerAlreadyExists: fix shadowed variables (govet)
0c8c098719 libnetwork: Network.rmLBBackend: fix shadowed variables (govet)
544b1574e2 builder/dockerfile: fix shadowed variables (govet)
bb9251c46d daemon/containerd: fix shadowed variable in tests (govet)
979227484f daemon/containerd: ImageService.imageDeleteHelper: fix shadowed variable (govet)
6dc31171c5 builder/builder-next/exporter: patchImageConfig: fix shadowed variable (govet)
b019372446 libnetwork/bitmap: fix shadowed variable in tests (govet)
32aa56af00 pkg/idtools: fix shadowed variable (govet)
6f3dd5f040 plugin: TestPluginAlreadyRunningOnStartup: fix shadowed variable (govet)
e46e159001 plugin: Manager.getManifestDescriptor: fix shadowed variable (govet)
d058e09200 daemon/graphdriver/overlay2: fix shadowed variable (govet)
ee425a9773 builder/builder-next: fix "id" variable being shadowed (govet)
79c5b938f4 daemon: Daemon.autoRemove: fix shadowing (govet)
007daf5045 daemon: Daemon.handleContainerExit rename vars to prevent shadowing (govet)
738fb74a1a libnetwork/datastore: MockStore.AtomicPut: remove redundant nil check (govet)
473b1d419c golangci: run gosec on test files as well
f6d86126c4 distribution/xfer: createChainIDFromParent: ignore G602 false positive (gosec)
a309e88dff pkg/tarsum: renderSumForHeader: ignore G110 in tests (gosec)
41b5645ba2 integration-cli: TestDaemonStartWithDefaultTLSHost: fix G402: TLS MinVersion too low
4bb96a5a4a awslogs: TestNewAWSLogsClientCredentialEndpointDetect: ignore G101 (gosec)
6f220c3340 daemon/logger/splunk: HTTPEventCollectorMock: fix G114 (gosec)
79196deae9 pkg/authorization: fix G112 Potential Slowloris Attack (gosec)
e6e6f0cdca client: TestTLSCloseWriter: fix G112 Potential Slowloris Attack (gosec)
963a9d7504 integration-cli: ignore some file-permissions issues (gosec)
7d7412af31 integration-cli: TestRunCreateVolumesInSymlinkDir: adjust file perms (gosec)
0d1c645919 integration-cli: writeFile: fix file permissions (gosec)
6ca0d3b1b1 integration-cli: inspectMountPoint: fix implicit memory aliasing (gosec)
c8e085b56a volume/mounts: TestConvertTmpfsOptions: fix implicit memory aliasing (gosec)
c3fa5b2e57 integration/plugin/logging: adjust file permissions in test (gosec)
9fc2b45fa5 fix vendor of github.com/containerd/containerd
73fae59cef golangci: remove invalid govet config
1188e80cc5 golangci: move gosec exclusions to linters-settings section
a0807e7cfe golangci: set go version to prevent fallback to go1.17 semantics
29e5bfb0f0 golangci: fix deprecated run option
7809dc08f1 golangci: remove global ignore for EXC0006 / G103 (gosec)
79e9619412 pkg/archive: ignore G103 (gosec)
88c178328f libnetwork/drivers/bridge: ignore G103 (gosec)
62e137377b integration/image: ignore G103 (gosec)
e567b816d2 golangci: sort linters-settings
0940460c2f libnetwork: endpointJoinInfo.UnmarshalJSON: fix shadowed variable (govet)
e601e71681 Remove function isLinkable
083d595286 client: TestImageHistory: add minimal test for platform
73fabd5a21 client: TestImageHistory: use fixture for JSON response
5cfd326aa4 client: Client.ImageHistory: don't decorate error twice
caf2d5dc7c Change meaning of return from DNSBackend.ResolveName
ec3dde7001 Only allocate IPv6 addresses if IPv6 is enabled.
fe856b94b5 Configure network endpoints after creating a container
788db583b1 Make buildSandboxOption a function instead of a Daemon method
4c553defce Separate Sandbox/Endpoint construction
a715ccaaa3 Unconditionally update NetworkSettings
933fcc9814 Re-remove the SetKey OCI prestart hook
035b8afe04 chore: fix function name
330e717403 fix(systemd): start Docker engine *after* DNS resolution is ready
96039276b6 client: add utilities to encode platforms
816dbbfddc ci: re-enable firewalld jobs
8c3945c761 client: rename vars for consistency
0e72863b9d vendor: update buildkit to v0.17.0
17b76511d5 Fix: Duplicate event on network disconnect #48797
fbb595cb66 Remove libnetwork_test.TestMain
5f39567e56 vendor: github.com/containerd/containerd v1.7.23, hcsshim v0.12.8
741cc494cd builder-next: exporter: emptyImageConfig: use platform directly
9be6e902b5 Restore 27.x path for libnet's Bolt database
2cc21208e6 vendor: update buildkit to v0.17.0-rc2
cb966073ce container create: add warning for volumeDriver together with mounts
93255bd748 vendor: github.com/Microsoft/hcsshim v0.12.7
3dc042b1df vendor: sigs.k8s.io/yaml v1.4.0
2807c0c2d2 Revert "ci: run integration tests with firewalld enabled"
db68a019fd c8d/save: Add tests
3cc736e95c chore: fix some function names
ba454f573b c8d/inspect: Fix duplicate RepoDigests
ae87c1d84c remove deprecated pkg/directory
2054fd99b1 pkg/longpath: remove deprecated Prefix const
c1652ab357 volume/service: use local driver as default for anonymous volumes
31880791a4 volumes/mounts: test the actual MountConfig returned
275609eb37 volumes/mounts: test the actual error returned
6b0c4b5216 volumes/mounts: don't set "expected" values for fail cases
e141be8752 volumes/mounts: remove backticks from test logs
be7d57367b volumes/mounts: remove backticks from errors
0b290094b5 volume/mounts: windowsParser.ConvertTmpfsOptions don't use runtime.GOOS
75e8f57579 internal/safepath: Join(): remove workaround for ECI / Sysbox
4b60c68803 internal/safepath: Join(): log some unhandled errors
5fc5b0574b internal/safepath: kubernetesSafeOpen: explicitly suppress unhandled err
4e5c7eeafc daemon: cdiHandler.getErrors: remove var that shadowed import
0c43bc6891 demon: ImageService.Mount: use structured logs
5c48736863 remove redundant alias for runtime-spec
352b4ff2f1 volume: VolumesService.Create: fix log-level for debug logs
2aaae08ade Cleanup legacy mirror string to registry host
b3569ebd5a Add HTTP fallback to all insecure registries
1c34581812 Use daemon config to check for legacy config
8b4cb6f58c Update host resolver to use containerd host config
8e0bf25bc3 container: update confusing GoDoc for Container and State
f2a3acc104 vendor: go.opentelemetry.io/contrib/instrumentation/xxx v0.53.0
d9a2ca7b49 vendor: go.opentelemetry.io/otel v1.28.0
070d6c75a7 vendor: google.golang.org/genproto/googleapis/api f6361c86f094
c2029cb257 Update tmLanguage file to cover first escape character
95959f7000 vendor: github.com/prometheus/client_golang v1.20.5
10d57fde44 volume/mounts: fix anonymous volume not being labeled
7d7089247c api/types/filters: GetBoolOrDefault: remove unreachableCode
f31188bc4c vendor: github.com/cenkalti/backoff/v4 v4.3.0
c3cab4170b vendor: github.com/go-logr/logr v1.4.2
d2557466c6 vendor: google.golang.org/protobuf v1.34.2
c98c6d4f08 vendor: github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161
a6d5b48e67 vendor: github.com/opencontainers/runc v1.2.0
bb364cc0f3 inte/t/networking: delete veth ifaces before netns
4ab7644d8d c8d/load: Don't ignore missing platform when requested
533e7d150a From 28.0.0, don't migrate per-endpoint sysctls.
b79bba6b68 Remove feature flag "windows-dns-proxy"
88b90ebbd2 vendor: github.com/opencontainers/selinux v1.11.1
5c72a95a30 client: prevent idle connections leaking FDs
0105091745 vendor: github.com/cilium/ebpf v0.16.0
51dd387bc9 vendor: github.com/cyphar/filepath-securejoin v0.3.4
6be2074aef daemon: use OwnCgroupPath in withCgroups
d4159a7e73 ci/gha: enable go caching
0acdc37a20 container: remove deprecated ErrNameReserved, ErrNameNotReserved
1dcb7af2cb daemon: remove Daemon.containerRoot, Daemon.newBaseContainer
7c087c3267 Fork buildkit resolver logic to daemon package
aba8df74a1 Add TestDirectRoutingOpenPorts
c9fdeaf70e Explicitly DROP packets for ports/protos that aren't mapped.
6634fc5136 Allow ICMP in routed mode
6131322c6f daemon: remove deprecated Daemon.IsPaused
692024a18c daemon: remove deprecated Daemon.Exists
3bbb9749f4 c8d/test: Add memoryLabelStore
3f745f2b21 c8d/list: Extract fake service helpers
1bb5f8bb67 update to go1.23.2
a8cd0fc4d4 vendor: go.etcd.io/etcd/server/v3 v3.5.16
5f994c49e8 vendor: go.etcd.io/etcd v3.5.16
ac6e32cb5c daemon: deprecate Daemon.IsPaused
d47c31ffdd daemon: deprecate Daemon.Exists
d9ae34289a daemon: Daemon.newContainer: explicitly return nil-error
303530c1f5 daemon: Daemon.newContainer: inline Daemon.generateHostname
7faaa3afa8 client: explicitly return zero-type on failures in prune functions
0539b7073e pkg/stringid: optimize GenerateRandomID
7ebe625db7 pkg/archive: move deprecated NewTempArchive, TempArchive to test-utils
b313fcb8ff pkg/archive: remove deprecated CanonicalTarNameForPath
c837027a9c pkg/stringid: replace TestShortenIdXXX with TestTruncateID table test
83f17b0cbb pkg/stringid: remove deprecated IsShortID, ValidateID
77f97926ad daemon: remove secretsSupported utility
c0b86dd068 daemon: remove configsSupported utility
5208e2954c daemon: deprecate Daemon.Register and make it internal
d122ea0aea api: GET /images/json: preserve original manifest order
1aba291cd4 Releases container layer on export
66f159dc24 build: log when build is cancelled
cca7085464 cmd/dockerd: Add workaround for OTEL meter leak
21b0d5f0c1 vendor: github.com/moby/swarmkit/v2 v2.0.0-20241017191044-e8ecf83ee08e
fafdcd1194 dockerd-rootless-setuptool.sh: let --force ignore smoke test errors
e7e555f573 distribution: remove formatPlatform utility
abed0e1f97 client: ContainerResize, ContainerExecResize: don't overflow width/height
ed44a05607 api: backend.ContainerExecResize: pass context and use uint32 for width, height
2b2aa69100 api: exec resize: improve errors for invalid width/height
8553d34593 api: backend.ContainerResize: pass context and use uint32 for width, height
d19aa0c590 api: container resize: improve errors for invalid width/height
1dd9d2c780 api/server/httputils: add Uint32Value utility
0548fe251c Enable bridge netfiltering if userland-proxy=false
039e164bf5 api/server/httputils: DecodePlatform: improve test-coverage
a8bfa83667 Fix: setup user chains even if there are running containers
1701bce9e0 api/server/middleware: use structured logs for debug-logs
4e840b9e29 volume/service: change some logs to use structured logs
bca54a6838 daemon: killWithSignal: use more structured logs
44010e76c2 integration/container: add TestExecResize
944dc4a559 integration/container: TestResize: add more test-cases
3f2e9da010 api/server/router/container: move API adjustments to API
0c595fe781 api/server/router/container: fix inconsistent receiver name
59cf8e8565 Add iptables doc for a gateway-mode=routed network
19328fdd4f Add iptables doc for a --internal network
bc84b4b6d9 Add iptables doc for a network with icc=false
a8eaeba3f9 Add iptables doc for a network with userland-proxy disabled
ac4a95d1d0 Add iptables doc for a user-defined network
20571e453b Generate iptables documentation
a602054826 daemon: fix restoring containers with name matching an ID
71977a841c daemon: Daemon.registerName: inline validateID utility
4e567e1622 ci: run integration tests with firewalld enabled
8883db20c5 hack: run firewalld when $DOCKER_FIREWALLD is set
6c6174b371 cmd/docker-proxy: UDP: reply to clients with original daddr
a0a0bbae6c Discard ErrDumpInterrupted and return data after maxRetries
3cf90ca73f container: deprecate ErrNameReserved, ErrNameNotReserved
0200c58c4a container: viewDB.ReserveName, view.GetID: return errdefs errors
0603bd9577 container: viewDB.withTxn: don't wrap errors
0d36ab1875 container: TestNames: don't string-match error assertions
d9627b6159 docs: api: document w (width) and h (height) query params as required
2a3a7e8ee8 api: document w (width) and h (height) query params as required
a051aba82e gha: shorter time limits for smoke, validate
91c448bfb5 gha: use "ubuntu-24.04" instead of "ubuntu-latest"
9a14299540 gha: dco: small tweaks to running the container
3cb98d759d gha: dco: update ALPINE_VERSION to 3.20
7da4ab9a91 README: add some badges
cfe0d2a131 gha: build (binary), build (dynbinary): limit to 20 minutes
e75f7aca2f gha: dco: limit to 10 minutes
4a2361ea09 pkg/authorization: update link to API documentation
5b149d3faa client: update link to API documentation
0f8f143a27 docs/api: version-history: update documentation links
e06245a2a6 client: imageBuildOptionsToQuery: omit "default" networkmode
b13cf4fc5f client: imageBuildOptionsToQuery: only send "rm" when disabling
805e2c67e2 builder/builder-next: Builder.Build: use network-mode consts
740798da34 client: imageBuildOptionsToQuery: omit empty values from query
c68c9aed8c gha: restrict cross and bin-image to 20 minutes
7fe04c142d vendor: github.com/moby/buildkit v0.17.0-rc1
cd551b936b daemon/containerd: getPushDescriptor: fix formatting of platform in errors
c16be54040 daemon/containerd: touch-up errPlatformNotFound error
91f74c2fe0 Disable iptables/ip6tables in two tests to remove conflict
8681b3c2ac images: GetImage: touch-up error message for missing platform
d31c241ea5 PushImage: remove misleading error about --platform without containerd
037bac89fc gha: remove stray double empty line
26049febb2 api: Allow for an empty string for Isolation in Swagger specs This adds an empty string as a valid option for the Isolation field when inspecting a container. On non windows systems, this is always empty, so no error should be returned. Fixes #47452
6b7e2783d1 gha: add guardrails timeouts on all jobs
7fa6d3c230 integration/build: remove TestBuildWithSession, and fsutil direct dependency
2e699872bc vendor: google.golang.org/grpc v1.66.2
e007ef71c1 vendor: google.golang.org/protobuf v1.34.1
30b6e58242 vendor: github.com/cespare/xxhash/v2 v2.3.0
4592ce42b6 vendor: golang.org/x/tools v0.25.0
36549fb56e vendor: golang.org/x/mod v0.21.0
cc80652bcd vendor: golang.org/x/net v0.29.0
9d6db83acc vendor: golang.org/x/crypto v0.27.0
6e32888caa vendor: golang.org/x/text v0.18.0
51cf0ed303 vendor: golang.org/x/sys v0.25.0
6b7565ba40 vendor: go.etcd.io/bbolt v1.3.11
02d4fc3234 gha: buildkit: make sure expected Go version is installed
d7ff538467 Fix iptables rule descriptions
77e51657fe cmd/docker-proxy: re-add SO_REUSEADDR
38f0483ea7 Set NODAD on bridge IPv6 addresses
58f4e916a3 build: create distinct history db for each store
367125e0cc Use `pools.Copy` for archive file copy operations
2f02f456f5 Fix comments
fd0d008504 vendor: github.com/vishvananda/netlink v1.3.1-0.20240922070040-084abd93d350
7ca9e9b496 libnet/d/bridge: port mapping: proxy LL connections
49ab30ea2c Fix vendoring for moby/docker-image-spec
7eb508e14c api: postImagesLoad: fix API version for platform
5875b6e8cf inte/networking: test access to published ports from remote host
2552782c1d inte/networking: test accessing a published port from the host
98efe665a5 Log rather than error if port mapping is overspecified
339592f59b Pass context to the port mapping code
ca4c68ab95 update to go1.22.8
c866a7e5f8 daemon/exec: don't overwrite exit code if set
4babd72186 tests: skip docker-py exec exit code test
e6488c9c0e runconfig: validateNetContainerMode: simplify validation
5bdbc2f026 client: ContainerCreate: normalize CapAdd, CapDrop capabilities
be248d18b5 client.ContainerCreate: use container.CreateRequest instead of local type
98d74e3a3c Update download-frozen-image-v2.sh added OCI v1 support
91df504bf1 inte/networking: move port mapping tests into a dedicated file
6a1d8a9899 daemon: add IPv6 loopback as insecure registry
7624a6bfa5 Dockerfile: update compose to v2.29.7
233dce3dba Dockerfile: update docker CLI to v27.3.1
edcefd4efb libnet/i/kv/boltdb: fail fast in case of contention
ed08486ec7 libnet/ds: simplify datastore.New()
3ca91a6a12 libnetwork: unit tests: drop OptionBoltdbWithRandomDBFile
450200b4a6 gha: add CodeQL Analysis workflow
32b9e7b8b9 libnet/i/kv/boltdb: remove unused field 'timeout'
4f1d739de5 gha: govulncheck: make sure read permissions are set
8c598b1005 cmd/dockerd: runDaemon: extract platform-agnostic code
5228850225 cmd/dockerd: windows: don't use Fatal log to prevent early exit
0aebbd0ba9 cmd/dockerd: use golang.org/x/sys/windows/service param-change consts
b186261b84 cmd/dockerd: un-export DaemonCli, NewDaemonCli
6f83fda310 cmd/dockerd: construct context in main
52694ebe16 cmd/dockerd: windows: move setting PIDFile location to setPlatformOptions
44a3bba2a2 cmd/dockerd: apply options when creating daemonCLI, not when starting
5c1b037ff5 cmd/dockerd: rename loadCLIPlatformConfig to setPlatformOptions
1388d959bc cmd/dockerd: set default configfile location as part of newDaemonOptions
19a8e7ff7e cmd/dockerd: getDefaultDaemonConfigFile: add GoDoc for Windows implementation
388c0a8cda cmd/dockerd: remove unused error-returns
1624ae197e cmd/dockerd: move Windows code for data-root
333cfa6402 Fix merge problem
db25b0dcd0 Only enable bridge netfiltering when needed
605f51172a Dockerfile: update compose to v2.29.4
3d4831a23f Dockerfile: update buildx to v0.17.1
45a9dde660 man: dockerd: add description for --log-format option
c4aaa97f02 man: remove docs for deprecated --api-cors-header
c2fc1f4a40 internal/opts: SetOpts: invalidate empty option-names
908bb959e7 internal/opts: SetOpts.Set: remove redundant var assignment
758cca6036 internal/opts: SetOpts,NamedSetOpts: test for optional value
50e83a0713 man: dockerd: value is optional for --feature flag
f9c0103413 Do not DNAT packets from WSL2's loopback0
2b6550bb2e man: fix duplicate word in --feature flag description
edaa0eb56d Add linting rules to spot use of un-wrapped netlink functions.
00bf437d84 Add nlutil functions to retry on netlink EINTR
8b0e94ffaf Update dlv in the dev-env
3dd96ce3c4 Fix enableIPv4 for old networks
fa06acc851 man: update dockerd man-page to include --feature flag
ff191c58f7 api: info: deprecate "Commit.Expected" fields
f13c08246d Add feature to daemon flags
fefa98ae90 c8d/prune: Keep deletion order stable
521fa833fe images: Support platform selection on graphdrivers
f143f4ec51 image/save&load: Support `Platform` parameter
ab075ecd10 image/history: Support `Platform` parameter
5128007116 Explicitly disable nvidia device injection for --gpus=0
adb00d3d55 TestIPRangeAt64BitLimit: remove colon after XFAIL to help grepping
23e79a261e c8d/prune: Add OTEL spans
e4c2eb9d8a c8d/prune: Keep the last tagged image instead of creating dangling image
962da27cdf Dockerfile: update compose to v2.29.2
2b43979395 API: bump version to 1.48
e5e8addeee Dockerfile: update buildx to 0.17.0
d291722110 Dockerfile: update docker CLI to v27.2.1
c095dbe512 project: update 23.0 EOL and add 25.0 LTM branch
43036f350a Dockerfile: update RootlessKit to v2.3.1
c98aad0518 vendor.mod: github.com/rootless-containers/rootlesskit/v2 v2.3.1
829aa845bb integration/system: rename vars to prevent shadowing imports
71e449de0a vendor: update buildkit to v0.16.0
7263cd226f image/tarexport: saveSession.save: inline variables
2e4079ff31 image/tarexport: saveSession.save: remove redundant Platform
ab5c5df1d5 image/tarexport: rename variables that shadowed imports
5fd3cd2d77 layer: layerStore.deleteLayer(): remove redundant error-check
f5cc04284d remove deprecated image/spec package
92195c1333 Dockerfile: update containerd binary to v1.7.22
b4a3e8a307 vendor: github.com/containerd/containerd v1.7.22
6f37e5a168 vendor: update buildkit to v0.16.0-rc2
1161b790cf seccomp: add riscv64 mapping to seccomp_linux.go
16d686c7bc internal/unix_noeintr: fix godoc for package
47d5ce0ef8 gha/bin-image: Also run on branches like `27.x`
09fc6ab2d9 docs/api: update deprecation version for erroneous fields (v1.46, v1.47)
3df03d8e66 api/swagger: update deprecation version for erroneous fields
aca38a4218 docs: api: fix documentation for image push endpoint (API v1.25-v1.47)
07e31e393a api: swagger: fix documentation for image push endpoint
fb6da4f4b7 daemon/logger/loggerutils: add //go:build directives to prevent downgrading to go1.16
5403e3f4de libnetwork/networkdb: add //go:build directives to prevent downgrading to go1.16
928e5aa524 container/stream: Config.CloseStreams(): use errors.Join
59eba0ae13 Fix typos
a2e14dd8bd update to go1.22.7
5ebc179cb1 test: update since session signature has changed
f4261dbb75 vendor: update buildkit to v0.16.0-rc1
b5ec31f090 vendor: github.com/opencontainers/runc v1.1.14
2189aa2426 update runc binary to 1.1.14
4e0d1dfc17 docs/api: add documentation for API v1.47
d000f12fcc hack/make/.binary: enable pie mode on windows/arm64
28dc2f6fac Increase test handler sleep, replace deprecated assert
c7f8557310 c8d/pull: Same error message for non-matching platform
f5108e9c6b golangci-lint: temporarily disable G115: integer overflow conversion
9b11bb507b update golangci-lint to v1.60.2
3df59c9dcf update to go1.22.6
4cd5c2b643 hack/make/.binary: set CGO_LDFLAGS=-latomic for arm/v5
e853c093bf hack/make/.binary: set CCGO_CFLAGS=-Wno-atomic-alignment for arm/v5
bb899c654a api/types: move RequestPrivilegeFunc to api/types/registry
88b118688e man: create parent directories in install recipe
9bbe5a50dd Dockerfile: update registry to v3.0.0-beta.1
f4e82e2fb0 c8d/list: Don't exclude non-container images
d6446d81d8 vendor.mod: golang.org/x/net v0.28.0, etc.
65fdd363a0 vendor.mod: golang.org/x/time v0.6.0
4bfdfd6f72 vendor.mod: golang.org/x/sys v0.24.0
78d0ef5e87 vendor.mod: golang.org/x/sync v0.8.0
492fe40052 vendor.mod: golang.org/x/mod v0.20.0
d7ff6b5085 vendor.mod: drop direct dependency on golang.org/x/exp
8e580efb73 portallocator: un-export PortAllocator.Begin, PortAllocator.End
fb1ae4bdb7 portallocator: RequestPortsInRange: validate range once
05d784d6da portallocator: make newPortMap a regular constructor
c00f6281d9 portallocator: RequestPort: skip RequestPortInRange as intermediate
78d88d06dc portallocator: use net.IPv4zero for defaultIP, and make it a property
630a47177b portallocator: use new instance in tests
1897a21d60 portallocator: ReleaseAll: remove unused error-return
2a2176f317 portallocator: RequestPortInRange: fix doc-link in godoc
a88efd7359 vendor: github.com/containerd/containerd v1.7.21
de4fc1c927 Dockerfile: update containerd binary to v1.7.21 (static binaries and CI only)
1ad5b5abb2 daemon: fix non-constant format string in call (govet)
005b488506 api/types: fix non-constant format string in call (govet)
0fd3a53c12 api/server/router: fix non-constant format string in call (govet)
4a93233b88 container/stream: fix non-constant format string in call (govet)
068c1bf3be libnetwork/drivers/bridge: fix non-constant format string in call (govet)
f434cdd14a volume/testutils: fix non-constant format string in call (govet)
81a1ca0217 builder/dockerfile: parseChownFlag: fix non-constant format string in call (govet)
b56c58a860 layer: ignore G602: slice index out of range (gosec)
c308bd3e0e internal/cleanups: fix non-constant format string in call (govet)
7b60a7047d libnetwork/cnmallocator: fix non-constant format string in call (govet)
06bfe8bab3 cmd/dockerd: fix non-constant format string in call (govet)
6008c42ca2 libnetwork: fix non-constant format string in call (govet)
b79a4696ee integration-cli: fix non-constant format string in call (govet)
6bbacbec26 integration-cli: DockerSwarmSuite: rm redundant Fprintf, handle errors
3ca38f0b5e integration-cli: DockerNetworkSuite: rm redundant Fprintf, handle errors
2b7a687554 integration-cli: use erors.New() instead of fmt.Errorf
c7b36f8953 libnetwork: TestDNSOptions: remove redundant skip check
6bd7835cb6 integration-cli: remove redundant platform checks
0afe684685 c8d/pull: Replace pointer to interface with interface
db40a6132b c8d/pull: Keep the replaced image as dangling
6ebe6a7353 c8d/load: Only unpack host platform images
728894b7d0 c8d/load: Don't fail whole operation if unpack failed
0db71bb629 vendor: dario.cat/mergo v1.0.1
2c498c6a74 vendor: github.com/vishvananda/netlink v1.3.0
6d0a5e31d7 vendor: github.com/vishvananda/netlink v1.2.1
55f693e7b7 integration/TestAPIImagesListManifests: Check `Containers`
29a2f6d339 c8d/list: Update benchmark to also have containers
a5d75f6d27 c8d/list: Fix race condition when traversing containers
2f0180934d vendor: tags.cncf.io/container-device-interface v0.8.0
fe307b5dab libnetwork: resolvconf: remove dependency on errdefs
afdfc04e10 libnetwork: resolvconf: remove var that shadowed import
6d94122217 logger/journald: plumb contexts into reader
9b6ba18fc9 logfile: Close reader when caller cancels
c4ba1f4718 Dockerfile: update xx to v1.5.0
abcb9e972b libcontainerd/supervisor: set log-level through the config-file
edfde78355 man: support bringing your own go-md2man
05d7008419 man: build dockerd man pages using make
1804f0c911 integration/container: rename var that collided with import
62bcc6ef50 libcontainerd/supervisor: consolidate platform-specific defaults
f49fad75eb vendor.mod: github.com/microsoft/hcsshim v0.12.5
b93cf37dcd c8d/list: Don't require `opts.ContainerCount` for manifest containers
cd148d39d9 feat(stream): log the event when stream copy failed
c459986399 vendor: update buildkit to v0.15.2
6bb6befc37 c8d: Rename readConfig to readJSON
495fab8e66 c8d/list: Add test for total and content size
469c2ef3ec c8d/list: Fix `Total` size calculation
e77e543b58 api/types/registry: fix godoc, and add some doc-links
218c08b283 plugin: fix deprecation comments
771377f9fa Test ipvlan IPv6-only
390713607f Allow ipvlan containers with no address
b95f8e7799 Fix some ipvlan error types for the API
660e8118a4 Allow no-IPv4 on an ipvlan network
8427de3bac Test macvlan IPv6-only
d599cc5842 Allow macvlan containers with no address
f57e0dc2ff Fix some macvlan error types for the API
a7a5de676d Allow no-IPv4 on a macvlan network
496b457ad8 Allow --ip-range ending on a 64-bit boundary
9c6d30481d remove leftovers for building docker-proxy on Windows
3cd28504de govulncheck to report known vulnerabilities
a308f12ed8 add Austin Vazquez (austinvazquez) to curators
7b0ef10a9a migrate to github.com/moby/sys/userns
8411ecb5e3 Makefile: Add BIND_GIT variable
050afe1e1a api/list: Expose manifests
f8b638b98f c8d/list: Use ReadConfig helper
85e9102dc9 api: Bump default version to 1.47
efb3c50799 swagger: Disable ImageSummary model generation
b24c2e95e5 update to go1.21.13
925b484a40 No fallback nameservers for internal resolver
d29767431c Use host netns for host's ext-dns servers
344039b9ae Populate DNS records for IPv6-only endpoints
b4cee5c3ee Removed all mentions of "please" from docs and messages
f1ec84314d docs: add default-network-opt daemon option
23812190c3 docs: remove devicemapper
690d166632 man/dockerd.8: assorted formatting fixes
374b779dd1 man/dockerd.8: escape asterisks and underscores
386d0c0fbc docs: update dockerd usage output for new proxy-options
54971ac807 Fix styling of arguments
a8b8f9b288 Fix the max-concurrent-downloads and max-concurrent-uploads configs documentation
68e9223289 docs: remove documentation about deprecated cluster-store
6c702167bf Document `--validate` daemon option
af45195a21 Update man-page source MarkDown to work with go-md2man v2
562a6d2b13 docs: update for cgroup v2 and rootless
7cf2132655 docker run: specify cgroup namespace mode with --cgroupns
1cbcd5d47a daemon: document --max-download-attempts option
3cfa74724c Update document links and title.
462f38bd8b Allow user to specify default address pools for docker networks This is separate commit for CLI files to address PR 36054
13ff896b38 Update docs and completion-scripts for deprecated features
f3c3b05b50 Added docs for dockerd
20f8455562 fix a number of minor typos
c23d4b017a Introduce/document new IPC modes
25baee8ab9 docs: add documentation for dm.libdm_log_level
7d3f09a9c3 Restore dockerd man page
ea914a66a2 Use retErr in Network.ipamAllocate
cdea750966 Tell RootlessKit about port mappings when --userland-proxy=false
b3fabedecc Create docker-proxy TCP/UDP listener sockets in the daemon
dac7ffa340 Remove rootlesskit-docker-proxy
f1e0746c08 Tell RootlessKit about docker-proxy port mappings
384ca56d90 Fix error type used for ProgramExternalConnectivity
7a8663c9ea cmd/docker-proxy: drop FrontendAddr() method
88fb0c9fec cmd/docker-proxy: drop unused BackendAddr() method
ba2f3c0a98 cmd/docker-proxy: pass open listener to proxy impl
e0c7a839a8 Only build docker-proxy for Linux
ee766ae7b1 c8d: Wrap matchRequestedOrDefault result with a platform
842c5c584e c8d/image: Add `matchRequestedOrDefault`
6617cdc66b daemon/c8d: Fill wanted platform in GetImageManifest
427b111943 c8d/history: Unmarshal only a subset of ImageConfig
b9d04c07c4 c8d: Simplify `presentImages` into `getBestPresentImageManifest`
23d565cae3 c8d: Improve error message for platform not found
e73c2a05b2 daemon/c8d: Simplify `presentImages` signature
af84ddec13 vendor: github.com/containerd/nydus-snapshotter v0.14.0
1e5c0c4d77 vendor: github.com/containerd/nydus-snapshotter v0.13.14
dfe36fa226 touch-up security policy
3b1341972b Only assign an IPv4 address if required
15e5f6868a Don't auto-allocate IPv4 IPAM if !enableIPv4
c0a6145f6d Enable IPv4 in the unit tests that will need it.
b42f4b96aa Check for an IPv6 gateway before connecting to docker_gwbridge
034a5a8986 Reject swarm n/w creation with IPv4 disabled.
c91dc7e6dc Reject Windows network creation with IPv4 disabled.
a86a9e3aa4 API 1.46: end per-interface sysctl migration in major release
17adc1478b Migrate per-endpoint sysctls until 28.0.0
d44f869a2d vendor: google.golang.org/grpc v1.62.0
716ec490db vendor: golang.org/x/time v0.5.0
ac145a82fd api/types: NewHijackedResponse: fix typo in GoDoc
80822715cd plugin: fix typos in GoDoc
1f542d5d6c Set EnableIPv4 for predefined networks
903daa4dc4 Add flag 'enableIPv4' to libnetwork.Network
d4d8611164 Added API create/inspect option EnableIPv4
c7dec1c67a docs/api: swagger: fix x-nullable for SystemInfo.Containerd (api v1.46)
66b5b8bfa8 api/swagger: fix x-nullable for SystemInfo.Containerd
3279b4f8f4 hack/make: suppress "not mounted" message
a23dcf4798 Bump API version to 1.47
403f9dbc42 project: update supported release branches
96762a28c7 libcontainerd/supervisor: remove remnants of adjusting oom-score
2a71815b83 daemon: remove unused import
2b5ffa0b63 gha: set permissions to read-only by default
7a92f21445 daemon: isPermissibleC8dRuntimeName: use local utility to reduce c8d deps
2847c4b7fe libnetwork/networkdb: switch to go-immutable-radix v2
fca57ac32f Split Linux/bridge and Windows/nat integration tests
ef8e2fe282 Use retErr in Endpoint.sbJoin
58808e7748 Remove code to update Network.enableIPv6 if false
8f1989556a Trivial tidy-up of Endpoint.assignAddress()
6fe26e0629 Add IPv6 to the null IPAM driver
dcf922e266 daemon: openContainerFS: log cleanup errors
aa60f7891b daemon: openContainerFS: rename output var
3539fef440 daemon: setupMounts: rename var that shadowed import
a19c2ccc7b daemon: rename "mounts" type to reduce shadowing
39c79e08e4 daemon: move sortMounts to a platform-agnostic file
cdbfae1d3e api/server/router/grpc: NewRouter: set correct MaxRecvMsgSize, MaxSendMsgSize
cd11843df8 images: Extract ImageInspect from GetImage
1baf8f9e60 vendor: update buildkit to v0.15.1
2ce811e632 migrate to github.com/moby/sys/user/userns
91dfc326cf vendor: github.com/moby/sys/user v0.2.0
1e2ccf8046 vendor: github.com/gofrs/flock v0.12.1
077b32ac4e vendor: golang.org/x/sys v0.22.0
4c97ff777d Clean up networks in 'integration/network' tests
e2237240f5 dockerd-rootless-setuptool.sh: move RootlessKit smoke test
a3efa3026b contrib/check-config.sh: remove special case for userns on CentOS/RHEL 7
6d0b508699 daemon: remove setMayDetachMounts (set may_detach_mounts=1 on startup)
ae96ce866f remove support for setting CORS headers (deprecated)
dbf6873f45 Logfile: Add tracing spans
1b46faf233 Logfile: skip files that are corrupted
77f2d90e27 Refactor logfile reads
b37c8a03c0 Fix time comparison in sharedtemp implementation
21fd5a3f30 vendor: github.com/moby/sys/sequential v0.6.0
e0b98a3222 gha: check-pr-branch: fix branch check regression
fbbda057ac update containerd binary to v1.7.20
f460110ef5 gha: check-pr-branch: verify major version only
6a6b49f2de vendor: github.com/moby/sys/symlink v0.3.0
68636d56fc vendor: github.com/moby/sys/signal v0.7.1
44b266ab59 vendor: github.com/moby/sys/mount v0.3.4
dc4a12874e vendor: github.com/moby/sys/mountinfo v0.7.2
55a5f3fcaa vendor: github.com/containerd/containerd v1.7.20
a42f7fd717 Dockerfile: update compose to v2.29.0
97b51c6b72 Dockerfile: update buildx to v0.16.1
b37c983d31 README: replace obsolete Docker EE mention
508939821b daemon/containerd: rm use of regexp
b66d4b567a image/v1: rm regexp use
1c0dc8a94f layer: rm regexp use
499c842c52 hack: explicitly control enabling the journald logging driver
5282cb25d0 If url includes scheme, urlPath will drop hostname, which would not match the auth check
2ac8a479c5 Authz plugin security fixes for 0-length content and path validation Signed-off-by: Jameson Hyde <jameson.hyde@docker.com>
0fa71a4cfc vendor: cloud.google.com/go/logging v1.9.0
eafad2cb86 vendor: golang.org/x/oauth2 v0.21.0
9b782b8ff7 vendor: cloud.google.com/go/compute/metadata v0.3.0
68bd630830 vendor: update buildkit to v0.15.0
f649fd0c97 Fix API version in TestSetInterfaceSysctl
7f04a603f6 docs/api: Add missing `
89781912c1 vendor: update buildkit to v0.15.0-rc2
8be292a7bb By-default, don't create an iptables rule to checksum SCTP
1787c364e0 vendor: update buildkit to v0.15.0-rc1
688301caf4 daemon/graphdriver: remove Capabilities, CapabilityDriver
185b1e3d69 Add lint rule to forbid old-style atomic ops
5e64a7a003 volume/service: switch to Go 1.19 atomics
1c102140f8 libnetwork: switch to Go 1.19 atomics
46133bdb8e libnetwork/diagnostic: drop unsound use of atomics
5044778433 distribution: switch to Go 1.19 atomics
2ab618696a daemon/images: switch to Go 1.19 atomics
30d740ada0 daemon/logger/ring: switch to Go 1.19 atomics
7ef0c7acbe d/logger/loggerutils: switch to Go 1.19 atomics
e612990994 daemon/logger/journald: switch to Go 1.19 atomics
78893cdc05 daemon/logger/gcplogs: switch to Go 1.19 atomics
508f51044d daemon/containerd: switch to Go 1.19 atomics
71a299ff6a daemon: switch to Go 1.19 atomics
206445fa4f rootless: add `Requires=dbus.socket`
4776e6dd60 Remove IPv6 bridge RouteAdd() that always fails
066b7fa83c vendor: golang.org/x/net v0.25.0
7721408db7 vendor: golang.org/x/crypto v0.23.0
f43436e6b8 vendor: golang.org/x/text v0.15.0
342ce515ab vendor: golang.org/x/sys v0.21.0
2e58a29023 vendor: github.com/klauspost/compress v1.17.9
fb18966aa5 api/types/container: InspectResponse: keep old name for embedded type
837289ba62 update to go1.21.12 [part 2]
4d1d7c3ebe update to go1.21.12
398e15b7de update containerd binary to v1.7.19
d0aa3eaccf Migrate to github.com/containerd/platforms module
8983957ac5 vendor: github.com/containerd/containerd v1.7.19
73979f3f04 daemon/logger/journald: add //nolint:unused for readSyncTimeout
ef356c53ba api/types: remove deprecated ContainerNode, ContainerJSONBase.Node
5b9ed8081b api/types: remove deprecated ImageLoadResponse
d3defe9140 api/types: remove deprecated ImageImportSource
6cdb123b6f api/types: remove deprecated ImageSearchOptions
67b7b15674 api/types: remove deprecated EventsOptions
3cbc166d2e api/types: remove deprecated container stats types
ec5cede0a2 api/types: remove deprecated ContainerStats
4ffe497ba4 api/types: remove deprecated CopyToContainerOptions
345e31ab96 api/types: remove deprecated ContainerPathStat
2bceb34717 api/types: remove deprecated ContainersPruneReport
0e64c9e93b api/types: remove deprecated ContainerExecInspect
6f0caec226 api/types: remove deprecated ExecStartCheck
13fbd394ee api/types: remove deprecated ExecConfig
665eef54db api/types: remove deprecated NetworksPruneReport
d2256faa0e api/types: remove deprecated NetworkResource
ffdd2de674 api/types: remove deprecated EndpointResource
f0f2b8f7cb api/types: remove deprecated NetworkDisconnect
cf9d9ff50d api/types: remove deprecated NetworkConnect
39c7b5f3e3 api/types: remove deprecated NetworkInspectOptions
64583771f0 api/types: remove deprecated NetworkCreateResponse
c99e0bc8ae api/types: remove deprecated NetworkListOptions
48f147e8d3 api/types: remove deprecated NetworkCreate
ff1f1c58d5 api/types: remove deprecated NetworkCreateRequest
4117a9308d api/types: remove deprecated VolumesPruneReport
e0156f0f16 api/types: remove deprecated ImagesPruneReport
1abc8f6158 api/types: move container-inspect types to api/types/container
05b0e653dd api/types: move Container to api/types/container
84ffc644ef api/types: move ContainerState to api/types/image
7053007f71 api/types: move ImageInspect and RootFS to api/types/image
da039ca918 api/types: move GraphDriverData to api/types/storage
e12b7493b9 api/types: move Port to api/types/container
5517322cf9 api/types: move MountPoint to api/types/container
c130ce1f5d api/types: move container Health types to api/types/container
df22a511cb api/types: move container-networksettings types to api/types/container
53bc396ef4 c8d/build: Log `image tag` event when image was built with Buildkit
1506bbcfe8 builder-next: Add ImageNamedByBuildkit callback
bce76d486e builder-next: Don't return error from exported callback
e4d792a06d api/types/system: remove Info.ExecutionDriver
0f3273e71a daemon/graphdriver: move RefCounter to an internal package
efdaca2792 pkg/rootless/specconv: move to internal
b7d26f2f8f pkg/dmesg: remove deprecated package
3a3bb1cb50 pkg/directory: deprecate, and move to internal
80900bdbcd pkg/directory: fix comment, and remove import comments
e55897977c daemon/graphdriver: simplify Checker, remove NewFsChecker, NewDefaultChecker
554db8f113 daemon/internal/fstype: make FsMagic values not platform-dependent
49f6e004f1 daemon/graphdriver: move FsMagic utilities to an internal package
09f62a8a61 runconfig/opts: remove deprecated ConvertKVStringsToMap
4a30231d05 runconfig: remove deprecated IsPreDefinedNetwork
ed712ad0b9 runconfig: remove deprecated DefaultDaemonNetworkMode
13984ef185 runconfig: remove deprecated SetDefaultNetModeIfBlank
6e2b6399d7 runconfig: remove deprecated ContainerConfigWrapper
d80a3f2e48 pkg/capabilities move to daemon/internal
625c795785 errdefs: FromStatusCode(): use early returns
81be279c6b daemon/logger, volume/drivers: remove redundant import-aliases
f2970e5358 pkg/containerfs: move to internal
a3e6ce95c4 pkg/containerfs: cleanup GoDoc, and make Windows a proper wrapper
e2ae6907c6 pkg/containerfs: remove CleanScopedPath and make it internal
fa150ca759 cleanup: Remove unnecessary return value
a2fe103f0d vendor: github.com/microsoft/hcsshim v0.11.7
dfbcddb9f5 Fix incorrect validation of port mapping
4de54ee14c Fix duplicate subnet allocations
6521057bb2 daemon/graphdriver/overlay2: set TarOptions.InUserNS for native differ
969993a729 pkg/archive: createTarFile: consistently use the same value for userns
379ce56cd8 pkg/archive: handleTarTypeBlockCharFifo: don't discard EPERM errors
af85e47343 pkg/archive: getWhiteoutConverter: don't error with userns enabled
080a8e1b6b libcontainerd: gofumpt
56fa45773f pkg/plugins: gofumpt
0e2d40c24a pkg/archive: gofumpt
84e43da752 libnetwork: gofumpt
bb1b766ddb layer: gofumpt
07469b4509 internal: gofumpt
8e50a96a78 integration: gofumpt
c3ac7fee26 integration-cli: gofumpt
e765dd90ee daemon: gofumpt
181101c4a8 daemon/containerd: gofumpt
46b0102da4 daemon/config: gofumpt
4a89963f1e builder: gofumpt
8768145519 api/types: gofumpt
92346bcec6 api/server: gofumpt
6ada1cff02 fix some gofmt issues reported by goreportcard
84cabde357 daemon/graphdriver: deprecate GetDriver(), and remove its use
b7896056c1 daemon/graphdriver: New(): update GoDoc
25d12b54d3 daemon/graphdriver: combine GetDriver and getBuiltinDriver
3928165cf7 Dockerfile: update docker CLI to v27.0.2
555dac5e14 daemon/graphdriver: remove support for external graphdriver plugins
bc4991e443 layer: rename vars that shadowed imports
0ed172b700 daemon/graphdriver: rename vars that shadowed imports
bbced07f96 builder/builder-next: applySourcePolicies: remove redundant check and vars
790035f754 Dockerfile: update compose to v2.28.1
95fae036ae update golangci-lint to v1.59.1
d4160d5aa7 pkg/archive: reformat code to make #nosec comment work again
04bf0e3d69 builder/remotecontext: reformat code to make #nosec comment work again
1fc9236119 api/types: deprecate ContainerJSONBase.Node, ContainerNode
ca396dfaaa awslogs: Prevent close from being blocked on log
9893520c62 libnetwork: Mark flaky tests
d0d8d5d97d hack/unit: Rerun failed flaky libnetwork tests
a52aab8598 project,vendor.mod: document more clearly that we are not a Go module
1e28299f77 project: document currently known packagers
f502f49e49 project: document modern branch and tag practices
Bumping docker-cli to version v28.0.1, which comprises the following commits:
d75f8d83d Add detailed descriptions for --ulimit options in docker run documentation
75595836f vendor: github.com/go-jose/go-jose/v4 v4.0.5
4e7497e9c Update dockerd command line ref, default bridge opts
be669099c Update dockerd command line ref, changes in 28.0
427c1361c gha: add docker 28 to test matrix
aad2ae50e docs: network ls add heading and anchor for "--no-trunc"
8a1b096e7 docs: fix missing anchors in swarm reference pages
c99d3312e docs: fix broken anchor-link in "container restart" reference
0cff34098 cmd/docker: do not print error status on exec/run
8f5573857 completion: add completion for docker service flags
768d10767 completion: add completion for docker node flags
d5e6e2ec6 completion: add completion for node names
7e71782ba cli/command/context: fix error-handling of skip-tls-verify
762d59359 completion: use service names, and support DOCKER_COMPLETION_SHOW_SERVICE_IDS
33f327a98 vendor: github.com/docker/docker v28.0.0-dev (af898abe4466)
f977b923c Fix missing link from Configure node healthcheck heading
f53cee5dd vendor: github.com/docker/docker v28.0.0-rc.3
fe349e6a6 vendor: github.com/docker/docker 00ab386b5a2e (master, v28.0.0-rc.3)
136901961 vendor: github.com/docker/docker v28.0.0-rc.2
a8affefee golangci-lint: replace deprecated `tenv` linter in favor of `usetesting`
1c8243cc9 golangci-lint: fix invalid nakedret config, disallow for any func length
a5020ea16 cli/command/container: don't use naked returns (nakedret)
e569b9f74 cli/internal/oauth: don't use naked returns (nakedret)
3e9fa43ef cli/command/trust: fix "usetesting" linting errors
aca0bd775 cli/command/trust: fix "usetesting" linting errors
b2f3c1249 Dockerfile: update golangci-lint to v1.64.5
2b169c1ab golangci-lint: enable revive "line-length-limit" linter
a67c65657 golangci-lint: enable revive "unused-receiver" rule
71c40dfa7 golangci-lint: sort revive rules
a35b899df cmd/docker: fix "unused-receiver" linting
1a4491f8c cli/command/stack: fix "unused-receiver" linting
994e1b7ca cli/command/service: fix "unused-receiver" linting
5ef673bb1 cli/command/system: fix "unused-receiver" linting
e71380eb5 cli/command/container: fix "unused-receiver" linting
4827fdef9 cli/command/trust: fix "unused-receiver" linting
3e44cc4d0 cli/command/image: fix "unused-receiver", "line-length-limit" linting
e2f28fac4 cli/command/registry: fix "unused-receiver" linting
a54d356a7 cli/command/swarm: fix "unused-receiver" linting
25e6b2da0 cli/command/formatter: fix "unused-receiver" linting
450768c31 cli-plugins/manager: fix "unused-receiver" linting
e5f3cc14c internal/test: fix "unused-receiver" linting
1b3718f45 cli/command: fix "unused-receiver" linting
d27f6a61a cli/registry: fix "unused-receiver" linting
72b32c69c internal/test/notary: fix "unused-receiver" linting
ba3f4fb41 cli/internal/oauth/manager: fix "unused-receiver" linting
f0f19c6d4 cli/trust: fix "unused-receiver" linting
c8bd0a7e5 cli/manifest: fix "unused-receiver" linting
20b4ab366 cli/compose: fix "unused-receiver" linting
1e7add9f4 cli/internal/oauth/api: fix "unused-receiver" linting
9b62e5740 cli/config/configfile: fix "unused-receiver" linting
f79193c22 opts: fix "unused-receiver", line-length-limit linting
d0c3380ce cli/connhelper/commandconn: fix "unused-receiver" linting
fdc665820 cli/config/credentials: fix "unused-receiver" linting
88b2e78e0 internal/tui: fix "unused-receiver" linting
20c15cee9 cli/compose/loader: shorten skip-comment to please the linters
cac88ca34 cli/command: wrap some long lines (revive)
eef4127de cli/internal/oauth/manager: ignore line-length-limit
d8e76bc33 cli: define const for magic value
9fda9134a cli/command/service/progress: define const for magic value
3825d3792 cli/command: define some consts for repeated values
2f65cf7d1 cli/command: fix some unused-receiver linting
a368e3eb5 cmd/docker: fix unused-receiver (revive)
add32e4b5 cli/compose: Handle Volume Subpath
4cc2dce80 cli/compose: Fix Image Subpath
e868f0f58 cli/command/container/opts_test: Fix entrypoint parsing logic
c2ba77de4 vendor: github.com/docker/docker 57d4d23825f4 (master, v28.0.0-rc.2)
1d3eb6f95 vendor: github.com/docker/docker 5cc3f1dab895 (master, v28.0.0-rc.2)
591fcb273 vendor: golang.org/x/sys v0.29.0
1edc4e07d gha: Mirror PR template and validate PR workflow from moby
a656dfd40 Restrict completion for some commands with a limit paramter for ImageNames
04b1b4e08 Add image mount options
c6a7f9a64 vendor: github.com/docker/docker b570831cc3a3 (master, v28.0.0-rc.2)
018bf1b23 vendor: google.golang.org/grpc v1.69.4
558ebd592 vendor: github.com/spf13/pflag v1.0.6, remove local IPNetSliceVar fork
2c17edf80 cli/connhelper/commandcon.New: pass context with WithoutCancel
61a3b4bd5 Remove preceding white space from cobra help template
1acf32cdc Dockerfile: dev-container: update buildx v0.20.1
bb74513ef Dockerfile.dev: bump github.com/josephspurrier/goversioninfo to v1.4.1
7b3f264a6 Dockerfile.dev: bump mvdan.cc/gofumpt to v0.7.0
aecc31039 Dockerfile: bump gotest.tools/gotestsum v1.12.0
e1a9d1cd3 Dockerfile: update golangci-lint to v1.63.4
df8c19d8f vendor: gotest.tools/v3 v3.5.2
3c0d703ac vendor: github.com/docker/docker/v28.0.0-rc.1
2815d2337 add //go:build directives to prevent downgrading to go1.16 language
01da8a582 vendor: github.com/docker/docker 6c3797923dcb (master, v28.0-dev)
76e0088b5 minor cleanup
85a77af59 Don't print "context canceled" if user terminated
7e83ff773 bump version to v28.0.0-dev
6d7afd48a login: improve text on already authenticated and on OAuth login
1d9d349c1 update to go1.23.6
81da375c4 cli/command/service: runScale: use errors.Join, and cleanup
09b513ecf cli/command/service: runRollback: remove intermediate vars
aa96cb7aa cli/command/volume: use errors.Join
be985bd28 cli/command/stack/swarm: use errors.Join
f1193effc cli/command/service: use errors.Join
f9e433556 cli/command/secret: use errors.Join
2a9fd4a93 cli/command/node: use errors.Join
f8729c6da cli/command/manifest: use errors.Join
1fd9d0dd3 cli/command/manifest: pass manifest-store and handle context
f431f6156 cli/command/inspect: use errors.Join
7147e85f6 cli/command/image: use errors.Join
2b9a4d5f4 cli/command/context: use errors.Join
150f27b68 cli/command/container: use errors.Join
791e06b43 cli/command/config: RunConfigRemove: use errors.Join
632f179e8 cli/command/image: minor cleanups
e81d76ffe cli/command/container: minor cleanups
deaa60118 cli/command/config: minor cleanups
c950d48f7 image/tree: Chips to represent "in use"
c51be7776 cmd/docker: add cause to user-terminated `context.Context`
8169a5142 jsonstream: Display: rename var that shadowed type
a4288003b service/progress: ServiceProgress: avoid fuzzy matching service ID in loop
e88b1939f service/progress: newReplicatedJobProgressUpdater: slight cleanup
dea59eabb cli/command/stack/swarm: waitOnServices remove redundant check for multi-error
37b25f226 cli/command/plugins: runRemove: fix incorrect use of errors.Join
007e88ec3 TestCheckpointCreateWithOptions check both "keep-running=true/false"
31b819828 cli/command/volume: TestVolumeCreateClusterOpts: minor fixes and refactor
5b8c08d19 cli/command/volume: TestVolumeCreateCluster: minor fixes and refactor
a8265e72b cli/command/volume: TestVolumeCreateWithFlags: minor fixes
8b5e5539e cli/command/volume: TestVolumeCreateWithName: minor fixes and improvements
2e266001c cli/command/volume: TestVolumeCreateErrors: assert unhandled errors
987da0957 cli/command/volume: remove example and var for long description
13ef82974 cli/flags: suppress some errors
dc5a4501a cli/command: minor cleanups: use Println, suppress errors
cd6d902df cli/command/inspect: remove additional newline from log
10f5b3f73 cli/command/volumes: minor cleanups: use Println, rename vars
299aae041 cli/command/trust: minor cleanups: use Println, rename vars
5cfc89c1c cli/command/system: minor cleanups: use Println, rename vars
8c5e85d4c cli/command/swarm: minor cleanups: use Println, rename vars
925b8fe34 cli/command/stack: minor cleanups: use Println, rename vars
aa74f931d cli/command/service: minor cleanups: use Println, rename vars
016dbef44 cli/command/registry: minor cleanups: use Println, rename vars
53aed6119 cli/command/plugin: minor cleanups: use Println, rename vars
35e74d58e cli/command/node: minor cleanups: use Println, rename vars
886f2295c cli/command/network: minor cleanups: use Println, rename vars
5d3bdf8ac cli/command/manifest: minor cleanups: use Println, rename vars
c8f27b027 cli/command/image: minor cleanups: use Println, rename vars
a0ca41e6f cli/command/formatter: suppress some errors
82e2efbbf cli/command/context: minor cleanups
c462eaee1 cli/command/container: minor cleanups: use Println
8650ffef3 cli/command/checkpoint: minor cleanups: use Println, rename vars
b10b79e6f cli-plugins: minor cleanups: use Println
2e26ce145 e2e/testutils: remove uses of pkg/errors in tests
4de5e9212 internal/test: remove uses of pkg/errors in tests
c55b39a2e cli/config/credentials: remove uses of pkg/errors in tests
832f5fa2c cli/compose/convert: remove uses of pkg/errors in tests
45d81f849 cli/command: remove uses of pkg/errors in tests
a85a94f46 cli/command/system: remove uses of pkg/errors in tests
694d24800 cli/command/swarm: remove uses of pkg/errors in tests
8b09ee1e1 cli/command/stack: remove uses of pkg/errors in tests
ec5ae0c2d cli/command/secret: remove uses of pkg/errors in tests
c50068f7e cli/command/plugin: remove uses of pkg/errors in tests
2b02e05f9 cli/command/node: remove uses of pkg/errors in tests
38f61539e cli/command/network: remove uses of pkg/errors in tests
d6c26471d cli/command/manifest: remove uses of pkg/errors in tests
f29fdd309 cli/command/image: remove uses of pkg/errors in tests
d30c894af cli/command/idresolver: remove uses of pkg/errors in tests
5a99ea9ad cli/command/container: remove uses of pkg/errors in tests
0d913efe8 cli/command/config: remove uses of pkg/errors in tests
957be84a3 cli/command/checkpoint: remove uses of pkg/errors in tests
10aca7dd5 cli/command/volume: remove uses of pkg/errors in tests
a87cb974f remove dockerd man-page (moved back to moby repository)
6ab9b92aa Makefile: add "shell-completion" target
0760e8513 Dockerfile: update to alpine 3.21
2c35778a6 Allow '--link' with '--network bridge'
1546f023f Dockerfile: update compose to v2.32.4
7b0724270 Dockerfile: update buildx to v0.20.0
91adb70d6 pkg/command: wrap `jsonmessage.DisplayJSONMessagesStream` with go context
81b0bb58b gha: Adjust release branches
3c0691146 update to go1.23.5 (fix CVE-2024-45341, CVE-2024-45336)
26010e4c3 image/tree: Print longest names first and use full width
f906139fc cli/tree: Use single character triple dot
4c2fece0c cmd/docker: enable cobra completion descriptions
48dbdc6f2 fix(dockerfiles): Update CMD instruction in 'Dockerfile.dev' to use exec form instead of shell form
58bf0f184 switch to gopkg.in/yaml.v3
9abd0ebdf cli/command: update semconv to 1.26.0
2f42b3272 vendor: otel v0.56.0 / v1.31.0
3d9b86116 vendor: github.com/mattn/go-runewidth v0.0.16
aa540679e vendor: github.com/containerd/platforms v1.0.0-rc.1
d3ca99585 vendor: github.com/creack/pty v1.1.24
b412f7199 vendor: google.golang.org/grpc v1.68.1, google.golang.org/genproto 324edc3d5d38
7244f7d42 update cli-docs-tool to v0.9.0
6f3ba987b vendor: github.com/docker/cli-docs-tool v0.9.0
97a14c456 update go-md2man to v2.0.5
acbdad955 completion: replace fluentd-async-connect with fluentd-async
3da5f5893 docs: mark logger opt 'fluentd-async-connect' as removed
0df55307c vendor: github.com/docker/docker 69687190936d (master, v28.0-dev)
cc571902b ci: update bake-action to v6
987befaea gha/build: Publish bin image for release branches
216674c3e vendor: github.com/docker/docker 50212d215ba7 (master, v28.0-dev)
bf2dae22d cli/command/plugin: runCreate: minor cleanup
a289f11ac vendor: github.com/moby/swarmkit/v2 v2.0.0-20250103191802-8c1959736554
7e8f94903 docs, man: remove --allow-nondistributable-artifacts flag
760326694 contrib/completion: remove --allow-nondistributable-artifacts flag
2334df110 Deprecate configuration for pushing non-distributable artifacts
2fc32c707 vendor: github.com/moby/term v0.5.2
e1a0c377b vendor: github.com/Azure/go-ansiterm faa5f7b0171c
f42c0ccd0 contrib/completion: remove deprecated --api-cors-header
2db88599f contrib/completion: remove --oom-score-adj daemon flag
eb5c507cd docs: dockerd: --oom-score-adj flag
7b37f30da Use io.copy for build context compression
7b7a4c020 docs, man: remove confusing example for "--isolation"
25f02bc04 vendor: github.com/docker/docker 6f6c3b921180 (master, v28.0.0-dev)
8c0cb3051 Fix cp test to separate source and destination
c8c47b1dd golangci-lint: depguard: prevent uses of pkg/system
76ec0ea2e vendor: github.com/docker/docker a72026acbbdf (master, v28.0.0-dev)
a8f83d5d9 TestRunCopyFromContainerToFilesystem: use Tar without options
0c04dc05b golangci-lint: sync some depguard settings with moby/moby
cc65127cb vendor: github.com/docker/docker ad6929339acd (master, v28.0.0-dev)
6f47bce41 vendor: golang.org/x/net v0.33.0
83156e662 vendor: golang.org/x/net v0.32.0
450f6b995 vendor: golang.org/x/crypto v0.31.0
b74302eb5 vendor: golang.org/x/text v0.21.0
cb2e35286 vendor: golang.org/x/sync v0.10.0
e56b665d8 vendor: golang.org/x/sys v0.28.0
1eda49878 cli/command/container: use local copy of pkg/system.IsAbs
ffe0354c2 cli/command/system: remove BridgeNfIptables, BridgeNfIp6tables in tests
73ff81b65 cli/command/system: TestEventsFormat: set cmd.Args to prevent test-failures
55e404e7a cli/command/system: remove netfilter warnings from tests
eaa8b5716 update go-md2man to v2.0.5
b8fd20517 Makefile: use go1.22 semantics for gofumpt
6a2cde6c7 Add option '--ipv4'
5c896c95d Docs: emphasise that some options that are for docker0
a5353e55d Docs: include --fixed-cidr-v6 and --bip6 docker0 options
1e51ae7af update xx to v1.6.1 for compatibility with alpine 3.21
b39f48287 update golangci-lint to v1.62.2
2a5ac8f5a vendor: github.com/docker/docker b249c5ebd214 (master, v28.0.0-dev)
afab76501 registry/client: remove uses of APIEndpoint.TrimHostName
7dab597e6 tests: cleanup comment
30c4637f0 run: don't hang if only attaching STDIN
2eb77f4ed vendor: github.com/docker/docker 5d72419486fe (master, v28.0.0-dev)
b51a71148 cli/command/system: don't use "non-distributable-artifacts" fields in tests
f50dea6c4 vendor: google.golang.org/protobuf v1.35.2
9399483f7 vendor: golang.org/x/net v0.31.0
6751bcc97 vendor: golang.org/x/crypto v0.29.0
d41ab7703 vendor: golang.org/x/term v0.26.0
5972025fa vendor: golang.org/x/text v0.20.0
feb1e2a34 vendor: golang.org/x/sync v0.9.0
4c27c895f vendor: golang.org/x/sys v0.27.0
a1e57ac72 update to go1.23.4
e398d16c0 cli/command/registry: return status only instead of whole response
297afb2a2 cli/command/registry: TestLoginWithCredStoreCreds slight refactor
575e37366 cli/command/registry: rename some vars that collided with imports
d4db289eb run, create, connect: add support for gw-priority
cf89afb32 cli/command/registry: storeCredentials: accept configfile as arg
b5a00d0b0 cli/command/registry: loginWithRegistry: use shallower interface
13f0d4641 cli/command/registry: don't return creds on error
a3d9fc494 run: cleanup – remove `errCh` nil check
446f36ce5 run: cleanup – move "detached" early exit earlier
843129882 run: cleanup – use `attached` where applicable
aee9eebf3 run: return error code when only STDIN attached
ed9fcf31e cli/trust: GetNotaryRepository: remove uses of RepositoryInfo.Class
c629eca89 Put --help before --host in the dockerd manpage
ea84e8f94 Add --host-gateway to the dockerd manpage
cf88ab074 Docs: host-gateway-ip daemon option IPv4+IPv6
ae54c9d97 Add --bip6 to the dockerd manpage
1911dedcf Add --ip-filter-forward-drop
0f058041c docs: fix janky rendering of toc on docs.docker.com
fcd94feef cli-plugins: Simplify addPluginCandidatesFromDir
6de3d71ab cli-plugins: Fix searching inaccessible directories
30a73ff19 fix: ctx should cancel image pull on run
1d4a7ae08 tests: cleanup table test names
4a219b1a4 chore: update commit guidelines in CONTRIBUTING.md
d41b80faf vendor: github.com/docker/docker e5c2b5e10d68 (master, v28.0.0-dev)
11fbc9993 vendor: github.com/tonistiigi/go-rosetta v0.0.0-20220804170347-3f4430f2d346
b0c0cd5e3 build(deps): bump codecov/codecov-action from 4 to 5
f6599300f vendor: github.com/go-viper/mapstructure/v2 v2.2.1
446d4138e vendor: github.com/moby/sys/capability v0.4.0
07e5ddd05 update golangci-lint to v1.62.0
93a931920 Dockerfile: bump github.com/josephspurrier/goversioninfo to v1.4.1
cb2f95cee Optimise `docker stats` to not require clearing the whole screen
d1d535326 cli/command/container: fix missing go:build tag
3dd762124 Dockerfile: update compose to v2.30.3
4242cda82 Dockerfile: update buildx to v0.18.0
7c80e4f93 update go:build tags to use go1.22
06260e68f Handle null completions with a default callback
4525fe37b Add completion for `--volume-driver`
db0ed1e21 Add completion for `--cgroupns`
291574927 Add completion for `--uts`
3a2503fa4 Add completion for --log-driver` and --log-opt`
9a9ae231a Add completion for `--security-opt`
5f7c43e5e Add completion for `--detach-keys`
3292afe6e Add completion for `--userns`
5d709a8d9 Add completion for `--ulimit`
2d89339b3 Add completion for `--storage-opt`
ac7bde6f6 Add completion for `--pid`
e51345424 Add completion for `--link`
c555327f0 Add completion for `--ipc`
b598ec8cd Add completion for `--attach`
761d76750 Share the container completions
382d4c34a update to go1.23.3
1440f9f8c docs: change link to desktop docs
fafaac59f Add --bip6 to dockerd cmdline ref
13754f677 deps: update `go-jose/go-jose` to `v4`
172f34011 docs: update example redis tags from 3.0.x to 7.4.x
4a7b04d41 golangci-lint: set go version to prevent fallback to go1.17
d77760fe5 cli-plugins/manager: remove redundant capturing of loop vars (copyloopvar)
32b40deb4 cli/command/service: remove redundant capturing of loop vars (copyloopvar)
40833fd29 cli/compose/loader: remove redundant capturing of loop vars (copyloopvar)
78a7e1503 cli/command/container: remove redundant capturing of loop vars (copyloopvar)
4a71ce02e cli/command/image: remove redundant capturing of loop vars (copyloopvar)
7d9ea2556 templates: remove redundant capturing of loop vars in tests (copyloopvar)
046ac9714 service: remove redundant capturing of loop vars in tests (copyloopvar)
762b5a8df opts: remove redundant capturing of loop vars in tests (copyloopvar)
417974cdc cmd/docker: remove redundant capturing of loop vars in tests (copyloopvar)
bf37e26b3 cli/manifest: remove redundant capturing of loop vars in tests (copyloopvar)
6489a777e e2e: remove redundant capturing of loop vars in tests (copyloopvar)
20de86113 cli/config: remove redundant capturing of loop vars in tests (copyloopvar)
1448cecba cli/compose: remove redundant capturing of loop vars in tests (copyloopvar)
67458f710 cli/command: remove redundant capturing of loop vars in tests (copyloopvar)
0c999fe95 docs: Correct `run` exit code 126 description
5f1311ae8 vendor: github.com/docker/docker 6ac445c42bad (master, v28.0-dev)
10c5a5792 vendor: go.opentelemetry.io/contrib/instrumentation/xxx v0.53.0
5e40d288c vendor: go.opentelemetry.io/otel v1.28.0
9ba73a1a0 vendor: github.com/grpc-ecosystem/grpc-gateway/v2 v2.20.0
f3cf1b421 vendor: go.etcd.io/etcd/raft/v3 v3.5.16
cae19e392 vendor: github.com/AdaLogics/go-fuzz-headers v0.0.0-20240806141605-e8a1dd7889d6
074d1028b vendor: update prometheus dependencies
1dbcce205 vendor: google.golang.org/grpc v1.67.1
1bba00994 vendor: google.golang.org/protobuf v1.35.1
e3942d46a vendor: github.com/klauspost/compress v1.17.11
97ff1b7c0 vendor: github.com/go-logr/logr v1.4.2
4c85feb4d vendor: github.com/cenkalti/backoff/v4 v4.3.0
3b48a57b0 vendor: github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161
36e6c4297 vendor: golang.org/x/net v0.30.0
84bfa52a6 vendor: golang.org/x/crypto v0.28.0
7a94f592e vendor: golang.org/x/text v0.19.0
ef197f731 vendor: golang.org/x/term v0.25.0
02b92c699 vendor: golang.org/x/sys v0.26.0
42cda3884 update to go1.23.2
0b16070ae Buffer 'docker stats' text to avoid terminal flickering
9af049c61 bump golangci-lint to v1.61.0
745629bd5 golangci-lint: update comment, and disable "exclude-dirs-use-default"
7451339ab golangci-lint: move gosec excludes to linters-settings
020f3a7ad golangci-lint: enable G204, add #nosec comments instead
e1c5180db Add tests for completions that call the API
d4f4cf141 Add completion for `events --filter`
59b90305f cli/command/container: parse: remove client-side warning
e9ae9f788 docker inspect: add support for swarm configs
3c7806924 cli/config/credentials: add test for save being idempotent
0dd6f7f1b cil/config/credentials: remove newStore() test-utility
5f4b14950 cli: remove deprecated Errors type
d96f8b7f9 cli/config: improve error when failing to parse config file
d3f6867e4 cli/config/credentials: skip saving config-file if credentials didn't change
6b9083776 cli/command: AddPlatformFlag: suppress unhandled error
fb61156b0 cli/command/registry: fix minor linting issues
3f7b156c8 Fix bash completion for `events --filter daemon=`
4b7a1e461 cli/command: PromptUserForCredentials: suppress unhandled errors
378a3d7d3 cli/command: PromptUserForCredentials: use consts for all hints
54e3685bc cli/command: ConfigureAuth: fix deprecation comment
3d8b49523 cli/command: PromptUserForCredentials: print error on terminal restore fail
a21a5f424 cli/command: PromptUserForCredentials: always trim password
eda78e9cd cli/command: PromptUserForCredentials: move trimming where it's used
581cf36bd cli/command: PromptUserForCredentials: move "post" check for empty name
a55cfe5f8 cli/command: PromptUserForCredentials: inline isDefaultRegistry
3a8485085 cli/command: PromptUserForCredentials: remove named output variables
d3bafa5f3 cli: deprecate Errors type
71ebbb81a cli/command/plugins: use errors.Join instead of custom cli.Errors
87acf77ae cli/hints: add tests
9b525bc9d vendor: github.com/docker/docker 36a3bd090489 (master, v28.0-dev)
670f81803 cmd/docker: add tests for flag-completions, and refactor
12dcc6e25 templates: add test for HeaderFunctions
cbbb91732 vendor: github.com/moby/swarmkit/v2 v2.0.0-20241017191044-e8ecf83ee08e
2c6b80491 docs: update prose about image tag/name format
50ef0c58c docs: corrected the max events returned
35d7b1a7a cli/command/container: TestWaitExitOrRemoved use subtests
3b38dc67b cli/command/container: set empty args in tests and discard output
e1c472a43 completion: add test for VolumeNames
302d73f99 completion: add test for NetworkNames
ab418a38d completion: add test for ImageNames
f3b4094eb completion: add test for ContainerNames
be197da6b completion: add test for NoComplete
51713196c completion: add test for FromList
a5ca5b33f completion: add test for FileNames
8f2e5662e completion: add test for EnvVarNames
b8cddc63a completion: ContainerNames: don't panic on nil filter
a58faf797 README: update pkg.go.dev badge, add OpenSSF scorecard
b6d27ff60 vendor: google.golang.org/grpc v1.66.2
200225f53 vendor: google.golang.org/protobuf v1.34.1
9599251d0 vendor: github.com/cespare/xxhash/v2 v2.3.0
ea8aa2a41 vendor: golang.org/x/net v0.29.0
61867feec vendor: golang.org/x/crypto v0.27.0
843ae6d7e vendor: golang.org/x/term v0.24.0
bea4ee658 vendor: golang.org/x/text v0.18.0
a88ee33f7 vendor: golang.org/x/sys v0.25.0
147630a30 Only complete removable containers if --force is not given
d085e2445 image/history: Add `--platform` flag
b0bb4ba7f image/load: Add `--platform`
a20eb45b2 image/save: Add `--platform`
0319795d4 cli/compose: implement the ports validation method
839dbbcf2 cli/command/images: set cmd.Args to prevent test-failures
19eeb1015 cli/command/image: fix TestNewSaveCommandSuccess to actually test
d42cf96e1 cli/command/image: add shell completion for --platform flags
8c7f713db cli/command/container: add shell completion for --platform flags
ce1aebcc3 cli/command/completion: add Platforms
2f2b16a96 docs: fix inaccurate description of --restart=unless-stopped
c70b2165a docs: Link supported Go duration strings
442c38636 command: add tests for container kill, commit, and pause
a6ab65948 ci: update to go1.22.8
9ecfe4f5a move parsing key-value files to a separate package
76196dbb0 opts: parseKeyValueFile: cleanup and remove redundant trimming
95e221ef4 opts: remove ErrBadKey as it's not used as a sentinel error
b129660dd opts: cleanup ParseEnvFile tests
d49e72c0a cli/command/container: add unit tests for completion helpers
462e08219 cli/container: use github.com/moby/sys/capability for completions
bd96bdaf1 align "conflicting options" errors for consistency
df8b34595 cli/command/container: stop, restart: rename "--time" to "--timeout"
607530348 docs/reference: stop, restart: add flag descriptions
8fca0a1f2 Check that --ip-range is a CIDR address
ac502b590 cli/command/container: add unit tests for container stop
16aa99425 cli/command/container: add unit tests for container restart
54a20ce54 docs: fix a typo in run.md
b12ac897f vendor: github.com/docker/docker 164cae56ed95 (master, v-next)
df52ddcfc Images Tree: Change 'Used' to 'In Use'
17040890e Do not underline image name
46b360b05 command: add tests for container diff and rename
465e87afc docs: fix anchor link to web-based login section
8a3d838a1 docs: use important callout for buildkit vs legacy builder
3e271461e cli/formatter: fix unbracketed IPv6 addrs
91c90a979 Update `VERSION` file to `v27.3.1-dev`
ce26ebc0e Dockerfile: update compose to v2.29.7
1355d7e9f telemetry: fix early meterprovider shutdown
f46860616 gha: codeql: minor touch-ups and fixes
3472bbc28 command: change drive to lowercase for wsl path
e1213edcc gha: update codeql workflow to go1.22.7
b1956f507 telemetry: pass otel errors to the otel handler for shutdown and force flush
f7a513cff Dockerfile: update compose to v2.29.4
42ce06aa5 Dockerfile: update buildx to v0.17.1
baceb4b15 docs: dockerd: add documentation for --log-format option
a42ca1148 docs/reference: dockerd: add docs for --feature option
9ae514fdc man: dockerd: add description for --log-format option
1a0e32099 docs: dockerd: remove --api-cors-header (deprecated)
9bfd0e1a4 man: remove docs for deprecated --api-cors-header
a357db0ab man: dockerd: value is optional for --feature flag
fb056d2ce man: fix duplicate word in --feature flag description
610f9157f man: update dockerd man-page to include --feature flag
605c9bf16 docs: Fix --rm=false flag in container_run.md
dccb8bfa5 vendor: google.golang.org/grpc v1.62.0
8cdf90cd9 vendor: tags.cncf.io/container-device-interface v0.8.0
a5f15bee7 vendor: golang.org/x/net v0.28.0
b93fc3963 vendor: golang.org/x/crypto v0.26.0
3a63df265 vendor: golang.org/x/text v0.17.0
c6e534193 vendor: golang.org/x/term v0.23.0
5f9fe33b6 vendor: golang.org/x/time v0.6.0
7074e5011 vendor: golang.org/x/sync v0.8.0
958fff82f vendor: golang.org/x/sys v0.24.0
fb264ffc0 vendor: dario.cat/mergo v1.0.1
38c3fef1a command: check for wsl mount path on windows
5b81f0dcb chore: remove duplicated `govet` linter config
88ca4e958 info: stop printing "Expected" commits
daea277ee volume/update: require 1 argument/fix panic
0fcaffb7e chore: fix style/lint issues in deprecated.md
45d55961d Fix broken links in CONTRIBUTING.md
0b9d58245 cli/command: fix docstring for ContainerFormat.CreatedAt
4a6ab2b37 fix: binary file line endings
3bf39d25a update to go1.22.7
1b8180a40 vendor.mod: put github.com/pkg/browser in the right group
5ca40e0a3 docs: add front matter title to deprecated.md
071f6f939 docs: rename plugins index file and add linkTitle
bbb6e7643 login: handle non-tty scenario consistently
60d045028 oauth/api: drain timer channel on each iteration
d7d56599c update to go1.22.6
9e2996796 scripts/build/plugins: don't override CGO_ENABLED set by .variables
81744d7aa copynit: s/WEB BASED/WEB-BASED/
2f206fff3 docs: update docker login reference
1e6cbbc3f Dockerfile: update xx to v1.5.0
e532eead9 login: use normalized hostname when storing
dab9674db Revert "login: normalize `registry-1.docker.io`"
c4a55df7c cli: rename args that collided with builtins (predeclard)
9c8789127 e2e/global: fix n-constant format string in call (govet)
f101f07a7 cli/command: fix n-constant format string in call (govet)
cc1d7b7ac cli/command/system: remove redundant nil-check (gosimple)
964155cd2 cli/formatter: bracket IPv6 addrs prepended to ports
a327476f7 login: add e2e tests for oauth + escape hatch
c974a8339 chore: update link to docker engine api reference
846ecf59f login: add oauth escape hatch
7b9164794 list/tree: No extra spacing for graphdriver
351249dce list/tree: Print <untagged> as dangling image name
6979ab073 list/tree: Fix some escape codes included in nonTTY
a9b78da54 list/tree: Add spacing before the content and first image
0242a1e3c list/tree: Capitalize column headers
d417d0668 list/tree: Add an experimental warning
b1a08f784 list/tree: Sort by created date
18ab78882 list/tree: Align number right, text left
ea8aafcd9 cli/tree: Add `Content size` column
be11b74ee image/list: Add `--tree` flag
f1befabe9 docs: use gh alert syntax for callouts
c3fe7bc33 fallback to regular login if oauth login fails to start
5eb3275c2 filestore: don't print warning multiple times
e6624676e login: normalize `registry-1.docker.io`
6e4818e7d Refactor `cli/command/registry`
fcfdd7b91 auth: add support for oauth device-code login
2dd4eb06a docs: update link to moved build context doc
0fd3fb084 cli/connhelper: getConnectionHelper: move ssh-option funcs out of closure
f3c2c26b1 disable pseudoterminal creation
d4a362aa1 docs: update internal links after refactor
78a8fba2c docs: fix link to http proxy document
6440816c7 vendor: github.com/docker/docker 2269acc7a31d (master, v-next)
b8a53ee34 vendor: github.com/docker/docker master (f3cf9359bdf6)
9c4480604 plugins: don't panic on Close if PluginServer nil
434d8b75e update to go1.21.13
73e78a582 run: fix GetList return empty issue for throttledevice
e29292f92 add security policy
40a5b297b vendor: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.21.0
e4d99b4b6 gha: set permissions to read-only by default
eac83574c tests/run: fix flaky `RunAttachTermination` test
7b46bfc5a attach: wait for exit code from `ContainerWait`
f0a29af0f vendor: docker/docker 2b1097f08088 (removes containerd dependency)
b34e8e4df vendor: github.com/moby/sys/sequential v0.6.0
ea37ac9ba vendor: github.com/moby/sys/symlink v0.3.0
435c65833 vendor: github.com/moby/sys/signal v0.7.1
501904d48 vendor: golang.org/x/sys v0.22.0
cc4163296 lint: replace deprecated linter names
66aa0f672 attach: don't return context cancelled error
4a7388f0d tests: fix other flaky `connhelper` tests
cc68c66c9 tests: fix flaxy `TestCloseRunningCommand` test
b36522b47 docs: refresh image versions in examples
aa2c2cd90 Allow for OomScoreAdj
401048b9c vendor: github.com/containerd/containerd v1.7.20
6638deb9d add support for DOCKER_CUSTOM_HEADERS env-var (experimental)
9617e8d0c gha: update to macOS 13, add macOS 14 arm64 (Apple Silicon M1)
6d8fcbb23 gha: check-pr-branch: verify major version only
77c0d8360 Dockerfile: update compose to v2.29.0
d00e1abf5 Dockerfile: update buildx to v0.16.1
ab80ea355 cli/config/credentials: move warning to fileStore
fcefe44bd login: slightly cleanup warning about unencrypted store
a78ab6380 login: don't print "unencrypted" warning when failing to save credentials
90058df30 cli/command/container: remove reportError, and put StatusError to use
64a3fb82d docs: fix typos and version for cli-docs-tool scripts
e3e9b9901 vendor: github.com/docker/cli-docs-tool v0.8.0
f28fc7f82 cli: FlagErrorFunc: don't print long usage output for invalid flags
b1c0ddca0 cli/command/container: add completion for --stop-signal
d6f78cdbb cli/command/container: add completion for --volumes-from
7fe7223c2 cli/command/container: add completion for --restart
f30158dbf cli/command/container: add completion for --cap-add, --cap-drop
e4dd8b189 cli/context/store: Names(): fix panic when called with nil-interface
42b68a3ed cmd/docker: fix completion for --context
162d9748b cli/command/container: provide flag-completion for "docker create"
5e7bcbeac cli/command/completion: add FromList utility
e3427f341 cli/command/completion: add EnvVarNames utility
9207ff104 cli/command/completion: add FileNames utility
eed0e5b02 cli/command/container: NewRunCommand: slight cleanup of completion
e8baee9c7 vendor: github.com/docker/docker aae044039ca4 (master, v-next)
a77ba7eda vendor: google.golang.org/genproto/googleapis/api 49dd2c1f3d0b
caa5d15e9 vendor: github.com/prometheus/procfs v0.15.1
0f712827f vendor: github.com/containerd/containerd v1.7.19
b28a1cd02 vendor: golang.org/x/sync v0.7.0
991b1303d chore: restore ctx without cancel on container run
6c04adc05 push: Improve note message and colors
0579cd797 test: e2e SIGTERM attached container on `docker run`
d40199440 c8d: Remove `docker convert` mention
4ce6e50e2 push: Don't default to DOCKER_DEFAULT_PLATFORM
3f3ecb94c Makefile: add completion target
150fb55a8 fix: container stream should not be terminated by ctx
3d80b7b0a Dockerfile.dev: install bash-completion in dev container
eae75092a cmd/docker: split handling exit-code to a separate utility
b7695d6c7 cli-plugins: RunPlugin(): rename error-variable that's possibly shadowed
350a0b68a cli-plugins: Run(): don't discard cli.StatusError errors without message
3dd6fc365 cmd/docker: don't discard cli.StatusError errors without custom message
2f83064ec e2e/cli-plugins: check for exit-errors in tests
baf35da40 e2e/cli-plugins: use cmd.CombinedOutput() instead of custom buffer
c6b40640c e2e/cli-plugins: use identifiable output for test
e9f32edac e2e/cli-plugins: explicitly ignore fmt.Printxx errors
5e7948ec8 e2e/cli-plugins: rename var that shadowed import
c60b360c3 cli: improve argument validation output
a6e96c758 cli: improve output and consistency for unknown (sub)commands
bca209006 cli: make cli.StatusError slightly prettier
88896eeaa cli/command/container: TestSplitCpArg: cleaner skip
b194274be replace uses of deprecated API types
4cac8efb5 vendor: github.com/docker/docker 508cc7c61226 (master)
dc22572e3 chore: regenerate docs
8549d250f docs: update cli-docs-tool (v0.8.0)
3d4c12af7 docs: update links to docker cli reference
bf33c8f10 docs: regenerate base command
b0650f281 docs: align heading structure for base command
cfea2353b docs: remove frontmatter for base command
03961449a docs: rename cli.md to docker.md (base command)
a68382338 docs: remove empty docker base command reference
a0c4e56de vendor: golang.org/x/net v0.25.0
723130d7f vendor: golang.org/x/crypto v0.23.0
d33ef57dc vendor: golang.org/x/text v0.15.0
21dbedd41 vendor: golang.org/x/sys v0.21.0
f8e7c0a0d vendor: github.com/klauspost/compress v1.17.9
10a015f87 cli/command/network: NewPruneCommand: explicitly ignore error
b3d8809f4 cli/command/network: rewrite consolidateIpam to take an option-struct
ab230240a test spring-cleaning
c7d46aa7a Enable completion for 'image' sub commands
2eb61318b cli/command/network: some cleanup and pass smaller interfaces
b711372ca cli/command/container: TestNewAttachCommandErrors: use struct-literals
229616e17 cli/command/image: fakeClient.ImagesPrune: fix unhandled err-return
42ba29395 rename vars to prevent colliding with imports
3a77fdd91 cli/command/trust: unconvert
26223f701 cli/command/formatter: don't use unkeyed structs
c56f4a1ef workflow: remove git `autocrlf=false` setup on windows
d73d7d4ed update to go1.21.12
e91f0ded9 docs: make buildx build the canonical reference doc
c15ade0c6 fix: ctx cancellation on login prompt
2bd4e95bf feat: force lf line endings by default
be14edca2 cli/command/stack: fix faulty sort for sorting stacks
0f6370c94 vendor: github.com/fvbommel/sortorder v1.1.0
2e6aaf05d vendor: github.com/docker/docker v27.0.3
9455d6176 vendor: github.com/docker/docker v27.0.2
1382fbe61 vendor: github.com/docker/docker v27.0.2-dev (e953d76450b6)
ab0898ee3 vendor: github.com/docker/docker v27.0.2-dev (861fde8cc974)
cfec21f28 vendor: github.com/docker/docker v27.0.1
8b0a7b025 cli/config/credentials: ConvertToHostname: handle IP-addresses
238048160 re-introduced support for port numbers in docker registry URL
60775b615 gha/e2e: Update latest version to 27.0
b5d1b4de1 update golangci-lint to v1.59.1
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping crun to version 1.20-53-g4d6eae2e, which comprises the following commits:
107214b1 build(deps): bump uraimo/run-on-arch-action from 2.8.1 to 3.0.0
c954b1b6 criu: use a process to initialize the cgroup
959cc6c4 cgroup: extend function
e3866cc5 cgroup: fix ownership of dfd in read_pids_cgroup
0f16ced1 linux: set subsystem_path before use in error
6ed12c63 linux: remove dead code
6c049b81 criu: hide feature if dlopen is not present
73d00079 tests: map all IDs into the user namespace
0037d567 ci: fail on "sudo make check"
f82ead82 tests: fix test_resources_unified_invalid_controller()
37213555 utils: improve error message if path not executable
5f5454b5 utils: do not use hardcoded path buffer
4948e451 utils: check for eaccess existence
410f0d53 container: pass down executable path to custom handler
bb56343c utils: move error handling inside find_executable()
a77702c0 tests: do a shallow git clone for podman
f941be48 error: silence compiler warning
b8b25ea1 Prevent dlopen() for CRIU in static link'ed binary
990b5f68 krun: fix libkrun_unload
79b7e6b3 libcrun: use an hash map to lookup the key
51fa411b libcrun: move annotations handling to a separate struct
9abef0da linux: fix dup error
14d5baa4 README: add CentOS Stream 9 & 10, rm 8
e735b4bc krun: fix libkrun_exec return value
90a321c6 container, error: update error handling
620b91b5 utils: fix PATH lookup
48470009 Downstream Fedora: fix gating config
7949fbc6 tests: disable new test that does not use the runtime
7f76fcd4 utils: add missing crun_error_release()
6598c99b utils: add O_NOFOLLOW
9c9a76ac NEWS: tag 1.20
0aec82c2 krun: fix CVE-2025-24965
793188c2 krun: initialize bool
ac956685 utils: add O_WRONLY to WRITE_FILE_DEFAULT_FLAGS
dcf4f78b utils: drop rootfs_len from safe_openat function
de33f0a8 utils: write_file_at_with_flags uses safe_write
c460b253 utils: safe_write uses size_t for the buffer length
12778089 utils: drop function write_file_with_flags
f1ef3bb4 utils: move write_file* wrappers to utils.h
3e2344b0 utils: fix partial writes with write_file_at_with_flags
7930c13d krun: drop unused variable
f7987aa9 linux, mono: remove unneeded crun_error_release()
b548479c utils: reduce memory consumption in safe_readlinkat
3b653170 chroot_realpath: remove dead code
17135c1b chroot_realpath: do not return non-existing paths
7ab1acd3 container: fix error after read
490d5502 linux, utils: remove dead code crun_ensure_file*()
432a66d9 status: validate container id
73bcfabb status: report errors from get_state_directory_status_file
30d22ba3 status: report errors from get_run_directory
873db607 status: report errors from libcrun_get_state_directory
f5e7718c linux: improve error writing to net.ipv4.ping_group_range
5c35f278 tests: make python script executable
5b51cca8 github: disable aarch64, ppc64le and s390x build
84d50992 github: cat config.log on configure failures
7aa2cd85 github: add r/w permissions
4f823090 github: show apt-get output
2d08f586 exec: always call setsid
b788f338 scheduler: ignore ENOSYS when resetting affinity mask
e292c9e9 src/linux: handle EINVAL during pidfd_open gracefully
869804f4 TMT: account for environments on internal testing farm ranch
65484cb9 TMT: Replace `adjust` with `prepare` conditionals
a4dcb9c6 cgroup: Show the absolute path to cgroup.controllers when a controller is not available
179686b7 Revert "cgroup: remove tun/tap from the default allow list"
68e8d9ab test: use wasm32-wasip1 instead of wasm32-wasi
3158e491 criu: improve error handling for CRIU function calls
3cd9c2c9 criu: do not set network_lock if not specified
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping containerd to version v2.0.3, which comprises the following commits:
eaa7ca80d proxy: break up writes from the remote writer to avoid grpc limits
c7f64196f Fix privileged container sysfs can't be rw because pod is ro by default
569af34cb Prefer runtime options for PluginInfo request
b8dde9189 Prepare release notes for v2.0.3
0ce93e16a prevent oom watcher depend on shim pkg.
f3284aa68 CI: arm64-8core-32gb -> ubuntu-24.04-arm
92ae2951f Update CDI dependency to v0.8.1.
f95a426b8 move the device after the options when using mkfs.ext4
4d19a6adf update build to go1.23.6, test go1.24.0
c738c3aab build(deps): bump actions/cache from 4.1.2 to 4.2.0
b5313993c Revert "Add timestamp to PodSandboxStatusResponse for kubernetes Evented PLEG"
697c59c63 Update runc binary to v1.2.5
fcf64305c Update vendor files to fix build failure
d3437eb29 Upgrade x/net to 0.33.0
0785bd8cc Update install-imgcrypt to allow change install repo
06891f899 fix go-cni race condition
79cdbf61b cri,nri: block NRI plugin sync. during event processing.
9d5cfce83 Update github.com/containerd/imgcrypt to v2.0.0
1f4e5688e update to go1.23.5 / go1.22.11
f58939c33 Remove deprecated WithCDIDevices in oci spec opts
3d53430fe Move CDI device spec out of the OCI package
3a6ab80d0 build(deps): bump google.golang.org/protobuf from 1.35.1 to 1.35.2
cdaf4dfb4 Prepare release notes for v2.0.2
eb125e1dd Update platforms to latest rc
468079c5c Remove confusing warning in cri runtime config migration
a2d9d4fd5 Fix runtime platform loading in cri image plugin init
184ffad01 Add integ test to check tty leak
17181ed33 fix master tty leak due to leaking init container object
8666e7422 Bump up otelttrpc to 0.1.0
7373ddd70 update runc binary to v1.2.4
c4270430d ctr: `ctr images import --all-platforms`: fix unpack
f34147772 downgrade go-difflib and go-spew to tagged releases
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping buildah to version v1.39.1-1-g1c4d85879, which comprises the following commits:
9347a39c2 Tag v1.39.1
717fb39c4 CI config: post-branch update
7dbd71040 chore(deps): update module github.com/go-jose/go-jose/v4 to v4.0.5 [security]
4c0c3f0b9 chroot createPlatformContainer: use MS_REMOUNT
c15ab104a Bump to Buildah v1.39.0
298a64106 Bump c/storage v1.57.1, c/image 5.34.0, c/common v0.62.0
3c7c611c7 Update module github.com/containers/storage to v1.57.0
d11bd71f4 CI, .cirrus: parallelize containerized integration
bd2d78e40 ed's comment: cleanup
ea39556a6 use seperate blobinfocache for flaky test
72161b3a1 bump CI VMs to 4 CPUs (was: 2) for integration tests
56078ef2d cleanup, debug, and disable parallel in blobcache tests
708fe0aff bats tests - parallelize
670a7bec6 pkg/overlay: cleanups
ca957c487 RPM: include check section to silence rpmlint
6cee07f52 RPM: use default gobuild macro on RHEL
2119c8da3 tests: remove masked /sys/dev/block check
4887a4fb1 vendor to latest c/{common,image,storage}
4383e34c0 build, run: record hash or digest in image history
3541a3ce2 Accept image names as sources for cache mounts
9e00b6b39 Run(): always clean up options.ExternalImageMounts
59024c41a refactor: replace golang.org/x/exp with stdlib
a67b07957 Update to c/image @main
d694644ae fix broken doc link
e40f62941 run_freebsd.go: only import runtime-spec once
eca1c8e90 fix(deps): update module github.com/docker/docker to v27.5.1+incompatible
678dca8fd bump github.com/vbatts/tar-split
9b9c161ff Add more checks to the --mount flag parsing logic
1ccc34515 chroot mount flags integration test: copy binaries
80100ac44 fix(deps): update module github.com/moby/buildkit to v0.19.0
e7f790296 relabel(): correct a misleading parameter name
6e62bd083 Fix TOCTOU error when bind and cache mounts use "src" values
c30f5784d define.TempDirForURL(): always use an intermediate subdirectory
25a3b385a internal/volume.GetBindMount(): discard writes in bind mounts
0f5c6fc50 pkg/overlay: add a MountLabel flag to Options
c0efbe821 pkg/overlay: add a ForceMount flag to Options
50210d51c Add internal/volumes.bindFromChroot()
f7155c0ab Add an internal/open package
9a9fa9607 fix(deps): update module github.com/containers/common to v0.61.1
ccfd61bdd fix(deps): update module github.com/containers/image/v5 to v5.33.1
9beaf1018 [CI:DOCS] Touch up changelogs
9b55ec998 fix(deps): update module github.com/docker/docker to v27.5.0+incompatible
65b634b7d copy-preserving-extended-attributes: use a different base image
292ecfe0f fix(deps): update github.com/containers/luksy digest to a3a812d
67991e0d5 chore(deps): update module golang.org/x/net to v0.33.0 [security]
6b53330c3 fix(deps): update module golang.org/x/crypto to v0.32.0
727f00bf4 New VM Images
e2b33d252 fix(deps): update module github.com/opencontainers/runc to v1.2.4
ac9815992 fix(deps): update module github.com/docker/docker to v27.4.1+incompatible
5a336bf1a fix(deps): update module github.com/containers/ocicrypt to v1.2.1
adf54cde0 Add support for --security-opt mask and unmask
77e357020 Allow cache mounts to be stages or additional build contexts
a1dede87e [skip-ci] RPM: cleanup changelog conditionals
d18344416 fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.6
d77314a7a fix(deps): update module github.com/moby/buildkit to v0.18.2
62709d718 Fix an error message in the chroot unit test
cfd98d782 copier: use .PAXRecords instead of .Xattrs
4adca286f chroot: on Linux, try to pivot_root before falling back to chroot
5f3975333 manifest add: add --artifact-annotation
c41f02130 Add context to an error message
f81b26560 Update module golang.org/x/crypto to v0.31.0
e9932b7bb Update module github.com/opencontainers/runc to v1.2.3
ad5b02cdc Update module github.com/docker/docker to v27.4.0+incompatible
2b7e1e9be Update module github.com/cyphar/filepath-securejoin to v0.3.5
a82826f56 CI: don't build a binary in the unit tests task
8eb6b10b0 CI: use /tmp for $GOCACHE
36f6038d3 CI: remove dependencies on the cross-build task
83b280599 CI: run cross-compile task with make -j
2b6cf6452 Update module github.com/docker/docker to v27.4.0-rc.4+incompatible
4afa31d07 Update module github.com/moby/buildkit to v0.18.1
c35374f9c Update module golang.org/x/crypto to v0.30.0
041c1f26f Update golang.org/x/exp digest to 2d47ceb
058a2d37f Update github.com/opencontainers/runtime-tools digest to f7e3563
a34792457 [skip-ci] Packit: remove rhel copr build jobs
7a8312a61 [skip-ci] Packit: switch to fedora-all for copr
564f90f09 Update module github.com/stretchr/testify to v1.10.0
7b45052fd Update module github.com/moby/buildkit to v0.17.2
17ee51d75 Makefile: use `find` to detect source files
75c8852a8 Tests: make _prefetch() parallel-safe
8e525d445 Update module github.com/opencontainers/runc to v1.2.2
eb7a42217 executor: allow to specify --no-pivot-root
6cfd93424 Update module github.com/moby/sys/capability to v0.4.0
135431f8d Makefile: mv codespell config to .codespellrc
c2b42c5e4 Fix some codespell errors
f0361414d Makefile,install.md: rm gopath stuff
c07a5eb56 Makefile: rm targets working on ..
5adb14cbf build: rm exclude_graphdriver_devicemapper tag
967fb5ec1 Makefile: rm unused var
f4d4bb240 Finish updating to go 1.22
6832420b6 CI VMs: bump again
147765b45 Bump to Buidah v1.39.0-dev
7aa3b5ee0 Bump to Buildah v1.38.0
e911fe4a2 Bump to c/common v0.61.0, c/image v5.33.0, c/storage v1.56.0
356e4d41e fix(deps): update module golang.org/x/crypto to v0.29.0
6b1e4a58c fix(deps): update module github.com/moby/buildkit to v0.17.1
3a583bf04 fix(deps): update module github.com/containers/storage to v1.56.0
e3950407f tests: skip two ulimit tests
4703b5b0c CI VMs: bump f40 -> f41
2cba66285 tests/tools: rebuild tools when we change versions
3cf2ec21b tests/tools: update golangci-lint to v1.61.0
a7c316ab7 fix(deps): update module github.com/moby/buildkit to v0.17.0
701d6bbe9 Handle RUN --mount with relative targets and no configured workdir
9a5b88d3e tests: bud: make parallel-safe
953fb3259 fix(deps): update module github.com/opencontainers/runc to v1.2.1
d8d117534 fix(deps): update golang.org/x/exp digest to f66d83c
fddd1be38 fix(deps): update github.com/opencontainers/runtime-tools digest to 6c9570a
3c4e552eb tests: blobcache: use unique image name
1cd6346b3 tests: sbom: never write to cwd
2797d22ab tests: mkcw: bug fixes, refactor
aa7077164 deps: bump runc to v1.2.0
e213d65be deps: switch to moby/sys/userns
855ec0f0c tests/test_runner.sh: remove some redundancies
5abf038dd Integration tests: run git daemon on a random-but-bind()able port
27324c256 fix(deps): update module github.com/opencontainers/selinux to v1.11.1
8b7adfa2c go.mod: remove unnecessary replace
6c85740ba Document more buildah build --secret options
aeb6ffeec Add support for COPY --exclude and ADD --exclude options
57bba3469 fix(deps): update github.com/containers/luksy digest to e2530d6
9cf613a2b chore(deps): update dependency containers/automation_images to v20241010
6349dc4a2 fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.4
873beddba Properly validate cache IDs and sources
0d27af46f [skip-ci] Packit: constrain koji job to fedora package to avoid dupes
e0b7b10e6 Audit and tidy OWNERS
714a23c26 fix(deps): update module golang.org/x/crypto to v0.28.0
c7dd90dd7 tests: add quotes to names
a018ec2b0 vendor: update c/common to latest
732f77064 CVE-2024-9407: validate "bind-propagation" flag settings
95f2e1020 vendor: switch to moby/sys/capability
37a6bde53 Don't set ambient capabilities
5193f21b0 Document that zstd:chunked is downgraded to zstd when encrypting
271093d51 fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.3
03ca93fb0 buildah-manifest-create.1: Fix manpage section
fea5c3d49 chore(deps): update dependency ubuntu to v24
d0819591d Make `buildah manifest push --all` true by default
2ff91b8b0 chroot: add newlines at the end of printed error messages
5e82f27fb Do not error on trying to write IMA xattr as rootless
c07ae2b4c fix: remove duplicate conditions
4bc98d54d fix(deps): update module github.com/moby/buildkit to v0.16.0
128117224 fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.2
1f02b65c6 Document how entrypoint is configured in buildah config
baf91f2b0 In a container, try to register binfmt_misc
81d1256bd imagebuildah.StageExecutor: clean up volumes/volumeCache
80e15584c build: fall back to parsing a TARGETPLATFORM build-arg
edc43c4e6 `manifest add --artifact`: handle multiple values
b2defd39e Packit: split out ELN jobs and reuse fedora downstream targets
0494df68b Packit: Enable sidetags for bodhi updates
81b357e36 fix(deps): update module github.com/docker/docker to v27.2.1+incompatible
71fc845d0 tests/bud.bats: add git source
47297b3d5 add: add support for git source
5184bf161 Add support for the new c/common pasta options
7bf7da57a vendor latest c/common
8d7286762 fix(deps): update module golang.org/x/term to v0.24.0
e08437000 fix(deps): update module github.com/fsouza/go-dockerclient to v1.12.0
a35380059 packit: update fedora and epel targets
909cca8b1 cirrus: disable f39 testing
db2a666dd cirrus: fix fedora names
3f047d49b update to go 1.22
ed881abfe Vendor c/common:9d025e4cb348
9e374f9fd copier: handle globbing with "**" path components
cee3c1311 fix(deps): update golang.org/x/exp digest to 9b4947d
9ab093138 fix(deps): update github.com/containers/luksy digest to 2e7307c
f88579d1f imagebuildah: make scratch config handling toggleable
01a58991c fix(deps): update module github.com/docker/docker to v27.2.0+incompatible
09c231f83 Add a validation script for Makefile $(SOURCES)
510dd75f6 fix(deps): update module github.com/openshift/imagebuilder to v1.2.15
344366935 New VMs
e8e83bb8b Update some godocs, use 0o to prefix an octal in a comment
a2629f528 buildah-build.1.md: expand the --layer-label description
b695098b0 fix(deps): update module github.com/containers/common to v0.60.2
d0988936b stage_executor: set avoidLookingCache only if mounting stage
f1cd5ae4a imagebuildah: additionalContext is not a local built stage
0ade01048 run: fix a nil pointer dereference on FreeBSD
ca3b80eb0 CI: enable the whitespace linter
0ad0ffaad Fix some govet linter warnings
662abee0b Commit(): retry committing to local storage on storage.LayerUnknown
8ae99121c CI: enable the gofumpt linter
d07c3dfb0 conformance: move weirdly-named files out of the repository
a60788c56 fix(deps): update module github.com/docker/docker to v27.1.2+incompatible
ec87847c9 fix(deps): update module github.com/containers/common to v0.60.1
fd3aba991 *: use gofmt -s, add gofmt linter
24da18800 *: fix build tags
57d820d37 fix(deps): update module github.com/containers/image/v5 to v5.32.1
3ea43566a Add(): re-escape any globbed items that included escapes
05da9a745 conformance tests: use mirror.gcr.io for most images
c39f622d0 unit tests: use test-specific policy.json and registries.conf
a1ce1c1ee fix(deps): update module golang.org/x/sys to v0.24.0
c7b7f1272 Update to spun-out "github.com/containerd/platforms"
832ff6cb8 Bump github.com/containerd/containerd
ed6dd4227 test/tools/Makefile: duplicate the vendor-in-container target
f52158f0e linters: unchecked error
abea603df linters: don't end loop iterations with "else" when "then" would
fdf1c75cd linters: unused arguments shouldn't have names
6224e9a44 linters: rename checkIdsGreaterThan5() to checkIDsGreaterThan5()
ae0d9d002 linters: don't name variables "cap"
282cc38c3 `make lint`: use --timeout instead of --deadline
d01e4ede3 Drop the e2e test suite
c65328683 fix(deps): update module golang.org/x/crypto to v0.26.0
23f241e6f fix(deps): update module github.com/onsi/gomega to v1.34.1
277d40a2e `make vendor-in-container`: use the caller's Go cache if it exists
aac50f661 fix(deps): fix test/tools ginkgo typo
dd8715976 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.1
34a7ce99b Update to keep up with API changes in storage
00d67a48f fix(deps): update github.com/containers/luksy digest to 1f482a9
987e63a2d install: On Debian/Ubuntu, add installation of libbtrfs-dev
e3c1953f7 fix(deps): update module golang.org/x/sys to v0.23.0
5f96e0392 fix(deps): update golang.org/x/exp digest to 8a7402a
9254e5ca8 fix(deps): update module github.com/fsouza/go-dockerclient to v1.11.2
edc1b7752 Use Epoch: 2 and respect the epoch in dependencies.
4e78b5723 Bump to Buildah v1.38.0-dev
5f18ba259 AddAndCopyOptions: add CertPath, InsecureSkipTLSVerify, Retry fields
c467bd139 Add PrependedLinkedLayers/AppendedLinkedLayers to CommitOptions
8aa9a1c22 integration tests: teach starthttpd() about TLS and pid files
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Using latest poky + meta-virtualization + meta-openembedded, build multlib failed
...local.conf...
MACHINE = "qemux86-64"
require conf/multilib.conf
MULTILIBS = "multilib:lib32"
DEFAULTTUNE:virtclass-multilib-lib32 = "x86"
$ bitbake lib32-nerdctl
...
-buildmode=pie requires external (cgo) linking, but cgo is not enabled
make: *** [Makefile:63: nerdctl] Error 1
...
Get back the patch to allow external specification of build settings and rebase to v2.0.2
Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
| |
lxc enabled the ffat-lto-objects option since 6.0.3[1], that
liblxc.a object files contain both the intermediate language
and the object code, that cause yocto QA report a QA warning.
Ref:
[1] https://github.com/lxc/lxc/commit/277ac364074f8287be91393f50f8f999d51101c4
Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
| |
Some time ago libnetwork was moved from it's own repository to moby.
This patch updates the docker recipe to use the new location
Signed-off-by: Paolo Barbolini <paolo.barbolini@m4ss.net>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
Basically we pass "-buildmode=pie" to fix textrel QA issue.
A new patch is added and submitted to upstream:
0001-Makefile-introduce-GO_TEST-for-more-flexible-configu.patch.
With this new patch, the old patch, 0001-Add-trimpath-to-build-nri.test.patch,
could be dropped.
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
Set DEBUG=1 to avoid stripping.
See https://github.com/cri-o/cri-o/blob/main/Makefile#L93
Set STRIP=true to avoid stripping bin/pinns.
See https://github.com/cri-o/cri-o/blob/main/pinns/Makefile#L4
ALLOW_EMPTY:${PN} = "1" is not needed. Remove it.
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
| |
This package is pure source package and its only user is podman's
DEPENDS. The current podman does not need it to be built successfully.
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
| |
This reverts commit b2a271ea4d9c0703812bee1f00dd2735e4ae8afc.
|
| |
|
|
| |
This reverts commit e27c332dc3fc55c6892c5dcd4c31264c4033b40b.
|
| |
|
|
|
|
| |
v2.32.2"
This reverts commit 61c4511b2ac313c587a42012bd0e188b9b196758.
|
| |
|
|
| |
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
| |
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping compose to version v2.26.1-287-gfa3950346, which comprises the following commits:
fa3950346 image can be set to a local ID, that isn't a valid docker ref
a35158502 can't render progress concurrently with buildkit
b6db1380e exclude one-off container running convergence
2ebb47543 Only override service mac if set on the main network.
d474515d4 remove engine v25 from e2e test matrix The 1st version available for Ubuntu 24.x is Docker Engine v26
2b21c5df9 fix relative path in compose file
1f3c10eb4 bump compose-go to v2.4.7
68ad165a5 replace tibdex/github-app-token by official GitHub create-github-app-token
3060ed279 bump golang.org/x/net to v0.33.0 to fix potential security issue https://github.com/golang/go/issues/70906
be09b2e8c checkExpectedVolumes must ignore anonymous volumes
571a1af01 When retrying to resolveOrCreateNetwork, retry with a valid network name
8f644eea7 only check bind mount conflict if sync action is involved
56e92e34b use the 3 latest major versions of the engine to run e2e step
a42a04dfe bump Golang version to v1.22.10 and update CI actions
34bcd03a7 add --pull to run command
ed61e42f9 CI to validate fmt
65696bb1c `make fmt` so any contributor can enforce formatting
446e00520 format code with gofumpt
c01c9c29f e2e test to prevent future regression
038c81f34 only check volume mounts for updated config
a20b69ac5 e2e test for recreate volume
977530c22 build(deps): bump google.golang.org/grpc from 1.68.0 to 1.68.1
d4db8b6b1 build(deps): bump golang.org/x/crypto from 0.27.0 to 0.31.0
f8ce0f04e build(deps): bump golang.org/x/sys from 0.27.0 to 0.28.0
8e0520e71 prompt user to confirm volume recreation
332311358 Recreate container on volume configuration change
df9e420dd introduce watch restart action
142f5dba8 bump otel dependencies to v1.28.0 and v0.53.0 to align with buildx, buildkit and engine versions
700c586bc bump docker/buildx to latest release
fc566509d fix support for service.mac_address
e73c2303f update xx to v1.6.1 for compatibility with alpine 3.21 and file 5.46+
624303233 build(deps): bump golang.org/x/sync from 0.9.0 to 0.10.0
a1729c52d Update pkg/e2e/watch_test.go
254224c18 first watch action for a file event wins
0861e6845 fix
af5b74850 revisit TestDebounceBatching
32a22c1f4 introduce sync+exec watch action
e6ea8fb96 log configuration error as a watch log event
043465448 do not require a build section but for `rebuild` action
1d0839086 pull --quiet should not drop status message, only progress
69a83d130 use latest engine tags
781b9f1cd Bump buildx to 0.19.1
cbff0e555 be sure everything has been cleanup at the end of each tests
e4222bff5 add local config.json to test configuration dir if exists
25197fe6d disable failing TestBuildSSH test
85cdaf9dd fix build with bake
a8469db83 bump containerd to v1.7,24
08488dae5 bump google.golang.org/grpc to v1.68.0
cc3a216f2 build(deps): bump github.com/moby/buildkit from 0.17.1 to 0.17.2
6e818b9ae build(deps): bump github.com/compose-spec/compose-go/v2
6b3e57503 only stop dependent containers ... if there's some
8e497a128 disable TestNetworkConfigChanged which is unstable on CI
5aed70437 only check attached networks on running containers
1ff9b758d fix: commit tests
9eaba5597 feat: add commit command
a85f8a40a run build tests against bake
095f65cb4 delegate build to buildx bake
208e57ded build(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0
2d148faed use service.stop to stop dependent containers
43ac1e31c Update wait-timeout flag usage to include the unit
5561a778c go.mod: github.com/docker/cli v27.4.0-rc.2
ae48f488d go.mod: github.com/docker/docker v27.4.0-rc.2
5e3a09538 go.mod: github.com/docker/cli 8d1bacae3e49 (v27.4.0-rc.2-dev)
a2a3eb72e go.mod: github.com/docker/cli v27.4.0-rc.1
3513b4242 go.mod: github.com/docker/docker v27.4.0-rc.1
d4fa63fdc Update pkg/compose/convergence.go
c21d4cfb4 detect network config changes and recreate if needed
61f1d4f69 go.mod: github.com/docker/buildx v0.18.0
f7cce281d go.mod: github.com/moby/buildkit v0.17.1
bcaacc7f2 gha: test against docker engine v27.4.0
3f5898f8d push empty descriptor layer when using OCI version 1.1 for Compose artifact it fixes a repository creation issue when pushing the 1st time a Compose OCI artifact on the Hub
2bb67f270 remove ddev e2e tests
bf521fe3a implement remove-orphans on run
11e9621da ci: enable testifylint linter
a9de9abcf Emit events for building images
799ab842a Fix compose images that reutn a different image with the same ID
2f65ace2a remove obsolete containers first on scale down
aa0a4189e pass stal bot inactivity limit from 6 to 3 months
eba3ff8f3 fix(config): Print service names with --no-interpolate
6313365ba build(deps): bump golang.org/x/sys from 0.26.0 to 0.27.0
dbd51745c build(deps): bump golang.org/x/sync from 0.8.0 to 0.9.0
a8bfbc147 bump compose-go v2.4.4
fbbd6f83d Avoid starting all services on rebuild
a00097898 remove ArtifactType from Config in OCI v1.1 definition of the artifact
361c0893a build(deps): bump github.com/compose-spec/compose-go/v2
513b6128c Service being declared in a profile must not trigger re-creation
eececb9ad Add profile e2e test case to document in compose
501b5acde Update `MAINTAINERS` file
f51bc4cd0 bump compose-go to version v2.4.2
517f87a37 bump google.golang.org/grpc to v1.67.1
718049cbd bump go.uber.org/mock to v0.5.0
02371f312 bump golang minimal version to 1.22 in go.mod
a7c9de82b build(deps): bump github.com/containerd/containerd from 1.7.22 to 1.7.23
51ebeb544 introduce generate command as alpha command
fafaa9c5b bump compose-go to version v2.4.1
fc9c3cde0 Add license header to dockerignore_test.go
73bfbab54 fix
2ac081b4c fix(dockerignore): Add wildcard support to dockerignore.go
eeea049f1 push: Fix error message typo
26064d4b6 allow usage of -f flag with oci Compose artifact
7c46beb8a resurrect --all flag for cp to target oneoff container
aa1ec4524 connect to external networks by name
a4ee6ca7a don't warn about uid/gid not being supported while ... they are
5617eff0c bump compose-go to v2.4.0
fa24ab8e2 one-off container are not indexed, and must be ignored by exec --index command
0aad9595a don't use progress to render restart, which hides logs
813900180 compose-go clean volume target to avoid ambiguous comparisons
82417bd5b add support for bind.recursive
0cbb73c02 Improve error message to include expected network label
38e3d670a desktop: allow this client to be identified via user-agent
24c78728e bump compose-go to v2.3.0
9eeb2d315 convert gpus to DeviceRequests with implicit "gpu" capability
8da82c98e gha: set default permissions to "contents: read"
1a8c85548 Add security policy
15bd0b0c5 add support for raw env_file format
39d0f6477 build(deps): bump golang.org/x/sys from 0.25.0 to 0.26.0
3a95a0872 add support for CDI device request using `devices`
f794c79eb Support Dockerfile-specific ignore-file with watch
407d82570 Remove feature flag integration with Docker Desktop for ComposeUI and ComposeNav
82b41b9eb introduce service hooks
6c06170eb pass device.options to engine
60c1311f6 chore: remove errors depricated pkg
17add87e4 fix: validate-go-mod
bf0418bac fix: lint
b9d0c77cd feat: add export command
bdb854561 fix(convergence): Serialize access to observed state
41df35c1f Remove bind options when creating a volume type
3ef5045a0 Bump docker v27.3.1
d9df7aab6 fix(push): Fix unexpected EOF on alpha publish
c9d96b449 use compose-go version fixing extra_hosts unicity issue
1744b4576 Show watch error message and open DD only when w is pressed
87f457e7d add tests to down.go
abcc91e2b fix(down): Fix down command if specified services are not running
8b9fe8984 After container restart register printer consumer
34b18194f check secret source exists, as bind mount would create target as a folder otherwise
ce27dba52 wait for dependent service up to delay set by --wait-timeout
d2b945613 append unix-style relative path when computing container target path
9c60fe67d revert commits link to mount API over bind changes
c16df17e1 don't set propagation if target engine isn't linux
20404db12 build(deps): bump github.com/docker/docker v27.3.0-rc.2
f2ff7fd75 build(deps): bump github.com/docker/cli v27.3.0-rc.2
cb00aaad2 set propagation default
e885bc084 Remove custom codeql workflow
73d3a25eb fix import
3524bcfad chore(watch): Add debug log when skipping service without build context
1076f1d9a stop dependent containers before recreating diverged service
16652ed26 Fixed possible `nil` pointer dereference
c6a76b9bd bump github.com/docker/buildx v0.17.1
3a0e3ba7e build(deps): bump docker, docker/cli to v27.3.0-rc.1
86ef8e62c gha: test against docker engine v27.3.0
8bf0627ea show sync files only in debug level
2e1419168 chore(watch): Add changed files path/count to log
155f64182 build(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0
8db0cba0a bump compose-go to version v2.2.0
a7424435b Restore compose v1 behavior to recreate containers when ran with -V
d445ebba3 fix linting issues with golangci-lint 1.60.2
f592aad10 bump golang to version 1.22.7
ef46445ed bump dependencies versions, engine and cli v27.2.1 containerd v1.7.22 buildx v0.17.0 buildkit v0.16.0
150593298 build(deps): bump golang.org/x/sys from 0.22.0 to 0.25.0
524a97e55 Fix typos
1d608e033 Use logrus instead of direct output to stderr.
329ad7392 attach: close streams when done
b633c5c3e Fix typo in pull.go
e6ef8629a Allow combination of bind mounts and 'rebuild' watches
d658fecc6 service hash must exlude depends_on
f9c7a0cc0 prefer mount API over bind
6e172d6b8 docs: duplicate documentation for root cmd
98e261ba3 docs(wait): Fix wait command description
11c7a25ae allow to add empty line in the logs when nav menu activated
234036756 upgrade docker versions
9c03797f9 initial sync files that modified after image creation
485c0eba5 initial sync for root directory
69384a9a0 Removes redundant condition from toAPIBuildOptions in build.go
1601ead7b docs: Update docker compose kill usage
ea4ccf639 Fix stop on file chane for sync-restart action
b1850ea4d bump engine and cli to v27.1.1, buildx to v0.16.1
adba639e8 remove all dependabot update PRs for OTel dependencies
d8518529c gp.mod: github.com/gofrs/flock v0.12.1
c79f15da9 go.mod: golang.org/x/sys v0.22.0
3f55382ff update to go1.21.12
44337d2bb Enhance JSON progress events with more fields.
bc733508d bump compose-go v2.1.5
c422b5447 bump github.com/docker/cli v27.1.0
e74441c90 bump github.com/docker/docker v27.1.0
2bac32a46 bump github.com/containerd/containerd v1.7.20
f278400fb gha: add docker 27.1.0
4f9db4d3e fix(containers): fix sorting logic by adding secondary sorting for one-off containers
06bf339a4 fix: typos
231ea1005 update docs generation to avoid man pages generation
46679150d bump compose-go to v2.1.4, buildx to v0.16.0, containerd to v1.7.19 and buildx to v0.15.0
d3d378b92 restore setEnvWithDotEnv
163cdfd31 empty env variable with no value must be unset in container
25f85938b exclude unnecessary resources after services have been selected
cacbca859 change time for stale bot
ecac13f27 Remove debug mode and run twice a week
14793cc2e Add stale workflow
11d5ecdc7 update docs
9549a213b feat(watch): Add --prune option to docker-compose watch command
da434013e Remove COMPOSE_MENU env from e2e tests
ace69c96a Use rawjson for the build backend.
2db04c1e4 Set logging format to JSON.
8f7cd0048 Format errors as JSON when in JSON progress mode.
5a6e1a7e2 Pass 'plain' instead of 'json' to build backend
06545d066 Add JSON stream progress writer
075fd9345 go.mod: docker/cli, docker/docker v27.0.3
d062ad739 gha: test against docker v27.0.3
7cd5209cc go.mod: docker/cli, docker/docker v27.0.2
f79c28168 Remove `console.Terminal` check and use `IsTerminal` from `streams.Out`
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping lxc to version v6.0.3, which comprises the following commits:
fe31d844e Release LXC 6.0.3
b63c630fd github: Improve progress reporting
eb5095c3c github: Cleanup OSS-fuzz
8fa61eea5 github: Rework test workflow
0be2aed41 github: Introduce shared testsuite logic
1fce28876 github: Introduce shared build logic
8fde2ff28 github: Update coverity workflow
787a0f821 lxc.init: Allow SIGHUP from outside the container
17fea37cc lxc.init: Ignore user signals coming from inside the contianer
5dead1d05 lxc.init: Switch to sigaction
3011e79f9 lxccontainer: fix enter_net_ns helper to work when netns is inherited
537986ec8 fix return code of recursive all of cgroup_tree_prune
7f148c284 lxc-net: Replace random IPv6 subnet
1fc5314ff meson: fix minor typo
f7681840a Avoid null pointer dereference when using shared rootfs. rootfs->storage not set by lxc_storage_prepare when using a shared rootfs.
27f02b8c8 create_run_template: don't use txtuid and txtguid out of scope
acc334a9c Add suppport for PuzzleFS images in the oci template
f9992d819 meson.build: drop suggest-attribute=noreturn build option
277ac3640 meson.build: add -ffat-lto-objects
2444f5841 Release LXC 6.0.2
a85dc4b3d fix possible clang compile error in AARCH
f5a5ea3cf README: Update security contact
226fe3d54 doc: Fix definitions of get_config_path and set_config_path
a4c5d7ee0 Exit 0 when there's no error
19e14a26f idmap: Lower logging level of newXidmap tools to INFO
704504e3d Remove unused function
f1be0d814 Release LXC 6.0.1
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
| |
We refresh a patch and re-organize the go src for building
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping riddler to version v0.6.4-1-g66698f2, which comprises the following commits:
66698f2 update generation
11e1ff9 Bump version to v0.6.4
111df66 docs: Update TOC
94c8242 update to github actions
97bd55f update vendor
1f6525f update travis
77bd627 Update ToC for README.md
875f920 toc
0b055dd update travis
e5f037e Fix golint import path (#21)
80f5b35 update vendor
d0acd29 update vendor
de29e40 update vendor
dd2873d Bump version to v0.6.3
0e5c8db update vendor
8b87d31 update makefile
692c487 update makefile
417bb3d Sometimes the field "c.HostConfig.Resources.MemorySwappiness" is nil. (#20)
6148709 Bump version to v0.6.2
a86aac4 update cli pkg
1fdb9b1 update generated project files
eb5bf13 Bump version to v0.6.1
da3cd49 update deps
350749b update project template
d2f5596 update deps
bb1c9ed update makefile
dd24e84 update generated project files
7a7c7c9 remove deadcode
ecc2b82 update deps
5a3924a move repo from jessfraz to genuinetools and update paths
e2650aa update generated project files
114151b update deps
fbfdbf7 fix travis
ac17aed Bump version to v0.6.0
64fdb81 update gofmt
657e255 Bump version to v0.5.0
7220bc6 fix gofmt
894bdd7 Bump version to v0.4.0
d059cb5 update vendor
1b91705 Bump version to v0.3.0
7333db3 update vendor
26fbf35 Bump version to v0.2.0
4354179 fix lint
f72494d fix staticcheck
99043f1 update readme
c945270 Bump version to v0.1.0
e96ba2a update build
69e4f0b fix main.go
fd7d91d update generated project files
ebd6e08 fixups
eab9733 update readme
bdef87d update
4cb0876 Update spec version to current version
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping umoci to version v0.4.7-260-g8f807a3, which comprises the following commits:
e9fff47 pkg: fmtcompat: remove now that there are no users
63bbda0 errors: drop remaining errors.Wrap-like fmtcompat.Errorf users
73fffb3 errors: drop fmtcompat.Errorf for complicated err != nil checks
00a632e errors: drop fmtcompat.Errorf for explicit err != nil checks
5339feb errors: drop fmtcompat.Errorf for non-%w errors
1c67765 *: migrate to Go stdlib error wrapping
cd18171 pkg: fmtcompat: add a compatibility shim for fmt.Errorf
aaa6de8 fmt: use %q for quoting
97cbde3 *: fix new golint warnings
094e766 gha: enable CodeQL scanning
e597e6a idtools: return errors for >u32 specification
71d012d oci: casext: mediatype: switch to generics for parser functions
0a5d0dc build(deps): bump github.com/klauspost/pgzip from 1.2.5 to 1.2.6
3405ba8 Fixed typo in rootless.md
3cf87e0 build(deps): bump codecov/codecov-action from 4 to 5
7bc95ad build(deps): bump golang.org/x/sys from 0.22.0 to 0.25.0
a357a4e build(deps): bump github.com/moby/sys/user from 0.1.0 to 0.3.0
7e48118 build(deps): bump opensuse/leap from 15.5 to 15.6
3e5ade3 build(deps): bump actions/cache from 3 to 4
a59f5ba build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
3078d6b build(deps): bump github.com/vbatts/go-mtree from 0.5.3 to 0.5.4
ce130df build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0
6fd54fc build(deps): bump codecov/codecov-action from 3 to 4
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping skopeo to version v1.17.0-41-g0633de63, which comprises the following commits:
6483de48 fix(deps): update module github.com/containers/storage to v1.56.1
b5a13bcc systemtest: update quay.io registry image
eae9e886 chore(deps): update dependency containers/automation_images to v20250107 (#2488)
b68afb1a fix(deps): update module golang.org/x/term to v0.28.0
2a47dff7 chore(deps): update dependency golangci/golangci-lint to v1.63.4
83efeea4 chore(deps): update dependency golangci/golangci-lint to v1.63.3
deda9663 chore(deps): update dependency golangci/golangci-lint to v1.63.2
fb777d39 fix(deps): update golang.org/x/exp digest to b2144cd
568d5d1c chore(deps): update module golang.org/x/net to v0.33.0 [security]
1866ecbd fix(deps): update module github.com/containers/ocicrypt to v1.2.1
b116c5bd fix(deps): update module golang.org/x/term to v0.27.0
27baed91 Fix handling of errorShouldDisplayUsage
a71a8b4c fix(deps): update golang.org/x/exp digest to 2d47ceb
4541d649 Packit: remove rhel (epel) jobs
96f38043 Packit: switch fedora copr targets to fedora-all
e9755957 fix(deps): update module github.com/stretchr/testify to v1.10.0
2a3c8ee5 chore(deps): update dependency golangci/golangci-lint to v1.62.2
f423f01d Update an expected error message
186e9b4f fix(deps): update module github.com/masterminds/semver/v3 to v3.3.1
f818827f chore(deps): update dependency golangci/golangci-lint to v1.62.0
bae8ccd7 fix(deps): update module github.com/moby/sys/capability to v0.4.0
293ac065 Bump to c/Skopeo v1.18.0-dev
e354a143 Bump to c/Skopeo v1.17.0
34f06441 Bump c/common to v0.60.0
fa1762f5 fix(deps): update module github.com/containers/image/v5 to v5.33.0
15f69ac6 Trigger a rebuild of the ostree-rs-ext container
33a629dd Update contrib/cirrus/ostree_ext.dockerfile for DNF 5
bc57843b update CI images to f41
8d3fb4b3 cirrus: use dnf remove over erase
c0cc7ed2 fix(deps): update golang.org/x/exp digest to f66d83c
602c121f fix(deps): update module github.com/containers/storage to v1.55.1
7fbdd714 Fix format string inconsistency causing a build failure
3f66d002 proxy: Add various debug logging
43d066e0 chore(deps): update dependency containers/automation_images to v20241010
10a9e24d * Added option to create digest file for syncing images. * Digest file output would have docker reference of source and sha of of the mainfest sync'd with the target. This file would not be created if dry-run flag is enabled * improved the sync document to include the correct output for manifest file. * added new line for the manifest file once all images are sync'd * Ensuring we log on manifest digest if the copy operation was successful. * Check for errors if any once sync process is complete. * Ensure to capture the failure when closing the manifest file. * Ensure we are not writing manifest sha for failed copy of imagesand aborting the process in case write to file fails
6ad77a1b Packit: constrain downstream koji job to fedora package
9b960383 fix(deps): update module golang.org/x/term to v0.25.0
01ad0ed0 fix(deps): update module github.com/containers/common to v0.60.4
60b5f0e8 fix(deps): update golang.org/x/exp digest to 701f63a
f240ce07 vendor: switch to moby/sys/capability (#2428)
ee618142 Document that zstd:chunked is downgraded to zstd when encrypting
0fd65fb7 fix(deps): update module github.com/containers/common to v0.60.3
e39efb10 Packit: split out ELN jobs and reuse fedora downstream targets
7da6ea07 Packit: Enable sidetags for bodhi updates
6d2672c9 chore(deps): update dependency golangci/golangci-lint to v1.61.0
b113a2de fix(deps): update module golang.org/x/term to v0.24.0
9166a97b Use a range expression
795705e4 Update to Go 1.22
bebbbaee Restrict Packit targets to those that support Go 1.22
6b13950b fix(deps): update golang.org/x/exp digest to 9b4947d
115a6de9 chore(deps): update dependency containers/automation_images to v20240821
a8170067 Update skopeo-generate-sigstore-key.1.md
dd5ce5d9 [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.3
229c9fad fix(deps): update module github.com/masterminds/semver/v3 to v3.3.0
6e0b7a12 fix(deps): update module github.com/containers/common to v0.60.2
b9620327 [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.2
3151e088 fix(deps): update module github.com/containers/image/v5 to v5.32.2
d3827613 Replace egrep with grep -E
df598d7f [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.1
17da5826 fix(deps): update module github.com/containers/common to v0.60.1
38e29cdf fix(deps): update module github.com/containers/image/v5 to v5.32.1
84558d45 fix(deps): update module golang.org/x/term to v0.23.0
39dccc2a The fakeroot package doesn't exist in RHEL.
d17c8093 Bump Skopeo to v1.17.0-dev
88aad2e5 Bump Skopeo to v1.16.0
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The changes carried in runc-docker are no longer required, and if
they become relevant again, they don't belong in the base recipe.
This is the first part of the change, we drop runc-docker + patches
and update runc-opencontainers to RPROVIDE runc-docker in case there
are referenced that we don't know about. There shouldn't be any,
since virtual-runc has been the RPROVIDE of choice for some time.
We keep runc-opencontainers for now, since there may be alternate
runc implementations in the future. In about a year, we'll unify
the .inc and .bb if no new implementations have been proposed.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping runc to version v1.2.0-149-g610aa88a, which comprises the following commits:
06f1e076 libct: speedup process.Env handling
6171da60 libct/configs: add HookList.SetDefaultEnv
c49b8916 tests: add test to check StartContainer hook env
390641d1 libct/int: improve TestExecInEnvironment
9a545947 libct/int: add BenchmarkExecInBigEnv
a69d289f build(deps): bump google.golang.org/protobuf from 1.36.1 to 1.36.2
061483b6 build(deps): bump golang.org/x/net from 0.33.0 to 0.34.0
48ad17f4 build(deps): bump golang.org/x/sys from 0.28.0 to 0.29.0
83350c24 libct/system: rm Fexecve
c0abf76e Update README.md
f8483049 build(deps): bump google.golang.org/protobuf from 1.36.0 to 1.36.1
57462491 libct/configs/validate: add IOPriority.Class validation
7334ee01 libct/configs: rm IOPrioClassMapping
5d3942ee libct: unify IOPriority setting
ec465d39 utils: simplify newProcess
2dc3ea4b libct: simplify setIOPriority/setupScheduler calls
93091e6a libct: don't pass SpecState to init unless needed
8afeb583 libct: add/use configs.HasHook
171c4149 refactor init and setns process
5855ba53 build(deps): bump github.com/cilium/ebpf from 0.17.0 to 0.17.1
e809db84 build(deps): bump github.com/cilium/ebpf from 0.16.0 to 0.17.0
c2b11a63 build(deps): bump golang.org/x/net from 0.32.0 to 0.33.0
71327d7f build(deps): bump github.com/cyphar/filepath-securejoin
af929228 RELEASES: add formal release policy for runc
21c0968b remove broken fuzzer from oss-fuzz build script
9468986a ci: use a specific ubuntu version
e845f4be ci: bump golangci-lint to v1.62
705382ac build(deps): bump google.golang.org/protobuf from 1.35.2 to 1.36.0
394f4c3b Re-add tun/tap to default device rules
b15fcc1b keyring: update @kolyshkin key expiry
5a838ccb tests/cmd/sd-helper: switch from configs to cgroups
a56f85f8 libct/*: switch from configs to cgroups
04041f21 libct/cgroups/*: switch from configs to cgroups
ae477f15 libct/configs: move cgroup stuff to libct/cgroups
85c7c99d libct/cg/fs2: fix some revive linter warnings
66fe7db3 Move test helper binaries
47dc1858 Add runc_nocriu build tag
c487840f Remove main package dependency on criurpc
2f1b6626 deps: update to github.com/cyphar/filepath-securejoin@v0.3.5
c0044c7a cgroup: ebpf: make unexpected errors in haveBpfProgReplace louder
9bc6753d cgroups: ebpf: also check for ebpf.ErrNotSupported
dea0e04d cgroups: ebpf: use link.Anchor to check for BPF_F_REPLACE support
d5694eed build(deps): bump golang.org/x/net from 0.31.0 to 0.32.0
ec7e90b3 build(deps): bump golang.org/x/sys from 0.27.0 to 0.28.0
66969827 Switch to github.com/moby/sys/capability v0.4.0
fe73f1a9 libct/cap: switch to lazy init
cdee1b38 libct/cap: preallocate slices
b7da1673 build(deps): bump google.golang.org/protobuf from 1.35.1 to 1.35.2
fffc165d tests: add test for 'weird' external namespace joining
fadc55eb nsenter: implement a two-stage join for setns
a97d7cb2 nsenter: refuse to join unknown namespaces
49bee5c4 cfmt: use the Linux { a, b } decl style
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
| |
Bumping podman-tui to version v0.9.0-406-g37019c2f, which comprises the following commits:
37019c2f Bump to v1.3.0
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping podman-compose to version v1.3.0-4-g60ac5e4, which comprises the following commits:
48c6c38 build(deps): bump virtualenv from 20.25.1 to 20.26.6
ac5291e RELEASING: Fix release command
9cbc4c1 Release 1.3.0
6de335b Release notes for 1.3.0
2379924 Add documentation for how to create a release
eda4815 scripts: Add script to make new release
cbb0cab scripts: Add script to create release notes
483103a Declare compatibility with Python 3.13
804852b Provide support for cache_from and cache_to fields
f11e08e Read log output by chunks if a line is too long
35cf4bc tests: Add test for container_to_build_args()
9964604 Extract container_to_build_args()
ac7ec5c Support network level mac_address attribute
346f7a5 Ignore creating networks on network_mode=bridge.
5564224 Add integration test for network scoped aliases
978a138 Support network scoped service aliases
4a232f5 Merge single and multi network handling in get_net_args_from_networks()
aa8c6fd Simplify network handling in get_net_args_from_networks()
fb0bbd6 Cleanup network alias processing
b324029 Simplify network name processing when there is single network
590c371 Move network alias processing to common location
16196a1 Simplify ip address processing in get_net_args_from_networks()
2dfbb59 Extract multiple network handling in get_net_args_from_networks()
a34d1d1 Remove unused ip_assignments in get_net_args_from_networks()
d6da65e Extract get_net_args_from_networks()
de2c33d Simplify get_net_args_from_network_mode()
2891be0 Ensure that network_mode and networks are not present at the same time
a023dc1 Extract get_net_args_from_network_mode()
420d19d Add integration test for default network behavior
2cfc617 Support docker-compose like default network behavior
054c66b Add device_cgroup_rules support
145ae47 Simplified statements to retrieve keys from dictionaries
a67fa0b Adding support for conditional dependencies
3ba0396 Normalize depends_on service property
973e15b Wrap dependencies within a class
002c2e4 Extract run_container()
a9cfdb6 build(deps): bump actions/checkout from 2 to 4
c0dc3e4 build(deps): bump softprops/action-gh-release from 1 to 2
41e69be Fix Dockerfile link in readme
4203f79 add release.yml workflow
69e95be add Dockerfile and related scripts
db0aad9 podman-compose down removes networks
ab33954 add ssh support for build command
90f54b9 Add x-podman.no_hosts extension
df8fa58 tests/integration: Automate manual 'nets_test2' test
5c81bbf tests/integration: Automate manual 'nets_test1' test
deed4d5 tests/integration: Automate manual 'ipam_default' test
08b3ac2 tests/integration: Delete 'netprio' test
0de7e13 tests/integration: Automate manual 'multicompose' test
cb294d7 tests/integration: Automate manual 'nethost' test
8d0dd21 tests/integration: Automate manual 'interpolation' test
4a7329b Revert "Use defined environment variables in the image build process"
de3f93c tests/integration: Relocate 'filesystem' test
f4bf69b tests/integration: Automate manual 'extends_w_file_subdir' test
124879a tests/integration: Automate manual 'extends_w_file' test
368efe2 tests/integration: Automate manual 'extends_w_empty_service' test
5610949 test: Use stable apt-get cli for package installation
ea239c4 Simplify secrets assignment
9fdee76 Initialize default values in PodmanCompose constructor
0a6e0a3 Fix services replicas type
26e6651 Type hints via annotations
4626033 Remove is_dict,is_str for better pyright inference
8411db4 Minimum Python version 3.9
ed58ac0 clean up redundant default_net variable
305f25b clean up redundant proj_name
dc04108 tests/integration: Automate manual 'extends' test
92dbd36 tests/integration: Automate 'env-file-tests' manual tests
9e11c6b tests/integration: Automate manual 'exit-from' tests
0d24c41 tests/integration: Automate 'env-tests' manual test
34f5268 Add unittest for rec_subs
b5eaf31 Support variable substitution with service's environment
b3c49df podman_compose.py: support "platform" property in the build command
7d7e64f Update docs+messages to reflect uidmaps/gidmaps code
3c9c18c tests/integration: Automate `deps` manual test
1e66c28 Remove references to nonexistent devel and stable branches
d95b4d0 Add newsfragment
e2eb883 Add `--network=none` if `network_mode: none` is set; fixes #1001.
8505009 Support python direct call _parse_args or run
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping libpod to version v5.3.1-21-g8dc23e107e, which comprises the following commits:
d9a47a6d87 Revert "win-installer test: revert to v5.3.0"
957b4da983 Avoid rebooting twice when installing WSL
439136d76e Avoid rebooting on Windows when upgrading and WSL isn't installed
434b0b6e4f Add win installer patch
d4a7688b06 Bump WiX toolset version to 5.0.2
1ca5ab6e9c Add man pages to Mac installer
139fd2a7cf Replace ExclusiveArch with ifarch
cd1b2981b4 Fixes missing binary in systemd.
d4976e0677 Packit: remove epel and re-enable c9s
fee50f0f31 Packit/copr: switch to fedora-all
0d22d7b74e Quadlet - Use = sign when setting the pull arg for build
62c096bbce win-installer test: revert to v5.3.0
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping netavark to version v1.13.1-1-g443d164, which comprises the following commits:
0935a20 Release v1.13.1
56428e7 Release notes for v1.13.1
ce52673 setup: on av errors cleanup again
f6fe9ed nftables: add daddr match to port forward jump rule
00e7472 Release v1.13.0
04650aa Updates release notes for v1.13.0
84f8e89 run cargo update
6ba9d5d fix(deps): update rust crate hyper-util to 0.1.10
5a31988 [skip-ci] Packit: Remove epel targets
4bc65c2 fix(deps): update rust crate nftables to 0.5.0
ca9c45e fix(deps): update rust crate anyhow to 1.0.91
31fc658 fix(deps): update rust crate tokio to 1.41.0
6284e8b fix(deps): update rust crate anyhow to 1.0.90
571e26d Updated to zbus4
bd29d93 chore(deps): update dependency containers/automation_images to v20241010
8114c82 test-dhcp: fix NOP test
acd2a9d fix new lint errors with rust 1.81
e848ea5 fix(deps): update rust crate clap to ~4.5.20
08333ad contrib/container_images: remove no longer used images
dc440ac cirrus: check for msrv build
bb0359d add new rust image to check for MSRV
e2eea81 define a MSRV policy
ef66137 [skip-ci] Packit: constrain koji and bodhi to the fedora package
bc6ad66 chore(deps): update rust crate once_cell to 1.20.2
7b6df6e fix(deps): update rust-futures monorepo to 0.3.31
0a3f78b OWNERS file audit and update
c198914 update tonic and prost dependencies
97d56bb update tower to v0.5.1
dccb834 fix(deps): update rust crate sysctl to 0.6.0
503298d fix(deps): update rust crate netlink-packet-route to 0.21.0
f0738f2 chore(deps): update rust crate tempfile to 3.13.0
6433c1c chore(deps): update rust crate once_cell to 1.20.1
4025d42 fix(deps): update rust crate nispor to 1.2.21
df781e3 fix(deps): update rust crate anyhow to 1.0.89
b497d6b nftables: add dns dnat rule first
22b5110 iptables: add dns dnat rule first
78ef87f fix(deps): update rust crate anyhow to 1.0.88
38c90f5 nft: remove port forwarding rules correctly
f599796 fix(deps): update rust crate tokio-stream to 0.1.16
ad840ab nft: do not parse localhost string ip
a7b65ac nft: use append() over push() where possible
17f8b04 Packit: add sidetag to release with aardvark-dns
34c742b fix(deps): update rust crate tokio to 1.40.0
6782bbf fix(deps): update rust crate libc to 0.2.157
e650a76 fix(deps): update rust crate tokio to 1.39.3
678beff fix(deps): update rust crate libc to 0.2.156
4f37d9f aardvark: on start failure delete entries again
23ac90f iptables: make dns rules cover tcp as well
7d2882a nftables: make dns rules cover tcp as well
a21509b fix(deps): update rust crate serde_json to 1.0.123
8c08678 remove superfluous formatters from debug stmt
558078f chore(deps): update rust crate tempfile to 3.12.0
06d8a9e fix new rust 1.80 lint issues
f0ae7ef silence new rust 1.80 warnings
748908a chore(deps): update rust crate tempfile to 3.11.0
af57295 fix(deps): update rust crate serde_json to 1.0.122
6dd091f Bumping main back to v1.13.0-dev for development
a4e1359 Release v1.12.1
8b6117d Update release notes for v1.12.1
f307944 Change nv cargo categories
fa2b5fc Bump to 1.13.0-dev
30d84df Release 1.12
f42922c Release Notes for 1.12
743ed24 run cargo update
097c32f rpm: use nftables as default for f41
30aee33 fix(deps): update rust crate serde_json to 1.0.121
7810238 fix(deps): update rust crate tokio to 1.39.2
0ab24f6 aardvark-dns: trim whitespaces from error text
d4da022 fix(deps): update rust crate env_logger to 0.11.5
74952f6 [skip-ci] RPM: handle iptables/nftables dependencies
ed0dad1 fix aardvark-dns error handling
63737b2 fix(deps): update rust crate tokio to 1.39.1
a2dc538 fix(deps): update rust crate env_logger to 0.11.4
03a2786 fix(deps): update rust crate tokio to 1.38.1
cf67881 update mozim to 0.2.4
1fe10c3 fix(deps): update rust crate serde_json to 1.0.120
26afe34 netavark: dhcp_proxy: use dns servers from dhcp lease
74b5637 fix(deps): update rust crate serde_json to 1.0.119
3a1d4a2 fix(deps): update rust crate netlink-packet-route to 0.20.1
8c2d015 fix(deps): update rust crate log to 0.4.22
2f02d57 Fix Epoch so upgrade path is preserved from Fedora/RHEL.
2052269 test: add macvlan metric test
351b9dc fix(deps): update rust crate serde_json to 1.0.118
5728114 fix(deps): update rust crate url to 2.5.2
38baefb fix(deps): update rust crate prost to 0.12.6
17e34de fix(deps): update rust crate url to 2.5.1
60ca130 fix(deps): update rust crate iptables to 0.5.2
5a4bf12 [CI:BUILD] rpm: Update Rust macro usage
19e72a0 fix(deps): update rust crate nftables to 0.4.1
fe96f0f fix(deps): update rust crate tokio to 1.38.0
9e3e310 Bump to 1.12.0-dev
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping nerdctl to version v2.0.2-90-g1259a55e, which comprises the following commits:
bcc9fa74 update containerd-fuse-overlayfs (2.1.0)
6dac2cf1 update BuildKit (0.18.1)
f9347742 build(deps): bump tonistiigi/xx from 1.5.0 to 1.6.0
e8bca251 build(deps): bump the docker group with 2 updates
e3e6c3de [doc] rootlesskit port driver configuration
c2d8b4c6 build(deps): bump github.com/cyphar/filepath-securejoin
b4ba0cbd build(deps): bump the golang-x group with 6 updates
d4130581 fix: Fix --env-file flag behavior in nerdctl compose
b8f4d9c2 Cleanup namespace validation
3d944cb5 validatePathComponent tests
9bbf24db Remove dependency on misplaced helper CreateBuildContext for next-gen tests
e536ed59 Increase timeouts on CI
f914ea38 gocontext -> context
775a0053 gocni -> cni
32ab7472 Create directory for bypass4netns pid file
e2708fb5 Fix hosts.toml resolution for docker domain
e28491fa Enhance CNI config load error condition UX
531e2036 Marking TestCreate/logs as flaky
69de5dd4 feat: add force-recreate and no-recreate for compose up command
5fa9f123 Relax compose concurrency lock
00763909 update CNI plugins (1.6.1)
09039a18 update stargz-snapshotter (0.16.2)
70679d49 update BuildKit (0.18.0)
4a21ba7d docs: the next release will be v2.0.1, not v2.1.0
442b01d2 Fix permissions for resolv.conf and hosts
dcaee106 build(deps): bump the stargz group with 3 updates
eac99f87 build(deps): bump github.com/containerd/nydus-snapshotter
159e0391 build(deps): bump docker/build-push-action from 6.9.0 to 6.10.0
2ad3f57c fix redundant error checks and comment format
b060ead7 fix: add fields such as CONTAINER_NAME to journald log entries sent to by containers
232b6adc build(deps): bump github.com/compose-spec/compose-go/v2
788fc0c2 fix nerdctl ps slow on heavy IO system by using goroutine
0e8abacc Update containerd (1.7.24) in CI
ba72ac7b build(deps): bump github.com/containerd/cgroups/v3 from 3.0.3 to 3.0.4
f128aac0 fix: refactor pkg/infoutil in order to resolve import cycle
1cbc1203 update stargz-snapshotter (0.16.1)
f572d40f build(deps): bump github.com/Masterminds/semver/v3 from 3.3.0 to 3.3.1
3b3c68c1 build(deps): bump docker/metadata-action from 5.5.1 to 5.6.1
c41cc9d9 Pass appropriate --device arguments from compose to run
2463f8b6 update BuildKit (0.17.1)
37df93d3 update runc (1.2.2)
1fdb4b0a fix: default json-file log size to 100MB
ae50153a build(deps): bump the stargz group across 1 directory with 3 updates
32de57ba build(deps): bump github.com/containerd/continuity from 0.4.4 to 0.4.5
7dce7c78 refactor: Fix golanglint action error
9c351383 Use a more direct and less error-prone return value
130397dd build(deps): bump the golang-x group with 2 updates
d1ea2d7b build(deps): bump github.com/containerd/typeurl/v2 from 2.2.2 to 2.2.3
a82ae7bb build(deps): bump github.com/compose-spec/compose-go/v2
b5a11731 build(deps): bump the golang-x group with 4 updates
7d116bf1 feat: configure custom IP for default bridge network
d30f66e1 build(deps): bump github.com/vishvananda/netns from 0.0.4 to 0.0.5
6f2e0326 Mark `nerdctl builder debug` as incompatible with Docker
417b6170 typo: remove extra spaces at the lead #3650 #3651
7e89bd3d typo: remove extra colons and whitespaces #3650
84cea659 [fix] avoid escaping '<', '>', '&'
7103b54b update SOCI snapshotter (0.8.0)
29f3ff63 update containerd-fuse-overlayfs (2.0.0)
2380710b update BuildKit (0.17.0)
4f64af98 update runc (1.2.1)
75be32df update containerd (2.0.0)
ccbaf82a build(deps): bump github.com/containerd/containerd/v2
b006beb5 build(deps): bump github.com/containerd/typeurl/v2 from 2.2.1 to 2.2.2
8ea1d0ac build(deps): bump github.com/containerd/containerd/api
68bd32d7 build(deps): bump actions/checkout from 4.2.1 to 4.2.2
83088ef8 build(deps): bump github.com/containerd/errdefs from 0.3.0 to 1.0.0
c607537e add 'none' logger
718e7cd2 fix: not to be deleted a container created with --rm when detaching
b776706a fix: Allow to untag images associated with running or paused containers by nerdctl rmi -f
dc2c7b93 Enable network_inspect tests to run on windows
93189e13 Annotate non-windows compatible image tests
46239308 Enable issues tests to run on Windows
465b52ca Enable image_remove tests to run on windows
4254a1fe build(deps): bump github.com/compose-spec/compose-go/v2
58318d51 build(deps): bump github.com/containerd/typeurl/v2 from 2.2.0 to 2.2.1
de193b39 Enable GHA cache for image build dependencies
b1e82268 Fix prior test-porting not aligned with description
f6d36c40 Move from AlpineImage to CommonImage to enable windows tests
bfc8e0b9 Add Infinity constant to enable windows testing compat
7b8edba6 Remove leftover workaround for fixed bug
bdc00760 Reduce calls to data.Identifier()
04ec4a3c Rewrite container_stats tests
5862baf7 build(deps): bump github.com/fsnotify/fsnotify from 1.7.0 to 1.8.0
75fdc499 Fix convert unable to find image
4760ee93 Rewrite container_top tests
54196647 Remove fixed-bug workaround
20987449 build(deps): bump github.com/compose-spec/compose-go/v2
8f9eccd9 build(deps): bump github.com/Microsoft/hcsshim from 0.12.8 to 0.12.9
6b3d6615 Container create tests cleanup
40ddd34e Update busybox image (support sleep inf)
708f1725 Fix test leaking tagged Alpine image
b7227211 Rewrite container prune test
38f74400 Rewrite container remove test
2336d3d1 Rewrite container diff test
a5f487d4 Align gitignore and dockerignore
4d06e730 Rewrite container_wait tests
eddb0eb8 go.mod: github.com/containerd/imgcrypt/v2 v2.0.0-rc.1
fcdd7262 build(deps): bump github.com/compose-spec/compose-go/v2
443d504b build(deps): bump github.com/containerd/continuity from 0.4.3 to 0.4.4
bb240f12 build(deps): bump github.com/compose-spec/compose-go/v2
af25fd40 add white image
50946054 update Kubo (0.31.0)
90fbd09b update Nydus (2.3.0)
98442f50 update CNI plugins (1.6.0)
5551d6d3 update containerd (2.0.0-rc.6)
247fcca2 build(deps): bump github.com/containerd/containerd/v2
0ee1a592 build(deps): bump actions/checkout from 4.2.1 to 4.2.2
bbb5b305 Add new requirements (HyperV, CgroupsAccessible)
5db8a48d build(deps): bump github.com/fatih/color from 1.17.0 to 1.18.0
3b203a35 update runc (1.2.0)
a4b2959b Add container run from oci-archive
62ad4046 Ensure rm uses -f when cleaning
05918629 Remove no-op description from top-level tests
cc78fb3b Remove old build tag syntax
d8ab512e Refactor load from archive functionality
ec12b584 Move image load func to imgutil package
4f20a14d CI: enable no-retry/retry testing separation and workflows cleanup
c3627e11 fix: Allow to delete images when names of images are short digest ids of another images.
e1622152 Add legacy tests into the 'retry' bucket
d963545a Fix ensurecontainerstarted logic and better debug
564ff06e Separate lint + enable on other platforms
0cc9d291 Enhance debugability for kubernetes rig
5609de3d Workaround and document weird docker issue
9603bf40 Registry testing tooling cleanup
914238eb Kuberneters testing tooling cleanup
36f7eb91 Rewrite commit tests
ca76611c Fix and enable CI unit testing for windows
54966d87 Rewrite build tests
83bf7e03 build(deps): bump go.uber.org/mock from 0.4.0 to 0.5.0
ce8e077d Chores: spurious comments and syntax simplification
d48be62f Fix semantic of Fail to not care about exit code
1ab6df3c (Un-)marking flaky tests
468b0df2 Fix duplicated test title
84b4d942 Change compose lock to use DataStore()
27a18162 [fix] fix image filter with nonexist image
d2b2637e Enable image completion on all platforms
97919c25 Remove unbuffer from test
7a0eaecb Add pseudo tty support for tests
76b265af Skip TestAttach until we fix it
95fe8c0a build(deps): bump github.com/containerd/accelerated-container-image
645988e8 Add delay to tentatively fix flakyness with Docker
fc1848b5 "ns:" network mode to use existing network namespace
24cbe252 Fix over-eager windows path restrictions
90b96354 Add image load quiet mode
e7101674 Quiet ancillary image pulls
320d5c38 Minor debugging / cleanup chores
d7adf399 RootFul/RootLess > Rootful/Rootless
7fab74c3 Lint fixes
fa39963a Global compose lock
496b2f05 Consistently enforce rmi -f in tests cleanup
efb9a876 Cleanup code to use simplified referenceutil package
afba9710 Cleanup referenceutil
bf395429 Skip TestRunWithTtyAndDetached on Windows
ad64f421 fix: nerdctl stats on a container without a memory limit returns host memory limit
516ed82e Update containerd (1.7.23) in CI
ddeae201 removing ipfs binary from nerdctl-full
c3c3f91f Add container run --security-opt systempaths=unconfined
2c6fb772 Alleviate image --filter missing digest issue
50ac0b6f Fix CNI concurrency issue
379e8ce6 build(deps): bump github.com/klauspost/compress from 1.17.10 to 1.17.11
33beb322 Migration aftermath
4451d75d Migrate image tests
157d1838 Migrate IPFS tests
7190bc66 ./cmd/nerdctl/. + issues + completion touchups
91f4eb4a ./cmd/nerdctl/network touchups
0fafd1af ./cmd/nerdctl/system touchups
2d2afe08 ./cmd/nerdctl/volume touchups
0e35a535 Test tooling iteration
93fb53b0 Enforce global lock in oci hooks
65363a66 build(deps): bump github.com/cyphar/filepath-securejoin
93152fa8 build(deps): bump github.com/compose-spec/compose-go/v2
456337f9 Update runc (1.1.15)
7ff3c68a build(deps): bump actions/checkout from 4.2.0 to 4.2.1
3e3517c2 Remove images from Docker Hub from tests, fix #3498
1fe34f86 Tests for net inspect
2e3b6365 Fix netwalker issues
c075a576 switch cosign registry from GCR to GHCR
92c3297f build(deps): bump the golang-x group with 5 updates
9755f22f Update BuildKit (0.16.0)
1ff8d48b Update to containerd 1.7.22, 1.6.36 in CI
e6c47ef3 build(deps): bump golangci/golangci-lint-action from 6.1.0 to 6.1.1
2c1a5b87 Fix tests broken by tooling update
5ce1e4b6 Fix parallelism for docker
19fa3d93 Increase delay of delayOnceReader to reduce flakyness of TestAttach
346b492b Test tooling fixes
bd1eefa6 Make CreateNetwork safer wrt concurrency
703bd581 Fix IPFS missing layer issue
bfeeabe5 3452: Filter Volumes by name if any of the names match
03c9de57 Update to containerd 2 rc.5
544991a0 Fix Docker Hub push regression
5cdb3e0b Fix login persistence regression against Hub
9d0f54a5 build(deps): bump github.com/Microsoft/hcsshim from 0.12.6 to 0.12.7
c661d16e Fix broken TestImageInspectDifferentValidReferencesForTheSameImage
7b64f827 build(deps): bump github.com/containerd/containerd/v2
f3215269 build(deps): bump github.com/cyphar/filepath-securejoin
befd089a build(deps): bump docker/build-push-action from 6.8.0 to 6.9.0
2c2745e8 fix: Cleaning up orphaned directories and files when containers creation fails
12e63b5d [fix] filter images panic
2a8d4ae0 build(deps): bump docker/build-push-action from 6.7.0 to 6.8.0
f231be8e build(deps): bump actions/checkout from 4.1.7 to 4.2.0
0aef2f2e Migrate completion tests to new tooling
36ab5832 Migrate network tests to new tooling
f363e6f0 Migrate system tests to new tooling
764a2aa5 Fix tests and add regression tests for #3425
1e52bf52 EnsureAllContent on tag
8e10d879 EnsureAllContent on save
ef09d191 EnsureAllContent on convert
8ba7ce78 EnsureAllContent on commit
9539f6b0 Add fetch and EnsureAllContent methods
93b5999a Fix regression from #3446
845902d6 build(deps): bump github.com/klauspost/compress from 1.17.9 to 1.17.10
79067831 build(deps): bump github.com/go-viper/mapstructure/v2
b4f002ca remove is shareable test
a74f0f30 Testtool initial documentation
cc56a093 Move root and volume tests to new test tooling
2c95d090 Adding NG test tooling
bfc2da40 increase golangci-lint timeout to 10min
2d297924 Prevent concurrency on commit and remove
062f4ff8 build(deps): bump github.com/go-viper/mapstructure/v2
de9a0045 build(deps): bump the docker group with 2 updates
06a257ef Fix panic 'provided file is not a console'
bc2a0070 build(deps): bump the docker group with 2 updates
b2174cbb Fix test to workaround docker credstore symlink fault
5864ea38 build(deps): bump github.com/cyphar/filepath-securejoin
646f8409 build(deps): bump github.com/containerd/accelerated-container-image
e22055bc build(deps): bump github.com/compose-spec/compose-go/v2
6f685c37 build(deps): bump the docker group with 2 updates
aeef5bed Fix Windows path check in 'LogURIGenerator'
4bb3fc02 build(deps): bump the golang-x group with 2 updates
1ecbd87a build(deps): bump the golang-x group with 3 updates
1a4a5a95 Hostsstore resolution cleanup
7bcfc505 Dockerfile: runc: set CC and STRIP explicitly
ea86ae9a Adding document about pkg/store
4c0c5a60 Move testing.md to docs/dev
935ee8a0 Fix TestRunApparmor: relax stdout matching to not fail when testing rootless
dbc05409 Fix TestLoadStdinFromPipe: do not leak test images breaking tests using prune
ca0f6453 Enforce linting for freebsd and windows
e0de7b1c Fix freebsd lint
efeb191a Fix windows linter complaints
23aca88a Refactor: cleanup prompting
bf89c084 Refactor filestores using store.Store
c9756a94 Remove mock for mountutil tests
92188e11 Add generic filestore
04cc74bd Auth code refactor: credstore and registry URL
9657f2c2 chore: update runc to v1.1.14
4e89ddf7 Minor cleanup, post-refactoring of cmd
b02b8f28 Move cmd/system to subpackage
05074f83 Moving cmd compose and inspect to subpackages
ca637fd6 Move cmd/container to subpackage
d5a00f46 Move cmd/internal to subpackage
c115c49c cmd/AppArmor moved to subpackage
4b8061d9 Move cmd/image & cmd/builder to subpackages
3ea64eb9 Move ipfs to subpackage
c8df501e Move a bunch of helpers
3b8a098d Move login/logout to subpackage
9c75f29d Move namespace code to subpackage
d1bc54d9 Move network to cmd/nerdctl/network
f7e033d9 Move IsExactArgs and FindIPv6 to helpers
d2741baf Rename completion.ShellCompleteX methods to completion.X
a07d9066 Move volume actions under subpackage
061d0cb1 Move UnknownSubcommandAction to helpers
ec530147 Move constants Categroy/Management to helpers
38bca1f3 Move completion to sub package
b8b5d707 Move away flagutil under helpers
51af3690 Add Confirm helper
d3a39fd2 Fix TestDiff failure with docker
c5d3309d Add a locking mechanism to prevent concurrent subpackage testing
76a828dd Adapt testing so that subpackages are not parallelized
5b9cf17d Do not load build output if dest is specified
7f0dec8e Fix nsenter working dir for child
95a3d697 Move testing to container v2 rc4
abb17d72 build(deps): bump github.com/containerd/containerd/v2
68be0cef Disable flaky #827 test
19fb8b60 build(deps): bump github.com/Masterminds/semver/v3 from 3.2.1 to 3.3.0
7192451f build(deps): bump github.com/coreos/go-iptables from 0.7.0 to 0.8.0
fee2b017 build(deps): bump the docker group with 2 updates
b954c7a3 Prevent presumably bogus reentrancy onPostStop when onCreateRuntime errored
6296bb35 Namestore hardening, workaround #3351
f85bba8f Hardening lifecycle state store
7eb1523e Changing bufio.Scanner to bufio.Reader to support large message
bc247660 Add lint-imports to the default lint task
fe677961 Allow Canary to fail the build
31989a2d Add reg. test for 'stop created'
971040e7 Release any existing ip lease onCreateRuntime (workaround #3355)
f353afb6 Allow containers to re-acquire their own name (fix #3354)
f9b56614 build(deps): bump github.com/containerd/accelerated-container-image
42adca9f build(deps): bump github.com/vishvananda/netlink from 1.2.1 to 1.3.0
93586e60 build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.2 to 2.2.3
31debef4 build(deps): bump github.com/containerd/containerd/api
571799fb stop: do not error on created containers (fix #3353)
5f30141f Rollback rename in case of error
fc31dcd2 Ignore
2327cc85 Fix docker hub lag on golang versions breaking canary
0cd936b5 build(deps): bump github.com/vishvananda/netlink
6362afc1 Remove Docker incompat from image prune and build tests
439086fb Fix image prune filter until test rmi cleanup not running.
67449bca chore: fix some function names
f7b71e9c Add regression tests for network host
132276c4 Fix --add-host not working with network host
c57dc6ff Rename variable for readability
a4abf1e2 Use host hostname with network host
f5e247f8 Fix rename failure with network host/none
71c1558b Fix panic on malformed add-host argument
031aa1d4 K8s minor cleanup (rename and -f on delete)
0e8b3d45 Implement windows filename restrictions
572d368d fix: filter container state without option "-a"
a1bd4760 ParentMain/nsenter: do not fail if getwd errors
1201665e Add builder OCI layout build context
034f2e73 build(deps): bump github.com/Microsoft/hcsshim from 0.12.5 to 0.12.6
8352492b build(deps): bump tonistiigi/xx from 1.4.0 to 1.5.0
d2dace20 Fix import order
bd27d52e Workaround goimports-reviser bug
613f7c6e update RootlessKit (2.3.1)
f5a2962c build(deps): bump github.com/rootless-containers/rootlesskit/v2
3cb2cd1f update soci-snapshotter (0.7.0)
17a0749e update BuildKit (0.15.2)
6f7a56f2 update kind (0.24.0)
9efda227 update Go (1.23)
ddcf41c2 update Debian (12)
553ee688 update golangci-lint (1.60.1)
787b4ac6 Fix govet: printf: non-constant format string
068866ee Fix S1009 (see https://staticcheck.dev/docs/checks#S1009)
183b4395 Fix SA4032 (see https://staticcheck.dev/docs/checks#SA4032)
fd0f9547 Add lint job for canary and minor shell script cleanup
7c9751e2 Add image prune --filter support
ec7c3958 Refactor imgutil filtering
adf40354 Include init NetworkSettings within inspect response
97c5492b Kube on the CI
fc4b2700 support ci arm64
1fbd7766 fix: relax identifier limits
f5d1d6d5 Add builder prune --all and --force flag support
4fce7aaa Ensure binfmt does install emulation for arm7 on the CI
3d2db6e7 build(deps): bump docker/build-push-action from 6.6.1 to 6.7.0
4de7e5f4 build(deps): bump the docker group with 2 updates
f23fcd72 fix set go env in windows
81684636 build(deps): bump github.com/go-viper/mapstructure/v2
7f05aad9 Fix panics involving -ti when not on a tty
77b0a291 Go imports tooling
0b729e9e Import ordering consistency
6277d8f6 Move projectloader to testutil
02cb8a92 use slice.Contains
dc204e92 Get rid of naked returns
5d6d02b9 archived mitchellh/mapstructure -> go-viper/mapstructure
41448de9 Use http.ErrSchemeMismatch
d4152ca3 feat(compose): add mac-address parsing
9cc9a5bd gofumpt lint
af50cb59 enforce registry default host for login
cbe7cfe7 Uniformize import style
83914c5b Fix docker/errdefs -> containerd/errdefs
bd59961b Fix godoc to align with style
bc7e059f build(deps): bump github.com/containerd/accelerated-container-image
6f84540c migrate to github.com/moby/sys/userns
732656ad Make windows filelocking exclusive
98cc3689 Containerd v2
8cef1ce7 build(deps): bump golang.org/x/sys in the golang-x group
0721f443 feat: adding filter infrastructure + status and event filter
4cc911df build(deps): bump docker/build-push-action from 6.5.0 to 6.6.1
7df0fbd6 build(deps): bump github.com/compose-spec/compose-go/v2
93dfdaab build(deps): bump the golang-x group with 4 updates
56791faa build(deps): bump the golang-x group with 2 updates
99fdb17f build(deps): bump github.com/containerd/nydus-snapshotter
c6c7e132 add unpack commit images.
4d3f6988 Add SOCI handler wrapper
4b50583d feat: tail JSON log
3b61610c fix: output log after log rotation
915106fc gracefully terminate containers on nerdctl compose down
b60185e8 test: increase max-size && decrease log output
c5e06081 Remove gjson dependency
140c5fcc build(deps): bump golangci/golangci-lint-action from 6.0.1 to 6.1.0
e8a993b2 fix: sort images&containers by created_at
cc0f6437 build(deps): bump github.com/cyphar/filepath-securejoin
68e7ad34 build(deps): bump github.com/compose-spec/compose-go/v2
fa77fb49 build(deps): bump the docker group with 2 updates
fea8219d feat: add Status and ID as event attributes
4d70ed0b build(deps): bump github.com/awslabs/soci-snapshotter
e86fa4c5 build(deps): bump github.com/containerd/containerd
d941b4f8 containerd/containerd/errdefs -> containerd/errdefs
73f22413 build(deps): bump github.com/containernetworking/cni from 1.2.2 to 1.2.3
06f942c1 build(deps): bump the docker group with 2 updates
83cf033f build(deps): bump docker/login-action from 3.2.0 to 3.3.0
579f75e7 build(deps): bump docker/build-push-action from 6.4.1 to 6.5.0
e81fe541 build(deps): bump github.com/moby/sys/mount in the moby-sys group
9229c007 Reuse Makefile for CI commands
b76605b6 build(deps): bump github.com/compose-spec/compose-go/v2
b7025537 build(deps): bump github.com/rootless-containers/rootlesskit/v2
3e569488 build(deps): bump docker/build-push-action from 6.4.0 to 6.4.1
760f3560 Add `shellcheck` lint to CI
eddbb4e3 build(deps): bump github.com/moby/sys/signal in the moby-sys group
cf0e6e6e feat: support for -a and --attach in run
57951753 Account for availability delay of golang docker image
bbf2293d Fix shellscript issues
6eccd9af build(deps): bump github.com/Microsoft/hcsshim from 0.12.4 to 0.12.5
5affa4fb build(deps): bump docker/build-push-action from 6.3.0 to 6.4.0
67ade6db Move image pull args into ImagePullTypes
cfd89822 Enhance Makefile
e2ede62e Remove no longer useful DOCKER_BUILDKIT=1
f6308150 fix: add login component username validation
e7b567ca pkg/portutil: add ipv6 host ip test
99b05e63 pkg/portutil: use net.SplitHostPort to parse ip address with port
79b80d68 Update go.mod
164b9f65 Normalize curl invocations
db47b319 Adding a canary CI target to test against upcoming / unreleased versions
f759e035 Silence apt-get and uniformize calls format
b0288121 Update FUSE and buildkit in dockerfile
fdd88383 build(deps): bump github.com/cyphar/filepath-securejoin
41870985 build(deps): bump github.com/containerd/typeurl/v2 from 2.1.1 to 2.2.0
496c78e8 Test fixes
3a0df165 CI: shrink test matrix
c628ef1e Workaround delayed log file creation
af2f1402 Fix test: wait for systemd to come up
11a0d9ac Move to 24.04 for docker integration testing
c3ea8ff4 Fix nerdctl info missing on Windows
fee1ab36 fix the created tasks cannot be deleted
81aac851 rootless: add `Requires=dbus.socket`
c4ea3d0e Fix IPFS test flakyness
fceea23b Ensure we dont fail if containers disappear (#3167)
156b5fd0 Do not hard error if containers are gone
f83f2380 build(deps): bump golang.org/x/net from 0.26.0 to 0.27.0
fbf9a538 build(deps): bump golang.org/x/crypto from 0.24.0 to 0.25.0
09739c12 Improve tests debugging output
15191775 Volume QA: inspect, prune, create and other volume fixes
019cd003 test-integration-rootless: enable BuildKit for RootlessKit v2
e0248a4d Dependabot: add groups
19ae34b0 nerdctl run -v: dismiss warning "expected an absolute path, got a relative path"
faa28f89 Workaround flaky save
35424992 Re-enable project checks for .md only changes
5267e4ef Separate and expand information for newcomers on testing
1b96d8de Make systemctl happy by not passing an explicit signal for kill
4455d73a build(deps): bump golang.org/x/term from 0.21.0 to 0.22.0
e32d75c4 Add logo
60dc9421 Cleanup login command (remove global var and normalize to other commands
294caa66 build(deps): bump docker/build-push-action from 6.2.0 to 6.3.0
150f9cbd Fix wrong assumption about container availability
d627713b update containerd (1.7.19)
356b88dc Rewrite container remove
db152b91 build(deps): bump github.com/docker/docker
91c0b7f6 build(deps): bump github.com/docker/cli
3cece1b1 fix missing name container stats
2ed85e4f build(deps): bump docker/build-push-action from 6.1.0 to 6.2.0
d56f7a71 build(deps): bump github.com/docker/docker
6d97c6e9 build(deps): bump github.com/containerd/go-cni from 1.1.9 to 1.1.10
dd52560f CI: update Ubuntu (24.04)
ae277688 feat: support for --sig-proxy in run
6c1e9618 build(deps): bump github.com/containernetworking/cni from 1.2.1 to 1.2.2
c493afcd pkg/defaults: add defaults_darwin.go
b997648a Fix check for empty $HOME and $XDG_RUNTIME_DIR
8a5137b0 build(deps): bump docker/build-push-action from 6.0.2 to 6.1.0
02d5329a build(deps): bump docker/build-push-action from 6.0.1 to 6.0.2
c2fa1ed9 update soci-snapshotter (0.6.1)
820f7404 update Nydus (2.2.5)
480fc999 update gotestsum (1.12.0)
6cc63162 update Kubo (0.29.0)
f16b79c2 CI: cross: do not use Go 1.21 for nerdctl-full deps
f35e4251 update golangci-lint (1.59.1)
85a8bf86 update BuildKit (0.14.1)
465365a0 update CNI plugins (1.5.1)
bccfdc82 update containerd (2.0.0-rc.3)
ead5ce6c Volume QA: remove (fixes and tests)
a28dbf29 Dockerfile: use Go 1.22 for runc
97552985 Bump compose-go to v2
e13ff68b Remove duplicate function
515c3ade Add HOSTNAME environment variable
0c300dca fix: close the hosts file
15a8a8dc Aftermath docker migration: fix racyness in tests
5dd36b60 Implement network namespacing
58f7720e build(deps): bump docker/build-push-action from 6.0.0 to 6.0.1
6d0c8f87 Replace SetEnv invocation by base.Env to unlock parallelization
c0e4e92c Add mechanism to prevent Cmd from executing multiple times
ac4830df MAINTAINERS: move Ye Sijun (junnplus) from a COMMITTER to a EMERITUS
2606265d build(deps): bump github.com/containernetworking/cni from 1.2.0 to 1.2.1
34d7c310 build(deps): bump docker/build-push-action from 5.4.0 to 6.0.0
0b201417 build(deps): bump github.com/containernetworking/plugins
9a76ba10 Disable build and publish on PR for purely md changes
eace9da1 Add doc note about --ip and bridge
e789f2cd Docker v26 compatibility & test fixes
b63f4d6b Add --pull option to build command
091de746 update containerd (1.7.18), runc (1.1.13)
a3195b27 MAINTAINERS: promote Kay Yan (yankay) from a REVIEWER to a COMMITTER
f4a7e0c8 Restore logger output
37098ac6 build(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1
14d8b42a build(deps): bump github.com/klauspost/compress from 1.17.8 to 1.17.9
4f8a70b6 build(deps): bump actions/checkout from 4.1.6 to 4.1.7
f942d2c5 test-integration-docker-compatibility: install Docker v24
972a9b10 build(deps): bump github.com/containerd/platforms from 0.2.0 to 0.2.1
37c0cb67 Safer / faster convert zstd
b20070d2 Revamped testregistry and login tests
edb8c19d build(deps): bump docker/build-push-action from 5.3.0 to 5.4.0
dc237a35 build(deps): bump github.com/Microsoft/hcsshim from 0.12.3 to 0.12.4
80731ff3 Caching and list optimizations
b0c23492 MAINTAINERS: move Hanchin Hsieh (yuchanns) from a REVIEWER to a EMERITUS
e021a92a MAINTAINERS: promote Jin Dong (djdongjin) from a REVIEWER to a COMMITTER
4907e59c fix container list with json format
b94caffe build(deps): bump github.com/docker/cli
47b45261 build(deps): bump github.com/containerd/containerd from 1.7.17 to 1.7.18
530b0913 build(deps): bump github.com/docker/docker
2240323d build(deps): bump golang.org/x/net from 0.25.0 to 0.26.0
5b8d5a30 build(deps): bump golang.org/x/crypto from 0.23.0 to 0.24.0
7675d267 update imgcrypt (1.1.11)
875a962e Remove spurious debugging leftover
11802cf3 Fix wrong package import
6917840b CI: .md files changes should not trigger tests
f491e83f Disabling test on unsupported platforms
eb001fad Image inspect rework
4d4fd5fb State how to run a single integration test
099ef7bd Image history enhancements
3d875395 build(deps): bump docker/login-action from 3.1.0 to 3.2.0
838d5a11 build(deps): bump github.com/containerd/imgcrypt from 1.1.10 to 1.1.11
eb5d4426 update slirp4netns (1.3.1)
1ec6764f update containerd (1.7.17)
03bee846 update CNI plugins (1.5.0)
4b0b69d3 go.mod: github.com/containernetworking/plugins v1.5.0
949dc8aa build(deps): bump github.com/awslabs/soci-snapshotter
11fcb6b0 Do not obtain task info when it is not necessary in commit command
713851de add retry on test
cf5073b4 support image label
0988c9b8 chore: remove impossible error check
8b34abdf Implement container inspect --size, SizeRootFs and SizeRw
0d470e7e Implementing StartedAt for containers
93b13817 build(deps): bump github.com/containerd/nydus-snapshotter
5f8c0c9d build(deps): bump github.com/docker/cli
80bc6835 build(deps): bump actions/checkout from 4.1.5 to 4.1.6
35a90ef6 build(deps): bump github.com/docker/docker
64af5a6d build(deps): bump github.com/containerd/containerd from 1.7.16 to 1.7.17
480eb6ee Support DHCP IPAM opts and set the hostname
274b8a6e Fix cni plugins sha after spurious 1.4.1 re-release
cc60f5d5 build(deps): bump actions/checkout from 4.1.4 to 4.1.5
b24582bc build(deps): bump github.com/fatih/color from 1.16.0 to 1.17.0
6b10870c Re-acquire name in onStartContainer (see #2992)
c60adf29 Add missing alias for container rm/remove
fac3d35e build(deps): bump github.com/docker/cli
c5d1b532 Allow directories for --device and in-container path
762fe91c Fix some /etc/ file permissions (see #2684)
926b88f3 build(deps): bump github.com/containerd/platforms from 0.1.1 to 0.2.0
41bf4414 build(deps): bump github.com/docker/docker
516503a0 Fix markdown link
c17badbc build(deps): bump golangci/golangci-lint-action from 5.1.0 to 6.0.1
83382d5b build(deps): bump golang.org/x/net from 0.24.0 to 0.25.0
4b9de97d inspect: show mounts info from CRI/ctr containers
d197e5b7 build(deps): bump github.com/docker/cli
227505ce build(deps): bump github.com/docker/docker
c6c4a7bd build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.1 to 2.2.2
618639b3 build(deps): bump github.com/cyphar/filepath-securejoin
4e615922 CI: use Go 1.22
49993c5b build(deps): bump golangci/golangci-lint-action from 5.0.0 to 5.1.0
ad607362 build(deps): bump github.com/containerd/nydus-snapshotter
2c1d745b build(deps): bump github.com/rootless-containers/rootlesskit/v2
54b29564 fix: set mountpoint RW and Propagation in internal mount label
ff6c1c49 skip Kubo 0.28.0
bb6f9e66 update RootlessKit (2.1.0)
f34b02ad update slirp4netns (1.3.0)
e9535e52 update BuildKit (0.13.2)
47053926 update containerd (1.7.16)
a4f2ed07 build(deps): bump golangci/golangci-lint-action from 4.0.0 to 5.0.0
bd7fdb37 build(deps): bump github.com/containerd/containerd from 1.7.15 to 1.7.16
93f404c7 fix: error check in the ensureFile func
a279dfab build(deps): bump actions/checkout from 4.1.3 to 4.1.4
4f46cf94 build(deps): bump github.com/docker/cli
8765df23 build(deps): bump github.com/docker/docker
6b047d24 build(deps): bump github.com/Microsoft/hcsshim from 0.12.2 to 0.12.3
0439917f build(deps): bump actions/checkout from 4.1.2 to 4.1.3
199edf1a build(deps): bump github.com/Microsoft/go-winio from 0.6.1 to 0.6.2
79897c8b build(deps): bump github.com/docker/cli
a40d98d2 build(deps): bump github.com/containernetworking/cni from 1.1.2 to 1.2.0
03fd3c76 build(deps): bump github.com/awslabs/soci-snapshotter
47f272d2 build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.0 to 2.2.1
c1c0fc93 build(deps): bump github.com/fahedouch/go-logrotate from 0.2.0 to 0.2.1
6ffb5466 build(deps): bump github.com/docker/cli
dc42456f build(deps): bump github.com/docker/docker
d4257170 build(deps): bump github.com/containerd/accelerated-container-image
9b8e1dd3 fix follow tail of rotate log
a3fdaafa fix: cleanup volume dir if create volume failed
27b8dd84 build(deps): bump github.com/klauspost/compress from 1.17.7 to 1.17.8
46acf060 build(deps): bump github.com/rootless-containers/bypass4netns
b5117a23 Rationalise build constraints for Go 1.19 onwards
5fac99b3 Implement autodetection of Windows buildkitd socket
6e6aa4a9 Enable building on Windows hosts
0d75e34f Remove unused defaults.BuildKitHost
62e031c6 bypass4netns: allow ignoring bind
f802ba87 update bypass4netns (0.4.1)
2c446522 build(deps): bump github.com/containerd/accelerated-container-image
2cfff270 update containerd (1.7.15)
a1fd53b7 build(deps): bump github.com/containerd/containerd from 1.7.14 to 1.7.15
858fa60e build(deps): bump golang.org/x/sync from 0.6.0 to 0.7.0
6b8a1c63 build(deps): bump golang.org/x/net from 0.23.0 to 0.24.0
af4c470d build(deps): bump golang.org/x/crypto from 0.21.0 to 0.22.0
cc495f2a build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
fc4c8e78 annotations: add `nerdctl/bypass4netns-ignore-subnets` (`[]string`)
f42ab2ff Implement `nerdctl run --annotation` (introduced in Docker v24)
9ba9ddca update BuildKit (0.13.1)
6f83a71d build(deps): bump github.com/Microsoft/hcsshim from 0.12.1 to 0.12.2
da2f576f build(deps): bump github.com/docker/docker
3809ec53 CI: FreeBSD: use Go 1.22
c0d7b734 build(deps): bump github.com/containerd/nydus-snapshotter
ea7769fc build(deps): bump github.com/Microsoft/hcsshim from 0.12.0 to 0.12.1
e7608c8b deflake TestImageConvertEStargz
c1c7e251 not check return of rmi in pushImageToIPFS
70ee810a pkg/api/types: remove dependencies on nerdctl
8ae661e9 build(deps): bump github.com/pelletier/go-toml/v2 from 2.1.1 to 2.2.0
2122a714 update cosign image to latest release
3b12a202 build(deps): bump docker/build-push-action from 5.2.0 to 5.3.0
1c371393 update imgcrypt (1.1.10)
9d60dbb0 build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0
0f9c8de4 feat(compose_up): add --abort-on-container-exit flag
d83f9f13 build(deps): bump github.com/containerd/imgcrypt from 1.1.9 to 1.1.10
5e785705 build(deps): bump github.com/containerd/accelerated-container-image
8c75ca70 build(deps): bump docker/login-action from 3.0.0 to 3.1.0
ee2f8d64 update Kubo (0.27.0)
4917c16a update RootlessKit (2.0.2)
4dbac7f8 update CNI plugins (1.4.1)
046bfc06 build(deps): bump github.com/containernetworking/plugins
6958d07c build(deps): bump actions/checkout from 4.1.1 to 4.1.2
0ec5c7e9 refactor: replace os.MkdirTemp with t.TempDir with cleanup
4d9abe27 update containerd (1.7.14),(1.6.30)
533f16b9 CI: update FreeBSD to 14
258362b8 build(deps): bump github.com/containerd/containerd from 1.7.13 to 1.7.14
bc8450e8 feat: add extra contexts to buildctl call #2835
341c60d4 update BuildKit (0.13.0)
ca56bc42 build(deps): bump docker/build-push-action from 5.1.0 to 5.2.0
41b669d7 feat: create network cleanup function for kill and stop cmd
da007062 build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3
62d013c1 build(deps): bump github.com/rootless-containers/rootlesskit/v2
74e27374 build(deps): bump github.com/Microsoft/hcsshim from 0.11.4 to 0.12.0
26c02362 chore: remove useless error check
f853ab85 Enhance default platform comparision for image shareablity #2810
45b86c21 build(deps): bump golang.org/x/net from 0.21.0 to 0.22.0
be006100 build(deps): bump golang.org/x/crypto from 0.20.0 to 0.21.0
f1595262 Use json marshal/unmarshal to copy
3d28dbf6 fix: typos
772d4791 build(deps): bump github.com/containerd/accelerated-container-image
d94c8f59 build(deps): bump golang.org/x/crypto from 0.19.0 to 0.20.0
18f29fb0 fix: add onstartcontainer hook
d8412eed build(deps): bump github.com/containerd/nydus-snapshotter
261bd97c build(deps): bump github.com/klauspost/compress from 1.17.6 to 1.17.7
41b83493 Rootlesskit Network Design
8d840dae doc: should use master tag for binfmt
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping crun to version 1.19.1-13-g6f010b5f, which comprises the following commits:
25efd10a Remove surplus ENOENT error check
99f2824f utils: return error from set_home_env() if the user was not found
3158e491 criu: improve error handling for CRIU function calls
3cd9c2c9 criu: do not set network_lock if not specified
a542ecc7 github: enable unprivileged userns
38122ac9 test: fix compiler warnings
ec5947ce TMT: Add sanity tests from c9s downstream
d08e304a Packit: Remove RHEL jobs
3e32a70c NEWS: tag 1.19.1
8b972be9 linux: fix a hang if there are no reads from the tty
e50e47ca libcrun: add ring buffer implementation
20ec0982 utils: extend epoll_helper to monitor writeable fds
77a72bdf utils: use bool for set_blocking_fd()
5f9ca9eb utils: skip copy_file_range if not usable
e2380490 tests: adjust test to upstream code
d7933486 build-aux: use an init process for the nix container
0ec1522b nix: update packages list
9b014718 Generated crun.1
d700d9db Add missing periods at the end of sentence
1832c170 linux: remove tmpmount workaround
9e3615a4 ci: build tests_libcrun_fuzzer before fuzzing
6b2e6193 build: use libtool to create libcrun_testing
3c5292b2 build: don't compile tests during normal build
db31c42a NEWS: tag 1.19
c4f8c87a checkpoint/restore: allow passing network lock method to libcriu
1942efc9 Handle case where cgroup v1 freezer is disabled
b366a785 wamr: revitalize wamr handler
21219504 cgroup, systemd: do not override devices on update
d1531073 error: 'CHAR_BIT' undeclared. fix compile failure with musl libc
5d66b309 build: Don't build cloned_binary as part of crun
fd69065d test: add new test for exec-cpu-affinity
b941d6c5 linux: move reset cpu affinity to scheduler
ef33259c linux: honor exec cpu affinity mask
047b7485 src: move cpuset_string_to_bitmask to utils
2c8088c4 libocispec: sync
42b959b5 container: initialize max caps before accessing process block
46bd62b1 cgroup: do not stop process on exec
19bbd8da utils: silence compiler warning
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping cri-o to version v1.31.4, which comprises the following commits:
8aa8c7e42 server: fix panic when default annotations are specified
88939baf2 version: bump to 1.31.4
284eb9327 config: add default_annotations
26bb3c96a Allow to remove pod sandbox on netns removal
cf112c696 Disable actuated runners
0b449cebc version: bump to 1.31.3
ee2d73252 Fix container restore lint report
6aa6cbcb4 Only restore container if all bind mounts are defined
165504928 Add `--pull-progress-timeout` / `pull_progress_timeout` option
d3f39eaa9 RuntimeHandler inheritance bug-fix
c65eb63b1 RuntimeHandler inheritance
c918a52d1 nix: don't build gpgme with `--enable-fixed-path`
677d91db3 version: bump to 1.31.2
f334f80c3 config: fix validation of allowed annotations
e0fe09609 Cherry-pick changes from containers/storage/pull#2134
cae8a3ab5 Cherry-pick changes from containers/common/pull#2185
e9deb6cde version: bump to 1.31.1
b6226b8a3 config: pass down PullOptions from the storage configuration
a673a7ca4 test: fix empty pinned_images test
7d4f035b5 tests: improve wait_for_log to allow multiple calls for the same message
2d27da0f3 image: serialize RegistryImageReferences when checking signatures
4b55a1107 Pin govulncheck to specific version to match Go version requirements
abb6a439d Use nanosecond timestamp for evented pleg pod status
fbd73b339 test: fix CR test by unsetting SIGNATURE_POLICY
a379923f5 server/restore: mark signature validation incompatible with restore
1a9d36494 server: document difference between userRequestedImage/userSpecifiedImage
50075247a server: use imageID instead of a random digest
0dd7eaffe server: only check signatures if namespaced policy is defined
ec8545d2d server: use cached restore value instead of recomputing
7a67eb72b store canonical ref differently
1444e69d9 test: fix crun-wasm test to handle requirement of user_specified_image
6edecf30e Image verificaiton for namespaced policies
9d3da707d Revert "contrib: temporarily move to crun 1.15 to fix CI"
e54ea3407 Fix invalid syntax in test workflow
fc262592f ci: run setup commands for e2e because they weren't done for some reason
d24529f7d build(deps): bump the actions group with 2 updates
efa1690c0 test: setup runtimes correctly so drop-ins work
bfc509cd7 test: comment out ARM image digest as it's unused
45ee51d01 test: update memory limit tests to not be in image.bats
29803ef24 test: fix config test
fe5bdeb3b gh actions: set crun instead of runc
f174d5a3d oci: allow double delete
624b15b9c gh actions: spoof crun for unit tests on arm64
afe78eb68 config: refactor min memory handling a bit
d2cb4e4ae config: update min memory to account for crun
5e21d495c config: default to crun
c32f7b02a build(deps): bump crate-ci/typos in the actions group
2b8dfdf48 build(deps): bump github.com/opencontainers/runc in the gomod group
3fe3b4e81 build(deps): bump peter-evans/create-pull-request in the actions group
d23951276 refactor seccomp
f81fea25f Modify test case to verify blocking of clone
7d0d6ad49 Filter namespace creation args to clone in default seccomp policy
cc8b071b1 build(deps): bump the gomod group across 1 directory with 3 updates
f7fee64a7 build(deps): bump the actions group with 2 updates
dd0cb08d8 Update golangci-lint to v1.60.3 for better go 1.23 compatibility
1f212dc7b Add Makefile help
9ad5c5aed Add additional bind mount to image volumes
ff73a7a0b Fix Makefile `$PWD` when running using `sudo`
2c37d262f Make `prettier` target run in a privileged container
33fb00528 Fix lint
b1bf40749 build(deps): bump google-github-actions/upload-cloud-storage
1beb59cb8 build(deps): bump the gomod group across 1 directory with 8 updates
ba846966f config: add /dev/net/tun to default allowed devices
3ef7f9de4 build(deps): bump crate-ci/typos in the actions group
f7e8682ef Add `{verify-}prettier` makefile targets
53d958fa3 Change default tracing endpoint to 127.0.0.1
9d1a5f437 build(deps): bump crate-ci/typos in the actions group
13e701563 build(deps): bump github.com/onsi/ginkgo/v2 in the gomod group
e83973d7d Run prettier on supported files
8269859fd Make static build a GitHub action matrix
09bb40438 Change profile endpoint to 127.0.0.1
5f95cb5ce build(deps): bump the gomod group across 1 directory with 3 updates
aa1ca0d47 build(deps): bump google-github-actions/auth in the actions group
f83861120 build(deps): bump google-github-actions/upload-cloud-storage
a8950ce30 Pass around more contexts in hooks and metrics
7472e56e9 Trigger `test` workflow after release branch fast forward
6fb6e8d16 Run the runtime RuntimeType validation first
dff5305bb Avoid potential reallocs by pre-sizing some slices
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping containerd to version v2.0.1-6-gce560bb24, which comprises the following commits:
f34147772 downgrade go-difflib and go-spew to tagged releases
dca769485 chore: add a build tag to disable containerd plugin import
5942b3fcb Update golangci to 1.60.3
b0ece5dc5 Prepare release notes for v2.0.1
fe6957084 build(deps): bump actions/attest-build-provenance from 1.4.4 to 2.1.0
eb2ce6882 update xx to v1.6.1 for compatibility with alpine 3.21 and file 5.46+
018d83650 internal/cri: should not apply IoOwner options
5eb7995a9 feat: update go-cni version for CNI STATUS
a53eff53d update runc binary to v1.2.3
a2302ea89 Add integration test for custom configuration
be5eda069 complete cri grpc config migration
44cdca68b ctr pull unpack for default platform using transfer service
62b790bfa CI: update Fedora to 41
290e8bc70 update to go1.23.4 / go1.22.10
3ba2df924 fix panic due to nil dereference cgroups v2
73f57acb0 Update differ to handle zstd media types
34a45cab2 Publish attestation as release artifact
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
| |
Bumping conmon to version v2.1.3-168-gaee638f, which comprises the following commits:
02c6ea6 Avoid bogus journal filling errors
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping buildah to version v1.37.5-4-gc0602013a, which comprises the following commits:
e4deb56f6 [release-1.37][CI:DOCS] touchup changelog
f31d99d24 Update CHANGELOG.md
5fd40b989 [release-1.37] Bump Buildah to v1.37.5
b949f6572 Bump the containers/storage library to v1.55.1
cffa820dc Properly validate cache IDs and sources
93986b888 Packit: constrain koji job to fedora package to avoid dupes
9dfacbb47 Tag v1.37.4
b55cbb8eb vendor: update c/common to v0.60.4
e289e285d CVE-2024-9407: validate "bind-propagation" flag settings
956095ee1 [release-1.37] Bump to Buildah v1.37.3
8165aae9e Do not error on trying to write IMA xattr as rootless
a47261ec1 imagebuildah.StageExecutor: clean up volumes/volumeCache
7b28b9e4e `manifest add --artifact`: handle multiple values
8fb01fbc9 Packit: split out ELN jobs and reuse fedora downstream targets
a8f37392f Packit: Enable sidetags for bodhi updates
1c0e94ec6 Use Epoch: 2 and respect the epoch in dependencies.
eadda3bc0 [release-1.37] Bump Buildah to v1.37.2
a18969dea [release-1.37] Bump c/common to v0.60.2, c/image to v5.32.2
67cc51e90 [release-1.37] Bump to Buildah v1.37.1
02313cf69 [release-1.37] Bump c/common v0.60.1, c/image v5.32.1
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping moby to version v27.5.0-rc.2, which comprises the following commits:
a167bc5c9a libnetwork/drivers/windows: fix error-matching for hcsshim "not found"
bdd3a95a13 pkg/fileutils: deprecate GetTotalUsedFds
5f81af6eaa libnetwork/drivers/bridge: format errors with '%v' for consistency
0f45f60e9e libnetwork/drivers/windows: fix non-constant format string
17e8cb2b06 distribution: fix non-constant format string
60f9e333b6 daemon: adjust tests for changes in go1.24 JSON errors
95b2f2ed49 Restore labels when re-creating Windows networks
623af65208 Use the roundtripper during build
771d1dc44e docs/api: allow for an empty string for Isolation (api v1.25-v1.47)
68b39f825d docs: Update example section for SwarmJoinRequest
4767dbd713 api: Allow for an empty string for Isolation in Swagger specs This adds an empty string as a valid option for the Isolation field when inspecting a container. On non windows systems, this is always empty, so no error should be returned. Fixes #47452
4359c8b08e vendor: update buildkit to v0.18.2
bbd14fc508 vendor: update buildkit to v0.18.1
fd86c39cc3 vendor: update buildkit to v0.18.0
1fd14d845f vendor: update buildkit to v0.18.0-rc2
68b0c87e05 vendor: github.com/moby/buildkit 94d0f6ed85e5 (master / v0.18.0-rc.2)
74600d8425 vendor: update buildkit to v0.18.0-rc1
4830f6db66 builder: fall back to defaultKeepStorage if keepStorage is unset for GC policy
0e43d1f642 vendor: github.com/containerd/containerd v1.7.23, hcsshim v0.12.8
800d735171 vendor: github.com/Microsoft/hcsshim v0.12.7
a57c1848b6 vendor: sigs.k8s.io/yaml v1.4.0
26eeb6e414 vendor: github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161
f6f7c9f231 vendor.mod: github.com/microsoft/hcsshim v0.12.5
bdecc9d58e pkg/reexec: deprecate and migrate to github.com/moby/sys/reexec
46a8e5f8c5 pkg/reexec: Command: separate public API from implementation
d175e4f1f1 pkg/reexec: make platform-agnostic (again)
ed5c0a79e7 pkg/reexec: use const for name of test binary
4bf113f9bd all: Remove redundant `units` alias for `go-units`
7a512a9531 vendor: go.opentelemetry.io/contrib/instrumentation/xxx v0.53.0
cf4e196e77 vendor: go.opentelemetry.io/otel v1.28.0
2a3cc83f36 vendor: google.golang.org/genproto/googleapis/api f6361c86f094
4141379d07 Discard ErrDumpInterrupted and return data after maxRetries
4c50153e2e Fix comments
c5e72db8e8 vendor: github.com/vishvananda/netlink v1.3.1-0.20240922070040-084abd93d350
14b30aeb61 Add linting rules to spot use of un-wrapped netlink functions.
87fc62a648 Fix merge problem
3ca9a3be70 Add nlutil functions to retry on netlink EINTR
4729e446ce vendor: github.com/vishvananda/netlink v1.3.0
cbe4488a6b vendor: github.com/vishvananda/netlink v1.2.1
eda0a20deb libnetwork/iptables: deprecate Passthrough
b51622dd0d libnet/iptables: deprecate type IPV
08de719cf2 libnetwork/drivers/bridge: setupIPChains: fix defer checking wrong err
6855ca1e62 integration-cli: don't skip AppArmor tests on SLES
224b30556d docs/api: document correct case for Api-Version header
5b92b3e7e0 Accurately reflect the canonical casing of `API-Version` and `OS-Type` headers
1df9e896f2 pkg/system: deprecate types and functions that are only used internally
3a1e495a0f daemon: info: remove bridge-nf-call-iptables / ip6tables warnings
4082abad8b Dockerfile: update runc binary to v1.2.3
a379aae924 man: vendor: github.com/cpuguy83/go-md2man v2.0.5
c3968c6ab7 update xx to v1.6.1 for compatibility with alpine 3.21
2e6ca227cf otel: Use non-noop tracer provider for grpc
a5f86f9279 integration/build_traces: Create own tracer provider
3a05c5dcad otel: Avoid excessive memory allocations if not configured
adb8773adb Jenkins: don't modprobe kernel module
ff176d42d5 Don't try to modprobe ip6_tables in the moby dev container
86126b9af1 Try to load kernel module ip6_tables, when necessary.
58318d26fc Use ioctl to try to trigger kernel module loads
4775621ab6 Dockerd rootless: make {/etc,/var/run}/cdi available
0e34b3956b update to go1.22.10
7919b806e7 [27.x] vendor: github.com/moby/buildkit v0.17.3
525b929947 registry: deprecate RepositoryInfo.Class
d6d43b2912 c8d/tag: Don't log a warning if the source image is not dangling
e3564b52af Jenkinsfile: modprobe br_netfilter
46f6b9a259 integration: add wait
18aa104041 daemon/graphdriver/zfs: ignore non-existent dataset on removal
052f7d6461 Fix br_netfilter module loading logic
151c7565a9 Remove buildkit init timeout
465eb6aee2 vendor: github.com/cenkalti/backoff/v4 v4.3.0
e4d5bae9c5 vendor: github.com/go-logr/logr v1.4.2
339572db5d vendor: github.com/prometheus/client_golang v1.20.5
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
| |
Without these (and their associated packageconfig options) docker
may build, but it won't run correctly.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
| |
Add missing runtime dependencies on python modules asyncio, json and
getpass provided by unixadmin.
Sort the dependencies alphabetically while at it.
Signed-off-by: Leonard Anderweit <l.anderweit@phytec.de>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping crun to version 1.18.2-17-g52ed5880, which comprises the following commits:
fd69065d test: add new test for exec-cpu-affinity
b941d6c5 linux: move reset cpu affinity to scheduler
ef33259c linux: honor exec cpu affinity mask
047b7485 src: move cpuset_string_to_bitmask to utils
2c8088c4 libocispec: sync
42b959b5 container: initialize max caps before accessing process block
46bd62b1 cgroup: do not stop process on exec
19bbd8da utils: silence compiler warning
8a0ee4b5 src: use mount API to self-clone
85d4db3d crun: check for integer overflow
10b2146e linux: add check before deref
2525752d cgroup: drop unuseful check
1ae190b0 src: run make clang-format
00ab38af NEWS: tag 1.18.2
5bc6b50e cgroup, systemd: fix first rule selection for systemd
c41f034f NEWS: tag 1.18.1
6628d7a3 utils: check for snprintf truncation
7c4a3f9c cgroup: skip DevicePolicy if all devices are allowed
ef60ec90 libcrun: deprecate cgroup v1
77e4233a cgroup, systemd: ignore rules before a default deny one
8a30a57a cgroup: ignore redundant deny dev cgroup rules
369dd95b CONTRIBUTING.md: new file
3647ecab linux: copy map_file before tokenizing in uidgidmap_helper
8656b254 NEWS: tag 1.18
bf0a3516 rpm: use embedded yajl in RHEL builds
41461290 crun.1.md: add lsm-profile and lsm-mount-context
ed642593 criu: load lsm functions
ce89aa66 restore: add lsm-mount-context option
9efd6a87 restore: add lsm-profile option
aee13711 github: update run-on-arch-action
c4a65aad cgroup: split lines when writing raw unified files
dd7adb22 cgroup: write_cgroup_file_or_alias uses write_cgroup_file
22b018d0 cgroup: convert block_io devices to IODeviceWeight
c7745e9a cgroup, systemd: add support for IODeviceWeight
8e3e693e cgroup: refactor handling of io.weight
7d0e2cdb cgroup: report errors if value contains not parsed data
efae52ab cgroup: add support for the misc controller
d55194b2 cgroup systemd: ignore unsupported properties
500cf802 cgroup, systemd: honor cpu.idle
5f64da6a linux: pass down state_root to the cgroup handler
80d9677b cgroup, systemd: honor memory.zswap.max
01fa4993 cgroup: specify devices rules to systemd
667442e4 cgroup: move standard devs definition in a common place
335d8cfb cgroup: specify TasksMax to systemd
f6d8373f cgroup: specify MemorySwapMax to systemd
1a04566d cgroup: specify MemoryLow|MemoryHigh|MemoryMin to systemd
8d90eb3a cgroup: use macro to refactor common pattern
34061ab5 add duplicate namespace detection
b29ccd7e cgroup: rename function
af034b91 cgroup: special handle value "max"
2825a579 cgroup: set io weight on systemd owned cgroup
6cf5324b Packit: constrain koji and bodhi jobs to the fedora package
7140aea1 nix: replace gitMinimal with git
27b5a2f6 Fix running on kernel without user namespaces
b5ff44f2 nix: update list of packages
3b40d773 build: specify --extra-experimental-features to nix
da616875 release.sh: update nix image
dee824e6 Fix segfault in `crun features`
4ea62f25 Disable criu support on riscv64
Bumping libocispec to latest, which comprises the following commits:
ed23e6a runtime-spec: sync from upstream
412ce10 image-spec: sync from upstream
4b8feed common: make sizeof the last argument for calloc
Bumping image-spec to version v1.1.0-44-gc66e811, which comprises the following commits:
40d3096 add example using .wh. and move opaque example to its section
cee95e9 Ignore uname/gname where uid/gid are supported
d44515e Changes requested from review
5db69d9 Feat: Pin external references on a release
76b8bae README: update runtime-spec links to use main branch
716f83b Implementations should support zstd
Bumping runtime-spec to version v1.2.0-23-g9505701, which comprises the following commits:
9ceba9f update http links to https
faf82be doc: fix the invalid hyperlink naming-a-volume
adaa517 config: simplify final CPU affinity rule
119ae42 Add CPU affinity to executed processes
2149fb5 config-linux: describe the format of cpus and mems
c6af124 ci: remove redundunt actions
d4aa6d8 chore: format JSON file `make -C schema fmt`
b983fbf CODEOWNERS: remove vbatts
bf698d0 MAINTAINERS: move vbatts to EMERITUS
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping moby to version v27.4.0-rc.2-25-g33b6b826c2, which comprises the following commits:
151c7565a9 Remove buildkit init timeout
1abc35f098 Add label on PrepareSnapshot to warn about non-expiring leases
1d1da55382 Update containerd image builder to use lease prune label
a3afccd409 Fix lease management during image operations
33e5f87d0f [27.x] vendor: github.com/moby/buildkit 80e01a9dc7c1 (v0.17.3-dev)
752c0453d6 vendor: github.com/moby/buildkit v0.17.2
6cab48bd9b vendor: github.com/containerd/typeurl v2.2.3
a64812939f Update containerd to v1.7.24
179c7c7596 vendor: github.com/tonistiigi/go-actions-cache 394979b8119e
7f9c5b278a vendor: resenje.org/singleflight v0.4.3
b90c6e922c vendor: github.com/containerd/continuity v0.4.5
e956d4a370 Dockerfile: update to runc v1.2.2
b888333fe1 Dockerfile: update containerd to v1.7.24
6b04fcf560 vendor: github.com/golang-jwt/jwt/v4@v4.5.1
0f0b83a00b vendor: google.golang.org/grpc v1.66.3
b859373da2 vendor: tags.cncf.io/container-device-interface v0.8.0
2f816b2596 [27.x] daemon/containerd: add missing go:build tag
3e03c979da update go:build tags to use go1.22
346ac21032 daemon/logger/loggerutils: add //go:build directives to prevent downgrading to go1.16
f54e5b0b19 libnetwork/networkdb: add //go:build directives to prevent downgrading to go1.16
6ec5197103 [27.x] vendor: github.com/containerd/containerd v1.7.23
31c8d23e7e Dockerfile: update compose to v2.30.3
2ee3796e3f Dockerfile: update buildx to v0.18.0
2acf9893c6 Increase test handler sleep, replace deprecated assert
edfb2048ac deprecate pkg/platform and move internal
5ab7960b46 logger/journald: plumb contexts into reader
857fc4730c logfile: Close reader when caller cancels
a7badb2bb5 Logfile: Add tracing spans
d48c403efa Logfile: skip files that are corrupted
c9a7391911 Refactor logfile reads
49f5431807 Fix time comparison in sharedtemp implementation
173a9f2091 libnet: don't put external DNS answers in OTel spans
15b69c4200 vendor: update buildkit to v0.17.1
3280e50f65 vendor: update buildkit to v0.17.0
00774deb96 vendor: update buildkit to v0.17.0-rc2
0a67347003 vendor: google.golang.org/protobuf v1.34.2
033bd73bba [27.x] pin github.com/Microsoft/hcsshim to v0.11.x
0e4ab47f23 update to go1.22.9
d3b9ec90ba api/swagger: Improve description for platform in images/push
c902e1a187 c8d/inspect: Fix duplicate RepoDigests
b089f36796 volume: VolumesService.Create: fix log-level for debug logs
afd7c9913f client: prevent idle connections leaking FDs
de0135965e c8d/httpfallback: Handle connection errors
ddb56edd00 volume/mounts: fix anonymous volume not being labeled
b7bc29af50 daemon: use OwnCgroupPath in withCgroups
1e11f2a1c0 daemon: deprecate Daemon.IsPaused
0183f5dd13 daemon: deprecate Daemon.Exists
749f9ccee4 Fix: setup user chains even if there are running containers
8deb557451 api: GET /images/json: preserve original manifest order
e4c067af91 gha: shorter time limits for smoke, validate
525b19ff04 gha: use "ubuntu-24.04" instead of "ubuntu-latest"
ceb41b83f3 gha: dco: small tweaks to running the container
2690b70a09 gha: dco: update ALPINE_VERSION to 3.20
f53efc688f gha: build (binary), build (dynbinary): limit to 20 minutes
166565e3ac gha: dco: limit to 10 minutes
57a72c3c9d container: deprecate ErrNameReserved, ErrNameNotReserved
8804551902 container: viewDB.ReserveName, view.GetID: return errdefs errors
202aac0eb4 container: viewDB.withTxn: don't wrap errors
be8be11708 container: TestNames: don't string-match error assertions
bedbe333bf dockerd-rootless-setuptool.sh: let --force ignore smoke test errors
ffb5bd905a cmd/dockerd: Add workaround for OTEL meter leak
12cc7f7696 daemon/containerd: getPushDescriptor: fix formatting of platform in errors
01412dacf7 daemon/containerd: touch-up platform not found error
3c93981344 images: GetImage: touch-up error message for missing platform
03225b1a41 PushImage: remove misleading error about --platform without containerd
5376990d4d build: create distinct history db for each store
34d2e5e7e6 vendor: github.com/moby/swarmkit/v2 v2.0.0-20241017191044-e8ecf83ee08e
0f8fc3105e Enable bridge netfiltering if userland-proxy=false
505c4c32be Set NODAD on bridge IPv6 addresses
c00b3108e5 docs: api: document w (width) and h (height) query params as required
e39ced5c00 api: document w (width) and h (height) query params as required
3c258e6011 pkg/authorization: update link to API documentation
29f0dcd902 client: update link to API documentation
21c974b281 docs/api: version-history: update documentation links
0bc91d5dc8 gha: restrict cross and bin-image to 20 minutes
d755573aba vendor: github.com/moby/buildkit v0.17.0-rc1
32afa26719 gha: add guardrails timeouts on all jobs
8dc3ce5606 integration/build: remove TestBuildWithSession, and fsutil direct dependency
136fdfcdfc vendor: google.golang.org/grpc v1.66.2
6eed19d656 vendor: google.golang.org/protobuf v1.34.1
f29cc7c2cf vendor: github.com/cespare/xxhash/v2 v2.3.0
5f92ab397b vendor: golang.org/x/tools v0.25.0
9af7d06698 vendor: golang.org/x/mod v0.21.0
8fef24d9d4 vendor: golang.org/x/net v0.29.0
efc5252041 vendor: golang.org/x/crypto v0.27.0
a8e92fa662 vendor: golang.org/x/text v0.18.0
80cd75d7d5 vendor: golang.org/x/sys v0.25.0
a2a544202b vendor: go.etcd.io/bbolt v1.3.11
418a79d51b gha: buildkit: make sure expected Go version is installed
43580ccbc1 update to go1.22.8
af8b897560 Dockerfile: update compose to v2.29.7
d91a922ef3 Dockerfile: update docker CLI to v27.3.1
0138291345 gha: add CodeQL Analysis workflow
a6b772b24c gha: govulncheck: make sure read permissions are set
cd21af7e41 Do not DNAT packets from WSL2's loopback0
5c499fc4b2 Only enable bridge netfiltering when needed
8adc8e405d Dockerfile: update compose to v2.29.4
576fc88b1a Dockerfile: update buildx to v0.17.1
e928a0d22d man: dockerd: add description for --log-format option
82cf138590 internal/opts: SetOpts: invalidate empty option-names
487a2f5314 internal/opts: SetOpts.Set: remove redundant var assignment
6d4a507acc internal/opts: SetOpts,NamedSetOpts: test for optional value
bae46f6463 man: dockerd: value is optional for --feature flag
176e04d73b man: fix duplicate word in --feature flag description
06c9c72269 Update dlv in the dev-env
15fbba2169 man: update dockerd man-page to include --feature flag
b262a95d67 c8d/prune: Keep deletion order stable
39c17094b0 c8d/prune: Add OTEL spans
343800d7be adjust TestPruneDontDeleteUsedImage for 27.x branch
95ffe8493e c8d/prune: Keep the last tagged image instead of creating dangling image
c40cd54593 Add feature to daemon flags
dbee7b16df TestIPRangeAt64BitLimit: remove colon after XFAIL to help grepping
bd71b5d319 Explicitly disable nvidia device injection for --gpus=0
a5478dde0e Dockerfile: update RootlessKit to v2.3.1
80d0013217 Fix typos
ce86fade0d Dockerfile: update compose to v2.29.2
682b96c479 Dockerfile: update buildx to 0.17.0
c3aaaf2be0 Dockerfile: update docker CLI to v27.2.1
ce07360a1c vendor: update buildkit to v0.16.0
ab99508c07 docs/api: update deprecation version for erroneous fields (v1.46, v1.47)
c7a8942d6d api/swagger: update deprecation version for erroneous fields
57ba0b05e6 vendor: update buildkit to v0.16.0-rc2
16bf28ec2d test: update since session signature has changed
a0650bf67c vendor: update buildkit to v0.16.0-rc1
f7ea6bb4d9 vendor.mod: golang.org/x/net v0.28.0, etc.
da2b59d3a2 vendor.mod: golang.org/x/time v0.6.0
3e60519c9c vendor.mod: golang.org/x/sys v0.24.0
e6a4c5f840 vendor.mod: golang.org/x/sync v0.8.0
2514b02677 vendor.mod: golang.org/x/mod v0.20.0
69f9ab2958 vendor.mod: drop direct dependency on golang.org/x/exp
70c8d41445 vendor: github.com/containerd/nydus-snapshotter v0.14.0
54e4cdc044 vendor: github.com/containerd/nydus-snapshotter v0.13.14
dca7a36092 vendor: google.golang.org/grpc v1.62.0
458110ccd0 vendor: golang.org/x/time v0.5.0
27b5c33847 vendor: github.com/moby/sys/sequential v0.6.0
6e77ead91e vendor: github.com/moby/sys/symlink v0.3.0
0890631ac7 vendor: github.com/moby/sys/signal v0.7.1
508173c39d vendor: github.com/moby/sys/mount v0.3.4
9b26c10e8b vendor: github.com/moby/sys/mountinfo v0.7.2
d3884731cd Dockerfile: update containerd binary to v1.7.22
cdbc2b6869 vendor: github.com/containerd/containerd v1.7.22
d0462c0e80 seccomp: add riscv64 mapping to seccomp_linux.go
fc774f6dc0 docs: api: fix documentation for image push endpoint (API v1.25-v1.47)
84d78a8ad5 api: swagger: fix documentation for image push endpoint
e16197e51d gha/bin-image: Also run on branches like `27.x`
37bf6e81f9 update to go1.22.7
3a4c589290 vendor: github.com/opencontainers/runc v1.1.14
10cf2d64b6 update runc binary to 1.1.14
84cfcb0893 docs/api: add documentation for API v1.47
edeb6ba9fb golangci-lint: temporarily disable G115: integer overflow conversion
adb0b8536d update golangci-lint to v1.60.2
01f7ec0f21 update to go1.22.6
442462ad4e hack/make/.binary: set CGO_LDFLAGS=-latomic for arm/v5
a3eca63b5b hack/make/.binary: set CCGO_CFLAGS=-Wno-atomic-alignment for arm/v5
d036255b69 c8d/pull: Same error message for non-matching platform
b9f56706c5 man: create parent directories in install recipe
12d4379ad1 c8d/list: Don't exclude non-container images
0fbb78c187 daemon: fix non-constant format string in call (govet)
2bc17a1e5c api/types: fix non-constant format string in call (govet)
fe01a5fc30 api/server/router: fix non-constant format string in call (govet)
bf7ca4dc4b container/stream: fix non-constant format string in call (govet)
405a163620 libnetwork/drivers/bridge: fix non-constant format string in call (govet)
812b97d559 volume/testutils: fix non-constant format string in call (govet)
c4eef2a58c builder/dockerfile: parseChownFlag: fix non-constant format string in call (govet)
8dec1f216f layer: ignore G602: slice index out of range (gosec)
068e82bdd2 internal/cleanups: fix non-constant format string in call (govet)
8ae439ddaa libnetwork/cnmallocator: fix non-constant format string in call (govet)
c27f7de662 cmd/dockerd: fix non-constant format string in call (govet)
ec8ff9cbbd libnetwork: fix non-constant format string in call (govet)
e5bc931f17 integration-cli: fix non-constant format string in call (govet)
6c3b1992d4 integration-cli: DockerSwarmSuite: rm redundant Fprintf, handle errors
83171f6b5a integration-cli: DockerNetworkSuite: rm redundant Fprintf, handle errors
4cfa21bb92 integration-cli: use erors.New() instead of fmt.Errorf
28bdd819d0 libnetwork: TestDNSOptions: remove redundant skip check
cb2e98cfbf integration-cli: remove redundant platform checks
875e8aeef2 vendor: github.com/containerd/containerd v1.7.21
1900e4d8eb Dockerfile: update containerd binary to v1.7.21 (static binaries and CI only)
ecd2b6ff09 c8d/image: Add `hostPlatformMatcher`
d5b03423d1 man: support bringing your own go-md2man
56c5c23114 man: build dockerd man pages using make
77b2eb5734 Removed all mentions of "please" from docs and messages
805becdc7e docs: add default-network-opt daemon option
a5828ac742 docs: remove devicemapper
f7246a0e2c man/dockerd.8: assorted formatting fixes
f110e779f6 man/dockerd.8: escape asterisks and underscores
edbcbf8da7 docs: update dockerd usage output for new proxy-options
b7cc16b0b0 Fix styling of arguments
ecbc4f05bb Fix the max-concurrent-downloads and max-concurrent-uploads configs documentation
43298ad298 docs: remove documentation about deprecated cluster-store
8cc7f26f56 Document `--validate` daemon option
255eaa6647 Update man-page source MarkDown to work with go-md2man v2
ee27f4cd7f docs: update for cgroup v2 and rootless
c1d3c952e7 docker run: specify cgroup namespace mode with --cgroupns
fc9029a2e2 daemon: document --max-download-attempts option
115b10a467 Update document links and title.
488872bcb4 Allow user to specify default address pools for docker networks This is separate commit for CLI files to address PR 36054
f623030fac Update docs and completion-scripts for deprecated features
ac7032bff9 Added docs for dockerd
161006302f fix a number of minor typos
a6de17d230 Introduce/document new IPC modes
6513e80c84 docs: add documentation for dm.libdm_log_level
3d917f3fd6 Restore dockerd man page
e854a5c201 c8d/pull: Replace pointer to interface with interface
ea58dab95e c8d/pull: Keep the replaced image as dangling
0a38589add c8d/load: Only unpack host platform images
7c069d3021 c8d/load: Don't fail whole operation if unpack failed
5002faebe8 integration/TestAPIImagesListManifests: Check `Containers`
a15a309832 c8d/list: Update benchmark to also have containers
fd5cede287 c8d/list: Fix race condition when traversing containers
65c4e49aff govulncheck to report known vulnerabilities
7ebb277873 Dockerfile: update xx to v1.5.0
ad5eb875d4 c8d/list: Don't require `opts.ContainerCount` for manifest containers
3d845e0e8c c8d/list: Add test for total and content size
3563a707d0 c8d/list: Fix `Total` size calculation
89757f83ff api/list: Expose manifests
bb2fec6425 api: Bump default version to 1.47
0f8fcec1d9 swagger: Disable ImageSummary model generation
1ec5e86154 api/types/registry: fix godoc, and add some doc-links
62f32e9a97 plugin: fix deprecation comments
830c76c6f2 vendor: update buildkit to v0.15.2
354bf75675 libcontainerd: gofumpt
4ab7d90669 pkg/plugins: gofumpt
c11b2d9c7d pkg/archive: gofumpt
ccdc79d55a libnetwork: gofumpt
35b1a30028 layer: gofumpt
9f63aa7435 internal: gofumpt
4d16ac993e integration: gofumpt
6d5266a650 integration-cli: gofumpt
4084dac566 daemon: gofumpt
c36ab4c2ca daemon/containerd: gofumpt
904867593b daemon/config: gofumpt
72876770d0 builder: gofumpt
e8109ee4da api/types: gofumpt
ed65e1224e api/server: gofumpt
d54aff9312 API 1.46: end per-interface sysctl migration in major release
8f12906274 Migrate per-endpoint sysctls until 28.0.0
c53be2f3d5 Allow --ip-range ending on a 64-bit boundary
fc0150b962 daemon/containerd: rm use of regexp
73c01d0b6a image/v1: rm regexp use
c93fe4a27d layer: rm regexp use
31459c8268 docs/api: swagger: fix x-nullable for SystemInfo.Containerd (api v1.46)
35d430c62e api/swagger: fix x-nullable for SystemInfo.Containerd
80a59c2f1a migrate to github.com/moby/sys/userns
e7fe276c00 update to go1.21.13
e8cd19e810 gha: set permissions to read-only by default
e0c52e0ba6 vendor: update buildkit to v0.15.1
efb67b16b0 api/server/router/grpc: NewRouter: set correct MaxRecvMsgSize, MaxSendMsgSize
f96e26f68d migrate to github.com/moby/sys/user/userns
78b59867f2 vendor: github.com/moby/sys/user v0.2.0
018137b01a vendor: github.com/gofrs/flock v0.12.1
650e06ac75 vendor: golang.org/x/sys v0.22.0
bfe5339c7e dockerd-rootless-setuptool.sh: move RootlessKit smoke test
99471ac2fe hack: explicitly control enabling the journald logging driver
b9b43b3bdf README: replace obsolete Docker EE mention
1bc907c97c vendor: github.com/containerd/containerd v1.7.20
1c0885d60d gha: check-pr-branch: fix branch check regression
ed83a9e3a1 update containerd binary to v1.7.20
422ef48c2f gha: check-pr-branch: verify major version only
c9d37a9198 [27.1] pkg/rootless/specconv: deprecate, and add temporary aliases
1f16a44b3d pkg/rootless/specconv: move to internal
c8f1317585 pkg/directory: deprecate, and move to internal
68587c38fe pkg/directory: fix comment, and remove import comments
d1ea2b1fec [27.1] pkg/containerfs: deprecate, and add temporary aliases
31c1b7dc17 pkg/containerfs: move to internal
6231ea4a34 pkg/containerfs: cleanup GoDoc, and make Windows a proper wrapper
dc33eb81d8 pkg/containerfs: remove CleanScopedPath and make it internal
bc6ae42031 Dockerfile: update compose to v2.29.0
af8866f324 Dockerfile: update buildx to v0.16.1
5e4ddd81a2 api/types/system: remove Info.ExecutionDriver
c7e4d181a1 vendor: cloud.google.com/go/logging v1.9.0
3d7e824bc2 vendor: golang.org/x/oauth2 v0.21.0
d66b76d2e6 vendor: cloud.google.com/go/compute/metadata v0.3.0
03dc388f63 c8d/build: Log `image tag` event when image was built with Buildkit
5ee23b6050 builder-next: Add ImageNamedByBuildkit callback
53c521a6b2 builder-next: Don't return error from exported callback
eccccd7577 Fix API version in TestSetInterfaceSysctl
d9e3d1b815 update containerd binary to v1.7.19
b91e20cc2e vendor: update buildkit to v0.15.0
505be6557b vendor: update buildkit to v0.15.0-rc2
b1613dc2a1 vendor: update buildkit to v0.15.0-rc1
52f6163746 vendor: golang.org/x/net v0.25.0
c70e404e9e vendor: golang.org/x/crypto v0.23.0
d7a3f01421 vendor: golang.org/x/text v0.15.0
0f2f9e0049 vendor: golang.org/x/sys v0.21.0
45a1c34202 vendor: github.com/klauspost/compress v1.17.9
7b31435cf8 Migrate to github.com/containerd/platforms module
99df4fee0b vendor: github.com/containerd/containerd v1.7.19
9f08d1e357 vendor: github.com/microsoft/hcsshim v0.11.7
d1bbb61844 If url includes scheme, urlPath will drop hostname, which would not match the auth check
0835eaa5a1 Authz plugin security fixes for 0-length content and path validation Signed-off-by: Jameson Hyde <jameson.hyde@docker.com>
b039de78d7 docs/api: Add missing `
7d99ebe418 rootless: add `Requires=dbus.socket`
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping libpod to version v5.3.1-5-gc2f09d78d5, which comprises the following commits:
0d22d7b74e Quadlet - Use = sign when setting the pull arg for build
62c096bbce win-installer test: revert to v5.3.0
7bf22277ca Bump to v5.3.2-dev
4cbdfde5d8 Bump to v5.3.1
50960afe33 Update release notes for v5.3.1
d26990702c Update windows installer tests
2739822424 Windows: don't install WSL/HyperV on update
a8d61c034b Switch to non-installing WSL by default
98353f27ed docs: add 5.3 as Reference version
4886a0ba64 only read ssh_config for non machine connections
93562b4955 ssh_config: allow IdentityFile file with tilde
28e7b239ba ssh_config: do not overwrite values from config file
c49944ea02 connection: ignore errors when parsing ssh_config
f7877bf9db spec: clamp rlimits in a userns
dcedf5f211 cirrus: set proper DEST_BRANCH for 5.3
a39a749ce3 libpod: addHosts() prevent nil deref
9a9f07aa4b Bump bundled krunkit to 0.1.4
5546dc6c20 fix podman machine init --ignition-path
8efa1c1075 Bump to v5.3.1-dev
874bf2c301 Bump to v5.3.0
2e3836d226 Update release notes for v5.3.0
31df1bb97c [v5.3] Bump to Buildah v1.38.0
9556882bbf [v5.3] Skip FIPS mode secrets run test
c6dd2c77ab [v5.3] Buildah treadmill tweaks
0710e83c41 test/buildah-bud: build new inet helper
d852c58d6c test/system: add regression test for TZDIR local issue
ac59fb9231 vendor latest c/{buildah,common,image,storage}
1f0e2db2a9 Reapply "CI: test nftables driver on fedora"
16acfd7edb Revert "cirrus: test only on f40/rawhide"
dc97a7e0de test f41 VMs
9e38b455e4 volume ls: fix race that caused it to fail
44df7344fe AdditionalSupport for SubPath volume mounts
17224fcb05 Bump to v5.3.0-dev
8469dcc4f0 Bump to v5.3.0-rc3
a18365c665 Update release notes for v5.3-rc3
10309bfb45 podman: update roadmap
b237b4dc2a libpod: journald do not lock thread
2597eeae70 Add key to control if a container can get started by its pod
c6be5a6684 Honor users requests in quadlet files
2c01264568 CI: systests: workaround for parallel podman-stop flake
528b085438 Fix inconsistent line ending in win-installer project
5ae5ab8c26 fix(deps): update module github.com/opencontainers/runc to v1.2.1
dbfc8cccda Quadlet - support image file based mount in container file
e6d987882e API: container logs flush status code
768ad8653a rework event code to improve API errors
e3abf5c9e8 events: remove memory eventer
6348778348 libpod: log file use Wait() over event API
0acd192b59 Makefile: vendor target should always remove toolchain
ef20e75a77 cirrus: check consitent vendoring in test/tools
f4ad93d5f6 test/tools/go.mod: remove toolchain
3f15f710ce fix(deps): update module github.com/shirou/gopsutil/v4 to v4.24.10
d8311353b9 fix(deps): update module github.com/onsi/gomega to v1.35.1
37c8e10031 doc: explain --interactive in more detail
cd1b6b7121 fix(deps): update golang.org/x/exp digest to f66d83c
2dff79bd2c fix(deps): update github.com/opencontainers/runtime-tools digest to 6c9570a
5722304613 fix(deps): update github.com/linuxkit/virtsock digest to cb6a20c
1e7593d17f Bump to v5.3.0-dev
ffad01fbc8 Bump to v5.3.0-rc2
b6919a5712 Update release notes for v5.3.0-rc2
314dece926 add default polling interval to Container.Wait
d633824a95 Instrument cleanup tracer to log weird volume removal flake
6b8e8cbbf7 make podman-clean-transient.service work as user
b455f94ca8 Add default remote socket path if empty
48a8a9c22c Use current user if no user specified
e523734ab6 Add support for ssh_config for connection
c98538db7d libpod: use pasta Setup() over Setup2()
c7ff3b75cb fix(deps): update module github.com/onsi/ginkgo/v2 to v2.21.0
5a1bc6126e fix(deps): update module github.com/onsi/gomega to v1.35.0
bd75a4e0e0 logformatter: add cleanup tracer log link
2a0a52469c docs: fix broken example
f4be5e34c2 docs: add missing swagger links for the stable branches
b9fed4fcf2 readthedocs: build extra formats
ce24ab0683 pkg/machine/e2e: remove debug
4a54fd8756 fix(docs): Integrate pasta in rootless tutorial
5f66277138 chore(deps): update dependency setuptools to ~=75.3.0
1f44d0f8b2 libpod: report cgroups deleted during Stat() call
9abc17f1e1 chore: fix some function names in comment
41a82c9a95 CI: parallelize 450-interactive system tests
10d056cc5e CI: parallelize 520-checkpoint tests
e6b7e4ff84 CI: make 070-build.bats use safe image names
64516e1b8f test/system: add podman network reload test to distro gating
743a0d49eb System tests: clean up unit file leaks
c0f4e2ce67 healthcheck: do not leak service on failed stop
6069cdda00 healthcheck: do not leak statup service
45e1ffb799 fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.8.0
afedb83917 Add Startup HealthCheck configuration to the podman inspect
d2ba730f33 buildah version display: use progress()
825eed4bde new showrun() for displaying and running shell commands
9db04e87b6 Buildah treadmill: redo the .cirrus.yml tweaks
a925c9f831 Buildah treadmill: more allow-empty options
ba8375c9e4 Buildah treadmill: improve test-failure instructions
ee9c681f31 Buildah treadmill: improve wording in test-fail instructions
eb90154975 doc: Remove whitespace before comma
da783f3f70 fix(deps): update module github.com/checkpoint-restore/checkpointctl to v1.3.0
0cdb9b3b22 ps: fix display of exposed ports
73fb6623cd ps: do not loop over port protocol
390aec18b2 readme: Add reference to pasta in the readme
5b131b8273 test/system: Fix spurious "duplicate tests" failures in pasta tests
6fd0e227b4 Improve "podman load - from URL"
77ef28c14f Try to repair c/storage after removing an additional image store
1d7ec1ef5f Use the config digest to compare images loaded/pulled using different methods
bf8f2b5551 Simplify the additional store test
3bc6072142 Fix the store choice in "podman pull image with additional store"
6a11e75c48 Bump to v5.3.0-dev
d306e80127 Bump to v5.3.0-rc1
23ab7b858a Set quota on volume root directory, not _data
1a5ff0765e fix(deps): update module github.com/opencontainers/runc to v1.2.0
94878af151 test: set soft ulimit
ef26488fd7 Vagrantfile: Delete
642b61a091 Enable pod restore with crun
2e94ca5816 vendor: update c/{buildah,common,image,storage}
fdc9feea0e Fix 330-corrupt-images.bats in composefs test runs
67e0fa8b89 quadlet: add default network dependencies to all units
57b022782b quadlet: ensure user units wait for the network
203ab6573b add new podman-user-wait-network-online.service
a6c4e00e9a contrib/systemd: switch user symlink for file symlinks
1462b52090 Makefile: remove some duplication from install.systemd
21d0711a02 contrib/systemd: move podman-auto-update units
9c6b1e20a3 quadlet: do not reject RemapUsers=keep-id as root
ada75c0bb8 test/e2e: test quadlet with and without --user
fa920f54c7 CI: e2e: fix checkpoint flake
fe96c843bf APIv2 test fix: image history
67e39c1ec5 pasta udp tests: new bytecheck helper
a92958eb0c Document packaging process
cf124ee1bb [skip-ci] RPM: remove dup Provides
927cb7624c Update dependency setuptools to ~=75.2.0
1ddb15c81f System tests: safer pause-image creation
40d4f7240b Update module github.com/opencontainers/selinux to v1.11.1
1227f19393 Added escaping to invoked powershell command for hyperv stubber.
b7b2ef48e8 use slices.Clone instead of assignment
768aaadca1 libpod API: only return exit code without conditions
b3302e8e18 Housekeeping: remove duplicates from success_task
1bf37eecf3 Thorough overhaul of CONTRIBUTING doc.
b0f2ebbe9d test/e2e: fix default signal exit code test
dc55b59987 Test new VM build
1b57dcab61 CI: fix changing-rootFsSize flake
feb46513f0 scp: add option types
06b470d79b Unlock mutex before returning from function
7ea6120794 Note in the README that we are moving to timed releases
5d10e6e16b cirrus: let tar extract figure out the compression
94dcf76eb2 Make error messages more descriptive
3a4c4468f2 Mention containers.conf settings for podman machine commands
7dc58c105b [skip-ci] Packit: re-enable CentOS Stream 10/Fedora ELN teasks"
3d57560a21 cmd: use logrus to print error
71d5ee0e04 podman: do not set rlimits to the default value
5ebba75dbd spec: always specify default rlimits
8896ace2a4 vendor: update containers/common
92a188ea38 Note in the README that we are moving to timed releases
7f836df303 Revert "CI: test nftables driver on fedora"
9e35fead03 cirrus: use zstd over bzip2 for repo archive
6e69978d2e cirrus: use shared repo_prep/repo_artifacts scripts
7eb4a6fe2b cirrus: speed up postbuild
04dffbc2c7 cirrus: change alt arch task to only compile binaries
9082a14d76 cirrus: run make with parallel jobs where useful
bc3db7c95b Makefile: allow man-page-check to be run in parallel
39963cc984 cirrus: use fastvm for builds
4e3a03795d test/e2e: skip some Containerized checkpoint tests
fe404959ed test: update timezone checks
a79fec5e98 cirrus: update CI images
f517e52167 test/e2e: try debug potential pasta issue
38803713d6 CI: quadlet system tests: use airgapped testimage
bac655a6b1 Allow removing implicit quadlet systemd dependencies
05a449c61e fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.4
b3829a2932 libpod API: make wait endpoint better against rm races
3215d5124f podman-remote run: improve how we get the exit code
3d1a4301af [skip-ci] Packit: constrain koji and bodhi jobs to fedora package to avoid dupes
e7833d52cf 055-rm test: clean up a test, and document
3cedd0c2b5 CI: remove skips for libkrun
858472aa83 Bump bundled krunkit to 0.1.3
43a4bddd10 fix(deps): update module google.golang.org/protobuf to v1.35.0
385e2ea650 fix(deps): update module golang.org/x/net to v0.30.0
45df394072 server: fix url parsing in info
b8dbe09f98 fix(deps): update module golang.org/x/tools to v0.26.0
e2e1996c6a Makefile: fix ginkgo FOCUS option
fbd9fe45cb fix(deps): update module golang.org/x/crypto to v0.28.0
d0cb62aacc podman-systemd.unit.5: adjust example options
374844817d docs: prefer --network to --net
1470961e6c fix(deps): update module golang.org/x/term to v0.25.0
567906ed5b fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.24
53785ed055 fix(deps): update module golang.org/x/sys to v0.26.0
505c585b49 OWNERS file audit and update
8061553c0f Exposed ports are only included when not --net=host
e46ae46f18 libpod: hasCurrentUserMapped checks for gid too
e948c4ed90 [CI:DOCS] Document TESTFLAGS in test README file
985b57d9f7 Validate the bind-propagation option to `--mount`
d8b26ac1b4 Fix typo in secret inspect examples
6f9cc3755a Mention `no_hosts` and `base_hosts_file` configs in CLI option docs
043b82ef59 Fixes for vendoring Buildah
83a0299309 vendor: update buildah to latest
23f256349b Makefile - silence skipped tests when focusing on a file
dde1c3d98c vendor: update to latest c/common
fc25a3a5fc Quadlet - prefer "param val" over "param=val" to allow env expansion
410537808e System tests: sdnotify: wait for socket file creation
28e01cc8cc Switch to moby/sys/capability
6a91149b53 platformInspectContainerHostConfig: rm dead code
b791dfb558 CI: require and test CI_DESIRED_NETWORK on RHEL
edc3dc5e11 Add ExposedPorts to Inspect's ContainerConfig
28d3775c4d fix(deps): update golang.org/x/exp digest to 701f63a
abc4cfb049 quadlet: allow variables in PublishPort
7cde3abd17 fix(deps): update module github.com/shirou/gopsutil/v4 to v4.24.9
8ef495594c fix(deps): update github.com/godbus/dbus/v5 digest to a817f3c
bb35ad1da4 Document that zstd:chunked is downgraded to zstd when encrypting
ce9716ee41 fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.3
ece76a2537 chore(deps): update dependency ubuntu to v24
b5e1863d1c rpm: do not load iptables modules on f41+
e07c31068f adding docs for network-cmd-path
a619c03eff Include exposed ports in inspect output when net=host
1dd90dbe20 feat(libpod): support kube play tar content-type (#24015)
1950555b26 podman mount: some better error wrapping
5c3019e028 podman mount: ignore ErrLayerUnknown
ebbec00b0d Quadlet - make sure the order of the UnitsDir is deterministic
f47abd8e1e packit: disable Centos Stream/fedora ELN teasks
5de7b7c3f3 libpod: remove shutdown.Unregister()
0bbef4b830 libpod: rework shutdown handler flow
2de82d523b libpod: ensure we are not killed during netns creation
27838b26d6 Update module github.com/moby/sys/capability to v0.3.0
6e4ef2c54d Update documentation of `--no-hosts`, `--hostname`, and `--name` CLI options
c67d8baeb6 Update documentation of `--add-host` CLI option
70c131ed68 System tests: set a default XDG_RUNTIME_DIR
e9b8564690 Modify machine "Remove machine" test
73cbc13190 CORS system test: clean up
de856dab99 Add --health-max-log-count, --health-max-log-size, --health-log-destination flags
7fbc6d9370 troubleshooting: adjust home path in tip 44
1f2658e0ef test/system: For pasta port forwarding tests don't bind socat server
24deec835c Update connection on removal
c709be3a29 Simplify `RemoveConnections`
9febd2c27a Move `DefaultMachineName` to `pkg/machine/define`
7f29233a3f vendor: update containers/image
c81c77109b vendor: update containers/storage
fd4c63838b CI: skip the flaking quadlet test
faf4604883 CI: make systemd tests parallel-safe (*)
09ba5db035 CI: run and collect cleanup tracer logs
0b59f67c3a add epbf program to trace podman cleanup errors
4be6bf2270 CI: parallelize logs test as much as possible
600634c62c CI: format test: use local registry if available
d92f2d39ee CI: make 700-play parallel-safe
62e5eb4734 docs: Fix missing negation
6ef0288ca6 bin/docker support warning message suppression from user config dir
6d4006b123 Update module github.com/docker/docker to v27.3.1+incompatible
133ea31ffb Quadlet - add full support for Symlinks
792796183f libpod: setupNetNS() correctly mount netns
f6bda786ed vendor latest c/common
7dccf8faee docs: remove usage of deprecated `--storage`
597773464c Update module github.com/docker/docker to v27.3.0+incompatible
a08ae98161 CI: Quadlet rootfs test: use container image as rootfs
9c51eead06 CI: system test registry: use --net=host
e3af5a38d3 CI: rm system test: bump grace period
3396dabdf3 CI: system tests: minor documentation on parallel
31cdf1197b fix typo in error message Fixes: containers/podman#24001
1d5c8ac18e CI: system tests: always create pause image
5e5c68ffbe CI: quadlet system test: be more forgiving
6dcda2196a vendor latest c/common
6fe832d5d6 CI: make 200-pod parallel-safe
d7335855d7 allow exposed sctp ports
755a06aa44 test/e2e: add netns leak check
2d469e517d test/system: netns leak check for rootless as well
2505381551 test/system: Improve TODO comments on IPv6 pasta custom DNS forward test
4919440428 test/system: Clarify "Local forwarder" pasta tests
63e286ac55 test/system: Simplify testing for nameserver connectivity
6c79fe292b test/system: Consolidate "External resolver" pasta tests
85045406b5 test/system: Move test for default forwarder into its own case
5468718f22 CI: make 090-events parallel-safe
8402b6535f Misc minor test fixes
7fcf94d7b5 Add network namespace leak check
b3da5be2b1 Add workaround for buildah parallel bug
5fc3de5583 registry: lock start attempts
bf6131780a Update system test template and README
6502e30cfd bats log: differentiate parallel tests from sequential
6b621d9571 ci: bump system tests to fastvm
bcffa9ce30 clean_setup: create pause image
812c7e9436 CI: make 012-manifest parallel-safe
00c13afcb9 podman-manifest-remove: update docs and help output
aa108924ea test/system: remove wait workaround
fbed3a01d2 wait: fix handling of multiple conditions with exited
e04668c8ca Match output of Compat Top API to Docker
d571ca6536 system test parallelization: enable two-pass approach
8d119f0c2d New VMs: test crun 1.17
a5e9b4d126 libpod: hides env secrets from container inspect
111a4bbe71 CI: e2e: workaround for events out-of-sequence flake
49a07fce49 update golangci-lint to 1.61.0
432325236b libpod: convert owner IDs only with :idmap
f4d0e124d6 Podman CLI --add-host with multiple host for a single IP
a664708f35 Quadlet - Split getUnitDirs to small functions
1a1001d824 fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.5
c436a9b658 chore(deps): update dependency setuptools to ~=75.1.0
fdb2edf46a Fxi typo in cache-ttl.md
b2e6d53265 Get WSL disk as an OCI artifact
c6616004f1 CI: make 260-sdnotify parallel-safe
42a1f5e87c quadlet: do not log ENOENT errors
91dbd6dc33 pkg/specgen: allow pasta when running inside userns
9a8e17816a troubleshooting: add tip about the user containers
95833a6207 chore(deps): update dependency setuptools to v75
1857d7e50f Convert windows paths in volume arg of the build command
d124d90e18 Improve error when starting multiple machines
fe08440ec3 fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.2
01a1761fd9 Minor typo noticed when reading podman man page
e041f2a7b7 Remove `RemoveFilesAndConnections`
54b71b637c Add `GetAllMachinesAndRootfulness`
ac4a31cc4a rewrite typo osascript
089d2513d8 typo
31a1fd8f33 fix(deps): update module github.com/docker/docker to v27.2.1+incompatible
cb03ca31b2 Add radio buttons to select WSL or Hyper-V in windows setup.exe
297ec1c083 [skip-ci] Packit: split out ELN jobs and reuse fedora downstream targets
5f6a22dc1b [skip-ci] Packit: Enable sidetags for bodhi updates
b9fe4097dd vendor: update c/common
e61682f50e CI: make 710-kube parallel-safe
0ff89a00af CI: mark 320-system-df *NOT* parallel safe
db12343e27 Add kube play support for image volume source
837755e643 refactor: add sshClient function
a83fef34a9 fix(deps): update module golang.org/x/tools to v0.25.0
22ec8ea06d CI: make 505-pasta parallel safe
18932e0339 CI: make 020-tag parallel-safe
a165289574 CI: make 410-selinux parallel-safe
359092e463 Bump VMs. ShellCheck is now built-in
005d9b543b troubleshooting: add tip about auto, keep-id, nomap
a1e6603133 libpod: make use of new pasta option from c/common
2f858675b3 vendor latest c/common
0abbcfa50a podman images: sort repository with tags
eb396705c6 Remove containers/common/pkg/config from pkg/util
2840b21862 fix(deps): update module golang.org/x/net to v0.29.0
38555305c2 fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.23
1c23bd5acf fix(deps): update module golang.org/x/crypto to v0.27.0
133bbd3769 Fix CI
c203c48c70 Detect and fix typos using codespell
12b3d01438 Fix typo: replace buildin with built-in
4700b5a58a Add codespell config, pre-commit definition, and move options from Makefile
901f621daa prune: support clearing build cache using CleanCacheMount
1543c5f0ad test/e2e: fix network prune flake
bdf96e7df2 Add support for Job to kube generate & play
c317da8deb Add podman-rootless.7 man page
15bde1abdb Add DNS, DNSOption and DNSSearch to quadlet pod
0f77363ff5 podman.1.md: improve policy.json section
579e8b2d7a e2e: flake fix: SIGPIPE in hook test
01296038dc libpod: fix rootless cgroup path with --cgroup-parent
5a15e70345 vendor: update c/storage
7b019e9905 CI: make 055-rm parallel-safe
e5624510ce CI: make 130-kill parallel-safe
f38953c156 CI: make 125-import parallel-safe
0e1ac9cee1 CI: make 110-history parallel-safe
bca7c20530 CI: system tests: parallelize low-hanging fruit
8eb7eff899 Add disclaimer to `podman machine info` manpage.
d803bb3407 man pages: refactor two more options
beffd05d5a update github.com/opencontainers/runc to v1.2.0-rc.3
77702d73ef update go.etcd.io/bbolt to v1.3.11
a269f098cd update github.com/onsi/{ginkgo,gomega}
e9a4534cb1 Update module github.com/shirou/gopsutil to v4
54b8c4fb64 packit: update fedora and epel targets
f93fcf7dee bump go to 1.22
d03e8ffc56 cirrus: test only on f40/rawhide
2ca4efb9f4 cirrus: remove CI_DESIRED_NETWORK reference
e598bcafb8 cirrus: prebuild use f40 for extra tests
c68c2974a3 chore(deps): update dependency setuptools to ~=74.1.0
60af13ca0f libpod: fix HostConfig.Devices output from 'podman inspect' on FreeBSD
70358ecf18 fix(deps): update golang.org/x/exp digest to 9b4947d
1732338630 Implement publishing API UNIX socket on Windows platforms
c6fe5e5395 Vendor c/common:8483ef6022b4
71fd15726d quadlet: support container network reusing
f40eb5f06a docs: update read the docs changes
abea5ad4ac CI: parallel-safe network system test
2b14db2af3 Quadlet - Support multiple image tags in .build files
3bdddea8fa fix(deps): update module github.com/vbauerster/mpb/v8 to v8.8.3
6a0ab6f7bc cirrus: remove _bail_if_test_can_be_skipped
d5c5261e6f cirrus: move renovate check into validate
ac18b1a0af cirrus: remove 3rd party connectivity check
34a7d8dd10 cirrus: remove cross jobs for aarch64 and x86_64
186f50ad7d cirrus: do not upload alt arch cross artifacts
94431c29b4 cirrus: remove ginkgo-e2e.json artifact
78be80f2cd cirrus: fix default timeouts
775d27fcd8 github: remove fcos-podman-next-build-prepush
63545126c2 Clarify podman machine volume mounting behavior under WSL
41f945fc24 machine: Add -all-providers flag to machine list
5389eee737 Create a podman-troubleshooting man page
33b96e78c8 chore(deps): update dependency setuptools to v74
565ad236a5 fix(deps): update module github.com/docker/docker to v27.2.0+incompatible
6e027c0e37 Fix an improperly ignored error in SQLite
678323efd8 CI: flake workaround: ignore socat waitpid warnings
00027bc251 fix(deps): update module github.com/rootless-containers/rootlesskit/v2 to v2.3.1
4f4ebdce5b Stop skipping machine volume test on Hyper-V
a89fef6e2a cleanup: add new --stopped-only option
bf74797c69 fix races in the HTTP attach API
dbd2adc798 cirrus: skip windows/macos machine task on RHEL branches
a508d7631f Update module github.com/containers/gvisor-tap-vsock to v0.7.5
dc724e5e80 run: fix detach passthrough and --rmi
8e78028e2c podman run: ignore image rm error
7c5d8bec0d Add support for AddHost in quadlet .pod and .container
07c9fe82a8 [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.3
df3c9efb03 update github.com/vishvananda/netlink to v1.3.0
5f57f4ea22 build: Update gvisor-tap-vsock to 0.7.5
3e58e04d3e Quote systemd DefaultEnvironment Proxy values, as documented in systemd.conf man page:
16007e4370 fix typo in podman-network-create.1.md
6c68f4ad97 Use HTTP path prefix of TCP connections to match Docker context behavior
cae427e2f8 Makefile: remotesystem: use real podman server, no --url
215af114ab Update module github.com/openshift/imagebuilder to v1.2.15
11547942b1 CI: parallel-safe userns test
7164177c68 Update module github.com/onsi/ginkgo/v2 to v2.20.1
d55b12f70b Add support for IP in quadlet .pod files
b2fb944e19 Specify format to use for referencing fixed bugs.
68efa7e3a1 CI: parallel-safe run system test
4dc5708f14 Revert "test/e2e: work around for pasta issue"
17193af962 CI: On vX.Y-rhel branches, ensure that some downstream Jira issue is linked
4fbfa7de6e quadlet: support user mapping in pod unit
5ccaa699f1 Update Release Process
154d832696 Test new VM build
29071ac498 command is not optional to podman exec
9c3921ca58 CI: parallel-safe namespaces system test
13b31845c8 [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.2
1ccccde183 quadlet: add key CgroupsMode
458ba5a8af Fix `podman stop` and `podman run --rmi`
e5c91ff03a quadlet: set infra name to %s-infra
990fc335fa chore(deps): update dependency setuptools to v73
76e1bbb57d [skip-ci] Packit: update targets for propose-downstream
fc30620cdb Do not segfault on hard stop
d5cd388729 Fix description of :Z to talk about pods
145c7511aa CI: disable ginkgo flake retries
b755a1c60b vendor: update go-criu to latest
84a85319e1 golangci-lint: make darwin linting happy
666d839157 golangci-lint: make windows linting happy
cd2a4c7cac test/e2e: remove kernel version check
6c0d94328f golangci-lint: remove most skip dirs
942f789a88 set !remote build tags where needed
c17daf2b09 update golangci-lint to 1.60.1
57016f5cc3 test/e2e: rm systemd start test
e2e2763b0e fix(deps): update module github.com/vbauerster/mpb/v8 to v8.8.1
80639df27a podman wait: allow waiting for removal of containers
ddece758a4 libpod: remove UpdateContainerStatus()
7a7aec355b podman mount: fix storage/libpod ctr race
480d43748a CI: quadlet tests: make parallel-safe
420bd16a21 CI: system tests: make random_free_port() parallel-safe
478b262f9b remove trailing comma in example
1a1d2646df CI: format test: make parallel-safe
004c040ca2 Fix podman-docker.sh under -eu shells (fixes #23628)
6fb10421fb docs: update podman-wait man page
94fd5fe6f7 libpod: remove duplicated HasVolume() check
a65aecd260 podman volume rm --force: fix ABBA deadlock
b6beed9f76 test/system: fix network cleanup restart test
30eb6b6aae libpod: do not stop pod on init ctr exit
8a943311db libpod: simplify WaitForExit()
5b6de98ee8 CI: remove build-time quay check
6b1c7de3d5 Fix known_hosts file clogging and remote host id
c4cdb6defa Update docker.io/library/golang Docker tag to v1.23
0d1c19248a Update dependency setuptools to ~=72.2.0
9945736a3e Update module github.com/docker/docker to v27.1.2+incompatible
0d7e14fb83 healthcheck system check: reduce raciness
30ee9c0114 CI: healthcheck system test: make parallel-safe
8f191618e4 Validate renovate config in every PR
0177f74dc6 pkg/machine: Read stderr from ssh-keygen correctly
e30b0978b8 Fix renovate config syntax error
36f9a04499 CI: 080-pause.bats: make parallel-safe
6656a18c3f CI: 050-stop.bats: make parallel-safe
25d66d97d2 Additional potential race condition on os.Readdir
5ec413fac7 pkg/bindings/containers: handle ignore for stop
6fce734f42 remote: fix invalid --cidfile + --ignore
e111b6c0be Update/simplify renovate config header comment
6c0b8b64d4 Migrate renovate config to latest schema
d33abcdf10 Fix race condition when listing /dev
d26341332c docs/podman-systemd: Try to clarify `Exec=` more
ecf88f17b6 libpod: reset state error on init
20f3e8909e test/system: pasta_test_do add explicit port check
20a32d33cd test/e2e: work around new push warning
be41ee4131 vendor: update c/common to latest
4aaa5cb6f0 stopIfOnlyInfraRemains: log all errors
78cb1e28cb libpod: do not save expected stop errors in ctr state
f276d53532 libpod: fix broken saveContainerError()
b0948a5cd0 Quadlet: fix filters failure when the search paths are symlinks
2043d1647c readme: replace GPG with PGP
a48cd241ad Drop APIv2 CNI configuration
dcdb5408de De-duplicate docker-py testing
ec59508d4c chore(podmansnoop): explain why crun comm is 3
f2a03e5753 libpod: cleanupNetwork() return error
61a889de4c fix(deps): update module golang.org/x/sys to v0.24.0
7936809f75 Reduce python APIv2 test net dependency
bf091abdc5 Fix not testing registry.conf updates
be2212804b test/e2e: improve command timeout handling
52ff2a41fa Update module github.com/onsi/ginkgo/v2 to v2.20.0
09639a07fb Update module github.com/moby/sys/user to v0.3.0
f041d059b5 Add passwd validate and generate steps
4620e91f86 podman container cleanup: ignore common errors
795851edd3 Quadlet - Allow the user to override the default service name
1a2e1eb46e CI: e2e: serialize root containerPort tests
a06a7d7ba8 Should not force conversion of manifest type to DockerV2ListMediaType
2038d88680 fix(deps): update module golang.org/x/tools to v0.24.0
6714b6302d fix(deps): update github.com/containers/common digest to 05b2e1f
f99c7ead92 CI: mount system test: parallelize
53ae4ea927 Update module golang.org/x/net to v0.28.0
81003f2d08 Ignore ERROR_SHARING_VIOLATION error on windows
f9b67cea57 CI: manifest system tests: make parallel-safe
eb7ce80cf9 Create volume path before state initialization
84a5119d17 vendor: update c/storage
029f9b38cc CI: fix broken libkrun test
1912dd4bf6 test/e2e: work around for pasta issue
71bcd25ab6 test/e2e: fix missing exit code checks
082650b68f Test new CI images
abd586cb1c Remove another race condition when mounting containers or images
91b3fdbba3 fix(deps): update github.com/containers/common digest to c0cc6b7
01d739a65e Change Windows installer MajorUpgrade Schedule
d628e14355 Ignore missing containers when calling GetExternalContainerLists
37226e2e93 Remove runc edit to lock to specific version
67ce828152 fix(deps): update module golang.org/x/sys to v0.23.0
87dad1caef CI: podman-machine: do not use cache registry
bfb42b3b15 CI: completion system test: use safename
e429160e5b Temporarly disable failing Windows Installer CI test
3ae1568933 libpod: fix volume copyup with idmap
61def05cd9 libpod: avoid hang on errors
457c64564a Temp. disable PM basic Volume ops test
029a9aa34e Add libkrun Mac task
014b7af4f3 Never skip checkout step in release workflow
83e90a2f5b System tests: leak_test: readable output
f446f59d71 fix(deps): update github.com/docker/go-plugins-helpers digest to 45e2431
75a316aae4 vendor: bump c/common
fcf7cd7d5c Version: bump to v5.3.0-dev
7610cedc80 libpod: inhibit SIGTERM during cleanup()
2550a7290a Tweak versions in register_images.go
4c3531a1a4 fix network cleanup flake in play kube
84f57e4ba0 WIP: Fixes for vendoring Buildah
b8a9b184af Add --compat-volumes option to build and farm build
286fbf98d1 Bump to Buildah v1.37.0
7d9c1a2c53 Quadlet test - Split between success, warning and error cases
77081df8cd libpod: bind ports before network setup
cfac059d14 Disable compose-warning-logs if PODMAN_COMPOSE_WARNING_LOGS=false
1c46686a41 Use new syntax for selinux options in quadlet
616005e0ad fix(deps): update module github.com/onsi/gomega to v1.34.1
396961069c CI: kube test: fix broken external-storage test
8b5b9d0bb5 Update dependency setuptools to v72
bf3f207a49 Convert additional build context paths on Windows
1b91df012d pkg/api: do not leak config pointers into specgen
f3a86266e6 Quadlet - Allow the user to set the service name for .pod files
1c4fbe7965 Quadlet tests - allow overriding the expected service name
41cc3ae6f9 fix(deps): update module github.com/moby/sys/user to v0.2.0
884c43d416 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.7.5
7bb3b83c17 CI: enable root user namespaces
b59918e536 libpod: force rootfs for OCI path with idmap
1d23f3ff11 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.1
a18bd3e9c0 Add test steps for automount with multi images
25fffdb74f CI: cp tests: use safename
1ecb68d92b [skip-ci] RPM: podman-iptables.conf only on Fedora
fd0ff9060f CI: 700-play: fix a leaked non-safename
d9c2806461 test: check that kube generate/play restores the userns
fef125c7b1 test: disable artifacts cache with composefs
8403f4c33f test: fix podman pull tests
90411b2290 vendor: bump c/storage
eadfbbc809 Update module github.com/cyphar/filepath-securejoin to v0.3.1
ce7dded38b Add /run/containers/systemd, ${XDG_RUNTIME_DIR}/containers/systemd quadlet dirs
599c0d167c build: Update gvisor-tap-vsock to 0.7.4
2e20681f05 test/system: fix borken pasta interface name checks
da3edce4e6 test/system: fix bridge host.containers.internal test
f70976a7e2 api: honor the userns for the infra container
fa2590a97a play: handle 'private' as 'auto'
61f0230c31 kube: record infra user namespace
bf8c3065f2 infra: user ns annotation higher precedence
bbe0e4a5db specgenutil: record the pod userns in the annotations
e97bb79b7a kube: invert branches
64f2d85e4f CI: system log test: use safe names
84eb640160 Update encryption tests to avoid a warning if zstd:chunked is the default
059c298389 Fix "podman pull and decrypt"/"from local registry"
6c55ef505d Use unique image names for the encrypted test images
b61667470c CI: system tests: instrument to allow failure analysis
96771eec53 Fix outdated comment for the build step win-gvproxy
71d6e2fbaf Add utility to convert VMFile to URL for UNIX sockets
7768cf235e Run codespell on source
83160b1d02 fix(deps): update module github.com/docker/docker to v27.1.0+incompatible
a493a584c0 chore(deps): update dependency setuptools to ~=71.1.0
a05a9cae07 logformatter: tweaks to pass html tidy
174190132c More information for podman --remote build and running out of space.
2e4b640ad2 Fix windows installer deleting machine provider config file
7202e6172d Use uploaded .zip for Windows action
5e9ab00063 pr-should-include-tests: no more CI:DOCS override
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping runc to version v1.2.0-69-gb7da1673, which comprises the following commits:
b7da1673 build(deps): bump google.golang.org/protobuf from 1.35.1 to 1.35.2
119111a0 libct/cg: add test for remove a non-existent dir in a ro mount point
068d7da7 Revert "Temporary set vagrant to 2.4.1-1"
ac435895 memfd-bind: elaborate kernel requirements for overlayfs protection
ba3d026e libct/cg: RemovePath: improve comments
12e06a7c libct/cg: RemovePath: simplify logic
db59489b runc delete: fix for rootless cgroup + ro cgroupfs
ca4a7a86 build(deps): bump golang.org/x/net from 0.30.0 to 0.31.0
43af111e MAINTAINERS: move dqminh and hqhq to EMERITUS
ec5e7eb7 build(deps): bump golang.org/x/sys from 0.26.0 to 0.27.0
9cb59b46 ci: rm "skip on CentOS 7" kludges
5000f169 Temporary set vagrant to 2.4.1-1
b9dfb22d readme: drop unused memfd-bind reference
aa505bfa memfd-bind: mention that overlayfs obviates the need for it
9bc42d61 dmz: overlay: set xino=off to disable dmesg spam
9ce7392b Vagrantfile.fedora: bump Fedora to 41
609e9a51 Vagrantfile.fedora: stop using dnf shell
80c46d31 build(deps): bump golang.org/x/net from 0.24.0 to 0.30.0
5586d7ca libct: rm obsoleted comment
f9fd70b7 CHANGELOG: add (forward-port) v1.1.15 changes
8cc73754 libct: fix a comment
ee1bced1 script/check-config.sh: add OVERLAY_FS check
c8f5d033 docs: remove prompt symbols from shell snippets
871057d8 drop runc-dmz solution according to overlay solution
34a92855 test join other container userns with selinux enabled
c78f3f2e libct/nsenter: become root after joining userns
1e674098 libct/int: add exec benchmark
cb201487 libct/int: use testing.TB for utils
4df7b1b1 build(deps): bump golang.org/x/sys from 0.22.0 to 0.26.0
cbb9b309 ci: use Go 1.23
732806e2 runc update: fix updating swap for cgroup v2
cb9f3d6d libct/cg: improve ConvertMemorySwapToCgroupV2Value
69b3be76 build(deps): bump github.com/vishvananda/netlink from 1.1.0 to 1.3.0
eb2ff52a libct: rm x/sys/execabs usage
f20f273a build(deps): bump github.com/opencontainers/selinux
139789f1 build(deps): bump google.golang.org/protobuf from 1.33.0 to 1.35.1
93db63ab build(deps): bump github.com/urfave/cli from 1.22.14 to 1.22.16
af024b6c build(deps): bump github.com/moby/sys/mountinfo from 0.7.1 to 0.7.2
42f96305 VERSION: back to development
0b9fa21b VERSION: release v1.2.0
568231cc Revert "increase memory.max in cgroups.bats"
e6699266 fix an error caused by fd reuse race when starting runc init
515f09f7 dmz: use overlayfs to write-protect /proc/self/exe if possible
8cfbccb6 tests: integration: add helper to check if we're in a userns
54ef07d8 tests/int: skip "update memory vs CheckBeforeUpdate" on EL9
ff775363 tests/int: rm centos-7 exclusion
76a821fa tests/int: update info about EL9 kernel
b5bdf592 libct: rm initWaiter
9fa324c4 dmz: cloned binary: set +x permissions when creating regular tmpfile
324fcea4 Terminate execution for criu that does not meet version requirements
eff6f049 libct/cap: no need to load capabilities
9b60a93c libcontainer/userns: migrate to github.com/moby/sys/userns
1623cde1 go: update github.com/cyphar/filepath-securejoin to v0.3.4
4fdd5616 memfd-bind: more specific doc URL
9e554587 memfd-bind: fixup systemd unit file and README
13a6f560 runc run: fix mount leak
b096459a vendor: update github.com/cyphar/filepath-securejoin to v0.3.3
f55957de build(deps): bump bats-core/bats-action from 2.1.1 to 3.0.0
bb2bd38d change go minimum version in README
faffe1b9 replace strings.SplitN with strings.Cut
1be06760 libcontainer/cgroups/fs: remove todo since strings.Fields performs well
7a449109 libct/README: simplify example, rm inheritable caps
0de19533 runc spec, libct/int: do not add ambient capabilities
3e3f9603 runc exec --cap: do not add capabilities to ambient
5b161e04 update bats-action to 2.1.1
35f999dd remove installation of unused bats support libs
10c951e3 add ErrCgroupNotExist
319e133c go.mod: Use toolchain 1.22.4
8671a7db ci: update to setup bats action from bats-core
30f8f51e runc create/run: warn on rootless + shared pidns + no cgroup
21c61165 tests/int: log when teardown starts
b1449fd5 libct: use Namespaces.IsPrivate more
d8844e29 tests: integration: add setgid mkdirall test
066b109e vendor: update to github.com/cyphar/filepath-securejoin@v0.3.2
646efe70 utils: mkdirall: mask silently ignored mode bits to match os.MkdirAll
457e1ffa tests: add regression test for CVE-2019-19921 / CVE-2023-27561
216175a9 Upgrade Cilium's eBPF library version to 0.16
a31efe70 libct/seccomp/patchbpf: use binary.NativeEndian
429e06a5 libct: Signal: honor RootlessCgroups
dd827f7b utils: switch to securejoin.MkdirAllHandle
1d308c7d vendor: update to github.com/cyphar/filepath-securejoin@v0.3.1
5ab5ef3d deps: update to golang.org/x/sys@v0.22
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping runc to version v1.2.0-69-gb7da1673, which comprises the following commits:
b7da1673 build(deps): bump google.golang.org/protobuf from 1.35.1 to 1.35.2
119111a0 libct/cg: add test for remove a non-existent dir in a ro mount point
068d7da7 Revert "Temporary set vagrant to 2.4.1-1"
ac435895 memfd-bind: elaborate kernel requirements for overlayfs protection
ba3d026e libct/cg: RemovePath: improve comments
12e06a7c libct/cg: RemovePath: simplify logic
db59489b runc delete: fix for rootless cgroup + ro cgroupfs
ca4a7a86 build(deps): bump golang.org/x/net from 0.30.0 to 0.31.0
43af111e MAINTAINERS: move dqminh and hqhq to EMERITUS
ec5e7eb7 build(deps): bump golang.org/x/sys from 0.26.0 to 0.27.0
9cb59b46 ci: rm "skip on CentOS 7" kludges
5000f169 Temporary set vagrant to 2.4.1-1
b9dfb22d readme: drop unused memfd-bind reference
aa505bfa memfd-bind: mention that overlayfs obviates the need for it
9bc42d61 dmz: overlay: set xino=off to disable dmesg spam
9ce7392b Vagrantfile.fedora: bump Fedora to 41
609e9a51 Vagrantfile.fedora: stop using dnf shell
80c46d31 build(deps): bump golang.org/x/net from 0.24.0 to 0.30.0
5586d7ca libct: rm obsoleted comment
f9fd70b7 CHANGELOG: add (forward-port) v1.1.15 changes
8cc73754 libct: fix a comment
ee1bced1 script/check-config.sh: add OVERLAY_FS check
c8f5d033 docs: remove prompt symbols from shell snippets
871057d8 drop runc-dmz solution according to overlay solution
34a92855 test join other container userns with selinux enabled
c78f3f2e libct/nsenter: become root after joining userns
1e674098 libct/int: add exec benchmark
cb201487 libct/int: use testing.TB for utils
4df7b1b1 build(deps): bump golang.org/x/sys from 0.22.0 to 0.26.0
cbb9b309 ci: use Go 1.23
732806e2 runc update: fix updating swap for cgroup v2
cb9f3d6d libct/cg: improve ConvertMemorySwapToCgroupV2Value
69b3be76 build(deps): bump github.com/vishvananda/netlink from 1.1.0 to 1.3.0
eb2ff52a libct: rm x/sys/execabs usage
f20f273a build(deps): bump github.com/opencontainers/selinux
139789f1 build(deps): bump google.golang.org/protobuf from 1.33.0 to 1.35.1
93db63ab build(deps): bump github.com/urfave/cli from 1.22.14 to 1.22.16
af024b6c build(deps): bump github.com/moby/sys/mountinfo from 0.7.1 to 0.7.2
42f96305 VERSION: back to development
0b9fa21b VERSION: release v1.2.0
568231cc Revert "increase memory.max in cgroups.bats"
e6699266 fix an error caused by fd reuse race when starting runc init
515f09f7 dmz: use overlayfs to write-protect /proc/self/exe if possible
8cfbccb6 tests: integration: add helper to check if we're in a userns
54ef07d8 tests/int: skip "update memory vs CheckBeforeUpdate" on EL9
ff775363 tests/int: rm centos-7 exclusion
76a821fa tests/int: update info about EL9 kernel
b5bdf592 libct: rm initWaiter
9fa324c4 dmz: cloned binary: set +x permissions when creating regular tmpfile
324fcea4 Terminate execution for criu that does not meet version requirements
eff6f049 libct/cap: no need to load capabilities
9b60a93c libcontainer/userns: migrate to github.com/moby/sys/userns
1623cde1 go: update github.com/cyphar/filepath-securejoin to v0.3.4
4fdd5616 memfd-bind: more specific doc URL
9e554587 memfd-bind: fixup systemd unit file and README
13a6f560 runc run: fix mount leak
b096459a vendor: update github.com/cyphar/filepath-securejoin to v0.3.3
f55957de build(deps): bump bats-core/bats-action from 2.1.1 to 3.0.0
bb2bd38d change go minimum version in README
faffe1b9 replace strings.SplitN with strings.Cut
1be06760 libcontainer/cgroups/fs: remove todo since strings.Fields performs well
7a449109 libct/README: simplify example, rm inheritable caps
0de19533 runc spec, libct/int: do not add ambient capabilities
3e3f9603 runc exec --cap: do not add capabilities to ambient
5b161e04 update bats-action to 2.1.1
35f999dd remove installation of unused bats support libs
10c951e3 add ErrCgroupNotExist
319e133c go.mod: Use toolchain 1.22.4
8671a7db ci: update to setup bats action from bats-core
30f8f51e runc create/run: warn on rootless + shared pidns + no cgroup
21c61165 tests/int: log when teardown starts
b1449fd5 libct: use Namespaces.IsPrivate more
d8844e29 tests: integration: add setgid mkdirall test
066b109e vendor: update to github.com/cyphar/filepath-securejoin@v0.3.2
646efe70 utils: mkdirall: mask silently ignored mode bits to match os.MkdirAll
457e1ffa tests: add regression test for CVE-2019-19921 / CVE-2023-27561
216175a9 Upgrade Cilium's eBPF library version to 0.16
a31efe70 libct/seccomp/patchbpf: use binary.NativeEndian
429e06a5 libct: Signal: honor RootlessCgroups
dd827f7b utils: switch to securejoin.MkdirAllHandle
1d308c7d vendor: update to github.com/cyphar/filepath-securejoin@v0.3.1
5ab5ef3d deps: update to golang.org/x/sys@v0.22
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping containerd to version v2.0.0-25-g961cac9aa, which comprises the following commits:
34a45cab2 Publish attestation as release artifact
7dec6b460 move rocky 9.4 to almalinux/9 in CI
cf07f28ee *: should align pipe's owner with init process
986088866 fix: set the credentials even if not provided
9081e979f update runc binary to 1.2.2
6399c936f Revert "Disable vagrant strict dependency checking"
a7f2b562f fsverity_linux.go: Fix fsverity.IsEnabled() for big endian systems
389e781ea build(deps): bump github.com/containerd/typeurl/v2 from 2.2.2 to 2.2.3
30b929ece fsverity_test.go: fix major/minor device number resolving
10996a334 fsverity_test.go: fix nil pointer dereference, fix test fail
5b879f30c update to go1.23.3 / go1.22.9
e99c2b55c Avoid arch info in the sed/replace when building cri-cni-containerd.tar.gz
458215f6c ci: enable marking 2.0 releases as latest
03ba4ce1f Update release notes for v2.0.0
f2da3fd68 Update release docs for v2.0.0
ff09b428e Update typeurl to v2.2.2
a43e7c1e2 build(deps): bump softprops/action-gh-release from 2.0.8 to 2.0.9
edf367cab build(deps): bump github.com/containerd/nri from 0.7.0 to 0.8.0
21f636751 build(deps): bump github.com/containerd/typeurl/v2 from 2.2.0 to 2.2.1
1edc2147f build(deps): bump google-github-actions/auth from 2.1.6 to 2.1.7
2d8fec45a go.mod: k8s.io/* v0.31.2
bef201fe6 build(deps): bump google-github-actions/upload-cloud-storage
bd10a6096 Update platforms to v1.0.0-rc.0
ae73e3013 Disable vagrant strict dependency checking
33677d56d Update containerd API to v1.8.0 release
d38911808 Prepare release notes for api/v1.8.0
93f9db2ad Update errdefs tag to v1.0.0
bddeba825 Make TestContainerPids more resilient
edb980ac0 update runc binary to 1.2.1
bf47b6ebc docs/containerd-2.0.md: add more highlights
f5ce859ee docs/containerd-2.0.md: fix the deprecation release of AUFS
bedd85a36 RELEASES.md: k8s: fix CRI v1alpha2 removal release, remove old releases
4594f5cac services/snapshots: include name of snapshotter in debug logs
77d783e2c Update hcsshim to v0.12.9
79089232b build(deps): bump actions/checkout from 4.2.1 to 4.2.2
2789ba30e build(deps): bump actions/cache from 4.1.1 to 4.1.2
6b655d093 build(deps): bump github/codeql-action from 3.26.13 to 3.27.0
9ed6e05b2 config: v1Migrate: support DisabledPlugins and RequiredPlugins
4b2bca00b config: migrate version before merging
700b90618 resolver/docker: fix confusing "trying next host" log
3cc2343de local: avoid writing to content root on readonly store
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The ptest build for cri-o was previously disabled due to issues
introduced with Go 1.11, which borken the build process. With the
current Go version, these issues no longer occur, and the ptest build is
now functional.
This commit enables ptest support and resolves the "TMPDIR
[buildpaths]" issue encountered during the ptest build process.
A total of 382 test cases were executed, with the following results:
PASS: 317
FAIL: 33
SKIP: 32
Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping containerd to version v2.0.0-rc.6-23-g1e6fdb531, which comprises the following commits:
0208cb58c go.mod: github.com/containerd/imgcrypt v2.0.0-rc-1
588b7a100 testutil: avoid conflict with continuity/testutil
181491032 build(deps): bump github.com/containerd/continuity from 0.4.3 to 0.4.4
497dc7bf3 build(deps): bump github.com/checkpoint-restore/checkpointctl
fddeb6f3c pkg/protobuf: fix typo in godoc
96a1e498f Update containerd plugin to v1.0.0
3b45a44cc Update to ttrpc v1.2.6 tag
3cc2343de local: avoid writing to content root on readonly store
778defa31 Add back ZFS snapshotter
d3ff3e2ff CI: move crun from Ubuntu to Fedora
5c65a3d7b Update version to v2.0.0-rc.6
9aa637b22 Update api vendor to latest
4b9d6c014 deps: bump github.com/containerd/nri
2535b187a Scope writer locks to each writer.
bc819bc97 docs: add command for finding schema 1 images
c86b2772c docs: update min version for deprecation warnings
a1ce18816 CI: bump up crun to 1.17
021895985 Update hcsshim version to v0.12.8
373311a84 build(deps): bump github.com/opencontainers/selinux
cf9cf8b5a build(deps): bump github.com/prometheus/client_golang
03860c208 build(deps): bump azure/CLI from 1.0.9 to 2.1.0
cf7218fb0 build(deps): bump actions/checkout from 4.1.1 to 4.2.1
78ec6ef02 build(deps): bump actions/upload-artifact from 4.1.0 to 4.4.3
bfe8fa330 build(deps): bump github/codeql-action from 3.24.0 to 3.26.13
38ba7f2f7 dedup BuildLabels
a5cd0d0a5 dedup GetPassthroughAnnotations
269997ac5 dedup GetRepoDigestAndTag
f61dbc2d0 dedup ParseImageReferences
530db2e8d Introduce two additional unit tests for two runtimes and pod annotations.
a21e379b6 Allow sections of Plugins to be merged, and not overwritten as entire sections.
2f24aa00a Update errdefs to 0.3.0
92d327af1 Update tracing docs for containerd 2.0
943b196ad Update NRI documentation for containerd 2.0
a6ceb4be0 containerd 2.0 guide: add image verifier plugins
347423a11 Request 'allow' setgroups when spawning new userns
249dd7474 Format link text in containerd 2.0 doc for readability
18e4ea9a6 Add After=dbus.service to containerd.service
3eea3536f docs/containerd-2.0.md: mention the removal of `cri-containerd-*.tar.gz`
f8d50f6e8 README.md: put a link to docs/containerd-2.0.md
b724b9f23 Add containerd 2.0 doc
fc5086a74 cri: remove sandbox controller from client
e4df672ab sandbox: add sandbox controller v2
4f2bc1580 build(deps): bump lycheeverse/lychee-action from 1.10.0 to 2.0.2
4bd3a71dd go.{mod,sum}: update NRI deps and re-vendor.
bff82e196 [StepSecurity] ci: Harden GitHub Actions
5eb0be994 build(deps): bump github.com/urfave/cli/v2 from 2.27.4 to 2.27.5
0742238cd Handle teardown failure to avoid blocking cleanup
c3d84a87f build(deps): bump the otel group with 8 updates
bfe59daae build(deps): bump github.com/klauspost/compress from 1.17.10 to 1.17.11
b7c333ce2 Revert "update runc binary to 1.1.15"
c6d089090 metrics: Use UnmarshalTo instead of UnmarshalAny
1db0064c6 CI: install OVMF for Vagrant
4d02217b5 CI: fix "Unable to find a source package for vagrant" error
38beeb359 Revert "use vagrant from jammy in noble"
e2daa20ed Revert "use older version of OVMF package"
ee921689f Switch from actuated.dev to GH Action runners for arm64
f89ed3c62 build(deps): bump golang.org/x/sys in the golang-x group
428df99db build(deps): bump google.golang.org/grpc from 1.67.0 to 1.67.1
72126a984 update sample go test commands
9c42dd959 build(deps): bump google.golang.org/protobuf from 1.34.2 to 1.35.1
f0f1bfca0 update runc binary to 1.1.15
46f5a0d93 update to go1.23.2,go1.22.8
7b1809851 Update runner images to macOS13
e479431e0 core/runtime: Fix a typo in error message
b85909cd4 shim: Move pprof server to plugin
b2681dfbd shim: Move ttrpc interceptors to plugins
d7f83034c Fix the race condition during GC of snapshots when client retries
24fe444eb script/setup/install-runc: Add trap statement to clean up tmp files
6ffdabf72 Makefile: fix shim tags overwritten
095131abf add use systemd cgroup e2e
2123855ee Add build tag to omit grpc
64d29ebe5 snapshots: core: Remove dependency on api types
11ffba3dc shim: Do not depend on pkg/oci
0d4e606bb Update hcsshim to v0.12.7
78e39f7c5 build(deps): bump github.com/intel/goresctrl from 0.7.0 to 0.8.0
17d4a1357 Propagate trace contexts to shims
bc4646067 Prepare release notes for v2.0.0-rc.5
ccb2a8d74 [cri] use 'UserSpecifiedImage' to set the image-name annotation
b7b6b324b Add check for CNI plugins before tearing down pod network
b5290726d Add timestamp to PodSandboxStatusResponse for kubernetes Evented PLEG
146a977f9 Move features section to a separate file
30f289335 core/mount: Only remove dirs if unmount succeeded
f8d84ecf9 core/mount: Prevent accidental removal of rootfs files
004f3951d core/mount: Use MNT_DETACH for umount of tmp layers
f7ca91fa3 build(deps): bump github.com/prometheus/client_golang
c75178d93 build(deps): bump google.golang.org/grpc from 1.66.2 to 1.67.0
519cbda1d build(deps): bump github.com/klauspost/compress from 1.17.9 to 1.17.10
d72051036 Enable the selinux on cri test
b03a3c5a2 build(deps): bump the k8s group with 4 updates
017efe05a build(deps): bump the otel group with 8 updates
7c89148a1 build(deps): bump google.golang.org/grpc from 1.65.0 to 1.66.2
6e2c4d00d build(deps): bump golang.org/x/mod
ee0ed75d6 internal/cri: simplify netns setup with pinned userns
fd3f3d5a1 pkg/sys: add GetUsernsForNamespace interface
490e45a08 pkg/sys: Add UnshareAfterEnterUserns function
83aaa89b6 update ctr run to support multiple uid/gid mappings
1dedcb784 build(deps): bump github.com/checkpoint-restore/go-criu/v7
7599d4df2 build(deps): bump github.com/prometheus/client_golang
9037069da update to go1.23.1, go1.22.7
6f43197c2 Remove cri SandboxInfo RuntimeHandler
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping libpod to version v5.2.3-4-g18e0d84c6c, which comprises the following commits:
daae27b7b0 vendor: update c/common to v0.60.4
f6a31e013d Bump to v5.2.4-dev
c5366a308e Bump to v5.2.3
b5ededbce5 Update release notes for v5.2.3
35d2fc8de6 [v5.2] Bump Buildah to v1.37.3
f0ddea707a pkg/specgen: allow pasta when running inside userns
aaf15f81c4 libpod: convert owner IDs only with :idmap
ec4ac087b4 docs: update read the docs changes
c60961839a allow exposed sctp ports
a995b6db5d libpod: setupNetNS() correctly mount netns
d2c2539ee0 vendor: update c/common to v0.60.3
a17fd8c0aa [skip-ci] Packit: split out ELN jobs and reuse fedora downstream targets
b9691547ca [skip-ci] Packit: Enable sidetags for bodhi updates
02d400e7b7 build: Update gvisor-tap-vsock to 0.7.5
5c856c81b0 CI: podman-machine: do not use cache registry
2f7011ab43 [CI:DOCS] Add v5.2.2 lib updates to RELEASE_NOTES.md
602f71991c Bump to v5.2.3-dev
fcee48106a Bump to v5.2.2
37af07836a Update RELEASE_NOTES for v5.2.2
570fbc49aa [v5.2] Bump Buildah to v1.37.2, c/common v0.60.2, c/image v5.32.2
458d15cf5d [v5.2] golangci-lint: make darwin linting happy
faf3edb5f4 [v5.2] golangci-lint: make windows linting happy
b96312af0f [v5.2] test/e2e: remove kernel version check
462c1c6d8e [v5.2] golangci-lint: remove most skip dirs
35290c9b32 [v5.2] set !remote build tags where needed
3ca3c1d456 [v5.2] update golangci-lint to 1.60.1
d61b5d9409 Packit: update targets for propose-downstream
dbdff97042 Create volume path before state initialization
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
| |
parsing errors occur if this fragment ends with .conf,
so we renamed it to make sure it is processed as a
conflist.
Tested with containerd + nerdctl
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
| |
As it turns out CNI needs iptables to configure some plugins,
and without it we get a silent fail. It will also be added
to the recipe as a RRECOMMENDS, but we also put it in the
packagegroup for more visibility.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
When integrating into some container stacks (such as containerd),
the detailed configuration toml changes to change the container
runtime from runc to crun is not always trivial.
To avoid (for now) carrying configuration snippets as part of
the recipes, we can symlink runc to crun as crun is fully
compatible with runc.
Note: this means you can't have runc and crun installed on the
same image if the symlinking is done. Hence why this symlinking
is conditional.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
When running a containerd-only stack, we need a CNI configuration
to be available.
When running containerd as part of something like K3S, we expect
the orchestration package will provide that configuration.
This commit makes a containerd-cni package available that contains
a starting point configuration.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
