summaryrefslogtreecommitdiffstats
path: root/recipes-containers
Commit message (Collapse)AuthorAgeFilesLines
...
* containerd/opencontainers: update to latest 1.4.x SRCREVBruce Ashfield2021-02-051-1/+1
| | | | | | | | | | | | | | | This includes the following commits: 232cee448 Update to go 1.15.8 f087d7849 runtime: fix shutdown runc v2 service edffc830b change flag from RDONLY to RDWR and close the fifo correct e7cd2030e pusher: add missing authentication support for requests ec752e8ba docker: avoid concurrent map access panic b73052d34 runtime/v2: should use defer ctx to cleanup 8cff6b375 [release/1.4 backport] Return GRPC not found error instead of plain one a6f6eb00c Add bounds on max oom_score_adj value for AdjustOOMScore Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc-docker: update to 1.0.0-rc93Bruce Ashfield2021-02-051-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping to the next -rc, which comprises the following commits: 1e0016cf Show error stack trace if --debug is set 5c0342ba libcontainer: fix bad conversion from syscall.Errno to error a9e99b6d ci/gha/fedora: retry vagrant up f26768a8 VERSION: back to development 12644e61 VERSION: release 1.0.0~rc93 c348b982 tests/rootless.sh: fix/ignore shellcheck warnings 11437593 tests/rootless.sh: use set -e -u -o pipefail 5ab05884 ci: untangle getting test images bc175ba4 tests/helpers.bash: rm GOPATH dc025792 ci/gha: bump golangci-lint to v1.36 4d3a8d5e .golangci.yml: add 76ae1f5c libct/cg/fs/freezer: fix freezing race c4bc3b08 Remove "PatchAndLoad" stub as it's not used without seccomp enabled 6ddfaa5e cgroupfs: cpuset: fix broken build ca422896 Makefile: add -trimpath go build flag d89c9629 Fix typo in README b1195b76 ci: test with golang 1.16-rc1 164e0adb tests/int/spec.bats: fix for go 1.16 4160d743 seccomp: add enosys unit tests 8bd19cd5 tests: add seccomp -ENOSYS integration test 7a8d7162 seccomp: prepend -ENOSYS stub to all filters 2be806d1 libcontainer/configs: improve CommandHook unit tests f4d153b0 Fix int overflow in test on 32 bit system 4e98eec1 libct/cg: demote "systemd is too old" to debug c7357aad libct/cg/ebpf/testDeviceFilter: rm verbose logging 6a9f5ac9 libct/cg/fs: fix a linter warning 63c44e27 libct/cg/fs: getPageUsageByNUMA: rewrite/optimize e9248dd5 cgroup: fix panic in parse memory.numa_stat 426aa416 libct/int/TestExecInTTY: skip c30cd3cd libct/int/TestExecInTTY: fix error reporting dac0c1e3 console.ClearONLCR: move it back ab27e12c Implement GetStat for cpuset cgroup. 867ba38e events: simplify some conversion functions 8ce51611 GHA: tune timeouts for VM jobs 510e404e make shfmt: run for all script/* files 90d02ecc Vagrantfile.centos7: clean up after bats install a91210f4 gha: use ssh -tt to have a tty 1f4a3b1e gha: don't check commits on push 4a30ada4 gha: cache docker layers to speed up make runcimage 58c31003 README: rm travis badge a21e57d7 tests/int/hooks.bats: skip earlier 657a24ce libct/cg/TestGetHugePageSizeImpl: only log errors 3394e374 libct/cg/sd/TestRangeToBits: be less verbose 230a46b7 systemd: fix rootful-in-userns regression c751ba3f systemd: show more helpful error a35cad3b libct/cg/sd/v2: warn about old systemd 03b512e5 libc/cg: convert r.CPU.Cpus/Mems to systemd props eee425f5 libct/cg/sd/systemdVersion: don't return error 5de00ad9 tests/int/multi-arch.bash: fix for busybox b3cf4831 script/check-config.sh: fix IOSCHED_CFQ CFQ_GROUP_IOSCHED 1a00cd8f script/check-config.sh: fix MEMCG_SWAP_ENABLED ecb9d73c script/check-config.sh: fix NF_NAT_NEEDED 483abaac script/check-config.sh: fix NF_NAT_IPV4 91eba84a script/check-config.sh: support for cgroupv2 25987d03 libcontainer/intelrdt: adjust the file mode c8e89b8d Remove script/install-vagrant.sh 06a684d6 libct/int/TestExecInTTY: repeat the test 300 times fedaa2ab TestExecInTTY: simplify, improve error reporting 719d70d2 setupIO: simplify code 24c05b71 tty: fix ClearONLCR race 039c47ab libcontainer: signalAllProcesses(): log warning when failing to thaw 18972177 libcontainer: move capabilities to separate package 692fab09 libct/checkProcMounts: optimize 72f46389 libct: add TODO about os.ErrProcessDone d7df3018 libct: suppress bogus "unable to terminate" warnings 637f82d6 runc run: resolve tmpfs mount dest in container scope d64c3afe tests/int/mount.bats: reformat a2c9866e tests/int/mounts.bats: cleanup 9f2153c6 libct/cgroups/fs/cpuset: don't use MkdirAll c85cd2b3 libct/cg/fs/cpuset: don't parse mountinfo c0e14b8b libct/cg/fs.getCgroupRoot: reuse (cached) cgroup mountinfo ed70dfa7 libct/cgroups/v1_utils: implement mountinfo cache 17a0dc31 README: add note about not using runc directly 4bc2aab9 README: add links to misc docs 2dc1bf91 ci: move Fedora 33 and CentOS 7 tests to gha e431fe60 ci: move misc validate tasks from travis to gha 7ecba232 ci: move cross compile check from travis to gha 8ccd39a9 ci: move commit length check from travis to gha 1125ae78 tests/events.bats: unify duplicated code 27268b1a tests/int/cwd: add test case for cwd not owned by runc d869d05a libctr/init_linux: reorder chdir 8bd3b878 test: add case for GH #2086 cb3dd9d8 libct/configs/validate: test for bind-mounted netns 8e8661e1 libct/configs/validate/sysctl: fix repeated netns checks 2dce0699 libct/configs/validate: fix host netns check 2143b368 libct/int/execin_tty: do help debug a flake e709b8ab libctl/cgroups/fscommon: close fd 325a74dd libcontainer/intelrdt: rm init() from intelrdt.go cb269306 remove "selinux" build tag (Always compile SELinux support) 552a1c7b remove "apparmor" build tag (Always compile AppArmor support) 48b8eb09 checkProcMount: add /proc/slabinfo to whitelist 1909051b libct/int/execin_tty: help debug a flake 97929295 libct/intelrdt: fix a staticcheck warning 6437086e libct/addCriu*Mount: fix gosimple warning d0b59548 libct/checkCriuFeatures: fix gosimple linter warning 3de5c514 libct/int: don't hardcode CAP_NET_ADMIN 3387422b libct/int: fix "simple" linter warnings 11680cd2 libct: fix "unused" linter warning a99ecc9e libct/cg/utils: silence a linter warning 3c9b03fd libct/cg/fscommon: log openat2 init failures 6bda4600 libcontainer/cgroups/fscommon: add openat2 support 31b0151f move blkio stat gathering to loop 990a6c57 cgroups: update blkio GetStats be56333f bats: update to 1.2.1 f15c4cca Update umoci to 0.4.6 4344bd8f Dockerfile: use binary criu release 3aead32e nsenter: hard-code memfd_create(2) syscall numbers 5d1b0268 .github/workflows/validate: nits 7cd062d7 libct/cgroup/utils: fix GetCgroupMounts(all=true) 4fc2de77 libcontainer/devices: remove "Device" prefix from types 677baf22 libcontainer: isolate libcontainer/devices de80aae4 recvtty: fix errcheck linter warnings 6b41b463 recvtty: fix waiting for both goroutines 4bbfd2e1 recvtty: use ioutil.Discard c1ef0cf6 ci: add integration+unit tests to github actions fce8dd4d tests/int/tty.bats: increase timeout c6ed1854 ci: add shellcheck to github actions 27835a9e Makefile: move shellcheck out of validate 33bda24a ci: move verify-deps from travis to github actions c60f23b3 ci: add shfmt to github actions 717a73b3 ci: renamed golangci-lint to validate 06b204e5 Makefile: move shfmt out of validate, add -w 7856c340 Dockerfile: bump criu to 3.15 ee1bdb80 vendor: github.com/cilium/ebpf v0.2.0 f0d5e839 Dockefile: fix path to skopeo repo d9010b0e integration: update README to link to bats-core 3f2f06df Move cgroup v2 out of experimental f62ad4a0 libcontainer/intelrdt: rename CAT and MBA enabled flags 620f4c5c libcontainer/intelrdt: fix CMT feature check 896da0b9 docs: terminals: modify the example of Pass-Through mode. 4690064f update vendor 9403afd7 CI: Fedora 33: print kernel version, systemd version, and rootfs type 0a097615 CI: update Fedora to 33 41aa7640 linux: drop MS_REC for readonly remount a4e6955e linux: fix remount readonly in a user namespace 2e968a83 libct/cg/sd/v2: "support" (ignore) memory.oom.group c013be56 libct/cg/sd/v2: support memory.* / Memory* unified 13afa58d libct/cg/sd/v2: support cpuset.* / Allowed* 5be8b97a libct/cg/sd/v2: support cpu.weight / CPUWeight 390a98f3 runc update: support unified resources ab80eb32 libct/cg/sd/v2: support cpu.max unified resource 7f24098d tests/int: move check_cpu* to helpers fd5226d0 libct/cg/sd: add defCPUQuotaPeriod 0cb8bf67 Initial v2 resources.unified systemd support ed548376 tests/int/update.bats: add checks for runc status d0991db2 tests/int/cgroups.bats: reformatting a66a8238 ci: pin shfmt to v3.2.0 2ceb9719 tests/integration: rm excessive run use e32716d3 tests/int: simplify teardown_running_container c114919f tests/int: fix "runc exec --preserve-fds" 7b8c4e98 shfmt mounts.bats to pass `make validate` ac5ec5e3 libcontainer/integration: fix unit test f5c345c3 test: add "runc run --no-pivot must not expose bare /proc" 17de6f80 vendor: bump mountinfo to v0.4.0 70538b39 Update bash completion to support systemd-cgroup 933c4d31 libcontainer/intelrdt: privatize IntelRdtManager and its fields 2c004a10 libcontainer/intelrdt: introduce NewManager() abcc1aae fix some typos about libcontainer 939ad4e3 don't panic when /sys/fs/cgroup is missing for rootless 7613c718 Update bash completion to support new capabilities b8bf5728 rootfs: handle nested procfs mounts for MS_MOVE 5903b0ce libcontainer/intelrdt: remove 'omitempty' property from CMT and MBM counters 0253a08d CI: add shfmt for sh files ff9852c4 *.sh: use shfmt 069fddfa CI: add shfmt for bats fc8c7797 tests/integration/*.bats: reformat with shfmt 0aa0fae3 Kill all processes in cgroup even if init process Wait fails 978fa6e9 Fixing some lint issues f0fdde79 libct/cg/systemd/v1: fix err check in enableKmem c1bba720 libct/cg/systemd/v1: do not use c.Path fa47f958 libct/int/newTemplateConfig: add systemd support 9135d99c libct/int/newTemplateConfig: add userns param 73d93eeb libct/int: make newTemplateConfig argument a struct fb4c27c4 Fix mount error when chmod RO tmpfs 002c92f1 libct/cg.WriteCgroupProc: use fscommon.OpenFile c95e6900 libct/cg/fs*: use fscommon.OpenFile d55729f1 libct/cg/fs/blkio: use fscommon.OpenFile 0228226e libcontainer/cgroups/fscommon: introduce OpenFile b4483305 Add error message e25b8cfc libct/cg/utils: use fscommon.ReadFile 6bae53f5 libct/cg/fs2: use fscommon.ReadFile 2588e6f1 libct/cg/fs/cpuset: use fscommon.ReadFile 1d20cf49 libct/cg/fs/cpuacct: use fscommon.ReadFile 9e78b66e libct/cg/systemd/v1.enableKmem: use fscommon.ReadFile 31634436 libct/cg/fs2.CreateCgroupPath: use fscommon.*File b7092d84 libct/cg/fs.setKernelMemory: use fscommon.WriteFile 619de977 libct/cg/fscommon_test: rm cgroups dependency ede8a86e Convert root path to absolute path on create command e8eb8000 fix some linting issues fcf210d6 Fix goreport warnings of ineffassign and misspell 644c107e libcontainer/intelrdt: modify the incorrect file mode 87412ee4 vendor: bump mountinfo v0.3.1 28b452bf libcontainer: unconvert b3a8b074 libcontainer: prefer bytes.TrimSpace() over strings.TrimSpace() 3d5dec2f libcontainer: remove the unused variable from spec b76652fb libcontainer: remove `removePath` from cgroups faaecac7 libcontainer: remove loadConfig which is the unused function c6ac3c4b libcontainer/system: remove deprecated GetProcessStartTime 3eb469b0 libcontainer: remove redundant strings.Join() bc9a7bda setFreezer: explicitly return nil 2a644a7d CI: add golangci-lint via github actions 360981ae libct/cgroups: rewrite getHugePageSizeFromFilenames 819fd683 go.mod: sirupsen/logrus v1.7.0 0eb66c95 go.mod: github.com/containerd/console v1.0.1 8bf21672 use string-concatenation instead of sprintf for simple cases a4d5e8a2 libcontainer/ignoreTerminateError: ignore SIGKILL dc424591 libct/(*initProcess).start: fix removing cgroups on error 8699596d libct/(*setnsProcess).Start: use retErr 38447895 libct/cgroups/systemd: eliminate runc/systemd race 6c83d23f libcontainer/cgroups/fscommon: improve doc 31f0f5b7 libct/cg/fscommon.GetCgroupParamUint: improve e76ac1c0 libct/cg/fscommon.GetCgroupParamString: use ReadFile aac4d1f5 libct/cg/fscommon/GetCgroupParamKeyValue: nits d167be29 libct/cgroups/fs2/statHugeTlb: error message nits 2c70d238 libct/intelrdt: add TestFindIntelRdtMountpointDir ab2b5dfa libcontainer/cgroups: use const for templates b7c446b3 checkpoint: setPageServer: use net.SplitHostPort instead of strings.Split f1c1fdf9 libcontainer/intelrdt: use moby/sys/mountinfo 4929c05a tests/int: add cgroupv2 unified resources tests 6e2159be tests/int/cgroups: make sure to rm containers b006f4a1 libct/cgroups: support Cgroups.Resources.Unified 8ceae9f7 libct/cgroups/GetHugePageSize: use Readdirnames 9aff7aae libct/utils: add GetHugePageSize benchmark 30601efa tests/int/spec.bats: simplify 6c21de38 tests/int/spec: only run once for rootless 186a38ba tests/int: whitespace cleanup 792d2c3b tests/int/cgroups.bats: rm unused code 908b7076 tests/int/*.bats: make sure to delete containers 1c3af275 libcontainer: newContainerCapList() refactor to reduce duplicated code 8820a145 libcontainer: initialize slices with length f5c96b74 libcontainer: remove unneeded sprintf and intermediate variable b9e26ad8 libcontainer: remove workaround for RHEL6 kernels 373811ba libcontainer: rename cap variable as it collides with built-in 074e67ad Makefile: fix vendor and verify-dependencies 2ccefa63 restore: tell CRIU to use existing namespaces 71c10e3c vendor: github.com/moby/sys/mountinfo v0.2.0 ba8687fc tests/int/helpers: fix indentation fdb0590c tests/int/helpers: simplify set_cgroup_mount_writable 74b57fea fscommon.WriteFile: simplify error message a3f91b98 vendor: bump runtime-spec b682e8cf vendor: bump fileutils to v0.5.0 d1d13d9a tests/int/checkpoint: don't hide stderr 627074d0 tests/int/checkpoint: rm useless code bca5f24c tests/int/checkpoint.bats: fix showing logs on fail ce24d603 Add integration tests for cgroup devices 8297ae45 Makefile: fix DESTDIR handling dd3e0da3 tests/int/dev.bats: fixes for new busybox bcd30954 tests/int: fix runc exec --preserve-fds ba0246da libcontainer: Store state.json before sync procRun cbb0a793 Make sure signalAllProcesses is invoked in the function of destroy 940e1547 cgroupv1/systemd: (re)use m.paths f075084a cgroupv1/systemd: rework Apply/joinCgroups fad92bbf cgroupv1/Apply: do not overuse d.path/getSubsystemPath 0445fd60 Since no kernels support direct labeling of /dev/mqueue remove label bfb4ea1b Remove check for apparmor_parser in apparmor.IsEnabled() a63f99fc Add support for umask 42d9a6b4 tty.bats: add test cases when stdin is not a tty b79cb048 runc run/exec: fix terminal wrt stdin redirection b8efb020 tests/int/delete.bats: fix shellcheck warnings 28204ce7 tests/int/delete: rm useless code 34b4b106 tests/int: alt fix for shellcheck SC2034 d34f1c81 CI: add shellcheck of bats files f36fb46b tests/int/*bats: ignore SC2016 598d8b73 tests/int/checkpoint.bats: ignore SC2206 08766b98 tests/int/*bats: fix/ignore shellcheck SC2046 4ba4baea tests/int/*bats: fix shellcheck SC2086, SC2006 b02ca2dc tests/int: fix shellcheck warning SC2002 3b80850e tests/int/update.bats: fix a shellcheck warning 612d0790 tests/int/update.bats: fix a shellcheck warning 82836d24 tests/int/cgroups.bats: fix a shellcheck warning 4b8ff6a1 tests/int/checkpoint.bats: ignore some shellcheck warnings ce50e1da test/int/spec.bats: simplify setup/teardown 699fdf89 tests/int/mount.bats: fix a check 85a30698 test/int/hooks.bats: fix here-doc 9a699e1a Skip redundant setup for /dev/ptmx when specified explicitly in the OCI spec. 0709202d Remove runc default devices that overlap with spec devices. 6249136a add libseccomp version to `runc --version` 1d85333a add runtime.Version() to `runc --version` 1e9f8059 cleancode: adjust and make it more readability 335f0806 tests/int/delete: cgroupv1 with sub-cgroups removal case 19be8e5b libct/cgroups.RemovePaths: speedup 3f14242e libct/cgroups: move RemovePath from fs2 254d23b9 libc/cgroups: empty map in RemovePaths bf8bb477 Modify from space to tab Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc: update to 1.0.0-rc93Bruce Ashfield2021-02-052-5/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping to the next rc of runc, which comprises the following commits: 1e0016cf Show error stack trace if --debug is set 5c0342ba libcontainer: fix bad conversion from syscall.Errno to error a9e99b6d ci/gha/fedora: retry vagrant up f26768a8 VERSION: back to development 12644e61 VERSION: release 1.0.0~rc93 c348b982 tests/rootless.sh: fix/ignore shellcheck warnings 11437593 tests/rootless.sh: use set -e -u -o pipefail 5ab05884 ci: untangle getting test images bc175ba4 tests/helpers.bash: rm GOPATH dc025792 ci/gha: bump golangci-lint to v1.36 4d3a8d5e .golangci.yml: add 76ae1f5c libct/cg/fs/freezer: fix freezing race c4bc3b08 Remove "PatchAndLoad" stub as it's not used without seccomp enabled 6ddfaa5e cgroupfs: cpuset: fix broken build ca422896 Makefile: add -trimpath go build flag d89c9629 Fix typo in README b1195b76 ci: test with golang 1.16-rc1 164e0adb tests/int/spec.bats: fix for go 1.16 4160d743 seccomp: add enosys unit tests 8bd19cd5 tests: add seccomp -ENOSYS integration test 7a8d7162 seccomp: prepend -ENOSYS stub to all filters 2be806d1 libcontainer/configs: improve CommandHook unit tests f4d153b0 Fix int overflow in test on 32 bit system 4e98eec1 libct/cg: demote "systemd is too old" to debug c7357aad libct/cg/ebpf/testDeviceFilter: rm verbose logging 6a9f5ac9 libct/cg/fs: fix a linter warning 63c44e27 libct/cg/fs: getPageUsageByNUMA: rewrite/optimize e9248dd5 cgroup: fix panic in parse memory.numa_stat 426aa416 libct/int/TestExecInTTY: skip c30cd3cd libct/int/TestExecInTTY: fix error reporting dac0c1e3 console.ClearONLCR: move it back ab27e12c Implement GetStat for cpuset cgroup. 867ba38e events: simplify some conversion functions 8ce51611 GHA: tune timeouts for VM jobs 510e404e make shfmt: run for all script/* files 90d02ecc Vagrantfile.centos7: clean up after bats install a91210f4 gha: use ssh -tt to have a tty 1f4a3b1e gha: don't check commits on push 4a30ada4 gha: cache docker layers to speed up make runcimage 58c31003 README: rm travis badge a21e57d7 tests/int/hooks.bats: skip earlier 657a24ce libct/cg/TestGetHugePageSizeImpl: only log errors 3394e374 libct/cg/sd/TestRangeToBits: be less verbose 230a46b7 systemd: fix rootful-in-userns regression c751ba3f systemd: show more helpful error a35cad3b libct/cg/sd/v2: warn about old systemd 03b512e5 libc/cg: convert r.CPU.Cpus/Mems to systemd props eee425f5 libct/cg/sd/systemdVersion: don't return error 5de00ad9 tests/int/multi-arch.bash: fix for busybox b3cf4831 script/check-config.sh: fix IOSCHED_CFQ CFQ_GROUP_IOSCHED 1a00cd8f script/check-config.sh: fix MEMCG_SWAP_ENABLED ecb9d73c script/check-config.sh: fix NF_NAT_NEEDED 483abaac script/check-config.sh: fix NF_NAT_IPV4 91eba84a script/check-config.sh: support for cgroupv2 25987d03 libcontainer/intelrdt: adjust the file mode c8e89b8d Remove script/install-vagrant.sh 06a684d6 libct/int/TestExecInTTY: repeat the test 300 times fedaa2ab TestExecInTTY: simplify, improve error reporting 719d70d2 setupIO: simplify code 24c05b71 tty: fix ClearONLCR race 039c47ab libcontainer: signalAllProcesses(): log warning when failing to thaw 18972177 libcontainer: move capabilities to separate package 692fab09 libct/checkProcMounts: optimize 72f46389 libct: add TODO about os.ErrProcessDone d7df3018 libct: suppress bogus "unable to terminate" warnings 637f82d6 runc run: resolve tmpfs mount dest in container scope d64c3afe tests/int/mount.bats: reformat a2c9866e tests/int/mounts.bats: cleanup 9f2153c6 libct/cgroups/fs/cpuset: don't use MkdirAll c85cd2b3 libct/cg/fs/cpuset: don't parse mountinfo c0e14b8b libct/cg/fs.getCgroupRoot: reuse (cached) cgroup mountinfo ed70dfa7 libct/cgroups/v1_utils: implement mountinfo cache 17a0dc31 README: add note about not using runc directly 4bc2aab9 README: add links to misc docs 2dc1bf91 ci: move Fedora 33 and CentOS 7 tests to gha e431fe60 ci: move misc validate tasks from travis to gha 7ecba232 ci: move cross compile check from travis to gha 8ccd39a9 ci: move commit length check from travis to gha 1125ae78 tests/events.bats: unify duplicated code 27268b1a tests/int/cwd: add test case for cwd not owned by runc d869d05a libctr/init_linux: reorder chdir 8bd3b878 test: add case for GH #2086 cb3dd9d8 libct/configs/validate: test for bind-mounted netns 8e8661e1 libct/configs/validate/sysctl: fix repeated netns checks 2dce0699 libct/configs/validate: fix host netns check 2143b368 libct/int/execin_tty: do help debug a flake e709b8ab libctl/cgroups/fscommon: close fd 325a74dd libcontainer/intelrdt: rm init() from intelrdt.go cb269306 remove "selinux" build tag (Always compile SELinux support) 552a1c7b remove "apparmor" build tag (Always compile AppArmor support) 48b8eb09 checkProcMount: add /proc/slabinfo to whitelist 1909051b libct/int/execin_tty: help debug a flake 97929295 libct/intelrdt: fix a staticcheck warning 6437086e libct/addCriu*Mount: fix gosimple warning d0b59548 libct/checkCriuFeatures: fix gosimple linter warning 3de5c514 libct/int: don't hardcode CAP_NET_ADMIN 3387422b libct/int: fix "simple" linter warnings 11680cd2 libct: fix "unused" linter warning a99ecc9e libct/cg/utils: silence a linter warning 3c9b03fd libct/cg/fscommon: log openat2 init failures 6bda4600 libcontainer/cgroups/fscommon: add openat2 support 31b0151f move blkio stat gathering to loop 990a6c57 cgroups: update blkio GetStats be56333f bats: update to 1.2.1 f15c4cca Update umoci to 0.4.6 4344bd8f Dockerfile: use binary criu release 3aead32e nsenter: hard-code memfd_create(2) syscall numbers 5d1b0268 .github/workflows/validate: nits 7cd062d7 libct/cgroup/utils: fix GetCgroupMounts(all=true) 4fc2de77 libcontainer/devices: remove "Device" prefix from types 677baf22 libcontainer: isolate libcontainer/devices de80aae4 recvtty: fix errcheck linter warnings 6b41b463 recvtty: fix waiting for both goroutines 4bbfd2e1 recvtty: use ioutil.Discard c1ef0cf6 ci: add integration+unit tests to github actions fce8dd4d tests/int/tty.bats: increase timeout c6ed1854 ci: add shellcheck to github actions 27835a9e Makefile: move shellcheck out of validate 33bda24a ci: move verify-deps from travis to github actions c60f23b3 ci: add shfmt to github actions 717a73b3 ci: renamed golangci-lint to validate 06b204e5 Makefile: move shfmt out of validate, add -w 7856c340 Dockerfile: bump criu to 3.15 ee1bdb80 vendor: github.com/cilium/ebpf v0.2.0 f0d5e839 Dockefile: fix path to skopeo repo d9010b0e integration: update README to link to bats-core 3f2f06df Move cgroup v2 out of experimental f62ad4a0 libcontainer/intelrdt: rename CAT and MBA enabled flags 620f4c5c libcontainer/intelrdt: fix CMT feature check 896da0b9 docs: terminals: modify the example of Pass-Through mode. 4690064f update vendor 9403afd7 CI: Fedora 33: print kernel version, systemd version, and rootfs type 0a097615 CI: update Fedora to 33 41aa7640 linux: drop MS_REC for readonly remount a4e6955e linux: fix remount readonly in a user namespace 2e968a83 libct/cg/sd/v2: "support" (ignore) memory.oom.group c013be56 libct/cg/sd/v2: support memory.* / Memory* unified 13afa58d libct/cg/sd/v2: support cpuset.* / Allowed* 5be8b97a libct/cg/sd/v2: support cpu.weight / CPUWeight 390a98f3 runc update: support unified resources ab80eb32 libct/cg/sd/v2: support cpu.max unified resource 7f24098d tests/int: move check_cpu* to helpers fd5226d0 libct/cg/sd: add defCPUQuotaPeriod 0cb8bf67 Initial v2 resources.unified systemd support ed548376 tests/int/update.bats: add checks for runc status d0991db2 tests/int/cgroups.bats: reformatting a66a8238 ci: pin shfmt to v3.2.0 2ceb9719 tests/integration: rm excessive run use e32716d3 tests/int: simplify teardown_running_container c114919f tests/int: fix "runc exec --preserve-fds" 7b8c4e98 shfmt mounts.bats to pass `make validate` ac5ec5e3 libcontainer/integration: fix unit test f5c345c3 test: add "runc run --no-pivot must not expose bare /proc" 17de6f80 vendor: bump mountinfo to v0.4.0 70538b39 Update bash completion to support systemd-cgroup 933c4d31 libcontainer/intelrdt: privatize IntelRdtManager and its fields 2c004a10 libcontainer/intelrdt: introduce NewManager() abcc1aae fix some typos about libcontainer 939ad4e3 don't panic when /sys/fs/cgroup is missing for rootless 7613c718 Update bash completion to support new capabilities b8bf5728 rootfs: handle nested procfs mounts for MS_MOVE 5903b0ce libcontainer/intelrdt: remove 'omitempty' property from CMT and MBM counters 0253a08d CI: add shfmt for sh files ff9852c4 *.sh: use shfmt 069fddfa CI: add shfmt for bats fc8c7797 tests/integration/*.bats: reformat with shfmt 0aa0fae3 Kill all processes in cgroup even if init process Wait fails 978fa6e9 Fixing some lint issues f0fdde79 libct/cg/systemd/v1: fix err check in enableKmem c1bba720 libct/cg/systemd/v1: do not use c.Path fa47f958 libct/int/newTemplateConfig: add systemd support 9135d99c libct/int/newTemplateConfig: add userns param 73d93eeb libct/int: make newTemplateConfig argument a struct fb4c27c4 Fix mount error when chmod RO tmpfs 002c92f1 libct/cg.WriteCgroupProc: use fscommon.OpenFile c95e6900 libct/cg/fs*: use fscommon.OpenFile d55729f1 libct/cg/fs/blkio: use fscommon.OpenFile 0228226e libcontainer/cgroups/fscommon: introduce OpenFile b4483305 Add error message e25b8cfc libct/cg/utils: use fscommon.ReadFile 6bae53f5 libct/cg/fs2: use fscommon.ReadFile 2588e6f1 libct/cg/fs/cpuset: use fscommon.ReadFile 1d20cf49 libct/cg/fs/cpuacct: use fscommon.ReadFile 9e78b66e libct/cg/systemd/v1.enableKmem: use fscommon.ReadFile 31634436 libct/cg/fs2.CreateCgroupPath: use fscommon.*File b7092d84 libct/cg/fs.setKernelMemory: use fscommon.WriteFile 619de977 libct/cg/fscommon_test: rm cgroups dependency ede8a86e Convert root path to absolute path on create command e8eb8000 fix some linting issues fcf210d6 Fix goreport warnings of ineffassign and misspell 644c107e libcontainer/intelrdt: modify the incorrect file mode 87412ee4 vendor: bump mountinfo v0.3.1 28b452bf libcontainer: unconvert b3a8b074 libcontainer: prefer bytes.TrimSpace() over strings.TrimSpace() 3d5dec2f libcontainer: remove the unused variable from spec b76652fb libcontainer: remove `removePath` from cgroups faaecac7 libcontainer: remove loadConfig which is the unused function c6ac3c4b libcontainer/system: remove deprecated GetProcessStartTime 3eb469b0 libcontainer: remove redundant strings.Join() bc9a7bda setFreezer: explicitly return nil 2a644a7d CI: add golangci-lint via github actions 360981ae libct/cgroups: rewrite getHugePageSizeFromFilenames 819fd683 go.mod: sirupsen/logrus v1.7.0 0eb66c95 go.mod: github.com/containerd/console v1.0.1 8bf21672 use string-concatenation instead of sprintf for simple cases a4d5e8a2 libcontainer/ignoreTerminateError: ignore SIGKILL dc424591 libct/(*initProcess).start: fix removing cgroups on error 8699596d libct/(*setnsProcess).Start: use retErr 38447895 libct/cgroups/systemd: eliminate runc/systemd race 6c83d23f libcontainer/cgroups/fscommon: improve doc 31f0f5b7 libct/cg/fscommon.GetCgroupParamUint: improve e76ac1c0 libct/cg/fscommon.GetCgroupParamString: use ReadFile aac4d1f5 libct/cg/fscommon/GetCgroupParamKeyValue: nits d167be29 libct/cgroups/fs2/statHugeTlb: error message nits 2c70d238 libct/intelrdt: add TestFindIntelRdtMountpointDir ab2b5dfa libcontainer/cgroups: use const for templates b7c446b3 checkpoint: setPageServer: use net.SplitHostPort instead of strings.Split f1c1fdf9 libcontainer/intelrdt: use moby/sys/mountinfo 4929c05a tests/int: add cgroupv2 unified resources tests 6e2159be tests/int/cgroups: make sure to rm containers b006f4a1 libct/cgroups: support Cgroups.Resources.Unified 8ceae9f7 libct/cgroups/GetHugePageSize: use Readdirnames 9aff7aae libct/utils: add GetHugePageSize benchmark 30601efa tests/int/spec.bats: simplify 6c21de38 tests/int/spec: only run once for rootless 186a38ba tests/int: whitespace cleanup 792d2c3b tests/int/cgroups.bats: rm unused code 908b7076 tests/int/*.bats: make sure to delete containers 1c3af275 libcontainer: newContainerCapList() refactor to reduce duplicated code 8820a145 libcontainer: initialize slices with length f5c96b74 libcontainer: remove unneeded sprintf and intermediate variable b9e26ad8 libcontainer: remove workaround for RHEL6 kernels 373811ba libcontainer: rename cap variable as it collides with built-in 074e67ad Makefile: fix vendor and verify-dependencies 2ccefa63 restore: tell CRIU to use existing namespaces 71c10e3c vendor: github.com/moby/sys/mountinfo v0.2.0 ba8687fc tests/int/helpers: fix indentation fdb0590c tests/int/helpers: simplify set_cgroup_mount_writable 74b57fea fscommon.WriteFile: simplify error message a3f91b98 vendor: bump runtime-spec b682e8cf vendor: bump fileutils to v0.5.0 d1d13d9a tests/int/checkpoint: don't hide stderr 627074d0 tests/int/checkpoint: rm useless code bca5f24c tests/int/checkpoint.bats: fix showing logs on fail ce24d603 Add integration tests for cgroup devices 8297ae45 Makefile: fix DESTDIR handling dd3e0da3 tests/int/dev.bats: fixes for new busybox bcd30954 tests/int: fix runc exec --preserve-fds ba0246da libcontainer: Store state.json before sync procRun cbb0a793 Make sure signalAllProcesses is invoked in the function of destroy 940e1547 cgroupv1/systemd: (re)use m.paths f075084a cgroupv1/systemd: rework Apply/joinCgroups fad92bbf cgroupv1/Apply: do not overuse d.path/getSubsystemPath 0445fd60 Since no kernels support direct labeling of /dev/mqueue remove label bfb4ea1b Remove check for apparmor_parser in apparmor.IsEnabled() a63f99fc Add support for umask 42d9a6b4 tty.bats: add test cases when stdin is not a tty b79cb048 runc run/exec: fix terminal wrt stdin redirection b8efb020 tests/int/delete.bats: fix shellcheck warnings 28204ce7 tests/int/delete: rm useless code 34b4b106 tests/int: alt fix for shellcheck SC2034 d34f1c81 CI: add shellcheck of bats files f36fb46b tests/int/*bats: ignore SC2016 598d8b73 tests/int/checkpoint.bats: ignore SC2206 08766b98 tests/int/*bats: fix/ignore shellcheck SC2046 4ba4baea tests/int/*bats: fix shellcheck SC2086, SC2006 b02ca2dc tests/int: fix shellcheck warning SC2002 3b80850e tests/int/update.bats: fix a shellcheck warning 612d0790 tests/int/update.bats: fix a shellcheck warning 82836d24 tests/int/cgroups.bats: fix a shellcheck warning 4b8ff6a1 tests/int/checkpoint.bats: ignore some shellcheck warnings ce50e1da test/int/spec.bats: simplify setup/teardown 699fdf89 tests/int/mount.bats: fix a check 85a30698 test/int/hooks.bats: fix here-doc 9a699e1a Skip redundant setup for /dev/ptmx when specified explicitly in the OCI spec. 0709202d Remove runc default devices that overlap with spec devices. 6249136a add libseccomp version to `runc --version` 1d85333a add runtime.Version() to `runc --version` 1e9f8059 cleancode: adjust and make it more readability 335f0806 tests/int/delete: cgroupv1 with sub-cgroups removal case 19be8e5b libct/cgroups.RemovePaths: speedup 3f14242e libct/cgroups: move RemovePath from fs2 254d23b9 libc/cgroups: empty map in RemovePaths bf8bb477 Modify from space to tab Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker/moby: update to 20.10.3Bruce Ashfield2021-02-054-95/+27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updating to the 20.x series for moby. The following moby commits: 519a55f491 TestCgroupNamespacesRunOlderClient: support cgroup v2 b6a6a35684 docker info: adjust warning strings for cgroup v2 25bd941ae4 docker info: silence unhandleable warnings 58283298d7 rootless: set systemd KillMode to mixed 46229ca1d8 Use golang.org/x/sys/execabs a7d4af84bd pull: Validate layer digest format 611eb6ffb3 buildkit: Apply apparmor profile 4afe620fac vendor buildkit 68bb095353c65bc3993fd534c26cf77fe05e61b1 e908cc3901 Use real root with 0701 perms bfedd27259 Do not set DOCKER_TMP to be owned by remapped root edb62a3ace Ensure MkdirAllAndChown also sets perms 1c0af18c6c vendor: opencontainers/selinux v1.8.0, and remove selinux build-tag and stubs 4a175fd050 Cleanup container shutdown check and add test ab06bb3ec0 vendor: opencontainers/selinux v1.7.0 f3d0f7054d cmd/dockerd: sd_notify STOPPING=1 when shutting down c923f6ac3b Fix off-by-one bug 1c5806cf57 Move use of debian:buster frozen image to debian:bullseye af0665861b Fix a potential hang when starting after a non-clean shutdown 7ba1af38b8 TESTING.md: note that integration-cli is deprecated a0fc7a4b46 TESTING.md: Fix path the test environment conditions f2f5106c92 Add a test for #41723 b314e901d8 Add IsUserNamespaceInKernel() test environment condition 58a4c03fed Add debian:bullseye to frozen images 188a691db7 fuse-overlayfs: fix godoc 295fb1c35e Fix jobs mode filter spelling 78eafdd947 Vendor in Libnetwork changes 7e600eaae0 daemon: improve log messages during startup / shutdown e8648fa19f plugin/manager_linux_test: Skip privileged tests when non-root c7e7426796 pkg/chrootarchive: Skip privileged tests when non-root 6349b32e1b daemon/oci_linux_test: Skip privileged tests when non-root a02553670e vendor buildkit to v0.8.1 5fd8d701ce Vendor in libnetwork changes 9122cd1a75 docs: add API v1.41 5458b0e435 Revert "Add multi-user.target to After=" 495d623ae5 Add fallback for pull by tag 34682e536e vendor: BuildKit 950603da215ae03b843f3f66fbe86c4876a6f5a1 15accb8376 vendor: remove vendored golang.org/x/tools, as it's not needed cd63cc846e mark ip6tables as experimental feature dd752ec87a Fix jobs-related bug in task conversion 0a8c769268 update containerd binary to v1.4.3 (CVE-2020-15257) 2680a0fe2c Networking: add regression test for networks endpoint with trailing slash f9b2989e97 Fix permissions on oci fixtures files 703951197c update containerd binary to v1.4.2 22e31dbd9a vendor libnetwork to fix mix up between IPv4 and IPv6 ab09458e21 dockerd-rootless-setuptool.sh: show more helpful error messages 776cadc7db vendor: gotest.tools v3.0.3 aeddf93de0 Implement Unwrap to errors 73571e4689 vendor: github.com/moby/buildkit v0.8.0-rc2 1f88736871 vendor: github.com/containerd/containerd 0edc412565dcc6e3d6125ff9e4b009ad4b89c638 8eebe32f5c vendor: github.com/containerd/cgroups 0b889c03f102012f1d93a97ddd3ef71cd6f4f510 ba475d44a7 vendor: github.com/containerd/fifo 0724c46b320cf96bb172a0550c19a4b1fca4dacb 37da117aba vendor: github.com/containerd/ttrpc v1.0.2 1725a1493e vendor github.com/tonistiigi/fsutil 0834f99b7b85462efb69b4f571a4fa3ca7da5ac9 fa592fa7b2 vendor: golang.org/x/crypto c1f2f97bffc9c53fc40a1a28a5b460094c0050d9 c7f0b509cf vendor: github.com/moby/term bea5bbe245bf407372d477f1361d2ff042d2f556 2630994b35 Bump libnetwork dbffbe8f9b builder-next: fix platform-specific behavior f4214ec847 vendor: github.com/Microsoft/go-winio v0.4.15 was tagged 05c20a6e1c handleContainerExit: put a timeout on containerd DeleteTask beff0a5f2c integration-cli: remove TestBuildContChar 39f9c1b5d1 builder-next: fix --cache-from panic 8f464ae2ab builder-next: refactor to use flighcontrol and remove resolveOnce 1b1eb094cc builder-next: simple refactor 3756668adb builder-next: Refactor using buildkit's resolver pool de56a90929 vendor buildkit 6861f17f15364de0fe1fd1e6e8da07598a485123 f7bcb02f67 seccomp: Add pidfd_getfd syscall 5e3ffe6464 seccomp: Add pidfd_open and pidfd_send_signal 2b41e84719 pkg/system: fix compile on darwin (macOS) b4b902b88f Jenkinsfile: remove e2e image stage 6d243cdf27 testutil: remove remaining use of deprecated pkg/mount 43d61d2bcf [DEL] remove useless assert 6458f750e1 use containerd/cgroups to detect cgroups v2 7ba05f2b2b Rewrite VolumesMountedAsShared/Slave as Integration tests 7bb729e928 Break out non-Windows sys/mount usage into helper 3e3f3d7168 Move tests using sys/mount to not build on Windows a158b53d86 Separate non-Windows mount code from common code 080d9df63e Don't clear the exit code from the Finally block 1bb3491601 builder: fix detection of experimental --stream option (deprecated) 51f5b1279d Don't set image on containerd container. d99e8d2c3b Unhide containerd-namespace flags 9ca3bb632e Store image manifests in containerd content store 66459cc623 Added ip6tables config option c6accc67f2 bump up rootlesskit to v0.11.0 dfc2d770e4 Update iptable.Exists API in integration-cli 53727ce2f0 vendor: github.com/creack/pty v1.1.11 dc3c382b34 replace pkg/symlink with github.com/moby/sys/symlink c208f03fbd pkg/devicemapper: fix invalid usage of reflect.SliceHeader 6a5393636e opts: unify host-options, and use consts 80a5df9c49 Added container ID to containerd task delete event messages 053962af92 Move HostGatewayName const to opts, and change vars to consts e4cf1c7336 pull: use tag service for pulling tagged reference e766361271 pkg/mount: update deprecated wrappers 32d506b394 vendor: moby/sys mountinfo/v0.4.0 182795cff6 Do not call mount.RecursiveUnmount() on Windows 1623e6b222 Vendor in Libnetwork changes ac84f1b55f registry.loginV2(): minor cleanup b102d4637c Fix windows log file rotation with readers bcc993b494 Fix logfile to open all files with custom openFile 56ba96b6c1 Clean up some logfile implementation 3148a46657 Fix various race conditions in loggerutils 93bd2c1336 contrib: remove download-frozen-image-v1 script b90ef1237e registry: minor cleanup in search code 3f7c62f6f6 registry: remove v1 code not related to searching 0ba2d7c625 registry: remove TestSameAuthDataPostSave 32eaf4690a registry: DefaultService.Auth(): skip parsing default registry 7782d04141 registry: remove v1 authentication ab47fd2f72 registry: use consts for default registry 1a1f5cc37b Pass through GOCACHE to test_env 8cc0fd811e docs: fix builder-version swagger 1b8826beee docker stats: fix 'panic: close of closed channel' 6f0709e033 vendor: golang.org/x/sys eeed37f84f13f52d35e095e8023ba65671ff86a1 4680836f80 vendor: github.com/containerd/console v1.0.1 88c0271605 Don't set default platform on container create 80c3199c18 vendor: github.com/spf13/cobra v1.1.1 561b8014c0 testutil: set -500 OOM score for test daemons 2b8e68ef06 dockerd: remove default -500 oom-score-adjust a6129c57e6 Bump vndr v0.1.2 a38b96b8cd Temporarily disable CAP_PERFMON, CAP_BPF, and CAP_CHECKPOINT_RESTORE 5338478546 Dockerfile: fix golang-ci-lint installer f14aea63c9 "Fix" checkpoint on v2 runtime 654cad4d9d Also trim "~..." from AppArmor versions f6f294bd83 testing: Init plugin config when for tests 4539e7f0eb seccomp: implement marshal/unmarshall for MinVersion 6b538ffbca vendor: github.com/gofrs/flock v0.7.3 cf7a5be0f2 daemon: don't adjust oom-score if score is 0 8c31e4536a volume/local: add tests for size quota 2e05db981b quota: move test helper functions to extra file 6d593fe6cc volume/local: decouple presence of options from mounting c677e4cc87 quota: move quota package out of graphdriver 6f1553625d projectquota: build types and unsupported stubs everywhere 31ed121cb8 projectquota: sync next projectID across Control instances 963e5afc04 Update documentation to reflect deprecation of "NewEnvClient" a692823413 seccomp: add test for unmarshal default profile 97535c6c2b seccomp: remove dependency on pkg/parsers/kernel ee079e4692 pkg/aaparser: support parsing version like "3.0.0-beta1" a3256d2dd8 bump google.golang.org/api v0.8.0 2971204e43 bump go.opencensus.io v0.22.3 bbde240ce0 bump cloud.google.com/go v-0.44.3 ef553e14a4 Fix gcplogs memory/connection leak c9bbf37f85 vendor: sirupsen/logrus v1.7.0 2036b277a5 Add TARGETARCH var to frozen images stage c9c7756301 oci: add tests for loading seccomp profiles 56e7bc4b78 seccomp: remove dependency on oci package dedf8528a5 Allow download-frozen-images to work without `go` b8aec34680 seccomp: add test for loading old JSON format 5f5285a6e2 Sterner warnings for unathenticated tcp 7afef854ed api: clarify "v" option behavior in the container remove endpoint 7335167340 Remove redundant "os.IsNotExist" checks on os.RemoveAll() 5a7b75f889 daemon/graphdriver/copy: use IoctlFileClone from golang.org/x/sys/unix 6267800783 vendor: golang.org/x/sys aee5d888a86055dc6ab0342f9cdc7b53aaeaec62 2502db66d0 pkg/system: make EnsureRemoveAll unix-specific 88126e84a5 Force Download-File function to use TLS 1.2 66a37b460c Windows: Enable more integration tests 35c531db1a Revendor Microsoft/go-winio for 8gB file fix 2dd9faaa16 Enable TestBuildWithHugeFile on Windows 0d75b63987 seccomp: replace types with runtime-spec types 0efee50b95 seccomp: move seccomp types from api into seccomp profile 968133c86c vendor: opencontainers/go-digest v1.0.0 7cdced6f4b vendor.conf: fix tar-split version comment 9fb324f00b vendor: docker/libnetwork d0951081b35fa4216fc4f0064bf065beeb55a74b 89bec2e267 Fix collecting the daemon under test logs 82b5ff8026 Windows CI: Make sure that CI fails on any error 1ed6589e39 vendor: github.com/syndtr/gocapability 42c35b4376354fd554efc7ad35e0b7f94e3a0ffb af3220884e vendor: github.com/containerd/containerd v1.4.1 1371a629d5 update containerd binary to v1.4.1 4ab96db4ab vendor: github.com/moby/term 7f0af18e79f2784809e9cef63d0df5aa2c79d76e 2344b3a9e1 fix integration test case TestExternalGraphDriver failed in mips arch 3d9120f744 Unify same fromStatT() implementation for FreeBSD and NetBSD 41be7293f5 daemon/listeners: use pkg/errors 6efa9e0575 Add support for NetBSD df7031b669 Memoize seccomp value for SysInfo b83dc8e5a2 Remove libseccomp-golang from vendor ccbb00c815 Remove dependency in dockerd on libseccomp dc72890470 Remove "mkimage.sh" and associated scripts 5ca758199d replace pkg/locker with github.com/moby/locker 13e0ba700a swagger: fix MemTotal units in SystemInfo endpoint 16eb522928 vendor: containerd v1.4.0 a8e7115fca Simplify seccomp logic 65a33d02f6 Simplify getUser() to use libcontainer built-in functionality 322c9e6866 add partial metadata to journald logs 245f2d922a vendor: github.com/opencontainers/selinux v1.6.0 fdd22e5628 vendor: github.com/gorilla/mux v1.8.0 d1c2f953c5 Test: Add buffer to two channels to avoid blocking goroutine ea9886cec4 pkg/idtools: refactor to avoid string-splitting 15292d7abf update containerd binary to v1.4.0 a18139111d Add faccessat2 to default seccomp profile. 010adeec55 Builder: print relative path if COPY/ADD source path was not found b8988c8475 Add openat2 to default seccomp profile. c255404a25 opts: simplify ValidateEnv to use os.LookupEnv c353c7cc71 vendor runc library to v1.0.0-rc92 7ab5b00a9c vendor golang.org/x/sys v0.0.0-20200622214017-ed371f2e16b4 2ee753a28f vendor golang.org/x/net v0.0.0-20200707034311-ab3426394381 5eccaaceb5 vendor golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9 15d38650ee vendor containerd library to v1.4.0-rc.1 cf169b45bb daemon.setupPathsAndSandboxOptions() skip resolving symlinks 3ee1ab87b7 Update docker-py to 4.3.0 906007f6c1 libcontainerd: use cancellable context for events 60d7265803 Use IsServing to determine if c8d client is ready e3ab236309 Add solaris support to lstat 7fd23345c9 Wait for container exit before forcing handler 31d83961e9 Update tini v0.19.0 afd9a6c2b2 builder/remotecontext: use lowercase for error 725eced4e0 apparmor: permit signals from unconfined programs a7c279f203 Add more error message for ops when container limit use an device which not exist 2a6325e310 Bump Golang 1.13.15 2c7b48decd Update runc binary to v1.0.0-rc92 a6b00ed9b9 Update authors and mailmap 0f0c1c04c8 fix TestDaemonNoSpaceLeftOnDeviceError for mips64le 43d13054c5 update containerd to v1.3.7 8ccb46a521 Check for context error that is wrapped in url.Error ad30ef9113 Supplement the omission of pr#41145 6302dbbf46 Disable manifest v2 schema 1 push 9f28837c1d vendor protobuf v1.3.5 c00d4907da vendor prometheus dependency. e58a00211d vendor bbolt v1.3.5 9ad35b7e69 vendor runc 67169a9d43456ff0d5ae12b967acb8e366e2f181 9424eccfcd vendor containerd 779ef60231a555f7eb9ba82b052d59b69ca2ef10 51e3cd4761 statsV2: implement Failcnt 0592aac95c vendor: update containerd/cgroups 0ca7456e52 Add multi-user.target to After= bd0c2b3581 oci/deviceCgroup(): remove redundant variable 3108ae6226 oci: correctly use user.GetExecUser interface c76f380bea Add ulimits support to services 2b22a2e792 fix buildkit pull nil panic 1fdb1033c4 Bump swarmkit to d6592ddefd8a5319aadff74c558b816b1a0b2590 818bad6ef2 vendor: vishvananda/netns db3c7e526aae966c4ccfa6c8189b693d6ac5d202 36b1920e56 vendor: docker/swarmkit 293aa2e66279a930999044cbf6d0e590baac16ff c458bca6dc Handle missing c8d task on stop afdf5483c9 vendor: update containerd/continuity efbc4488d8fe1bdc16bde3b2d2990d9b3a899165 51c7992928 API: add "prune" events 5bc41368d9 bump up rootlesskit to v0.10.0 aa225972df Remove apt.dockerproject.org from test f2cc755f66 docs: API v1.39: move system version response to definitions e221931ccd docs: API v1.40: move system version response to definitions d4c4323e54 swagger: move system version response to definitions 24f173a003 Replace service "Capabilities" w/ add/drop API 9a6402d761 docs: API v1.39: fix type for BuildCache CreatedAt and LastUsedAt a305abb1d1 docs: API v1.40: fix type for BuildCache CreatedAt and LastUsedAt 61b770a63d swagger: fix type for BuildCache CreatedAt and LastUsedAt b8ca7de823 Deprecate KernelMemory a8b2272ab3 swagger: sync updates to v1.39 1e89ca40ba swagger: sync updates to v1.40 baa321293f Revendor swarmkit 441211986c docs: add example calculations to container stats API c8008bfbe9 fix address pool flags merge #40388 8774804ca7 vendor: update buildkit to 4d1f260e8 c161d6564d api/types: omit empty DefaultAddressPools d4b3e786ed docs: add mention of DefaultAddressPools to API history 9c66a2f4e1 Bump Golang 1.13.14 bf4a5982f0 testing: bump docker-py 4.2.2 c6d860ace6 Fix log file rotation test. bf7fd015f7 Remove unused useShimV2() bc4f242e79 Bump Go 1.13.13 0b14c2b67a cgroup v1: change the default runtime to io.containerd.runc.v2 c9c9e0ab90 pkg/parsers: remove uses of mattn/go-shellwords 818e0b2fcf pkg/parsers: add unit test for Darwin c88a830507 distribution/xfer: use "main" instead of "master" for progress channel 3895dd585f Replace uses of blacklist/whitelist f63f73a4a8 Configure shims from runtime config 6fd94aa933 Fix lint error on sprintf call for runtime string 219e7e7ddc vendor: libnetwork 9e99af28df21367340c95a3863e31808d689c92a b42ac8d370 daemon/stats: use const for clockTicksPerSecond 840a12ac90 Add DefaultAddressPools to docker info #40388 2865478487 Revendor hcsshim to fix image import bug 63382e5f3b docs: sync API v1.39 swagger formatting with current version 01244e85e7 docs: sync API v1.40 swagger formatting with current version d4d62b658d swagger: add DeviceRequests to container create, inspect example 89876e8165 swagger: move NetworkingConfig to definitions 91ca3e7a8d update runc binary to v1.0.0-rc91 85e3dddccd update containerd to v1.3.6 d2e23405be Set minimum memory limit to 6M, to account for higher startup memory use 228d74842f Upgrading the versions of images in Dockerfile. 97708281eb info: improve "WARNING: Running in rootless-mode without cgroup" 3258d565cf Fix status code for missing --volumes-from container 0e915e5413 update containerd to v1.3.5 3b80af727a fix typos and grammar in docs e3cff19dd1 Untangle CPU RT controller init afbeaf6f29 pkg/sysinfo: rm duplicates a9d22cad93 hack/install: build gotestsum without -buildmode=pie 20570d91c8 Dockerfile.windows: fix gotestsum.installer installing wrong version 441aff3a17 fix gotestsum.installer installing wrong version d0d99b04cf seccomp: allow 'rseq' syscall in default seccomp profile 794aa20983 dockerd-rootless.sh: support containerd v1.4 shim socket path convention ab6b92b6b2 chrootarchive: fix "conversion from int to string yields a string of one rune" 671459a989 Switch all Dockerfiles to use "buster" variant a8ae48d94f project: remove obviously outdated docs c66c5f4904 contrib: remove docker-machine-install-bundle.sh 32b4590b23 contrib: remove REVIEWERS files 45eb4e0d80 contrib: remove outdated vagrant docs 6b6af2abd9 contrib: remove outdated "desktop-integration" examples 6743320a12 dockerd-rootless.sh: allow specifying DOCKERD_ROOTLESS_ROOTLESSKIT_PORT_DRIVER c3acd082c7 TestUserNoEffectiveCapabilitiesNetBindService: conditionally set net.ipv4.ip_unprivileged_port_start ed89041433 test-integration: support cgroup2 87a7fc1ced Enable client on netbsd and dragonfly 87b8947580 TestDaemonDNSFallback: increase timeout to reduce flakiness 3e2965831f vendor: golang.org/x/text v0.3.3 5d97de47ec dockerd-rootless-setuptool.sh: use safer XRD on non-systemd hosts e07a88c95f fix code note when push all tags 9b28939345 vendor: update buildkit to df35e9818 66bb1c4644 pkg/sysinfo: use containerd/sys to detect UserNamespaces 9ff990a2b9 pkg/chrootarchive: use containerd/sys to detect UserNamespaces f7d5d70e44 pkg/archive: use containerd/sys to detect UserNamespaces 4534a7afc3 daemon: use containerd/sys to detect UserNamespaces 79cfcba76c cgroup2: unshare cgroupns by default regardless to API version 6fabb93f73 Make script pass shellcheck 56de0489fc int-cli/TestRunInvalidCPUShares: fix for newer runc d378625554 info: add warnings about missing blkio cgroup support 004fd7be92 Bump Golang 1.13.12 96556854a7 Fixes #41010 skip empty lines 687bdc7c71 API: swarm: move PidsLimit to TaskTemplate.Resources 2befe194af hack: remove useless constants 9b77370213 int/build/TestBuildWithEmptyLayers: prevent panic dae652e2e5 Add default sysctls to allow ping sockets and privileged ports with no capabilities a1afad3aab api/types: remove errdefs dependency f758d598c5 make install: install containerd-shim-runc-v2 7ad0da7051 remove group name from identity mapping 8cc8e26835 testing: bump docker-py 4.2.1 9a78e916ad integration: Add TestDaemonDNSFallback 83199187ef vendor libnetwork to 2e24aed516bd5c836e11378bb457dd612aa868ed b280ea114f hack: add more debugging to understand exit codepath a9569f5243 vendor: opencontainers/selinux v1.5.2 a366fe41cb fix "stat.Rdev" invalid operation mismatched types on mips64el compile error the "stat.Rdev" variable and "s.Rdev" mismatched types on mips64el convert "stat.Rdev" type to uint64 explicitly a5324d6950 Better selection of DNS server 288ed93dc5 daemon.allocateNetwork: include original error in logs 84ef60cba2 allocateNetwork: don't assign unneeded variables b98b8df886 allocateNetwork: fix network sandbox not cleaned up on failure d5da7e5330 pkg/sysinfo/sysinfo_linux.go: fix some comments f02a53d6b9 pkg/sysinfo.applyPIDSCgroupInfo: optimize 0c350e87a0 ldmode=pie is not supported for the mips arch reference: https://github.com/docker/cli/pull/2507 https://github.com/containerd/containerd/commit/4c99c81326f4026fb8c0b8c5e10542205d99c321 1192c7aee4 seccomp: remove the unused query_module(2) 2a331a5ef7 rm_test: fix goroutine leak 5ea5c02c88 Fix flakey test for log file rotate. 0154dc7a23 Using test names instead of hardcoded ones in integration/image directory 4cabad6bae Using test names instead of hardcoded ones in integration/container directory 6bc112abde Fixed small documentation typo ebd025b63a Using test names instead of hardcoded ones in integration/build directory 84748c7d4e API: split types for Resources Reservations and Limits a342010823 Dockerfile: bump CRIU 3.14 90758fb028 Bump Golang 1.13.11 aadc55c605 Dockerfile.windows: fix build of gotestsum 1d9da1b233 Fix bug in gotestsum installer causing dependencies to not be downloaded a36db14ce0 plugin: remove Rlock in resolvePluginID to fix double Rlock f48b7d66f3 Fix filter on expose and publish c696b95269 add dockerd-rootless-setuptool.sh fdb71e410c registry: fix mtls config dir passing a430bc5d5f builder-next: fix layer access bug 6a5e3547fb pkg/archive: escape ":" symbol in overlay lowerdir 9871b6e30e Fix TestSwarmManagerAddress to not depend on "pretty" format 17bb5f4b15 bump up rootlesskit to v0.9.5 49f8a4224c SELinux: fix ENOTSUP errors not being detected when relabeling 35bf4f87d9 Don't use ini() to set unpigz path 5fd3496e7a vendor: gorilla/mux v1.7.4 64bc9281de vendor: opencontainers/runtime-spec v1.0.2 71411e486d vendor: update containerd c80284d4b5291a351bb471bcdabb5c1d95e7a583 11feae7e59 vendor: containerd/ttrpc v1.0.1 5ed85b0909 vendor: bump containerd/typeurl v1.0.1 c86abee1a4 dockerd-rootless.sh: bump up slirp4netns requirement to v0.4.0 5d3a9e4319 seccomp: Whitelist `clock_adjtime` dc0a400738 vendor: spf13/cobra v1.0.0 69df2589cd vendor: spf13/pflag v1.0.5 11a5b1887e vendor: moby/term 73f35e472e8f0a3f91347164138ce6bd73b756a9 4ac17adcd3 vendor: golang.org/x/sys 85ca7c5b95cdf1e557abb38a283d1e61a5959c31 de7f0120fd Dockerfile: mount install scripts instead of copying d1a3a17c67 Dockerfile: remove "INSTALL_BINARY_NAME" envs 3989f91075 logfile: Check if log is closed on close error during rotate 25fd814652 vendor: golang.org/x/sys 5c8b2ff67527cb88b770f693cebf3799036d8bc0 d84ed625a7 vendor: add version comment for containerd/typeurl, ttrpc fa8199b453 vendor: add comment that containerd/console is v1.0.0 7608e42da5 Fix curl progress flags 08d3774304 vendor: Microsoft/hcsshim v0.8.9 a8216806ce vendor: opencontainers/selinux v1.5.1 e1e544c8c6 vendor: sirupsen/logrus v1.6.0 6168b875a4 Dockerfile.buildx: bump to Go 1.13.10 886c8385f5 containerd.installer: refactor 3b261d7709 swagger: reformat, and wrap to ~80-chars f85bea4ee7 Make binary: install all containerd shims to bundles a4400d328c Makefile: remove empty targets, and slight refactor 996be00fb9 vendor: sort imports to prevent vendoring race condition 84d7b57eb7 Dockerfile: update syntax to 1.1.7-experimental 8006a9d08c vendor konsorten/go-windows-terminal-sequences v1.0.3 90f19fc375 cmd/dockerd: remove outdated "experimental" annotation 07d60bc257 Replace errors.Cause() with errors.Is() / errors.As() b2af9e631c vendor: update moby/ipvs v1.0.1 f6ac841633 bump up rootlesskit to v0.9.4 841c1f3388 Remove blurb about fixed in go1.11 in patch file 7260adfff9 vendor: add local copy of archive/tar 5702a89db6 Use strings.Index instead of strings.Split 964731e1d3 Improve error feedback when plugin does not implement desired interface 4714ab5d6c cgroup2: use "systemd" cgroup driver by default when available 8312004f41 remove uses of deprecated pkg/term 41d4112e89 pkg/term: vendor moby/term and make pkg/term an alias 701b39f5f0 pkg/term: deprecate package in favor of moby/term 33ee7941d4 support `--privileged --cgroupns=private` on cgroup v1 c3808634e7 vendor: update libnetwork 1a17fb36132631a95fe6bb055b91e24a516ad81d f337a8d21d Do not require "experimental" for metrics API f350b53241 cgroup2: implement `docker info` ed096538e8 extract logic for resolving image/plugin digest and platform 2376ebd3f2 fix --cluster-store-opt deprecation annotation 10c748cd39 imageWithDigestString: return image unmodified if there are no changes 799bd475fb ServiceCreate/ServiceUpdate: refactor and fix potential NPE 7400375526 daemon: remove distribution/uuid package fbaaca6351 update containerd to v1.3.4 157c53c8e0 Add API support for PidsLimit on services a9d20916c3 swarm: fix API version detection cdc39fa29c integration/config: add check for removing non-existing config 1a7ffe4fe4 integration/secret: add check for empty list not producing an error 632cc7019a integration/config: remove check that was already done in TestConfigInspect 26f2eddaa3 integration/config: combine TestConfigCreateWithLabels with TestConfigsCreateAndDelete 3c4b258f21 integration/secret: don't string-match errors 18cae89436 integration/config: don't string-match errors 348f412d85 integration: sync minor changes between config and secret tests a45c89ecd1 integration/secret: fix TestSecretInspect not actually checking response 25424cf772 integration/config: move functions to be in line with "secret" tests 3c6f018f94 integration/secret: TestTemplatedSecret: simplify task code de78663181 integration/secret: rename variables that collided with imported package name dd67b4794e integration/config: TestTemplatedConfig: simplify task code ec78112edd integration/config: rename variables that collided with imported package name 0cdf6ba9c8 vendor: update buildkit to ae7ff174 eb14d936bf daemon: rename variables that collide with imported package names 797ec8e913 daemon: rename all receivers to "daemon" 5d040cbd16 daemon: fix capitalization of some functions eeef12f469 daemon: address some minor linting issues and nits ced91bee4b On startup, actually shutdown the container. e9d785ce3f enhance storage-opt validation logic in overlay2 driver f3c1eec99e add zombie check for container when killing it, alernative fix for #40735. 7cb13d4d85 Bump Golang 1.13.10 e9348898d3 api docs: fix broken link on GitHub 933a87236f Reduce allocations for logfile reader c44fb42377 swagger: clarify the meaning of Image field in ContainerInspect endpoint f2c432636b pkg/authorization: Fix test failures on macOS fe2aca0e39 Only check variant if set on image. 1026f873a4 seccomp: allow syscall membarrier 06ca1606e1 Fixed typo in inventor comments. d1304a8c74 Jenkinsfile: remove redundant DOCKER_EXPERIMENTAL 5ca47f5179 rootless: graduate from experimental 2b8ae08571 docs: add API versions v1.30 - v1.37 381c192027 Revert "vendor: update go.etcd.io/bbolt v1.3.4" dc089c22ce vendor: pkg/errors v0.9.1 e7183dbfe9 vendor: update go-events to fix alignment for 32bit systems bd8490c0de vendor: jmespath/go-jmespath v0.3.0 e5ca303cff vendor: add version comments for some dependencies 6ee9a1ad29 Bump Golang 1.13.9 5ad981640f builder: fix concurrent map write 7ac638f86a Add support to riscv64 to the build scripts 3e3cd7b255 Pin busybox to fixed version and verify sha256 97b742676b hack/ci/windows.ps1: build busybox from local Dockerfile 8164f298f9 vendor jhowardmsft/busybox 9688ca59b3 Rename newer build_shell target to build d7ba1f85ef Use containerd dist libs for plugin pull/pull 85dc0fb7d5 pkg/mount: make standalone golint happy 0d3b400ab5 LCOW: add "no_lcow" build tag to allow disabling lcow 3802830989 cgroup2: implement `docker stats` 745ed9686b pkg/idtools: fix use of bufio.Scanner.Err 5b658a0348 daemon.overlaySupportsSelinux: simplify check 3dd0262773 build Dockerfile allows arg for base build FROM f07f320651 vendor: update go.etcd.io/bbolt v1.3.4 ec16053ccf Fix UsageInUsermode value on Windows 1dbf34f3aa Bump swarmkit to ebe39a32e3ed4c3a3783a02c11cccf388818694c 89fabf0f24 seccomp: add 64-bit time_t syscalls 7a9cb29fb9 Accept platform spec on container create 99beb2ca02 pkg/mount: deprecate 39048cf656 Really switch to moby/sys/mount* 59c0495409 pkg/mount: make it shallow 75f7e435a2 vndr: vendor in github.com/moby/sys ea44be4b8f vendor: bump libnetwork ef149a924dfde2e506ea3cb3f617d7d0fa96b8ee 8dd1490473 Support reading multiple bytes in escapeProxy 5e1b246b9a test-integration: support more rootless tests f310bd29bd rootless: support forwarding signals from RootlessKit to dockerd 745fa04e52 service: support --mount type=bind,bind-nonrecursive e26e1cc5c1 vendor: vishvananda/netlink v1.1.0 6859bc7eee Move schema1 deprecation notice 25d6047ec0 unit test on TestParseSignal failed within pkg/signal package on mips64el error log : signal_test.go:20: assertion failed: error is not nil: Invalid signal: SIGEMT signal_test.go:22: assertion failed: When "ParseSignal" function parse sigStr from SignalMap, it find the signal object with key ("SIG"+sigStr). But EMT signal named "SIGEMT" in SignalMap structrue, so the real key is "SIGSIGEMT" , and cannot find the target signal. modify "SIGEMT" to "EMT" in SignalMap structrue. 1d08ccd4ff vendor: update fsnotify v1.4.9 93f3532f64 update VPNKit c239bbbcb2 Switch to s390x Ubuntu 18.04 6c0eb9e849 fix linting in pkg/mount 92e7f8f67c daemon: fail early if rootless && cgroupdriver == "systemd" && cgroup v1 b890c20555 pkg/archive: use mount pkg 83ed668688 pkg/mount.Mount: speedup (remove Mounted check) e36d222666 ci: update golangci-lint v1.23.8 d949fddc6c containerd.installer: install containerd-shim-runc-v2 5bf33adba2 hack: support $DOCKER_ROOTLESS for testing rootless 5bd02b8a86 pkg/mount.RecursiveUnmount(): don't call Mounted() f8dbc31b78 pkg/system.EnsureRemoveAll: don't call Mounted 2e0762ae44 Add TC for com.docker.network.host_ipv4 label 18c22f5bc1 fix backingFs assignment bd2e288e56 pkg/system: remove unused CommandLineToArgv a48c6e3005 pkg/symlink: don't depend on pkg/system and pkg/longpath f2d49cb7ee pkg/system: fix minor linting issues dec7a1befb pkg/system: simplify IsAbs() 079fb80657 pkg/system: replace more uses of "syscall" 70a4d886cd builder: fixPermissionsWindows(): use golang.org/x/sys/windows 3bba43b894 pkg/system: deprecate SetNamedSecurityInfo, GetSecurityDescriptorDacl 1ea3a2b7f5 rootless: launch rootlesskit with --propagation=rslave e1710b42d3 vendor: bump libnetwork bf2bd42abc0a3734f12b5ec724e571434e42c669 32e554e681 Remove "could not get checksum with tar-split" debug message 05ec12b082 Fix `make shell` ed033adb2c Builder: Check remote when local img platform doesn't match a3292263a3 integration: use systemd when $DOCKER_SYSTEMD is set 616e64b42f API: deprecate /info "ClusterStore" and "ClusterAdvertise" fields a5538c06f9 Add warning about deprecated "cluster" options to "docker info" abf2404642 hack/make.sh: remove extra empty lines 3cf82748dd run shfmt eb484fcb67 validate: add shfmt 3fbc41fe36 TestCgroupDriverSystemdMemoryLimit: fix failure 9a82a9a8ea vendor containerd, BuildKit, protobuf, grpc, and golang.org/x fdf42f7a59 Update Windows ico fa67cff34b vendor: update opencontainers/selinux v1.3.3 ce1ceeb257 Add stats options to not prime the stats 21e5decbaa vendor: update gotest.tools v3.0.2 c322af8019 test: add buffer to prevent goroutine leak 669056f93d pkg/system.getxattr: handle changed size case f508db4833 Update CRIU to v3.13 "Silicon Willet" 0ce3ab679c Add a TODO in the Dockerfile regarding nftables 8c0f6142a8 Update DNS library 83c0bedba9 daemon/cluster: add a missing Unlock 34837febc4 plugin: fix a double RLock bug e6281b1b3f Revert "Don't die when daemon cannot read certs.d" 33baa55353 vendor: update buildkit to d75ed2b68 6fdbc50084 docs: add API versions v1.25 - v1.29, v1.38 - v1.40 a6f99232f5 Always execute tests and skip in tests themselves 12c7541f1f vendor: update opencontainers/selinux v1.3.1 750f0d1648 Support configuration of log cacher. e2ceb83a53 Support reads for all log drivers. 1bf1941ac9 vendor: golang.org/x/crypto 1d94cc7ab1c630336ab82ccb9c9cda72a875c382 f7c4be86c6 fixed deprecation message 3f7503f98a Update Golang 1.13.8 af2a11f316 TestCatchAll, TestStopCatch: remove unneeded goroutine 79b130ac31 Revert "Fix containerutility compilation on gcc-mingw-w64 8.3" 5125f8b304 bump windows-container-utility aa1ba87e99b68e0113bd27ec26c60b88f9d4ccd9 addc0c809f Fix go-swagger to work with Go 1.14 ca4b51868a rootless: support `--exec-opt native.cgroupdriver=systemd` f282dde877 Fixes #33434 - API docs to specify using base64url 9f94cfdc57 Vendor check to succeed even if copyright information is not found 8a52139a0f Revert "Jenkinsfile: temporarily pin windows image to 10.0.17763.973" da6c1429d0 docker-py: skip flaky AttachContainerTest::test_attach_no_stream (again) 1470697b67 Deprecate '--cluster-xx' options and add warning fa2417984b Jenkinsfile: temporarily pin windows image to 10.0.17763.973 35d6c1870f enforce reserve internal labels. 562880b276 Fix more goimports 5a028d2736 docker-py: override default API version to run all tests 7270d7eb94 fix goimports f800d5f786 Set the bip network value as the subnet 008fc67974 Fluentd: add fluentd-request-ack option cc1f3c750e Fluentd: add fluentd-async option, deprecate fluentd-async-connect a1d4a081dd Fluentd: extract parsing config, and validate early 8bd4aedb02 Fluentd: sort consts alphabetically ad13a2a4ba Fluentd: return "invalid parameter" for invalid config options 9f0b3f5609 bump gotest.tools v3.0.1 for compatibility with Go 1.14 cc993a9cbf Exec inspect field should be "ID" not "ExecID" e55bff541e TestLoginFailsWithBadCredentials: prepare for Go 1.14 changes 6acfc42094 TestResumableRequestHeaderTooMuchFailures: prepare for Go 1.14 changes 4a1900915a API: remove deprecated "filter" parameter for API v1.41 and up 7418745001 new storage driver: fuse-overlayfs ed439e4a31 swagger: document "node.platform.(arch|os)" constraints 544c766d97 Fix typos e75e6b0e31 Use condition variable to wake stats collector. 486161a63a bump vndr v0.1.1 27649ee44f update containerd binary to v1.3.3 44a8e10bfc awslogs: Update aws-sdk-go to support IMDSv2 1cb4a60950 testing: bump docker-py to 4.2.0 82879e9a9c Add vpnkit back to binary targets f464c31668 Check tmpfs mounts before create anon volume 5dffe74df2 Fix windows cross builds. b606c8e440 vendor: update golang.org/x/crypto 69ecbb4d6d5dab05e49161c6e77ea40a030884e1 878db479be Update Golang 1.13.7 (CVE-2020-0601, CVE-2020-7919) fb155a1125 Fix leak related to service logs 6d68080907 update runc library to v1.0.0-rc10 (CVE-2019-19921) cd43c1d1ac update runc binary to v1.0.0-rc10 (CVE-2019-19921) 9bd1ae024a dockerd-rootless.sh: remove confusing code comment 92e809a680 Support host.docker.internal in dockerd on Linux c90254c746 Add George Washington Carver to name generator ac1d8bc760 Add Mae Jemison to name generator 4d249ae1f3 remove extra space in code comment in ping.go 572cb55c0e hack/make/.go-autogen: fix LDFLAGS to accept values with spaces d68385b861 Update Golang 1.13.6 e8122ed724 hack/make/.go-autogen: fix typo in LDFLAGS variable 4c407caada Bump libnetwork to latest refpoint fa291552d5 vendor: bump prometheus/client_golang v1.3.0 34a65cb3ba vendor: bump prometheus/client_golang v1.1.0 b2db7c8bc9 vendor: bump prometheus/client_golang v0.9.4, docker/go-metrics v0.0.1 12a83ac27e vendor: bump prometheus/procfs v0.0.8 54dc6f355b vendor: bump prometheus/common v0.7.0 9c99f8b9b3 vendor: bump prometheus/client_model v0.1.0 5511f45767 Remove vim syntax files 30d9fe30b1 Add swarm jobs bdad16b0ee Handle error case when fixed-cidr-ipv6 is empty 94a8c8b3c0 vendor: update fsutil 0f039a052ca1da01626278199624b62aed9b3729 67a0695e8b vendor: update containerd/continuity to 26c1120b8d4107d2471b93ad78ef7ce1fc84c4c4 5c73cacefc vendor: bump beorn7/perks v1.0.1 940a1292db vendor: bump google/shlex e7afc7fbc51079733e9468cdfd1efcd7d196cd1d 5a5ef3f7f2 vendor: add "v0.8.7" comment to Microsoft/hcsshim vendor aacb2960c9 update .dockerignore to prevent '-unsupported' builds 50f1e205e4 Dockerfile: use tmpfs for building registry, go-swagger 95a4702943 Dockerfile: also build old registry on armhf 339fb74cbc prevent panic if TINI_COMMIT isn't set during build d4f05c168d bump vndr v0.1.0 to support versioned import paths 02bc2769fb Add myself as a curator 25a1bf53d2 Fix containerutility compilation on gcc-mingw-w64 8.3 bb0472bd23 Dockerfile: switch to iptables-legacy to match the host 4e3ab9e9fb Dockerfile: switch golang image to "buster" variant, and update btrfs packages 5dbfae6949 hack/make: ignore failure to stop apparmor 07efe6a0a7 Bump swarmkit to 24fb4cfe8af56803640180c5592bf32da732ced2 9ae7196775 swagger: add missing container Health docs 1c16572fe6 registry: fix goimports 79c877cfa7 swagger: restore bind options information 8311d6ba9f API: omit classic swarm "SystemStatus" field if empty 78c86927ab api/types: document classic swarm "Node" field b5c22f4fcf TestContainerInspectNode: document test as being for classic swarm 234d5a78fe swagger: remove classic swarm "Node" field 7e0afd4934 swagger: move ContainerState to definitions f2b25e498f docker-py: skip broken ImageCollectionTest::test_pull_multiple 6bc45b09e7 docker-py: re-enable tests that were fixed in v4.1.0 86ebbe16de remove host directory check 491531c12b cgroup2: mark cpu-rt-{period,runtime} unimplemented 19baeaca26 cgroup2: enable cgroup namespace by default 409bbdc321 cgroup2: enable resource limitation 612343618d cgroup2: use shim V2 9177ac322a Fix output targets getting double nested. 9608dc5470 Document `message` parameter to `/images/create` a218e9b7b0 Update Golang 1.13.5 8d2e1ee546 Build and use gotestsum for running all tests d3c0261876 hack/validate/deprecate-integration-cli: add integration-cli/*_api_*.go 1f0fdcc6f5 hack/validate: clean-up output, move golang-ci-lint to end cd094422a7 Jenkinsfile: force validate steps on master and backports 545e81714b hack/validate: allow forcing validation 9dde8f2b46 hack/validate/deprecate-integration-cli: don't exit on success e21019fa51 hack/validate/default: fix minor linting issue c8ecedbde9 Revert "hack: temporarily disable deprecate-integration-cli" 658723badd rootless: fix proxying UDP packets ee5aa536d1 update vendor golang.org/x/sys to 6d18c012aee9febd81bbf9806760c8c4480e870d cbd37fbc9a integration-cli: re-enable TestRunAttachFailedNoLeak on RS3 56c5668068 Testcase: Change time comparison logic. d135dc242e client.ImagePush(): default to ":latest" instead of "all tags" 5bb4f4818b libcontainerd: move hcsshim import to windows-only file 7f809e1080 Update containerd to v1.3.2 35b9e6989f Make `--device` flag work in privileged mode 03b3ec1dd5 make --device works at privileged mode b1ffda5cea builder/remotecontext: allow ssh:// urls for remote context 04203d13fb api/server: build: refactor for better readability 9709f6b95e api/server: build: use locally scoped variables 20e3b5ba2c api/types: minor BuilderVersion refactor 4138cd22ab Fix possible runtime panic in Lgetxattr b682cda946 docs/rootless.md: move to https://docs.docker.com/engine/security/rootless/ 3aba8652ca update curators 3f3eb0ef10 Move Daniel to alumni 2c1c5aabd7 Move Aaron to alumni db5c9e632f Move Mickaël to alumni list e6d514dbab Add Dockerfile to .dockerignore 5f314c24fc Bind-mount context for Dockerfile build targets 79a52bb1ba Add support for outputing binaries to custom dir 675b414f56 Use -X ldflags to set dockerversion package vars ccb0b0a7cc binary targets do not need the dev environment e7718c41c3 Move Doug to alumni list 446fe7f263 Make sure that layers are removed from layerdb after succefull layer removal b7f931e170 registry: normalize comment formatting cbc9de0abe image: normalize comment formatting a567ae3c31 client: normalize comment formatting 2deeb6ad96 builder/remotecontext: normalize comment formatting d29f420424 libcontainerd: normalize comment formatting f4f56b1197 daemon: normalize comment formatting ec4bc83258 daemon/graphdriver: normalize comment formatting 6625fa6103 daemon/cluster: normalize comment formatting ba6bbca89a daemon/logger: normalize comment formatting 5331e6ab2d pkg/tailfile: normalize comment formatting b95fbe7630 pkg/signal: normalize comment formatting 1d97da61a2 pkg/progress: normalize comment formatting e2addf46bf pkg/mount: normalize comment formatting 0b155db389 pkg/jsonmessage: normalize comment formatting a45b3a92f6 pkg/idtools: normalize comment formatting 14cad10cea pkg/containerfs: normalize comment formatting 9de5d3da89 pkg/chrootarchive: normalize comment formatting ecb898dcb9 pkg/archive: normalize comment formatting 0fb5630784 pkg/system: normalize comment formatting 92ad849327 integration: normalize comment formatting c9b2a3cff5 api: normalize comment formatting 580d3677c8 integration-cli: normalize comment formatting 90aa0901da api/server/router: use consts for HTTP methods 9aa55d97e5 bump containerd/go-runc a2952bc25f5116103a8b78f3817f6df759aa7def a7b6c3f0bf Bump hcsshim to b3f49c06ffaeef24d09c6c08ec8ec8425a 6ee536b4a0 daemon: remove use of deprecated os.SEEK_END 0cc7ad0a7d distribution: remove use of deprecated os.SEEK_END c530c9cbb0 TestRunAttachFailedNoLeak: Compare lowercase f22ff19668 builder: remove use of deprecated pkg/system constants f572df7c22 pkg/system: deprecate constants in favor of golang.org/x/sys/windows 044b74e33b daemon: remove use of deprecated system.GetOSVersion() 81f9edc7b0 pkg/parsers: remove use of deprecated system.GetOSVersion() 33d8492ce4 pkg/system/windows: remove unnecessary conversions 4cdb796b54 pkg/system/windows: remove obsolete comment 5c6b913ff1 logger/gelf: Skip empty lines to comply with spec f4fa98f583 Use certs.d from XDG_CONFIG_HOME when in rootless mode 2808762b27 Don't die when daemon cannot read certs.d bbf1edae4f Allow client consumers like traefik to compile on illumos 517946eb47 Update containerd to v1.3.1 1308a3a99f Move DefaultCapabilities() to caps package e226aea280 overlay[2]: rm fs checks 83783af08e Disable tests missed by PR 40155 447a840254 Windows: Use system specific parallelism value on containers restart 36f6cc11a4 refactored integration/service/instead_test.go to ues unique resource names 649e4c8889 Fix/improve overlay support check d5687079ad overlay: move supportsMultipleLowerDir to utils 25c5a55261 Check for OS Type and skip within the test 9cf349d0f8 bump libnetwork 90afbb01e1d8acacb505a092744ea42b9f167377 f09dc2f4fc Fix docker crash when creating namespaces with UID in /etc/subuid and /etc/subgid 0c9b232bf5 Remove unused GlobalFlags b96a0c7754 Add daemon options required by buildkit tests 89c6febfc2 Dockerd won't start if a network with the default subnet prefix already exists in HNS. 86594739b0 builder/remotecontext: use net/url instead of urlutil 5a74a736a8 TestParseRemoteURL: use subtests 21dfcc730b builder-next: clear temp leases on startup f632e2d8d3 vendor: update containerd to acdcf13d5eaf0dfe0eaeabe7194a82535549bc2b 6186e9fe87 hack/make/.go-autogen: fix "generated code" comment not in correct format c511db70ed api/types: re-generate with new template 3df4f86f21 swagger: fix "generated code" comment not in correct format f14c9d4df5 builder-next: track layers and graphdrivers with leases fe16d95dcd builder-next: update adapters to new buildkit interfaces fb1601d5ab vendor: update buildkit to leases support ce931f28ea Windows: Only set VERSION_QUAD if unset 9a7e96b5b7 Rename "v1" to "statsV1" cf86eeaf96 Bump Golang 1.13.4 d6a91ca71c Rename DCO check param in Jenkinsfile 27552ceb15 bump containerd/cgroups 5fbad35c2a7e855762d3c60f2e474ffcad0d470a c057825cf5 Pass VERSION variable to binary build targets. e7d2d853f6 Make binary output targets use own build cmd a0a5ec4c6d Integration: skip TestInfoDebug on Windows d7bc994a08 awslogs & archive: prevent 2 goroutine leaks in test functions 5791019028 hack/validate/vendor: simplify looking for license 4be12ad3d0 hack/validate/vendor: shellcheck fixes 9d4e81e8bf hack/validate/vendor: print diff for modified files 5ce9df2a40 Update to runc v1.0.0-rc9 6233217a31 integration/internal/container: fix a goroutine leak bug by adding 1 buffer 49fbb9c985 registry: add a critical section to protect authTransport.modReq 9f73396dab daemon: add grpc.WithBlock option 7ef475fc16 pkg/homedir: clarify Get() docs wrt static linking 9d12bc2573 pkg/system: make OSVersion an alias for hcsshim OSVersion 0945a8807d integration-cli: goimports 80e338a18d Revert "homedir: add cgo or osusergo buildtag constraints for unix" 203ba72fc5 integration-cli: Fix `SA1019: httputil.ClientConn is deprecated` 86b3703182 Deprecate pkg/system.GetOSVersion() in favor of hcsshim/osversion.Get() 6b91ceff74 Use hcsshim osversion package for Windows versions a5341aaf32 bump Microsoft/hcsshim 2226e083fc390003ae5aa8325c3c92789afa0e7a 3ddb4100a0 integration-cli: remove redundant logs from cp utils 267a0294a7 integration-cli: cleanup: mark helpers as helpers, use assertion ab9c726fc4 integration-cli: TestContainersAPICreateMountsValidation: use subtests 9ca5ffd5f7 integration-cli: TestContainersAPICreateMountsCreate: use subtests 69c4a4f4a2 integration-cli: make TestServiceLogs less noisy ec4a34ae2f integration-cli: migrate some "info" tests to integration 7eb804c934 make buildx: update to buildx v0.3.1 b6ae3c2058 make buildx: use multi-stage to make tagged image smaller a602ecf8fb make buildx: clean-up comment and fix help-text 9638d1a4fb make buildx: remove BUILDX_DOCKERFILE make var 37fe68f5d6 make buildx: make version in Dockerfile leading 365b3aee2d make buildx: fix Makefile version being ignored ce28a91cca make buildx: fix variable substitution and version c110283004 Jenkinsfile: use buildx on s390x and ppc64le 39ad39d220 bump google.golang.org/grpc v1.23.1 7c5fd83c22 Jenkinsfile: set repo and branch for DCO check as well 9d726f1c18 Add GoDoc to fix linting validation 1be272ef76 Windows: disable flaky test TestStartReturnCorrectExitCode 18a97ee981 integration-cli: use subtests for TestSwarmNetworkCreateDup e7805653b8 Fix TEST_FILTER to work for both "integration" and "integration-cli" 56230f4d37 testutil: no more "Creating a new daemon at" 060e55d7dd integration-cli: mark some test-helpers as helpers ddb64c14e1 fixed typo, changed "perfectd to perfected" bbf82b2e53 testutil: daemon.Info() close client after request 635584280b Bump Golang 1.13.3 (CVE-2019-17596) 1741d669b3 daemon: suppress logs in unit tests 9cb9c6eba4 bump golangci-lint v1.20.0 a06d7f5a3e golangci-lint: include all enabled linters in config 086b4541cf golangci-lint: disable default exclusion rules fe3c14d5ba golangci-lint: fix "golint" not ignoring generated files 47502344b9 golangci-lint: update exclusion rules for todo's 4840fd8953 pkg/mount: SA4011: ineffective break statement (staticcheck) af3bbcc00c aufs: SA4011: did you mean to break out of the outer loop? (staticcheck) 6d9c219c54 daemon: S1033: unnecessary guard around call to delete (gosimple) cba180cac9 graphdriver/btrfs: SA4003: no value of type uint64 is less than 0 (staticcheck) 04fcb6cfbf pkg/jsonmessage: fix SA1006: printf-style function with no arguments 1f7beb8594 daemon/events/testutils: remove redundant variable 5f47cef514 fix nolint comments for SA1019: filters.ToParamWithVersion is deprecated ec1fd4b1b0 distribution: SA4021: x = append(y) is equivalent to x = y (staticcheck) 94647b5d86 graphdriver/aufs: SA4021: x = append(y) is equivalent to x = y (staticcheck) 301a2fbeca builder/dockerfile/mockbackend_test.go: suppress SA9005 (staticcheck) 05469b5fa2 daemon: add "isWindows" const 1fab7c6457 bump Graylog2/go-gelf to 1550ee647df0510058c9d67a45c56f18911d80b8 95ea6e7069 Export the LogT type and use it in the options bef73d8b07 Wait for c8d process exit instead of polling API 58a6faab4c daemon/top_unix_test: cleanup test cases and use subtests 2030daf2ee TestParseInitVersion: add some additional tests df7b8f458a daemon: Use short libnetwork ID in exec-root & update libnetwork f36042d259 Add support for sending down service Running and Desired task counts 717575b585 daemon: make supportsSeccomp a const a33cf495f2 daemon: use constants for AppArmor profiles aa655a4d73 pkg/plugins: use constants for http methods 5ba167ce8a pkg/authorization: use constants for http methods 9c590ed5c5 daemon/logger/splunk: use constants for http methods 984d5bc30c builder-next: use constants for http status codes 3b84875216 builder-next: use constants for http methods 63e62d13a0 registry: use constants for http status codes 441b031bda registry: use constants for http methods d1817b6135 client: use constants for http status codes dabc7cdb56 client: use constants for http methods 93100adb69 api/server: use constants for http methods a617809fe7 testutil: use constants for http methods 23b6b5a9ae integration-cli: use constants for http methods 9ed58987ce integration: use constants for http methods de10c7d013 client: reduce string-matching in tests e76dea157e docs/rootless.md: update e443512ce4 Use ocischema package instead of custom handler 93edf327dc Dockerfile: align consecutive COPY lines 8edbe5dec2 Dockerfile: order COPY lines by change frequency ee0ef6c535 Dockerfile: sort packages alphabetically 1cfcce5e21 Dockerfile: use build-arg for vpnkit a42b4144bc Dockerfile: use spaces for indentation 293c1a27a2 testutil/daemon: remove redundant d.cmd.Wait() c56bfdf10a testutil/daemon: always remove pidfile after daemon is stopped f6842327b0 testutil/daemon: print all arguments when failing to start daemon b843b1ffe3 testutil/daemon: store pidfile-path, and ignore errors when removing 22662cac57 testutil/daemon: wrap errors 2b3957d0b1 testutil/daemon: prefix all logs with daemon-id 1fe7a9552c testutil/daemon: daemon.Cleanup(): unmount daemon root-dir as part of cleanup 9407a57522 hack/make: don't attempt to unmount non-existing daemon root-dir 3b49bd1d84 replaced call to deprecated grpc method WithDialer with WithContextDialer 095ca77f48 Use build args to override binary commits in dockerfile 1c82d11908 Fix trick for `make BINDDIR=. shell` and `COPY .` 8a3e8ac017 TestDaemonEvents: use is.Contains() for easier debugging 0e0ab58a96 integration-cli: in TestDaemonEvents* use ioutil.WriteFile 24a419221d integration-cli: TestDaemonEvents*: don't rely on CLI output format 6afe0f38f6 integration-cli: make testRequires() a Helper 1be2cc2568 Makefile: force using buildkit if USE_BUILDX is not set 93f9b902af go-swagger: fix panic e5bfaf19b1 Fix `make cross` target eda98ad00f Jenkinsfile: aarch64: use new labels to select agents a0d670e516 Jenkinsfile: aarch64: sync with latest changes 14ea1f62eb Jenkinsfile: aarch64: don't restrict to packet workers only 9d5361de3f Jenkinsfile: rename aarch64 to arm64 58d57c76b5 Jenkinsfile: aarch64: split into stages, add "print info" unit-tests 86e0c5a0d4 Jenkinsfile: aarch64: sync stage with other stages 402c7b1b27 Jenkinsfile: aarch64: move stage inside parallel group 48b06a2561 Tailor CI for ARM, skip legacy integration test. af86580000 Test to enable CI on aarch64. 318e279fd8 integration-cli: TestDockerNetworkConnectLinkLocalIP return on failure 7450f89f6c integration-cli: TestUserDefinedNetworkConnectDisconnectAlias return on failure 8663d09334 devmapper: fix unit test d5f07220fc integration-cli: DockerSwarmSuite: show output on failures bef0aca449 Jenkinsfile: fix typo buidx -> buildx bb5650619e bump gorilla/mux v1.7.3 38418287f7 bump olang/gddo 72a348e765d293ed6d1ded7b699591f14d6cd921 e5dce0f8c5 bump creack/pty v1.1.9 61a2b7ac94 bump gofrs/flock v0.7.1 9bd1b1a8ec bump imdario/mergo v0.3.8 7dee71e02f bump mattn/go-shellwords v1.0.6 9fac44028e bump logrus v1.4.2 82097c0f1f bump hashicorp/golang-lru v0.5.3 bc5484d2dd bump moby/buildkit f7042823e340d38d1746aa675b83d1aca431cee3 0b5dcdc5d7 bump containerd/fifo bda0ff6ed73c67bfb5e62bc9c697f146b7fd7f13 56357b73da bump containerd/continuity f2a389ac0a02ce21c09edd7344677a601970f41c 0af1099a81 bump containerd/cgroups c4b9ac5c7601384c965b9646fc515884e091ebb9 1617be92d3 bump containerd/go-runc e029b79d8cda8374981c64eba71f28ec38e5526f 12f9887c8e bump containerd v1.3.0 6c94a50f41 update containerd binary v1.3.0 c04ea1133d Jenkinsfile: Z/Power: use buildx 833444c0d6 Use buildx as Makefile builder 82c56755ea Buildkit-optimized dockerfile ac51b18339 Re-run vndr to fix master 7019b60d0d Jenkinsfile: set repo and branch, to assist validate_diff() 35ac4be5d5 add NewContainerOpts to libcontainerd.Create 5a703ccb46 bump docker-py to 4.1.0 85733620eb daemon/config: add MarshalJSON for future proofing fbdd437d29 daemon/config: fix filter type in BuildKit GC config 6ca3ec88ae builder: remove legacy build's session handling c3a0a37446 Use newer x/sys/windows SecurityAttributes struct 4e0836f01b bump golang.org/x/sys c990c680b611ac1aeb7d8f2af94a825f98d69720 97aa82d2c7 integration-cli: prevent out of range in TestEventsContainerEvents 48353e16fe Temporarily switch docker-py to "master" 6756f5f378 API: update docs that /session left experimental in V1.39 23457f05a9 Update mailmap and authors f60d6ee4bc testutil: update WithInitsignature to be a daemon.Option 554d9cec25 testutil: update WithExperimental signature to be a daemon.Option ce2e8e37d0 testutil: update WithTestLogger to use daemon.Option as return type 279ddb31ef testutil: update WithStorageDriver to use daemon.Option as return type 404d87ec69 AppArmor: add missing rules for running in userns 5c891ea9ca integration-cli: fix DockerNetworkSuite not being run f4c172e6b9 integration-cli: fix golint (copy/paste whoops) 5aebd69857 testutil: fix WithExperimental also setting "init" 8498ee7514 Fix pkg/pools staticcheck SA6002 a07a1220ad jhowardmsft --> lowenna 05a0621fd0 Re-group vendor.conf deps to reflect reality ac0ab114a2 bump runc vendor v1.0.0-rc8-92-g84373aaa bc9a7ec898 update runc to v1.0.0-rc8-92-g84373aaa (CVE-2019-16884) 8eb23cde95 bump golang 1.13.1 (CVE-2019-16276) c4ec02b0af Update containerd to v1.2.10 023b072288 homedir: add cgo or osusergo buildtag constraints for unix 8107d44852 Fix Engine API version history typo e553a03627 AppArmor: remove rules for linkgraph.db SQLite database 5175ed54e5 hack/ci/windows.ps1 update references to repositories that were moved 83fd212f2c Dockerfile.windows: update references to repositories that were moved b323c6e9ae Jenkinsfile: update references to repositories that were moved 8b7bbf180f builder entitlements configutation added. 8988448729 Remove refs to jhowardmsft from .go code cb2a36a89c Add ability to handle index acknowledgment with splunk log driver 0f0e3163b5 daemon/info: remove use of docker/go-connections f3d8b8ae74 Jenkinsfile: move integration step cleanup to amd64 where it was intended to be c21a3cf432 Add variant to image.Image and legacy builder 77d3c68f97 Remove minsky and stallman ae0a878b86 testutil, integration: untangle image dependency a8608b5b67 homedir: remove idtools and libcontainer's user package dependencies a5f237c2b5 Use FILE_SHARE_DELETE for log files on Windows. 51ca8081d8 testutil: use testing.TB instead of assert.TestingT 0d4ffa3588 Remove some uses of testutil.HelperT d79cc1b67d testing: remove custom testingT interfaces 3e4f6225da testutil: remove unneeded namer, testname interfaces 074eca1d79 Use fewer modprobes 9cd24ba605 logger: fix follow logs for max-file=1 fd94bae0b8 awslogs: fix flaky TestLogBlocking unit test 75477f0b3c bump libnetwork to 96bcc0dae898308ed659c5095526788a602f4726 04d9e157b2 testutil/daemon: add NewDaemon without testingT a57fd5488d Fix base.Dial is deprecated: Use DialContext instead 5b7347c312 integration-cli: run goimports 7de4e13089 Disable TestPsListContainersFilterExited (Windows) 4866207543 Zap a fixed folder, add build number to folder inside 78d137dd23 integration-cli: add more debugging for TestSwarmClusterRotateUnlockKey ce61a1ed98 Adding ability to change max download attempts 851b000641 integration-cli: enable golangci-lint 6397dd4d31 integration-cli: fix golint issues f470698c2c Jenkinsfile: ensure all containers are cleaned up 23ab331979 Removed deprecated CloseNotifier logic f1c1cd436a integration-cli: move each test suite to its own TestX testing function 84928be605 hack: have integration-cli use gotestsum codepath 41adef29f5 testutil/daemon: group options under type 5f67568bfd Revert "Revert "hack: temporarily disable deprecate-integration-cli"" 6f0dfe44eb golangci-lint: suppress remaining deprecation errors for now (staticcheck) df7d719e4c golangci-lint: suppress Xattrs is deprecated: Use PAXRecords instead f41712c4be golangci-lint: enable misspell, tweak configuration c9553897f3 golangci-lint: enable gosec linter d1363f5a90 golangci-lint: set correct build-tags to lint journald if supported 85b89c9e50 Replace gometalinter with golangci-lint e92e0d358a TestPollerEvent: fix filemode (staticcheck) 5358c95a76 TestGraphdriverPluginV2: SA5001: should check returned error before deferring (staticcheck) fd65fed81b client/hijack: suppress SA1019: httputil.ErrPersistEOF is deprecated (staticcheck) 90c372bb2c cmd/dockerd: explicitly ignore unchecked errors (errcheck) 805452a59a pkg/devicemapper ignore SA4000 false positive (staticcheck) 9faf565453 pkg/devicemapper: disable unused and varcheck linters 4a3ee04351 oci: fix SA4009: argument e is overwritten before first use (staticcheck) bd7180fcf9 cluster/controllers/plugin: remove unused Controller.taskID (unused) 101ff26eb5 misspell: fix some spelling issues e34c081354 builder-next: explicitely ignore unhandled errors (errcheck) 4e621a34ac api/server: explicitly ignore unhandled errors (errcheck) 6ff727b13c TestWalkValues: add missing error-check (errcheck) 3926b5f09d structcheck: nolint for false positives 9419024554 gosec: add ignore comments for reported issues that can be ignored 9c701fdb6b logger/journald: U1000: field `mu` is unused (unused) 323ac07901 pkg/containerfs: rename output variable to prevent shadowing (govet) d78b667af6 govet: suppress warning about Parent field that repeated json tag "parent" ac827a7fff builder-next/patchImageConfig: nitpicks 21c2f0e656 distribution/xfer/download_test: rm unused field 7b6201f032 daemon/logger/BenchmarkCopy: don't call t.Fatal from a goroutine 33c205be4f TestTransfer*: don't call t.Fatal from a goroutine 739b7b44aa pkg/term/windows: add missing build-tag 4215492120 pkg/ioutils use sha256 instead of sha1 in tests 27916165b6 TestUlimitOpt: fix composite literal uses unkeyed fields (govet) 2c31edbbb6 unconvert: remove unnescessary conversions 3a16c7246a pkg/signal: remove unnescessary conversion (unconvert) a46ad5e704 Builder: remove unused field a7942baf76 Use io.SeekStart instead of os.SEEK_SET 04129678a6 jsonfilelog_test: check err from open before close 7b0e0335bc Fix some inefassign warnings 5c11740abb registry/newV1EndpointFromStr: rm dead code 7b85ed613d plugin/setupNewPlugin: rm dead code d8f2b47432 TestDisplayJSONMessagesStreamInvalidJSON: fix error check 365a63a573 daemon/graphdriver/copy: rm dead code 58ac4bd938 daemon/checkpoint: rm extra checks 3ef7f7c650 daemon/monitor: rm redundant if 6392e765ac client: remove put() d584242236 client: suppress filters.ToParamWithVersion lint warning d8ec1ee57d builder/copy-unix: fix filepath.Walk args b5695b8663 pkg/term/term_linux_test: check returned error before deferring tty.Close() (staticcheck) 0507c358d9 API: explicitely ignore unhandled errors 744f1c261c Remove unused functions, variables, fields bca161d7cb runconfig/config_test.go: remove unused test-utilities d948306255 integration: remove unused constants and fields (unused) ad95c6315d volume/local fix file permissions 4b13f69882 integration/network: remove unuset setupTest() 4a37dcab48 Fix and re-enable TestDockerNetworkMacvlan/MultiSubnet 6aadd436a9 integration-cli: TestBuildAddBadLinks, TestBuildAddBadLinksVolume: simplify check cbc3cfe101 integration-cli: TestAttachMultipleAndRestart: don't call t.Fatal from a goroutine a2f16b0ad3 integration-cli: S1025: the argument is already a string (gosimple) 5bba06e082 integration-cli: SA5001: should check returned error before deferring reg.Close() (staticcheck) 40b3edc81e integration-cli: fix TestPushMultipleTags 43ea03002f integration-cli: remove unused types and fields 7c40c0a922 integration-cli: remove unnescessary conversions (unconvert) 417eac47a0 integration-cli: fix minor linting issues 67e4d36e46 integration-cli: remove unused functions and enable disabled tests a0d58b2248 integration-cli: use raw strings for regexes (gosimple) fdc1b22030 integration-cli: fix incorrect permissions (staticcheck) b639f933e1 integration-cli: fix capitalization of variables and errors (golint) 07ff4f1de8 goimports: fix imports 56e690f340 cluster/executor: remove unused containerConfig.endpoint() c2532d56b0 volume Create: fix incorrect file permissions (staticcheck) f6f58f3858 daemon.getEndpointInNetwork() is only used on Windows e334eeeed8 TestMoveToSubdir: use sort.Strings() (gosimple) ab599b5cdc pkg/pools/pools.go: suppress SA6002: argument should be pointer-like for now 178af761b7 TestParseRelease: fix missing assert 41cfcac7fc DriverBenchDiffApplyN: ignore empty branch (staticcheck) 5ded7886c3 daemon/cluster: fix unused context (staticcheck) 8695176d11 daemon/seccomp_linux.go: fix error-capitalization (golint) ac9ef840ef integration-cli: update TestCreateWithWorkdir for Hyper-V isolation 0620990307 hack/test/unit: fix custom TESTFLAGS not working 667c87ef4f profiles: Fix file permissions on json files 1a96cf95ca Parse runtime name 4ab1e808d1 Change version parsing to support alternate runtimes 64b3d12686 Jenkinsfile: remove redundant -f Dockerfile e653943e8b run integration-cli stages on s390x and ppc64le if not a PR check 039eb05ac8 skip win-RS1 on PRs unless the checkbox is checked 647dfe99a5 distribution: modify warning logic when pulling v2 schema1 manifests b469933b06 integration-cli/requirements: Skip windows specific isolation requirements on non-windows 88c554f950 DaemonCli: Move check into startMetricsServer a44d90cdd4 integration-cli: update comments referencing waitAndAssert() 548623b758 Use unique names in integration/service/plugin_test.go 32f1c65162 TestBuildSquashParent: fix non-standard comparisson dbde4786e4 integration-cli: fix some bashism's in Dockerfiles 38e4ae3bca Bump Golang version 1.13.0 961119db21 Dockerfile: set GO111MODULE=off d723643dc3 Jenkinsfile: add TESTDEBUG f007b0150a integration: improve package- and filename for junit.xml d2e00d62e2 integration: test2json: enable timestamps to fix zero-time test durations f3be6b346f integration: use gotestsum to generate junit.xml and go-test-report.json fcd65ebf49 Fix more signal handling issues in tests. 5adaf52953 integration-cli: Skip TestAPIImagesSaveAndLoad on RS3 and older 3262a69be6 integration: simplify parallel run destination 0fabf3e41e integration-cli: remove unneeded fmt.Sprintf() in asserts a9aeda8343 Rename some references to docker.exe to dockerd.exe f2498e21c4 hack/make: remove autogen resources for Docker CLI b37c214e3c testutil: make testing packages public 89dd10b06e archive: fix race condition in cmdStream a3f9cb5b63 TestDispatch: refactor to use subtests again, and fix linting (structcheck) a464a3d51f Dockerfile: remove GOMETALINTER_OPTS ead3f4e7c8 integration-cli: add daemon.StartNodeWithBusybox function 8fc23588f1 integration-cli: swarm.RestartNode(); don't load busybox again 422067ba7b Return "invalid parameter" when linking to non-existing container 01332b54e0 Revert "hack: temporarily disable deprecate-integration-cli" ecf91f0d7f Move GOPATH out from under the GO source tree 7663aebc12 pkg/parsers/kernel: gofmt hex value (preparation for Go 1.13+) 61450a651b hack/ci/windows.ps1: fix Go version check (due to trailing .0) c18f793f40 Jenkinsfile: shorten stage names for consistency and to fit Jenkins UI 231ed42cab integration-cli: remove TestingT d32e6bbde8 suite: put suite setup inside test run 6c75c86240 Windows: skip flaky TestLogBlocking cc01289792 intgration-cli: fix formatting 8eb9f3f90e integration-cli: fix pollCheck bad6f3bf73 integration-cli: have helper functions use testing.Helper() 8bffe9524d remove per-test -timeout logic because it does not work beadc92e07 hack: temporarily disable deprecate-integration-cli 7cd028f2d0 hack: update scripts 7491db3e92 Update Jenkinsfile 925e407c7b cleanup 8b40da168b Setup tests fd0ed80ff2 internal/test/suite 3aa4ff64aa vendor: remove vdemeester/shakers and go-check/check 9843c2f12c remove rm-gocheck.go and templates 649201dc44 remove waitAndAssert and type casts 40f1950e8e fix remaining issues with checker.Not ac2f24e72a waitAndAssert -> poll.WaitOn 42599f1cad prepare for eg on waitAndAssert 318b1612e1 fix remaining compile issues 64de5e8228 rm-gocheck: fix compile errors from converting check.CommentInterface to string 7813dfe9d7 rm-gocheck: goimports 3a24472c8e rm-gocheck: check.CommentInterface -> string 6e5cf532af rm-gocheck: convert check.Commentf to string - other 6135eec30a rm-gocheck: convert check.Commentf to string - with just one string a2024a5470 rm-gocheck: convert check.Commentf to string - with multiple args 98f2638fe5 rm-gocheck: Contains -> strings.Contains 4e2e486b23 rm-gocheck: Not(Contains) -> !strings.Contains f2c9e391fc rm-gocheck: Matches -> cmp.Regexp 59e55dcdd0 rm-gocheck: run goimports to compile successfully eb67bb9fb5 rm-gocheck: comment out check.TestingT 81d2a0c389 rm-gocheck: comment out check.Suite calls 6a8a9738ec rm-gocheck: redress check.Suite calls d0fc8d082d rm-gocheck: True b17bb1e74a rm-gocheck: False 64a161aa3e rm-gocheck: NotNil 2743e2d8bc rm-gocheck: IsNil 491ef7b901 rm-gocheck: HasLen -> assert.Equal + len() dd9d28669f rm-gocheck: DeepEquals -> assert.DeepEqual 6dc7f4c167 rm-gocheck: Equals -> assert.Equal 10208e4d60 rm-gocheck: Not(Matches) -> !cmp.Regexp 0fa116fa8f rm-gocheck: Not(Equals) -> a != b 74747b35e1 rm-gocheck: Not(IsNil) -> != nil 230f7bcc02 rm-gocheck: normalize to use checker a7d144fb34 rm-gocheck: ErrorMatches -> assert.ErrorContains 1d92789b4f rm-gocheck: check.C -> testing.T 6ecff64d03 rm-gocheck: check.C -> testing.B for BenchmarkXXX 1f69c62540 rm-gocheck: c.Assert(...) -> assert.Assert(c, ...) 36e7001b99 rm-gocheck: redress multiline c.Assert calls 5879446de9 rm-gocheck: normalize c.Check to c.Assert 8f64611c83 add rm-gocheck.go script and eg templates 931edfe5e9 prepare for rm-gocheck script e07a3f2917 integration-cli: fix tests that are silently succeeding when they should not compile e6c5563ae9 Fix Service TTY test so signal handlers work f874f8b6fd integration: TestInspect(): use swarm.RunningTasksCount e1636ad5fa hack/ci/windows.ps1: stop tailing logs after stopping the daemon b6f596c411 hack/ci/windows.ps1: add support for DOCKER_STORAGE_OPTS f4d41f1dfa seccomp: whitelist io-uring related system calls 57ade2652a Narrow dependencies of pkg/system 7eb522a235 hack/ci/windows.ps1 print all environment variables to check how Jenkins runs this script 8e8c52c4ab hack/ci/windows.ps1: explicitly set exit code to result of tests 9ef9a337f6 Update containerd to v1.2.9 ebf12dbda0 Reimplement iteration over fileInfos in getOrphan. 651d146fa4 Poule: remove random assign 2816ec7b00 Remove unused router swapper 7aeb3efcb4 Use unix.Uname instead of shelling out to uname on darwin/freebsd 85bcc524ea Jenkinsfile hack for auto-cancellation. 1fbadd76b7 Jenkinsfile: Windows: enabled debug-mode for daemon under test 6ee61f5493 Jenkinsfile: create bundles for Windows stages 492945c2d5 bump hashicorp/go-sockaddr v1.0.2 720b66ee1f bump hashicorp/go-multierror v1.0.0, add errwrap v1.0.0 bab58c1924 bump lib network to 92d1fbe1eb0883cf11d283cea8e658275146411d e128f17508 Rename variable for consistency 6e5a304675 container.ConfigFilePath: use same signature on Windows 2e0cafb01b awslogs: refactor create() ef2872132d awslogs: replace deprecated session.New() with session.NewSession() 54d021ef8f awslogs: remove unused eventBuffer update 02c9b0674f integration-cli: getContainerCount() fix trimming prefix e6fce00ec8 TestCase: use `icmd.RunCmd` instead `icmd.StartCmd` ce77a804b8 docker-py: skip flaky AttachContainerTest::test_attach_no_stream 6751718196 Remove *_solaris.go files e20b7323fb rootless: harden slirp4netns with mount namespace and seccomp 186e22d26e include IPv6 address of linked containers in /etc/hosts 70d3677825 hack/make/binary-daemon: fix some linting issues 52a53e2587 Fix docker inspect for dutimgVersion 156ad54fb7 windows.ps1: fix leaked NdisAdapters not being cleaned up on RS1 1250e42a43 daemon:containerStart() fix unhandled error for saveApparmorConfig e4605cc2a5 Add sigprocmask to default seccomp profile fa29ff2212 Fix compiling pkg/parsers/operatingsystem on unix ea65f0bca2 Fix getting the operating system on Darwin 7b4b940470 /containers/{id}/json missing Platform 9134130b39 Remove `SystemInfo()` error handling. 8769255d1b bump containerd/ttrpc 92c8520ef9f86600c650dd540266a007bf03670f f1cd79976a bump google.golang.org/grpc v1.23.0 31885181fc integration: windows.ps1: turn defender error into a warning 7e8f7efdd1 fix build after merge of outdated PR ca1e7a3b4a Jenkinsfile: fix invalid expression in bundles script db2bc43017 Use correct `LOOP_CTL_GET_FREE` API in `pkg/loopback` 556d26c07d pkg/term: refactor TestEscapeProxyRead d185ca78ec Replace libprotobuf-c0-dev with libprotobuf-c-dev a76ff632a4 Jenkinsfile: don't mark build failed when failing to create bundles 8b65e058be Jenkinsfile: use wildcards for artifacts, and don't fail on missing ones 917b0dcd3d hack/make: fix some linting issues reported by shellcheck dde1fd78c7 hack/make.sh remove "latest" symlink f8f6f7c2a0 cleanup: remove SetDead function 4d09fab232 Update service networks documentation 530f2d65c3 Explicity set Cgroup NS mode to "host" when running privileged 96f6c81ab7 Change TestCgroupNamespacesRunPrivileged requirement 1264a85303 Update containerd to v1.2.8 2841b05b71 Use Klogctl from x/sys/unix to read Linux kernel log e551e5a73d Use UtimesNano from x/sys/unix to implement LUtimesNano 919d08347a Use loopback types and constants from x/sys/unix to implement pkg/loopback without cgo 27f1f2b5be builder-next: close progress on layer export error d495eeb365 builder-next: update mount signature 52ed97c5c1 vendor: update buildkit to 588c73e1e4 477bf1e413 Fix overlay2 busy error on mount ca3e230b77 Use new windows labels 1a5dafb31e Improve readability of Windows connect error c266d8fe56 Fix testcase name bc8118b31f bump x/sys to fix riscv64 epoll ad70bf6866 Dockerfile: add python3-wheel back again (for yamllint) d3f64846a2 fix docker rmi stucking 19a3ddf8bb mkimage-yum.sh: Fix install of additional packages 2c2cd9b86a builder-next: close build context upload on cancel 9c94e8260a Fix phrasing when referring to the freezer cgroup 01d6a56699 Bump Golang 1.12.9 9ea2cf320a builder-next: avoid double unmounting mountable 9c5f3adbf5 add options.NoLchown option to createTar call b146b2382c Fixups for 39695 - edit comments, redundant lines a65dee30fc Move defer method to the top right after New is called e59b26087f vendor: update buildkit to v0.6.1 8b6da9d82f Jenkinsfile: save docker-py artifacts 4ddb40ee8a Jenkinsfile: build dynamic binary for docker-py, to match makefile 5969bbee79 docker-py: output junit.xml for test-results 535e29da05 docker-py: use --mount for bind-mounting docker.sock b04cbf1072 docker-py: run without tty to disable color output 0b3d201892 docker-py: fix linting issues reported by shellcheck 00ad0222ce Dockerfile: update CRIU to v3.12 f3a3ea0d3c Fix flaky TestServiceWithDefaultAddressPoolInit 683766613a Adjust tests for changes in Go 1.12.8 / 1.11.13 73b0e4c589 Bump golang 1.12.8 (CVE-2019-9512, CVE-2019-9514) d6f7909c76 Jenkinsfile: run DCO check before everything else e2f5b78e78 Jenkinsfile: collect junit.xml for all architectures 7f9328ad2e Jenkinsfile: send junit.xml in the stage that produced it f6226a2a56 fix some spelling mistakes eb30f0ad84 fix bundles filenames in Jenkinsfile ad29f9e471 rename powerpc bundles in Jenkinsfile a049ea1a93 rename z bundles in Jenkinsfile 0cfc1ec2bd be more lenient on junit report gathering in Jenkinsfile 4e2f39cf14 use environment for z jobs in Jenkinsfile 3564b03fbc use environment for power jobs in Jenkinsfile bf70a5975d set timeouts in Jenkinsfile to 2 hrs bdc1c1a02a add z-master stage to Jenkinsfile c2f9d58375 add powerpc-master stage to Jenkinsfile e554fb23c8 Jenkinsfile: reduce time of integration tests by dividing tests into 3 parallel runs 13df617d4c hack: unmount leftover daemon root folders 251c8dca28 Jenkinsfile: move static and cross compilation to unit-validate stage 2ff9ac4de5 Dockerfile: use DEBIAN_FRONTEND=noninteractive 8660330173 Unit test for getOrphan 6f5c377ddc docker-py: skip PullImageTest::test_pull_invalid_platform b283dff3ff Jenkinsfile: avoid errors from find e856b46cfb Jenkinsfile: remove "experimental" stage a43123cab1 Consistently use DOCKER_EXPERIMENTAL=1 instead or =y f8cde0b32d docker-py: deselect broken experimental tests 1ea8b413d1 initBridgeDriver: minor cleanup and linting fixes 4d5b6260bc Fix regression in handling of NotFound err during startup 5858a99267 Builder: fix "COPY --from" to non-existing directory on Windows e554ab5589 Allow system.MkDirAll() to be used as drop-in for os.MkDirAll() 6ae46aeabf make.ps1: Run-IntegrationTests(): set working directory for test suite 35fe16b7eb Update Microsoft/go-winio v0.4.14 e2b24490e4 Improve integration test detecetor 13ea237234 devicemapper: remove unused errors 5b2f8e9103 devicemapper: remove unused task.setRo() c60e53a274 vendor: update buildkit to f5a55a95 1a2bd3cf7d builder-next: ensure timestamps set for metadata commands e665263b10 daemon: Remove btrfs_noversion build flag 53cbf1797b daemon/ProcessEvent: make sure to cancel the contexts b5e5cac0f5 Set locale to fix yamlllint 73c1dae86d zfs: fix incorrect permissions (staticcheck) 58b0585cd2 fix client.HTTPClient() not returning a copy b0835dd088 Dockerfile: use --no-install-recommends for all stages ad28fec1c9 Jenkinsfile: move docker-py to separate stage 1e8ede514e Jenkinsfile: inline experimental, power, z steps, and split Unit test f411be2072 Jenkinsfile: inline janky steps, and move validate to separate stage 47ac8a97de Jenkinsfile: remove .git mount in stages that don't use it f814e04652 Jenkinsfile: consistent indentation and order of env-vars 0634816c0c Jenkinsfile: remove unused GIT_SHA1 env-var efacee1cdd Jenkinsfile: move building e2e image to "unit-vendor" stage 781e79d1fa Jenkinsfile: extract DOCKER_GRAPHDRIVER as environment variable c75d7e0e22 Jenkinsfile: use overlay2 for Power and s390x as well a2ad56dfad Jenkinsfile: run check-config.sh to print system configuration 6523ced950 Jenkinsfile: remove ip_vs modprobe for unit/vendor stage f2e09afff4 Jenkinsfile: standardize cointainer names and fix s390x cleanup f51c139792 Jenkinsfile: combine "vendor" and "unit tests" be0e6e9d34 Jenkinsfile: use GIT_COMMIT from Git plugin instead of manually 13064b155e Add support for setting a test filter 355bcf6d48 Jenkinsfile: disable buildkit on power and s390x 3897796548 Jenkinsfile: Add "info" step to all stages b04c769d65 Jenkinsfile: split some shell steps 9f0e10fe24 Jenkinsfile: busybox is multi-arch 337d03a5f0 Jenkinsfile: remove arch-specific suffixes from names a0bf935f9c Jenkinsfile: run "make clean" in cleanup step 79713d8d07 Jenkinsfile: use sub-stages to describe steps f648964875 Jenkinsfile: set DOCKER_BUILDKIT globally a28f2a2338 Jenkinsfile: set APT_MIRROR globally 61fd8b7384 Jenkinsfile: remove check for arch-specific Dockerfiles 722d582c92 Jenkinsfile: remove build --rm, because it's the default a95f16ca28 Jenkinsfile: consistently indent with 4 spaces 20a0e58a79 journald/read: fix/unify errors dd4bfe30a8 journald: fix for --tail 0 b73fb8fd5d journald/read: avoid piling up open files f091febc94 journald/read: simplify/fix followJournal() 981c01665b Call sd_journal_get_fd() earlier, only if needed 79039720c8 journald/read: avoid being blocked on send ff3cd167ea journald/read: simplify walking backwards e8f6166791 journald/read: simplify code 1ada3e85bf Small journal cleanup 2cffe9be3d hack: fix mixed tabs/spaces for indentation 060f387c0b Fix "no such file or directory" warning when unmounting IPC mount 1ac0a66a64 projectquota: protect concurrent map access 5f0231bca1 cast Dev and Rdev of Stat_t to uint64 for mips 42f0a0db75 run unit tests and generate junit report abece9b562 Improvements to the test runners 53e0c50126 Avoid a data race in container/health.go b1723b3721 Dockerfile: add back yamllint 438c7eb606 Added information regarding our new Jenkins ci on moby/moby 6f234db9fe bump libnetwork to 09cdcc8c0eab3946c2d70e8f6225b05baf1e90d1 0595c01718 switch kr/pty to creack/pty v1.1.7 b79adac339 Fix TestSwarmClusterRotateUnlockKey 0ecd6ab30f ADDED changes to integrate with our new Jenkins ci a316b10dab Initialize nss libraries in Glibc so that the dynamic libraries are loaded in the host environment not in the chroot from untrusted files. f5cd8fdd44 hack: Remove inContainer check, it wasn't useful ccfaf1ed92 use overlay2 for janky and experimental checks 9d98458fb7 remove DOCKER_EXECDRIVER from Jenkinsfile b0fe0dff7a Better logging for swarm tests 1381956499 Add `FromClient` to test env execution 790da6c223 Set TIMEOUT according to os/arch. d6cbeee470 Add extra permission check in removal test aac6e62209 added hack/ci/master as entry point for master codeline checks 651e694508 Prevent panic on network attach c5bd6e3dc7 Dockerfile.windows: trim .0 from Go versions ed672bb523 Pin Dockerfile to -stretch variant 4fa57a8191 Windows: fix Golang version checks for GO_VERSION build-arg eeaa0b30d4 Skip TestHealthKillContainer on Windows 7f37d99ef5 integration-cli: remove redundant "testrequires" a557538770 TESTING.md: document GO_VERSION c6281bc438 Dockerfile: use GO_VERSION build-arg for overriding Go version f6b1f01de3 Remove hack MalformedHostHeaderOverride 1de914695b Retry service updates on out of sequence errors 8c9362857f integration-cli: increase healthcheck timeout becd29c665 integration: run build session tests on non-experimental a5c420ac54 Be more conservative for Windows in TestFrequency for Splunk 096a7afd37 vendor: update swarmkit to 7dded76ec 52e0dfef90 integration-cli: allow temporary no-leader error 3df1095bbd integration-cli: allow temporary errors on leader switch 0a1947cb9f spaces to tabs 3d1850d10d integration-cli: also run Docker Hub search tests on Windows 2ac55d5c9a TestSearchWithLimit: slight refactor and improve boundary checks 85d6fb888c TestSearchStarsOptionWithWrongParameter: remove checks for deprecated flags b38c71bfe0 TestSearchCmdOptions: remove checks for deprecated flags a78b9a3726 TestSearchCmdOptions: remove cli-only checks 1be7065e99 Revert "Remove TestSearchCmdOptions test" 3c701e4db1 imporve hardcoded CC on cross compile af2e82d054 atomic: patch 64bit alignment on 32bit systems c222c5ac6f allow running of single integration test 6aafe0fd9e WIP Move docker-py tests first again 78405559cf Check for BRIDGE_VLAN_FILTERING in overlay section 980f2813b4 docker-py: skip flaky tests 3c15cea650 docker-py: use host-network for nested build of docker-py ba8f4c7994 docker-py: don't build --quiet is TESTDEBUG is set 968345bc5c Makefile: Allow passing DOCKER_TEST_HOST and TESTDEBUG to container 7bfe48cc00 Bump docker-py to 4.0.2, and run tests from upstream repository c8f43b5f6f Dockerfile: Use APT_MIRROR for security.debian.org as well 9d1b4f5fc3 Add regression tests for invalid platform status codes 4a516215e2 errdefs: convert containerd errors to the correct status code bd5c5373f1 Remove Codecov 32f4fdfb5c errdefs: remove unneeded recursive calls 0aa167d0df Update CONTRIBUTING.md to have an option to keep name anonymous if requested 88578aa9e9 TestServiceWithDefaultAddressPoolInit cf315bedc5 Fix indentation in some description f8aef6a92f Move kill health test to integration da574f9343 do not stop health check before sending signal 763454e1e4 Remove unused pkg/system.IsIoTCore() bad0b4e604 Remove skip evaluation of symlinks to data root on IoT Core 316e16618f Integration: MACVlan add missing import comment and build-tag 691eb14256 Integration: remove redundant kernel version check for MACVlan 6a64a4deec integration: fix cleanup of raft data d470252e87 daemon: don't listen on the same address multiple times c096225e8e DockerSwarmSuite lock portIndex to work around race 5d818213ff Fix Microsecond -> Milisecond. 1acaf2aabe Sleep before restarting event processing 15675e28f1 Don't log test initial test daemon ping failures f75f34249b Fix "Removing bundles/" not actually removing bundles 92e6e7dd5f Cleanup "address" when connecting over a UNIX socket c7816c5323 Harden TestClientWithRequestTimeout 9b5e78888d integration: organize bundle directory per test 24ad2f486d Add (hidden) flags to set containerd namespaces 54e30a62d3 Propagate GetContainer error from event processor 7725b88edc Ensure parent dir exists for mount cleanup file 4060a7026c Integration: exclude IPVlan test-suite on Windows 93b28677bf Integration: IPVlan add missing import comment dae9bac675 Integration: remove "experimental" option for IPVLAN test-daemons 1e4bd2623a Integration: remove unneeded platform check for IPVLAN tests 34f4729bc0 rootless: allow exposing dockerd TCP socket easily dbb5da7fcd dockerd: update reload signal comment 3afdc46314 fix swagger.yaml #39484 7d9126e149 ContainerStats: return early on unsupported API versions 65177a72c5 Use MemAvailable instead of MemFree to estimate actual available memory a1cdd4bfcc build: buildkit now honors daemon's DNS config f8a0f26843 DebugRequestMiddleware: Remove path handling 73db8c77bf DebugRequestMiddleware: unconditionally scrub data field ebb542b3f8 TestMaskSecretKeys: use subtests 18dac2cf32 TestMaskSecretKeys: add more test-cases aafdb63f21 Bump Golang 1.12.7 2f9e62611e Enhance container detection on some corner cases. c887b09abc integration-cli: remove unused requirements utils 27f432ca57 integration-cli: remove defaultSleepImage constant 7204341950 integration-cli: remove ExecSupport check ee09f5a4af Don't try to load plugin without name 34d5b8867f Add realChroot for non linux/windows b94218560e Skip TestServiceRemoveKeepsIngressNetwork 402433a5e4 Improve select for daemon restart tests 6ddd43b589 Make `ErrorResponse` implement `Error` 8be39cd277 Remove cocky from names-generator c2479f6ebf Fixed the inconsistence and also a potential data race in pkg/ioutils/bytespipe.go: bp.closeErr is read/write 8 times; 7 out of 8 times it is protected by bp.mu.Lock(); 1 out of 8 times it is read without a Lock 0bdcc60c4c builder-next: reset identitymapping if empty 9eaab0425b Update modules to support riscv64 14bd416d0e vendor: containerd to 7c1e88399 0a3c9b935c bump vndr to f5ab8fc5f, and revendor c08d4da6e5 Send exec exit event on failures 330bf32971 Update to using alpine 3.10 344b093258 bump libnetwork. vishvananda/netlink 1.0, vishvananda/netns e01bf76964 bump libseccomp-golang v0.9.1 b5f28865ef Handle blocked I/O of exec'd processes 6f9cdd6c73 Improve description for cpu-rt-period,runtime daemon flags 53430f5fc1 Add info OSVersion to API changelog. 3e6a13ccb8 LCOW: fix using wrong shell for healthchecks 25b451e01b bump gorilla/mux v1.7.2 0d496e3d71 profiles/seccomp: improve profile conversion a9026e0e3f Revert "validate: temporarily disable deprecate-integration-cli as part of a revert" ba8a15694a Use functions from x/sys/unix to get number of CPUs on Linux 1d792e6bba Update SECURITY.md to have an option to keep name anonymous if requested. 3f1cdd5364 validate: temporarily disable deprecate-integration-cli as part of a revert d35f8f4329 Add deprecation message for schema1 f923321aae Add test for keeping same daemon ID on upgrade 53dad9f027 Remove v1 manifest code f695e98cb7 Revert "Remove the rest of v1 manifest support" 0811297608 use gotest.tools assertions in docker_cli_push_test.go f23a51a860 Revert "Remove Schema1 integration test suite" 0a9842a705 Create SECURITY.md for GitHub security policy page a77e147d32 For ipvlan tests check that the ipvlan module is enabled (instead of just ensuring the kernel version is greater than 4.2) d5669ec1c6 Update containerd to v1.2.7 7410f1a859 pkg/archive: keep walkRoot clean if source is / a84a78e976 Fix more grpc list message sizes 171538c190 daemon: fix docker cp when container source is / 02f1eb89a4 add more tests 6db9f1c3d6 Add test for copying entire container rootfs 50c6a5fb07 Fix rate limiting for logger, increase refill rate a281289515 integration: get tests to compile again 6f446d041b Bump Golang 1.12.6 5c484890e0 vendor: update buildkit to c2427506 07b3aac902 builder-next: userns remap support 2f22247cad Enable integrations API tests for Windows CI 35069de3fd Re-align proxy commit with libnetwork vendor dac5710b68 integration: change testGraphDriver signature to fix linting 123e29f44a integration: change createAmbiguousNetworks signature to fix linting 9f9b4290b9 integration: change container.Run signature to fix linting b4c46b0dac integration: change container.Create signature to fix linting caec45a37f integration: change network.CreateNoError signature to fix linting 2df693e533 Entropy cannot be saved d363a1881e Adding OS version info to the nodes' `Info` struct cf104d85c3 stats: avoid cgo in collector 230a55d337 copy: allow non-cgo build 186cd7cf4a quota: add noncgo build tag 213681b66a First step to implement full garbage collector for image layers 915acffdb4 Harden TestPsListContainersFilterExited a4f828cb89 fix: fix lack of copyUIDGID in swagger.yaml 293c74ba79 Windows: Don't attempt detach VHD for R/O layers 8ff4ec98cf build: buildkit now also uses systemd's resolv.conf 539e72f75b Fix typo retreive -> retrieve 1ba4e69601 shellcheck a1ec8551ab Fix seccomp profile for clone syscall 85bbbd4495 vendor: update buildkit to 37d53758 b1e6536ceb Set DOCKER_BINDDIR mount options from env 6104eb1ae2 build: fix panic when exporting to tar 16e04da4cb Move cgroup info changes to API v1.40 5020edca76 Revert "aufs: remove mntL" 3029e765e2 Add chroot for tar packing operations d089b63937 Pass root to chroot to for chroot Untar a0903e1fa3 Increase max recv gRPC message size for nodes and secrets c4628d79d2 Stop sorting uid and gid ranges in id maps ca5aab19b4 rootless: update `docker info` docs 153466ba0a info: report cgroup driver as "none" when running rootless e7fbe8e457 hack: remove integration-cli-on-swarm 61815f6763 Windows CI - Corrected LOCALAPPDATA location c7d9599e3d Revert docker/swarmkit#2804 57f06409b1 aufs: retry unmount on EBUSY 8abf26dbfb Change docker socket location to /run/docker.sock 14280fdc62 Fix to gofmt/goimports errors f787b235de Add support capabilities list on services 72ceac6a74 graphdriver.Mounted(): ignore ENOENT 67e25ec5ac Bump swarmkit vendoring 70fa7b6a3f Network not deleted after stack is removed e2989c4d48 aufs: remove mntL 4898f493d8 Update docs to remove restriction of tty resize 32b5d296ea API: Move "x-nullable: true" from type PortBinding to type PortMap d5f6bdb027 API: Change type of RemotrAddrs to array of strings in operation SwarmJoin ebcef28834 Fix error handling for bind mount spec parser. a3fcd4b82a Add alias for hostname if hostname != container name which happens if user manually specify hostname 21e662c774 Remove TestSearchCmdOptions test c030885e7a Windows: fix error-type for starting a running container 4bd8964b23 Update TestRunWithDaemonDefaultSeccompProfile for ARM64 75a59c6588 Enable DNS Lookups for CIFS Volumes ae431b10a9 aufs: retry auplink flush 8fda12c607 aufs.Cleanup: optimize d58c434bff aufs: optimize lots of layers case 5cd62852fa aufs: add lock around mount 5873768dbe aufs: aufsMount: better errors for unix.Mount() 4beee98026 aufs: use mount.Unmount f93750b2c4 aufs: remove extra locking af433dd200 layer: protect from same-name races b4e9b50765 layer/CreateRWLayerByGraphID: remove b4247b433e builder-next: support DOCKER_RAMDISK fa6f63e79b API: Set format of body parameter in operation PutContainerArchive to "binary" a66ddd8ab8 bump libnetwork 5ac07abef4eee176423fdc1b870d435258e2d381 4f80a1953d int-cli/TestSearchCmdOptions: fail earlier d7de1a8b9f explicitly set filesystem type for mount to avoid 'invalid argument' error on arm b9f31912de bugfix: fetch the right device number which great than 255 34cc5c24d0 dockerd-rootless.sh: use exec 00c92a6719 bump up rootlesskit to v0.4.1 20b11792e8 LCOW: Fix FROM scratch 15419d7ba0 Consider WINDOWS_BASE_IMAGE_TAG override when setting Windows base image for tests 91a57f3e7f builder-next: call stopprogress on download error a3cbd53ed2 vendor: update buildkit to f238f1ef 28ad54d84f bump google.golang.org/grpc v1.20.1 7bacd1d6dc Move CgroupnsMode feature to API v1.41 771fc7e7f8 Bump API version to v1.41 8c8457b0f2 client: do not fallback to GET if HEAD on _ping fail to connect 6205fcf60d Correct copy paste mistage in pkg/mount/mountinfo_freebsd.go that caused compile errors. 05250a4f00 layer: optimize layerStore mountL 7546322e99 Ensure all integration daemon logging happens before test exit 8a60a1e14a Switch swarmmode services to NanoCpu cfce0acd33 builder-next: fix gcr workaround token cache 072400fc4b Make cgroup namespaces configurable 256eb04d69 Start containers in their own cgroup namespaces 680d0ba4ab Remove a network during task SHUTDOWN instead of REMOVE to make sure the LB sandbox is removed when a service is updated with a --network-rm option 3a4c5b6a0d Bump Golang 1.12.5 343413425c Update .DEREK.yml f73b5cb4e8 layer: protect mountedLayer.references 595987fd08 Add log entries for daemon startup/shutdown 20ea8942b8 Optimize test daemon startup 31e8fcc678 Change Forbidden Error (403) to Conflict(409) c3b24944ca Dockerfile.e2e: fix DOCKER_GITCOMMIT handling 74e3edc7d1 Updated mkimage-arch.sh * reset umask to 022 * introduced PKGREQUIRED * introduced PKGREMOVE - to be able to remove linux etc on Parabola GNU/Linux * updated PKGIGNORE - cryptsetup & device-mapper removed to not break the installation - added not required packages * force link /etc/localtime * install pacman-mirrorlist a31a088665 Remove DiskQouta field. 0deb18ab42 Dockerfile.e2e: copy test sources 2467cb4eda Update AUTHORS and mailmap d6d2b30fd2 bump golang.org/x/crypto 88737f569e3a9c7ab309cdc09a07fe7fc87233c3 5d51ac544b bump gogo/googleapis v1.2.0 647f31b7d0 bump gogo/protobuf v1.2.1 3d7d8a579f bump containerd/console 0650fd9eeb50bab4fc99dceb9f2e14cf58f36e7f 25e6487fc2 bump containerd 3a3f0aac8819165839a41fee77a4f4ac8b103097 447cbff50a bump containerd/continuity aaeac12a7ffcd198ae25440a9dff125c2e2703a7 3e4723cf33 bump buildkit v0.5.0 871acb1c86 Gracefully take care of the error case when a container retries to attach to a network, it is already connected to 1ada1c8391 TestIpcModeOlderClient: skip if client < 1.40 0d453115fe bump opencontainers/selinux v1.2.2 4bc310c11b bump runc binary v1.0.0-rc8 6df6fe6020 bump runc vendor v1.0.0-rc8 b6d2d12e42 Updates daemon's remove link method to use more verbose error output. 794e8111b6 add ApplyDiff to RWLayer 63a66b0eb0 rootless: optional support for lxc-user-nic SUID binary 3518383ed9 dockerd: fix rootless detection (alternative to #39024) 83ac2b4c13 Skip TestImagesFilterMultiReference on API < v1.40 05bd9958f2 Skip TestUUIDGeneration on API < v1.40 d080a866cc Skip TestPingCacheHeaders on API < v1.40 0e7b46aafe Skip TestBuildWithEmptyDockerfile on API < v1.40 566eea13e6 Fix TestVolumesCreateAndList when running against a shared daemon 2b5880c2eb Remove TestContainerAPICreateWithHostName c91c3776ea Skip TestNISDomainname on API < 1.40 b73e3407e3 Dockerfile.e2e: builder: change output directory to simplify copy 3ededb850f Dockerfile.e2e: move "contrib" to a separate build-stage e7784a6c7e Dockerfile.e2e: move dockercli to a separate build-stage 045beed6c8 Dockerfile.e2e: use /build to be consistent with main Dockerfile 63aefbfbca Dockerfile.e2e: re-order steps for caching 5554bd1a7b Dockerfile.e2e: move frozen-images to a separate stage 20262688df Dockerfile.e2e: use alpine 3.9 e1f0f77bf4 Revendor go-winio b36455258f apparmor: allow readby and tracedby 48fd0e921c Dockerfile.e2e fix TestBuildPreserveOwnership 93886fcc5a Add "import" statement to generated API types 1cfdb2ffb8 TestContainersAPICreateMountsCreate: minor optimization ec248fe61d pkg/mount/Make*: optimize a6773f69f2 daemon/mountVolumes(): eliminate MakeRPrivate call 4e65b17ac4 daemon/mountVolumes: no need to specify fstype 80fce834ad pkg/mount: Mount: minor optimization aa60541877 pkg/mount: MakeMount: minor optimization fca5ee3bd5 Support environment vars in Swarm plugins services eaad3ee3cf Make sure timers are stopped after use. bc709991b3 Use a regex to match labels 28e93ed8ca Allow socket activation And the following cli commits: 3c87f01b1 Ignore SIGURG on Linux. 48d30b5b3 Use golang.org/x/sys/execabs 5941f4104 vendor docker, docker-credential-helpers and golang/sys for execabs package 18f33b337 context: Add tarball e2e tests 9ecc69d17 context: Ensure context name is valid on import 6f49197ca context: Ensure import paths are valid 5e430753f Fix link to docker build with squash experiment 4d6bc775b Fix container creation time in test/builders 47ecb13fe vendor: github.com/docker/docker v20.10.1 a2b4d9c74 vendor: github.com/moby/buildkit v0.8.1 fa3e0bcda Help link: remove color, add "bold" style, and white-space 29bd82ba1 generate-man.sh: Only build md2man if it's not installed 06c60dea9 Deprecation: add pulling from non-compliant registries to table aa91af81c Add deprecation note for non-compliant registries c54aec5c8 vendor: BuildKit v0.8.0 aae8d2dfd vendor: github.com/docker/docker cf31b9622ae9de4b5fb7a1c9456460980ab80281 345564319 docs: un-wrap line to prevent YAML docs from using "compact" formatting 9f9c4b7f3 Remove k8s.io/kubernetes dependency 40ec81a79 build: display [auth] output 9a0a071d5 vendor: buildkit v0.8.0-rc2, docker 4cab568ab vendor: github.com/moby/term bea5bbe245bf407372d477f1361d2ff042d2f556 f8a406011 vendor: containerd 0edc412565dcc6e3d6125ff9e4b009ad4b89c638 53471faac vendor: github.com/containerd/cgroups 0b889c03f102012f1d93a97ddd3ef71cd6f4f510 2c694b323 vendor: github.com/opentracing/opentracing-go v1.2.0 74d93d1fa vendor: github.com/tonistiigi/fsutil 0834f99b7b85462efb69b4f571a4fa3ca7da5ac9 0e96d9256 vendor: golang.org/x/crypto c1f2f97bffc9c53fc40a1a28a5b460094c0050d9 d7697f9c7 AdditionalHelpMessage set in command annotations, removed env var check 0ec9e434e Additional help message is displayed in cyan 2369d9d12 Do not display help link if env var “DOCKER_HIDE_HELP_GUIDES” is set dbd65f92c Display additional help message pointing to docs.docker.com guides. Will display when user types `docker help` or `docker --help`, but not for `docker run --help`. dc287b907 Long format for flag -w --workdir 64776dd72 added ip6tables to daemon CLI and config file doc e3d93058f build: remove PersistentPreRunE hack for experimental --platform 96e69c376 vendor: github.com/Microsoft/go-winio v0.4.15 c318ec8a3 vendor: update docker/docker and moby/sys 164954043 Always enable experimental features in bash completion ae5899e2b cli/command/container/stats.go: fix goimports c94f2d20b docs/builder: fix broken link 3d84db96b Remove really outdated zsh-completion REVIEWERS file 8258fc905 Add "--containerd-namespace" daemon flags in completion and docs 184e5feb7 Use consistent formatting and sorted keys in all JSON examples for dockerd reference e08a44157 docs/builder: fix typo 1f4beebd7 vendor: github.com/containerd/console v1.0.1 32d8f358d vendor: github.com/moby/term 7f0af18e79f2784809e9cef63d0df5aa2c79d76e 4b47aed2c vendor: github.com/creack/pty v1.1.11 ef0ac7f7e vendor: github.com/docker/docker c2cc352355d4c26be60be8ea3a1acfddc20fdfd3 7ab12bf96 vendor: github.com/fvbommel/sortorder v1.0.2 f32731f90 GetDefaultAuthConfig: fix potential panic due to unhandled error 6a02a51c9 docs: remove some references to obsolete docker versions 715073668 Deprecation: add experimental docker build --stream option a40beedcc builder: print deprecation warning instead of failing for --stream 5cd19d1fe opts: fix potential integer overflow CWE-190, CWE-681 aa4cb2473 Replace deprecated instruction 857f5856f handle sigterm on running a plugin b981f2454 vendor: cloud.google.com/go v0.44.3 f5670e106 vendor: opencontainers/go-digest v1.0.0 ceffcc527 vendor: github.com/gofrs/flock v0.7.3 15c928eae vendor: docker/docker 73dc6a680cdd48f2f993f1a1b91aac1dd23d47c8 b46ef4659 man-pages: fix missing manual title in heading 74d45bbf6 vendor: github.com/spf13/cobra v1.1.1 5355f2f63 Update man-page source MarkDown to work with go-md2man v2 faac84e35 Deprecate Linux containers on Windows (LCOW) (experimental) 8328ee196 Bump vndr v0.1.2 ee4192364 docs: update 20.03 -> 20.10 in docker update docs 6c0a3dfbf docs: update 20.03 -> 20.10 in deprecated.md 06c1f784d Update version to 20.10-dev 53e2110fa Wait on waitgroup instead of using time.Sleep 7baac8c14 feat: allow ssh flag arguments 3fe574b7e docs: fix broken links in build reference 977d3ae04 Always enable experimental features e6ef3349f update docs usage output to match new format 7f3717bd2 Replace tab with spaces in usage output d9c36c287 cli: print experimental message in usage output de8b696ed docs/deprecated: remove minor versions 48822564b docs: deprecate CLI options for experimental CLI features c2225ad12 docs: add /go/experimental/ vanity URL 0d11ef305 GH Actions: run CodeQL only on cron-job, not on pull requests 3f19902ea Config-file: remove User-Agent from config.json when saving c8e3ddc76 Add CodeQL Analysis workflow (again) 2d6b5e8ab vendor: sirupsen/logrus v1.7.0 2484a3053 docs: fix generated YAML due to trailing whitespace 54bbd782b docs: update URL for security landing page 2b1138c11 Fix initializing client modifying custom HTTPHeaders bcb2a4c92 docs: fix "docker logs" example missing container name 7ecf320e1 Fix make -f docker.Makefile without buildkit enabled eec671011 deprecate Dockerfile legacy 'ENV name value' syntax 0eb3cfd26 Add test-case for env with, and without = a4a3d2f94 builder: add note about alternative syntax 0a0037c6f builder: rephrase ENV section, remove examples for ENV key value without '=' b4eb07904 Fix buildkit flags not being hidden without buildkit enabled e7203bf81 Fix 2 typos Consecutive occurrences of 'the' 33ecbbdda vendor: github.com/containerd/containerd v1.4.1 00b72960d vendor: docker/docker 7f7e4abb331a2973cfb3223710cc35a3e476b1b3 bd8948761 Fix typo 6065dccc9 Add docs and bash-completion for new Linux capabilities f19e31afe docs: add link to linux kernel source code for capabilities 72a357858 docs: resize capabilities table 5b035964c Bash-completion: add CAP_AUDIT_READ 884a5ffbd docs: document CAP_AUDIT_READ 4e58c2951 docs: document optional "CAP_" prefix for capabilities 5bbdcd1c9 docs: sort list of capabilities alphabetically 185d71262 Subcommand `docker manifest rm` b4db7e38b docs/build: add note about git subdirectories with BuildKit 1e864920a Improve bash completion for ulimits 57326f5e6 CircleCI: update to docker 19.03.12 940907951 Support ulimits in docker stack deploy a9158bdc5 Add ulimits option to docker service create/update/inspect 866e4b10a opts/UlimitOpt: sort lists by name 23660be60 Service cap-add/cap-drop: add special "RESET" value 7edc00d80 vendor: buildkit 4d1f260e8490ec438ab66e08bb105577aca0ce06 ed339fa5c vendor: update prometheus deps to match docker/docker 338e83837 vendor: github.com/golang/protobuf v1.3.5 038cc46f8 vendor: github.com/containerd/cgroups 318312a373405e5e91134d8063d04d59768a1bff 9968ccafe vendor: github.com/containerd/containerd v1.4.0-rc.1 546809278 vendor: opencontainers/runc v1.0.0-rc92 dbe2f594e vendor: golang.org/x/sys ed371f2e16b4b305ee99df548828de367527b76b e70e75605 vendor golang.org/x/net v0.0.0-20200707034311-ab3426394381 1c3a97b0f vendor golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9 9f0658fb0 vendor: github.com/gorilla/mux v1.8.0 47980a7e4 vendor: github.com/docker/docker f50a40e889fdaeebf14fce1d494f95e60092d21d 0bb70223b vendor: github.com/docker/swarmkit d6592ddefd8a5319aadff74c558b816b1a0b2590 95037299c Service cap-add/cap-drop: handle updates as "tri-state" 190c64b41 Service cap-add/cap-drop: improve handling of combinations and special "ALL" value c6ec4e081 service: Add --cap-add & --cap-drop to service cmds 0db61ff6d stack: Support cap_add and cap_drop on services 01cd748eb Dockerfile: use experimental syntax and buildkit cache-mounts 3aee35037 Makefile: use --mount instead of -v for docker socket ab72cc923 Dockerfile: use bash as default command, remove DOCKER_CLI_SHELL 7c66213f8 Dockerfile: build gotestsum from source 01d6d2e7a Dockerfile: refactor to use multi-stage build 015cb9884 Complete capabilites with and without "CAP_" prefix. 8df7a9364 man/docker-build.1:fix --memory-swamp and --network, removing = between long-form opts and values dace8fdc7 formatter: reduce minimum width for columns in table-view b951b5b8c formatter: minor refactor to reduce needless conversions 83eda5313 opts: simplify ValidateEnv to use os.LookupEnv 33510e0a6 vendor: bump github.com/fvbommel/sortorder v1.0.1 0b8f46b06 Dockerfile: fix dynbinary inside dev container 6703919c7 Replace vbom.ml/util with fvbommel/sortorder 560ef7346 Update .dockerignore 43bc71889 Dockerfiles: update shellcheck v0.7.1 9a071a993 Return zero exit-code when force-removing non-existing containers 288326da1 Fix Auto complete options available: 231597527 Bump Golang 1.13.15 0b7147a2a fix docs, completion and docker service 9a41d99a8 Update authors and mailmap 2fc608cea Fix order of processing of some xx-add/xx-rm service update flags 86cbe2851 Replaces ADD with COPY in the COPY section 3c0a167ed document deprecation of legacy `~/.dockercfg` config-file e531875ff support emulated version detection 21da11c5f docker service inspect fails when TaskTemplate.Resources is nil 097d57314 vendor: update docker/docker 0f41a77c6993ade605a639fb25994cfe5e1b3fe8 293e239e1 vendor: update containerd/continuity efbc4488d8fe1bdc16bde3b2d2990d9b3a899165 79b4d93c1 vendor: update tonistiigi/fsutil ae3a8d753069d0f76fbee396457e8b6cfd7cb8c3 5dd9bd4c2 docs: remove docs for —-from=index 074a8dcff deprecate `docker run --kernel-memory` 04ab71457 Add shorthand for --tail option 1f907fb7b Add DefaultAddressPools to docker info output #40388 52ec986b5 vendor: docker/docker 78e6ffd279b627ebba046b9675ff4849091d9cc3 c496fefe4 vendor: buildkit df35e9818d1f9066e616e03f4b8d727c97562e5b 176380db8 Revert "Add CodeQL Analysis workflow" 251861237 Replace mattn/go-shellwords with google/shlex 1c79d16d8 added 'docker build --taget' to zsh completion cdfafe03e Bump Golang 1.13.14 dc4f7fb37 Bump Golang 1.13.13 75ab44af6 Fix ConfigFile.Save() replacing symlink with file 0c2fe385b cli/formatter: reformat TestImageContext test cases d642de78f cli/command/formatter: remove deprecated compareMultipleValues() utility 454c1927c Add CodeQL Analysis workflow 77e78a2fe Move circle.yml to .circleci/config.yml 05eebb8cc scripts/make.ps1: actually define the CommitSuffix parameter fde22be3e TestServiceUpdateResolveImageChanged: use subtests 732d8b51a un-wrap some code 47fce8f4b clean-up "resolve image" option logic 55451d3c7 Add checks for dependencies that are not vendored. `make vendor` fails if any dependency is not vendored. 6776f7cdc docs/builder: add note about handling of leading whitespace cce2f7fd9 refactor opts tests af62a0529 vendor: xeipuuv/gojsonschema v1.2.0 c31efec9e vendor: mitchellh/mapstructure v1.3.2 a6cfbd235 Added env-file flag to docker exec 973713bc0 ReadKVEnvStrings/ReadKVStrings return nil if empty, and add tests 1c31e193c command/container: skip some tests on macOS beb23c996 docs: update for cgroup v2 and rootless 969580a88 config: ignore empty config file instead of printing warning d02173090 Handle errors on close in config file write. 851eeb963 Add support for pids limit in stacks (swarm) 395a6d560 Add support for --limit-pids on service create / update (swarm) c253918ea docs: fix example output for docker plugin ls 668aea3f1 vendor: golang.org/x/text v0.3.3 0f7260d1c Fix broken link 1570025f0 Remove 'images' alias from 'image ls' command 6248f2fb6 Don't filter out registries to logout from with config file contents 458c2336c vendor: containerd c80284d4b5291a351bb471bcdabb5c1d95e7a583 0d57a400b vendor: docker/docker aaf470eca7b588aa19e6681bff8bf08d17be1bf2 89089fb41 config: remove redundant os.Stat() 494f30a1a config: fix error message using incorrect filename bc5f10224 Added support for setting OS version in docker manifest annotate. Signed-off-by: Saswat Bhattacharya <sas.saswat@gmail.com> e1148e2c7 Add MOBY_DISABLE_PIGZ to dockerd environment variable docs ad301e741 Split up environment variable documentation between cli and dockerd 2ab4b4d53 Don't loose additional metadata fields 4840a8dfb list state `ready` for filtering in stack_ps.md a3af1f47d Use consistent name for errors e64d6d9ed vendor: gorilla/mux v1.7.4 41255a431 CircleCI: update docker versions used in CI 1cd69c41e Bump Golang 1.13.12 a91880a3a Deprecate classic Swarm and overlay networks using external k/v stores d30970e3b ssh: avoid setting flags through hostname a968359e0 docs/extend: fix broken link and some markdown touch-ups 1183a3e6e Explicit Z on logs timestamp examples ccd9d633b Set platform on container create API. 8c986d3ff Bump docker/docker vendor 98a3d6a48 docs: fix broken link in dockerd.md cb010db83 Fix bug with panic when DOCKER_CLI_EXPERIMENTAL environment variable is incorrect 74919d056 Run e2e tests with different engine version on Jenkins Rewrite Jenkinsfile to new declarative syntax without parallel as the e2e framework is not tailored for than (container name clash, port clash,...) 15d6565e4 Add a new Makefile variable to override DockerInDocker engine version we use to run e2e tests 54f766d24 Partially revert cf663b526a34f3e7911e6e60138138c2023aa844 as it breaks the version negotiation with an older docker engine. 459c6082f Removing CLI plugins API documentation from official documentation as it is now deprecated. Adding depreciation notice. 1ecca982e Bump Golang 1.13.11 eeafa4015 -buildmode=pie is not supported for the mips arch reference: https://github.com/containerd/containerd/commit/4c99c81326f4026fb8c0b8c5e10542205d99c321 66dd9f29f vendor: beorn7/perks v1.0.1 cf543e130 vendor: mitchellh/mapstructure v1.0.0 4d948e468 docs: more Markdown touch-ups 0c5f97ed7 compose: add build.extra_hosts to v3.9 schema bb7ef2cb3 Update some uses of errors.Cause() to errors.Is() 466c50f93 vendor: k8s.io/klog v1.0.0-2-g4ad0115 082a8bd89 vendor: pkg/errors v0.9.1 84c0a0409 vendor: Microsoft/hcsshim v0.8.9 f6541cfd8 vendor: moby/term 73f35e472e8f0a3f91347164138ce6bd73b756a9 d10e2b9a6 vendor: golang.org/x/sys 85ca7c5b95cdf1e557abb38a283d1e61a5959c31 719169db6 Replace deprecated Cobra command.SetOutput() with command.SetOut() bc938e4de docker info: add "context" to output 181e60499 docker version: add "context" to output 803b9071e docs: fix, and touch-up "docker context" docs df5cedfc8 vendor: spf13/cobra v1.0.0, go-md2man v2.0.0, blackfriday v2.0.1 d07f44fb3 vendor: switch back to upstream spf13/pflag v1.0.5 80a225647 Swarm init: use local IPNetSliceValue e23a1fca9 docs: update dockerd usage d096339f4 docs: update usage output for dockerd (19.03) 9a58504d3 docs: fix order of flags in usage, and fix missing quote dbd2fa5c3 vendor: remove unused dependencies from vendor.conf 24ade3c13 vendor: sirupsen/logrus v1.6.0 ef414633d Update dead link and add missing info on COPY bc58d655c builder: fix broken link 116c9a1f5 docs: fix links, and minor markdown touch-ups dbc61787a info: print Cgroup Version 3dfe2ffc1 vendor: update kubernetes and dependencies v1.16.9 8b32a3f9d vendor: sirupsen/logrus v1.5.0 4f65b65e8 vendor konsorten/go-windows-terminal-sequences v1.0.3 2e83f5685 vendor: update gotest.tools v3.0.2 d2632cea7 plugin: make runplugin public 9375644e3 Add jobs support to CLI 0cd7c6aa0 service update: fix service create example 84a07a997 Add container_iface_prefix option to documentation 6a17919d3 vendor: github.com/docker/swarmkit ebe39a32e3ed4c3a3783a02c11cccf388818694c 5adc9d236 vendor: github.com/containerd/ttrpc v1.0.0 2cb9d26c2 vendor: github.com/containerd/console v1.0.0 c08557768 vendor: github.com/containerd/cgroups 44306b6a1d46985d916b48b4199f93a378af314f 9c21f28ac vendor: github.com/containerd/containerd 4d242818bf55542e5d7876ca276fea83029e803c 2b910b69b vendor: github.com/tonistiigi/fsutil c2c7d7b0e1441705cd802e5699c0a10b1dfe39fd edf70dc30 vendor: golang.org/x/oauth2 bf48bf16ab8d622ce64ec6ce98d2c98f916b6303 9a41e375b vendor: golang.org/x/time 555d28b269f0569763d25dbe1a237ae74c6bcc82 37d184fe1 vendor: golang.org/x/crypto 2aa609cf4a9d7d1126360de73b55b6002f9e052a 55d320db9 vendor: golang.org/x/sync cd5d95a43a6e21273425c7ae415d3df9ea832eeb 7b9012ddd vendor: golang.org/x/sys d5e6a3e2c0ae16fc7480523ebcb7fd4dd3215489 3aab460ee vendor: golang.org/x/net 0de0cce0169b09b364e001f108dc0399ea8630b3 e32fe12ae vendor: golang.org/x/text v0.3.2 bdce04e95 vendor: github.com/golang/protobuf v1.3.3 f36dcfd67 vendor: github.com/gogo/protobuf v1.3.1 d7c34b6a0 vendor: github.com/gogo/googleapis v1.3.2 cdde30e03 vendor: google.golang.org/genproto 3f1135a288c9a07e340ae8ba4cc6c7065a3160e8 a38db191b vendor: update google.golang.org/grpc v1.27.1 0dc9d17a2 vendor: github.com/moby/buildkit ae7ff7174f73bcb4df89b97e1623b3fb0bfb0a0c d0a80bf44 update docker, replace github.com/docker/pkg/term, github.com/docker/pkg/mount 8a30653ed config: don't call homedir on init() c4798a9da yamldocs: add description to base command 86257b0fc experimental/vlan-networks: markdown touch-ups e34c40751 docs/reference: explain "colon" e4fc8cfa2 docs/extend: reformat notes 16730a2ab docs/builder: touch up markdown, and some minor rephrasing b73df4a23 docs/reference/run.md: touch-up markdown 6ae5df423 reference docs: reformat notes 8919c228b reference docs: fix broken links and markdown touch-ups f88ae7413 Add "host-gateway" to tests for extra_hosts / --add-host a4a07c643 calculateMemUsageUnixNoCache: subtract total_inactive_file, not cache 3b256db4a Add script to regenerate test-certificate fixtures 5661cc0de vendor: update go-events to fix alignment for 32bit systems b39739123 cli: perform feature detection lazily a88a1bea2 docker build: check experimental --platform on pre-run fa11032a3 opts: use constants instead of vars for defaults and un-export them ff2c1c085 Jenkinsfile: split e2e tests to separate stages eb93a865e improve "network prune" output to mention custom networks only 687539013 Bump Golang 1.13.10 6bd09229a CI: update notary test certificates 19bcebd12 test: make sure environment vars are reset after tests 650c71758 TestHistoryContext_CreatedSince: skip on non-UTC environments d063b835b Bump Golang 1.13.9 7557c138d Adding missing title in builder.md 83478fe7c try http for docker manifest --insecure 94f513e48 Update deprecation policy to 1 stable release 99443274b Include deprecation policy on deprecated features page f30bde6ad remove unneeded comment from reference files 7c87175d8 Fix broken link in CONTRIBUTING 824a9ce64 docs: update code-hints for compatibility with "rouge" f912deeec Fix whitespace that caused short-format in generated YAML e1b362847 Fix yamldocs generator to accomodate nested subcommands 5115bfa04 Fix naming of reference docs files f64c1ff3c update shellcheck v0.7.0 b1fd38fa7 Update Windows ico 9d9568263 Replace 'numeric' with object in -q description 67ebcd6dc Skip IPAddr validation for "host-gateway" string 40aa02053 Add an exe extension to windows binary during cross build. 4313c8b3c Update Golang 1.13.8 2c0e93063 bump gotest.tools v3.0.1 for compatibility with Go 1.14 5ef0fa10d gofmt compose loader test 4cd4305b3 docs: add redirect for old location of daemon reference 11869fa42 fix panic on single-character volumes 1edb10fe3 vendor: bump golang.org/x/crypto bac4c82f6975 (CVE-2020-9283) 26d71f9e0 Bump version to 20.03.0-dev c485dab60 vendor: golang.org/x/crypto 1d94cc7ab1c630336ab82ccb9c9cda72a875c382 aad9d2c95 Fix builder prune -a/--all flag description 80b22064d Improve service tasks grouping on printing 5e5ef9e0b Update Golang 1.12.17 c84f95815 Remove deprecated docker search --automated and --stars flags 1fefbdc29 Dockerfile.e2e: don't show progress, force TLS, and follow redirects 491c819a9 deprecated: use of reserved namespaces for engine labels 3493fe2af vendor: bump swarmkit 49e35619b18200845c9365c1e953440c28868002 507e6b61c vendor: update containerd/continuity to 26c1120b8d4107d2471b93ad78ef7ce1fc84c4c4 9a690c9ac vendor: update opencontainers/runc v1.0.0-rc10 751f320ee vendor: bump google/shlex e7afc7fbc51079733e9468cdfd1efcd7d196cd1d 0fe7190d0 vendor: update fsutil 0f039a052ca1da01626278199624b62aed9b3729 48f97602f vendor: add comment that hcsshim is v0.8.7 9b549401b vendor: update docker to 58c2615208962a458ed94f4b6262eb27e5e021cd 6cb7e6fca vendor: add missing containerd/cgroups dependency 7c5440695 update vndr v0.1.1 58c76291c docs: update deprecation status of "filter" option 73c9a44d5 docs: update deprecated status for --disable-legacy-registry 74677110d docs: update deprecation status of "engine *" commands, and dab files f26e9a3a6 docs: service create: document os/arch constraints and more examples d4c0de271 docs: add status table to "deprecated.md" e8c2dba69 docs: mark deprecation of "docker engine" subcommands c7aca0849 docs: mark deprecation of "dab" files and top-level "deploy" subcommand b6875ad69 docs: sort "deprecated.md" by deprecation release 672c00e1c docs: update some release-versions in "deprecated.md" c3092d940 docs: minor touch-ups in "deprecated.md" b059c93c9 docs: service create: document non-matching/exclude constraints abeb7babd docs: service create: use markdown table for constraints 76852f82b Give an example for --reserve-memory 07436dfe7 Remove a useless '\' and enhance a script in an example in the section 'Add entries ... (--add-host)' 473a9d20c Add examples for configs 74cc062d2 Syntax corrected 17e651dc5 Add support for Kubernetes username/password auth 2a08462de Revert "connhelper: add ssh multiplexing" 29734b910 Revert "docs: document ssh multiplexing env" 5ad1d4d4c docker run: specify cgroup namespace mode with --cgroupns 27d9aa2d9 vendor: update golang.org/x/crypto 69ecbb4d6d5dab05e49161c6e77ea40a030884e1 (CVE-2020-7919) 19fd390c3 Update Golang 1.12.16 (CVE-2020-0601, CVE-2020-7919) 4f3bc1581 docs: document dockerignore update f7009ee12 docs: document build outputs 73cd257d0 docs: document cache-from 9e620e990 implement docker push -a/--all-tags 3dfcfbb2b vendor: bump gopkg.in/yaml.v2 v2.2.8 594be50a6 bump gotestsum v0.4.0 3f83832be bump gotestsum v0.3.5 97010520d bump mjibson/esc v0.2.0 7904c23df bump vndr v0.1.0 to support versioned import paths 8f5379b30 Update flag description for docker rm -v 4006c42e1 Added transforms for compose overrides a955ed647 Add notice about port binding and overriding of UFW to docker run reference 94443920b Fix: docker push --quiet suppressing errors and exit code 6cf7970cd bump imdario/mergo v0.3.8 e9b9a0014 completion: add `--max-download-attempts` 348f24cae Add content trust tests for run command 139af1f6d Add log-driver and options to service inspect "pretty" format 84c6b08cf Update Golang 1.12.15 b53ffd6c1 vendor: bump miekg/pkcs11 v1.0.3 1d6445dc9 opts: fix formatting of comments e7f720b0a cli/config: fix formatting of comments 73dcf50d5 cli/command: fix formatting of comments, and minor linting issues 6e5528b65 e2e: fix formatting of comments c804b1083 Dockerfile.e2e: update compose v1.25.1, enable buildkit c2c7503d4 Convert ports before parsing. 154a1f6df Reverse order of long-form ports 4ecbef466 docs: document ssh multiplexing env c04dd6e24 connhelper: add ssh multiplexing 3baa6d57f Refactor config and secret tests to table-driven 9698b7a37 Default config/secret target to source name 4c2d7b7f7 Detect single value advanced config/secret syntax 627a4cf7c vendor: bump docker/docker a9507c6f76627fdc092edc542d5a7ef4a6df5eec ece71412c vendor: bump buildkit 4f4e03067523b2fc5ca2f17514a5e75ad63e02fb dff269b5e vendor: bump hcsshim b3f49c06ffaeef24d09c6c08ec8ec8425a0303e2 b82206295 vendor: bump containerd acdcf13d5eaf0dfe0eaeabe7194a82535549bc2b ed8cacd6e vendor: bump runc v1.0.0-rc9 013151ff7 vendor: bump google.golang.org/grpc v1.23.1 268cc5df2 vendor: bump golang.org/x/sys 6d18c012aee9febd81bbf9806760c8c4480e870d 2d6aec78a Change example networks ce4216894 docs: document from platform 4beea5853 Bump Golang 1.12.14 ef37a8a57 Fix "make build" (non-containerized) on macOS 54ba28f40 docker info: list CLI plugins alphabetically aef6b04a7 Fix docker ps table headers with custom format and "split" or "join" 69f216f6e Fix docker ps --format with templating functions b06272631 command/container: unify list tests in a single file 6732347e5 bump containerd v1.3.0 22a291f70 config: preserve ownership and permissions on configfile c07f50afa bump buildkit f7042823e340d38d1746aa675b83d1aca431cee3 cf3f902df update runc to v1.0.0-rc8-92-g84373aaa (CVE-2019-16884) 4b267469b bump hashicorp/golang-lru v0.5.3 b104da4a0 bump containerd/continuity f2a389ac0a02ce21c09edd7344677a601970f41c 7e5451316 docs: add redirects for engine reference pages 43b2f52d0 Remove "docker engine" subcommands f540eae7f Docs: add note about management commands targeting a manager e70d6bcb8 Add docs for proxy configuration in config.json dd87cd9fe bump github.com/dgrijalva/jwt-go v3.2.0, docker/licencing 7c3de6a4f59e9e70764ea6f6901cf17b88059789 585ec4da9 docker cp: prevent NPE when failing to stat destination 99ad13e37 Remove experimental "deploy" from "dab" files e1daa22ba Modify docs to specify working of device flag 7f063899e Maintainers: remove Justin and Aaron 2e2d2e16c Move Daniel to alumni 046a13f99 Maintainers file: remove "docs maintainers" section 819551220 Fixing some links and deleting an older page reference c888809bb Typo in documentation of volume create e692381d1 e2e: add new test package "global" with TestTLSVerify 756ab2fb9 Add support for docker push --quiet 26dbc3226 cp: allow trailing slash in non-existant destination 22a5dad84 app-214 Load Client info in getter function 7eb6a29c0 Bump compose-on-kubernetes from v0.4.25-alpha1 to v0.5.0-alpha1 cb29ef6c6 Add interpolation type cast for max_replicas_per_node b7e06f284 Remove now obsolete gometalinter and use golangci-lint instead 1e7774228 service: remove unused opts from newService() (unparam) 640305f33 cli/command/stack/kubernetes: Using the variable on range scope `c` in function literal (scopelint) 542f80241 cli/command/container: Using the variable on range scope `c` in function literal (scopelint) 754fc6fe6 cli/command/stack/kubernetes: Using a reference for the variable on range scope `obj` (scopelint) c2b069f4d opts: Using the variable on range scope `tc` in function literal (scopelint) cd3dca37b cli/manifest: Using the variable on range scope `testcase` in function literal (scopelint) aafe3df8b cli/compose/template: Using the variable on range scope `tc` in function literal (scopelint) 79dc83e78 cli/command/container: suppress dogsled warnings dd4d216af e2e: remove unnecessary trailing newline (whitespace) 63e45e632 internal: remove unnecessary newlines (whitespace) 612d83d6d cli: remove unnecessary newlines (whitespace) 2ec424a2d cli/command: Using the variable on range scope `testcase` in function literal (scopelint) 7c4b63b1c cli/command/trust: Using the variable on range scope `keyBytes` in function literal (scopelint) a269e17d7 cli/command/context: Using the variable on range scope `c` in function literal (scopelint) 1736662be e2e/cli-plugins: Using the variable on range scope `args` in function literal (scopelint) 96ec7299d cli/compose/loader: Using a reference for the variable on range scope `overrideService` (scopelint) 54d48de21 templates: Using the variable on range scope `testCase` in function literal (scopelint) c828fa141 service/logs: Using the variable on range scope `testcase` in function literal (scopelint) 5a2a9d9ca cli/config: Using the variable on range scope `tc` in function literal (scopelint) e74e2c774 cli/command/formatter: Error return value of `ContainerWrite` is not checked (errcheck) 008f6a2da cli/command: Error return value of `cli.Apply` is not checked (errcheck) 9275e2cb6 cli/command/formatter: Error return value of `ImageWrite` is not checked (errcheck) fe3cc6eb7 cli/context/store: SA5001: should check returned error before deferring f.Close() (staticcheck) 709728e72 cli/command/image: SA1006: printf-style with no further arguments (staticcheck) ea64a1ceb cli/command/utils: SA1006: printf-style with no further arguments (staticcheck) f0614ca78 cli/command/trust: SA1006: printf-style with no further arguments (staticcheck) 0e4bd30cf cli/command/image/build: G107: Potential HTTP request made with variable url (gosec) 8d64c2af1 cli/command/service: SA1012: do not pass a nil Context (staticcheck) 1850a0595 cli/command/secret: G101: Potential hardcoded credentials (gosec) 34f595975 cli/compose/convert: driverObjectConfig - result 1 (error) is always nil (unparam) 6205ef33b e2e/container: containerExistsWithStatus - t is unused (unparam) b83545ebb cli/command/image/build/context_test.go:244:38: `createTestTempDir` - `prefix` always receives `"builder-context-test"` (unparam) 4be924a0a cli/command/registry/login_test.go:66:25: unnecessary conversion (unconvert) c23737916 cli/compose/convert/service_test.go:274:72: unnecessary conversion (unconvert) 6047259e5 File is not `goimports`-ed (goimports) 0153624a5 cli/command/trust/sign_test.go:119:70: unnecessary conversion (unconvert) f123e43c1 Disable unparam linter: e2e/image/push_test.go:299:27: `withNotaryPassphrase` - `pwd` always receives `"foo"` (unparam) 7d823438b Disable unparam linter: cli/required.go:102:16: `pluralize` - `word` always receives `"argument"` (unparam) 9118b2b2b compose/loader: define type for transformer-functions 6eb0c9c61 disable unparam linter on these functions, as we need an error in these function signatures d640f44df cli/compose/convert: result 1 (error) is always nil (unparam) 47741f81d cli/command/system/info.go:116:68: prettyPrintClientInfo - result 0 (error) is always nil (unparam) a3c7cb4f1 cli/command/stack/kubernetes/deploy_test.go:65:68: `checkOwnerReferences` - `stackName` always receives `"test"` (unparam) ab1aeedb2 cli/command/plugin/list_test.go:61:31: `TestList$1` - `filter` is unused (unparam) 75c60c1af cli/command/image/build_session.go:133:45: getBuildSharedKey - result 1 (error) is always nil (unparam) 28ac2f82c cli/command/image/build_buildkit.go:450:56: parseSSH - result 1 (error) is always nil (unparam) 0ce2eae5a cli/command/image/build/context_test.go:252:71: `createTestTempFile` - `perm` always receives `0777` (`511`) (unparam) 70bd64d03 cli/command/image/build/context_test.go:244:38: `createTestTempDir` - `dir` always receives `""` (unparam) e1c0c7979 unchecked errors 584da3775 cli/command/container/attach.go:141:15: nilness: impossible condition: nil != nil (govet) b3d4c6aac opts/ulimit_test.go:11:13: composites: `*github.com/docker/cli/vendor/github.com/docker/go-units.Ulimit` composite literal uses unkeyed fields (govet) 1bfe81318 cli/compose/types/types.go:106:2: structtag: struct field tag `yaml:",inline", json:"-"` not compatible with reflect.StructTag.Get: key:"value" pairs not separated by spaces (govet) 5ceed3059 cli/registry/client/fetcher.go:106:9: nilness: impossible condition: nil != nil (govet) 9afeb6f43 cli/command/container/start.go:157:20: nilness: nil dereference in type assertion (govet) 85cfd4e51 cli/command/stack/kubernetes/list.go:32:47: nilness: tautological condition: non-nil != nil (govet) f5e838706 cli/command/trust/key_generate.go:112:9: nilness: impossible condition: nil != nil (govet) 3a428202b SA1019: httputil.ErrPersistEOF is deprecated: No longer used. (staticcheck) 7da936047 cli/command/container/stats.go:211:21: SA1015: using time.Tick leaks the underlying ticker, consider using it only in endless functions, tests and the main package, and use time.NewTicker here (staticcheck) 8018a850c cli/command/trust/inspect_pretty_test.go:399:24: SA4010: this result of append is never used, except maybe in other appends (staticcheck) 296297190 opts/throttledevice.go:51:5: SA4003: unsigned values are never < 0 (staticcheck) 2d0c10d77 kubernetes/conversion_test: use test-builders package 270defa17 internal/test/builders: don't set EndpointSpec by default e4d3c360b Bump Compose on Kubernetes 758d12e65 unused-for is a deprecated synonym 56729bc0a Return empty string if image createdAt is zero 568ea3a32 Refactor the `stack services` command to be uniform 20424e2f5 Add test for ServiceStatus 7405ac5c2 Services: use ServiceStatus on API v1.41 and up 228e0f5e7 TestStackServicesErrors: use sub-tests, and return tasks 962015b05 internal/builders: add GlobalService, ServiceStatus, NodeList() 0a21de05d compose/loader: fix TestIsAbs not testing all combinations 54411e5a9 cli/command/container: Using a reference for the variable on range scope `n` (scopelint) 648199b32 cli/command/service: Using a reference for the variable on range scope `entry` (scopelint) 167b3906f Update flag doc 3e78cbc02 Gometalinter: raise deadline to 3 minutes 7f6cd6433 bump docker/docker to a09e6e323e55e1a9b21df9c2c555f5668df3ac9b 5e4c7eba4 bump Microsoft/hcsshim 2226e083fc390003ae5aa8325c3c92789afa0e7a 937e65cac CircleCI: add some info steps, and re-group jobs 46f3f9ac0 update Jenkins Build Status urls for README 71e525f74 gometalinter: fix configuration 87cf5b606 bump hashicorp/go-version v1.2.0 ad4ca6f0d bump gofrs/flock v0.7.1 9b9280465 bump logrus v1.4.2 6a26d370a bump mattn/go-shellwords v1.0.6 c07b1b275 bump creack/pty v1.1.9 4b5ecc982 bump gorilla/mux v1.7.3 474d522ee Update Golang 1.12.12 (CVE-2019-17596) 79aa6cce1 TestFormatInfo: add extra test-case 8f11fbc87 Fix lint issue 415f60862 Add test case to cover non-empty auth entry 86281a7b4 daemon: document --max-download-attempts option 0076ee6cd Fix typo fc19fb6d9 Fix erroneous space indentation of shell script 7b8c6a632 bump github.com/xeipuuv/gojsonpointer 02993c407bfbf5f6dae44c4f4b1cf6a39b5fc5bb 937ce69b4 Adjusting glossary reference and clarrifying the start of a Dockerfile 06f34ba50 bump github.com/xeipuuv/gojsonschema v1.1.0 ba7ec36de Minor formatting changes and a typo fix. 7a279af43 config: revert to using pkg/homedir cd9b39fc5 Add bash completion for `builder build` options 7eecbb96a Annotate flags that are not supported by Buildkit 37e9cabf1 Allow username/password in config file 70a4eb2a4 vendor: update grpc to v1.23.0 72bc29a2a vendor: update go-winio to v0.4.14 38c02a928 vendor: align with engine at b6684a403c99aaf6be5b8ce0bef3c6650fcdcd12 c3990f3ba build: remove --stream 91cf8b04c vendor: Bump gopkg.in/yaml.v2 86ae871e0 Add bash completion for `builder build` 8743e36a4 bump golang 1.12.10 (CVE-2019-16276) ee76ac8f9 fix formatting issue of encoded urlSigned-off-by: Sam <samashah@microsoft.com> 47f059db7 config: keep configDir empty when homedir errors 031bd2d53 Adding experimental feature info 0df5d6427 vendor: update buildkit to 10cef0c and fsutil 7f9f923 c2626a827 cli/config: use os.UserHomeDir instead of github.com/docker/docker/pkg/homedir 821f5ecf5 Add option remove `env_file` entry after merged 131eefc54 Clarifying docker config rules b3a1681fd Add clarification when using USER UID:GI 41aa20b6b Add riscv64 to manifest annotation and bash completion 6ebcc211a Move filtering to __docker_complete_services, as suggested by @albers b85e1e2ef Fix substitution of comma to space character, suggested by @albers f55c5b656 Make service completion faster 34447852b Sort services from stack from swarm 5bc1f24df Add docker-compose schema v3.9 bba0a4d5a Updating deprecated command example in search.md 7634872a3 fix(pull_test): for quiet option 2f7b364cb add rudimentary fish completions for docker network e25e077a2 restore support for env variables to configure proxy regression introduced by b34f34 close #39654 265bee4d5 Update service_create.md a0dd6e025 Fix phrasing when referring to the freezer cgroup 54428b1f3 bump miekg/pkcs11 v1.0.2 d9856049e Bump golang 1.12.9 de1523d22 Adjust tests for changes in Go 1.12.8 / 1.11.13 bbd179f25 Bump golang 1.12.8 (CVE-2019-9512, CVE-2019-9514) 778052b06 bump x/sys to fix riscv64 epoll 893db86d6 e2e: enable buildkit ae58e356e Circle-CI: use progress=plain 9a6519db7 Circle-CI: enable buildkit 82e01807b Update dockerignore d1b6676df Update AUTHORS and mailmap f7ab2987c Explain -s flag on docker ps bc4ed69a2 TestSigProxyWithTTY: fix f290a8084 switch kr/pty to creack/pty v1.1.7 b1a3c1aad Disable TLS for e2e docker-in-docker daemon e9ada56a8 builder.md: Correct copy/paste error 0d3022c6d Dockerfile: use GO_VERSION build-arg for overriding Go version 64f0ae425 bump docker-credential-helpers v0.6.3 de01e7245 e2e: remove docker engine testing remnants 1fdbd6181 docker ps: add State field to formatting 988b9a0d9 docs: add info for events backlog and scope b06f9e959 Bump golang 1.12.7 d6dd08d56 Detect Windows absolute paths on non-Windows CLI 8b19c1d73 Update CircleCI Docker version to 18.09.3 53fc63a93 Circle-CI: fix indentation in circle.yml 08fd6dd63 e2e: use stable-dind image for testing f7b75eeb9 adding nvidia gpu access info Signed-off-by: Adrian Plata <adrian.plata@docker.com> efdf36fa8 Rollback config type interpolation on fields "parallelism" and "max_failure_ratio" were missing, as it uses the same type as update_config. c8e9233b9 Deprecate AuFS storage driver 7cf1a8d4c Add test for --sig-proxy with a TTY ee2950492 Do not disable sig-proxy when using a TTY 15d361fd7 Windows: skip permissions check on key 4d7e6bf62 Fix advanced options for backward compatibility 8b4e52f0b deprecate registry v2 schema 1 81e3457c2 bump gorilla/mux v1.7.2 1dc756e8d fix: docker login autocomplete for zsh 459099e17 Bump golang 1.12.6 f6a4c76fb bump docker-credential-helpers v0.6.2 1877ed6aa bump compose-on-kubernetes v0.4.23 17e043828 completion with container names on restart 5f9350966 Fix detection of invalid context files when importing 668a9ff8e vendor: update net and sys 291e86289 Introduce .zip import for docker context bb8e89bb2 cli-plugins: add test names for easier debugging 6ca878373 cli-plugins: add concept of experimental plugin, only enabled in experimental mode c455193d1 Push check for kubernetes requirement down into the endpoint 520be05c4 Dynamically register kubernetes context store endpoint type. f820766f6 Export `DefaultContextStoreConfig()` and `ResolveDefaultContext()` 1433e2742 Allow dynamically registered context endpoint to provide their defaults. 4f14c4995 Add a helper to iterate over all endpoint types in a context store 087c3f7d0 Support dynamic registration of context store endpoint types d5d693aa6 e2e: add a test for `context ls` d84e278aa fix a few typos 33a9a6392 Revert "add a 10s timeout to the client object." 909b85460 bump LK4D4/vndr v0.0.3 and revendor 8635abd66 Use underlying `NewKubernetesConfig` directly from compose-on-kubernetes. 1e5129f02 rename package import kubcontext → kubecontext 41fe46413 add containerd/ttrpc f02858b1457c5ca3aaec3a0803eb0d59f96e41d6 51de9a883 bump golang.org/x/crypto 88737f569e3a9c7ab309cdc09a07fe7fc87233c3 4de6cb013 bump gogo/protobuf v1.2.1 415cb3d90 bump gogo/googleapis v1.2.0 4cb01169e bump containerd/console 0650fd9eeb50bab4fc99dceb9f2e14cf58f36e7f dbfeaae5e bump containerd/continuity aaeac12a7ffcd198ae25440a9dff125c2e2703a7 8ea94a172 bump containerd aaeac12a7ffcd198ae25440a9dff125c2e2703a7 a4f01d876 vendor: bump runc v1.0.0-rc8 1ae6ec7f2 bump docker/docker 3998dffb806f3887f804b813069f59bc14a7f3c1 529ef6e89 vendor buildkit to f238f1e c52e1f248 context: ClientOpts() now includes WithAPIVersionNegotiation if version is missing 5331358d3 Fix PowerShell codehint for rouge 93d76c5c9 bump google.golang.org/grpc v1.20.1 ff44305c4 context: produce consistent output on `context create`. 59defcb34 add a 10s timeout to the client object. e5c86dbcf Forcing the creation of tmp directory so that build doesn't fail when it already exists e6f73bc50 Bump version to 19.09.0-dev c1639e1e4 Add bash completion for `events --filter node` b55992afc Add bash completion for `context create --from` 7f45a0e52 vendor buildkit to 646fc0af6d283397b9e47cd0a18779e9d0376e0e (v0.5.1) c32d1de57 Bump golang 1.12.5 daca70d82 build: add --platform local 8adcedd65 build: honor BUILDKIT_PROGRESS env config dcc414be3 CircleCI: store junit.xml as artifact 50a45baba bash completion: add node type filter 483c53ad9 Use single table for all ContainerImagePullPolicy tests ffba7659c Improve testing of never pull and always pull scenarios ec56136d6 Use closure for common pulling and tagging bevior in container creation 965664d89 Improve flow pull behavior before container creation. a06b5db59 Update cli/command/container/create.go 22cd41896 Adds flag modifying pull behavior for running and creating containers 15130e304 Support GOARM and windows .exe in binary target af200f14e cli-plugins: fix when plugin does not use PersistentPreRun* hooks ffc168ed5 Update AUTHORS and mailmap 7d0645c5f Use command.Cli instead of command.DockerCli 40a6cf7c4 Include CLI plugins in help output on unknown flag. 79a75da0f Hide experimental builtin commands in help output on unknown flag. d57175aa2 Move subtests of TestGlobalHelp into actual subtests 1648d6c4a Add bash completion for `--security-opt systempaths=unconfined` bfa43d298 Remove deprecated storage drivers from bash completion 70d8e0b86 Add ip and ip6 to advanced network syntax Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-ce: update to v19.03.15-ceBruce Ashfield2021-02-051-2/+2
| | | | | | | | | | | | | | | | | | | | | The following docker-ce commits are in this bump: 8ba93ae231 centos-8: work around CentOS repo bug preventing to enable PowerTools b61c54e644 CentOS 8: manually import GPG key 7c5dfa21ab Bump VERSION to 19.03.15 c48e2f23e4 context: Add tarball e2e tests 51b4c45634 context: Ensure context name is valid on import 6a4daa87e5 context: Ensure import paths are valid 736dcbb76c pull: Validate layer digest format e0b182f9fd buildkit: Apply apparmor profile e2fc17e3cd vendor buildkit 396bfe20b590914cd77945ef0d70d976a0ed093c 77ef9e3963 Use real root with 0701 perms bb9d1ea5f7 Do not set DOCKER_TMP to be owned by remapped root 65f17f139b Ensure MkdirAllAndChown also sets perms bc73c89f8b docs: un-wrap line to prevent YAML docs from using "compact" formatting 6cfdb61f0a Bump VERSION to 19.03.14 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: Fix postinstall script for read-only rootfsDaniel Dragomir2021-01-101-4/+4
| | | | | | | | Ensure postinstall script for lxc-networking package can run at build time for a read-only rootfs (with sysvinit). Signed-off-by: Daniel Dragomir <Daniel.Dragomir@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* moby: update to v19.03.14Bruce Ashfield2020-12-071-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Incorporating the following moby commits: d3c5506330 update containerd binary to v1.3.9 (address CVE-2020-15257) 1babdf81e7 update containerd binary to v1.3.8 f80f6304e2 Bump libnetwork 4b181db52b bump up rootlesskit to v0.11.0 7487dca8a5 docs: fix builder-version swagger c7253a0e1a dockerd-rootless.sh: support containerd v1.4 shim socket path convention 88eec2e811 Also trim "~..." from AppArmor versions ecd3baca25 pkg/aaparser: support parsing version like "3.0.0-beta1" 74c0c5b7f1 Fix gcplogs memory/connection leak 5f32bd9ced awslogs: Update aws-sdk-go to support IMDSv2 8cf9d50fc0 [19.03] vendor: buildkit v0.6.4-32-gdf89d4dc a4e96a486f swagger: fix MemTotal units in SystemInfo endpoint 9fe291827a Bump Golang 1.13.15 a15a770e1b update containerd to v1.3.7 9380ec7397 update containerd to v1.3.6 80cef48453 update containerd to v1.3.5 fc8f88dc14 update containerd to v1.3.4 89a4208757 update containerd binary to v1.3.3 490c45b756 Update containerd to v1.3.2 56d897347d Update containerd to v1.3.1 d4c63720e9 update containerd binary v1.3.0 ec14dc44d1 Fix log file rotation test. a958fc3e65 Fix flakey test for log file rotate. 89da709cb7 Check for context error that is wrapped in url.Error 83baeafc3c oci: correctly use user.GetExecUser interface dae08c333e vendor: vishvananda/netns db3c7e526aae966c4ccfa6c8189b693d6ac5d202 93cb737687 [19.03] vendor: vishvananda/netns 0a2b9b5464df8343199164a0321edf3313202f7e and the following libnetwork commits: 90990763 service_linux: Fix null dereference in findLBEndpointSandbox 8565f0b1 log error instead if disabling IPv6 router advertisement failed and finally, the following cli commits: 01fc5a1ec3 Replace deprecated instruction 3b3e295c4b docs: update 20.03 -> 20.10 in deprecated.md d1b44aa298 docs: fix broken links in build reference 20bc15f618 docs/deprecated: remove minor versions 3172219932 docs: deprecate CLI options for experimental CLI features f132c8ad4a docs: add /go/experimental/ vanity URL df5ca0c950 docs: fix generated YAML due to trailing whitespace 5057d34272 docs: update URL for security landing page 278f30b82b Add test-case for env with, and without = f526bcdb53 builder: add note about alternative syntax 10973d6ddf builder: rephrase ENV section, remove examples for ENV key value without '=' 8c8fb03f15 docs: fix "docker logs" example missing container name c9a03ab5f4 Bash-completion: add CAP_AUDIT_READ ffa0e1d36e docs: document CAP_AUDIT_READ 3d74f7ab48 docs: document optional "CAP_" prefix for capabilities 0a207d5095 docs: sort list of capabilities alphabetically 75411a2233 Complete capabilites with and without "CAP_" prefix. 896eb7123a [19.03] vendor: stop using docker/engine fork for vendoring aebe8b0660 [19.03] vendor: buildkit v0.6.4-32-gdf89d4dc d6b05747dd [19.03] vendor: tonistiigi/fsutil v0.0.0-20191018213012-0f039a052ca1 9a65c1c861 docs/build: add note about git subdirectories with BuildKit a6c15a5e60 Replace vbom.ml/util with fvbommel/sortorder 36cdb166dc Bump Golang 1.13.15 5c5486d910 Replaces ADD with COPY in the COPY section 9152bf265e docs: remove docs for —-from=index e5e227672b Bump Golang 1.13.14 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-ce: update to v19.03.14Bruce Ashfield2020-12-071-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Incorporating the following docker-ce commits: 6cfdb61f0a Bump VERSION to 19.03.14 d62f3a4335 update containerd binary to v1.3.9 (address CVE-2020-15257) 223df488a1 update containerd binary to v1.3.8 f1d658df7c Bump libnetwork b42dd308b7 bump up rootlesskit to v0.11.0 ddd056dcd3 docs: fix builder-version swagger 406cc5ef47 Replace deprecated instruction a48b2a414f dockerd-rootless.sh: support containerd v1.4 shim socket path convention de76075442 docs: update 20.03 -> 20.10 in deprecated.md d8fa7ac2c1 Also trim "~..." from AppArmor versions 0a1553c648 pkg/aaparser: support parsing version like "3.0.0-beta1" caae6f925a static: add containerd-shim-runc-v2 94ab0479b0 To allow build for selective distros from top directory. e.g.- for rpm- RHEL_RELEASES= CENTOS_RELEASES= FEDORA_RELEASES=centos-8 make rpm for deb- RASPBIAN_VERSIONS= UBUNTU_VERSIONS= DEBIAN_VERSIONS=ubuntu-xenial make deb 5b7be532be docs: fix broken links in build reference 4afdfee131 Fix gcplogs memory/connection leak f9159f95b9 docs/deprecated: remove minor versions a7d8e5b15e docs: deprecate CLI options for experimental CLI features 265d2d874b docs: add /go/experimental/ vanity URL 45fe9c589c docs: fix generated YAML due to trailing whitespace d54dee5350 docs: update URL for security landing page 8b51565ec3 Add test-case for env with, and without = 4e0e5427b2 builder: add note about alternative syntax fb91a7f7e0 builder: rephrase ENV section, remove examples for ENV key value without '=' 4c5ada19a3 docs: fix "docker logs" example missing container name 5fd841f066 awslogs: Update aws-sdk-go to support IMDSv2 8ff047ef9d Bash-completion: add CAP_AUDIT_READ 12b5d3b4cb docs: document CAP_AUDIT_READ 532ea20102 docs: document optional "CAP_" prefix for capabilities a240747846 docs: sort list of capabilities alphabetically 19498650c3 Bump VERSION to 19.03.13 da428b1aec Complete capabilites with and without "CAP_" prefix. 4056693640 [19.03] vendor: stop using docker/engine fork for vendoring f6cc6fa133 [19.03] vendor: buildkit v0.6.4-32-gdf89d4dc d61bf277b8 [19.03] vendor: tonistiigi/fsutil v0.0.0-20191018213012-0f039a052ca1 4024535260 [19.03] vendor: buildkit v0.6.4-32-gdf89d4dc 9a44f43fb9 swagger: fix MemTotal units in SystemInfo endpoint a75083ebf0 docs/build: add note about git subdirectories with BuildKit 112d03e8ea plugins: update buildx to v0.4.2 ef44b94189 buildx: use v0.4.1 8a18415110 Bump buildx to master to check if it builds on the CI 0100e1c0be Replace vbom.ml/util with fvbommel/sortorder 53c69c574e Bump Golang 1.13.15 87867aff90 Bump Golang 1.13.15 76060cc4a0 Bump Golang 1.13.15 8a905386a1 update containerd to v1.3.7 0ffc8f1e55 update containerd to v1.3.6 aff3f55db8 update containerd to v1.3.5 61f6fac7a1 update containerd to v1.3.4 c938231789 update containerd binary to v1.3.3 ba94dd5a0d Update containerd to v1.3.2 13106ca34e Update containerd to v1.3.1 c5ad02b467 update containerd binary v1.3.0 a0edb6a8cb Fix log file rotation test. b17b2f05b6 Fix flakey test for log file rotate. efe3cf2163 Replaces ADD with COPY in the COPY section 5a861b676c Check for context error that is wrapped in url.Error a438db9875 docs: remove docs for —-from=index 475484e351 Bump VERSION to 19.03.13-beta2 3f7bf34392 oci: correctly use user.GetExecUser interface And the following libnetwork commits: 90990763 service_linux: Fix null dereference in findLBEndpointSandbox 8565f0b1 log error instead if disabling IPv6 router advertisement failed Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: bump to v1.4.3Bruce Ashfield2020-12-071-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This version bump incorporates the following fixes: 727e1728d Prepare 1.4.3 release notes ae3a64aa1 containerd-shim: use path-based unix socket 428f10fd2 Use path based unix socket for shims f2e4291b6 Prepare 1.4.2 release 76f3d1955 Update mailmap for 1.4.2 release ca9950755 Update cri version to pickup unknown state fix 0b97c6204 Update cri plugin c0f1add3c Fix Windows service panic file to not be read-only fbe18caa1 Update btrfs vendor for chkptr fix for Go >= 1.14 cbbf257ab Add Go test runs to GitHub Actions CI 19776b75b Adjust overlay tests to expect "index=off" 7eb852214 Allow oom adj test to run in environments with a score 036ede698 Import crypto for all snapshotters during testsuite 5618423a0 Add comments clarifying copyWithBuffer implementation a2ebee357 replicate io.Copy optimizations 9b2156aa8 Improve image pull performance from http 1.1 container registries 56291a221 bug fix:#3448 16e51fc31 Fix integer overflow on windows 6ebd9a94a Update other actions for env/path CVE fix 0a3488c71 Fix GH Actions CI deprecations cc3be9ae3 Bump Golang 1.15.5 ebffce3ad seccomp: add pidfd_getfd syscall (gated by CAP_SYS_PTRACE) 229f5ea4e seccomp: add pidfd_open and pidfd_send_signal e45f41e3a update to golang 1.15.2 695516287 Remove setuid gosu in favor of "sudo -E PATH=$PATH ..." 77931f801 ci: run critest target for all runtimes c745d237e Revendor CRI to get disabled annotation config default 88e7f23bc Read trailing data from tar reader 856a12fca Update github.com/Microsoft/hcsshim to v0.8.10 cc6f72a00 Check if a process exists before returning it 9a44af11d Windows CNI install script using lowercase "destdir" Runtime testing completed on arm64 and x86-64, as well as with orchestration engines. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k8s: update to 1.20 release candidateBruce Ashfield2020-12-032-16/+16
| | | | | | | | | | As part of this update: - we refresh our CC patch to apply cleanly - adjust the host side GO_LDFLAGS to drop linker flags that cgo doesn't like when building generated_files. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python3-docker-compose: upgrade 1.26.0 to 1.27.4Ricardo Salveti2020-11-032-16/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Release notes for 1.27.4: - Bugs - Remove path checks for bind mounts - Fix port rendering to output long form syntax for non-v1 - Add protocol to the docker socket address Release notes for 1.27.3: - Bugs - Merged max_replicas_per_node on docker-compose config. - Fixed depends_on serialization on docker-compose config. - Fixed scaling when some containers are not running on docker-compose up. - Enabled relative paths for driver_opts.device for local driver. - Allowed strings for cpus fields. Release notes for 1.27.2: - Bugs - Fix bug on docker-compose run container attach Release notes for 1.27.1: - Bugs - Fix compose run when service.scale is specified - Allow driver property for external networks as temporary workaround for swarm network propagation issue - Pin new internal schema version to 3.9 as the default - Preserve the version when configured in the compose file Release notes for 1.27.0: - Features - Merge 2.x and 3.x compose formats and align with COMPOSE_SPEC schema - Implement service mode for ipc - Pass COMPOSE_PROJECT_NAME environment variable in container mode - Make run behave in the same way as up - Use docker build on docker-compose run when COMPOSE_DOCKER_CLI_BUILD environment variable is set - Use docker-py default API version for engine queries (auto) - Parse network_mode on build - Bugs - Ignore build context path validation when building is not required - Fix float to bytes conversion via docker-py bump to 4.3.1 - Fix scale bug when deploy section is set - Fix docker-py bump in setup.py - Fix experimental build failure detection - Fix context propagation to docker cli - Miscellaneous - Drop support for Python 2.7 - Add script for docs syncronization - Bump docker-py to 4.3.1 - Bump tox to 3.19.0 - Bump virtualenv to 20.0.30 Release notes for 1.26.2: - Bugs - Enforce docker-py 4.2.2 as minimum version when installing with pip Release notes for 1.26.1: - Features - Bump docker-py from 4.2.1 to 4.2.2 - Bugs - Enforce docker-py 4.2.1 as minimum version when installing with pip - Fix context load for non-docker endpoints Signed-off-by: Ricardo Salveti <ricardo@foundries.io> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: provide 'ctr' along with 'containerd-ctr'Bruce Ashfield2020-10-271-0/+2
| | | | | | | | Historically we copied ctr into the install as containerd-ctr, but many different guides expect 'ctr' to be present. So we make the copy and then create a symlink to make both variants available. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kubernetes: Fix race issue for installing go2makeRobert Yang2020-10-152-0/+49
| | | | | | | | | | | | | | | | | The src/import/build/root/Makefile.generated_files are called several times during the build, so the following target which installs go2make will also run several times: $(META_DIR)/$(GO_PKGDEPS_FILE): FORCE It runs automatically when the Makefile is called because of: sinclude $(META_DIR)/$(GO_PKGDEPS_FILE) So there is a race issue of go2make when parallel build: hack/run-in-gopath.sh: line 34: build/tmp-glibc/work/corei7-64-wrs-linux/kubernetes/1.18.8-r0/git/src/import/_output/local/go/bin/go2make: No suc h file or directory Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: fix x86-64 buildBruce Ashfield2020-10-152-4/+4
| | | | | | | | | | | | | | | | | | | | Since our oe-core go infrastructure insists on both -pie and static builds (for the most part), and that is not recommended by many packages, we end up with errors like: containerd-opencontainers/v1.4.1+gitAUTOINC+e44e8ebeaa-r0/git/src/import/cmd/containerd-shim cannot find package runtime/cgo (using -importcfg) containerd-opencontainers/v1.4.1+gitAUTOINC+e44e8ebeaa-r0/recipe-sysroot-native/usr/lib/x86_64-overc-linux/go/pkg/tool/linux_amd64/link: cannot open file : open : no such file or directory In a similar manner to: https://www.yoctoproject.org/pipermail/meta-virtualization/2019-March/004084.html We introduce '-a -pkgdir dontusecurrentpkgs' to mask/fix the problem, and continue to work towards non-static builds. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: package runc shimsBruce Ashfield2020-10-141-0/+2
| | | | | | | | With the newer containerd, we need the runc shims in order to properly start a container. So we add the v1 and v2 variants to our install and packaging. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: depreciate containerd-dockerBruce Ashfield2020-10-141-0/+8
| | | | | | | | | | The containerd-docker fork has been abandoned for a while now. We take the first step in removing it, but making it generate a warning if someone attempts to use it. Next release, we'll consolodate the .inc and remove the recipe. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: upgrade to 1.4.xBruce Ashfield2020-10-144-39/+58
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updating containerd to the 1.4.x release series, which contains the following changes: 97d690d20 Prepare v1.4.1 release 42f387186 Always consume shim logs f247618a3 Report correct stats for windows containers cc5d1518f Update go list to respect build tags 086e859d2 BUILDING.md: fix description about static builds 16712ae49 bump cni version to v0.8.0 1575c88cc seccomp: add `faccessat2` syscall. 8bd2becea seccomp: add `openat2` syscall. 4e3397e05 shimv1: downgrade poroccess missing log to debug d118c90d3 Ignore SIGURG signals in signal forwarder 3ee6189fe Exit signal forward if process not found a1289d6b8 tasks: Monitor v2 tasks in initFunc as well 1f823f76d seccomp: allow io-uring related system calls 3d28944be seccomp: allow clock_settime when CAP_SYS_TIME is added e5cc7d527 seccomp: allow quotactl with CAP_SYS_ADMIN 20273a803 seccomp: allow sync_file_range2 on supported architectures. 357d10021 seccomp: allow personality with UNAME26 bit set 0c9de6629 seccomp: allow syscall membarrier caa461167 seccomp: allow adjtimex get time operation 2b80b7dc4 seccomp: allow add preadv2 and pwritev2 syscalls e71eccbca seccomp: move the syslog syscall to be gated by CAP_SYS_ADMIN or CAP_SYSLOG feff914af runtime: ignore ErrNotExist when remove rootfs 23e0ea27b snapshots/devmapper: fix rollback d68ddb0c0 Prepare v1.4.0 6be2eccd7 Update releases page for v1.4.0 d469bffcd CI: disable crun on Vagrant to decrease flakiness 77a33e3db systemd: add license header to systemd unit 8d39722fe Vagrantfile: increase memory 41469ed72 Update version for 1.4.0-rc.1 60fa35f11 Fix DCO commit limit d2472ecc5 Add CRI release build 1c7312e5d Update containerd systemd unit file ccda53760 Create etcd user in cloud init. e973719cc use containerd/project header test cb7ffd4b0 Fix indent in cni.template. 3e03ba7aa Update deployment and integration test 9c5451792 Add TaskMax=infinity 523b0b3c6 Remove `noSnat` 231d291b2 Use v2 config. 1e1688d21 Use per-pod shim. 87bd84a7b Add DefaultRuntimeName option. cfab98a5f Use ctr images import. 5e3ac16cc Add `cri` as required plugin. 5b9d8476e Use runc.v1 for now for debugging. e6e272e74 Enable runc.v2 as the default runtime in test. d19aa0fd2 Use local env to avoid writing to passed-in readonly env. ee6d69bbc Set default "" to extra runtime handler. 474c79bd5 Expose vars to configure an additional runtime handler ce12477f4 Support docker 18.09 in the test script. 146712101 Remove the unused `health-monitor.sh`. 201ad4d3c Support netd in GCE bootstrap. 5ce705750 Serve streaming on localhost by default to match k8s 1.11 default. b553fdaf3 Remove crictl on GCE for all cases. d8ce08fd9 Set stream server to serve on localhost on GCE. 1629bab7f Make max container log line size configurable through cloud init. 042378dcf Disable TLS streaming to work with new kubelet streaming proxy. 37f2ecad9 Update cni.template b58b6fef8 Disable restart plugin on GCE. f938a166c Fix kube-container-runtime-monitor. 91f8e61bd Use crictl installed in kube-up.sh 5161f663e Add `unix://` prefix for socket addresses used by CRI remote client. 1b995fcaf Add KUBE_CONTAINER_RUNTIME_NAME to fix fluentd support. 48457a254 Try using preloaded containerd if no version is specified. c67a38b0b Add log level support. 4453aac00 Improve gce bootstrapping in various ways. 1bd3cdc57 Add cni config template support. d520fac50 Enable TLS streaming in all the setup. cdb4aec93 Use systemd service cgroup and oom score adj. af8bd8068 Fix for kube-up.sh and update several documments. 005da4a9b Replace `ctrcri` with `ctr cri`. 0e2bd216c Update GCE cluster bootstrapping and e2e test 59e65e1f3 Enable container log rotation. 85b4e69c9 Do not block on stream server close. 2ea6584ca Add initial wait for health-monitor and use pkill -x. 56b7ef2c4 The ENV is finalized as KUBE_KUBELET_EXTRA_ARGS. 24a3a0a06 change crictl sandboxes to pods; other references to sandboxes 8bc30e7a2 Update ocicni to main stream. a01071558 Add a separate CLI for cri-containerd `ctrcri`. a843a3064 Use registry-1.docker.io as backup ec649079a Put version into metadata so that version won't be changed across restart. 7cbc1c8dc Set registry mirror. 9f0816ac4 Configure container runtime cgroups for cgroup. be72f47ec Add runtime cgroup and fix a cli panic. 680e21c43 Update all glog flags to `log-level`. d50b9dd64 Update containerd to 6c7abf7c76c1973d4fb4b0bad51691de84869a51. 869ea6b0c Add document for kube-up.sh 30cbfb62e Add OS and arch in release tarball. 0512d1e0b Add `cluster` directory and health-monitor.sh. a1736f98a vendor: containerd/cri 4e6644c8cf7fb825f62e0007421b7d83dfeab5a1 15fa7f378 vendor: update kubernetes v1.19.0-rc.4 4a0ac319c vendor: golang.org/x/sys v0.0.0-20200622214017-ed371f2e16b4 f80b4dc58 vendor: golang.org/x/net v0.0.0-20200707034311-ab3426394381 5a9a6a145 vendor: golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9 aa40ebb41 vendor: json-iterator/go v1.1.10 b4376e986 Update Vagrantfile for testing SELinux 55c9eade3 Bump Golang 1.13.15 e3e2c3946 update docs/rootless.md 843360298 update runc to v1.0.0-rc92 e20a5079e Add --cpu-quota, --cpu-period flag to ctr 3cc2be2a8 Update cri-tools to v1.18.0-100-g2bf7674 for Go 1.15 compatibility 628855923 Prepare 1.4.0-rc.0 release 74e9aa7ab snapshots/devmapper: don't hardcord the platform strings adeba792f Add namespace query parameter for registry proxying 5a190c707 Remove seccomp/Linux deps steps in GH Actions 6988b4d64 remove `seccomp` buildtag 362b7167a vendor: update cri (no more libseccomp cgo dependency) 03b5a053e remotes: mark GetTokenScopes public b43a01a22 Change nodeset to `ubuntu-xenial-arm64-openlab` 04b98bb0e Deprecate legacy shims b87023185 vendor runc library to v1.0.0-rc91-48-g67169a9d 02afa9425 Add --cpus flag to ctr aa56cfc0a Import Windows manifest into test build, rather than copying by script 5b1627410 vendor: update containerd/continuity efbc4488d8fe1bdc16bde3b2d2990d9b3a899165 1ec1e9eab Add Windows 10/Windows Server 2004 for integration tests faa4ff56e Usefully fail tests with unknown or bad Windows Build version 3795dd41a Always report server log from verbose integration test runs 4318f93f9 Add Spec() method to task 3611efdce update cri to 8448b92d237e877bed1e4aa7a0baf0dee234 1b320bcc2 update for cni config c2081369c Add doc about remote snapshotter 403dc83a2 mount: retry executing the helper binary on ECHILD 06fb93e0f Reject host-mode networking on Windows ca15cb0d8 Fix incorrect (cut-and-paste) method comment c8b14ae4c Set content labels based on content type d7b9cb001 shim: move event context timeout to publsher b97c660e1 cgroup2 CI: add RUNC_FLAVOR=runc 1a7bbd1f7 vendor: update containerd/cri 96099550b parseIDMapping: accept 32-bit IDs 089672fff Bump Golang 1.13.14 c383436af snapshots/devmapper: suspend a device to avoid data corruption 71f11db8a Annotate bare ErrNotImplemented returns 061d338ec CI: run CRI tests on Fedora 32 decbb0499 RELEASES.md: fix a dead link b2ee43206 CI: add back shim v1 test c4418bb3a CI: remove an unreferenced variable 212c29833 Updates to go-systemd and selinux b47c7ec27 Update to later version of critools with timing fix. 7af3d7e17 Don't clash with GH Actions runner's containerd c520f819a Bump Go 1.13.13 7119a2a15 platforms: don’t log arm variant error on darwin fc0448518 Update version to 1.4.0-beta.2 cc493eba3 vendor: containerd/cgroups 318312a373405e5e91134d8063d04d59768a1bff 7855b0a78 Make title similar with other CI workflow jobs 852587cd1 [events/exchange_test] Fix deadlock in TestExchangeFilters d47c0392d Updating build doc to require Go 1.13 09f453394 CI: {v1, v2} -> io.containerd.runc.{v1,v2} d7e59b141 enable removecontainer to forcibly remove containers 963625d7b Update runc to v1.0.0-rc91 c041970e9 update crun to v0.14 a6dd1f27d update urfave/cli v1.22.1, go-md2man v2.0.0, blackfriday v2.0.1 68b736ddf cio: should not open fifo for stderr if terminal 57a9f0b50 Minor actions fixes/updates 148cc8f71 [events] Fix deadlock in TestExchangeBasic aa191deff Change log for unknown mt to debug 45c28f56b Add ability to use remapper labels versus remapping snapshot helper c76bf5504 Make unique snapshotter opt for label-assisted remapping 331793118 allow user namespace remapping using snapshotters e977564a8 seccomp: allow 'rseq' syscall in default seccomp profile e7f069e2c describe content flow and dependencies b96f5f4b5 Fix deprecation warnings in CRI tests due to missing unix:// scheme fd99b6566 decrease log level of cgroup2 ToggleController error when running in UserNS 2b0a994cc explicitly fail apparmor when !linux bebfbab03 vendor: update bbolt to v1.3.5 1a83f9a63 Bump Golang 1.13.12 03ab1b2ca Add config for allowing GC to clean unpacked layers up ee734e867 Add test case with backticks ea0687769 vendor: golang.org/x/text v0.3.3 f1a469a03 shim v2 runc: propagate options.Root to Cleanup 8897e1520 Add more test cases with single quotes cb91b1724 Add testcase containing mountpoint with escaped backslash 87f9fdb06 Cope with double quotes in Linux Mountinfo 4c49ff88c integration: assume TEST_RUNTIME to be io.containerd.runc.v2 by default 785f4c5cd Bump CRI for 1.4x release 730b7a932 Change the type of PdeathSignal d656fa38c restart plugin: support binary log uri 0f831093c Update usage of whitelist in project d36810d66 overlay: use index=off to fix EBUSY on mount 7213cd89d Process I/O: Fix goroutine leak ae08491bf waitForPid: fix goroutine leak 8fcd5a1f2 Streamline hcs shim release flow ef0cf1264 Match version used in CRI project 2be80f999 Add windows hcsshim to release pipeline 3e95727f3 Make killing shims more resilient e64b14820 Revendor CRI to 62c91260d2f43b57fff408a9263a800b7a06a647 3dd8242a6 Add host specific headers 2f601013e cgroup2: implement `containerd.events.TaskOOM` event 62fd1750e Revendor CRI to 8898550e348932e406049e937d98fb7564ac4e7a 2bc4e90f6 Don't inadvertently clip release notes 636c533d9 Add ctr subcommand to print default OCI spec 230cf6ded Add unit test for func in remotes/docker/handler.go bb2b2825b Add release GH Action triggered by signed tag 8f1ddb142 Update release for 1.4.0-beta.1 c376f4f76 Move Windows testing to GH Actions 322628347 Fix client tests to work on Windows. b8ccdcb07 Add `ctr` flags for configuring default TLS credentials. c5273930b Update CRI to 52c2c6b5df15790b671ebd6cbbc6039a4d30 af131d725 cgroup2 CI e34bf08e5 riscv64 arch does not support -buildmode=pie 0c9b05fa6 Fix image usage calculation error 84619ee99 Fix configurations with no server provided 06b0cd45b Fix nil pointer errors 03755821d seccomp: remove the unused query_module(2) 5765991f2 seccomp: Whitelist `clock_adjtime` db74d3115 unpacker: Fix data race and possible data corruption 232518252 docker: fix data race on err d07a71b97 Bump Golang 1.13.11 0207b7ff0 Enable running CodeQL on PRs that modify Action 1a06884f1 Add CodeQL Analysis workflow 563964e9d Trigger nightly builds on pull reuqest events 77ab0104e Add release notes for 1.4 beta 6eeed18cb vendor: opencontainers/go-digest v1.0.0 7cdacdda8 Set codecov to not comment on PRs 3e7bbb8a4 vendor: update containerd/cri, remove "docker/distribution" dependency 9898dc2a6 Code about `task` in "README.md" is out of date f09e99909 vendor: containerd/go-runc 7016d3ce2328dd2cb1192b2076ebd565c4e8df0c d9d1d5b62 vendor: containerd/fifo f15a3290365b9d2627d189e619ab4008e0069caf c5078a5b7 vendor: containerd/continuity d3ef23f19fbb106bb73ffde425d07a9187e30745 b437938d2 Transfer error to ErrNotFound when kill a not exist container, also add test case. 2c77dc63a vendor: update containerd/cri to current master a4f8be1d4 vendor: kubernetes v1.18.2 0d198fd09 vendor: roll docker/distribution back to latest (v2.7.1) release 1b9640496 ConfigureHosts: remove deprecated DualStack option e9e765d6e Use tagged versions in vendor file bd3210d29 remove releases/*-beta.toml ed261720c Update ttrpc/typeurl to v1.0.1 dc92ad652 Replace errors.Cause() with errors.Is() f212e7d1f vendor: github.com/pkg/errors v0.9.1 63b7587cd snapshots/devmapper: fix race windown causing IO hangup 24b331ad1 omit sudo when EUID eqto 0 0088c2de8 sys: RunningInUserNS(): use sync.Once 76c62f272 sys: simplify RunningInUserNS to original implementation 6a9b94927 Remove remaining uses of libcontainer/system package 37c839e59 sys/proc: remove GetSystemCPUUsage as it is unused 1b66fecad Integrate sys.SetSubreaper, sys.GetSubreaper in sys/reaper package fffea312a move sys.Reap() into sys/reaper package 295e74008 sys: remove custom setChildSubreaper const ec12d3042 vendor: sirupsen/logrus v1.6.0 23aab35fd Remove libcontainer from containerd-shim ae7cdc814 vendor: update containerd/cri c1096864a Update to latest hcsshim - 0.8.9 ea182aec8 vendor: sirupsen/logrus v1.5.0 68f151593 vendor konsorten/go-windows-terminal-sequences v1.0.3 046a520c9 vendor: update containerd/cri dc7afe8fbe53db06c3f883f6f8c9895a9dfb2314 8e76d18ef remove if condition because it is handled by the sdNotify daemon func 1a10211e3 WithLease: always return context and done fn 98b30f469 Add commands to mount/unmount image from ref cd0e62f5c Allow more time for containerd to start for integration 9687ba631 test: TestRuntimeWithEmptyMaxEnvProcs should cleanup b566859ac .zuul: update go version to 1.13.10 32649fe30 Fix retrieval of golangci-lint specific version 126e497e6 vendor: update ttrpc with 6e416eafd26e6e738df716b21d421d5b59702bb4 0116352e1 runtime: ignore ttrpc.ErrClosed when delete task 917e7646a Add binary IO tests 9175401b2 Cleanup binary IO resources on error 0dc7c8595 Don't use timeout package when stopping shim logger 857408315 This config no longer exists, so remove from docs. e79d666cd vendor: update containerd/cri 61b7af7564602234662562a9d37e772f5a54facb 61597b431 Disable Travis CI on master 74ceb35f5 Small fixes to our Actions CI workflow 7a252f3ca Build runc with selinux support 041545cd6 Fix protobuild and CI check protos e3bc5c487 Use GH Actions CI status for badge 49200a1dd CRI plugin needs selinux tag as well d97cca47e RELEASES.md: update release1.2 status 4615111ba content/local: validate digest before calculating path a6828e8c3 CI: Some Go 1.13.10 updates that were missed 7da1e13b5 Bump Golang 1.13.10 35c14c6b5 sys/mount_linux: use pipe for communicating mount result f328f61b8 Update to selinux 1.5.1 f7c2bf544 Migrate functions to actions d7c2513ff Update integration test timeout 0caa23315 Rework shim logger shutdown process 067aba732 Add test for default setup for host configuration d9a1c3f9e bugfix: add default host config if not set 6d4429edd Setup dependencies between jobs e598e5e0c Add CRI tests 4175ebf23 Move integration tests to Github Actions 599547d9c Make binaries with Github Actions 3968fb0a4 Revert "vendor: update go.etcd.io/bbolt v1.3.4" 056d60224 vendor: update go-events to fix alignment for 32bit systems 4fb3410f6 vendor: cilium/ebbf 4032b1d8aae306b7bb94a2a11002932caf88c644 e822296fc vendor: runtime-spec v1.0.2 3261fb5c4 vendor: containerd/cgroups b4448137398923af7f4918b8b2ad8249172ca7a6 aa76d9537 Bump Golang 1.13.9 ad090e67e man: move ctr.1, containerd-config to section 8, and fix generation 356782cb4 Makefile: man page: rename containerd.1 to containerd.8 547301cb0 Update ctr resolver to use new config package 17b6050d2 Add Docker resolver configuration package dc131aa86 support loading certs from a directory c263c5b14 Add unit test for func in remotes/docker/handler.go c8d9c6f2a Add unit test for func in remotes/docker/handler.go fb9e3d9f2 vendor: update go.etcd.io/bbolt v1.3.4 e4cbbc78b Move checks to Github actions c1a218195 Add docs for build tags used by cri. d654dbafa Allow the id for cgroup metrics to be changed 78ab1d13d Correct logic of FIFO cleanup 92a36dc10 Add version numbers for newly tagged repos 0c78dacbc Move isFifo from process/io to sys/ and make public 9529c69b8 seccomp: add 64-bit time_t syscalls ebd745f91 ctr: do not assume runc options by default e2269f2ae archive: skip chmod IsNotExist error bd2265300 Add devmapper configuration examples 5ef66e48f ParseSignal: drop add'l check for numeric signals 649f2aac6 add -v to shim binaries 4ff9d6996 Increase golangci-lint timeout c00cf9a67 vendor: containerd/cri 92cb4ed9786a6cd271152ba1f862183d84701003 488d6194f fix dial error when clean up a dead shim 6e638ad27 Nit: fix use of bufio.Scanner.Err 4326fc624 Update Golangci-lint v1.23.8 4756258fa service_windows.go: remove unused "service" variable a9bd451ab Avoid duplicate imports of github.com/gogo/protobuf/types cad67b73f Update btrfs dependencies in docs for debian buster and ubuntu 19.10 * Fixes: #4090 632023698 Partial revert of sys: windows: use golang.org/x/sys/windows 0a7fd55f3 sys: deprecate EpollCreate1, EpollCtl, EpollWait 7b06192f6 sys: windows: use golang.org/x/sys/windows 1b7d1e81b vendor: golang.org/x/sys 5c8b2ff67527cb88b770f693cebf3799036d8bc0 ddae905b8 Support NOTIFY_SOCKET b78dfbdfb vendor: golang.org/x/sys 52ab431487773bc9dd1b0766228b1cf3944126bf ba6796abd vendor: update kubernetes v1.18.0-beta.1 f3d062423 vendor: sigs.k8s.io/yaml v1.2.0 04c805e63 vendor: github.com/google/gofuzz v1.1.0 12c7d6976 vendor: update containerd/cri 1a00c068864a59835ff442e0dddfa5a254be6bb3 5607b23b0 vendor.conf: move some imports to match position with containerd/cri e3ab8bda6 Avoid allocating slice for finding Process 1239f5403 export cgroups collectors 8c9e84174 RELEASES.md: update release status e0a8fe7cb vendor: bump golang.org/x/crypto bac4c82f6975 a687d3a36 Check error return from json.Unmarshal a3ca8a0df Add linux resource oci.SpecOpts 00e6be9f4 Add ctr c info --spec flag to output spec 3be12fe1c Do not loose snapshotter options 8cddb5f91 Pass snapshotter opts during Pull a3685262f snapshots/devmapper: do not stop snapshot GC when one snapshot removing fails b6bf7b97c devmapper: async remove device using Cleanup c7eec0c17 Fix file header in builtins_cri.go f2edc6f16 vendor: update gotest.tools v3.0.2 026e43806 Update to a released version of opencontainers/selinux (1.3.3) f8ade8deb Use named error return for service#StartShim 985b26f2f AppVeyor: disable download progress on choco installs 4105135e3 fix killall when use pidnamespace 4dd75be2b Unify dialer implementations 8e448bb27 vendor protobuf & grpc c134a9bef Use spec's mountLabel when mounting the rootfs 1d888ad6a cleanup the image synchronously for Usage case 18e581dd9 bugfix: cleanup dangling shim by brand new context fed8890e9 Enable CRI plugin for Windows builds as well 84464b801 v2: Cancel shim log ctx when ttrpc is closed f3652d068 vendor: golang.org/x/crypto 1d94cc7ab1c630336ab82ccb9c9cda72a875c382 773adf7ab Remove the executable bit for api/*.txt files 8e685f78c support building with BUILDTAGS="no_zfs no_aufs" 61596169b Update .mailmap f44d36099 Update .mailmap with changes from release-branches 499ab8a99 Update Golang 1.13.8 246a560ed script: use github.com/kubernetes-sigs/cri-tools directly 75d0c5f2e Fix incorrect comment from copy/paste of starting script 0dd6d24d2 Fix reference to LICENSE in README.md 89de113de Support 32-bit userspace on 64-bit ARM cores d8a0d29c2 Set octet-stream content-type on put request 348e683ce Fix zsh autocomplete script 263ab7014 vendor: bump gopkg.in/yaml.v2 v2.2.8 4c3827889 vendor: update containerd/cri c0294ebfe0b4342db85c0faf7727ceb8d8c3afce f0652e143 Make tests less flaky bb8af922b Add support for custom wcow and lcow sandbox scratch sizes 5e6d56ee2 Fix startup_delay within default configuration 833701165 ctr events: do not exit on an error 200241163 vendor: update golang.org/x/crypto 69ecbb4d6d5dab05e49161c6e77ea40a030884e1 32ba75f0f Update Golang 1.13.7 (CVE-2020-0601, CVE-2020-7919) e42110f32 Fix broken link to release-tool e2e07c9bc RELEASES.md update links to latest v1.2.11 and v1.3.2 0dc69620b update dependencies of containerd/cri 53ced5ffe update to latest containerd/cri (master) faf03c3d2 Pick up fix for CVE-2019-16884 in opencontainers/selinux 923c05bed Bump to opencontainers/runc new version - v1.0.0-rc10 e44d00865 Appveyor on_success field should be an array. a224937d2 Disable CGO for AppVeyor build steps 75af17946 Pull: create image record after blobs download 45a17cffb Vendor Microsoft/hcsshim with CGO removal 94964b36d Update Golang 1.13.6 22b73a9a7 vendor: bump containerd/btrfs to 153935315f4ab9be5bf03650a1341454b05efa5d 1189cc40f snapshots: fix flaky TestMetastore 35a8e6e58 sys: clean up process after test 3eb57b01b Added IO metrics e859b8a92 gc: increase sleep time in test 486d33631 test runtime v2 CPU settings 66508589d fix: eventfd leak for v2 runtime with v1 cgroups 9456040ac fix: eventfd leak 2f0db8e2a vendor: bump prometheus/client_golang v1.3.0 e10c91187 vendor: bump prometheus/client_golang v1.1.0 845b91d6b vendor: bump prometheus/client_golang v0.9.4 04506b87d vendor: bump docker/go-metrics v0.0.1: 99911ea66 vendor: bump prometheus/procfs v0.0.8 ed6ae8186 vendor: bump prometheus/common v0.7.0 c02dc24ec vendor: bump prometheus/client_model v0.1.0 77a3780c2 vendor: bump beorn7/perks v1.0.1 e1221e69a revendor containerd/cgroups 4d62d8795 bump microsoft/hcsshim to 0.8.7 95fbf3dc2 Fix unpacker to pass use apply options 3af3a7602 Fix filter errors 7b52bc506 Add unit test for func in filter.go cd1cad9d5 Support disk usage in windows-lcow snapshot f3090ce80 ci: set pipefail in zuul script 90cd777a6 platforms: fill default arm variant when parse platform specifier b553bc14a update docs/rootless.md 94d499843 Add Makefile variable to skip test packages 123af61c0 Add Cleanup to snapshot API 465c11dc8 Fix build with gccgo 52e477f94 Fix outdated comments b127b666a ctr: support $CONTAINERD_ADDRESS env var a4b423b19 overlay: test actual Opts 067a66b90 .travis.yml: run test with crun 1fb1d9321 v2: Fix missing ns when openShimLog on windows a18f77bea create local version of introspection service e739314ed mount: support FUSE helper 87e2a9595 Fix a typo in task.go d82fa4319 v2: Call shim.Delete at first when create is failed 493a36de9 Move label filter to snapshots package 06f6ea099 switch nighly builds to Go 1.13.5 c07e356d2 Update Golang 1.13.5 072dfbaf3 Support pushing a specific platform of a multi-architecture docker image to a registry 4ccb7aa22 Enable to propagate necessary information to snapshotter during unpack 496836c09 Update containerd/console vendor for fix a057bfbd7 Add more adopters to ADOPTERS.md facedf898 Remove an empty line 05d192929 Update checkImages to accept images.MediaTypeDockerSchema2Manifest c4ed3ff1e Replace ocispec.MediaTypeImageManifest with manifest.MediaType fbd46d709 runtime v2: Close platform in runc shim's Shutdown method. 02dcf384b Disable criu tests in Travis CI 62adc516d sys: mkdirAs: do chown if dir already exists 49e7039a8 cpu metrics consistency b9d9bdf1f make cpu metrics consistent with v2 docs 929ab521c fix system usage naming 659c971ca task metrics fix 23dbae3e7 Schema name fix 17d61d6b7 Units fix f287bc229 Schema names fix 6bfb24824 Fix prometheus metrics units b98cc7918 Added memory and cpu metrics for cgroupv2 75efbaf67 Attempt to make device mapper snapshotter tests less flaky 9eef69e3a Update after review comments 43fca9eba metrics: rename pids_v2 to pids a022c2181 Improve host fallback behaviour in docker remote fa62b6d23 Use logrus instead of printf for warning 08517e586 Allow empty scope authorization 499fbb033 Improve install scripts e0011978f start.go: Improve help text 9862cb8f8 support user remapping in ctr b02e20f12 cgroup2: enable controllers automatically 8f870c233 support cgroup2 caeacfce3 Correct grammar/typo in BUILDING.MD 51a6813c0 Split uid and gid user ns remapping in oci 30d92eff1 Defer layer download until unpack 9d5a095b0 Bump containerd console for os.File changes cd23ad244 Bump go-runc for buffer race fix 6a22a8fc9 Return the underlying images metadata 787be0efe Modify ctr run to search for read-only flag instead of readonly cfb4f734d Make sure for next release branch appveyor runs f92470b3e Fix dependency in BUILDING.md a6b6097c9 Fix container pid. 726dcaea5 update cpuinfo to make variant matches aarch64 and so on 6fa9a42ea vendor.conf: sort imports alphabetically a44189d2f vendor.conf: pin all dependencies by git-sha 55ea3dc9b vendor.conf: reformat to use columns 8da434668 Fix cleanup error on content client test 252d6550f Update cri and docker vendors 8a66dc6ed bump containerd/go-runc a2952bc25f5116103a8b78f3817f6df759aa7def 526c0db69 Support target snapshot references on prepare d1261b508 Update snapshot parent filter property to always exist 11ef041ff Update golang.org/x/sys to recent commit afd33bce8 test add tests to spec_opts 731e144a4 devmapper: update example base image size in README 19f7f3ccc test: Do SynchronousDelete cleanup before testing ImageIsUnpacked 0bb48aef0 Add `--log-file` flag for windows service. c56059162 Avoid deadlock in unpacker. 32ef2e630 Update README 82651d386 Cross build nightly builds (arm64, s390x, ppc64el) c479156b8 Add Github workflow for nightly builds 856ea3055 Add client unpack opts 3db1c3b8f Better support windows binaries. 843423ec3 snapshots: return error if readSnapshot fails 5bf2c6fc2 Fix panic on reference.Spec.Hostname() fda652be5 Update name for btrfs headers package a647407ca Fix dependency in BUILDING.md 608791bfc Update to Golang 1.13.4 cfb425fc1 Update .mailmap to reduce duplicates 15669a1d3 Update to Golang 1.12.13 8f74de9e9 ctr: allow specifying --runc-systemd-cgroup 7f5d90076 ctr: allow specifying --runc-binary 0f4374169 Add proto path /usr/include to Protobuild 4c99c8132 mips: -buildmode=pie is not supported for the mips arch fdf7a795b Clarify requirements for identifiers validation 76aa4e546 Use common identifiers package with less restrictive regex 84879b7c4 Add CGO makefile flag 7c016b655 add tests to server_test 8f9eff4fe Support disk usage in windows snapshot. d21f0f116 windows process shim installer a2688b972 bring back aufs and zfs 78be73662 Return not found error if no platform matched. d12b53a07 ppc64: -buildmode=pie is not supported 5e5584196 Makefile: Drop vndr whitelist 20e844a22 Use logrus trace support. 66aa1d3ef Add snapshot walk implementations e8c14c07c Added filters to snapshots API f593efdf0 RELEASES.md: 1.1 EOL aaccfcbe2 Fix `containerd config dump`. c224edc5c apply: use naive applier when running in UserNS 37b56cafc Add ctr metrics support for Windows/LCOW containers 178469e2a Update Microsoft/hcsshim vendor 3bf461ae8 Move autocomplete files to contrib/ 885232b72 bump google.golang.org/grpc v1.23.1 6356e55be Update Golang 1.12.12 (CVE-2019-17596) 074b453ac vendor: call vndr to remove useless pkgs and update vendor 7177af84a Allow 202 response code for commit d52cbc19b snapshots/native: ignore xattr errors during CopyDir f8cca26f3 Handle large output in v2 shim with TTY d5b7bf51a Move flag.Parse in tests to TestMain 54257bb5e Add local-fs.target to service file a6d3f4d30 Add device opts to ctr --privileged ffcb1cc9b Fix delete error code on the containerd daemon side. 036db34f3 build: Fix manpage generation 06be794cb Fix shim delete error code. 901bcb223 Add distribution subpkgs to core eaef634ef version: use runtime.Version() directly 25947db04 Add support for spec generation with host devices c0984941e adding go version to client description fe947e83d bump runc v1.0.0-rc9 772032598 Fix flaky btrfs test e4e7e554d Make client's WithLease more flexible. 18be6e371 Use cached state instead of `runc state`. f277665ed Bump runc to 1b8a1eeec3f337ab5d94f28980 e33f70385 Add more detail on releases 8ff5827e9 Update cri and cgroup packages b5fa55b0c ctr: Enable shell autocompletion 45ce73567 Limit travis release script to a single build 0cb7e4d5f Perfect documentations b172b7f9d Update release docs for 1.3.0 394db03f1 Fix all media types in Accept header to match RFC 90735a5d1 Update cri to 5d49e7e51b43e36a6b9c4386257c7d08c602237f. 1b1b862eb Get CRI dependency versions from containerd vendor.conf. 35d3bae1e AppVeyor: bump golang 1.12.10 (CVE-2019-16276) 95dbbdc8c Bump runc for CVE-2019-16884 62c2eea78 fix-up typo c5821baa4 Sync and stat btrfs loopback in tests 5ea936362 Perfect documentation a0ae24b98 Word spelling correction 85eac2550 Add release note for gc fix cbbb6a229 Update release note. fc31fa176 Update cri to 4ea022f82a55c449bf15bfc62ac8b0de968d81be. 0b224ac7d Update metadata interfaces for containers and leases 2a636f8c3 gen-manpages: Create man directory if it does not exist 0a2129222 Check for more kill error types dd5122809 Don't search for state.json path 6f31417d4 Generalize media types f3148d0b9 Add metrics type alias 57b51b948 Move golangci-lint deadline to config file e84a84a5a Add function to set custom auth scope in context bca374aa1 Get media type key from context 20d3fae3d Add Opt for modifying shm size 83a72858f Makefile: increase deadline to 2m for golangci-lint b4211d94e fail on file not found for shim reconnect on containerd restart fd6299be9 Fix density spec generation 3bc99755d Try set GOGC for golint 19ecd49ed implement ctr -connect-timeout 58892a3ba Skip darwin deploy 5bb0281d1 Fix missing vendor packages 5a656cacb Move manpage gen to separate binary 6ed809168 Publish cri release to gs://cri-containerd-release. f997c30ec Skip cleanup in travis deploy and avoid gcs race condition. 36c543a72 Remove extra CI testing on older Ubuntu 4e8a49948 Encrypt the secret file in containerd/containerd. f3a5b8c0a Add command to generate man pages d1a12823b Update gcs cri release. 424d33c5b Update go-runc to e029b79d8cda8374981c64eba71f28e 3db5a5ad2 Fix darwin build for cri release 1b4cec979 Update cri test to fix image reference test and fix gcs deploy. e3abd03ae Fix CRI release build. 61f113e60 Automate CRI tarball release. c1fc21e92 ctr: use NewDockerAuthorizer instead of deprecated NewAuthorizer fa11147e5 Add --env-file to ctr 5c576b026 Update and simplify mailmap c8cb864ce platforms: update known OS and arch values 3d1fdaccc config_test: sort result before check 8788af7f8 modify-document-duplicate-word d6a6e0b8b Support foreign and encrypted layers in the unpacker. a4482d9a6 Fix proxy plugin config validation 01f726589 Support v1 configurations for config dump cd79e0edf travis: fix Xenial tests not being run on master 555cb31fd Support configurable default platform in the client. c410f0eae Fix potential panic for task in unknown state. dd24d76a1 Fix potential containerd panic during graceful shutdown. fa546dc3e travis: don't run old Xenial LTS on pull requests 94e4b6879 travis.yml: add TRAVIS_DISTRO env-var for easier identification 214b8328d travis: add Bionic (Ubuntu 18.04 LTS) to test matrix b6c811b7a Update cri to 0165d516161e25e52b4ab52a404a00823f8f0ef6 db3a71173 Add 'containerd config dump' subcommand 779701b29 Add --seccomp flag to ctr 86f8be86e Add sigprocmask to default profile f4927a298 fix mis-spelling in nvidia.go bc692cc59 Use default UNIX env when image has no environment a292bf0f2 bump containerd/zfs 2ceb2dbb8154202ed1b8fd32e4ea25b491d7b251 97962976a Update ttrpc to 92c8520ef9f86600c650dd540266a00 92a5b08a6 fix-grammar-mistake 372472b5f archive: truncate modification time 2d8a65b1b Export shim publisher functions 6624a70d9 runtime/opts: move WithNamespaceCgroupDeletion from containerd to its own package 8266a3c5e fix-up spelling mistake 09b184c15 rootfs: use new ctx to cleanup instead of canceled one 2f54a7cb6 bump containerd/ttrpc 9abb3e268010ea188f4e4051f77eb5aca49315fb eb7a6bf02 bump google.golang.org/grpc v1.23.0 56bcc7767 Handle layers with the same digest in unpacker. 6f8fb9ee5 add WithImageName container opt a40c3830d Add option to pull all metadata 55f737bd3 bump hashicorp/golang-lru v0.5.3 ed1df65c2 bump hashicorp/go-multierror v1.0.0 cbb3a3790 bump hashicorp/errwrap v1.0.0 5cab0d3f3 update the max if cur will be greater than max for setting the limit 24b9e2c1a Merge configs section by section 8ebffecbc Use map for stream processors aae2d0d75 delete unnecessary checks and fix a test 9e183f5e5 add cli option to download all manifests ea6c749e3 Update config doc 19cd0a4f1 Append slices when importing config files b5f03eacd Pin to libseccomp 2.3.3 4d11bb36a devmapper: activate dm device if snap device marked as activated bca085753 Fix toml plugin decoding a1e3779ca Support config imports #3289 6e2228df7 Vendor github.com/imdario/mergo 6cf031e1e Pass ttrpc address to shim via env 89eae6429 Cleanup: fix some typos in code comment d7e1b2538 Allow explicit configuration of TTRPC address 03aafaa1c Update the integration test. 60f73b6cf Support simultaneous image unpack. 550518ab8 Read trailing data on apply 348e9f7c3 Update release notes and mailmap 8acf5a142 Update release note for CRI plugin for 1.3. 041e9debb Revendor github.com/Microsoft/hcsshim 21174cb49 Change bufferSize back to 32 1073868e5 runtime: only check killall for init process 64a0b2eb2 Revendor to remove unused dependencies 7379fa663 Remove the process default ENV 5023d96ad Remove Windows EventLog logging hook 276363938 Try to preserve exit event order 04caf1fc4 Ignore fifo error when using v2 multi-container shim 9cbd18ac7 Update cri to f1d492b0cdd14e76476ee4dd024696ce3634e501. bcc4a146e Support applying with parent directories 5a0ff41c8 Update continuity vendor 80d31d15b Update fifo for typed errors 6d0e355c6 cleanup code typos in leases.go bee4c1a8a Add retry and non-blocking send for exit events 0d27d8f4f Unifi reaper logic into package bb4c92c77 Fix shim hung 1c30d4d04 bugfix: override image.Env with process.Env, rather than be contrary 7682acb9e AppVeyor: update to go 1.12.9 81386df91 Add direct unpack support for overlay and aufs 1b389b362 AppVeyor: update to go 1.12.8 (CVE-2019-9512, CVE-2019-9514) 2e8ea9fd6 Allow timeouts to be configured in config a80db38c3 blkio.go: correct help message word spells. 3ef26cd87 bump x/sys to fix riscv64 epoll 2ff7183cc AppVeyor: update to go 1.12.7 c017e0efe Use a child context for errgroup in dispatch 75771c463 Add usage function to client b6fca48fe bump go.etcd.io/bbolt v1.3.3 0dadef19c Add docs for stream processors d085d9b46 Remove encryption code from containerd core 282b19efd remotes: remove useless line a3a30635e namespace: Copy ttrpc metadata before setting header 04b7f1b59 Remove ppc64le from travis 2fac3ee27 Add release notes for stream processor 116140977 Limit multiple platform manifests to one for size check fe3638e88 Add UnpackOpts to RemoteContext d8322e38c cast Rdev of Stat_t to uint64 for mips af7b7cdb0 Save default namespace in the client. 552a0b1be Handle stderr in stream processors 3fded74bc Add unpack opts 26b90619e Pass apply opts through rootfs/* code e1489f93c Use named pipes for windows processors 134d3c815 Add windows apply code f867401c6 Use fds and pass Payloads over diff api 366823727 Add server config for stream processors 97a98773c Add StreamProcessor for apply 0bc5df035 Clarify text on `ctr` support/inclusion 0a3769eec pusher.go: error message typo correction 635ccc067 Add cri release notes 4667ee47a Update Microsoft/go-winio v0.4.14 7792c23b1 Limit default matrix to runc v2 runtime 9f0bc2b53 Add UUID and server info to introspection 08483d18a v2: Close ttrpc connection when `Delete()` 4b5dfaee1 Completely remove Windows v2 in-tree shim 2398421d5 Fix travis matrix a5940da62 Remove `ctr cri load` and update cri-tools to v1.15.0 0a4bf1bd1 Mark faulty devices c99961c6c Update cri to b213648c5bd0a1d2ee42709c10dff63fbfee3ad7 4b4ce4a26 remotes: remove unnecessary string formatting d1b9ee543 travis: Enable travis CI for ppc64le arch bb9968891 Fix containerd on windows. 3e52e2902 Fix bug in export named manifest option 594f42319 protobuf: Bump Protobuf version to 3.7.0 c965a6c4d Prevent push by tag for sub-manifests 5cf79913e gpg: Use a Pipe() rather than a file 6a2512879 gpg: Pass the passphrase to the gpg2 tool using a file 3741fd859 Remove deferred flag when removing devmapper device b16e7c5de Update pkg/ttrpcutil with improved pipe dial logic daf12cd19 Improve error return from AnonDialer on Windows 4d5a0e19e Mark faulty device in one transaction 878a3205c Better error recovery in devmapper 578216950 Add note about pb.txt files f68186e10 Improve custom cgroup test 8a6190856 Add 1.3 beta release note 612628c2f fix wrong spells in compression.go 98ead46d1 Call Update of snapshotter plugin f543f2fbc Call CloseIO when stdin closes in ctr eb4b3e877 Fast path getting pid from task 8cd480c23 Specify protocols in ctr encrypt recipients e3cc9c20c bug fix:#3448 c27e48d66 fix mis-spelling in client.go 22f44c44d Add garbage collection doc 02826345c Add option to compress blobs on import 9da7d3036 archive: return chtimes error with path information 3d1fa6969 Implemented constructors for both encryption and decryption 392668d00 ctr:Support deleting multiple tasks at a time 05a2b63e8 Create CryptoConfig constructors in place of dcparameters 1c7eab197 Allocate a conhost during Windows service startup 364de4c35 Wrap creation of CryptoConfig in constructors 51bc61533 Update releases doc for 1.1 release 101d4b78e Add timeout to task state calls e097ab8bb Disable windows integration tests f055bdb0a Remove windows v1 runtime d531e7849 Modified image_enc_test to use a different image from other tests 5e5ae23d8 test: Check manifest.Platform before dereferencing 1945e26ac Add concurrent execs in stress tests ffa86b25f Add new shims for checking binary sizes c118c45f8 Change image_enc_test so that it more reliably delete images c6d437fd7 Corrected lease implementation c00517a94 Made fixes and optimizations to encryption GC 725d3ad8c Add --device flag to ctr 518be1cb0 Fix bug in setting request body dd0a45dfe Add flat GC label for leases dca17853d Add WithLinuxDevices Opt 804ae89be errors: use errdefs errors in client and commands dde436e65 Crypto library movement and changes to content helper interfaces bf8804c74 Implemented image encryption/decryption libraries and ctr commands 30c344394 Add crypto dependencies/vendoring a1f3ebaec Update cgroups to c4b9ac5c7601384c965b9646fc51588 b72673fdc Makefile: allow custom base path to install fab016c7a runtime/v1/linux: ignore ErrCgroupDeleted in Task.Start ce0d2489a Fix regiression from #3403 with snapshot cmd 0b29c9c37 Update resolver to handle endpoint configuration 63ceaf877 Add testing log context f63eab32e Add testing log hook to context 61d930ad5 Move specific errors to their respective packages 82826df9b Small refactor due to CI linter changes ef7f46eb7 Fix linter errors 2b521e25a Switch to golangci-lint abc152d14 fix name in containers file 70b00a0fa fix variable name 4988424fc * fix: view snapshot is deleted before diff db95af43f centralize harded-code message d643f1dc8 images: only fetch the best matched manifest info 550a6f1d7 Fix integration tests 1918ee4d1 Respect default snapshotter label 47d2ac090 Improve default label handling 4e2fc81ed Add aliases to namespaces subcommand 2a92c2741 Bump travis to criu 3.12 5ed1a3ce0 Add RELEASE note about config versioning 6601b406b Refactor runtime code for code sharing 7d2117245 Fix metadata content store to call writer digest after commit af93e4009 ctr: Add images tag subcommand ec8d9d3d7 shimv2: remove the dead task from runtime task list d3e1a51f8 vendor: bump go-runc 46af8ccd2 Check exec log flags compatibility 9fda4a5fe Bumps the version of go-winio. 6b59b425e Support --log-uri for exec subcommand 844c58102 Add cgroup delete opt for ns deletion 3d3dbc8fb Handle RequestTimeout and TooManyRequests 7dfc605fc Set shim OOM scores to +1 containerd daemon score 719a2c594 Robust pid locking for shim processes 2d0379115 docs: remove shim_no_newns in ops.md 0886e4f1b No need to keep 2017 DockerCon doc 650a7e5c1 Add hashsum for release archives cb4a8f51a bump runc v1.0.0-rc8-32-gf4982d86 bb41ef87f bump libseccomp-golang v0.9.1 174c4907d Fix shim's file IO logging 1a8df3f23 Reserve exec id to prevent race 245052243 Add timeout for I/O waitgroups 12a14c442 fix: polish log to make more clear ec78305c4 Close the inherited socket fd fbf96d302 Fix path in LogFile creator 63a8dee60 Switch to GitHub's new issue templates. 341c7c144 Update dependency containerd/cgroups 5e0d79380 Fix bugs in BinaryIO creator 75f183887 Allow opts to flow to the backend snapshotter during snapshot creation. 95f9bbf18 Add timeout in load shim v2 62e9e1169 switch to a working link 41e1bb832 Fix snapshotter getter in client code 052551573 Ensure labels is not nil in differ 67cf9f7f0 AppVeyor: Bump golang 1.12.6 0b7abc02b ttrpc updates for interceptors, close, and metadata d15a06b19 docs: Fix typo to some markdown files in /docs. dd7c0aabc remotes: support cross-repo-push bca566736 Make newBinaryIO public 31afff294 Fix backwards compat with v2 containerd configs bb0087280 Add user agent header to all requests 9547d269a Add v2 server config support with plugin URIs 9e0cd529d fix shim std logs not close after shim exit fb6b0ae4c Update x/sys, x/net and bbolt modules to support Risc-V ed308ea1e Unmount rootfs with separate Remove() in bundle cf7fb14ef Update timestamp atomic write 4f6ba8286 Ensure close in content test faf925ba2 Handle EOF from ReadAt in content.ReadBlob fa6a9f063 Add ttrpc namespace support 42f24b57e Update ttrpc to a5bd8ce9e40bc7c065a11c6936f4d032ce 7531c66d5 Ensure that the rootfs dir is created in the bundle bf24fb0ca Close file r.log after used to release resources. 5b9a43d2e Fix seccomp contributed profile for clone syscall cee19d1e6 Change restart delay for Windows service to 15s 8a388d623 leases: support resource management ac4485c76 Add support to gRPC errdefs for context cancel/deadline exceeded bbe45e446 add Restart=always to unit file a274dbe82 Fix run with specified platform 48b81e872 Do not return error when rootfs already exists. e0c4fe411 Forcibly sync writes on lcow layer.vhd after write 5e2d7efd8 Use a single custom annotation for export 41b7b0e0d Ensure namespaced writer commit has correct namespace 7f79fbb24 Move ttrpc client to pkg/ttrpcutil 5b7a327c4 Improve atomic delete fe6a2b03e Add shim cgroup support for v2 runtimes 62609d66d Fix typo in description comment 90c6c1af4 Pass options on shim create for v2 690706286 ctr: make ctr shim command easy to use 7b06c9a1c Add TTRPC client 5e962dd8b Remove unused Resize method from initState 66036d920 v1: Respect the `shim_debug` flag when load tasks a6a888cb5 Bump ttrpc fbb80b951 containerd-shim: redirect output into stdout fifo 543d1e807 Add travis_wait to prevent vndr timing out 00bc2f5cf Update to Golang 1.12, and prepare for ppc64le 67b45aef4 Add WithoutRefreshed metadata ad25c1a9c Improve ARM platform matching bd27bef4a Move checkpoint and restore commands to new files cf6e00854 Fix fd leak of shim log 6f463d350 test/snapshots: umount before committing snapshot 388705317 snapshots/devmapper: deactivate thin device after committed bdd7dce31 Add OpenLab CI configuration 660554d67 Fix error handling for task deletion. 2ed8e60fa bump google.golang.org/grpc v1.20.1 d1c59513d bump google.golang.org/grpc v1.12.2 2f22d8e67 Fix broken link to containerd logo cb7c780af ctr images import: add --no-unpack option ee902afa5 Compute manifest metadata when not provided. 5c9811ded Cleanup dead v2 shim. cfc36388b Remove redundant error checks 38e369657 Use cancel on errors eded188f4 Fix misspells 969035bcb Stop logging error on v2 multi shim log failure c7f067f27 Update vendor/ with new required vndr go.mod files 8c5779c32 bump containerd/ttrpc 699c4e40d1e7416e08bf7019c7ce2e9beced4636 dff745680 Return NotFound error for kill and delete in deleted state. 5d17ed230 Update cri to 2fc62db8146ce66f27b37306ad5fda34207835f3. e5aab17a0 bump opencontainers/selinux v1.2.2 dd85aea62 bump runc v1.0.0-rc8 5b9bd993a differ: fix deadlock on commit error 48f46516a Support disabling default setup of shim logger. c79c7921c bump docker/go-units v0.4.0 dfa51c927 runtime-v1: kill shim in cleanupAfterDeadShim 0376dd460 Don't write dumped stacks to file for ETW capture state e6fc0ed22 Convert Windows CI to use Microsoft MCR image urls 06a3a480c bump containerd/console 0650fd9eeb50bab4fc99dceb9f2e14cf58f36e7f a333dbcfb Update x/crypto to 88737f569e3a9c7ab309cdc09a07fe7fc87233c3 0fd02564a bump gocapability 7718d060e Write stack dump to `os.TempDir()` as well a4942ca4f Fix error on pull hang in CI 6bcf463b0 Move to sha-specified test image for nanoserver cfb8b5573 .mailmap: update Akihiro Suda's email address be2cbd0b2 Access to client's GRPC connection object 78f3dc433 Allow dumping stacks via ETW capture state 05dd66b2e Update go-winio in vendor.conf c9059c767 bump mistifyio/go-zfs f784269be439d704d3dfa1906f45dd848fed2beb 63c7a879b Requeue events in the shim publisher fc167f957 Correct PusherFunc helper to match Pusher intf a7af3c13a Correct import path in services/server package 9cc58781f Check task list to avoid unnecessary cleanup. 97d247cd0 Rename `hrpc` to `tcpServer` 047348e19 Add dialer for events service ae87730ad Improve shim shutdown logic a12f836d5 Use $TEST_RUNTIME for cri test. 4b3b99ea1 Add support for required plugins. 4ba756edd Fix API forward events for shims 1a1f8f11a Set nofile to 1048576 b911ae342 Add tcp service for grpc listeners a6f587e4c Use ttrpc to publish runtime v2 events a8a805cad Add ttrpc server to containerd c93d64543 Add GetOOMScore function ae5ca8177 Refactor mount path check and add comments 7045801fd delete the ingest when any errors happen during resuming status dcf6023c4 Extend release timeline d5b770aa8 Introduce 'clean-test' target in Makefile 2583d9e42 update gogo/googleapis v1.2.0 a98df70da update containerd/btrfs af5082808c833de0e79c1e72eea9fea239364877 aa8dccd22 update containerd/aufs f894a800659b6e11c1a13084abd1712f346e349c ed61d7f68 bump containerd/zfs and dependencies d667628ca bump github.com/pkg/errors v0.8.1 68ef17835 bump github.com/BurntSushi/toml v0.3.1 1978c0b74 bump gotest.tools v2.3.0, google/go-cmp v0.2.0 2741dbe2c contrib: Dockerfile: bump go 1.12 a84f87d84 contrib: Dockerfile: add a base stage a07e12cde contrib: Dockerfile: reformat, and use --no-install-recommends ba9e1ea23 contrib: Dockerfile: use build-arg for go-version 4754d2aee Update image export to support Docker format 74eb0dc81 Return event publish errors. 10cf21dcf Export ExitStatus init func a73358749 Update cri to 6d353571e64417d80c9478ffaea793714dd539d0. de1da8be3 Update handling of registry errors 8d1ae237e Always add compressed blobs to Docker import manifest c0f0b2131 Apply PR feedback 2a5e4c4be Skip rootfs unmount when no mounts are provided abfc89ce0 Update CRI to master 4730088cb Update runc to resolve selinux issues 2d11f5e6d Regenerate protobufs 830b0294c Update protobuf v1.2.0 7c1365b46 bump sirupsen/logrus v1.4.1 01310eaeb do not use unkeyed fields in compose literals 90085a7ac Add empty file to prevent build from failing baf340343 Extend Applier's Apply() method with an optional options parameter 8784eb630 Move snapshotters benchmark to a separate package adc4fa217 Use pkg/errors for all errors c22effb16 fix parseInfoFile does not handle spaces in filenames 559dfa59a Add configurable plugin path d9526f5c4 Move CloudFormation template to contrib ae04c1660 runtime: guard Close() until both streams are complete e96ac2040 runtime: log IO error when copying output streams 515be73c8 Add snapshotters benchmark 872296642 fix shouldKillAllOnExit check for v2 fa5f744a7 fix shouldKillAllOnExit check f7f6dd7b4 test: add custom cgroup test 2b8df8309 bump containerd/cgroups 4994991857f9b0ae8dc439551e8bebdbb4bf66c1 bc6ac0878 update opencontainers/runc v1.0.0-rc7 808b22353 Fix race and panic. 87289a0c6 devmapper: implement Usage 010b4da36 devmapper: implement dmsetup status 871094016 Windows: Build shim binary from Microsoft/hcsshim e16e99593 Vendor Microsoft/hcsshim@8abdbb82 5d50b9c2b Extend adaptImage function with annotations case 388c8a176 Fastpath opt and ExecProcess loading a84966451 Windows:ProgramFiles to ProgramData 6034c1950 Windows:Create root/state with ACL 7361b1987 Update Windows lcow differ to set NT VIRTUAL MACHINE\Virtual Machines SID 4c9b5ef8e Update vendor github.com/Microsoft/go-winio d15832a4c Address review comments 8f8fd3c3a seccomp: whitelist statx syscall 908b77108 Add code to return message field of returned registry errors 9a8727cf0 Allow to import an image for the default platform only. 4506eb45b seccomp: whitelist io_pgetevents f3ff95ab7 decouple api.ContentServer implementation package from bbolt dependency 14a050688 ctr: fix image cmd ArgsUsage bdd84abf0 Add additional capability handling opts a631796fd horten the unix socket path for shim b858cfb41 Makefile: allow overriding package name 7ca2c3d68 contrib/nvidia: export helper binary path and list of Nvidia capabilities a7aeffc22 Update mailmap for cgroup authors e6ae9cc64 Shim pluggable logging 506b81548 remotes: add distribution labels to blob data b8d40b353 update runc to 2b18fe1d885ee5083ef9f0838fee39b62d653e30 09cf2a629 Extend metadata images test with fieldpaths for Annotations 5124f9ee5 Write the Annotations map into the bolt db 02cc1485d Prepare boltutil for reading and writing another map 1e893b19c devmapper: add no_devmapper build tag 79248fea2 Add test for ocispec.Descriptor Annotations 34f377295 Allow WithNewSnapshot and WithNewSnapshotView to take in snapshotter options. aaae81189 Update checkpoint opts with runtime handling 160737d2c Fix no pivot and keyring opts 0b711d616 Copy annotations around where necessary 4d2a26d75 BUILDING.md: update testing section 6424a3603 ctr/commands/images/push: don't show progress if it is debug mode 7cfb99ab9 Add content gc ref labels from containers, images, and snapshots f0d5dd3c8 Use unix.SignalNum in ParseSignal on unix platform 1745951ba Vendor golang.org/x/sys d455e41777fca6e8a5a79e34a14b8368bc11d9ba e13a4b67e Update the snapshotter docs to refer to the snapshots package for WithLabels. 277147135 Fix issue with NewFIFOSetInDir with Terminal true 828f6eb84 Fix a bug in shim log on Windows that can cause 100% CPU utilization c6703d4c7 Add missing annotations map to Descriptor for gRPC transfer d2bec5422 Bump cgroups to dbea6f2bd41658b84b00417ceefa416b97 208957ba3 devmapper: proper cleanup in pool device test 734989c2a Update README fb8048371 docs: Add NAME section in all manpages 95f0a4903 devmapper: rollback thin devices on error adf5c640f devmapper: don't create or reload thin-pool from snapshotter 7efda48c5 devmapper: more precise way of checking if device is activated 37cdedc61 devmapper: add linux tags, fix build 0c6d194cc devmapper: add README and minor fixes 2218275ec devmapper: register plugin cec72efc2 devmapper: add snapshotter 3a7588252 devmapper: add pool device manager 6e0ae68e1 devmapper: add snapshotter config fcd9dc274 devmapper: add pool metadata 809e5fd3b devmapper: add dmsetup fe05e4d1a devmapper: add losetup d83e4e9b3 Vendor Microsoft/go-winio@v0.4.12 e0d7ed12a Windows: Enable ETW logging cbc032ed3 Update go.etcd.io/bbolt to v1.3.2 5e8406984 Update travis to xenial worker 84a24711e Add runc.v2 multi-shim 6bcbf88f8 Move runc shim code into common package fd6ac5d02 Vendor sirupsen/logrus@1.3.0 b553a12be runtime: allow specifying supported platforms with config f6ac73d71 fixing typo and added a missing comment. 4b3e0a8aa metadata: merge snapshot labels with metadata's labels 88f19a90a Windows: Update stackdump event name 14f7e5272 Unpack should set 0755 when the parent directory doesn't exist. a6f43b549 Add website update to release process 17b2c8498 Update supported versions b87e9eef3 Add ExecID for StateResponse bfb266ab5 Fix some misspells in helpers_test.go dc09ed1e1 Add image handler wrapper a4f7b3758 Add support for TaskDelete event on exec in RuntimeV2 00895670e Stop sending stderr with TTY on Windows 6a21728fb Use defaults package for listing namespace labels 14eaad0cd Update runc to 6635b4f0c6af3810594d2770f662f34ddc15b40d (CVE-2019-5736) 98766e863 Vendor opencontainers/runtime-spec 29686dbc 225d9b120 Fix LCOW layer ordering 0190e5f39 Removes the oci.test.exe binary. 525802f9c Use distribution's reference.ParseDockerRef 3538174e6 Bump github.com/docker/distribution to 0d3efadf0154c2b8a4e7b6621fff9809655cc580 2dacef07c Add shim skeleton code 59ea134ce OCI Modifiers for Windows d25007e54 Add structure documentation for metadata 823b7a8a0 Cleanup releases directory 7bd8dcd0d Fix potential containerd panic. 41f540621 Add release documentation f014adfa1 readme: fix example for checkpoint dfcc5942f Fix deadlock in Windows runhcs shim exec da2ab865e Add documentation for using namespace labels for configuring defaults. 952d58297 Add a separate lock for pid. 9777d7689 Revert "use state machine management for exec.Pid()" 34323985a Use labels only when default namespace is provided and prefer given options. 59432aaec Take default runtime and snapshotter from namespace labels 6629f853a BUILDING: update BUILDING.md d7ed40307 Add image pull concurrency limit. 7f5d7ff6b Update snapshots docs with garbage collector label 34672d483 metadata/gc: remove the noop-loop for snapshot reference 6ed293ba9 Fix bug in shim path lookup d63099c4a Allow matching shim path side by side with containerd 764afa0d1 Include extension for shim binary format on Windows dfebb404c remove excessive []byte(s) conversion 85aa8ad36 Move task events to runc v2 shim 28f8a90bd Update cri plugin to 4dd6735020f5596dd41738f8c4f5cb07fa804c5e. bb32c0f61 Revendor github.com/Microsoft/hcsshim v0.8.4 f44469698 Return out of windows signal handler 26ab393e7 Use context.Background for `O_NONBLOCK` `OpenFifo`. 7db569771 unix.UtimesNanoAt now supported on Darwin 132ee9b82 fix: linter issue 6468619d7 Implement the Runtime v2 Shim async task model for runhcs b444d7d50 Handle additional cleanups from prior PR 4ef9bf5c8 Windows: Publish exit status correctly in TaskExit 90caf6f6a Windows:NewDirectIOFromFIFOSet 3aec9e7be bump up runc 0befa457d Update ttrpc to support context timeout. 946e40266 Update releases files c5a8c9fc1 Fix issue in runhcs shim CloseIO 31616e794 Fix runhcs shim bug in Create with "len(Rootfs) == 0" bcd4cc51c Fixes a bug in runhcs shim Exec.Pid bc76e01a8 Update runhcs options to include CRI Sandbox support a79879e9d Add security audit report to README dee0945e1 Fix spurious ttrpc client shutdown error log on success 64a004641 Update cri-tools to v1.13.0. b55c9c6c3 Update cri to 4b4b2abb2eb19ad6913a6c5d2a6869a0a43a3fc1. 17b77aeb0 Fix annotation typo errors 5137fc6f1 bugfix: support application/octet-stream during pull 568b5be93 runtime: add Add/Delete method in PlatformRuntime interface 7faaa64cf fix: miss remove temp file in createSnapshot 4247f2684 metadata: define content sharing policy 1be86af10 add test for WithImageConfigArgs 36e4dc603 Ensure bundle removal is atomic 723797d32 docs: remove website leftovers d4ecb00f6 checkpoint: return empty image if checkpointPath exist f2344db40 do not mutate defaults in replaceOrAppendEnvValues da9471fb1 fix oci.WithImageConfigArgs for windows 897afeaf3 Revert "Fix CI due to Golang 1.10.6 / 1.11.3 regressions (workaround)" 0ec6526fd Update the delete docs for Runtime V2 on Windows e20ba5fa5 test: add test for c/r without image 40267382c fix ctr image export not found error 8be05eb23 Fix freebsd build 7b1e6f323 fix: use func args instead of build new one 9baecf66b fix: fix defer in loop 903abf33c Fix annotation typo error 52de37170 Fix CI due to Golang 1.10.6 / 1.11.3 regressions (workaround) 2d96aad77 bugfix: unpack should always set the snapshot gc label a2a424197 Add timeout and cancel to shim fifo open 6f944e419 fix: SCHILY.xattrs should be SCHILY.xattr 6ccb0d062 fix: remove dead code 2db0c6c26 Explicitly stating utf-8 when fetching oauth token 603e97a9e ctr/content: make editor flag is required 7ac221e8d Adding ctr memory and cpu flags 822ae18b1 Update cgroups to 1152b960fcee041f50df15cdc67c29db 3ae8e8a30 Add shim config for shim binary options 66c20f2b7 Update runc to 96ec2177ae841256168fcf76954f7177af 79499980e Kill should still work in stopped state. 27ba2db10 Revendor github.com/Microsoft/hcsshim to v0.8.3 2d3a4f99e should no defer when detach 70084ea6c Add /proc/asound to masked paths 6daf8b778 Eliminate misuses of errors.Wrapf a404f27a0 Add more adopters 6593399e9 cr: support checkpoint/restore without image 996c60616 fix: fix error info start capitalized b4a642f6a Add dumpStacks support for containerd on Windows 40d898a82 Windows: Allow running as a service 97dd5df66 Update runc to v1.0.0-rc6 09bf314bf Cache shim v2 exec.LookPath results fd16bf6d4 runtimev2: add image-path and work-path for c/r 83ebcf999 runtimev1: add image-path and work-path for c/r f90e5d564 Move ctr run --isolation to Windows only bbc2a995f use state machine management for exec.Pid() 461222dba fix: should get runtime name from container info 2101b1362 add ctr delete --exec-id to debug DeleteProcess a2e8ab9ff remotes: avoid panic with default resolver conf 7d91d631e Lock `KillAll`. 9639db552 refactor: no need defer in closeAll e76a8879e fix pipe in broken may cause shim lock forever for runtime v1 b3438f7a6 fix pipe in broken may cause shim lock forever for runtime v2 956e49a36 Revert v2 dropped events 1d4105cac Use named pipes for shim logs 581a63ce4 Add build requirement doc on fedora/centos 01f5aa387 add flag -d for ctr t exec to run a service in container 51ad4d302 change args usage for ctr c create bd2a21985 fix container cmd args may parsed as ctr args 90880078b Adding a --load-kmods flag to the NVIDIA OCI hook e1a59ba0f Update runc to 10d38b660a77168360df3522881e2dc2be 8e25ca6bf Revendor github.com/sirupsen/logrus to v1.0.3 0e7a70dbf skip already exists content 6f2f4e434 checkpoint: add copts to checkpoint; save snapshotter to annotation 40caece8d update tests 4fdf720b8 move rw to opt; make snapshot opt; move to NewContainerOpts 147208061 add image name and runtime name media types; remove task operation on checkpoint ce0673fd7 Restore take image 0e4d9da75 remove task handling from Restore 2d3db08da refactor spec and snapshot restore into opts 45c700a95 refactor checkpoint and restore to client 555ea3fb4 Ignore modprobe failures in ExecStartPre (systemd unit) abd971cfb Revendor github.com/Microsoft/hcsshim 831a41b95 Fix process locking and state management c4feaa75c fix: fix failed to get container-shim relation with io.containerd.runc.v1 c524b9ce4 Partially revert the event discard change in #2748. 38d7d59e8 enhance: update v1/v2 runtime ce6d4c9a9 add docs/rootless.md dd0539b09 ctr: add --cgroup for oci.WithCgroup 18363d0c9 Add ADOPTERS.md file 354dab0ca Forward ctr.exe --debug as io.containerd.runhcs.v1 options a33ad4024 Implement io.containerd.runhcs.v1 shim log opts ec3dbd155 Add io.containerd.runhcs.v1 shim proto options 7d70d2b78 Fix Makefile to run protobuild on paths with spaces 83f4ab885 makefile: remove emoji on Linux 8329a491b Build Windows V1 and V2 runtimes always 124194b98 check task existence before new task a02f7cea8 bugfix: use skip-verify flag in ctr instead of insecure 2bb7da843 Fix mingw version back to working version with Golang 068880ff1 Add custom headers option to dockerResolver fa912a79b update link for slack invite 7c85d873a fix typo in ResolverOptions.Credentials documentation 232a06349 Increase reaper buffer size and non-blocking send 00ba92364 bugfix: CloseIO should return correct status code 1cc93460d Bump aufs for unsupported errors 1301813f7 Update ZFS for unsupported warnings 16aaf6c06 Change unsupported snapshot warnings to INFO 07237e34e Bump to Go 1.11.x c206da795 optimize shim lock in runtime v1 c5a0c7f49 Add build option "GODEBUG=1" Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: add more kernel-module RRECOMMENDSBruce Ashfield2020-10-081-1/+1
| | | | | | | The kernel RRECOMMENDS, wasn't complete and in some minimal systems we are missing modules to start dockerd. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: remove deprecated options in lxc*.serviceMingli Yu2020-10-013-0/+68
| | | | | | | | | | | Remove deprecated options in lxc*.service to silence below warning: # systemctl status lxc [snip] /usr/lib/systemd/system/lxc.service:17: Standard output type syslog is obsolete, automatically updating to journal. Please update your unit file, and consider removing the setting altogether. /usr/lib/systemd/system/lxc.service:18: Standard output type syslog is obsolete, automatically updating to journal. Please update your unit file, and consider removing the setting altogether. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* sloci-image: set CLEANBROKEN = 1Hongxu Jia2020-09-211-0/+2
| | | | | | | Workaround rebuild failure Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* criu: backport patch to fix build failure for gcc-10Chen Qi2020-09-022-0/+88
| | | | | | | Backport patch to fix build failure for gcc-10. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: update to 2.0.7Bruce Ashfield2020-09-011-2/+2
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: Disable warnings as errorsKhem Raj2020-08-271-3/+1
| | | | | | | | Instead of disabling particular warnings, its better to use configure switch, since some of these warnings could be compiler specific Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: update to v4.0.4Bruce Ashfield2020-08-183-6/+9
| | | | | | | While we are updating, we refresh one patch to remove fuzz, otherwise there are no significant changes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc: update to 1.0.0-rc92Bruce Ashfield2020-08-186-245/+39
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Refresh patches for new context, drop CVE patch that has been integrated into the main repository. The following changes are part of this refresh: 49a73463 Merge pull request #2547 from kolyshkin/moar-v2-tests 9ada2e6d Merge pull request #2539 from kolyshkin/ext-pidns-nits b70de388 Merge pull request #2540 from kolyshkin/unify-test-inval-cgroup 0509b5ba Merge pull request #2553 from AkihiroSuda/support-kernel59-caps 6dfbe9b8 support CAP_PERFMON, CAP_BPF, and CAP_CHECKPOINT_RESTORE 54c53b10 Merge pull request #2533 from XiaodongLoong/fix_cgMode_redundant a2d1f85b Merge pull request #2542 from AkihiroSuda/go1.15 4c71a68c upgrade Go to 1.15 dedadbf9 Merge pull request #2545 from kolyshkin/go-mod-vendor 809dc640 Merge pull request #2548 from kolyshkin/int-cr-fix 7f64fb47 use criu cgroup mode const from go-criu 5026bfab tests/int: fix error handling and logging 2de0b5aa libct/integration: enable some tests for cgroupv2 985bd24f Makefile: fix go vet/fmt a340fa9b Merge pull request #2543 from mrunalp/release_1.0.0-rc92 1ff1bf34 VERSION: back to development ff819c7e VERSION: release 1.0.0-rc92 f6688549 Merge pull request #2499 from kolyshkin/find-cgroup-mountpoint-fastpath 234d15ec Merge pull request #2520 from thaJeztah/bump_runtime_spec 78d02e85 Merge pull request #2534 from adrianreber/go-criu-4-1-0 637d54b7 cgroups/fs tests: unify TestInvalid*Cgroup* e54d1e47 libct: initialize inheritFD in place 8b973997 libct: criuNsToKey doesn't have to be a method 3de3112c Merge pull request #2525 from adrianreber/external-pidns 6f4616dd Pass location of CRIU binary to go-criu 267b7148 Upgrade go-criu to 4.1.0 d6f5641c Merge pull request #2507 from kolyshkin/alt-to-2497 46243fce Merge pull request #2500 from kolyshkin/fs-apply e0c0b0cf libct/cgroups/GetCgroupRoot: make it faster 901dccf0 vendor: update runtime-spec v1.0.3-0.20200728170252-4d89ac9fbff6 97b02cf9 Merge pull request #2531 from JFHwang/gomod_update 59352963 Update go.mod 67169a9d merge branch 'pr-2529' 95a59bf2 devices: correctly check device types 09e103b0 Tell CRIU to use an external pid namespace if necessary 610c5ad7 Factor out checkpointing with external namespace code d65df61d Merge pull request #2521 from zvier/master 92e2175d cleancode: clean code for utils_linux.go 86d9399c Merge pull request #2524 from adrianreber/fix-travis b7683d6b Fix .travis.yml warnings f8749ba0 merge branch 'pr-2509' f9850afa Merge pull request #2518 from XiaodongLoong/redundant_chroot_param af283b3f remove redundant the parameter of chroot function b7d8f3bf Merge pull request #2516 from ide-rea/fix-typo 47fbafb7 Merge pull request #2510 from kolyshkin/criu-el7 76b05e6d fix small typo cf1273ab Merge pull request #2498 from kolyshkin/v1-code-cleanups 545ebdd1 Merge pull request #2511 from kolyshkin/fedora-dnf-fix fbf047bf Merge pull request #2501 from XiaodongLoong/systemderror-fix f57bb2fe fix TestPidsSystemd and TestRunWithKernelMemorySystemd test error ce54a9d4 Merge pull request #2514 from rhatdan/windows 6d5125f8 tests/int/checkpoint: don't remove readonly flag 9806eb55 Merge pull request #2513 from lsm5/custom-PREFIX-in-Makefile d78ee471 Allow libcontainer/configs to be imported on Windows 5517d1d7 Merge pull request #2505 from XiaodongLoong/redundant-copy-src ffe9f0b0 Vagrantfile.centos7: do not ignore script failures bc1a9c11 allow customizable PREFIX variable a73ce38d cgroupv1/FindCgroupMountpoint: add a fast path c27b8e7f tests/fedora32: retry dnf 92f49821 tests/centos7: add criu 98c7c01d tests/int/checkpoint: require cgroupns c1adc99a cgroup/fs: rework Apply() 417f5ff4 tests/int/checkpoint: fds and pids cleanup 819fcc68 merge branch 'pr-2495' 2a322e91 cgroupv1: remove subsystemSet.Get() daf30cb7 cgroups/fs: rm getSubsystems 2e225799 libct/cgroups/fs.GetStats: drop PathExists check 11fb9496 cgroups/fs: rm Remove method from controllers 30dc54a9 Merge pull request #2503 from giuseppe/cgroup-fixes 3f811318 Merge pull request #2490 from kolyshkin/dev-opt 32034481 cgroup, systemd: cleanup cgroups 46a304b5 Merge pull request #2502 from tjucoder/master e638eda0 Merge pull request #2496 from kolyshkin/freeze-nits a4cb88f3 redundant souce code copy There is a docker -v flag for test in Makefile 2deaeab0 cgroup: store the result of IsRunningSystemd ab35cfe2 make sure pty.Close() will be called and fix comment 62a30709 cgroups/fs/path: optimize 46b26bc0 cgroups/fs/Freeze: simplify cd479f9d cgroupv1/freezer: don't use subsystemSet.Get() 3cb1909c Merge pull request #2493 from thaJeztah/bump_ebpf 108ee85b libct/cgroups: add SkipDevices to Resources f49adb52 vendor: update cilium/ebpf v0.0.0-20200702112145-1c8d4c9ef775 6f5edda9 merge branch 'pr-2491' d0e92896 VERSION: back to development 24a3cf88 VERSION: release 1.0.0-rc91 1b94395c Merge pull request #2476 from kolyshkin/cpt-err-log 834c4573 Merge pull request #2482 from kinvolk/alban/integration-tests 327284eb integration tests: fix typo in README.md 0fa097fc merge branch 'pr-2481' dff7685c Merge pull request #2459 from tedyu/linux-cont-set-cfg e643db6e Merge pull request #2479 from haircommander/fix-systemd-version 04806abd nsenter: fix repeat close() operations 9748b487 Merge pull request #2229 from RenaudWasTaken/create-container 861afa75 Add integration tests for the new runc hooks 2f7bdf9d Tests the new Hook 6a0f64e7 systemd: add unit tests for systemdVersion 6369e388 systemd: parse systemdVersion in more situations 819c40b3 Merge pull request #2478 from kolyshkin/get-pids 89516d17 libct/cgroups/readProcsFile: ret errorr if scan failed 406298fd Merge pull request #2466 from kolyshkin/systemd-cpu-quota-period 12a7c8fc Merge pull request #2411 from kolyshkin/v1-specific ccdd7576 Add the CreateRuntime, CreateContainer and StartContainer Hooks e232a71a tests/int/checkpoint: fix checks, add logs a6ddabd6 tests/int/checkpoint: whitespace cleanups e751a168 cgroups/systemd: add setting CPUQuotaPeriod prop 8c5a19f7 libct/cgroups/fs: rename some files cec5ae7c libct/cgroupv1/getCgroupMountsHelper: minor nit 0626c150 libct/cgroupv1: fix TestGetCgroupMounts test cases 0681d456 libct/cgroups/utils: move cgroup v1 code to separate file 7db2d3e1 libcontainer/cgroups: rm FindCgroupMountpointDir d244b405 libct/cgroups: improve ParseCgroupFile docs 5785aabc libct/cgroups: make isSubsystemAvailable v1-specific d5c57dce libct/criuApplyCgroups: don't set cgroup paths for v2 52b56bc2 libc/criuSwrk: remove applyCgroups param 142d0f2d libct/cgroups/utils: make FindCgroupMountpoint* v1-specific 44b75e76 libct/cgroups: separate getCgroupMountsV1 82d2fa4e Merge pull request #2453 from AkihiroSuda/vagrant-centos7 3834222d libct/cgroups/utils: getControllerPath return err for v2 55c77cb9 Merge pull request #2472 from kolyshkin/paths-nits dd2426d0 libct/cgroups: fix m.paths map access a77d7b1d libct: don't use GetPaths 5b247e73 Merge pull request #2338 from lifubang/systemdcgroupv2 c76af1d2 Merge pull request #2470 from katarzyna-z/kk-fix-numa-stats 601fa557 Merge pull request #2414 from kolyshkin/criu-notif 71e63de4 Fix #2469 omit memory.numa_stat when not available fdc48376 Merge pull request #2458 from kolyshkin/cpu-quota-II 3ddb913a Merge pull request #2467 from mrunalp/save_state_atomic ed9d93e2 Merge pull request #2455 from AkihiroSuda/docs-cgroup2 a4a306d2 Write state.json atomically 499357d6 add Vagrantfile.centos7 262ef563 update.bats: support systemd <= 226 1f366c6a tests/rootless.sh: fix executing bats in non-root PATH 6246bb11 spec.bats: avoid using `git -C` bd236e50 integration: skip checkpoint tests if criu binary not found b2163040 Merge pull request #2454 from AkihiroSuda/ci-fix-rt 1b03e725 tests/int/update: more cpu period/quota cases a92b0327 cgroups/systemd: fix set CPU quota if period is unset 1832bf0b tests/int/update: add cpu-quota -1 tests 7c2b2349 tests/integration/update: enable cpu quota for v2 32746fb3 update: do not overwrite old cpu quota/period 4189cb65 cgroups: remove cgroup.Resources.CpuMax 8b964677 cgroups/systemd: unify adding CpuQuota 2ce20ed1 cgroups/systemd: simplify gen*ResourcesProperties 9d275d32 Set configs back when intelrdt configs cannot be set 4be54355 add integration test for ps/kill after the container stopped 1b97c04f merge branch 'pr-2445' 2a046695 merge branch 'pr-2446' 79fe41d3 Replace sed with jq for more readable json manipulation in tests 13865704 add cgroup v2 documentation 10d1e1ed test "update rt period and runtime": fix up runtime and period 0853956d Merge pull request #2452 from AkihiroSuda/silence-criu-not-found 13020202 Merge pull request #2449 from katarzyna-z/kk-fix-2440 9087f2e8 fix path error in systemd when stopped 4ad326a3 silence "which: no criu" 92f831bf Fix #2440 omit cpuacct.usage_all when not available d1ba8e39 (*initProcess).start: rm second Apply dbe5acad Merge pull request #2439 from kolyshkin/int-noswap 332a8458 Merge pull request #2443 from kolyshkin/kmem-fixup 0f7ffbeb Merge pull request #2416 from AkihiroSuda/exec-join-init-cgroup a30f2556 merge branch 'pr-2018' c91fe9ae cgroup2: exec: join the cgroup of the init process on EBUSY ed1f14af tests/int/events: skip oom test if no swap 755b1016 test/int/update: simplify mem+swap presence check 8d943633 test/int/update: simplify mem+swap checks e664e732 merge branch 'pr-2442' 2679754a Merge pull request #2441 from kolyshkin/check-cpushares 3fe6e045 cgroupv1/systemd.Set: don't enable kernel memory acct 3249e237 cgroupv1: check cpu shares in place 774a9e76 Merge pull request #2420 from tedyu/criu-proc-wait 3ba3d9b1 Wait for criuProcess once 0f3d6bec Remove pullapprove integration 64dbdb86 Merge pull request #2437 from kolyshkin/remove-faster a78e21b5 tests/int/delete.bats: fixups 0ac92aab cgroups/fs2: make removeCgroupPath faster 4f0bdafc Merge pull request #2412 from lifubang/removecgpath a891fee8 Merge pull request #2434 from kolyshkin/cpu-quota-fix-minimal be546787 cgroupv1: minimal fix for cpu quota regression 82fa1941 remove cgroup path recursively in cgroup v2 1f737eeb Merge pull request #2426 from kolyshkin/mem-swap-unlim 7673bee6 Merge pull request #2395 from lifubang/updateCgroupv2 68391c0e use lazy-pages ready notification for criu >= 3.15 7ab13298 libct/criuNotifications: simplify switch 3c6e8ac4 cgroupv2: set mem+swap to max if mem set to max 27515719 add testcase for enable all supported controllers in cgroupv2 a67dab0a Revert "CreateCgroupPath: only enable needed controllers" 3c8da9da Merge pull request #2422 from kolyshkin/criu-j d57f5bb2 cgroupv1: don't ignore MemorySwap if Memory==-1 21cb2360 merge branch 'pr-2427' 6a6ba0c0 Merge pull request #2423 from kolyshkin/systemd-v2-pids-max 8cd84e35 Merge pull request #2333 from opencontainers/add-cii-badge 59897367 cgroups/systemd: allow to set -1 as pids.limit 95413ecd tests/int/update: add cgroupv1 systemd CPU checks 06d7c1d2 systemd+cgroupv1: fix updating CPUQuotaPerSecUSec 7abd93d1 tests/integration/update.bats: more systemd checks e4a84bea cgroupv2+systemd: set MemoryLow 4fc9fa05 tests/int: simplify check_systemd_value use 716079f9 Merge pull request #2406 from cyphar/devices-cgroup-header 5b601c66 README.md: fix a dead link cd4b71c2 Merge pull request #2409 from adrianreber/go-criu-4-0-0 28cd9d9c Merge pull request #2419 from tianon/buildmode-arch-toggle 9a808dd0 Merge pull request #2424 from giuseppe/errno-ret 944e0570 Update to latest go-criu (4.0.2) 41aa1966 libcontainer: honor seccomp errnoRet 510c79f9 vendor: update runtime-specs to 237cc4f519e 236ec045 Dockerfile: speed up criu build be66519c Remove "-buildmode=pie" from platforms that don't support it b207d578 Merge pull request #2418 from AkihiroSuda/fix-bad-rebase-2413 2fa3c286 fix "libcontainer/cgroups/fs/cpuset.go:63:14: undefined: fmt" f369199f Merge pull request #2413 from JFHwang/2392-spec-check 53a46497 Merge pull request #2401 from kolyshkin/fs-cpuset-mountinfo 825e91ad Merge pull request #2341 from kolyshkin/test-cpt-lazy 67fac528 Merge pull request #2410 from lifubang/swap0patch 5aa0601a validateProcessSpec: prevent SEGV when config is valid json, but invalid. 7fc291fd Replace formatted errors when unneeded 9ad1beb4 never write empty string to memory.swap.max dc9a7879 cgroups: add copyright header to devices.Emulator implementation 3f1e8869 Merge pull request #2391 from cyphar/devices-cgroup 2db3240f libct/cgroups: rm GetClosestMountpointAncestor f1603526 libct/cgroup: prep to rm GetClosestMountpointAncestor 85d4264d Merge pull request #2390 from lifubang/threadedordomain 4b71877f Merge pull request #2292 from Creatone/creatone/extend-intelrdt 41855317 Merge pull request #2271 from katarzyna-z/kk-cpuacct-usage-all fe0669b2 don't enable threaded mode by default ba6eb282 tests: add integration test for paused-and-updated containers 4438eaa5 tests: add integration test for devices transition rules b810da14 cgroups: systemd: make use of Device*= properties afe83489 cgroupv1: devices: use minimal transition rules with devices.Emulator 2353ffec cgroups: implement a devices cgroupv1 emulator 24388be7 configs: use different types for .Devices and .Resources.Devices 60e21ec2 specconv: remove default /dev/console access b2bec980 cgroup: devices: eradicate the Allow/Deny lists 859a780d cgroups: add GetFreezerState() helper to Manager a79fa7ca contrib: recvtty: add --no-stdin flag df3d7f67 Merge pull request #2393 from kolyshkin/criu-pi 58bf0835 Merge pull request #2400 from kolyshkin/bats-1.2.0 17aee8c4 Dockerfile: bump bats to 1.2.0 2b9a36ee Merge pull request #2398 from pkagrawal/master 867c9f5b Merge pull request #2386 from kolyshkin/gordian-knot ca1d135b runc checkpoint: fix --status-fd to accept fd 4aa91014 Honor spec.Process.NoNewPrivileges in specconv.CreateLibcontainerConfig f0daf651 Vagrantfile: use criu from stable repo 714c91e9 Simplify cgroup path handing in v2 via unified API 2c8d668e Merge pull request #2387 from kolyshkin/g-knot-prepare 1d143562 libct/cgroups/fs: access m.paths under lock 51e1a084 libct/cgroups/systemd/v1: privatize v1 manager d827e323 libct/cgroups/systemd/v1: add NewLegacyManager fc620fdf libct/cgroups/fs: privatize Manager and its fields 5935bf8c libct/cgroups/fs: introduce NewManager() 24f945e0 libct/cgroups/systemd/v2: return a public interface 63854b0e newSetnsProcess: reuse state.CgroupPaths 9a3e6326 notify: simplify usage 6621af89 merge branch 'pr-2381' 828e4ad8 epbf: update github.com/cilium/ebpf b18a9650 test: update devicefilter tests 128cb60f ebpf: fix big endian issue for s390x 2b31437c Merge pull request #2281 from AkihiroSuda/rootless-systemd 47a73431 Merge pull request #2373 from kolyshkin/logging-nits 492cfd8b Merge pull request #2352 from lifubang/eventsv2 bf15cc99 cgroup v2: support rootless systemd 657407ff fix runc events error in cgroup v2 64416d34 Merge pull request #2382 from thaJeztah/bump_selinux b48bbdd0 vendor: opencontainers/selinux v1.5.1, update deprecated uses 407e9f9d Add reading of information from cpuacct.usage_all a57358e0 Merge pull request #2370 from lifubang/swap0 96310f04 Merge pull request #2377 from thaJeztah/ticks_simplify 402d645c Simplify ticks, as the value is a constant a0ddd02b Merge pull request #2378 from thaJeztah/bump_logrus 12ba2a73 Merge pull request #2380 from thaJeztah/userns_sync_once 9df0b5e2 libcontainer: RunningInUserNS() use sync.Once e8bece65 vendor: sirupsen/logrus v1.6.0 609ba79f Merge pull request #2371 from kolyshkin/criu314 6161d255 Merge pull request #2375 from tedyu/wait-lazy-close a70f3546 let runc disable swap in cgroup v2 db29dce0 Close fd in case fd.Write() returns error f6439a84 Merge pull request #2372 from thaJeztah/improve_error_readability 1b84a21c Don't print errors twice 64ca5481 libcontainer: simplify error message 2adfd20a libcontainer: don't double-quote errors c52a598d Remove fatalf() d2061ee5 Vagrantfile: install less packages e9e31f70 Vagrantfile: use criu 3.14 from testing 9634a80c Dockerfile: bump criu to version π (3.14) dd8d48ed Merge pull request #2358 from kolyshkin/fs2-nit c3b0b13f cgroups/fs2: don't always parse /proc/self/cgroup 051d6705 Merge pull request #2363 from AkihiroSuda/vagrant-f32 85c44b19 Vagrantfile: use Fedora 32 c18485ad Merge pull request #2359 from cyphar/terminal-docs-subreaper 0a4dcc02 Merge pull request #2331 from lifubang/StartTransientUnit eea0fbfe docs: terminals: mention subreaper requirement bfa1b2aa check that StartTransientUnit and StopUnit succeeds 80e2d1f1 Merge pull request #2357 from kolyshkin/makefile-2 a1f007e0 Merge pull request #2340 from AkihiroSuda/fix-2339 772d0909 Makefile: rm RELEASE_DIR and SHELL 731947d5 Makefile: fix/clean install-man df72e898 Makefile: rm uninstall* targets a036e890 Makefile: add -mod=vendor to go test 2fe9e31a Makefile: don't use -mod=vendor if GO111MODULE=off 19ba7688 Makefile: test, localtest: no need to invoke make fc54f6d7 Makefile: rm $(SOURCES), mark targets as PHONY b7dadf0f Makefile: rm $(allpackages) 60c647e3 fs2: fix cgroup.subtree_control EPERM on rootless + add CI 53fb4a5e Merge pull request #2342 from kolyshkin/vagrant-rm-ct 799d9481 intelrdt: Add Cache Monitoring Technology stats b19f9cec Merge pull request #2343 from lifubang/updateSystemdScope 0fd8d468 Merge pull request #2318 from lifubang/linuxResources baa20026 Merge pull request #2327 from kolyshkin/cpt-err 084144a6 travis: run vagrant tests on the host 634e51b5 Merge pull request #2335 from kolyshkin/cgroupv2-cpt 10ba72a6 add integration test for runc update with systemd 49ca1fd0 Merge pull request #2347 from kolyshkin/v2-allow-all-devs 78ff2797 Merge pull request #2334 from kolyshkin/makefile c420a3ec Merge pull request #2324 from kolyshkin/criu-freezer 5b4bff96 Merge pull request #2336 from kolyshkin/bats-core-2 44024426 Merge pull request #2330 from KentaTada/use-linuxnamespace-const fbeed522 Makefile: add -mod=vendor 1fe709a0 Makefile: use $(FOO) not ${FOO} d09a6ea9 Makefile: split long lines 64ec3557 Makefile: abstract go build flags 55d5c99c libct/mountToRootfs: rm useless code 20959b16 libcontainer/integration/checkpoint_test: simplify 1d4ccc8e fix data inconsistent when runc update in systemd driven cgroup v1 7682a2b2 fix data inconsistent when runc update in systemd driven cgroup v2 dbe44cbb merge branch 'pr-2348' fb99bbc7 merge branch 'pr-2326' 44747953 libcontainer: use x/sys/unix instead of the hardcoded value d4bc7c10 Dockerfile: use bats-core 32d52a0f tests/checkpoint: enable for Fedora 31 / cgroup v2 9280e356 checkpoint/restore: fix cgroupv2 handling 00a2844a tests/checkpoint: add simple c/r test for cgroupns 75a92ea6 cgroupv2: allow to set EnableAllDevices=true cdce577d Merge pull request #2332 from kolyshkin/cgroupv2-cr 7376bdc1 Fix reference to badge d5e68ceb tests/checkpoint.bats: fix test hang/failure bf172ef4 tests/checkpoint.bats: consolidate requires checks e216457e tests/checkpoint.bats: simplify status checks 69d599dd tests/checkpoint.bats: fix $? checks 46be7b61 Merge pull request #2299 from kolyshkin/fs2-init-ctrl 5c2a9782 Add CII Badge to README 5b38ef71 Merge pull request #2320 from kolyshkin/vgr ab276b1c cgroups/fs2/Destroy: use Remove, ignore ENOENT 992d5cad travis: enable fs2 driver test on fedora 4b4bc995 CreateCgroupPath: only enable needed controllers bb47e358 cgroup/systemd: reorganize de113415 cgroups/fs2/CreateCgroupPath: nit b5c1949f cgroups/fs2/CreateCgroupPath: reinstate check 813cb3eb cgroupv2: fix fs2 cgroup init 60eaed2e cgroupv2: move sanity path check to common code dbeff894 cgroupv2/systemd: privatize UnifiedManager 88c13c07 cgroupv2: use SecureJoin in systemd driver 9c80cd67 cgroupv2: rm legacy Paths from systemd driver b6cc3975 travis: rm BUILDTAGS 5f0424c9 Vagrantfile: rm disabling weak deps cd5f4fd9 Merge pull request #2325 from kolyshkin/nits-2 3006db2b checkpoint: don't print error if --pre-dump is set 3de86133 libcontainer: use consts of Namespace from runtime-spec 480bca91 cgroups/fs2: move type decl to beginning 353e9177 cgroups/fs2: do not use securejoin 9ae21e8d MAINTAINERS: add Kir Kolyshkin 58f970a0 cgroups/fscommon: use errors.Is af6b9e7f nit: do not use syscall package b3a481eb libcontainer: fix Checkpoint wrt cgroupv2 bf0a8e17 Merge pull request #2322 from lifubang/forceCgroupNS d0f9b9ce default join cgroup namespace in runc example e4981c91 merge branch 'pr-2317' d2a9c5da using default allowed devices when linux resources is null 7a978e35 Defer netns.Close() after error check 9f6a2d4d Merge pull request #2305 from kolyshkin/fs2-fix-default 191def70 Merge pull request #2308 from kolyshkin/exec-no-tty d1e4c7b8 intelrdt: add mbm stats 56aca5aa Merge pull request #2295 from kolyshkin/integration-cgroups 5c6216b1 Merge pull request #2278 from iwankgb/memory.numa_stats 84583eb1 Enable integration tests in cgroupv2 env 0965c970 tests/integration: disable swap tests for v2 483f9a0c tests/integration: add some cgroup v2 tests 3dfa5434 tests/integration/update.bats: simplify file creation b8b46419 tests/integration: rm kmem from upgrade tests ba3ee7fe tests/integration/update.bats: rm obsoleted comment 3f6a31b7 tests/integration: simplify cgroup paths init 3ae93580 tests/integration: check_cgroup_value: simplify 13431e0e Merge pull request #2312 from tedyu/cgrp-path-rollback 614bb966 cgroupv2/systemd: Properly remove intermediate directory 939bed2a runc exec: don't enable terminal unless -t is set ccbb3364 Merge pull request #2304 from AkihiroSuda/travis-do-not-ignore-cgroup2-failures d65ba5fa Merge pull request #2303 from KentaTada/remove-unneeded-syscall-import ea36045f cgroupv2: fix fs2 driver default path 16d21e2d travis: move `cgroup-v2` out of `allow_failures` e58a406b libcontainer: remove unneeded import 7fa13b27 intelrdt: change parseCpuInfoFile to return struct 9a93b737 Merge pull request #2288 from kolyshkin/mem-swap 7fe0a98e Exposing memory.numa_stats 5c15da9e Merge pull request #2300 from kolyshkin/fix-max 568cd62f cgroupv2: only treat -1 as "max" c86be8a2 cgroupv2: fix setting MemorySwap d3fdacb9 Merge pull request #2296 from KentaTada/update-readme-for-go1.13 a4bbc39d Merge pull request #2297 from giuseppe/cgroups-use-newstats 8b7ac5f4 libcontainer: use cgroups.NewStats d5e91b1c Merge pull request #2289 from AkihiroSuda/fix-TestGetContainerStateAfterUpdate 0c7a9c02 Merge pull request #2294 from tklauser/unused-consts 6cda0eac Merge pull request #2293 from tedyu/restore-svr-close f8f03700 README.md: update Go version to build 21d7bb95 Close criuServer so that even if CRIU crashes or unexpectedly exits, runc will not hang 3e678c08 Remove unused consts testScopeWait and testSliceWait e4363b03 Merge pull request #2291 from kolyshkin/errors-unwrap-v2 ec8c6950 Merge pull request #2235 from Zyqsempai/add-hugetlb-controller-to-cgroupv2 b2272b2c libcontainer: use errors.Is() and errors.As() c39f87a4 Revert "Merge pull request #2280 from kolyshkin/errors-unwrap" 4540b596 Fix TestGetContainerStateAfterUpdate on cgroup v2 0c6659ac Merge pull request #2261 from AkihiroSuda/vagrant-kvm f8e13885 Merge pull request #2280 from kolyshkin/errors-unwrap 6ca9d8e6 Merge pull request #2283 from tedyu/runc-path-in-prefix b26e4f27 Merge pull request #2284 from tedyu/criu-svr-close e3e26caf Merge pull request #2276 from kolyshkin/criu-v2 22a2c9a4 Merge pull request #2282 from kolyshkin/cgroupv2-getpaths 49896ab0 Avoid double close of criuServer d02fc484 isPathInPrefixList return value should be reverted 8d7977ee libct/isPaused: don't use GetPaths from v2 code 12e156f0 libct.isPaused: use errors.Unwrap 272c83e1 libct/cgroups: use errors.Unwrap bd737f1e libct/cgroups/fs: use errors.Unwrap d2dfc635 libct/cgroups/fs2: use errors.Unwrap e4e35b8d libct/cgroups/fscommon.WriteFile: use errors.Unwrap 66778b3c libct/setKernelMemory: use errors.Unwrap b8eed86e vagrant: switch from VirtualBox to KVM + increase HW resources fc840f19 cgroupv2: don't use GetCgroupMounts for criu c/r 9ec5b03e Merge pull request #2259 from adrianreber/v2-test 8221d999 Merge pull request #2279 from masters-of-cats/freezer 92a3f80e Merge pull request #2203 from mrunalp/systemd_conn_cleanup 2abc6a36 Actually check for syscall.ENODEV when checking if a container is paused 3e99aa36 Fix checkpoint/restore tests on Fedora 31 9a0184b1 cgroup2: use CRIU's new freezer v2 support d05e5728 systemd: Lazy initialize the systemd dbus connection 33c6125d systemd: Export IsSystemdRunning() function 4a9e1747 Merge pull request #2234 from thaJeztah/debian_buster dca34a04 Dockerfile: switch to "buster" variant (current stable) 48bf88c4 Dockerfile: prevent busting build-cache for busybox rootfs a5963876 Dockerfile: sort dependencies, and cleanup apt cache c4821c2b Dockerfile: set DEBIAN_FRONTEND=noninteractive 201152a9 Dockerfile: use build-args to allow overriding versions 8df45c89 Merge pull request #2268 from AkihiroSuda/vendor-20200325 ad6d577a travis: run `make verify-dependencies` with Go 1.14.x dfc1b0cd update vendor f1eea905 Merge pull request #2275 from kolyshkin/scan-nits 53ad1d51 Merge pull request #2256 from kolyshkin/mountinfo-alt 75ff40cd Merge pull request #2273 from kolyshkin/v2-untangle aab2c8ba libcontainer/intelrdt: optimize parseCpuInfoFile 0af5cd20 Nit: fix use of bufio.Scanner.Err d4a6a1d9 Merge pull request #2258 from masters-of-cats/eintr-retry b45db5d3 libcontainer/cgroup: obsolete Get*Cgroup for v2 a949e4f2 cgroupv2: UnifiedManager.Apply: simplify 5406833a cgroupv2/systemd: add getv2Path cebef0ee Merge pull request #2272 from kolyshkin/cgroupv2-max ec1f957b cgroupv2: don't use getSubsystemPath in Apply 6905b721 cgroupv2: use "max" for negative values 96596cbb Merge pull request #2270 from kolyshkin/systemd-no-kmem a675b5eb cgroupv2: don't try to set kmem for systemd case be51398a Merge pull request #2193 from milkwine/fix-readSync a7ee31fa Merge pull request #2260 from adrianreber/leave-running 7de5db3d Merge pull request #2263 from kolyshkin/nits cc183ca6 Merge pull request #2242 from AkihiroSuda/vendor-systemd 4e6d8a0f Merge pull request #2267 from tedyu/runner-destroy 3087d43b Merge pull request #1826 from jingxiaolu/fix_specconv_process_nil 07bd2809 Merge pull request #2257 from kolyshkin/no-signal 0a7762c6 Avoid duplicate calls to runner#destroy 1797622f Merge pull request #2264 from kolyshkin/dockerfile dd7b3461 libct/msMoveRoot: benefit from GetMounts filter fc4357a8 libct/msMoveRoot: rm redundant filepath.Abs() calls dce0de89 getParentMount: benefit from GetMounts filter 81d8452e libct/TestFactoryNewTmpfs: benefit from GetMounts c7ab2c03 libcontainer: switch to moby/sys/mountinfo package 3147c320 Switch to golang 1.13, drop unsupported versions 88a02447 Dockerfile: add -f to curl a572216f libcontainer/intelrdt: rm fmt.Sprintf 5542a2c7 libcontainer/cgroups: GetAllPids: optimize 12dc475d libcontainer: simplify createCgroupsv2Path 648295be Skip test for cgroups v2 f34eb2c0 Retry writing to cgroup files on EINTR error 87712d28 checkpoint: remove error message with --leave-running 34d47176 fix readSync 0e062a78 Remove signalmap, use unix.SignalNum 939cd0b7 Merge pull request #1737 from wking/remove-procConsole-comment 88474967 Merge pull request #1974 from openSUSE/unreachable-code 525b9f31 Merge pull request #2248 from AkihiroSuda/fix-cgroupv2-conversion 492d525e vendor: update go-systemd and godbus 981dbef5 Merge pull request #2226 from avagin/runsc-restore-cmd-wait a15d2c3c merge branch 'pr-2073' 9167393c merge branch 'pr-2254' 89c108b1 Makefile: add selinux and apparmor build tags 69f6f32f README, travis.yml: rm ambient tag 8615da6f Merge pull request #1999 from lifubang/rootlesspath 167e33ca Merge pull request #1807 from giuseppe/notify-no-block 25fd4a67 sd-notify: do not hang when NOTIFY_SOCKET is used with create aa269315 cgroup2: add CpuMax conversion 64e9a979 cgroup2: fix conversion b477a159 Remove unreachable code paths 7d6e091f fix error when there is --root and XDG_RUNTIME_DIR env 0ff53526 Merge pull request #2252 from pkagrawal/2251-fix 71dfb559 Merge pull request #2238 from tedyu/init-proc-err-ret 89a87adb Changed hugetlb pagesizes info source d804611d Added failcnt stats 62cfad97 specconv: add a test case to check null spec.Process 5b2b138d Synchronize the call to linuxContainer.Signal() 957da1f9 Use named error return for initProcess#start bbaba4c0 Merge pull request #2228 from cpuguy83/no_whiches 2864bf46 Merge pull request #1877 from KentaTada/add-rootless-testpath-in-makefile 777f97d8 Run verify-dependencies only on go1.x 83f9b889 Don't add git utils to go.mod in CI f7edcc3a Remove refrences to vndr a08ab87f Make CI script to verify that vendor is in sync df583b4c Fix file permissions for mounts.bats 38273546 Update spec test to use go.mod 69e8fb2a Add support for GO Modules fc5759cf Merge pull request #2222 from cyphar/update-travis af3a81e4 Add rootless testpath in Makefile 6503438f Merge pull request #2212 from Zyqsempai/2211-convert-blkio-weight-properly c4730fa6 Merge pull request #2230 from thaJeztah/update_selinux_v1.3.1 42bfdf5f Use "command -v" shell builtin instead of "which" 93e5c4d3 merge branch 'pr-2232' b6657fc3 Merge pull request #2231 from thaJeztah/nominate_akihiro d8953334 vendor: update opencontainers/selinux v1.3.3 22e00ddc vendor: update golang.org/x/sys 52ab431487773bc9dd1b0766228b1cf3944126bf c295a633 vendor: update opencontainers/selinux v1.3.1 3b7e32fe Merge pull request #2210 from Zyqsempai/2164-remove-deprecated-systemd-resources 7f37afa8 Added HugeTlb controller for cgroupv2 98de8426 libcontainer: dual-license nsenter/cloned_binary.c bc43c4bd MAINTAINERS: add Akihiro Suda to maintainers 688cf6d4 merge branch 'pr-2223' 0f32b03d merge branch 'pr-2192' 13b1603f Merge pull request #2224 from kolyshkin/systemd-props 4b8134f6 Convert blkioWeight to io.weight properly 1cd71dfd systemd properties: support for *Sec values 2a81236e Document using annotations to set systemd props 4c5c3fb9 Support for setting systemd properties via annotations 81ef5024 Merge pull request #2213 from Zyqsempai/2166-convert-cpu-weight-poperly 7c439cc6 Added conversion for cpu.weight v2 269ea385 restore: fix a race condition in process.Wait() f27c4e15 Fix the value corresponding to rlimitmap [key] dc7d0bfa travis: update configuration 3b992087 Fix skip message for cgroupv2 e6555cc0 merge branch 'pr-2184' e0385902 README.md: modify the explanation of make flags ff107ee0 merge branch 'pr-2190' 7d23d1e1 Update README.md 0061cad8 Adding .pdf of audit 2b5730a5 Merge pull request #2221 from inductor/feature/fix_path_security e4c4935a Merge pull request #2217 from cyphar/release-rc10 ed4a3e9b Apply review c8ba9853 Fix path for security report line e4de2b25 VERSION: back to development dc9208a3 VERSION: update to 1.0.0~rc10 2fc03cc1 Merge pull request #2207 from cyphar/fix-double-volume-attack 3291d66b rootfs: do not permit /proc mounts to non-directories f6fb7a03 merge branch 'pr-2133' 5b96f314 Exchanged deprecated systemd resources with the appropriate for cgroupv2 cf9b7c33 Fix MAJ:MIN io.stat parsing order 709377ca Merge pull request #2198 from AkihiroSuda/criu-master 55f8c254 temporarily disable CRIU tests 5c20ea14 fix merging #2177 and #2169 5cc0deaf Merge pull request #2169 from AkihiroSuda/split-fs 2b52db75 Merge pull request #2177 from devimc/topic/libcontainer/kata-containers a88592a6 Merge pull request #2185 from liggitt/exec-race 8541d9cf Fix race checking for process exit and waiting for exec fifo 52951a7c Fix race in tty integration test with slow startup 8ddd8920 libcontainer: add method to get cgroup config from cgroup Manager cd7c59d0 libcontainer: export createCgroupConfig 7496a968 merge branch 'pr-2086' 201b0637 merge branch 'pr-2141' e1b5af06 Merge pull request #2161 from AkihiroSuda/makefile-overrride-docker ec49f98d fs2: support legacy device spec (to pass CI) 88e8350d cgroup2: split fs2 from fs 5e636953 merge branch 'pr-2174' 8bb10af4 Merge pull request #2165 from AkihiroSuda/travis-f31 41a20b58 Expose network interfaces via runc events 48b055c4 Makefile: allow overriding `docker` command c35c2c9c merge branch 'pr-2172' 42690e68 Make event types public 2186cfa3 Merge pull request #2168 from AkihiroSuda/ebpf-fix-rlimit faf1e44e cgroup2: ebpf: increase RLIM_MEMLOCK to avoid BPF_PROG_LOAD error 46def4cc Merge pull request #2154 from jpeach/2008-remove-static-build-tag b133feae Merge pull request #2145 from AkihiroSuda/ebpf ccd4436f .travis.yml: add Fedora 31 vagrant box (for cgroup2) faf673ee cgroup2: port over eBPF device controller from crun e57a7740 Merge pull request #2149 from AkihiroSuda/cgroup2-ps d239ca84 Merge pull request #2148 from AkihiroSuda/cg2-ignore-cpuset-when-no-config 03cf145f Merge pull request #2159 from AkihiroSuda/cgroup2-mount-in-userns f04fb998 Merge pull request #2160 from AkihiroSuda/cgroup2-no-proc-cgroups 74a3fe5d cgroup2: do not parse /proc/cgroups 9c81440f cgroup2: allow mounting /sys/fs/cgroup in UserNS without unsharing CgroupNS 13919f5d Remove the static_build build tag. c4d8e168 Merge pull request #2140 from crosbymichael/fs-unified 792af40d Merge pull request #1929 from kkallday/patch-1 8790f243 Merge pull request #2147 from AkihiroSuda/iov2-remove-v1-code 2cd9ba23 Merge pull request #2146 from AkihiroSuda/doc-not-prod-ready dbd771e4 cgroup2: implement `runc ps` 9996cf7d README.md: clarify cgroup2 support is not ready for production d918e7f4 cpuset_v2: skip Apply when no limit is specified 033936ef io_v2.go: remove blkio v1 code a610a848 criu: Ensure other users cannot read c/r files 4e370170 Merge pull request #2139 from rst0git/desc-permisions b28f58f3 Set unified mountpoint in find mnt func f017e0f9 checkpoint: Set descriptors.json file mode to 0600 c1485a1e merge branch 'pr-2134' 1b8a1eee merge branch 'pr-2132' ba16a38b Merge pull request #2135 from mrueg/security 4be50fe3 SECURITY: Add Security Policy 2111613c VERSION: back to development d736ef14 VERSION: update to 1.0.0-rc9 cad42f6e Merge pull request #2130 from cyphar/apparmor-verify-procfs d463f648 *: verify that operations on /proc/... are on procfs 9aef5044 vendor: update github.com/opencontainers/selinux 28e58a0f Support different field counts of cpuaact.stats e63b797f Handle ENODEV when accessing the freezer.state file 84373aaa Add SCMP_ACT_LOG as a valid Seccomp action (#1951) 3e425f80 Merge pull request #2129 from crosbymichael/proc-mount 331692ba Only allow proc mount if it is procfs 7507c64f Merge pull request #2041 from jburianek/notify-socket-permissions bf27c2f8 Merge pull request #2126 from flynn/fix-nsenter-unsupported af7b6547 libcontainer/nsenter: Don't import C in non-cgo file 6c055520 Merge pull request #2125 from giuseppe/mount-cgroups 267490e3 Merge pull request #2010 from lifubang/checkpointrootless e7a87dd2 Merge pull request #2098 from adrianreber/master 718a566e cgroup: support mount of cgroup2 a6606a7a Merge pull request #2029 from thaJeztah/bump_dependencies 115d4b9e bump golang/protobuf v1.0.0 85c02f3f bump coreos/go-systemd v19, godbus/dbus v5.0.1 21498b8e bump mrunalp/fileutils 7d4729fb36185a7c1719923406c9d40e54fb93c7 eb86f603 bump syndtr/gocapability d98352740cb2c55f81556b63d4a1ec64c5a319c2 1150ce9c bump urfave/cli v1.20.0 8e4f645f bump docker/go-units v0.3.3 0fc06623 bump cyphar/filepath-securejoin v0.2.2 414a39de bump containerd/console 0650fd9eeb50bab4fc99dceb9f2e14cf58f36e7f de24d733 bump github.com/pkg/errors 0.8.1 4be3c48e Reformat vendor.conf and pin all deps by git-sha 0fd4342a Merge pull request #2028 from thaJeztah/bump_golang_versions 92ac8e3f Merge pull request #2113 from giuseppe/cgroupv2 524cb7c3 libcontainer: add systemd.UnifiedManager ec111368 libcontainer, cgroups: rename systemd.Manager to LegacyManager 1932917b libcontainer: add initial support for cgroups v2 92d851e0 Merge pull request #2123 from carlosedp/riscv64 4316e4d0 Bump x/sys and update syscall to start Risc-V support 51f2a861 Merge pull request #2122 from AkihiroSuda/cleanup 0bc069d7 nsenter: fix clang-tidy warning b225ef58 nsenter: minor clean up dd075602 Merge pull request #2120 from rhatdan/master e4aa7342 Rename cgroups_windows.go to cgroups_unsupported.go c61c7370 Merge pull request #2103 from sipsma/cgnil 68d73f0a Merge pull request #2107 from sashayakovtseva/public-get-devices f061842f Merge pull request #2119 from KentaTada/fix-proc-settings c740965a libcontainer: update masked paths of /proc 3525edde Merge pull request #2117 from filbranden/detection1 f7b65885 Merge pull request #2116 from filbranden/running1 518c8558 Remove libcontainer detection for systemd features 4ca00773 Update vendored dependencies to remove go-systemd/util 588f040a Avoid the dependency on cgo through go-systemd/util package afc24792 Make get devices function public 9c822e48 cgroups/fs: check nil pointers in cgroup manager 1712af0e man: fix man-pages 2e943784 Merge pull request #2094 from sipsma/2093-nodotudev 44f9ec13 Merge pull request #2089 from anx-astocker/master f08cdaee Skip searching /dev/.udev for device nodes. 808e809f doc: First process in container needs `Init: true` 80d35c7c Merge pull request #2082 from AkihiroSuda/blkio-kernel50 dd8b9b14 Merge pull request #2081 from AkihiroSuda/criu312 9ae79017 Merge pull request #2080 from zhlhahaha/pr_id 5e0e67d7 fix permission denied 351bfb4b integration: remove blkio.weight (unavailable in kernel 5.0) 7e678625 Bump CRIU to 3.12 68cc1a77 Update busybox source and fix runc exec bug 6cccc176 Merge pull request #2075 from KentaTada/fix-bash-completion 371d13c9 Update bash completion for v1.0.0 release f4982d86 Merge pull request #2074 from odinuge/dep/libseccomp-golang 652297c7 Update dependency libseccomp-golang 7a9ffa89 Change the permissions of the notify listener socket to rwx for everyone e7831f2a Update to Go 1.12 and drop obsolete versions 2e8efc1b add prompt when rootless users have no read access to runc bin 472fe623 criu image path permission error in rootless checkpoint 056909bd Adds note about user ns for rootless containers d71b3f53 libcontainer/sync: Drop procConsole transaction from comments Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-moby: update to 19.03 latestBruce Ashfield2020-08-171-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updating to the latest 19.03 commits: 88820a4793 Merge pull request #41287 from thaJeztah/19.03_backport_bump_netns dae08c333e vendor: vishvananda/netns db3c7e526aae966c4ccfa6c8189b693d6ac5d202 93cb737687 [19.03] vendor: vishvananda/netns 0a2b9b5464df8343199164a0321edf3313202f7e 7d597ee2c9 Merge pull request #41273 from thaJeztah/19.03_backport_swagger_fixes 22c458b67c Merge pull request #41274 from thaJeztah/19.03_backport_Double_RLock 8b97280f11 Merge pull request #41279 from thaJeztah/19.03_bump_buildkit eda52d433e [19.03] vendor: moby/buildkit v0.6.4-28-gda1f4bf1 168254fcfa Merge pull request #41277 from AkihiroSuda/rootlesskit-0.10.0-1903 9dc455dffb bump up rootlesskit to v0.10.0 c200868fa2 Merge pull request #41271 from thaJeztah/19.03_backport_remove_dockerproject_from_tests 9eade7d03c docs: API v1.39: move system version response to definitions 4685e9ef72 docs: API v1.40: move system version response to definitions d8f22d0307 swagger: move system version response to definitions 32366de5f9 plugin: fix a double RLock bug ad0278f002 docs: API v1.39: fix type for BuildCache CreatedAt and LastUsedAt cb8b7a282d docs: API v1.40: fix type for BuildCache CreatedAt and LastUsedAt e1ae07b7a0 swagger: fix type for BuildCache CreatedAt and LastUsedAt d49278cc17 Merge pull request #41269 from thaJeztah/19.03_update_buildkit 892c228219 Remove apt.dockerproject.org from test a7e309944b Merge pull request #41248 from thaJeztah/19.03_backport_swagger_updates 765245d54b [19.03] vendor: moby/buildkit v0.6.4-26-ga1e4f48e 2d4bfdc789 Merge pull request #41081 from thaJeztah/19.03_backport_fix_sandbox_cleanup b990b6c2b0 Merge pull request #41235 from thaJeztah/19.03_backport_bump_golang_1.13.14 4d9397c268 swagger: sync updates to v1.39 51bd95dc95 swagger: sync updates to v1.40 d5ba93575c docs: sync API v1.40 swagger formatting with current version 12b7746a84 docs: sync API v1.39 swagger formatting with current version 0c6bdf5974 docs: add example calculations to container stats API 630185b4ae swagger: add DeviceRequests to container create, inspect example d7423180e7 swagger: move NetworkingConfig to definitions c30ff6885e swagger: reformat, and wrap to ~80-chars 7005841048 swagger: clarify the meaning of Image field in ContainerInspect endpoint 1608292c09 Bump Golang 1.13.14 1763b4e88b Bump Go 1.13.13 5e8ab898c7 Merge pull request #41222 from thaJeztah/19.03_bump_buildkit 23d47bd12e [19.03] vendor: moby/buildkit v0.6.4-20-g4cb720ef 789bd1c67b Merge pull request #41192 from ameyag/19.03-hcsshim-vndr 0eaa22b95d Merge pull request #41185 from thaJeztah/19.03_bump_buildkit 9d6053eda2 Revendor hcsshim to fix image import bug 589b07262c vendor: Microsoft/hcsshim v0.8.9 e7c2b106ec [19.03] vendor: buildkit dc6afa0f755f6cbb7e85f0df4ff4b87ec280cb32 (v0.6.4-15-gdc6afa0f) a40b877fbb Merge pull request #41133 from roidelapluie/bsd2 7dd9fdcfbe Enable client on netbsd and dragonfly 9dc6525e61 Merge pull request #41124 from thaJeztah/19.03_bump_libnetwork b4ca19a992 vendor: docker/libnetwork 026aabaa659832804b01754aaadd2c0f420c68b6 (bump_19.03 branch) ae158b371c allocateNetwork: fix network sandbox not cleaned up on failure And the following cli changes: 80fd48bcb Merge pull request #2635 from thaJeztah/19.03_backport_bump_golang_1.13.14 e5e227672 Bump Golang 1.13.14 79a6c494e Merge pull request #2633 from thaJeztah/19.03_backport_bump_golang_1.13.13 5e05ef345 Merge pull request #2631 from cpuguy83/19.03_handle_close_error_on_save 64d25cc6e Bump Golang 1.13.13 1b96aa29c Merge pull request #2629 from thaJeztah/19.03_backport_circleci_updates aaf117052 Handle errors on close in config file write. 14010c88b config: preserve ownership and permissions on configfile 3d64a5d4b Move circle.yml to .circleci/config.yml d0b656088 CircleCI: update docker versions used in CI b0a78cc1a Merge pull request #2623 from s0j/s0j_19.03_bump-crypto-readconsole ab8bd02fc vendor: golang.org/x/crypto 2aa609cf4a9d7d1126360de73b55b6002f9e052a 18d6f8f6b Merge pull request #2620 from thaJeztah/19.03_backport_builder_comment_info 7498d9cc4 docs/builder: add note about handling of leading whitespace cb59cafc3 Merge pull request #2609 from thaJeztah/19.03_backport_docs_fixes 541f050e1 Merge pull request #2608 from thaJeztah/19.03_backport_vendor_bumps ac7723056 docs: fix example output for docker plugin ls 9c9ff4369 list state `ready` for filtering in stack_ps.md e3b981c18 vendor konsorten/go-windows-terminal-sequences v1.0.3 ec276f3a6 vendor: mitchellh/mapstructure v1.0.0 c9125cc39 vendor: beorn7/perks v1.0.1 0ed913b88 Merge pull request #2592 from thaJeztah/19.03_backport_logout_config_out_of_sync2 5a12f90b4 Don't filter out registries to logout from with config file contents Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-ce: update to tip of 19.03Bruce Ashfield2020-08-171-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This update comprises the following commits: ff3fbc9d55 Merge pull request #655 from tiborvass/bump_19.03.13-beta2 475484e351 Bump VERSION to 19.03.13-beta2 321dc6b4bd Merge component 'engine' from git@github.com:moby/moby 19.03 9b85caeb7c Merge pull request #41287 from thaJeztah/19.03_backport_bump_netns b82e19207e vendor: vishvananda/netns db3c7e526aae966c4ccfa6c8189b693d6ac5d202 69223588df [19.03] vendor: vishvananda/netns 0a2b9b5464df8343199164a0321edf3313202f7e 32c58830e3 Merge pull request #654 from tiborvass/bump_19.03.13-beta1 f2cad45d0a Merge branch '19.03' of github.com:docker/docker-ce into 19.03 a2fa6c7fb3 Merge component 'engine' from git@github.com:moby/moby 19.03 1015e8af79 Merge component 'engine' from git@github.com:moby/moby 19.03 1d7d9d001f Merge pull request #41273 from thaJeztah/19.03_backport_swagger_fixes 3087b3114f Merge pull request #41274 from thaJeztah/19.03_backport_Double_RLock 520fc10363 Merge pull request #41279 from thaJeztah/19.03_bump_buildkit 120511a214 Merge pull request #642 from tiborvass/19.03-switch-to-moby a4f55cdbab [19.03] vendor: moby/buildkit v0.6.4-28-gda1f4bf1 bee145aad2 Merge component 'engine' from git@github.com:docker/engine 19.03 b768eabf04 Merge component 'engine' from git@github.com:docker/engine 19.03 4e9725b988 Merge pull request #41277 from AkihiroSuda/rootlesskit-0.10.0-1903 c13dfa3f39 bump up rootlesskit to v0.10.0 b714998077 Merge pull request #41271 from thaJeztah/19.03_backport_remove_dockerproject_from_tests 009eca42ef docs: API v1.39: move system version response to definitions 4f25b9eed4 docs: API v1.40: move system version response to definitions 0ea6312f6d swagger: move system version response to definitions 9f4029e6dc plugin: fix a double RLock bug dff89f8092 docs: API v1.39: fix type for BuildCache CreatedAt and LastUsedAt 95599eb2e6 docs: API v1.40: fix type for BuildCache CreatedAt and LastUsedAt 81bd78b07a swagger: fix type for BuildCache CreatedAt and LastUsedAt d9cb8734cf Merge component 'engine' from git@github.com:docker/engine 19.03 820098ff18 Merge pull request #41269 from thaJeztah/19.03_update_buildkit 0994e492c5 Remove apt.dockerproject.org from test a49a4f288a Bump VERSION to 19.03.13-beta1 a89cfd520d Merge component 'engine' from git@github.com:docker/engine 19.03 dcaed39807 Upstream-commit: a7e309944b3bdefbca4186ce41a8374784133be2 Component: engine 422fa1b13e [19.03] vendor: moby/buildkit v0.6.4-26-ga1e4f48e 81dab2018b Merge component 'engine' from git@github.com:docker/engine 19.03 1490b1df51 Merge pull request #41081 from thaJeztah/19.03_backport_fix_sandbox_cleanup c6c4809630 Merge component 'engine' from git@github.com:docker/engine 19.03 9eea25a62f Merge pull request #41235 from thaJeztah/19.03_backport_bump_golang_1.13.14 f224762af0 Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 19.03 0850d19f24 Merge pull request #485 from thaJeztah/19.03_backport_remove_eoan 5ba0889c4a swagger: sync updates to v1.39 7d189e5b0b swagger: sync updates to v1.40 047a3b6ca8 docs: sync API v1.40 swagger formatting with current version d5a51018d4 docs: sync API v1.39 swagger formatting with current version 69aae6c1db docs: add example calculations to container stats API bf77a77bab swagger: add DeviceRequests to container create, inspect example d43b66d55c swagger: move NetworkingConfig to definitions c210a26d28 swagger: reformat, and wrap to ~80-chars 0d1edc403c swagger: clarify the meaning of Image field in ContainerInspect endpoint f3b514426e Merge component 'cli' from git@github.com:docker/cli 19.03 07d59f4164 Merge pull request #2635 from thaJeztah/19.03_backport_bump_golang_1.13.14 289eec988f Remove Ubuntu 19.10 "Eoan" (EOL: 2020-07-17) eeec8d3ba5 Remove Ubuntu 19.04 "Disco Dingo" (EOL: 2020-01-23) 02ab061844 Remove Fedora 30 (EOL: 2020-05-26) 391d22f0e0 Bump Golang 1.13.14 a033b71571 Bump Go 1.13.13 03ae74b5b7 Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 19.03 20042180c1 Bump Golang 1.13.14 aaf10aa9c6 Merge pull request #482 from thaJeztah/19.03_backport_bump_golang_1.13.14 fc9fece6e1 Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 19.03 d552a52dbb Bump Golang 1.13.14 887f0eb7c6 Merge pull request #479 from thaJeztah/19.03_backport_bump_golang 8a9e1bdc07 Merge component 'engine' from git@github.com:docker/engine 19.03 ab25bbca2f Merge component 'cli' from git@github.com:docker/cli 19.03 f56046026b Merge pull request #2633 from thaJeztah/19.03_backport_bump_golang_1.13.13 bbdb18fa3a Merge pull request #41222 from thaJeztah/19.03_bump_buildkit a48c990d07 Merge component 'cli' from git@github.com:docker/cli 19.03 e1e647a270 [19.03] vendor: moby/buildkit v0.6.4-20-g4cb720ef 021a6048e6 Merge pull request #2631 from cpuguy83/19.03_handle_close_error_on_save a6c6dce3a6 Bump Golang 1.13.13 a252aaae7a Merge component 'cli' from git@github.com:docker/cli 19.03 f19d902423 Merge pull request #2629 from thaJeztah/19.03_backport_circleci_updates 4e3a5637b4 Handle errors on close in config file write. 19d2ee3b78 config: preserve ownership and permissions on configfile 08fd87da44 Move circle.yml to .circleci/config.yml 45b3865643 CircleCI: update docker versions used in CI c6012e45cc Update Golang 1.13.13 3a19c4a1df Merge component 'engine' from git@github.com:docker/engine 19.03 b636594b37 Merge pull request #41192 from ameyag/19.03-hcsshim-vndr 177165b75d Merge component 'engine' from git@github.com:docker/engine 19.03 d2e020dbd1 Merge component 'cli' from git@github.com:docker/cli 19.03 d0a4b67aee Merge pull request #41185 from thaJeztah/19.03_bump_buildkit d4e6d9b301 Merge pull request #2623 from s0j/s0j_19.03_bump-crypto-readconsole 06d576d294 Merge component 'cli' from git@github.com:docker/cli 19.03 80e9882cdf vendor: golang.org/x/crypto 2aa609cf4a9d7d1126360de73b55b6002f9e052a e0c24158ad Merge pull request #2620 from thaJeztah/19.03_backport_builder_comment_info d7e86d9c77 Revendor hcsshim to fix image import bug 14ab1c306d vendor: Microsoft/hcsshim v0.8.9 03a47bb4c5 [19.03] vendor: buildkit dc6afa0f755f6cbb7e85f0df4ff4b87ec280cb32 (v0.6.4-15-gdc6afa0f) fd33ebfc36 Merge component 'engine' from git@github.com:docker/engine 19.03 fb095d16b8 Merge pull request #41133 from roidelapluie/bsd2 d0a8d03b7b docs/builder: add note about handling of leading whitespace b56ef36968 Merge component 'cli' from git@github.com:docker/cli 19.03 d2a8fe0e12 Merge pull request #2609 from thaJeztah/19.03_backport_docs_fixes e453c06e79 Merge pull request #2608 from thaJeztah/19.03_backport_vendor_bumps dac7a0fe9a docs: fix example output for docker plugin ls 8c8b82eeb3 list state `ready` for filtering in stack_ps.md 055ee582e3 vendor konsorten/go-windows-terminal-sequences v1.0.3 037e7383ec vendor: mitchellh/mapstructure v1.0.0 2f446000e0 vendor: beorn7/perks v1.0.1 8f8179e576 Enable client on netbsd and dragonfly 5b2eac44f7 allocateNetwork: fix network sandbox not cleaned up on failure f620b6de75 components: use moby/moby instead of docker/engine Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k8s: fix 32bit ARM buildBruce Ashfield2020-08-122-2/+54
| | | | | | | | | | Remove the remaining 'go' calls, and replace them with $GO. We also must explicitly pass "GO='go'" on the host side build call. This avoids the gnu-stubs header file issues, since the 'go' binary cannot use the sysroot. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kubernetes: update to release 1.19-rc3Bruce Ashfield2020-07-312-5/+43
| | | | | | | | | | | | | | In preparation for the fall release, update to the 1.19 release branch of kubernetes, so that the change can soak and we can work through the rc's No unexpected build or patch issues with this bump and basic sanity testing passed. Once ore components are updated, extended testig will occur. Sanity built and tested on x86-64 and arm64 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* conmon: uprev 2.0.11 > 2.0.18Ming Liu2020-07-241-7/+2
| | | | | | | | Also drop useless SRC_URI[md5sum], SRC_URI[sha256sum] and FILES_${PN}, and add SRCPV to PV. Signed-off-by: Ming Liu <ming.liu@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* sloci-image: fix variant quotingBruce Ashfield2020-07-192-4/+49
| | | | | | | | | | | | | | | | Bash doesn't deal very well with the quoted "variant" in the output of the oci-image-index. We can calculate the string at the top of the function, and just use it as a whole to avoid needing to figure out the quote escaping. No changes in the output, except a properly quoted "variant" when a variant is defined. We also adjust the definition of "S", since it really wasn't correct before, and now that we have patches, it is more important. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kubernetes: fix ARM64 buildBruce Ashfield2020-07-101-4/+12
| | | | | | | | | | | | | | | | The first part of the kubernetes build generates some host/build files. These use the build/host compiler and not the cross infrastructure. It was working by luck on x86 build / target matches, but blows up on an ARM64 build. We fix the CC/CFLAGS settings for the host part of the build to use the host/build flags and then restore the cross settings for the rest of the build. Tested on arm64 and x86-64. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: upgrade 4.0.2 > 4.0.3Wang Mingyu2020-07-061-2/+2
| | | | | Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: move docker.init back to files directory to use it from docker-mobyMartin Jansa2020-07-021-0/+0
| | | | | | | | | | | | | * it was moved for some reason in: http://git.yoctoproject.org/cgit/cgit.cgi/meta-virtualization/commit/?id=929372946aeb85953d1ca6acc428d73fbac52a56 but docker-moby uses it as well and now started to fail with: ERROR: docker-moby-19.03.12+git9dc6525e6118a25fab2be322d1914740ea842495-r0 do_fetch: Fetcher failure: Unable to find file file://docker.init anywhere. .. Signed-off-by: Martin Jansa <martin.jansa@lge.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-ce: remove unused docker-registry.service fileMartin Jansa2020-07-021-19/+0
| | | | | Signed-off-by: Martin Jansa <martin.jansa@lge.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python3-docker-compose: uprev 1.25.5 > 1.26.0Ming Liu2020-07-012-6/+14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The major changes include: d4451659 Bump 1.26.0 3d94f442 Bump 1.26.0-rc5 1386a855 Merge pull request #7485 from ulyssessouza/fix-https-daemon 8034c96d Bump docker-py 48d09369 Fix flake8 errors 28bf47ce Pin wcwidth==0.1.9 d279b7a8 Bump 1.26.0-rc4 83371df2 Merge branch 'master' into 1.26.x 9c5351cf Merge pull request #7389 from ulyssessouza/general-bumps-for-1_26 836e2b7c General bumps 266d287e Merge pull request #7390 from ulyssessouza/remove-unused-resources d64f3f39 Remove unused files 4e310a94 Merge pull request #7386 from ulyssessouza/bump-python-dotenv-1_13_0 d52b51e8 Bump python-dotenv from 0.11.0 to 0.13.0 64a6a48b Merge pull request #7345 from docker/dependabot/pip/certifi-2020.4.5.1 0979c7a1 Merge pull request #7380 from joehattori/simplify-code ce782b59 Simplify code in compose/config/config.py b7d6dc79 Bump certifi from 2019.11.28 to 2020.4.5.1 c22a2510 Merge pull request #7374 from ulyssessouza/fix-distro-guess a62a1e1d Add "distro" package afc5d205 Merge pull request #7371 from ulyssessouza/bump-openssl-111f 4d2afc07 Merge pull request #7372 from ulyssessouza/update-changelog Have verified on arm/arm64/x86_64 against: https://docs.docker.com/compose/gettingstarted Signed-off-by: Ming Liu <ming.liu@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* riddler: fix 32bit ARM buildBruce Ashfield2020-07-012-1/+55
| | | | | | | | | | | | | | | | | With oe-core commit c23f9e80492e4b [tcmode-default: use go-binary-native by default], we must explictly call the proper cross go binary, versus just the go-native variant. These builds were working by luck, since the go compiler was capable of building the target binaries previously (in its build-from-source creation). We fixup the calls and we no longer see fpu build issues: fatal error: gnu/stubs-soft.h: No such file or directory 7 | # include <gnu/stubs-soft.h> | ^~~~~~~~~~~~~~~~~~ Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* oci-runtime-tools: fix 32bit ARM buildBruce Ashfield2020-07-012-0/+32
| | | | | | | | | | | | | | | | | With oe-core commit c23f9e80492e4b [tcmode-default: use go-binary-native by default], we must explictly call the proper cross go binary, versus just the go-native variant. These builds were working by luck, since the go compiler was capable of building the target binaries previously (in its build-from-source creation). We fixup the calls and we no longer see fpu build issues: fatal error: gnu/stubs-soft.h: No such file or directory 7 | # include <gnu/stubs-soft.h> | ^~~~~~~~~~~~~~~~~~ Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-distribution: fix for GO cross compilationBruce Ashfield2020-07-012-0/+30
| | | | | | | | | | | | | | | | | With oe-core commit c23f9e80492e4b [tcmode-default: use go-binary-native by default], we must explictly call the proper cross go binary, versus just the go-native variant. These builds were working by luck, since the go compiler was capable of building the target binaries previously (in its build-from-source creation). We fixup the calls and we no longer see fpu build issues: fatal error: gnu/stubs-soft.h: No such file or directory 7 | # include <gnu/stubs-soft.h> | ^~~~~~~~~~~~~~~~~~ Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-ce/docker-moby: fixup GO compiler callsBruce Ashfield2020-07-0111-0/+165
| | | | | | | | | | | | | | | | | | | | With oe-core commit c23f9e80492e4b [tcmode-default: use go-binary-native by default], we must explictly call the proper cross go binary, versus just the go-native variant. These builds were working by luck, since the go compiler was capable of building the target binaries previously (in its build-from-source creation). We fixup the calls and we no longer see fpu build issues: fatal error: gnu/stubs-soft.h: No such file or directory 7 | # include <gnu/stubs-soft.h> | ^~~~~~~~~~~~~~~~~~ This commit also moves the docker-ce patches from "files" to a named directory to reduce confusion. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker/moby: update to v19.03.12Bruce Ashfield2020-07-011-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updating moby to the latest 19.03 release, which comprises the following commits: moby: b4ca19a992 vendor: docker/libnetwork 026aabaa659832804b01754aaadd2c0f420c68b6 (bump_19.03 branch) 5fce12cf25 int-cli/TestRunInvalidCPUShares: fix for newer runc 058ea43c5c Bump Golang 1.13.12 77e06fda0c vendor libnetwork to 153d0769a1181bf591a9637fd487a541ec7db1e6 c104a50de4 integration: Add TestDaemonDNSFallback 9482566a5c vendor libnetwork to 71d4d82a5ce50453b1121d95544f0a2ae95bef9b d4e12315cd hack: add more debugging to understand exit codepath 4c24512241 Dockerfile: bump CRIU 3.14 29796375c9 Bump Golang 1.13.11 8f1ab4e612 Fix bug in gotestsum installer causing dependencies to not be downloaded 0a3b2bda34 pkg/archive: escape ":" symbol in overlay lowerdir 9057ddf37c dockerd-rootless.sh: bump up slirp4netns requirement to v0.4.0 a76633684b vendor: update buildkit to a7d7b7f1 706008a1da bump up rootlesskit to v0.9.5 57f6c9a0ef SELinux: fix ENOTSUP errors not being detected when relabeling 7d4dd91a52 logfile: Check if log is closed on close error during rotate edf2c49410 vendor: pkg/errors v0.9.1 63841af153 [19.03] vendor: buildkit v0.6.4-5-g59e305aa 946d0ff67e bump up rootlesskit to v0.9.4 70e7d6fe4a Update CRIU to v3.13 "Silicon Willet" e4f239d68e [19.03] vendor: swarmkit 0b8364e7d08aa0e972241eb59ae981a67a587a0e e149ff62fe vendor: update go-events to fix alignment for 32bit systems a6beb24dc5 [19.03] update libnetwork b9bcf0c3fba9ef8897c9676c5b70ba0345b84b17 282567a58d Bump Golang 1.13.10 b66813eb45 api docs: fix broken link on GitHub 9d8eccec8e Fix TEST_FILTER to work for both "integration" and "integration-cli" 08a2fe0d56 [19.03] vendor buildkit b26cff2413cc6a466f8739262efa13bd126f8fc7 5ba2bf37a8 Bump Golang 1.13.9 f432a04243 Update Golang 1.13.8 81458b3144 Update Golang 1.13.7 (CVE-2020-0601, CVE-2020-7919) 6e1d159680 Update Golang 1.13.6 4241093b63 Update Golang 1.13.5 162fd8b856 Bump Golang 1.13.4 05a1ebd0fd Bump Golang 1.13.3 (CVE-2019-17596) f8d4276a89 bump golang 1.13.1 (CVE-2019-16276) 7df2d881f3 Bump Golang version 1.13.0 fed832e224 Update to using alpine 3.10 4581499848 Switch to s390x Ubuntu 18.04 f34a5b5af0 builder: fix concurrent map write 9f5a5da4cb docs: add API versions v1.30 - v1.37 284bbde996 seccomp: add 64-bit time_t syscalls 359edd8cbf [19.03] vendor: containerd 481103c8793316c118d9f795cde18060847c370e 021258661b Update libnetwork and DNS library 100d240d86 Move schema1 deprecation notice 57d5105759 bump windows-container-utility aa1ba87e99b68e0113bd27ec26c60b88f9d4ccd9 68db0c1739 Dockerfile: switch to iptables-legacy to match the host 4aaf3ead97 Dockerfile: switch golang image to "buster" variant, and update btrfs packages a070874828 hack/make: ignore failure to stop apparmor 237843a059 Dockerfile: align consecutive COPY lines 400b2850ff Dockerfile: order COPY lines by change frequency ddfeaf32ff Dockerfile: sort packages alphabetically cb813faebf Dockerfile: use build-arg for vpnkit 0499db23d1 Dockerfile: use spaces for indentation c77e7cb3d0 [19.03] Dockerfile: move CRIU_VERSION lower c6511ee4db bump vndr v0.1.1 0fa8a0c575 bump vndr v0.1.0 to support versioned import paths f3009e2f51 Use build args to override binary commits in dockerfile 92ca652fc9 Revert "dockerfile: update vndr to 85886e1a" fdad16840c go-swagger: fix panic 075e057de5 Dockerfile: set GO111MODULE=off fe2a25a785 fix backingFs assignment e6c9e2736f Fix rate limiting for logger, increase refill rate 911ecc3376 Set the bip network value as the subnet 08420b1c95 AppArmor: add missing rules for running in userns fbb08f525f AppArmor: remove rules for linkgraph.db SQLite database 1a830501b7 Use FILE_SHARE_DELETE for log files on Windows. dcae74c44a Fix docker crash when creating namespaces with UID in /etc/subuid and /etc/subgid 4076c57b50 Fix more signal handling issues in tests. 68e1150357 DaemonCli: Move check into startMetricsServer b813c398bb Add `FromClient` to test env execution libnetwork 8565f0b1 log error instead if disabling IPv6 router advertisement failed 153d0769 bridge: disable IPv6 router advertisements fdaaa027 Resolver: fix error handling if we didn't receive a response b09f24d1 Fix NPE due to null value returned by ep.Iface() 8068671f Fixes a panic in the DNS resolver 536ae722 Dockerfile: update to Go 1.13.8 dcd95280 Fix gofmt in preparation of Go 1.13 update f0b038ea regenerate protobufs with debian buster 34c8de58 Dockerfile: switch to debian "buster" 96600117 Dockerfile: update to Golang 1.12.17 libcli 5a12f90b4 Don't filter out registries to logout from with config file contents 6cb678f16 vendor: golang.org/x/text v0.3.3 4515c5187 vendor: golang.org/x/text v0.3.2 cfa1fd9ac Don't loose additional metadata fields 31d338dd3 Bump Golang 1.13.12 936d328da Use consistent name for errors 2ee798198 ssh: avoid setting flags through hostname e90b6bcb6 Fix bug with panic when DOCKER_CLI_EXPERIMENTAL environment variable is incorrect 97afb7295 docs/extend: fix broken link and some markdown touch-ups c280cdfd6 docs: fix broken link in dockerd.md 0f59532a1 Run e2e tests with different engine version on Jenkins Rewrite Jenkinsfile to new declarative syntax without parallel as the e2e framework is not tailored for than (container name clash, port clash,...) 95df3499b Add a new Makefile variable to override DockerInDocker engine version we use to run e2e tests 2d1476c6f Partially revert cf663b526a34f3e7911e6e60138138c2023aa844 as it breaks the version negotiation with an older docker engine. 936e9717e Bump Golang 1.13.11 489c7e9cd docs: more Markdown touch-ups 9a57ea886 Update some uses of errors.Cause() to errors.Is() 345b0e79e vendor: pkg/errors v0.9.1 62a9babca vendor: k8s.io/klog v1.0.0-2-g4ad0115 dbc73eafc docs: fix, and touch-up "docker context" docs e06fc01c1 Update dead link and add missing info on COPY 8434242c7 config: don't call homedir on init() 65c37227a docs: update usage output for dockerd (19.03) 55a5ab0f0 docs: fix order of flags in usage, and fix missing quote c150ba2b8 builder: fix broken link 81909d70f docs: fix links, and minor markdown touch-ups cf663b526 cli: perform feature detection lazily c44c18e08 docker build: check experimental --platform on pre-run 25f04876d app-214 Load Client info in getter function 4ad65fc35 fix panic on single-character volumes 83d4cb900 vendor: bump gopkg.in/yaml.v2 v2.2.8 0cfe29431 service update: fix service create example 2dc593f67 Add container_iface_prefix option to documentation 4fe6b837b bump gotest.tools v3.0.1 for compatibility with Go 1.14 a8454a4d9 update vndr v0.1.1 950dcedd9 bump vndr v0.1.0 to support versioned import paths 0d26cbf5b yamldocs: add description to base command d4e4fa3b4 experimental/vlan-networks: markdown touch-ups de12dbfb1 docs/reference: explain "colon" 7ae77e51f docs/extend: reformat notes 733ae82da docs/builder: touch up markdown, and some minor rephrasing 9a1ba7d39 docs/reference/run.md: touch-up markdown 6ba9a3e4c reference docs: reformat notes 96eb0888f reference docs: fix broken links and markdown touch-ups 2676c603f Adding missing title in builder.md 365bae4f8 Add clarification when using USER UID:GI c38b26007 improve "network prune" output to mention custom networks only fd9eedce3 Add "host-gateway" to tests for extra_hosts / --add-host 365118982 Skip IPAddr validation for "host-gateway" string a0f0ed1f5 vendor: update go-events to fix alignment for 32bit systems de6a5fa44 Bump Golang 1.13.10 19ccd4f5d CI: update notary test certificates f8fc68f17 Bump Golang 1.13.9 22cbf9161 Update deprecation policy to 1 stable release 288cdec29 Include deprecation policy on deprecated features page ffffc1ed4 remove unneeded comment from reference files 9fd323afd Fix whitespace that caused short-format in generated YAML c936ea969 Fix yamldocs generator to accomodate nested subcommands d484456c2 Fix naming of reference docs files 6a02465f4 docs: update code-hints for compatibility with "rouge" 6e07d210a Update Golang 1.13.8 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: update to v19.03.12Bruce Ashfield2020-07-011-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping docker-ce to pickup engine and libnetworking changes as follows: docker: 62af9260f7 Bump version to 19.03.12 936779c56d Don't filter out registries to logout from with config file contents c5052816e1 Add MOBY_DISABLE_PIGZ to dockerd environment variable docs fcb50896d6 Split up environment variable documentation between cli and dockerd a8985be19b Fix broken link efc8054c3e vendor: docker/libnetwork 026aabaa659832804b01754aaadd2c0f420c68b6 (bump_19.03 branch) a01cfb62a8 vendor: golang.org/x/text v0.3.3 b6c18bda19 vendor: golang.org/x/text v0.3.2 5ff139ae19 Don't loose additional metadata fields c7821b2eff Bump Golang 1.13.12 80212697cc int-cli/TestRunInvalidCPUShares: fix for newer runc 6812565155 Use consistent name for errors 7df914b706 Bump Golang 1.13.12 42e35e61f3 Bump version to 19.03.11 f1aa3eed9f vendor libnetwork to 153d0769a1181bf591a9637fd487a541ec7db1e6 411bf397cb Bump version to 19.03.10 8c9977e182 ssh: avoid setting flags through hostname e002ed9b22 Fix bug with panic when DOCKER_CLI_EXPERIMENTAL environment variable is incorrect 9c06987b4f docs/extend: fix broken link and some markdown touch-ups e0305a0d5d integration: Add TestDaemonDNSFallback 0b5e7e9157 vendor libnetwork to 71d4d82a5ce50453b1121d95544f0a2ae95bef9b e18049ede6 hack: add more debugging to understand exit codepath 9b224f2a82 Dockerfile: bump CRIU 3.14 060380053a docs: fix broken link in dockerd.md bf5af5d807 Run e2e tests with different engine version on Jenkins Rewrite Jenkinsfile to new declarative syntax without parallel as the e2e framework is not tailored for than (container name clash, port clash,...) 9ff792b4b1 Add a new Makefile variable to override DockerInDocker engine version we use to run e2e tests ddc55e5dae Partially revert cf663b526a34f3e7911e6e60138138c2023aa844 as it breaks the version negotiation with an older docker engine. 830231a085 Bump Golang 1.13.11 09dc8edc28 Bump Golang 1.13.11 90e25f2053 Fix bug in gotestsum installer causing dependencies to not be downloaded a36b2dcf99 pkg/archive: escape ":" symbol in overlay lowerdir eef871ea69 Add 19.03.9 Changelog 08289ce2b7 dockerd-rootless.sh: bump up slirp4netns requirement to v0.4.0 e86a81ae52 vendor: update buildkit to a7d7b7f1 d64ef9e79f docs: more Markdown touch-ups 7a62f198f7 bump up rootlesskit to v0.9.5 085915af4b Update some uses of errors.Cause() to errors.Is() 6a461fe7db vendor: pkg/errors v0.9.1 dab9e682ae SELinux: fix ENOTSUP errors not being detected when relabeling 61b260f95e vendor: k8s.io/klog v1.0.0-2-g4ad0115 3e7fc6b34b docs: fix, and touch-up "docker context" docs 55cac16b19 Update dead link and add missing info on COPY 98b86525c7 config: don't call homedir on init() d4a9c8b0ff Bump Version to 19.03.9 9854078c74 logfile: Check if log is closed on close error during rotate ba985fa151 vendor: pkg/errors v0.9.1 b7053372f9 deb: use DEBIAN_FRONTEND=noninteractive for all dockerfiles 29f7b93a38 docs: update usage output for dockerd (19.03) 4105fc6eeb docs: fix order of flags in usage, and fix missing quote 9efc9eb996 Jenkinsfile: use docker/docker instead of docker/engine dc09faf67a Remove Ubuntu 18.10 "cosmic", as it reached EOL 229ba25b29 Add rhel for s390x f63e79f08f Add Fedora 32, remove Fedora 29 16cea5e8af CentOS: fix failing repository on aarch64 (arm64) 09b724c472 Fix CentOS 8 build 5f18965a2d Undo baseurl string replace for altarch d9d139d449 Add Support for Centos-8 d3673fb117 remove fedora 28 because it is eol 3a5d16fc01 Makefile: remove SOURCE_FILES, SOURCES variables 1807473253 rpm/Makefile: use DISTROS intermediate variable, similar to deb cd431fd2bd rpm/Makefile: remove parameterization of Dockerfile 6d5a139b67 Enable Ubuntu Focal in Jenkinsfile 782cbb1279 Add Ubuntu 20.04 Focal Fossa 3bfab8878a Add build target for ubuntu-eoan f1510b7e2e deb: add missing format version 02ec900b6e Update README to include Ubuntu 19.10 2a11310df0 deb: remove unused DOCKER_GOPATH variable eea48a1e84 Add LICENSE (copy of docker/docker's Apache-2.0 file) 4668185399 Makefile: chown engine dir during cleanup f957acd1a7 update list of reviewers in unir config 76caab9e0f Remove more remnants from image-based engine ca19008e19 Makefile: enable buildkit when building images 5084dc0eeb Remove some remnants related to image-based builds ec06e50ff4 Remove image-based build (for docker engine activate) a00d1a3e8c Dockerfiles: re-use DISTRO, SUITE build-args where possible 5137026e84 deb: Only recommend aufs-tools on amd64 ffd08c257e Re-order common env variables 5ad37075fa ADDED gomodules=off to docker-ce-packaging files b54abb7962 Update packages list c1b70372fa plugins: remove (now) redundant .gitkeep e04831b31a Dockerfiles: remove unused GO_VERSION beb28205b6 Makefile: rely on targets in deb/rpm 2b8e543708 rpm/Makefile: simplify and fix c6c1776bc3 deb/Makefile: simplify and fix 4e553fe39f builder: fix broken link 550ea4a513 [19.03] vendor: buildkit v0.6.4-5-g59e305aa 5bcd2b4368 docs: fix links, and minor markdown touch-ups 5d14c92bcf cli: perform feature detection lazily 0060d37eff docker build: check experimental --platform on pre-run 86b614aec2 app-214 Load Client info in getter function 1eae0fe109 fix panic on single-character volumes 63a0f1b5da vendor: bump gopkg.in/yaml.v2 v2.2.8 d0c4d1bb7d service update: fix service create example a2811833ab Add container_iface_prefix option to documentation b90b044e91 bump up rootlesskit to v0.9.4 33201484aa Update CRIU to v3.13 "Silicon Willet" 296f651e6c Use "buster" variant of Go images 1e9d8254a7 bump gotest.tools v3.0.1 for compatibility with Go 1.14 00802b8595 Bump Golang 1.13.10 4f45952397 Update Golang 1.13.9 10944a9554 Update Golang 1.13.8 ad04f7c12f plugins/buildx: force go modules to use vendor mode d5e9bda107 update vndr v0.1.1 c69ca2c5e7 bump vndr v0.1.0 to support versioned import paths 36c6db1980 yamldocs: add description to base command df84528c7a experimental/vlan-networks: markdown touch-ups 828d4770b6 docs/reference: explain "colon" aa6083444d docs/extend: reformat notes bfd17cb063 docs/builder: touch up markdown, and some minor rephrasing db5c1e4e51 docs/reference/run.md: touch-up markdown 5631277cc4 reference docs: reformat notes 299fb4e282 reference docs: fix broken links and markdown touch-ups 26605e5a3b Adding missing title in builder.md 838d67c5a0 Add clarification when using USER UID:GI c05754a365 [19.03] vendor: swarmkit 0b8364e7d08aa0e972241eb59ae981a67a587a0e d7b734a61f vendor: update go-events to fix alignment for 32bit systems d88786fb81 improve "network prune" output to mention custom networks only 62e46c2b66 Add "host-gateway" to tests for extra_hosts / --add-host 3199cd1856 Skip IPAddr validation for "host-gateway" string e9eeb762f5 vendor: update go-events to fix alignment for 32bit systems 870586b77d Bump Golang 1.13.10 2e46b1e331 [19.03] update libnetwork b9bcf0c3fba9ef8897c9676c5b70ba0345b84b17 650989cffa CI: update notary test certificates d68161f5ca Bump Golang 1.13.10 3f6cbafb87 api docs: fix broken link on GitHub 03a2b6f3e5 Fix TEST_FILTER to work for both "integration" and "integration-cli" 386205e278 [19.03] vendor buildkit b26cff2413cc6a466f8739262efa13bd126f8fc7 825df7e593 Bump Golang 1.13.9 5ceee878a0 Bump Golang 1.13.9 f9e55973fd Update Golang 1.13.8 6239c3658e Update Golang 1.13.7 (CVE-2020-0601, CVE-2020-7919) ca646694e0 Update Golang 1.13.6 5df7607049 Update Golang 1.13.5 ba70026a0f Bump Golang 1.13.4 5d41640c38 Bump Golang 1.13.3 (CVE-2019-17596) 0ce2031f1d bump golang 1.13.1 (CVE-2019-16276) 03ea68926d Bump Golang version 1.13.0 f2377417ee Update to using alpine 3.10 cdcca890cc Switch to s390x Ubuntu 18.04 330f0aec13 builder: fix concurrent map write 17a1f3f112 docs: add API versions v1.30 - v1.37 e83446f765 seccomp: add 64-bit time_t syscalls 7a88b57398 [19.03] vendor: containerd 481103c8793316c118d9f795cde18060847c370e 0adbd79f8a Update libnetwork and DNS library 30e89b9771 Update deprecation policy to 1 stable release d444120281 Include deprecation policy on deprecated features page 9ea6bbb5fe remove unneeded comment from reference files a1c631a95d Fix whitespace that caused short-format in generated YAML ee8847c1ae Fix yamldocs generator to accomodate nested subcommands 240eda98bf Fix naming of reference docs files c2de31670c docs: update code-hints for compatibility with "rouge" 3fe5e22b5d Move schema1 deprecation notice d071a64684 bump windows-container-utility aa1ba87e99b68e0113bd27ec26c60b88f9d4ccd9 773359a601 Dockerfile: switch to iptables-legacy to match the host 3b64f62c34 Dockerfile: switch golang image to "buster" variant, and update btrfs packages 0c599907a5 hack/make: ignore failure to stop apparmor 14461409c2 Dockerfile: align consecutive COPY lines f422d243fe Dockerfile: order COPY lines by change frequency 60af9b2b9c Dockerfile: sort packages alphabetically edc3150b30 Dockerfile: use build-arg for vpnkit c3939550e0 Dockerfile: use spaces for indentation bf61271ddc [19.03] Dockerfile: move CRIU_VERSION lower 30c60fc2a3 bump vndr v0.1.1 9ac5b25cb5 bump vndr v0.1.0 to support versioned import paths 21e7bfd059 Use build args to override binary commits in dockerfile c37bec6230 Revert "dockerfile: update vndr to 85886e1a" c7b33768a6 go-swagger: fix panic d69a049009 Dockerfile: set GO111MODULE=off 63369ad083 fix backingFs assignment 6bf8bed5fc Fix rate limiting for logger, increase refill rate 680fd72af7 Update Golang 1.13.8 194ea663d9 Set the bip network value as the subnet b9b1b0b8f0 AppArmor: add missing rules for running in userns 20666c2d62 AppArmor: remove rules for linkgraph.db SQLite database 64e3e12354 Use FILE_SHARE_DELETE for log files on Windows. af7196a03b Fix docker crash when creating namespaces with UID in /etc/subuid and /etc/subgid bb990f060a Fix more signal handling issues in tests. 188bdab73b DaemonCli: Move check into startMetricsServer 72f7e5a414 Add `FromClient` to test env execution libnetwork: 8565f0b1 log error instead if disabling IPv6 router advertisement failed 153d0769 bridge: disable IPv6 router advertisements fdaaa027 Resolver: fix error handling if we didn't receive a response b09f24d1 Fix NPE due to null value returned by ep.Iface() 8068671f Fixes a panic in the DNS resolver 536ae722 Dockerfile: update to Go 1.13.8 dcd95280 Fix gofmt in preparation of Go 1.13 update f0b038ea regenerate protobufs with debian buster 34c8de58 Dockerfile: switch to debian "buster" 96600117 Dockerfile: update to Golang 1.12.17 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: uprev 1.8.1 > 2.0.1Ming Liu2020-06-301-4/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updating to 2.0.1 to pickup bugfixes and security changes. The following commits comprise this update: a11c4ead1 Bump to v2.0.1 6a541f680 Merge pull request #6780 from mheon/even_more_201_backports f7b16d017 Update release notes with further v2.0.1 changes 8bb986137 Fix inspect to display multiple label: changes 2ad9dcc07 Set syslog for exit commands on log-level=debug 723a9e308 Friendly amendment for pr 6751 68543bbec podman run/create: support all transports c69ce171a systemd generate: allow manual restart of container units in pods 9de1581e9 Revert sending --remote flag to containers dc22350be Print port mappings in `ps` for ctrs sharing network 48ce67fb5 Merge pull request #6776 from vrothberg/2.0-vendor-common 6eefff647 vendor github.com/containers/common@v0.14.3 0b9143df8 Merge pull request #6758 from mheon/v2.0.1_backports 915f8698f Update release notes for v2.0.1 8e428fa4e utils: drop default mapping when running uid!=0 eb9fd40d2 Set stop signal to 15 when not explicitly set 6594d5d65 podman untag: error if tag doesn't exist 639b809c8 Reformat inspect network settings 01bc6bdda APIv2: Return `StatusCreated` from volume creation 1cc603c1f APIv2:fix: Remove `/json` from compat network EPs d26662484 Fix ssh-agent support d94644d35 libpod: specify mappings to the storage f425aede4 APIv2:doc: Fix swagger doc to refer to volumes ddf78b2ba Add podman network to bash command completions bfd303e16 Fix typo in manpage for `podman auto update`. 9a4517b37 Add JSON output field for ps 61bd64573 V2 podman system connection f81ad0058 wip cd0b18c24 image load: no args required 8fbfffc08 Re-add PODMAN_USERNS environment variable 0b4dcc7a3 Fix conflicts between privileged and other flags 7ea37dfe1 Bump required go version to 1.13 36d8b6979 Add explicit command to alpine container in test case. 03f952cfa Use POLL_DURATION for timer 07f535d8b Stop following logs using timers dbce3468e "pod" was being truncated to "po" in the names of the generated systemd unit files. 5d9ec1ce7 rootless_linux: improve error message 37abb88aa Fix podman build handling of --http-proxy flag 27120bfba correct the absolute path of `rm` executable 4af208142 Merge pull request #6711 from lsm5/v2.0-custom-GO_BUILD-backport 0ac4061bd Makefile: allow customizable GO_BUILD 13924bac1 Merge pull request #6695 from cevich/update_v2.0 bade38c32 Merge pull request #6697 from mheon/bump_v2.0.0 c866e584d Update release notes to reflect we are now v2.0 f458c5968 Bump to v2.0.1-dev eec482cae Bump to v2.0.0 64ba72363 Merge pull request #6694 from mheon/release_notes_2.0 5bda75cfd Update release notes for v2.0.0 89dbd1a91 Merge pull request #6674 from jwhonce/issues/6670 ed91524ae Merge pull request #6637 from jwhonce/issues/6574 ea8e61e4e Fixes #6670 bda4a6982 Correct logic for demux'ing channels 1a2eb3e61 Merge pull request #6677 from baude/pollOnEvents 33a602761 Merge pull request #6690 from vrothberg/fix-6687 f46664546 Poll on events for file reading bba433ed9 podman images --format json: pretty print 5ec29f8d4 Merge pull request #6684 from vrothberg/fix-ci 334d3b1ef CI: force registry:2.6 a2661b1c2 Merge pull request #6673 from ashley-cui/master 4dc934080 Fix remote docs e6b9b3ab2 Merge pull request #6656 from mheon/recursive_init 2e621aece Merge pull request #6662 from containers/dependabot/go_modules/k8s.io/apimachinery-0.18.4 1099ad6ac Merge pull request #6669 from vrothberg/unflake-rmi b20619e5b Allow recursive dependency start with Init() ec7822795 Bump k8s.io/apimachinery from 0.18.3 to 0.18.4 59cd8a0cf unflake rmi tests 3eb0ad04a Merge pull request #6663 from containers/dependabot/go_modules/k8s.io/api-0.18.4 ad33b2363 Merge pull request #6661 from containers/dependabot/go_modules/go.etcd.io/bbolt-1.3.5 b5f7afd04 Merge pull request #6658 from mheon/experimental_no_more d0b3035c3 Merge pull request #6611 from lsm5/fix-Makefile-for-varlink 5d161c8ca Bump k8s.io/api from 0.18.3 to 0.18.4 16dbc160c Bump go.etcd.io/bbolt from 1.3.4 to 1.3.5 6472b44c3 Merge pull request #6654 from rhatdan/keepid 6e410ede7 Merge pull request #6647 from rhatdan/caps 43ead88e8 Podman system service is no longer experimental fe69aa9ba Handle dropping capabilties correctly when running as non root user 7b00e49f6 Merge pull request #6560 from mheon/fix_exec_logdriver daabbc1a1 Merge pull request #6657 from mheon/bump-2.0.0-rc7 c385e6d36 Don't ignore --user flag in rootless --userns keepid 4b08d9ea5 Bump to v2.0.0-dev 5460ea87d Bump to v2.0.0-rc7 7b5073b46 Merge pull request #6655 from TomSweeneyRedHat/dev/tsweeney/b1_15_0 30c0fc9f1 Makefile: install.varlink needs to create dirs a76bf114d Merge pull request #6620 from jgallucci32/api-logs-separate 70f6cf7ff Merge pull request #6634 from baude/v2buildfixes fde8040fa Bump Buildah to v1.15.0 fd184fa4a Merge pull request #6522 from mheon/unless-stopped 585b14a9f Move logs functionality to separate file for APIv2 5694104c2 Merge pull request #6644 from jgallucci32/revert-log-follow d97b5b04a Merge pull request #6630 from ashley-cui/master 96b442172 Merge pull request #6641 from vrothberg/harden-units 6645e0d6f Merge pull request #6648 from vrothberg/vendor-image e5c343294 generate systemd: `ExecStopPost` for all units f29360648 Merge pull request #6631 from rhatdan/hooks 03e99c9b4 Revert #6591 to fix issue with failed tests ac4f4b148 vendor github.com/containers/image/v5@v5.5.1 6f1440a3e Add support for the unless-stopped restart policy 0e171b7b3 Do not share container log driver for exec 1acd2adcc Merge pull request #6640 from edsantiago/fix_flaky_logs_test 78ad57ebd Merge pull request #6636 from mheon/add_warnings 200afe7a9 Merge pull request #6583 from mheon/inspect_ctr_before_img 65c3a5660 fix misc remote build issues 38391ed25 Merge pull request #6622 from goochjj/podman_fix_init 6d5a432c2 "streaming output" logs test: fix flake 0d2b5532c Merge pull request #5852 from baude/v1prune 241326a9a Podman V2 birth 88c6fd06c Merge pull request #5837 from vrothberg/ignore 57f389728 Merge pull request #5848 from jwhonce/wip/options 8b178f12c Merge pull request #5839 from rhatdan/troubleshoot 1d93d2125 V2 Enable rootless 5def21140 Merge pull request #5842 from baude/v2bloat2 a8a61d976 Add SELinux volume information to troubleshoot.md 8c4d4b58e Merge pull request #5597 from sujil02/systemd-updates ba430bfe5 podman v2 remove bloat v2 c1bafb8b5 Merge pull request #5844 from baude/apiv2filteridfix e154249b4 allow filters to work when listing containers 8857ba20a Merge pull request #5835 from containers/dependabot/go_modules/github.com/containers/common-0.9.1 a037d9cd4 Update podman-generate-systemd man page 155a7d661 Merge pull request #5826 from cevich/gate_pip 09e821a8e Merge pull request #5690 from rhatdan/selinux 04e83f63a .gitignore: ignore v2 remote 084cfb81d Merge pull request #5834 from rhatdan/version 897847ccc Bump github.com/containers/common from 0.9.0 to 0.9.1 62803f8d3 Add version to podman info command d6b3bc18f Merge pull request #5752 from mheon/pod_inspect_structs c7d17613e Merge pull request #5827 from baude/v2bloat 0f7162d79 Merge pull request #5817 from rhatdan/selinux1 82ce9703e Add basic structure of output for APIv2 pod inspect 30d2964ff v2 bloat pruning phase 2 3500a8bc3 Merge pull request #5830 from baude/v2runtime c4ca3c71f Add support for selecting kvm and systemd labels 6e9622aa9 Merge pull request #5775 from sujil02/v2-container-prune ac94a96a7 Fix up SELinux labeling 195cb1127 Merge pull request #5671 from edsantiago/swagger-check 693a8039c Merge pull request #5776 from vrothberg/au bbc0c4a97 podmanv2 fix runtime assignment 97bded830 Merge pull request #5823 from mheon/update_readme_19 337e8d6d2 Merge pull request #5786 from containers/dependabot/go_modules/github.com/containers/common-0.9.0 e394ff407 Cirrus: Fix gate container build failure 2aca1b7f9 logformat: handle apiv2 results, add anchor links ef297d466 Merge pull request #5767 from edsantiago/logformat_add_anchors_and_apiv2 9b78bf929 Merge pull request #5770 from baude/v2events d522755b5 Update README to reflect that latest version is v1.9.0 cc9b78f07 Merge pull request #5820 from mheon/bump-1.9.0 ec4060aef Ability to prune container in api V2 4489440aa Bump to v2.0.0-dev d98572350 Bump to v1.9.0 37ed662f3 Merge pull request #5814 from baude/v2specgenprunelibpod 165aef776 podmanv2 events a756161e8 Merge pull request #5813 from baude/v2edtests2 ffcb99d83 Merge pull request #5818 from vrothberg/fix-nil-deref 123158e83 podmanV2: fix nil deref d83213634 test case added for image prune cache image 1e8e4bb33 note for skipping cache image added. 9dc9f5cf4 image prune skips images with child images. 714718794 v2specgen prune libpod 60dde457f More system test fixes on regressions f0b6cdede Merge pull request #5812 from jwhonce/wip/options d51727642 Add support for the global flags and config files ba26c763c swagger-check: new CI tool to cross-check swagger 0d01f09bf Merge pull request #5811 from mheon/bump-1.9.0-rc2 bf97e803d Bump to v1.9.0-dev 443aab15e Bump to v1.9.0-rc2 a6caae0b5 Merge pull request #5808 from baude/v2psformat2 01c5915a5 Merge pull request #5809 from mheon/release_notes_1.9.0_rc2 246ee9320 Merge pull request #5801 from baude/v2mount 548645e75 Update release notes for v1.9.0-RC2 1be617891 Merge pull request #5445 from sujil02/podFilter-new d1c26af14 apiv2 add bindings for logs|events e87fe4dbb Merge pull request #5550 from giuseppe/rootless-hidepid fea5f913e Don't include SUBDIR in windows.zip 1091440e5 rootless: fix usage with hidepid=1 68a5a85cc Bump github.com/containers/common from 0.5.0 to 0.6.1 fbe743501 V2 podman command bd9386dda Merge pull request #5542 from rhatdan/vendor 464a1cd48 Merge pull request #5540 from jwhonce/issues/5531 d66d54282 Merge pull request #5544 from baude/apiv2serveswagger c9c95a7e0 Merge pull request #5543 from edsantiago/swagger_fixes 52c835053 serve swagger when present f557cf91d swagger: more consistency fixes 67d0d1e50 Vendor in containers/buildah v1.14.3 45e7cbfef Merge pull request #5480 from vrothberg/auto-updates 651ddd356 Reduce CPU usage when --timeout=0 81005f463 New test: man page cross-ref against --help e89c6382a Add inspect for exec sessions 118e78c5d Add structure for new exec session tracking to DB f138405b4 Populate ExecSession with all required fields d9eb078e2 Merge pull request #5532 from baude/filetimeoutflake de43a00b5 Merge pull request #5533 from mheon/bump-1.8.2-rc1 f08b992f3 Merge pull request #5536 from giuseppe/avoid-conmon-zombie a6f5b6a48 podman: avoid conmon zombie on exec 15326f051 Filter pods through pod list api e9846b962 Bump to v1.8.2-dev c617484c1 Bump to v1.8.2-rc1 f3a28de32 Merge pull request #5528 from mheon/fix_master_vendor d47dc63cf Fix vendoring on master 14186ca28 fix timeout file flake bcdcfeb3e Merge pull request #5529 from mheon/release_notes_182_rc1 7c5ffe377 Update release notes for v1.8.2-rc1 83d2686f4 Fix vendoring on master 8f1ce4bdd Merge pull request #5524 from rhatdan/vendor f4e873c4e auto updates 68ef7aa4f Fix path of tmp_dir 9ef5d2875 Merge pull request #5449 from baude/manifests c4a62733a Merge pull request #5520 from giuseppe/make-warning-clearer 8081d9c74 Update containers/storage to v1.16.5 a255d7986 pkg/systemd: add dbus support cc57b88f7 config: make warning clearer 2b2996d09 Merge pull request #5515 from edsantiago/ci_sundry_small_fixes da17fbaad Merge pull request #5490 from containers/dependabot/go_modules/k8s.io/api-0.17.4 83c037c58 Merge pull request #5489 from containers/dependabot/go_modules/github.com/containers/common-0.5.0 300338478 Four small CI fixes: 67a985ddb Merge pull request #5514 from vrothberg/fix-ci bfa1ba588 fix systemd generate tests abbbeacd6 apiv2 addition of manifests 412a114d3 Merge pull request #5439 from ttys3/fixup-systemdgen-with-new-param 5288d112b Merge pull request #5252 from QiWang19/not-reset-tempdir 759ffb0a2 Merge pull request #5505 from tonybenoy/tony_typo 4e13ef58c Merge pull request #5476 from edsantiago/run_rmi_test_fix af1ac85da Merge pull request #5508 from baude/buildaddarchos 9ca4b6c6f add os|arch attributes when building 9128ef85c Missing double quotes in troubleshooting guide. 194723f31 force run container detached if container CreateCommand missing the detach param 8b07ad113 Merge pull request #5496 from baude/preemptive 16536af11 Merge pull request #5491 from containers/dependabot/go_modules/github.com/fsnotify/fsnotify-1.4.9 4f497991b Merge pull request #5327 from baude/apiv2hc c4a62733a Merge pull request #5520 from giuseppe/make-warning-clearer 8081d9c74 Update containers/storage to v1.16.5 a255d7986 pkg/systemd: add dbus support cc57b88f7 config: make warning clearer 2b2996d09 Merge pull request #5515 from edsantiago/ci_sundry_small_fixes da17fbaad Merge pull request #5490 from containers/dependabot/go_modules/k8s.io/api-0.17.4 83c037c58 Merge pull request #5489 from containers/dependabot/go_modules/github.com/containers/common-0.5.0 300338478 Four small CI fixes: 67a985ddb Merge pull request #5514 from vrothberg/fix-ci bfa1ba588 fix systemd generate tests abbbeacd6 apiv2 addition of manifests 412a114d3 Merge pull request #5439 from ttys3/fixup-systemdgen-with-new-param 5288d112b Merge pull request #5252 from QiWang19/not-reset-tempdir 759ffb0a2 Merge pull request #5505 from tonybenoy/tony_typo 4e13ef58c Merge pull request #5476 from edsantiago/run_rmi_test_fix af1ac85da Merge pull request #5508 from baude/buildaddarchos 9ca4b6c6f add os|arch attributes when building 9128ef85c Missing double quotes in troubleshooting guide. 194723f31 force run container detached if container CreateCommand missing the detach param 8b07ad113 Merge pull request #5496 from baude/preemptive 16536af11 Merge pull request #5491 from containers/dependabot/go_modules/github.com/fsnotify/fsnotify-1.4.9 4f497991b Merge pull request #5327 from baude/apiv2hc a95e9e5b4 Bump github.com/containers/common from 0.4.2 to 0.5.0 40ac4779e Bump k8s.io/api from 0.17.3 to 0.17.4 e7e5d125f Bump github.com/fsnotify/fsnotify from 1.4.7 to 1.4.9 e6fba1e44 eat signal 23 in signal proxy 2099643aa add apiv2 healthcheck code c9f148fb1 Merge pull request #5470 from containers/dependabot/go_modules/github.com/containers/storage-1.16.3 d586e16ad Merge pull request #5484 from baude/bindingsnocolor ac6c8fb68 Merge pull request #5482 from baude/removeimagefilter 9215eb033 Cirrus: Disable non-docs release processing 194759b96 turn off color-mode for bindings 3aa58ccd0 remove imagefilter for varlink remote client 925da7411 Bump github.com/containers/storage from 1.16.2 to 1.16.3 9c7481dbd Merge pull request #5474 from giuseppe/detect-containers-rootlessport-child-exit 235f36786 Merge pull request #5469 from giuseppe/no-size-create-container 358578087 run --rmi test: make it work 19f5d557b Merge pull request #5468 from Akasurde/5244_follow_up 647dc33e1 rootlessport: detect rootless-child exit 8741eb8a9 create: do not calculate image size eb2d0a228 Follow up changes from #5244 78e090092 Merge pull request #5458 from baude/apiv2eventslibpod 9cfcf5692 Merge pull request #5460 from edsantiago/man_page_xref 9bc27118b Merge pull request #5372 from sujil02/podstatus dbb3de990 Merge pull request #5459 from mheon/bump_readme_181 3d1bff6db man page cross-reference fixes: part 2 29c071d4f Update version in README to v1.8.1 da9d21635 Merge pull request #5457 from mheon/bump-1.8.1 216a6091d [CI:DOCS]Add libpod event endpoint 8877fed86 Bump to v1.8.2-dev Testing has been performed across x86-64/arm/arm64 via cli and podman-compose. Signed-off-by: Ming Liu <ming.liu@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: enable docker.socket instead of docker.serviceDan Callaghan2020-06-051-1/+1
| | | | | | | | | The docker daemon supports systemd socket activation. If we enable docker.socket (and not docker.service) then the daemon will be started when it is first used. Signed-off-by: Dan Callaghan <dan.callaghan@opengear.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* singularity: fix build with python3Martin Jansa2020-05-212-9/+151
| | | | | | | | | | | | | | | | | | * Fix python3native inherit added in: https://git.yoctoproject.org/cgit/cgit.cgi/meta-virtualization/commit/?id=a1e3f5c92cdee7c4259b7be643bd829ce7c1efa3 to actually work * also remove the work arounds for /usr/bin/python being python3 on the target device * I haven't tested this in runtime - I don't use it, it was just showing that do_configure error in "bitbake world" builds, the scripts might need some changes to be really compatible with python3, but it was broken already, now it at least builds * upgrade to new version with https://github.com/hpcng/singularity/pull/1762/commits/3c05f06e6a1c490a4b4714bcdf5a0ce2b2498bb5 would be nice by someone who actually uses this Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: fix compile failure on gcc10hongxu2020-05-191-1/+1
| | | | | | | | | | | | | | | Since oe-core is upgrading gcc to 10.1, there is a compile failure ... |../../../lxc-4.0.2/src/lxc/cgroups/cgfsng.c:2100:10: error: writing 1 byte into a region of size 0 [-Werror=stringop-overflow=] | 2100 | *slash = '\0'; ... Add gcc option `-Werror=stringop-overflow' to workaround the issue Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kubernetes: update to 1.18 release branchBruce Ashfield2020-05-111-5/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping k8s from 1.17 to 1.18 release tracking. Outside of the kubernetes core changes the kublete and kubeadm conf files have been removed from the main repo. We add the releases repository to our SRC_URI and copy them in the same way as we did with the existing reference files. A full changelog follows: fe3ac3e3883 fix backoff manager timer initialization race 25e2829552b Restore cache-control header filter 4f633afbdec kube-scheduler: compatibility with ServerSideApply ff43875cb67 bugfix: initcontainer wasn't considered when calculate resource request b03bb751c21 Revert "stop defaulting kubeconfig to http://localhost:8080" 7b6b53c8cbf Update CHANGELOG/CHANGELOG-1.18.md for v1.18.2 2913f32b21c Release commit for Kubernetes v1.18.3-beta.0 52c56ce7a82 Release commit for Kubernetes v1.18.2 5ca8d60f319 Fix Node initialization for GCP cloud provider b4c61594923 Simplify unregistration of csiplugin f2e37956203 Unregister csiplugin even if socket path is gone 1c73483c5de Move PSP tests behind a feature tag 34726e1b50d kube-openapi bump to release-1.18 f2de2d35086 Preserve int/float distinction when decoding raw values 6fb6533170d Fix GCE ILB for large clusters 4e644d0b484 Restore the ability to `kubectl apply --prune` without -n flag ea49e94be8a Fix client watch reestablishment handling of client-side timeouts 35235970cdf Fix priorityClass typo, add numeric priority to static pods 906513a06f6 Update CHANGELOG/CHANGELOG-1.18.md for v1.18.1 5dd22057dc7 Release commit for Kubernetes v1.18.2-beta.0 7879fc12a63 Release commit for Kubernetes v1.18.1 0d2cdc3b6d5 Test dropped round-trip annotations in HPA conversion 7909fe2d9f1 Drop round-trip annotations in HPA conversion 23c6b68f842 Skip updating cache on pod update if the node was deleted e9e1ea490f8 Check Annotations map against nil for ConfigMapLock#Update() f46ea4ddec9 Ensure Azure availability zone is always in lower cases 0dee03d1bd2 Even with build error, kubectl apply should apply all valid resources b427784213a fix: update max azure disk max count 7444c1e865b Ensure diff doesn't persist patches 4860841aa06 Fix CSINodeInfo startup 22f39eaae5f Wait for APIServer 'ok' forever during CSINode initialization during Kubelet init 1cf2fd183b7 Fix permissions for endpointslice controller b5470e1d649 Clean up event messages for errors. 26a2c61bf2b Allow list-resources.sh to continue if a resource fails to list 0c78c1e66e3 fix a bug where spn: prefix is unexpectedly added to kubeconfig apiserver-id setting 262bdad7b9d Adds integration test for apply failures when applying multiple resources 7e4d0319e3a Fixes problem where kubectl apply stops after first error 203b1ddfdf7 fix cpu resource metric type by changing to counter dd7fb533d03 fix concurreny issue in lb creation 1b15cefcc91 Kubeadm: fix Ready condition check bd9b7920920 kubeadm: add missing RBAC for getting nodes on "upgrade apply" ac62906c24d Check that ImageInspect pointer is not nil d2e35c7a6a7 Fix bug about unintentional scale out during updating deployment. 38eea6b3926 Update CHANGELOG/CHANGELOG-1.18.md for v1.18.0 5e251a7e39b Release commit for Kubernetes v1.18.1-beta.0 9e991415386 Release commit for Kubernetes v1.18.0 0630031f85b bump k8s.io/utils package dd342d7579d Simplify dual or single port logic 2ca708d2c2b fix kubectl port-forward for services with explicit local port 3c1d9790882 build/dependencies: Remove bazel WORKSPACE go_version check 374e61893b9 deps: Update to Golang 1.13.9 28a7bb5c7a7 build: Remove kube-cross image building e67d0822c96 Label Windows test as Serial. a98c208613e Fix the VMSS name and resource group name when updating VMSS for LoadBalancer backendPools. 0c34f5e431c bump k8s.io utils 3f81059b691 Do not reset managedFields in status update strategy bb673d80280 Use discovery to test apply all status cf790a8d209 Updating vendored files d28d6765656 Update vendored MountSensitive code for Windows d333dee452a add unit test for addTopology() fbbfad9f465 make filteredZones order predictable a3ec1a91bf8 Restore orphaning check in gc test d5444327df0 Update CHANGELOG/CHANGELOG-1.18.md for v1.18.0-rc.1 dbbed780668 Release commit for Kubernetes v1.18.0-rc.1 2d981b36c98 Fix isCurrentInstance for Windows by removing the dependency of hostname 8f07cdcc91e Revert "Cleanup CHANGELOG/README.md for release-1.18 branch" 7e5745380c9 Revert "Delete extraneous CHANGELOG-*.md files on branch." 2a095f434ba e2e wait until controller manager pod ready 1d84a6cb533 Add missing article in prominent release note 068963fc062 add testing d527a091927 add ExternalTrafficPolicy support for External IPs in ipvs kubeproxy efc4b121862 add ExternalTrafficPolicy support for External IPs in iptables kubeproxy df9a567f3f7 add feature gate ExternalPolicyForExternalIP for the bug fix 4d6af4d8d8f Set unschedulable Condition after setting nominated Node 334d46eed5d fix logging on e2e metrics grabber test 23c358d883b Fix unbound variable error in gce/configure.sh 4734543888c CHANGELOG: Update directory for v1.15.11 release 89532ac2f0f CHANGELOG: Update directory for v1.16.8 release ce88e65ddaf CHANGELOG: Update directory for v1.17.4 release c957b2509fd Bump Cluster-Autoscaler to 1.18.0 a68d712f129 Removing ConfigMap as suggestion for IngressClass parameters a35ca04dd66 Remove kubectl column output test e03385d6ac2 build/release-images.sh: remove possible duplicate targets 66491d2d892 Add tolerations with effect "NoExecute" and "NoSchedule" to allow schedule of nodelocaldns pods on node pools with taints 366dd4af44e EndpointSlice and Endpoints should treat terminating pods the same ced2948fdeb Remove wait.Until for running Kubelet Bootstrap 6be4d0a705b Bump Cluster-Autoscaler to cluster-autoscaler:v1.18.0-beta.1 4361f8f0521 wait until /metrics are ready on e2e test 462b75388f2 let image cache do sort on write instead of on read to avoid data 2c26e109b43 CHANGELOG: Update directory for v1.18.0-beta.2 release a9f834d17dc Implement noopWindowsResourceAllocator 21b51a1bb6c Update CHANGELOG/CHANGELOG-1.18.md for v1.18.0-beta.2 49dfa869048 Release commit for Kubernetes v1.18.0-beta.2 fa12441ab99 Preserve target apiVersion when decoding into unstructured lists ce3644ca593 Fix VMSS cache content c26653ced91 kubelet: Also set PodIPs when assign a host network PodIP b1c1187cca7 e2e: wait for controller manager pod to be ready e053fdd08ae Add NodeCIDR for detect-local-mode 6b8fc8dc5ea Move TaintBasedEvictions feature gates to GA d80981b6574 test: Detect flakes caused by container teardown races on CRI df58c042a8a metaproxier logging for endpoints ipfamily 23d9ffd4c8f Add metaproxier unit tests d8abacba40a client-go: update expansions callers 4c034278f4e client-go: add context/options to expansions methods e93c6a67d5a Use go-bindata built from vendor/ 04a72d5ef91 client-go metadata: update callers b7c2faf26c2 client-go dynamic client: add context to callers 4134494fa51 /readyz should start returning failure on shutdown initiation cb4ee9334b7 client-go metadata: plumb context 6fa54d715fb client-go dynamic context b19dc3a474e client-go dynamic client: update DeleteOptions callers 161b7513f73 client-go dynamic client: pass DeleteOptions by value d0890533a99 Updated files after rebase 73611a473ff Fix expected version for csidriver c6fd25d1003 Updated CSIDriver references 726af6bd7f2 Moved CSIDriver to GA 1e78fc0bf03 generaetd bac9351c646 refactor egress dialer construction code and add unit test fbb1fb8902c add metrics and traces for egress dials ef3d66b98bb Parallelize attach operations across different nodes for volumes that allow multi-attach 6fd748e2c56 exit if KONNECTIVITY_SERVICE_PROXY_PROTOCOL_MODE is set incorrectly 723761aa887 Don't try to create VolumeSpec immediately after underlying PVC is being deleted eb9cf777dce Disable HTTP2 while proxying a "Connection: upgrade" request 06abedb0631 Allow both GRPC and http-connect mode to be toggled 1bb6ed9bdc0 Checks error for loading audit webhook config to prevent panic 5231c6815c7 managedfields: Update Apply time if neither object nor managedfields have changed df41fd932be Bump sigs.k8s.io/structured-merge-diff to v3 7120abe6989 fieldmanager: Add failing test for no-op apply actually writing to etcd 39681aa5800 fieldmanager: Move ManagedFields update logic into its own class 76f85943787 more artisanal fixes aaf855c1e69 deref all calls to metav1.NewDeleteOptions that are passed to clients. c58e69ec791 automated refactor 86bd06c8820 update clients d9671045ff5 update client gen aee9fde751c Add e2e test for validating JWTs as OIDC tokens 1d7006c38d0 Add Extenders to scheduler v1alpha2 component config 912f05bafbb ingress: add alternate resource backend da988294ec5 Work-around for missing metrics on CRI-O exited containers c7b098ac6c2 Renaming: "Change" -> "Add" for consistency with underlying method 8a1b6032098 Fix queued request accounting, extended queueset test 1fab27502b2 Disallow use of Plugin or PluginConfig when using Policy 13fa48e5924 Disallow duplicate PluginConfig in framework creation af0e1319c35 Allow container visitor to operate on selected container types 8c35e32a402 test: Properly detect container runtime flake in e2e test bb318ea84aa Update to latest node-cache image e931e30647e ingress: allow wildcard hosts in IngressRule 7d86217043c Use the v0.0.8 network proxy images 834331088fa Use versioned autoscaling API group in code-generator examples 2cd6abece45 dynamic certs: pass valid object to event recorder 3bc918e4842 dynamic certs: use correct name with event recorder 86a5993007e dynamic certs: do not copy mutex via shallow copy of tls.Config 0551d408ace Bug fix for TM none policy b1329596875 Start adding tests for verifying correct modes 4baa1d967d6 Check for nil cpuManager 1f9b1af1adb Fix Bazel build 773b890b059 Show kubectl describe ingress error 4a4852ca9a1 Hopefully plainer test strings c52d4bf32f5 Implement changes into volume plugins for skipping chown 053baaf1437 Update generated files f7509d277ef Define new type for storing volume fsgroupchangepolicy 3ee30343cc1 Fix log formatting for skipper. "INFO" is already logged by Logf, and it wasn't in the format syntax. 8943e443e81 kubeadm: deprecate the flag --use-api for cert renewal bacc2c49605 Set field manager for kubectl diff --server-side. e8b09d36440 Add AnyVolumeDataSource feature gate 389dd0a499e Don't log "SHOULD NOT HAPPEN" errors more than once per second 167d6a2c8b0 Use the same default namespace across event recorders 8bc5cb01a9c kubelet: Clear the podStatusChannel before invoking syncBatch 8722c834e5e kubelet: Never restart containers in deleting pods 2364c10e2e4 kubelet: Don't delete pod until all container status is available ad3d8949f08 kubelet: Preserve existing container status when pod terminated 6d98b0a0f4f Test that an always-fail container can't report the pod Succeeded e5b655938e5 Add kubectl debug alpha command 9044fbfc5d7 Update VolumePVCDatasource to GA for 1.18 b93e3d18e9f fix scheduler.TestCoSchedulinngWithPermitPlugin and test scheduler.PermitPlugin 9fabafdbb11 Windows specific kubelet flags in kubeadm-flags.env - Uses correct pause image for Windows - Omits systemd specific flags - Common build flags function to be used by Linux and Windows - Uses user configured image repository for Windows pause image 61565b3f6c7 e2e-topology-manager: Wait for SR-IOV device plugin 212190e25e1 Utilerrors.Aggregate: Allow using with errors.Is() 98b9c7b5e8f Fix GCE PD snapshot flakiness 2e97d3c8732 Generalized NonResourcePolicyRule.NonResourceURLs impl 16d221e4078 Promote GMSA to GA 076132e38a5 cleanup: move the test of TaintBasedEvictions features to sig-node b2677b1e572 client-go: use klog.V(3) for the cert-rotation controller start/stop 5ceecd3ba3f Update agnhost to test OIDC validation of JWT tokens 401b85e547f Add FromFile and FromExistingClassName support for SnapshotClass in external storage e2e test db3392ed124 Always include remoteAddr in source IP list for audit (#87167) 3784438b566 Prevent CephFS from logging senstive options 548b297a003 Prevent AzureFile from logging senstive options 727582311f6 Fix MountError Test 22e8189f40f Update dep k8s.io/utils to 0a110f9eb7ab f38904d6f48 Adding PathType to Ingress 9dcbc0bf909 update override behavior for kubectl --tls-server-name 02cd65d7bb5 Squash pkg/describe/versioned/ into pkg/describe/ 37c81ed79ac Support TLS Server Name overrides in kubeconfig file 07dc17ffd9a Provide more verbose empty config error based on the context 6de140567b3 Changed kubectl cluster-info dump to not display "Cluster info dumped to standard output" message when output is stdout 472a9352943 Update Cluster Autoscaler version to 1.18.0-gke.0 413960e49be cleans up dynamiccertificates package 4144a2a1cf5 Add unit tests for IsKubeletClientCSR and IsKubeletServingCSR c2367bd5da6 Extend client-go csr package to invalidate CSRs based on signerName ef5c9203259 bandwidth: use regexp to handle tc output fix newly-added 'chain N' output from 'tc filter show dev XXX' c77b297babc Hide kubectl.kubernetes.io/last-applied-configuration in describe 9dac1699bfd Wire --filename flag to exec 49b11b5431d Implement simple endpoint slice batching f535a9c9ed4 Make some metrics finer-grained, add dispatch counts, note immediate reject 81f46b64a35 add a new generic filter goaway 9902021ccd0 Fix a PodTopologySpread e2e flake 2a98cb7f8b2 Use GRPC mode for network proxy 3af671011ad Generated API 674e539fcad test/e2e/framework: remove dependencies to internal APIs efe35b9a9aa move eparis and zmerlynn to cluster/ emeritus_approvers 904c2d8bc0a add bentheelder to cluster/ approvers 83a223f5ee3 Support intermediate certificate in certificate store 60da52a24ab Honor status.podIP over status.podIPs, node.spec.podCIDR over node.spec.podCIDRs 73ad38593a0 Add default constraints to PodTopologySpread 0989770135c Update network proxy to v0.0.7 b19ad9e7a78 stop defaulting kubeconfig to http://localhost:8080 929b1559a0b Add ReloadCertFromDisk flag to rest.Config and to kubeconfig which allows the provided client certificate files to be reloaded from disk (currently on every use) 1ede096465d Enable topology-manager-e2e tests to run on MultiNUMA nodes. 4abbce4549e Refactor CPUMananger-e2e-tests so that it be reused by topology-manager-e2e-testsuite. 09598d48f65 Improve plugin args JSON tags f96c75bca29 Bump csi-driver-host-path version to get fixed block snapshots a4b59a5d7c1 Currently SRIOV detection logic is reporting error if it fails to detect SRIOV device on the system. This patch aims to fix the same. 1cb42445d76 hack/update-vendor.sh dbe84361440 Replaced uber atomic with sync atomic, removed unneded "blank import" 104db4f01b2 Fix block snapshot tests afcbb683865 Fix unit test to fail with proper final gRPC code 85367871333 Add unit tests c11427fef5b Call NodeUnstage after NodeStage timeout f6fc73573c7 Call NodeUnpublish after NodePublish timeout 86a5bd98b64 Add uncertain map state to block volumes da3c3432d83 Add context and options to scale client e8538d9b76a Add mutex to Topology Manager Add/RemoveContainer This was exposed as a potential bug during e2e test debugging of this PR. 1e613e5a4c0 Update TopologyManager Feature Gate: - Alpha to Beta. - True by default. - Remove redundant validation checks. b60c0b5c24a small cleanup for ipvs readme e79f49ebba9 validate configuration of kube-proxy IPVS tcp,tcpfin,udp timeout 132d2afca07 Adding IngressClass to networking/v1beta1 4c54241c3df Support token authentication for network proxy b5cdb6e6cb5 test/e2e/:remove // TODO: write a wrapper for ExpectNoErrorWithOffset() b63be6a46da test/e2e/framework/service/:simplify function CreateTCPService f92c55a4769 Make sure we fail the job and log more details when it does bdea23380ba Move conformance image to debian:stretch-slim 7f270038d3c Remove unused function aggregateGoroutinesWithDelay 0f4cfe58d8e Switch to UpdateVMs() for updating VMSS backend address pool c0bad80e5b4 Factor-out metrics related logic from authentication logic. f205e3dd596 Use only v1 CRD resources in e2e tests 9bfe818229e Fixed golint issues in RBD code 4ea52da628f Remove prometheus references from pkg/controller/endpointslice 2af26dca978 Add UpdateVMs() for VMSS client to allow update multiple VMSSVMs by sequential sync requests and concurent async requests. 3eec87cd915 update WithPlugin comment, in case remove function b67a033de22 Refactor: move generic functions of integration test to util directory c6b94e4606f refactor volume binder aa12e1f8c42 e2e_node add test for PodOverhead feature 002c75442d7 storage: confirm that paging and predicate filtering work together 61fa4e6c098 Address comment and remove if condition 7b214c96b01 Hide deprecated --server-dry-run for kubectl apply 7638aae77ee Update README.md 10049500c18 Update README.md 2c1b7437669 Promote block volume features to GA 3fbb549fb7f Promote the egressselector API to beta aa07992a441 update kube-controller-manager and kube-scheduler to match kube-apiserver defaults 2f5468f1ae5 update map keys api doc with validation requirements 5b3b4de972c scheduler_perf: do not override throughput labels 2e187415fd5 extend CRD map and set validation be6ac856f13 Deprecate --generator flag from kubectl create commands cb477d3cc17 fix: remove conflict comment of taint "Value" 347d8419488 Bump CSI hostpath driver 06062b15e96 test images: ARG instructions should be first 2e7ce8cea01 bazel update 6329b17d2f6 volume scheduler: introduce special string type 6eb0b034ac9 volume scheduler: move reason strings into volume code 21f78f33487 Added non-randomized tests of matching FlowSchema rules ce30d2d5c85 test images: Skip building manifest list if no image was pushed cd57b830c14 audit webhook use network proxy 1b38199ea8b pass Dialer instead of egressselector to webhooks d318e52ffe0 authentication webhook via network proxy 97e8bf5f84a Fix default regular expressions in conformance tests runner e398302dc77 Add OWNERS and testing to external extender/v1 api 711c1e17209 Rename --enable-inflight-quota-handler to --enable-priority-and-fairness. ccd9e4e2de3 Don't save managedFields if object is too large 57ea7a11a64 Remove global variable dependency from runtimeclass admission 991909fdfbb PodOverhead: remove feature gate override in tests 4637991632d Update PodOverhead feature gate for beta 18ffaf56084 Move scheduler extender API V1 to staging k8s.io/kube-scheduler d5dae048983 certificates: update controllers to understand signerName field d7e10f98697 Add Certificate signerName admission plugins da8453af6eb fix unsupported bug 567cb6c6050 fix: azure disk remediation issue acf84351e42 test images: Rebases nautilus and kitten images 117cbda4870 Image Promoter: Allows images to be pushed immediately after being built a983356caa9 Add signerName field to CSR resource spec fb7209486e2 fix: azure file mount timeout issue 11656478be9 register metrics from comp-base 1f9f2390cb5 Add block cloning tests 2327934a860 Rename GetTopologyPodAmitHandler() as GetAllocateResourcesPodAdmitHandler(). It is named as such to reflect its new function. Also remove the Topology Manager feature gate check at higher level kubelet.go, as it is now done in GetAllocateResourcesPodAdmitHandler(). e26fff5cbc2 Update to golang@1.13.8 a9c61295779 Device Manager - Update unit tests - Pass container to Allocate(). - Loop through containers to call Allocate() on container by container basis. cb9fdc49db8 Device Manager - Refactor allocatePodResources - allocatePodResources logic altered to allow for container by container device allocation. - New type PodReusableDevices - New field in devicemanager devicesToReuse 0a9bd0334dd CPU Manager - Updates to unit tests: - Where previously we called manager.AddContainer(), we now call both manager.Allocate() and manager.AddContainer(). - Some test cases now have two expected errors. One each from Allocate() and AddContainer(). Existing outcomes are unchanged. 467f66580b9 CPU Manager - Add check to policy.Allocate() for init conatiners If container allocated CPUs is an init container, release those CPUs back into the shared pool for re-allocation to next container. 709989efa2a CPU Manager - Rename policy.AddContainer() to policy.Allocate() 0d68bffd03f Change GetTopologyPodAdmitHandler() to be more general b6b60f7fa50 test images: Temporarely exclude Windows test images c57f20b7129 tests: Replaces dnsutils image used with agnhost (part 4) 2543598628d Fix etcd issues on ARM b2528654797 kubelet: Avoid sending no-op patches ef786c9fa2d Setting a Pod's nodeAffinity instead of setting .spec.nodeName directly 505dff6d20a Fixed in the GCE/PD in-tree volume logic to expose the max number of persistent-disks for each instance type correctly. 517a41fe849 Fix an "index out of bound" issue in scheduler preemption e2e 7346579a032 Update etcd debian base image to v2.0.0 e64169d6b51 build: Enable kube-cross push/pull from K8s Infra GCR bb0d9c9f239 build: Add justaugustus as reviewer 23b69a97c6d build: Add OWNERS on build-image/ ee00896712c add support for single stack IPv6 fd5b298c508 Test PodTopologySpread.PreScore instead of internal pre-processing. 0e46803e778 Test PodTopologySpread.PreFilter instead of internal pre-processing. ca5d394f6a2 fix the coredns preflight check for unsupported plugins 10805e04522 [refactor] fold PreemptionExecutionPath into the existing top-level SIGDescribe e8245d6fd91 Add unit test for framework plugin configuration 79680b5d9bf Fix pkg/controller typos in some error messages, comments etc 07c4982245f Add unit and integration tests for multiple profiles support bf605043653 fix import formatting in gce_utils.go 2a056134809 gce: remove duplicate patch service method ed0e0350854 Add documentation around plugins b342818361f Add CHANGELOG/CHANGELOG-1.18.md for v1.18.0-beta.1 c431b5444a6 Update CHANGELOG/CHANGELOG-1.18.md for v1.18.0-beta.1 f2d7577e318 Release commit for Kubernetes v1.18.0-beta.1 5a6435ad768 fix: corrupted mount point in csi driver d71829a1fc3 e2e: avoid setting NodeName for CSI driver deployments 7d59ea8394e Reorder conditions in FindMatchingVolume to avoid checking NodeAffinity in trivial cases. c80dcf56ee2 Ensure webhook/quota/deny admission comes last 6a337276323 Adding AppProtocol to Service and Endpoints Ports 2bcf99f05fd Improve rate limiter latency logging and metrics 7b2a0a42601 update bazel 5da37d5b5ef Fix a scheduler e2e bug on PodTopologySpread scoring c6c0bb254af Update version of GCE PD CSI Driver deployed in tests 33ef66b9275 Updating OWNERS for Windows+Azure tests d44d5b35f3d Add show-hidden-metrics-for-version to kubelet 8cb84feef3d test images: Updates agnhost guestbook ea45da7e52a apiextions: add list-type: map|set CR validation 23340d7522c [UseNetworkResourceInDifferentTenant] Fix bug of setting incorrect subscription id on azure network resource clients. 7e1ec59fe2e Remove AlgorithmSource from v1alpha2 c0488584712 Support multiple scheduling profiles in a single scheduler 08473a49497 remote patch.go and patch_test.go files bd8ed0a2a7d Add BenchmarkSchedulingWaitForFirstConsumerPVs benchmark 98df9d9db60 Make sig-scalability reviewers / approvers of cluster/gce 6739bde9ca1 Create OWNERS file for cluster/log-dump 34206a610a1 Don't rely on contents of optional Condition fields in CSI mock test 1c0a78a4fdb Use servicePatch methods from cloud-provider repo in service-controller 60f3ebe6b54 Remove alpha feature test for EvenPodsSpread c261d12bbf7 kube-proxy: fix confusing default value for healthz and metrics bind address, deprecate healthz-port and metrics-port flag bdc54eb18a5 Use compute v1 api to specify network tier d578c02975b Fix pkg/registry typos in some error message, variable names etc a3f6627ce80 scheduler: deprecate deprecated metrics in 1.19 388ebfe7d0e append_or_replace_prefixed_line in /cluster/gce/gci/configure-helper.sh fails for prefixes that contain quotes and = sign. 45d69b3a5a1 test: don't use hardcoded pod count for memory limit test 2683b1065c0 Update the conformance list and doc generation logic cb12e8a059b update corefile-migration library to 1.0.6 a980cb7ead3 update coredns to 1.6.7 886214f48c6 Fix recent context change after rebase 4eb06577dc5 Fix golint issues for `core/v1/validation` 63ff616aa8d Adding Windows CPU limit tests 19acf7d0515 Fix cpu resource limit on Windows b50f60c98fd scheduler_perf: allow to override the default benchtime 0f3e0b40f68 scheduler_perf: describe how to run BenchmarkPerfScheduling manually 9e71741d066 Add Profiles to kubescheduler.config.k8s.io/v1alpha2 1b710a4c56c kubeadm: modify how component volumes are printed 0f31bef94c4 Default grace period to 0 when --force is used to delete an object 87d0e826c15 Remove the unsupported CloudProviderBackoffMode from Azure cloud provider config. a8c41ae5fb9 Deprecate service annotation service.beta.kubernetes.io/azure-load-balancer-disable-tcp-reset 109f5db5a33 kubeadm: allow creating a cluster with ECDSA keys b38ed0467f9 Support cluster using network resources (VNet, LB, IP, etc.) across AAD Tenants. 64c4876ccd0 Add e2e session affinity timeout test e268f033b67 Revert "Mark session affinity tests as [Flaky]" 457c05feb87 deflake e2e session affinity tests 2e23f847458 kubeadm: fallback to a known etcd version if an unknown k8s version is passed 0e3b7a7aea3 fix test failure e5bb6af4756 fix: add remediation in azure disk attach/detach 8c633356df9 move well known cloud provider taints to k8s.io/cloud-provider/api b873cbbed58 Fix: pkg/apis Typos in comments, function name, error message 5362e8b6cb1 Fix initialization bug in `FakeImageService` ed9492ad69f use ControllerClientBuilder from k8s.io/cloud-provider in cloud-controller-manager 8067dd84700 kubeadm: fix the bug that 'kubeadm upgrade' hangs in single node cluster fdec0ee1214 tests: Create pod for Windows test a6dc7ba1387 Add release-1.18 publishing rules d10e3da92d3 Fix typos in some error messages, comments 0acaf5c3e93 Fix kubectl describe ingress annotations not sorted 5db45e12d54 fix kubectl create deployment image name ea5bea2b9fc Respect ignore-volume-az option in admission plugin 190a72392ae Refresh discovery server resources for memCacheClient in parallel 78b18ed6f4e Swith to mock clients for route/routetable/networkinterface tests 8c6956e5bb4 Refactor handling of local traffic detection. a54a52c5de3 Enable field management for all new objects c811fc58ef0 check ip family for node port connectivity test 684d6fb0ade Instrument DEK cache fill and request inter-arrival times. 68b7564e7ee fix alias for stack protector kernel config. 1d896db61cc e2e-scheduling: add basic PodOverhead test 2568b552c84 Fix aws provider to return no error when instance is not found for InstanceExistsByProviderID cd5cf567d88 Avoid adding labels to nodes in CSI mock driver c20e6043777 Revert "log-dump.sh: allow to dump extra log files" bb0a5ab016b tests: Fixes Hybrid cluster network test 4cb28f64ea2 Fixes for the `No ref for container` in probes after kubelet restart 7c3f6fa3234 test/e2e/framework/node/:remove TODO and make some functions private 91dc590cde7 test images: Adds building README b71fbdb3643 Image Promoter: Adds Windows build nodes for Windows test images fe15a46939c test images: Use multiple Windows nodes to build images 3cdb7a89cbb test images: Adds multiple Windows channels support 296464d968b test images: Adds Windows support (part 1) a4ceb143ddb images: Changes the image naming template 25b7a138644 images: Configurable BASEIMAGE hierarchy efcdb929dec images: Adds linux/ prefix to BASEIMAGE entries 22a5fbcfa98 test images: Bumps image versions e5760015d20 e2e-framework-node: add runtimeclass to dedup code 54be6ca6794 Update API doc for feature PodTopologySpread (a.k.a EvenPodsSpread) d44a30f0edd Moving Windows RunAsUserName feature to GA f90726a6a6f fix get-kube authorization headers 86ead631585 update golang.org/x/crypto 78e98da1dbc test/e2e/framework/log: optimize PrunedStack() d798ccbba16 Add tests for egress selector a980a1fa24b Add e2e test to test Except clause in NetworkPolicy 907ab25b6fc vendor network proxy client 55b89a6451d Support empty root CA for konnectivity 725d2b6a8fd Network Proxy: GRPC + HTTP Connect with UDS 64904d0ab8b e2e: topomgr: extend tests to all the policies bdc4e2fd17d Support injecting errors for `FakeImageService` c43b9405860 log-dump.sh: allow to dump extra log files 03ecc20b199 empty_dir: Check if hugetlbfs volume is mounted with a correct pagesize 3e59a0651f1 kubeadm: optimize the upgrade path from ClusterStatus to annotations b140c5d64b5 kubeadm: remove `ClusterStatus` dependency a249b93687a e2e: topomgr: address reviewer comments 44e6a506b9b fix: check disk status before disk azure disk 97fc3e6139f Fix typos in apiclient util e6b9a7a3098 Fix golint errors in pkg/controller/garbagecollector aecce98a542 wait for pruned CR to be invisible from API e2c733a702e test: export a fake Azure cloud Via the exported GetTestCloud(), we can reuse the code for the unit tests in Azure related CSI drivers. a9ec444d743 Add --dry-run to more kubectl commands. ad8bf3c1397 kubeadm: do not pin unit tests to a version 22319019abc kubeadm: update constants for 1.18 98ad7416faa Start deprecation process for StreamingProxyRedirects fdd7424d191 add logging for csr being approved and issued. 74718adf109 fix data races for other usage of Q 92759ea6429 NetworkPolicy e2e test should wait for Pod ready 833519f80b6 e2e: topomgr: properly clean up after completion 7c12251c7a6 e2e: topomgr: add multi-container tests 8e9d76f1b95 e2e: topomgr: validate all containers in pod ddc18eae67c e2e: topomgr: autodetect NUMA position of VF devs 0c2827cb504 e2e: topomgr: remove single-numa node hack bb6beb99e5a e2e: topomgr: early check to detect VFs, not PFs 882d6e93afd Implement tests for multiple sizes huge pages 0eb65bd7da2 Implement support for multiple sizes huge pages 76847b3a6eb Cleanup CHANGELOG/README.md for release-1.18 branch b410f77d314 replaced tokenaccessreview with tokenreview 7e33feec572 fix data races in scheduler unit tests a024ac14ef1 Add init containers to dump info 0ec85320cff podlogs: include node name in prefix f85e079147b optimize kubectl version help info a1523a049ff homogenize metrics naming 6d3a18b0be4 test images: Image Promoter sed fix da6f89217d3 adding response headers f7942290af0 tests: Replaces images used with agnhost (part 4) 7f56c753b31 Make MetricCollector configurable for scheduler benchmark tests 5b7ae34eada Switch EndpointSlice to use discovery v1beta1 api fdefdff2225 add delays between goroutines for vm instance update 1208bc34c4e kubemark: move a channel send out of critical section d9f7a1f3114 Don't call delete for already deleted volumes af9e0be163a kubelet: Record kubelet_evictions when limits are hit ae0e1b0ca29 Update default cos image to include runc-1.0.0-rc10 b757ca16e2b Add more E2E tests for the ../poddisruptionbudgets endpoint 89bb7d84541 Honor the RevisionHistoryLimit in StatefulSetSpec d221d82eaf3 run permit plugins in the scheduling cycle ca399e63157 Add a README describing behaviors b7dcc4ac298 Release commit for Kubernetes v1.18.0-beta.0 fac4a09f9ee Delete extraneous CHANGELOG-*.md files on branch. c8377ef7dbc Add BuildArgs to interpodaffinity plugin 0dfe0c793b5 rest: remove connection refused from the list of retriable errors 6846a0a6b62 Implement ItemBucketRateLimiter 9eb45d22a43 Fix wrong alpha version for ValidateProxyRedirects fd81f04036d Update Go modules 1ade9476980 chore: move caches to a separate package b6511788491 fix incorrect configuration of kubepods.slice unit by kubelet (issue #88197) 70a28579988 test/e2e/node: fix selinux test failure e77df88200f Present more concrete information about pod readiness 119f4df9c5c test/e2e/framework:remove unused code and move const a31ccc7b99b kubeadm config images list: test structured output 23e4d05083b kubeadm config images list: implement structured output be7e5b47fe2 kubeadm config images list: update output API 9c8d4bedccc test/e2e/framework:remove TODO and make func private 073d0b23407 Add getPublishDir and getVolumePluginDir 51d44af1866 Fix route conflicted operations when updating multiple routes together 53cda47913f update bazel configuration 6a773fb9c2d fix: update max azure disk max count 8fd0d8028fe Remove `FilteredNodesStatuses` argument from `PreScore` interface d97169f59ad Clean up --dry-run values. c93dffdfc44 E2E tests for PodTopologySpread 5fcd9c7c7ec Error if --local and --dry-run=server are passed 4454ce6f373 fix shellcheck failures in health-monitor.sh d827f2634ac update stale pause image comment 8ba86728e3d bump pause to 3.2 in kubectl test data 53da837872a bump pause to 3.2 in hack/ 3fb71832153 bump pause to 3.2 in test/ 583f804652f Do not dereference qcAPI which maybe nil 2fd62ad72ad added nodeSelector to constrain it to Linux only 0e178f93414 rename to sharedLimitWriter 1631825e447 bump pause to 3.2 in kubelet a00a1e39ef6 bump pause to 3.2 in kubeadm 12abf03f6b4 Shrink mutation detection critical section b142868eaf4 Version the API Priority and Fairness FieldManager values 51120d133ce Report scheduler_perf integration test kube-scheduler metrics into artifacts dir 6068ce96b1f fix: get azure disk lun timeout issue c1383e99af5 Add deletion interfaces for VM, VMSS and interface clients bb770c0325a e2e: getCurrentKubeletConfig: move in subpkg 8b825d15111 Add show-hidden-metrics-for-version to scheduler a20ae3953b5 Remove optional from core docs for 'Type' (#88029) 932500c0151 Remove deprecated rolling-update command 3342e4a09a9 Extend CPUManager e2e tests to run on MultiNUMA node with/without HT 6e933199c9e Change line terminators from CRLF to LF c83a860e9d8 Fix a bug in e2epod function a4e4a994352 Remove PodBackoffMap ef8627c95e0 Construct http Request using http.NewRequest 0da08ffd6a6 Updated test cos image to include runc-1.0.0-rc10 becc4b7d57f remove unused manifest-tool rules 20b1597302a switch pause to docker manifest instead of manifest-tool fc5b08569f2 Create an OWNERS alias for net-driver-approvers 719b3286635 add a changelog note for pause 3.2 b6bdf5172e3 Update Abdullah as the scheduling feature approver a4230055f36 address review feedback bcd975aa657 Replace Beta OS/arch labels with the GA ones c0580730469 Add a event to PV when mount fails because of fs mismatch efec7e64ce0 remove TODO and use framework.SingleCallTimeout 99bda6fac09 Remove HardPodAffinityWeight from v1alpha2 55b687054d5 Fix updated pod NetworkPolicy e2e test 666bc6aeb42 Scheduler: Exclude plugin config for empty policy arguments 53fce7641fb OWNERS(releng): Remove aleksandra-malinowska from Patch Release Team 5643280438d OWNERS(releng): Add Branch Managers to release-engineering-reviewers d6fcc224f17 kubectl cluster-info dump: use file extension according to output format e42940a67b4 CHANGELOG: Update CHANGELOG-1.18.md 6729bfd648b use network proxy for proxy subresources 7b5534021ce Collect some of scheduling metrics and scheduling throughput 15bc88785a3 test/e2e/framework/util.go:make function LookForString private 08ba240c6bb e2e: e2e_node: refactor getCurrentKubeletConfig 0bd2e629c73 Fix unit tests e2d8e575f04 Add CSI block volume directory cleanup c78c0e949d3 Remove unnecessary calls to GCE API after PD is created. 528adbefe4d Remove client cleanup from TestCleanup 7f9e228bd75 Fix impossible condition in test/e2e/framework/resource_usage_gatherer.go c099585b10c Add CHANGELOG/CHANGELOG-1.18.md for v1.18.0-alpha.5 13b80b48cd0 Use --dry-run=client,server in kubectl. e8f67d122f8 Fix gce-cos-master-reboot test 3072f9080ef update pause to 3.2 since we changed the build 5782d616f2f Move skip method from e2e fw ginkgowrapper to e2e skipper fw aa4113d777d Set up connection onClose prior to adding to connection map d61e90b0eeb Separate containerd install from config, and other cleanups 81668cb8871 Change migrated-to annoation key to follow best practices by removing beta and using 'pv' prefix 8ff6b24c573 Don't show flags in api-versions help f5b7e3cca35 Rename `PostFilter` plugin to `PreScore` cc32702e8fa Add ephemeral containers to streamLocation name suggestions 0368a7d5f7a Fix example of kubectl config set-credentials 0421b40d795 Remove tautological condition in test/e2e/framework/pod/resource.go 6a487723eda Make Azure clients only retries on specified HTTP status codes c048fb19fc4 Initialize http Request Header before RoundTrip to avoid panic d9184b75c99 Convert volume.TestConfig to use NodeSelection 76a4a34dae9 Pass NodeSelection directly into e2e testsuites so that tests can use them more consistently 242e3ebf01d Add buffer for GC resync retry to GC e2e tests fb9f02b5e11 Don't set NodeName directly in Pods so that it still goes through the scheduler 0ba58915194 kubeadm: update embedded CA in kubeconfig files on renewal 5a176ac7724 Provide OIDC discovery endpoints 06fad92509d Add CHANGELOG/CHANGELOG-1.15.md for v1.15.10 1653476e3f6 proxier: use IPSet from k8s.io/utils/net to store local addresses 77feb1126e4 userspace proxy: get local addresses only once per sync loop 126bf5a231c ipvs proxier: use util proxy methods for getting local addresses 313c3b81e3e iptables proxier: get local addresses only once per sync loop 9e5a06c3edd update vendor k8s.io/utils to 5f6fbceb4c31 e3ab253cd81 Add CHANGELOG/CHANGELOG-1.16.md for v1.16.7 888a322d9ca Round times to nearest second before sorting f26dbc473d1 Avoid running docker specific test in containerd 5e94cccf5c3 Add CHANGELOG/CHANGELOG-1.17.md for v1.17.3 a657d51ce35 Lower server-side apply percentage to 10% 89066cceb92 Add RegisterPluginAsExtensionsWithWeight ca81235f241 Fix serializer test c27fb4bad6f dump docker image list 2430c48c104 Delete pod in volume tests 9cb7f54c0b6 fix: add azure disk migration support for CSINode 11263bb57f9 kube-proxy filter Load Balancer Status ingress fb895056c65 Add test 73614ddd4e4 Added API Priority and Fairness filter and config consumer 8f764b113e9 Support for adding test-handler for containerd fe312ed74af add index for pod cacher 01328ae291f add roycaihw to reviewers in apiextensions-apiserver 1ee35e788e2 Use NodeSelector instead of NodeName in hostexec Pod so that the Pod runs through the scheduler 09121d96861 Add missing tag to vSphere storage E2E tests 70cce5e3f13 e2e: topomgr: introduce sriov setup/teardown funcs 2f0a6d2c764 e2e: topomgr: use constants for test limits fee1dba0542 e2r: topomgr: improve the test logs 83c344647f5 e2e: topomgr: better check for AffinityError 512a4e8a3e2 e2e: topomgr: reduce node readiness timeout 3b4122bd038 e2e: topomgr: get and use topology hints from conf d9d652e867d e2e: topomgr: initial negative tests ee92b4aae02 e2e: topomgr: add more positive tests 1b5801a0869 e2e: topomgr: add option to specify the SRIOV conf 6687fcc78c1 e2e: topomgr: autodetect SRIOV resource to use fa26fb68179 e2e: topomgr: check pod resource alignment cd7e3d626c5 e2e: topomgr: add test infra 1fdf2621378 e2e: topomgr: explicit save the kubelet config 5954f34ade6 migrate authenticator and authorizer to Create 119f2208324 remove authn/z.CreateContext expansions c049f30ef2a Pass context to tryAcquireOrRenew 8a3f587b049 Add fast path to node authorizer for node/edge removal 3e0c0792d71 Switch node authorizer index to refcounts 6d335372b2d Add configmap->node destination edges to the node authorizer index a4d7a67bbd4 Run Windows kubelet stats e2e tests serially because it needs to start many pods on a single node 7a0690cd592 Use ProxierHealthUpdater directly to avoid panic 8438bba5fd9 Enable field management for all new objects 114e283154d Add damemi to sig-scheduling owners a7057f8df0e Cleanup "slow-path" logic in scheduler Filters c2d3e54551e EndpointSliceTracker should track updated resource version bb2b50f3db8 Garbage collector should orphan ControllerRevisions too f2150587f32 kubeadm: remove 'kubeadm upgrade node config' c2c3c478cdc test/e2e/framework:move functions to test/e2e/scheduling/ 0b168f02436 Change devicemanager to implement HintProvider.Allocate() 91f91858a54 Change CPUManager to implement HintProvider.Allocate() 9e4ee5ecc3f Add Allocate() call to TopologyManager's HintProvider interface a3f099ea4d7 Split devicemanager Allocate into two functions 63f0078cccc register queue metrics in controller manager 95ddc029fad Make DisruptionController eviction tests serial to avoid flakes 0e47c86378c add StatusConflict as non-retriable error for disksClient 598c279ecc0 tolerate when bazel shutdown errors out da024f9a577 Ability to override versions of containerd/runc acd286d95d8 Install containerd package depending on CONTAINER_RUNTIME c4ef6a94b32 Add gid to config.toml only when docker group is present a6caa0a4726 Treat replaced events that didn't change resourceVersion as resync events d1ec762a91f cross build pause with buildx e96b037be3f test/ : fix non-ascii characters bfc75d9a5c1 manual fixes 1dcd1fb3b7a generated: update clients 25651408aea generated: run refactor 6c274ea72d1 update client gen 364c6f11733 remove TODO and unused code 44bf3475ea6 Fix non-ascii characters in test/e2e_node and test/network. 657dedc3be3 add azure disk WriteAccelerator support 0714f814fe0 kubeadm: remove 'kubeadm alpha kubelet config download' e167b44c170 kubeadm: deprecate --kubelet-version command line option 142778ac6c8 fix: add non-retriable errors in azure clients 527de3b5152 Update with update-bazel.sh script f4940cf55fd Staticcheck: vendor/k8s.io/kubectl/pkg/scale|describe/versioned|cmd/top|cmd/util/editor|cmd/top 26377722982 some manual fixes 9443a381444 generated: update clients 3aa59f7f307 generated: run refactor 7e88d8db666 update generators f1248163ff4 add exponential backoff with reset to reflector b8e2b0d990e Refine WaitingPod interface d9faaca6473 Bump to latest SMD to pick up performance optimizations 9802bfcec05 Add code to fix kubelet/metrics memory issue. 6f8dfdfb0e7 Fix docker/journald logging conformance 81252a6d78c added env var WINDOWS_CNI_STORAGE_PATH and WINDOWS_CNI_VERSION 2ffb13e822f Do lenient decoding only for kubescheduler config v1alpha1 63a15da505e Fix non-ascii characters in test/e2e/storage 36785bedfcf Ensure bazel is really brought down ba38816d423 LogResult if there is an error 0b32e142d47 Drop k8s.io/node-api packages f48e5de9632 Remove the exponential backoff in NodeGetInfo 2c93aa6ec37 Ensure kubectl is available in PATH by explicitly exporting the script 56711b9ac06 cluster: Add justaugustus as reviewer 8ec193ba9ce Limit number of instances in single update to GCE target pool ea140f5e1a1 Register conversions for kubectl testing types 99c15d28288 Support config kubelet provider id for local cluster. ad9d2d71c08 remove bash examples/comments from the v1beta1 and v1beta2 APIs 785fac68266 Make updateAllocatedDevices() as a public method and call it in podresources api bfe696b49cf Use longer pod start timeouts for specific tests 2a5bce8c820 use tars instead of debs to build server images ac9983f43df build: Remove references to debs/rpms in BUILD/dependency files baec6d4af55 build: Remove deb and rpm build definitions/specs 1071eb89f3c Remove deprecated fields from kubescheduler.config.k8s.io/v1alpha2 e41f2ccd412 gce-addons: Make sure default/limit-range doesn't get overridden 7b44ad0606d Update conformance requirement check e9e11de4e1b Remove Error log for nil StartTime 871739e4df7 Check getNodeInfoError against nil 38ecb30c58b Revert "Collect some of scheduling metrics and scheduling throughput" 999fdfaddf2 Calling hcsshim instead of docker api to get stats for windows to greatly reduce latency e8f12692dfd adding e2e test to ensure it takes less than 10 seconds to query kubelet stats for windows nodes a52776fbfb3 Add UpdateTwice and UpdateApply benchmarks for fieldmanager 815206685cf PodTopologySpread excludes terminatingPods when making scheduling decision 22bd92a390f Changed comments to match with interfaces method description 026ba549614 Fixed Golint errors in pkg/registry/core/pod e54bfa4652d CHANGELOG: Collapse README.md headings in single list f185c474e0f Add some aliases into import-aliases for e2e framework e05f8e6991d Re-adding the [[ as per review comment request 527e66fc282 Add kubectl diff exit code doc 0380aff70c4 CHANGELOG: Move changelog, soft-link to top-level, refresh listing a6b0eaecc99 CHANGELOG: Move changelogs into a subdir to delegate releng approvals d5edfc98174 fix staticcheck errors in vendor/k8s.io/legacy-cloud-providers/aws. 0c74a260c97 update generated file 5035d841cc5 update translation fc719c13f5f Explicitly shutdown bazel after the target finishes c08db5feacc add a flag in azure auth module to omit spn: prefix in audience claim aed4d639a5a kubelet: Debug pod status output diff is wrong 378fcc809ab Check for node IP f20e17e9dd2 python snippets should work on both old and new python versions 30989b648d8 Remove references to prometheus is test/e2e 6dda7adaf59 kubeadm: dual-stack validation allow single stack fa9ba80a67d validate storage cache indexers b9a586e3822 Fix non-ascii characters in test/e2e/node/pods.go d1bc1875aac Move 'path' package usage to 'path/filepath' fc8a39d439e implement backoff manager 9b23f22472e Make oidc authenticator audience agnostic 5bb1838c5c1 Updating dependency sigs.k8s.io/yaml to version v1.2.0 ca7a456a6b2 add myself to hack/OWNERS 724fb733d12 Change HostPath to EmptyDir for VolumeSubpathEnvExpansion e2e tests da4b0b0fa10 Validation for behaviors 9d3670f3586 Ensure testing credentials are labeled as such ea693833c8d Validate Except of IPBlock for NetworkPolicy spec 4b294079458 Add CHANGELOG-1.18.md for v1.18.0-alpha.3 0a476eb7d4a reduce overhead of error message formatting and allocation for scheudler NodeResource filter 2d21f16c38e Fixed code formatting issues discovered by verify-gofmt 97185e97529 Fixed problem in unit test where error expected/actual comparison was not being performed 48ee18b516b Removed unneeded newline (moved to end of directory not found message) f60c0af9771 Ignore empty or blank string in path when listing plugins 78248d0c2aa Fixed code formatting issues discovered by verify-gofmt 1fc80c57eea Autogenerated 881dde8bee8 Remove unnecessary manual conversions e70a630dac6 Added 'No resources found' message to describe and top pod commands 059429ce53a kube-aggregator: increase log level of AggregationController API group logging 439f93c91b8 kubectl: allow to preselect interesting container in logs 7368862c19e makes unavailableGauge metric to always reflect the current state of a service 69df8a8230f Add a fast path for adding new node in node_autorizer. b1d027742b8 Update for loop in server image image creation bf7112ae8ee Add shellcheck disable for set $wrappable 82f3f33eea8 Simplify and improve find/tar lines b69a38667e8 Update after review comment 8823a867183 Fix src_tarball packaging 20aeeed0f0f Replace for loop with find command 1b8107d60bd Update after review 468611d6e0a Update after review comments 405609b920b Fix shellcheck warnings/errors in /build/lib/release.sh d8c16a9eb22 Fix non-ascii characters in test/e2e/common/projected_configmap.go 0c40daddb0c Add an option to external storage e2es to use a copy of a pre-installed StorageClass 65483a19abd generated: update clients 41bd53866ef remove create expansions form authn/z clients 533d0b7f74d use generated clients instead of expansions for most of authn/z adcdb2fd72a Enable FC mount options 97eed70d743 Add konnectivity log files 60c972098ce Add defaults to pod affinity args 6acc75b4185 Only set admission review reponse patch type if the patch is not empty dc3f31569e4 Ensure specified container runtimes are present d5addb4090f Cleanup logging and creation logic of TopologyManager in prep for beta bc686ea27b0 Update TopologyManager.GetTopologyHints() to take pointers adaa58b6cb0 Update TopologyManager.Policy.Merge() to return a simple bool 95a3ac447f9 Fix bug in TopologManager RemoveContainer() 087dc49a0c0 fix range copy issue 0f187154731 snapshot clientsets pending context migration 1e50bc2d094 Add error check in kubectl proxy on server setup 00cd8c8d922 test images: Adds Image Promoter details in the README 87582e2c3c1 add indexer for storage cacher e3c8add683a fix kubectl drain ignore daemonsets and others ee3f897ca7b update network-y stuff for supporting ubuntu/bionic as master 8a1c4a5a88a Collect some of scheduling metrics and scheduling throughput df9b4e92e84 use network proxy for aggregator api 82a68be3043 Log when client side rate limiter latency is very high 0e00e0af115 Adds more unit test on Bind extension for the scheduler 8ce61eef5b2 add to api repo documentation dfd8e4e4670 Enable selinux tags in make targets 31df7077e16 Update OWNERS b11b7d354de WatchBasedManager stops watching immutable objects becdd790671 Initial example behaviors 2eb48f6049c Reduce default CPU requirement for konnectivity server ff8256de3f1 Added server-side print column about FlowSchema referential integrity cc7799a4372 Update GCP Windows node image versions 331cd94ccc0 Ineffassign fixes for pkg/volume 7ff3a1f8db8 test/e2e/framework: remove skip.go and use e2eskipper subpackage 4844b382dc9 kube-proxy: validate dual-stack cidrs 82107ff8ab9 Restore statefulset conversion that populates apiVersion/kind in volume templates 5dcf08c1993 Switch pager to return whether the result was paginated c9c4be66d3e Fix pending_pods, schedule_attempts_total was not recorded 773d3583bcb Avoid thundering herd on etcd on masters upgrade 72fe307b35f Move 'path' package usage to 'path/filepath'. 6c3093f9705 Ineffassign fixes for pkg/controller and kubelet 43ce2eb1ff8 Ineffassign fixes for pkg/proxy b6ba39d013f Fix comment whitespace 498ae799b5a Use standard default storage media type in local-up-cluster 8d7780d6358 update github.com/docker/libnetwork to c8a5fca4a652 af52beda260 Extend --dry-run to support string values. d8c00b7f529 Fix node authorizer index recomputation 3eea0d14052 kube-proxy: Only open ipv4 sockets for ipv4 clusters d05bcf6800e Add namespace mode targeting to dockershim 4d4e111f019 Generated code for kubelet namespace targeting 9a6d50cb2af Add namespace targeting to the kubelet 9bfcc6144e5 fix: missing variadic dots 47277f281eb Allow Action's Matches function to specify a subresource. 7f2200c61a7 Fix backoff retries for AzureFile client 40de7f2569e Add disableAvailabilitySetNodes to avoid VM list for VMSS clusters 6da3b70377d grammar change for pods status in tests 8bd9c994ca6 fix command variable exited with status 1 0d9f9fca89f Fix non-ascii characters in test/e2e/common/runtime.go fee77388c6d Make schema error log message more useful 4940e42b923 Fixed listType annotations for API Priority and Fairness 3d83ef2e8ec Autogenerated and build files for kubescheduler.config.k8s.io/v1alpha2 11c4bcd9dd5 Copy kubescheduler.config.k8s.io/v1alpha1 files onto v1alpha2 8daa7617575 Clean ups on kubescheduler.config.k8s.io/v1alpha1 files 9bd42287f90 Move mutating admission into finishRequest 75cf4d79f2c remove client label from healthz metric test 215b875dbf6 Add GC e2e debug logging a2399064a77 Allow update of onXPN field in fake GCE clients. cc3190968b1 remove client label from apiserver request count metric since it is unbounded fad11f87b42 Add foreground deletion check to ensure GC is aware of the new custom type cd1059e3c4b Revert "Merge pull request #87258 from verult/slow-rxm-attach" 9d2786c383d Fix back off when scheduling cycle is delayed 99b301d7e1a Fix preemption race conditions on heavy utilized nodes 968adfa9936 cleanup req.Context() and ResponseWrapper d55d6175f8e refactor 59e757afef0 regenerate clients 5360db5df81 update generator 510aa1b4324 update rest.Request signatures ed48ed0122c various context related cleanups to rest.Request 2686087888f Update GCI_VERSION to cos-77-12371-114-0 as older image is deprecated fe10c702d24 e2e dual stack retry getting endpoints 3d70e650ce3 Set cache to nil data when Azure node provisioning state is deleting 1174e6698ec cni: Update CNI version to v0.8.5 a3c434510d9 volume binder: enable klog flags in test 5c8929d95e8 volume binder: convert to sub-tests b430f022fce build: Don't attempt to use mirror for CNI plugin downloads 96f2588b610 cni: Update CNI download URLs to use new GCS bucket (k8s-artifacts-cni) cb942c23a7f Update GCE Windows smoke-test script to work with 1909 nodes. 0ce49aea1fa Update get-build.sh 1de2327afc9 Attach a new finalizer in GCE ILB creation. 43c7f3be298 Register RunPodSandbox* metrics dc731e4a1cb Clarify sha matching etcd release tag 427f0f94636 Add apiVersion to involvedObject a4d1624fecb Skip default spreading scoring plugin for pods that define TopologySpreadConstraints bae4ff565fc fix apiextensions reference in controller/clusterauthenticationtrust bea4b611582 Fixed a failing test on a RBD mount scenario cece51b9b0b bump gengo version 558f6aab56c add staging directories to import-boss verify script db19fc94273 add import-restrictions to apiextensions-apiserver/pkg/apis,v1 and v1beta1 07e3cca6d0e update existing import-restrictions files 39f6c784b73 Cleanup validation for immutable secrets/configmaps 647838f8d50 switch log verbosity for cache refresh logs d95ed2c8470 various context related cleanups to rest.Request 18fe96f629e Reduce public methods for DryRunVerifier 463442aa290 Update container hugepage limit when creating the container e992ec0d59b Add comments in several hack/*.sh b7817a2981e Add annotation annealing for migration for PVs and PVCs during syncVolume and syncClaim. This allows external-provisioners to pick up and delete volumes when they have been rolled up from previous kubernetes versions. 6901346e223 don't specify apiVersion when getting AAD token b263c875967 Update CHANGELOG-1.17.md c6a03fa5be5 Parallelize attach operations across different nodes for volumes that allow multi-attach e2d7153a133 set nil cache entry based on old cache 37957e2a0dc Refactor operation keys for NestedPendingOperations b2bb3dfb590 add logging before kubelet waiting for cert 53cc85a29d6 Expose k8s types that do not roundtrip and a helper to roundtrip without protobuf 6972d6f33af Fix kubectl taint's Complete parsing 3593fc69abb bumping agnhost version to 2.10 dc5791b47ac adding sidecar injecting webhook b8e2ad5926c More refinement of comments and parameter names for informers 24844c5fc54 Add logging to scheduler's event handlers ee00497ea94 add comment in several hack/ sh scripts. 08833c91805 Withdraw the change of getting version variable b117a928a6c kubeadm: prevent bootstrap of nodes with known names 772a20b9cfe `./hack/update-openapi-spec.sh` d7650e582ec Cleanup unused Azure client interfaces 2d9b798d1a8 Remove doc reference to godep #782 4d33d837c8b Register full object as return type for `DELETE` web services. ed2f1a6f428 fix behaviour of aws-load-balancer-security-groups annotation 7c72b5791b1 fix static check in pkg/volume/flocker aaf86537eec Update copyright date for ingress_utils_test.go 8ae868b4e07 Adds more test cases in TestRunBindPlugins for the scheduler a027c379f7e kubeadm: increase timeouts in the etcd client 5e0c0779a11 kubeadm: handle multiple members without names during concurrent join 2b389123a5d test/e2e/framework: handle the case where BeforeEach was never called cbdd3a279e6 brushed up according to review a8e07470438 Updated API Priority and Fairness validation to track change in catch-all priority level f641ecd6f83 Whitelisting *.pkg.dev for the GCP credential provider b2f32367710 Added relevent approvers and reviewers for gci. d1f62ead18f fork out a new global-default from catch-all to handle unclassified traffic ecfe31b8907 /test/e2e/framework:remove TODO in test/e2e/framework/util.go 292804ae1c8 Bump dependency github.com/prometheus/client_model@v0.2.0 afb7c5d2ce3 Add serathius to sig-instrumentation-approvers 5ba2a8da099 Pin dependency github.com/cilium/ebpf 088ee920e0e Bump dependency opencontainers/runc@v1.0.0-rc10 efd309b7dad Fix bug of hack/verify-api-groups.sh 527d60edb70 Move IngressFromManifest/IngressToManifest to ingress e2e fw 1461d8bd13c Move GetPortURL to ingress e2e fw d56f5357558 fixed UT 1dd53fd3bae Fix issue with GCE scripts assuming Python2. 71b2a4cdcc1 Revert "It fixes a bug where AAD token obtained by kubectl is incompatible with on-behalf-of flow and oidc." 22bd26fefb9 Adding taint toleration error reasons 9b679748239 Re-enable apply for 50% of requests 4c2eb77ee6e Remove use of CustomResourceSubresources feature gate, CRD field clearing 57f3a97bcba Remove use of CustomResourceWebhookConversion feature gate 46e622216d9 Remove use of CustomResourceDefaulting feature gate ff94f33a6bc Remove use of CustomResourcePublishOpenAPI feature gate 57724766bcf Remove deprecated GA feature gates a85815823eb Do not serialize internal type, fix roundtrip b86df2bec4f update gopkg.in/yaml.v2 to v2.2.8 6e411b6c0a4 Add support for pre-allocated hugepages with 2 sizes 5b49d03b844 Return the error from copyInto 9897f33f7da fix static check errors in vendor/k8s.io/apimachinery/pkg/api/resource ca1eeb99b53 informers: don't treat relist same as sync a14ceeb2c00 Staticcheck: vendor/k8s.io/kubectl/pkg/cmd/exec|config|certificates 577b2dcdacd Fix numPDBViolations when victims on same node are assigned same PDB eafbb67d010 Debugging 87473, printing out the last state of the dependent 90b49e80d62 add warning on ObjectReference cfd61e801b0 Add env var(CNI_TAR_PREFIX) for cni install. cni release has changed the prefix, add a var to make this configurable. e8c20e1f396 don't wait blindly d2ad469abbb remove unused layer of loop structure in processorListener::run 5c2d2c5ef1a rename dynamic cert loading to be more accurate 6ccfc3aecf0 add dynamic reloading for CSR signing controllers 4a5ab84dccc Move default binding to a plugin aee028dab84 Migrate health monitor from read only port to healthz port e0aeb4d6a36 Record overall Filter latency for all nodes in a scheduling cycle. 82f97775b7c Remove kubectl run generators 8c6d7a7086b fix static check errors in test/integration/etcd 9e1c99c4e22 Delete the sysctl runtime admit handler d6d08b152e0 Delete TODO to use docker client 4d76b1c8de7 Add mergeFilteredHints: - Move remaining logic from mergeProvidersHints to generic top level mergeFilteredHints function. - Add numaNodes as parameter in order to make generic. - Move single NUMA node specific check to single-numa-node Merge function. 80c3f500b68 Fix CreateVolume signature in comment fc300e0e7d6 Move filterSingleNumaHints call to top level Merge c4f7308e116 kube-proxy: fix incorrect log information 45660fd3a25 Add filterProvidersHints function: - Move initial 'filtering' functionality to generic function filterProvidersHints level policy.go. - Call new function from top level Merge function. - Rename some variables/parameters to reflect changes. df9b2595f38 Update filterHints to filterSingleNumaHints: - Change function name - Remove policy parameter (unnecessary) - Update unit test to reflect change b09e35257a7 Remove `scheduler/algorithm/priorities` in import-restrictions 6ae1b3ea21f Drop the cadvisor test 30de5bdc460 Enable verify-import-boss check for e2e framework c8dbde86664 bump github.com/google/gofuzz a65f525aed8 Tweak new names 38c5f318c9b kubectl-diff: Test return code on failure and changes b33fbc84d9d Update Structured Merge Diff to V3 170714e5321 Remove folder pkg/scheduler/algorithm f2b21f08d95 kubectl-diff: Return non-1 errors on kubectl failures bb587690fd5 Default the --enable-cadvisor-endpoints flag to disabled 368fe70aeda bumped pause-win to 1.1.0 24314d228c9 fix flaky test c30f4489b47 Update CHANGELOG-1.15.md for v1.15.9. 781f51c22dc Update CHANGELOG-1.16.md for v1.16.6. cbc089a9846 Update CHANGELOG-1.17.md for v1.17.2. 3f8b2022665 Move GeneralPredicates logic to kubelet. 50d511d4b8a Deprecate scheduler's framework.plugins.RegistryArgs de57657b2bb Self nominate aojea as sig-network-reviewer d6b449b5c7d Move scheduler's SchedulerExtender interface to core/extenders.go 2808d7154dc Update CHANGELOG-1.18.md for v1.18.0-alpha.2. 093fd4ab029 Add comments in several hack/verify-*.sh(s-v) 261f26075c0 kubeadm: remove the deprecated GA CoreDNS feature-gate e5a2aeeae6d Fix static check failures in test/e2e/instrumentation/logging/stackdriver bd9d8fa42f7 Initialize CPUManager containerMap to set of initial containers eb265bc7db7 Remove GetBinder member and replace it with a method. 7a39e1396a1 Remove unnecessary slow binding test 5aacacbdf00 client-go/cache/testing: add ability to simulate watch disruption 73b2d831254 Refactor docker specific oom const out of qos pkg 7be9b0fe55b Update comments and error messages in the CPUManager 2a2ce207f2b Enable bound tokens in local-up-cluster c42e815fb51 Fix multinode storage e2e tests for multizone clusters f2acbf66074 Base CPUManager state reconciliation on container state, not pod state f6cf9b8ce93 Move CPUManager Pod Status logic before container loop 772dbbc7d78 Fix describe of statefulset prints pointer not value 221396ac35f cleanup: delete unused func 53aff819e0e fix static check failure in pkg/controller/disruption and pkg/controller/namespace/deletion 72f34b817ea staticcheck: pkg/volume/fc, pkg/volume/portworx and pkg/volume/vsphere_volume c8df27c2b1b Add comments in several hack/verify-*.sh(g-r) afe3d5f09f6 Use e2eskipper package in test/e2e/common/ 1c092bf6359 Simplified logic around context cancel, removing bugs 1e170637c3c Refactored QueueSet configuration into two phases ce12105edcb Added server-side printers for the API object types for API priority and fairness e98f4f3ef89 Use e2eskipper package in test/e2e/framework/ f19f4e40f9b Fix static check errors in pkg/util/netsh 34f07671373 Add flowcontrol to apiVersionPriorities bc2aabaaeb1 Add: promotion for LimitRange defaults test to Conformance 203c7b47317 fix staticcheck errors in pkg/controller/daemon. 2afe0da8eed Unify --cluster-cidr in KCM and CCM 16de853c5de Clean up TODO around running test as sudo 8cbc5dc03f9 Bump golang/mock version to v1.3.1 47ad6db1dcd Fixup comments in internalbootstrap b0a6e597fee Use new storage clients in Azure cloud provider 0f53daad9ea Remove Brad Childs from OWNERS d7d316e1e74 switch to docker command line 469de65c252 Enabling EndpointSlice feature gate by default c1a4cd9c75b Improve error message when diff binary is not in PATH 47b2593d592 Creating new EndpointSliceProxying feature gate for kube-proxy 4d88acee51d Made internalbootstrap gin up its own Scheme dd65e2151b4 add crash protection to wait functions that were missing it 5330bd7440b dogged insistence on full verbosity f53d7e55dff Move Snapshot from nodeinfo/snapshot to internal/cache 6bea0e469bc Support DryRun in cli-runtime REST Helper. f1c26bf4362 removed excess blank line 6a14203658c Rename cache's Snapshot to Dump b3853138a4f update generated files 2f78a9480f2 Updating dependency google.golang.org/genproto to version v0.0.0-20190819201941-24fa4b261c55 cac0451836f Updating dependency github.com/prometheus/client_model to version v0.0.0-20190812154241-14fe0d1b01d4 3b29bcf52d3 Updating dependency google.golang.org/grpc to version v1.26.0 9c78f05d06c Updating dependency github.com/gogo/protobuf to version v1.3.1 fe8b32317ff delete unused field ec5321c6a9f Update validation for API Priority and Fairness ed1381e35f8 Fix staticcheck in pkg/controller/podgc 09a132be29d Add comments in several hack/verify-generated-*.sh a94346bef98 Update aws-sdk-go dependency to v1.28.2 c712230ac1c Implement default queue sort logic as a scheduler plugin 3698a2540dc In test framework LoadConfig(), use CurrentContext.Server for TestContext.Host if it is unset. Otherwise, kubectl exec through http/kubectl proxy tests in test/e2e/kubectl/kubectl.go would fail with "--host variable must be set to the full URI to the api server on e2e run" error. With this change, running the following tests can now pass: $ e2e.test --kubeconfig=xxx --ginkgo.focus="should support exec through" 0c12ae52401 Modify alias of e2e/framework/job to e2ejob d86fcd8c902 rename some declartions named context in tests afaea605f43 Remove Brad Childs from OWNERS files 18f05ef5b98 Fix golint errors in test/e2e/storage/vsphere 9952d487d2e Move ValidateEndpointsPorts() to e2e test 450196a719a Update CHANGELOG-1.15.md for v1.15.8. 3fbfa763fd9 Update CHANGELOG-1.16.md for v1.16.5. 708278098af Update bitmask printing to print in groups of 2 instead of all 64 bits c6429e3726f Add snapshot clients based on armclient 4ea5509b31a Add vmsize clients based on armclient c86d1ec0e9d Add storageaccount clients based on armclient 43554c80a61 Add disk clients based on armclient afd31035c21 Fix the bug PIP's DNS is deleted if no DNS label service annotation is set. 7069b1d6e8b Update TopologyManager single-numa-node logic to handle "don't cares" 2905ffffa76 Rename TopologyManager test TestPolicyBestEffortMerge for consistency 94489c137ca Cleanup use of defaultAffinity in mergePermutation of TopologyManager ef1b991ebc9 SchedulerPredicates [Serial] validates resource limits of pods that are allowed to run - set resource requests as well 5e23517ebf1 Use reflect.DeepEqual check in policy_test.go 92eb7cd6011 Update "Single NUMA hint generation" expected affinity to nil 8b3f6e61a22 Move test case "Two providers, 1 with 2 hints, 1 with single non-preferred hint matching" into specific policy tests 681c42bfc25 Move test case "Two providers, 1 hint each, same mask, 1 preferred, 1 not 2/2" into specific policy tests a38a2562b2f Move test case "Two providers, 1 hint each, same mask, 1 preferred, 1 not 1/2" into specific policy test. f639da7637b Move test case "Two providers, 1 hint each, no common mask" into specific policy tests. 401a2bb285a Move test case "Single TopologyHint with Preferred as false and NUMANodeAffinity as nil" into specific policy tests. 6460ef63929 Move test case "Single TopologyHint with Preferred as true and NUMANodeAffinity as nil" into specific policy tests. baeff9ec5d7 Move test case "HintProvider returns empty non-nil map[string][]TopologyHint from provider" into specific policy tests. 599217d4828 Move test case "HintProvider returns -nil map[string][]TopologyHint from provider" into specific policy tests 57661ee9467 Move test case 'HintProvider returns empty non-nil map[string][]TopologyHint' into specific policy tests. 51f1af03958 Move test case 'TopologyHint not set' into individual policy tests 8466a5852af Restore policy_test.go to upstream Following commits will contain incremental changes to this file to ease review process and ensure all tests are accounted for. 59bb6c4d6f4 Update checks in mergeProvidersHints: - Initialize best Hint to TopologyHint{} - Update checks. - Move generic unit test case into policy specific tests and updated expected outcome to reflect changes. 6758f95117b Restore original policy none test cases: Mistakenly overwritten in earlier commit 2d1a535a35c Make mergePermutation generic: - Remove policy parameters to make function generic - Move function into top level policy.go 5487941485e Refactor filterHints: - Restructure function - Remove bug fix for catching {nil true} - To be fixed in later commit - Restore unit tests to original state for testing filterHints adfd11f38f8 Make iterateAllProviderTopologyHints generic: - Remove policy parameters to make this function generic. - Move function out of individual policies and into policy.go e43f0a52933 Reinstate canAdmitPodResult in policy_none: This is to keep consistency with the other policies. This change may be made across all policies in a future PR, but removing it from the scope of this PR for now. 4cc5b9e46c3 Edit hints returned from policies and unit tests: - Best Effort Policy: Return hint with nil affinity as opposed to defaultAffinity when provider has no preference for NUMA affinty or no possible NUMA affinities. - Single NUMA Node Policy: Remove defaultHint from mergeProvidersHints. Instead return appropriate TopologyHint where required. - Update unit tests to reflect changes. Some test cases moved into individual policy test functions due to differing returned affinties per policy. e3d0c9397f0 Updates to single-numa-node policy: - Remove getHintMatch method. - Replace with simplified versions of mergePermutation and iterateAllProviderTopologyHints methods - as used in best-effort. - Remove getHintMatch unit tests. b5ca4989e3a Update unit tests: - Update filterHints test to reflect changes in previous commit. - Some common test cases achieve differing expected results based on policy due to independent merge strategies. These cases are moved into individual policy based test functions. 17d615bca2b Update filterHints: - Only append valid preferred-true hints to filtered - Return true if allResourceHints only consist of nil-affinity/preferred-true hints: {nil true}, update defaultHint preference accordingly. 9f21f494930 Additional unit tests for Topology Manager methods f886d2a8320 Update single-numa-node policy unit tests 2825a7be1a6 Add new functionality for single-numa-node policy: Explanation taken from original commit: - Change the current method of finding the best hint. Instead of going over all permutations, sort the hints and find the narrowest hint common to all resources. - Break out early when merging to a preferred hint is not possible 5ce2ea27734 Return defaultAffinity from PolicyBestEffort: Now that PolicySingleNUMANode is not considered here, return defaultAffinity as was the original case before previous bug fix eda15215621 Make mergeProviderHints policy-specific: - Remove need to pass policy and numaNodes as arguments - Remove PolicySingleNUMANode special case check in policy_best_effort - Add mergeProviderHints base to policy_single_numa_node for upcoming commit dc36924c373 Update policy_none removing canAdmitPodResult Update unit tests for none_policy Add Name test for policy_restricted cf8b098dda5 Refactor policy-best-effort - Modularize code with mergePermutation method 278717bc577 Fix ineffectual assignment to CPUSets e2e5bf5e0b6 Fix golint warning for pkg/util/procfs/procfs_linux.go 1db3f45dc59 test/e2e/framework/rc/:refactor function ByNameContainer e1eabf8576a Add comments in several hack/verify-*.sh 69461d26d81 move function GetKubemarkMasterComponentResoureUsage aa2691eeac6 Fix static check failures in test/e2e/instrumentation/monitoring 4573428b879 Deal with auto-generated files. Update bazel by hack/update-bazel.sh 0c77101b906 add README.md in hack/ a4f31e0de70 Add NewFakeKubeRegistry() for testing deprecated metrics. b2f76cc780d add comment in hack/update-*.sh 0e81e394657 cleanup(scheduler): remove unused function, remove duplicate comment, implement interface 7ac8f58ff60 Fix: formatting 3ba8f42f96b Update: podTemplateList name; Fix: initial fetching of PodTemplates 0c3112fff39 fix golint error in plugin/pkg/auth/authorizer/rbac/bootstrappolicy 961c13ecba5 Fix: formatting 77e31bd1108 Fix: formatting 2e79da91398 Fix: formatting fe91d5fad98 Fix: bazel build errors 8676fb3cdb9 Promote: Secret patching test 4efcb21af88 Promote: find Kuberntes Service in default Namespace b50531a4a46 Update: formatting, cleanup, ExpectEqual statements 0f528a27ad5 Promote: Namespace patch test 34b942a41d7 Remove check for empty activePods list in CPUManager removeStaleState 5802f3a9103 Add proper activePods list in TestGetTopologyHints for CPUManager cdd92d39b77 preemption: typo cleanup f370b781162 Update vendor f0e45689d3d Add PatchService method in service/helper. 3709f9264d7 Document the actual git tag the SHA was picked from 2a731eb411f Updating dependency github.com/checkpoint-restore/go-criu to version 17b0214 103d77c619e Updating dependency github.com/coreos/pkg to version 97fdf19 a6d72ab7132 Updating dependency github.com/elazarl/goproxy to version 947c36d 4143bc7a964 fix staticcheck errors in pkg/volume/hostpath. cc8e8401e2d fix static check in cluster/images/etcd-version-monitor 885a03eef78 Use new clients in Azure cloud provider 6882eb38d8d Add virtualmachine clients based on armclient bfbcee2e3e1 Add subnet clients based on armclient aaa70b42e89 Add securitygroup clients based on armclient 95c2f08d8f9 Add routetable clients based on armclient e68c640de2d Add route clients based on armclient bdd0d5ff86f Add publicipaddress clients based on armclient 937e6a63884 Add loadbalancer clients based on armclient dba3331ce48 Add interface clients based on armclient f88d3524d58 Fix file name for VMSSVM client 2498dbf6360 clean node_authorizer code: verb judgement a038a33dcfb Clean up commented assertions in tests 210737b0ce8 Revert "list vm instead of get when getting virtual machine" b4b1e8f7b6a remove TODO in test/e2e/framework/skip.go e8a8bdb4cac hack/update-vendor.sh 00706b8fe9e Remove gonum.org/v1 dependency in code-generator 514bdbedac9 fix-static:pkg/volume/scaleio/ f00ac0694b6 Mark session affinity tests as [Flaky] f20945aa416 Fix: formatting 372d09cd153 Add integration test for NodeResourceLimits plugin 5a008786e21 Add: PodTemplate lifecycle test ee1f0b8a381 Make CustomResourceDefinitionStatus fields optional 0fc15708fe0 Add: ConfigMap lifecycle test edbd51bc692 Update CHANGELOG-1.17.md for v1.17.1. 4673731c0bc Make sure PDB has observed pods before doing eviction in e2e test ba23aa98f65 Set managedField probability to 0% 99a015705ba storage e2e: Add context to timeout errors e4a18dee735 make request logs greppable f969d3643e8 Nominate alculquicondor to sig-scheduling-maintainers b60703c1724 test/e2e/framework:refactor generateWriteBlockCmd due to the same function 9077603b976 Add richer unit tests for OomWatcher ab7e0f58d5c Clean up rkt specific code in `pkg/kubelet/pleg` a9e5fd66230 Revert "Revert "Add an option to specify kubelet flags for heapster node."" 8b1eb7f9735 remove TODO(random-liu): Move pod wait function into this file 7e5e7c141c2 Update cri-tools to v1.17.0 c402a4bf65e WIP: use e2eskipper package in test/e2e/autoscaling 77f482c553b WIP: use e2eskipper package in test/e2e/cloud cb07680ee9e remove TODO in test/e2e/framework/providers/gce/ingress.go 0a8df435256 update test data 16fbb5be331 use e2eskipper package in test/e2e/auth 4789e51d8ed Use e2eskipper package in e2e/scheduling and e2e/servicecatalog c1de3d6e5b4 fix ci-kubernetes-node-kubelet-serial Non-system critical priority classes are not allowed to have a value larger than HighestUserDefinablePriority 07c36de3e2b e2e/instrumentation:Use e2eskipper package fe63af0d1c2 export changes to mo 63e22620a91 modify strings 739c86e2faa update po file for kubectl jp translation de15774e10a kube-proxy unit test FilterIncorrectIPVersion 1ee86328ae6 Fixes unnecessary creation of default SG and trying to delete non-provisioned SG by k8s system when annotation [service.beta.kubernetes.io/aws-load-balancer-security-groups] is present 054e3846fc1 Use v1 subjectaccessreview API in controller-manager CSR approver e6234519e1f set test image cloudbuild directory 187d7112250 Split findNodesThatFit into framework and extenders logic 63c1c68d0ca Remove direct use of Snapshot's data structures fb66e807cd3 Remove scheduler framework dependency on predicates package 4083c7d49c8 Fix a flaky scheduler preemption e2e f6d58ae3a96 Multi arch for nonroot image 2a479006209 Remove unused KUBE_TEST_API logic 925be295fb0 Allow embedding logs command e8017795d16 Fix GetPodLogs failures in NetworkPolicy e2e tests da15570daa2 fix staticcheck:pkg/volume/cinder 14e0cac5e7a Fix error-string-capitalization in clientset generator. e62f9625cf6 fix-static:pkg/volume/emptydir 07f31b3b177 test/e2e/ui and test/e2e/upgrades:Use e2eskipper package 73fb0ab5ec4 test/e2e/storage:Use e2eskipper package 34359176aa9 e2e/gke_local_ssd.go and e2e/gke_node_pools.go:Use e2eskipper package 7cc3971ee0a Immutable secrets/configmaps tests 9174905ae77 Autogenerated e612ebfdff2 Immutable field and validation 5b2cc9c2fd6 Fix(kubectl): the field of history controllerrevision will be covered by daemonset 420d5d10c4b updating googleapis/gnostic to v0.1.0 e1f7b16fa68 Update to golang@1.13.6 f3b9a6e12f5 test/e2e/windows/:Use e2eskipper package c7234aa1779 kubeadm: support automatic retry after failing to pull image 3d34a814d69 test/e2e/kubectl test/e2e_kubeadm:Use e2eskipper package 586e1f2325b e2e/network/: Use e2eskipper package a19aa1069a7 Remove duplicated ServiceStartTimeout 07c5aa98ea3 simplify 1.17 release note for storage b5f050a5cbd Move from random SHA - update github.com/prometheus/client_model to v0.1.0 59807be5abe Further tweaking up the wording f66ef23c118 update gonum.org/v1/gonum to v0.6.2 a1f998909e2 changelog: clarify 1.17 upgrade requirements 8f1e3c22353 updating github.com/smartystreets/goconvey v1.6.4 8253480ea41 update github.com/morikuni/aec to v1.0.0 4db3822ebba Update fieldmanager.go 2b554079af6 Ensure a provider ID is set on a node if expected bf30f75ec6e Update azure_test.go 70dea6e4a84 review: several fixes and addressing comments 2dc966348d6 add myself as feature approver (for SIG cloud provider) 5a44cd65fd9 Fix typo from reseting to resetting 8da4a1d97fe Add some comment to hack/verify-linkcheck.sh c5764735e27 fix staticcheck:pkg/volume/awsebs 0e8b956e27b clean deprecated apiserver request metrics 606e4503cf4 remove last part of deprecated metrics 2c2e1c5443a keep apiserver_request_latencies_summary ab182552b48 clean SinceInMicroseconds, convert to SinceInSeconds a8f2feaeb51 remove deprecated metrics of proxy 8ae3f80048a remove deprecated metrics of dockershim 060756babbb remove deprecated metrics of apiserver 85931af1eee remove deprecated metrics of scheduler d2cfd4b82fb apply review advice again 447b17587b6 remove deprecated metrics of etcd 1a9b1217649 remove deprecated metrics of kubelet 26ea420c0e6 Image Promoter: Cleans manifest list 8c481022c1c e2e/node/:Use e2eskipper package c84a371f3d4 Fix a flaky e2e test of Job completion 91dca8ff8cf Use e2eskipper package in e2e/apps e8b5658bd11 fix: typos in comments of admission 0bab010b45a clean unused predicate error b2159b5d663 Remove scheduler/algorithm/priorities/util package beb252df163 Add logs of port-forward-tester pod 99b135442c6 Add error handling of CloseWrite() 6aaf0bb41b3 Cleanup scheduler/algorithm/predicates package dcd4dcdf217 Update: comments, searching for secrets in lists b062fcb1178 Update Azure owners fee0d43d23f fix golint error in pkg/apis/rbac 010b8852361 Remove workaround for RS bug in cmd apps test 2c3c6721ce5 refactor(scheduling): remove priorities package a2526286498 fix nits 6cab3a7bec7 create probabilistic SkipNonAppliedManager 33a449474cc Fixed docker.log format 07e3c46cb4b Add: secret data patch check ddf0d4b8034 change Apply signature and move decoding into handlers 58dabc73979 Revert "fix flakes on e2e test TCP CLOSE_WAIT timeout" f2518347f3d fix apply --prune to check cli specified namespace 71966adfc39 Allow a preloaded gke-exec-auth-plugin 39e373fc455 Do not require token secrets when using bound service account tokens afe3b907a18 Remove nodes from cache immediately on delete events 50deec25bc0 feat(scheduling): address disabled plugins in scheduling framework bcab9b4c9ea Remove uses of NodeInfoMap outside of snapshot and cache 824af9e3072 Fix kubectl top sort-by cpu and sort-by memory options 50b697bacb5 move TaintToleration predicate to its plugin 228891de9c7 Fix comment b3ae0f01e5b pass through KUBE_BUILD_PLATFORMS to enable build on specified platforms 19daee7e604 Add import-aliases check for e2e framework c04ead5fb13 Add error check for instance insert 0d86f0a0372 Separate skip as framework subpackage 51c742c1dd0 fix staticcheck failures of pkg/util/ipconfig pkg/util/iptables pkg/util/ipvs/testing 0278d793c8b fix: remove ErrTopologySpreadConstraintsNotMatch f8934861910 ipvs proxier README: fix typo 80127fe10f1 rm errserviceaffinityviolated 864600f05f6 Break nodeunschedulable Filter plugins dependency on predicates package 6c58cc0ad00 change framework_extension_point_duration_seconds from sampling to always record d829d9b0fd5 Update hostpath and mock csi drivers with latest sidecars 5def91d7785 Add VolumeBinder to FrameworkHandle interface c86f59610c0 remove test/integration dependency on predicates and algorithmprovider 1289bdaba41 network proxy with admission wh 21202b08d48 remove e2e dependency on scheduler/predicates package 9b17de74628 Repair smoke-test for Windows GCE clusters f3c7a4c8231 Update scheduler's RunFilterPlugins to return a plugin to status map 8e3c1b54a7c Fix interpodaffinity issue 326935c1b96 extend crd openapi e2e timeout to deflake the test, plus small improvements: d227b7822fb Move selector spreading priority code to plugin 4d731d92bf0 Demote Delete Grace Period test to [Flaky] 5d916e20ddd Use Snapshot.NodeInfoList for listing operations 3db91b2bdc9 Enabled reading config files for vsphere e2e tests f3c70a2ed26 Move IsAppArmorSupported() from e2e framework 704ec253527 fix flakes on e2e test TCP CLOSE_WAIT timeout 0f9c262eda1 Cleanup cloud controller manager when closing cluster. 10864d3366f fix a bug that orphan revision cannot be adopted and sts cannot be synced 568edf72ec1 fix kubectl annotate local error 8d7f3837856 cleanup(api-machinery): remove unused struct and variable 680df17f39e fix typo 68532e0c0f5 Remove redundant nil check ee967060c71 Add simple explanation to verify-spelling.sh a1053e4835f Break interpodaffinity Filter plugins dependency on predicates package a3b90584a1e Image Promoter: Bump timeout limit 8897c435ad5 Refactor oom watcher to allow greater test coverage 57f2d7ad6f2 Adding unit tests for kube-scheduler Config Complete() method. 30058c9d356 Image Promoter: Remove -it from docker command dc5934f5845 token cache: make fetch_total a counter 9ed55bc5203 Add: JSON marshal error failure checking; Fix: formatting 232da604300 Update: json patch generation c53006b1a2c Add: test for finding service from listing all namespaces b4fb46409d1 Update: test secret contains a default label, secrets are listed via default label, patch payload is marshaled instead of written in raw JSON, secret deleted check; Fix: comments, test namespace usage b8cac87646f Revert "fix flakes on e2e test TCP CLOSE_WAIT timeout" e26fbe6f08c fix a bug in scheduler's node resource limits score 729337ec7e4 gofmt reflector.go ae53a008cb3 Clarified comment on DeltaFIFO::Replace f2a8e2d9c9c finished pass over comments on Controller, and commented sharedIndexInformer 7d82e23e6cd A little more comment tweaking for cache.Controller 72fa714d636 began turning attention to cache.Controller 2ea338b63f2 Reworded comment on requestedResyncPeriod eef49c965f4 Noted divergence between requestedResyncPeriod and resyncPeriod 5546d9f12f2 Started commenting processors 320c9bfeed4 Break volumezone Filter plugins dependency on predicates package 81a6cf28478 Change PDB tests to use pod conditions instead of phase 591b8706915 fix how we check for node info list consistency 7f2d675ad0a kubeadm: Fix a false positive in a warning 42afa0a2cca Adding in missing Registry unit tests. 6a82609902e Break serviceaffinity Filter plugins dependency on predicates package 8d313f333ec staticcheck:test/integration/master/ ce68edf7009 Allow "kubelet --node-ip ::" to mean prefer IPv6 4ef31f81c76 Break nodelabel Filter plugins dependency on predicates package 264a1cf5f6f staticcheck:test/integration/auth/ 8d54a84507c fix kubemark use fake CRI 324e5ce7e3d hollow-node use remote CRI 729c37373aa Remove unused scheduler types 24ccd77a986 Remove variable EXTERNAL_CLOUD_VOLUME_PLUGIN default value in local-up-cluster.sh ab12f460d95 Update: to use framework instead of gomega for testing values 616003a8e96 Add: OWNERS file - based off of staging/src/k8s.io/apimachinery/OWNERS 2754cc37ea5 Update: namespaceName value updating order to prevent error expection bd6550fb349 Update: formatting, gomega Expect to framework ExpectEqual, framework creation to standard function fca9963c243 Move publish and unpublish counting up in test c5e3ab12489 Fix: formatting, spelling 1a283ccbb64 use az.List() to check route existence 9951a9c98e2 Add: namespace patch test a8ee1086d70 Move yaml limit tests to benchmarks 51d53036621 Fix err variable shadowing issue in storage/utils 65329a59867 list vm instead of get when getting virtual machine 2c8639deb70 allow an SNI cert to be used to respond for a particular IP 4e674768671 move nodeaffinity predicate to its filter plugin 4c51eb9063a test images: Image Promoter fixes b9e2389e0d9 Move RequestedToCapacityRatio argument processing to its plugin 906adbdfcdd Require client / server protocols 02885845ff4 kubetestgen: improve errors handling eb074761bc2 Fix local-up-cluster.sh do not work with non-intree external cloud provider issue. fddf50cf881 fix log message error in nodelifecycle fe8ad90afa5 bootstrap flow-control objects 72559ec6933 kubeadm upgrades always persist the etcd backup for stacked 7254517c5cf rename ExtenderConfig to Extender edd612d9f10 Add: test to patch a secret 9bcca31e52c Break volumerestrictions Filter plugins dependency on predicates package aae9a7f7045 Break nodevolumelimits Filter plugins dependency on predicates package 794d0d9b4d8 Remove `rkt` from container runtime options 06b44c76fd7 Correct comment around which integrations require cadvisor_stats f2cb1f35fe2 Remove dead code in fake docker client d27dc6751ec Break volumebinding Filter plugins dependency on predicates package c2d41fda6c4 remove unused code and use framework 05010d23ac7 clarify apiserver bind-address flag usage 0b064f34ae7 fix flakes on e2e test TCP CLOSE_WAIT timeout 041e5b55609 addressed comments e40625028b5 fix: correct the mentioned endpointslice manage label name. e8eb5c656b4 fix fake remote CRI d31dcecd200 cleanup unused scheduler functions/files c0bc36c12e1 kubeadm: probe address for unspecified ips 051be8fe80e Cleanup SetPredicatesOrderingDuringTest due to deprecation of predicates 64d7b224d92 Cleanup unused parameter of NewGenericScheduler 7d604c318cf Break DS controller on scheduler predicates and predicate errors 2d95520a3f6 adding private cluster check 9bc862ec697 Perform dead storage removal linearly 2371c58a736 remove unused code test/e2e/framework/google_compute.go cc0b3e82eb8 Kubelet: add a metric to observe time since PLEG last seen 17b0b77026b fix staticcheck failures of test/integration/client test/integration/disruption 0eca8ae9cdb Fix tests and improve comment on NewDeltaFIFO 1d65f1b5c39 Fixed assignment statements 89c615f9c44 Revised comments about f.knownObjects and added tests for Replace b535ed3b0c1 Merge scheduler's ConfigProducerRegistry into LegacyRegistry 51eb4b50a3a Don't paginate in listwatch 02e217759e3 update comments of some funs in scheduling_queue d09fe8e247a Remove no longer needed `modifyContainerPIDNamespaceOverrides` 93246643306 remove TODO in test/e2e/framework/node/resource.go bfc4a7a1c54 fix staticcheck of pkg/util/ebtables 7a7ccb797e0 Updated comments on internal abstractions in client-go/tools/cache fc3b210ad83 if no cycle dependency , use framework in test/e2e_node subpackage e787525d6e7 Add metrics for VMSS and VMSS clients 4a00e261754 Move Azure metrics to a separate package 2f0e5b262a4 move functions from e2e/framework/deployment/ to e2e/apps/ and e2e/upgrades c813e258920 Use new VMSS and VMSSVM client in Azure cloud provider b8e7767b67e Add VMSS VM client 63f9200c1d8 Add VMSS client 9d67227fb42 Addd Azure ARM client with backoff retries d8edc7d2c11 CHANGELOG-1.17: add note about service CIDR bug 1eaa0ee3f95 Minor nit in error message about feature gate stage a6b7b0d95e1 Define algorithm providers in terms of plugins. 7f79516705f Move resource-based priority functions to their Score plugins 36cbce1182a Postpone flag warning log to just before it be used. 7171f9a7f46 move funs of framework/volume to e2e/storage bf47d14c272 Fix staticcheck failures of test/integration/replicationcontroller 21f59c99232 Reword modifications for clarity 4d43e9e39b6 e2e: move funs of framework/viperconfig to e2e f5a3c93649c clean useless code in client-go test 706e90a0339 Skip scheduling the pod if it has been assumed and the pod updates could be skipped. 587dbc2fede remove TODO in test/e2e/framework/auth/helpers 6410ac31731 Return when removePod failed 006980c1607 Remove Todos for CSR checking 00abe6d5055 Output test description in TestPreemption 43d9748d3a8 Add error handling for Register() call 253a85db160 Move WaitForFailure() to the test 453ac809c12 kubeadm: tolerate whitespace when validating user CA PEMs 99c2e74a23c Add debugging message to know the pod status 52ddae02672 Remove Delete/CreateSyncInNamespace() 92940fa80d6 Remove `recorder.PastEventf` method 49884bca30e Fixing regex for kubernetes version in kubeadm 81c6989ccc9 Clean up unused variable from unit test. 2b304bf5e2b fix static check failures in component-base/metrics f438def93d9 Update to golang@1.13.5 ca690514753 refactor(pod log):refactor for container valiate, little cleanup 31d6cc5792f Switch to new ClientConfig for Azure cloud provider 8c77b96b75d fix staticcheck failures of test/integration/scale test/integration/serviceaccount test/integration/serving test/integration/volume 7382a7c8010 Add backoff retry which implements autorest.SendDecorator interface 80e3cc36294 Fix unit test to run in non-gce environments 210f1a904dc Move client config to a separate package 12ebe54fc41 publishing: Update to go@1.13.4 for kubernetes-1.16 78352240f63 Move podtopologyspread priority logic to its Score plugin b373121a146 Make CPUManagerCheckpointV2 type an alias of CPUManagerCheckpoint 72d66be439b test images: Adds E2E test image automated build 35dea07ad6d silence usage when pass bad cmd options 5faf8f4c528 Lock checksum calculation for v1 CPUManager state to pre 1.18 logic 6359080d4f6 fix: test failures ece8aefe1f7 fix: azure error should not retry on bad reqeust b3bebddb30f Fix a typo in interpodaffinity score plugin 320ac4e2770 feat(scheduling): implement azure, cinder, ebs and gce as filter plugin 31e59fd5e36 Add ipv6 examples for network policy API 0995ef573f8 Fix ensureStaticIP if name for existed address was changed 134c545b96e proxy: add some interface type assertions b1e03256d71 alias kubeadmutil for k8s.io/kubernetes/cmd/kubeadm/app/util 572c81ff537 e2e:remove func of framework/replicaset to e2e/upgrades/apps/replicasets.go 8a4dce5431f Move pod topology spread predicate logic to its filter plugin 78c05176917 fix link in readme 161c6f4886a e2e:remove unused func in /test/e2e/framework/autoscaling/autoscaling_utils.go eea91c018b2 Cleanup testapi after it has been removed f19ed6ccfe5 remove unused code in test/e2e/apps/deployment dbe7c920e07 Add alias of api/errors in endpointslice.go 488b94767c4 remove TODO: Use return type string instead of []string and update func 01083988aef Add apierrors as alias for k8s.io/apimachinery/pkg/api/errors f53c81f4a25 Move ServiceAntiAffinityPriority to score plugin 794a8668fa8 move funcs from test/e2e/framework/job to test/e2e/apps 12d08d52ee6 Improve output of update-openapi-spec.sh when printing logs from file. 291a7bb1649 feat(scheduling): move csi volume predicates to csi filter plugin c75787bb778 Fixing Potential Race Condition in EndpointSlice Controller. b8b846c31c8 Use Deployment in sample-apiserver examples 013994a7408 Updating minor grammar errors. 89867e1c218 Move CheckNodeUnschedulable predicate to its filter plugin c4331b0369d Move VolumeZone predicate to its Filter plugin 19fe9f8d947 replace grpc.WithDialer which is deprecated 6596a14d392 add missing alias of api errors under test 5bc0e26c190 unify alias of api errors under pkg and staging fc738cbb1d1 unify alias of api errors under test 2af59673105 move func EnableAndDisableInternalLB from test/e2e/framework/service to test/e2e/network c467a733c31 Remove unused function NewMetricExporter from e2e test 2b3df3587e3 Deprecate scheduler predicate and priority factory registration 4bfa4d8b30c Come out of loop when omitempty is true 36393390f43 fix: azure disk could not mounted on Standard_DC4s/DC2s instances dbc99290123 e2e: move funs of framework/pv to e2e/storage e5168cc7bb4 move nodepreferavoidpods to score plugin bf2b709e822 Move ResourceLimitsPriority to its Score plugin faf27331bcb fix shell checks errors in cluster/common.sh 75b716a3526 Fix simple typos 1f0c7db589d update defaultconfig link 17fa573e059 Add simple explanation to verify-golint.sh 141909fa2e3 tighten ceiling for matching-precedence to 10000 e5d90c57f0e move NoDiskConflict predicate to its filter plugin 8fc21710e7c Added scheduler algorithm provider registery. c33c4fffd1d Move RequestedToCapacityRatio to plugins/noderesources 75872b8e799 feat: implement node affinity priority as score plugin 299a9c8cf50 add extra group and usage check for bootstraptoken fe7de96ebe9 cleanup scheduler's in-tree plugins registry naming 7271a81921e validation.go: don't clamp the CIDR size calculations 49b6e404617 Clean up kube-apiserver reference document 97676963c39 deprecate scheduling_algorithm_predicate/priority_evaluation_seconds 21c916c3d21 move Taint and toleration predicate to its Score plugin 70b80ae28a2 Deprecate scheduling_duration_seconds Summary metric f0e01bcfde4 Change log level to 3 when --random-fully is not supported 4123973726c e2e: move funs of framework/deployment/fixtures.go to e2e/apps/deployment.go 5fd6b8fae79 fix: remove totalNumNodes from priority metadata 3d39d90e8e3 Update modules 1fd59cfcf37 Swith to retry.Error for Azure cloud provider 3e10dbd6686 Use retry.Error for all Azure clients cc09b3ab6c3 Add retry Error definition b086d296def move funcs in replicaset to autoscaling_utils 803161d621d kubeadm: kube-dns is deprecated and will not be supported in a future version bae72ee8d2e using string instead of byte 237da6250b7 change print log for unity when during kubeadm init bf8a8a657c9 introduce checker for the result of nodeInfo.Node() 11382a31294 Delete unused function from e2e test autoscaling_utils.go 5b4a7744fad fix kubectl run help image name fcae27b9d2d If lastTimestamp is not set use firstTimestamp when printing event 3f591bb2dd5 feat: implement image locality as score plugin 83408acf757 Move volumebinding predicate to its filter plugin 32e1c032fd8 Add logs for rate limit values 6a1354252de Add unit test for extended ipv4 service IP range df4f5c1a30d Revert "remove ipallocator in favor of k/utils net package" a54e5cec54b Fix staticcheck failures for pkg/proxy/... b13e22482ea Count dropped requests except system previledged group requests. 107db83839c kubeadm: re-enable kubelet version check test in preflight 52435c021e0 Change Azure global rate limit to per client d564e730c98 format test file b264a747481 Add unit tests for pkg azure/auth e468385d0bf Remove ineffective calls in toUnstructured eeb8a5b7282 Added back the flag to trigger examining all Filters in the scheduler. e4c87c20e2d fix azure cloud provider bug when lb specified in other resource group 2497a1209bf bump k8s.io/utils version a5f782face1 Reuse converter in crdHandler#getOrCreateServingInfoFor 3e65b3793f3 Cleanup failedPredicateMap from generic_scheduler.go 429448cb402 move inter pod affinity predicate logic to its Filter plugin 7dc6c94395f kubeadm: use bind-address instead of address 947d6960215 On OpenRC ServiceIsActive should not report true if no such service exists 1f78a936d40 Deprecate AlwaysCheckAllPredicates in scheduler Policy API 29ec87f769c apiserver: add localhost to alternateDNS for IPv6 c715aacdc24 Add simple reference to synopsis of kube-scheduler 4291a03e395 fix apply set last applied namespace a8a00f690e6 hack/local-up-cluster: modify cloud provider launch to work with aws 2d2c9a884a0 Revert "Merge pull request #86376 from xieyanker/kubemark_deployment" b88788b0854 update to use e2e-up.sh instead of kubetest b4f52385356 Add instructions about how to use kubetest to bring up e2e test cluster 0ae8b6ba596 Update subnet mask calculation for compatibility with future VNIC changes c71dd7e4ee6 Bump Ginkgo module to release version ecfd30d2517 Bump Ginkgo to support building on riscv64 arch 0e786cbafcb swap over kube-apiserver manifest to use livez and readyz d1fb0b57dfd Expect NodeUnpublish calls when NodePublish is called 68f3802ba80 move NodeLabel predicate logic to its Filter plugin 119a9a94d12 InterPodAffinity Priority as Score plugin 22a0f55a682 move NodeLabel priority logic to its Score plugin c60802e8939 Add klueska as an approver in test/e2e_node/OWNERS f4bd4e2e965 Return error instead of panic when cpu manager starts failed. f2adf33bc8a update fluentd to 1.8.0 / fixed gemfile / fixed shellcheck lint problems by using xarg 8374c49c593 Update README.md c5002a348e3 kubenet: replace gateway with cni result 4303be3d9fe Revert pull request #85879 "hollow-node use remote CRI" 096bdb7121a Sample apiserver: Avoid etcd listening on DNS result for "localhost" f50638f4395 Isolate kubectl test-cmd plugin tests a84e883e4b3 rename _count to _total in a few metrics 8110e08dd4a Fix golint failure not contained in .golint_failures b898c79656a chore: port azure disk csi code to upstream 745248dd6f5 Fix cpu manager e2e test typo d1480ab49d6 It fixes a bug where AAD token obtained by kubectl is incompatible with on-behalf-of flow and oidc. 131180b1187 Add a config option to azure cloud provider for the pre-configured loadbalancers 79bc63fb4b7 Adds PreProcessor and PostProcessor functions for modifying apply behavior 6511b603c9c Define workloads specs by YAML 03df6320e59 Wait for resizing condition 53080bda9c9 Allocate map when out points to nil map 3aa794aafc8 remove personal kind.yaml that was added accidentally 877381550dc Revert "promote e2e tests for taint-tolerations in predicates" c14280e8d39 prevent blocking wait in cert reloading bac2e9fbe2c Autogenerated 619af251476 Remove DefaultConvert 9bd2912e7a0 Add CHANGELOG-1.18.md for v1.18.0-alpha.1. 48944b94da6 change kubemark from ReplicationController to Deployment 4e45421f610 Moves visitedUids and visitedNamespaces (used for pruning) into ApplyOptions e8e1cc9ee01 extract PreInitRuntimeService from NewMainKubelet 6b33a770685 Adopt kubeadm and kubeproxy unit test after new config field added. 670369f2a4a Move patch functionality for apply into its own file. e38e320222a Moved prune functionality into its own file. 07cb2fda5da Refactored some apply printing functionality; removed unneeded count and objs variables 02af4c9be20 Created GetObjects() method for ApplyOptions and integrated into apply 18fa7bdb6ea Cloud node controller: Only call once into cloud provider 667aaf33a6b Split cronjob tests, so they don't interfere 4eb61e3f93e Deal with auto-generated files: - Update bazel by hack/update-bazel.sh - make update 9b7d8712cfa Add show hidden flag to kube-proxy 869aef61af4 improves watch and report e2e test to also check IsResourceExpired since the API can return both errors (Gone, Expired) 6e789e9d52e fix: azure data disk should use same key as os disk by default 770e51cd100 Deprecate PredicateMetadata b3abfdc9e41 registered nodeports and noderesources prefilters f9c4551a947 Use private master IP in GCE kubemark tests 87e8137c18a cleanup(kubectl taint): fix Errorf and comment error, and remove unnecessary bool flag 9818b4522e3 Add klueska as an approver in pkg/kubelet/cm/OWNERS db2c048db9c support configuration of kube-proxy IPVS tcp,tcpfin,udp timeout 23957a6b289 Allow kube-proxy iptables mode to support dual-stack, with the meta-proxier. 01f1cf3c968 Add test cases for a helper function in controller manager 0bd41a300f1 Refactor `kubectl proxy` command to have similar design pattern as other kubectl commands. 62d77728829 Check FileInfo against nil during walk of container dir path 2103ea4dded Changes Visit() to Infos() in apply to keep slice of objects 5c537915bfc Mark '[sig-apps] CronJob should delete successful/failed finished jobs with limit of one job' flaky ce3839452e5 Mark '[sig-scheduling] PreemptionExecutionPath runs ReplicaSets to verify preemption running path' flaky 0224c481202 Job completed event added 21641571131 Make e2e scale updates unconditional 287e3298fbf suffix InSeconds to cacheTTL for clearification 82afa2bbafc Fix up the sub-test style a65d8aeb762 Add UID precondition to kubelet pod status patch updates 176c95ff3ef Add debugging for delete grace period e2e flake 3f3bc37e058 auth: add metrics to token cache d12608017d6 Mark GCEPD test flaky 8111bb3d771 Update wardle e2e image cad5de706a9 Build sample-apiserver image using kubernetes 1.17 / go 1.13 8fae8e54af2 Disable excessive logging in scheduler plugins 9898f479c1b code-gen: fix argument type for plural exceptions 2fe82075b44 fix staticcheck faulures in 'cmd' pkg c9418412d18 fix misspelling in comment f401d711aac networkPolicy validation ipv6 unit tests a16808f353a kms: use negative cachesize value to disable caching d45107a00da test/e2e: move funcs from test/e2e/pod to other folders c394d821fda Deal with auto-generated files: - Update bazel by hack/update-bazel.sh ecf5f7d7498 Deprecated metrics under /metrics/resource/v1alpha1 0db7074e1ad Add new endpoint for resource metrics. a634e254c16 Fix staticcheck failures for test/images 7331ec7b021 Move service affinity predicate logic to its plugin. 973fddd155f e2e: move funs of framework/gpu to e2e_node 4536ed50a04 e2e: move funs of framework/deviceplugin to e2e_node 21e906fba66 e2e: move funs of framework/job to e2e/upgrades/apps/job 8d3a8d5a6c2 e2e: move funs of framework/metrics to e2e_node 6603f41a130 Promote StartupProbe to beta for 1.18 fbe3521e8e5 fix: formating and typo d7f14fb38e4 fix: address test failure and review comments 51bff87b18d Add util function to merge resource lists 28f8e52f320 Add "kubectl describe node" resource tests 439a862bba6 Add huge page usage stats to kubectl describe node 4769cbedd5b Update go version in go.mod c6a2c4fa793 fix: add unit tests for truncate long subnet name on lb ip configuration 1a55d0f7b09 fix: should truncate long subnet name on lb rules 09032bea6cf addons: elasticsearch supports automatically setting the advertise address 02a0aad6d3d podfitsresource metadata as prefilter 3d353f5122d Update semantics of EvenPodsSpread metadata object 468aebc17f1 Move EvenPodsSpread metadata computation logic as a PreFilter Plugin 8953544b15e add unit test a70bec465da e2e: support long CSI driver names 4152f38d544 cache ttl is configurable 314b6cb32bb [auth]Change example in can-i to apps instead of extensions 623c4f9f17e e2e: move funs of framework/statefulset to e2e/apps & e2e/upgrades 6f3c68bd5c8 compatibility tests for default provider and mandatory filters bfd20c9e084 Fix build break - Hyperkube image needs kubelet/kubectl 5c6371502ab Update addon permissions 749eea7e0f4 Prune server-side print exemption list 0387cc7cb3b Update generated files e9870c30769 Update storage hash to use ingress type for cross-group comparison 2b4fac5760f Use openapi fixture for server-side apply tests f2f22b84cd5 Delete ReplicationControllerDummy 18ba6f94820 Remove references to unserved types 3df9e86a4ea Remove ability to re-enable serving deprecated APIs 424d5e20dfb Remove testapi 78a3a4a2b1d Remove testapi use from pkg/api/testing 5d5b444c4da Remove use of testapi codecs, selflink, resourcepath functions bb90f0ff94d Install APIs directly for tests c54dbd85e00 wrap host ports metadata in a prefilter. ee85b6a579f Don't report deletion of attached volume as warning d8c35733c0a doc: remove Draven from test package reviewers 470ea876237 fix broken link: https://kubernetes-csi.github.io/docs/Drivers.html 95bf2265337 fix staticcheck failures of test/e2e/manifest 77a9d4772b7 move funcs from test/e2e/framework/replicaset to test/e2e/apps d146e1941d2 Add getting Storage Quantity to ResourceList 5743cffd5d5 Move added info and status stack trace to the end of line. f786cb07b79 test/e2e/: use framework.Equal() replace gomega.Expect(...).To(gomega.BeTrue()|BeFalse()) 995d4083341 Clean up conformance tar test data 0e644c87493 e2e-topology-manager: Fix bazel tests 255ab6d2c35 Remove priority execution paths in favor of score plugins 288609ecf52 remove ds dependeny on scheduler metadata 70a2bccfd6c deprecate scheduler's FailureReason 31b0d7f8532 e2e-topology-manager: Fix package name fba4a7be340 e2e-topology-manager: fixes for gofmt 337fdf2f371 [WIP] e2e-topology-manager: Initial commit for E2E tests 2fdf1fa3c14 inter-pod affinity prefilter c229c78af7b Upload containerd logs to stackdriver 9cff3457705 Do not swallow timeout in manageReplicas 9f334a4d083 Add an interface to return scheduler framework instance effe2990824 kubeadm: add basic validation around kubelet.conf parsing 1657ef25ebd Extend authorization benchmark 15e98360a86 code-generator: update BUILD d511a809af4 code-generator: expose plural exceptions via flag 44a0d04b963 Add a unit test guarantees ClearState will fully clear a collector. 02f335d476b feat: remove several feature gates in 1.18 dcea6ff0653 fix: remove TaintNodesByCondition feature gate in daemon controller 64e49e187a1 add hwdef as a reviewer of hack 89b31c8d693 move test/e2e/framework/lifecycle/ test/framework/cloud/gcp ca532c6fb2c Ensure that error is returned on NodePublish 20f0408f293 promote SataQiu to an approver of test and test/e2e/framework 915b0964052 Make sure critical pod in the preemption test is always cleaned up. ec24d3c7e8f Set core_pattern to an absolute path. f5532861564 Pass initial set of runtime containers to the CPUManager at startup 6441e1ef436 Move CPUManager Checkpoint restoration to Start() instead of New() 69f80538504 Update top-level CPUManager to adhere to new state semantics 185e790f711 Update CPUManager policies to adhere to new state semantics 7c760fea384 Change CPUManager state to key off of podUID and containerName 9191a949ae7 Extend makePod() helper in CPUManager to take PodUID and ContainerName 7a15d3a4d7f Fix bug in parsing int to string in CPUManager tests 765aae93f8a Move containerMap out of static policy and into top-level CPUManager 1d995c98ef6 Update CPUmanager containerMap to allow removal by containerRef 0639bd0942c Change CPUManager containerMap to key off of (podUID, containerName) 3881e50cce7 Update CPUmanager containerMap to also return a containerRef 347d5f57ac4 Move CPUManager ContainerMap to its own package 0e4469cddda persist deployed DNS configuration during kubeadm upgrade dc17fc42833 fix log format string 773fbeab1e3 expose the clientConfig to consumers trying to build custom clients against the kubeapiserver d0210220e48 dump information for all namespaces related to the test ea913f38ead allow configuration of customized AfterEach functions for all tests 711dc0b5b5e Increase Burst limit for discovery client 5e0f36705ef Update CHANGELOG-1.16.md for v1.16.4. a5759ee2780 Update CHANGELOG-1.15.md for v1.15.7. ca0d2b7ce69 Update CHANGELOG-1.14.md for v1.14.10. cdf2e794a55 Clarify intstr.IntValue() behavior 0f410d625a1 change CounterVec to use Counter in the Kubelet's Pod Lifecycle Event Generator ca36822f1e7 client-go: update INSTALL.md to include semver tags c4ad07b0b14 e2e: move funs of framework/service to e2e/network 35b0f1f7ddc test/e2e_node/:use framework.Equal() instead of using gomega.Expect(bool).To(gomega.BeTrue(),explain) 00ea8c4f9e0 Revert "Add an option to specify kubelet flags for heapster node." f8e0c6bb41b test/e2e/storage : use framework.Equal() replace gomega.Expect(...).To(gomega.BeTrue(),...) dc3d1bd238e Eliminate running paths of Predicates in scheduler e70120f0838 fix staticcheck failures of e2e/storage/utils e2e/storage/vsphere 49e4bd137bd Ensuring kube-proxy does not mutate shared EndpointSlices 8647e75cec6 shared authenticator lookups 009c731a880 vendor golang.org/x/sync/singleflight c051fc2057a Added alejandrox1 to test/approvers 8ab226263a1 Adds tests ac23d55d907 Generates boilerplate code 27ffe439b61 Adds the algorithm implementation for the Configurable HPA 5c70cda6e51 Adds validation rules and proper defaults 141eaf79eed Introduces all API changes needed for Configurable HPA PR a051c591a1f Fix inter-pod affinity scheduler benchmarks a8839a9735f change FakeWatcher.Stopped to be a private field, as read it directly may cause Read/Write conflict race b911aa6471a fix potential memory leak issue in processing watch request 3ed535a89a2 fix staticcheck failures of e2e/storage/drivers e2e/storage/testsuites 6df97909bb0 e2e: remove unused method in e2e/framework/log 546dbf8b3cb e2e: move funs of framework/kubelet to e2e/scheduling 729bc82be64 Drop v1.15.0 API test data 82465dd8c20 Add v1.17.0 API compatibility data 9f6bbfb67f4 Revert "staging/publishing: temporarily disable publishing tags" edfef793640 Add kind/flake issue template a077734079b Update v1.17.0 CHANGELOG to match final draft 32dc70e0f13 optimize required inter-pod affinity 23a4a1191c6 Update CHANGELOG-1.17.md for v1.17.0. 57b538e657c Increasing LoadBalancerPollTimeout from 15 to 22 minutes a9f80c70b2c update RBAC rules in e2e aggregator test 3cc926f5efb e2e storage: fix type in comment 96084a5198c Make error message and service message more clear 17ae1eda3e9 e2e storage: improve instructions for external driver testing e7e9d1cf240 Add serathius to metrics-server OWNERS file 31fb04fa98e Remove cluster-monitoring 597816c11e2 update total_limit_size 3ffd8f34b24 update fluentd-es-configmap a192b59f9f0 fluentd add port promtheus and health check 325848509a6 es add readiness and liveness health check 089374e8d64 e2e: remove unused method in e2e/framework/autoscaling. babdcd0d149 invoke getTypedVersion() instead of direct runtime call a136108d2b8 Return all predicate failures instead of the first one 10b173868a7 move funs of framework/deployment to e2e/apps 31c302994ab updated fluentd to 1.7.4 + plugin updates and switch to debian buster 303c1a40bce fix static check in kubectl/pkg/cmd/annotate. dfb6c3424fe move unwanted console output out of versiongetter. 24d105995db Fix broken SELinux detection 27d645dc5b8 fix staticcheck failures of test/e2e/storage 96fe76a9ed4 kubectl oidc auth-provider: include cluster address in cache key 7f5076d8ee2 slim down some lister expansions c084d57b18a ping kmsplugin gentely when in good state aba0b315269 Changed Kubelet client and serving cert TTL/Expiry certs to use gaugefunc for calculating time remaining. dfa04bfc041 Ensuring EndpointSlices are not used for Windows kube-proxy implementations 4762985fb68 kubelet: guarantee at most only one cinfo per containerID 53be26e4025 optimize preferred pod affinity da53044abdf kubectl/drain: add option skip-wait-for-delete-timeout 2bba8dac7fa staging/publishing: temporarily disable publishing tags efd61ae3e48 correct invalid urls 06c59017697 fix staticcheck in test/integration/apiserver d428de26b83 Fix IPv6 addresses lost issue in pure ipv6 vsphere environment a5226f623e1 Add cache for VMSS. 39cb8222c79 Add an option to specify kubelet flags for heapster node. 3e19201ec2f kubeadm: Throw an error if the currentContext does not exists dd50ac311a0 Fix LoadBalancer rule checking so that no unexpected LoadBalancer updates are made 0dd468039da inject remoteRuntime to kubelet dependency 7947b6ce6d8 kubectl change podSecurityPolicy group 4d3d364d2ba promote e2e tests for taint-tolerations in predicates 6de70829784 remove two unused metrics aaac96c6605 Two bug fixes: (1) at least log something out if we fail to register our health check, (2) actually register a prometheus metric. I delete the deprecated metric in this block because there isn't any point to it, since no one can be broken by changing a metric that doesn't get collected 3fa070ad381 Fix nil pointer dereference in the azure provider 2e6d6d73e7b disable node deletion detach test 28a564cb323 Add current chairs to component base approvers a8ba361fd65 expect node to be recreated with the same name 909300b8be9 When running `kubectl drain` in dry-run, list warnings and pods that would be deleted. bacab3d4577 Deflake kubectl custom printing test d924407ede6 Include cloud/gcp in e2e.test f4d1674827e Refactor parsing logic for service IP and ranges, add tests fdd25ec9682 Fix bug in apiserver service cluster cidr split bc22d70e2b0 Revert "kubeadm: don't check if image exists before pulling" 8227b61022f bazel update 87ccd41af26 e2e storage: add compile test for public TestSuite API 160da35b23c e2e storage: public API for testsuites, support CSIInlineVolume type for generic resource dd7430134a8 Removing conditional check 1b63219c5ec Included CSINode describer fb33b2f42a9 increase LRU cache size 8x for authorization webhook da67bcbd355 added benchmarks for preferred (anti)pod affinity d81dd48e2c5 test/e2e/auth: Fix static check failures d3c562f7e09 Run all csi-hostpath containers as privileged bf92350b11a Refactor kubelet component config lenient path decoding b24dbac09a9 add hack/verify-typecheck-providerless.sh 94cf7319783 typecheck support setting tags, skipping test code, and ignoring directories d51b72d9e9b fix staticcheck in test/e2e/network/ c0db5b2562f Convert ExpectEqual(err, nil) to ExpectNoError(err) e057bd4ad2e fix: typo Snapshoting to Snapshotting 40911e74c16 fix staticcheck in pkg/printers 32850dc47d3 Revert "Use ExpectEqual test/e2e_node" cff9751112f Update GCE Windows startup scripts for TPM-based authentication 36784331eb8 Sync the status of static Pods e981d1ea44b remove framework dependency from framework sub-package kubectl b85adbf1fd9 moved WriteFileViaContainer and ReadFileViaContainer to kubectl_utils 4b99e5305e2 remove CheckFileSizeViaContainer from framework cd8da67b03c move KubectlCmd out of utils into its own package 4b8e552a888 Use typed errors for special casing volume progress 8aa26a6ed6f remove max pods from e2e test f967c544ad1 scheduler benchmark: allow to override bench prefix bc7d254317c Fix Cpu Requests priority Windows. 2dc3684cf76 Fix waiting for logexporter log fetching processes 09ede2fd982 Deleted extra 'phase' in command example 6f0eec4dffb Create kubemark cluster as private b3045389422 fix staticcheck errors in legacy-cloud-providers/azure 839b440173a Cleanup converter bcaab8c1a22 Fix bug in ignoring untypes conversions 7ab3e436f71 Cleanup old-style conversions ab6cbd2e8d0 Cleanup metav1 conversions d11b7a62040 run `hack/update-bazel.sh` c355cadbb1f Enhance error message for failed controlplane init 29eb15c3a84 fix golint check in test/e2e_node/runner/remote 901d7de5566 `kubectl create clusterrolebinding` creates rbac.authorization.k8s.io/v1 object b469404d976 hollow-node use remote CRI 9a9db004512 handle registry merge error 113001ab016 Utilize Context with timeout in gce_instances.go 1fb0dd4ec51 Rename PodDisruptionsAllowed to DisruptionsAllowed in type PodDisruptionBudgetStatus 6c1d587d514 kubectl/drain: add disable-eviction option 4d6e5bf7bea Utilize Context with timeout in GCE operations 2d3c8fe6b95 optimize anti-affinity predicate 727fdef2db8 Address PR comment 7eb6182a633 Revert "Fix shellcheck failure in log-dump/log-dump.sh" 82206578ccc Update checks.go 81471c36b11 [generated] bazels and vendor/modules.txt 6c0688fd517 santize codegen scripts 15a883b0674 s/apiextensions/apiextensionsv1/ for all imports in k/k 168f8f54f01 switch to v1 crd 51814ae189f Be more agressive acquiring the iptables lock 6fcd030877e fix staticcheck failures of test/e2e/upgrade 28327efe6bf Deflake delete grace period e2e 4629da28a02 Update CHANGELOG-1.17.md for v1.17.0-rc.2. c62d6add9b8 Deflake pod readiness e2e f2f0435e718 Enable hidden custom collectors when calling SetShowHidden(). ea7a230af63 All stable collector should be tracked in registry. 069b088ad7b The descs in a stable collector should be tracked by a map instead of slice. efa34ba484f add PredicateFunc for configmap 561ee6ece98 Use ExpectEqual test/e2e_node 9eda99793de use ExpectEqual of framework in test/e2e/storage d2d68026fc9 Fix golint issues in test/e2e/lifecycle/ cd7859901c6 Fix func VerifyLatencyWithinThreshold() to local dddd631706b cmd/kube-controller-manager: fix staticcheck warning 36b41bc9655 apimachinery: fix bugs in a Test function e581be1ec78 add err handling in gce/gci a70a5347360 Replace the hostname in the fluentd config file even if the file exists ba2cc99bdec Add test cases to verify kubelet & kube-proxy can recover if being killed accidentally 9b32d8734f8 Adds initial unit tests for tablegenerator.go e687bf4fe9e Use GCS bucket for crictl on windows. a151aa35dc2 Add defaulting logic for EncryptionConfiguration. f3885340826 make scheduling queue start before the scheduler starts and stops after the scheduler stops e9c400aabca update scheduler benchmarks to be more representative f0ea7bcf9e4 kubeadm: set cluster name on the controller manager aa278345fa5 update gopkg.in/yaml.v2 to v2.2.7 0741f6fa295 Ensure that metadata directory is not created if secret is not found 309c6f863a1 Handle the case of remounts correctly 5feea93163b Rename MarkVolumeMountedOpts to MarkVolumeOpts cdbd3ba5c29 Change interface of SetUp function db9ac38592d Change signature of MountDevice function and remove MountDeviceWithStatusTracking 0c52b6606e6 Refactor NodeStage function 57019e0628a Add tests for verifying in-progress state 27a70a9260c Update generated files 321e99367af Add code to handle Setup With Status tracking dc9e64c31e4 Implement return status codes d620493b743 Ensure webhook backend requests are not artificially rate-limited 50dbcb3e005 Make sure PodExistsInVolume does not uses uncertain volumes 34a6007dfed Add code to mark volume as uncertain a795f3de88a Add code for introducing uncertain state of mounts 51b7ef2c87e fix: replace TrimLeft with TrimPrefix and TrimRight with TrimSuffix e911833814b Make APIService.spec.service optional in the openapi v2 spec 2df8ad1b1c8 Cleanup default conversions d6969d2c554 Cleanup metav1 conversions 12ee83ed942 Use new-style conversions in default conversions 8c2aed4ff5b Optimize:remove unnecessary judgment c687521b446 fix staticcheck in test/e2e/cloud/ 0c36299c218 Use expect equal test/e2e/upgrades af231b09e41 remove Kubeadm-env file overwrite from apply and node command 14fe7225c14 kubeadm: Improve resiliency in CreateOrMutateConfigMap 335a3e9efbc kubeadm: use correct IP family for etcd localhost 84a9803741f Log error when writing checkpoint fails 6415fa765e2 Remove nodes slice in loop of takeByTopology 5ea43f20cb7 optimize scheduler's UpdateNodeInfoSnapshot 22d883d7f23 Nominate liu-cong to be sig-scheduling reviewer. 366e053e28d Switch addon resizer to 1.8.7 1d3b6ece636 Remove stale comment re making apiserver common names dynamic fef9e413dff Make cluster auto scaler use leases b1b9e6254a5 Bump Cluster Autoscaler version to 1.17.0 798d2fb75aa Fix comment typo 69aae3aa5ab fix golint failures of test/e2e_node/remote be0750f6d6a rm -rf staging/src/k8s.io/apiextensions-apiserver/pkg/client d07dd4bbedf Fix NetworkPolicy PolicyTypes validation f461225ba5a Update go-winio module version from 0.4.11 to 0.4.14 5bec54ed5b6 fix: padded base64 encoded docker auth field 044b315d611 All check for instanceID ae72e19ab6b apiextensions: filter required nullable to workaround kubectl validation 52ac2783bc8 use framework refactor code in test/e2e/common a252a617a5e drop KUBE_TIMEOUT in test/cmd/kubeadm.sh aacd79cc363 setting kubemark node labels 5cf06bfa805 fxing kubemark node labels 9ca21e3722b Deal with auto-generated files: - Update bazel by hack/update-bazel.sh 2187fe26997 Add ClearState() API to Desc. Add create() API for Desc Add annotatedHelp fields to Desc. 6323dc789aa Add kind/deprecation to pull request template 81d05e91b5b Retain objects for a limited lifetime in the mutation cache detector by default 9a868766eea Enable mutation detection 4d9c2a4ef8d use ExpectEqual of framework in test/e2e/autoscaling/ d44583d28ae Fix iscsi refcounter in the case of no Block iscsi volumes bbc49d6b1f4 catch the exception raised in Remove-HnsPolicyList a445c97a0e5 update cadvisor dependency to v0.35.0 1ad78587924 stop spamming the log on failures with full objects 7360797a126 remove redundant definition of the defaultProvider in the scheduler ee2418c7aaf Move hostdns.conf out of cni directory. e66f4ca537b Add containerd windows support on GCE for test. 2e0bad569d2 export scheduler.Snapshot function, needed for cluster autoscaler integration 86f3bc25e1d Reduce unnecessary Set in updateAllocatedDevices 29588eee85e Deal with auto-generated files: - update bazel by hack/update-bazel.sh 6dfd3e11e5d correct invalid urls in CHANGELOG file 319946924eb Refactor custom collector unit test. f993950b3f1 use framewoek in test/e2e/cloud 4325e8a4528 e2e: use log functions of core framework on pv, testfiles and volume sub packages 14316058f0a Adding KubeProxyConfigMap19 checking in test-e2e-kubeadm bc53b97ceb2 Clarify client-go issue location (#85464) e7172b3dbf4 pkg/master: Fix static check failures a3a4320aff2 Wait for PV to be available before creating PVCs in volume binding test 5b1fb221b6e increase pv controller resync period to try to deflake api update conflicts ce68a89d26a kubeadm: simplify discover/token and add detailed unit tests a8991a108a8 Enable update-bazel.sh outside of GOPATH 657a3a3294e Delete client node selector during volume creation 18ba2643dba add applyto tests for controller configs 3c1dc89d987 fix kube-apiserver poststarthook additions to avoid duplicating them 016ab0b899b Fix benchmark artifact parsing. deb75da17bb fixup kubectl test a1595da534a Attach runtimeclass printer 03910e99da2 Attach resourcequota printer 9b387da5a1a Improve rolebinding/clusterrolebinding printers 5448a8b526a Add webhook printers cc7e7245a31 Add CSINode/CSIDriver printers 36eb250cbb4 Switch TableGenerator/TableConvertor interfaces to metav1 4dd6fd44806 Fix AWS eventual consistency of AttachDisk a0489c6ca80 test/e2e/apimachinery: fix staticcheck warning 4d028a7903a Extend Registerable interface with FQName() and track collector by name. b9ef1ce87ee lazyInit accepts fqName when init. b881f19c8be kubeadm: Group centric component configs 837fd41c42b Flip CSIMigrationOpenStack flag to be beta and off by default d2bdf89a8b9 fix golint issues in test/e2e_node e4b5a54eb65 fix broken link:https://kubernetes.io/docs/concepts/overview/object-management-kubectl/ 59274b56af2 Use plugin name for filtering metrics d78137bbfe4 Fix PVC condition check for offline resizing 07806d4300c add test coverage with kubectl get components c071265c774 modify the error url of autoscaler 1cb3992d1b8 Switch storage version to use v1.CSINode in 1.18 494629ef58c Fix resource version precondition on pod delete c9dafc8cf9f Add RainbowMango to onwer list of metrics stability framework. dd76fdfce55 Rename Azure driver to Azure Disk driver 2fe699cacd3 add myself to sig-network-approvers e87e4bea0fe Fix HTTP readiness/liveness probes for local node e8ee8622b80 Add support for new dual-stack flags for kubernetes-controller- manager in kubeadm: - node-cidr-mask-size-ipv4 - node-cidr-mask-size-ipv6 ecd1c074727 don't error if set-resources patch is empty 7898b3f0a8b kubeadm: update image pull tests 09d4d65b1bd fix etcd version check error on ARM f6f3738a003 kubeadm: don't check if image exists before pulling c38e79e76d4 refactor: incorporated the review comments 5a1c6b6c022 Revert "remove redundant `source` in shell" 4229b992032 Deep copying EndpointSlices in reconciler before modifying them. bbbf3963489 make elasticsearch discovery supports IPv6 b1c39e9b160 apimachinery: Fix Dropped Test Error (#85427) f96dda6fcfd removed comments referencing akse 8682e902f54 kubectl/drain: Add context support 10865d99444 Provided a mechanism to re-register hidden metrics. a4abc1dd4d6 refactor(golint): lint fixes for iptables test file 81d00077162 Hi San Diego (#85424) 9dcb3bfcff2 Added rest client metrics for client TTL and rot. (#84382) bfa4188123e Fix kubectl conversions c224a6de5e0 Output port as number in error message 73a881e06db Fix GKE upgrade test. 65aefd3def6 Update CHANGELOG-1.17.md for v1.17.0-rc.1. 906d3159b12 kubeadm: add a upgrade health check that deploys a Job c3c7ea2efd8 Dump namespace if the namespace could not be cleaned up 4428c0c25c1 stop_kubemark 1431853075b fix broken link :https://github.com/kubernetes/community/blob/master/contributors/devel/container-runtime-interface.md 1c25890e946 fix broken link :https://github.com/kubernetes/community/blob/master/contributors/devel/cri-validation.md 98be7831e4d Revert "kube-proxy: check KUBE-MARK-DROP" abc64a8519c Print nominated pods on the node when dumping scheduler cached NodeInfo 3322ff9551e generalize solution 81afa77e3bc add pod info when failing to add pod to queue 99603e105ae check service status value returned by EnsureLoadBalancer 3cbc07bb64a Promote a TCP probe test to Conformance 11b0e9af251 better comments 73c1ab71e27 Fix a bug in port-forward: named port not working with service 55828d059dc misc fixes 8b951edada6 Set default value for TEST_CLUSTER_LOG_LEVEL and KUBE_GCE_INSTANCE_PREFIX e16cc492b0e fix kubemark output error a232971d732 Add public documentation for kubelet/apis/config 7b478d15d58 Set node cidr mask size ipv4/ipv6 config 8f4a262d618 fix 1-12 number urls 96eb647898d add cofyc as local volume owner e465e1089d1 Sets HostNetwork to False for tests which do not require it a3c82e8ae31 apiserver: add Retry-After header to response when apiserver is shutting down 9aa68a5cf4b client-go: add connection refused to list of transient errors 6b73c9f8c21 upgrade api-version to fix azure file AuthorizationFailure 5652819292f kubelet/network: add sig-network-approvers to OWNERS fa9a55617bb Fix device plugin generator script 1daa08c5c86 use context to check client closed instead of http.CloseNotifier in processing watch request 821362bd1e3 SafeSysctlWhitelist: add net.ipv4.ping_group_range b05749c619a chore(gofmt): go format fix d49bc343760 [pkg/auth/nodeidentifier/default_test.go]: fix testing error message typo 55c83e33972 Fix golint issues in pkg/kubelet/events/event.go 214228f0248 Remove the derprecated API RawRegister from stability framework 1f4cd65be5e chore(lint): removing the iptables pkg a4631c845e7 chore(lint): lint fix in /pkg/util/iptables bdc11c28064 chore(lint): fix iptable.go file lint 0965b577f47 Wait for kubelet & kube-proxy to be ready within 10s ec57d8a4d0b Support Azure Stack dynamic environments 21f7060c8f4 Plumb test state through to fake volume host creation for error handling dd308ca5769 Fix grammar: have -> has d931b8434b0 Tolerate unset $GOBIN be78dd7526c added yliaog to OWNERS 1f2feb2e7ec Test writing configurations with numeric names c80fe4d9146 tests: Removes [LinuxOnly] tag from a few tests ce5cbe8b13d Add tests for kubeproxyconfig c762fbfa2bf Add componentconfig package testing files dcf80e31ac0 Migrate Kubemark to distroless cfa6f834278 Enable snapshottable e2e test for csi pd driver b7b10fc8993 kubeadm: reset raises warnings if it cannot delete folders 884582d8921 proxier: improve node topology event handler logic 197964210ac remove redundant `source` in shell e975774b334 use ExpectEqual in /e2e/auth 259cc951ffc add ut for scheduler framework 361cd7212eb Fix a comment typo in legacyNodeRoleBehaviorFeature 50bc528a7ed e2e: move LogFailedContainers out of e2e test framework util.go 7420faab435 fix-staticcheck in /test/e2e/windows 34b05d36aa7 Move suites.go to e2e package e27188d70b1 Remove e2e/framework/profile_gatherer.go f7e6b7a817e Add support for GOBIN to generate-groups.sh. bbae978d4a0 Included FSType in CSI volumes 0e93282a357 Clean up cluster-service label from calico-policy-controller 871d95cabdd Reduce visibility of prometheus libs 0412369bcd3 Deal with auto-generated files: - Update bazel by hack/update-bazel.sh c4f8c6eea71 Add flag for which to show hidden metrics to kube-controller-manager 7cfb6ec1a39 fix the defect in the shell scripts 8206a1f7142 Add matthyx to sig-node-reviewers 30bf1f47dd4 Hide kubelet metrics that have been deprecated in 1.14 b1ced1a05e5 remove unused func ce34d0a49dc refactor events utils in e2e 92c7e8e802c Fix golint failures 31d7a026db7 pkg/master: fix staticcheck warning e9edfbc539e modify dockerID to containerID 3d745c4ad45 Add johnbelamaric as conformance code reviewer/approver e99a325d4e9 Fix shellcheck failure in log-dump/log-dump.sh 896f84b6525 Fix golint issues in pkg/apis/batch/validation cfc34712c20 Fix golint issues in pkg/registry/.../storage e55fc5656c3 Fix golint issues in pkg/util/sysctl/testing fc8ea988901 kubelet: rename HTTPGetter interface 4dd546cf2cc Allow usage of consts and variables for stable metrics in static analysis d30319711e3 Fix golint failures for pkg/kubelet/config/... 0649f4064e9 Variables collides with imported package name 47642a0badc fix kubelet failed to start on setting hugetlb limits in non-exist cgroup dir cause by kubelet startup be interrupted on setting list of cgroups In the 'cgroupManagerImpl.Exists' not check&recreate the hugetlb cgroup dir. Then setting the limits in non-exist cgroup dir will cause kubelet start failed. 8e50c55e6bf kubelet: add certificate rotation error metric 9a1f631c5ca Replace nginx image with agnhost in sig-node pods tests 7d4f5554496 correctly handle resetting cpuacct in a live container b44d7c8d3cd Drop version from static openapi json file fd6983c70f9 simplify volume zone checker 9fec783d805 Log mvcc revision compaction as warning fef67e4dabe Fix validation for metav1 fuzz targets. 4b339e6e4e8 fix syntax error in test 3ae8c864de2 Fix error in periodic resyncs description ff543ddfc09 Clarify that OnUpdate can mask delete and recreate e31c7cb1932 Declare constants in pods test as const fdbf5ef0b8b ignore image err when docker image has been cleaned up 5616ce97622 [k8s.io/sample-controller/controller.go]: fixup minor typo 8f099010a5f Centralizes images into agnhost (part 4) 49207027c64 Fix golint errors 6aaae7d6466 Add support for builtin modules in kube-proxy 46fd8fce45c kubectl: remove unreachable code 61c80012448 Fix etcd-version-monitor readme and yaml file. c6f05979d34 Update Calico to v3.8.4 845c223d130 Bind kube-dns containers to linux nodes to avoid Windows scheduling ec3a38758c5 Bind metrics-server containers to linux nodes to avoid Windows scheduling on kubernetes cluster includes linux nodes and windows nodes 5695b348db2 Bind metadata-agent containers to linux nodes to avoid Windows scheduling on kubernetes cluster includes linux nodes and windows nodes 5459dbf84b7 Bind dns-horizontal containers to linux nodes to avoid Windows scheduling on kubernetes cluster includes linux nodes and windows nodes 56d1c3b96d0 update CRI to support hugepages 97e2576750d hostport return error when claim SCTP type port 9dadafa8979 healthz: instrument root healthz requests for metrics 9c120c8e1a3 Clalify how to contribute to kubectl book 3be31530d5a cri_stats_provider: do not consider exited containers when calculating cpu usage 0b481e8412e Shorten health check timeout for AWS NLB with externalTrafficPolicy: Local 91b9d421094 Fix typo 6b0748d3b5c Added e2e test to verify zone support across datacenters in the same vCenter 4b775046d4f remove stateCheckPeriod 3bb3db1d36e Bumped the number of times a node tries to lookup itself e7cc2c2d280 Report api request throttling at v=3 6d64d0610ca fix path to prow size plugin Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python3-docker-compose: update to 1.25.5Ricardo Salveti2020-05-051-2/+2
| | | | | | | | | | | | | | Main change is support for the compose format version 3.8. Relevant git changes between versions: - 41d229eb Fix v3.8 schema support for binaries - 15bb3eeb add warning when max_replicas_per_node limits scale - 5d34f12f set min engine version needed for v38 schema support - 82873d2b update api version for 3.8 - fe832661 Add v3.8 schema support Signed-off-by: Ricardo Salveti <ricardo@foundries.io> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: Update python3.5 reference to latest python versionSai Hari Chandana Kalluri2020-05-021-2/+2
| | | | | | | | Python3.5 is no longer supported, update references to latest python version using variables from python3-dir bbclass Signed-off-by: Sai Hari Chandana Kalluri <chandana.kalluri@xilinx.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: Upgrade to 4.0.2Mingli Yu2020-04-261-2/+2
| | | | | Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>