summaryrefslogtreecommitdiffstats
path: root/recipes-containers
Commit message (Collapse)AuthorAgeFilesLines
* kubernetes: Upgrade v1.27.1 -> v1.27.5Soumya Sambu2023-10-271-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Addresses CVE-2023-2431, CVE-2023-2727, CVE-2023-2728, CVE-2023-3676, CVE-2023-3955 and few other bugs. Bumping kubernetes to version v1.27.5, which comprises the following commits: 38c97fa67ed Merge pull request #120135 from ritazh/cherry-pick-cve-2023-3955-1.27 89048339422 Merge pull request #120130 from ritazh/cherry-pick-cve-2023-3676-1.27 acc29048e6d Use environment varaibles for parameters in Powershell 172644fb55d Use env varaibles for passing path 00dfa0634be Merge pull request #119868 from liggitt/automated-cherry-pick-of-#119835-upstream-release-1.27 3b6bcaa0b96 Avoid returning nil responseKind in v1beta1 aggregated discovery bd722aa3ff5 Merge pull request #119828 from jeremyrickard/go1207-1.27 94b3e00eef0 [release-1.27] releng/go: Bump images, versions and deps to use Go 1.20.7 de56018f04a Merge pull request #117269 from tnqn/automated-cherry-pick-of-#117245-#117249-upstream-release-1.27 521580378aa Merge pull request #119363 from jsafrane/automated-cherry-pick-of-#117804-upstream-release-1.27 d35a1c8a7a7 Merge pull request #119620 from liggitt/automated-cherry-pick-of-#117710-upstream-release-1.27 579208d9616 Merge pull request #117486 from TommyStarK/automated-cherry-pick-of-#117449-upstream-release-1.27 2ac615ccde3 Merge pull request #117235 from cvvz/automated-cherry-pick-of-#116134-origin-release-1.27 559f43d49c6 Merge pull request #119466 from mimowo/automated-cherry-pick-of-#119434-upstream-release-1.27 382c283f339 Merge pull request #119113 from champtar/automated-cherry-pick-of-#118922-upstream-release-1.27 05b64c6b5e1 Merge pull request #119604 from a7i/automated-cherry-pick-of-#118549-upstream-release-1.27 ecd45047e45 Merge pull request #119572 from andrewsykim/automated-cherry-pick-of-#118601-origin-release-1.27 927dba2589a e2e_node: move getSampleDevicePluginPod to device_plugin_test.go db832fdfa67 fix 'pod' in kubelet prober metrics 4c67c5d5e76 priority & fairness: support dynamically configuring work estimator max seats 6d31f4b31ba Merge pull request #119519 from jingxu97/automated-cherry-pick-of-#118451-upstream-release-1.27 17c98720e84 Add mininumKubelet tag into ReadWriteOncePod test ed0cdc9e0b2 Include ignored pods when computing backoff delay for Job pod failures ae24a5cf74b Remarks 9e1050b4d90 Adjust the algorithm for computing the pod finish time fa950050cc9 Update CHANGELOG/CHANGELOG-1.27.md for v1.27.4 fa3d7990104 Release commit for Kubernetes v1.27.4 d794e0e5cf8 Merge pull request #119366 from xmudrii/go1206-1.27 a1b127ca7a1 [release-1.27] releng/go: Bump images, versions and deps to use Go 1.20.6 aefc4d0392a Rename updateReconstructedFromAPIServer eeba02fc625 Rename volumesNeedDevicePath 5eb3b748e8e Update volumesInUse after attachability is confirmed f8bb161ab55 Add uncertain state of volume attach-ability 08b7937d256 Refactor FindAttachablePluginBySpec out of CSI code path 16fc1c954ce Merge pull request #119262 from HirazawaUi/automated-cherry-pick-of-#119229-upstream-release-1.27 3ca3e0ad484 Merge pull request #118947 from Evan-Reilly/automated-cherry-pick-of-#118237-upstream-release-1.27 5ee5d7346e1 Merge pull request #119096 from aleksandra-malinowska/automated-cherry-pick-of-#117865-upstream-release-1.27 1484a5c32f0 Fix the converts an empty string to nil. b5c876a05b7 Merge pull request #117226 from princepereira/automated-cherry-pick-of-#116749-upstream-release-1.27 d98c5b8a026 Merge pull request #119160 from alculquicondor/automated-cherry-pick-of-#119159-upstream-release-1.27 28c79be6747 Add unit tests for parallel StatefulSet create & delete 66f980be120 Parallel StatefulSet pod create & delete 288504fbf8d Refactor StatefulSet controller update logic 92a0f58e2bf Only declare job as finished after removing all finalizers c655001fa48 Automated cherry pick of #118716 upstream release 1.27 (#118911) 052ac3eb1bf Merge pull request #119065 from xmudrii/automated-cherry-pick-of-#118899-upstream-release-1.27 b667da8e08a Merge pull request #118683 from serathius/automated-cherry-pick-of-#118460-origin-release-1.27 f8c1cc33cb6 Merge pull request #119139 from kmala/1.27 5bbacb11989 Merge pull request #118290 from HirazawaUi/automated-cherry-pick-of-#118177-upstream-release-1.27 b383755e462 Hide numberOfMissedSchedules as an algorithm internal number 26db84e04c7 Update schedule logic to properly calculate missed schedules fe4e288bcdd Merge pull request #118855 from aojea/automated-cherry-pick-of-#118686-upstream-release-1.27 a54590f218d Merge pull request #117936 from jsafrane/automated-cherry-pick-of-#117243-upstream-release-1.27 ad569aec159 kubeadm: backdate generated CAs by 5 minutes 0fc5c972129 client-go: allow to set NotBefore in NewSelfSignedCACert() 0ed276fb568 Merge pull request #118199 from aleskandro/automated-cherry-pick-of-#118053-origin-release-1.27 04e86095d38 Merge pull request #118930 from atiratree/automated-cherry-pick-of-#118876-upstream-release-1.27 3c115eec0b9 Automated cherry pick of #118805: test comment should match the code in podgc (#118913) db247e1df34 Merge pull request #118969 from champtar/automated-cherry-pick-of-#117791-upstream-release-1.27 55872a8eb12 Merge pull request #119086 from neolit123/automated-cherry-pick-of-#118150-origin-release-1.27 39a4cd1a083 call ./hack/update-vendor.sh 33af2a45f53 kubeadm: remove function pointer comparison in phase test 3f4643682e3 CHANGELOG-1.27: Add note for AWS in-tree provider removal 703edddae4e Updating the nodeAffinity of gated pods having nil affinity should be allowed 3b874af3878 Merge pull request #118662 from mkowalski/automated-cherry-pick-of-#118329-upstream-release-1.27 d936e6669bb Merge pull request #118841 from bobbypage/automated-cherry-pick-of-#118497-upstream-release-1.27 3aa21cec0ec fix the existing problem (0 SerialNumber in all certificate) as part of this PR in a separate commit cd08820ba9a update serial number to a valid non-zero number in ca certificate 5253d8e02c7 Merge pull request #118664 from pohly/automated-cherry-pick-of-#118524-origin-release-1.27 76b9400cea3 Merge pull request #118283 from pohly/automated-cherry-pick-of-#118257-origin-release-1.27 1260b845752 Delete CRDs created during field validation tests. f689046fb6b kubectl explain should work for both cluster and namespace resources and without a GET method f7d82bfdffe Merge pull request #118797 from harche/1.27_cadvisor_bump 59cd1d0b3bb always execute condition for wait.PollUntilContextTimeout with immediate=true 5423fffca9d Review remarks to improve HandlePodCleanups in kubelet 24c67c15240 Fix the deletion of rejected pods 0539a6a194a Merge pull request #118821 from helayoty/automated-cherry-pick-of-#118049-upstream-release-1.27 62cf5ee1cdb Unset gated pod info timestamp in addToActiveQ 027b4632bbb deps: Bump to cAdvisor v0.47.2 ea2af58b5bd Make etcd component status consistent with health probes f2548642c4e e2e storage: terminate worker quietly on test completion 9a001cea215 Fix flaky persistent volumes e2e test eb5825b3a3c Set the node-ips annotation correctly with CloudDualStackNodeIPs a2ba2626e85 Update CHANGELOG/CHANGELOG-1.27.md for v1.27.3 25b4e43193b Release commit for Kubernetes v1.27.3 aae883e5fa7 Merge pull request #118553 from puerco/bump-1.27-go1.20.5 e13e5915a78 Merge pull request #118307 from SataQiu/automated-cherry-pick-of-#117169-upstream-release-1.27 e0a2a6efdd1 update-vendor: update vendored go.sums 82b2c5aefa3 releng/go: Update images, dependencies and version to Go 1.20.5 e2cc1a3b21b Merge pull request #118515 from aojea/automated-cherry-pick-of-#118499-upstream-release-1.27 3a77d5a59f0 Merge pull request #118471 from ritazh/automated-cherry-pick-of-#118356-upstream-release-1.27 b30e94b1253 kube-proxy avoid race condition using LocalModeNodeCIDR 5e00018fccf Merge pull request #117948 from dlipovetsky/automated-cherry-pick-of-#117792-#117724-upstream-release-1.27 76f14499624 Merge pull request #118281 from aojea/automated-cherry-pick-of-#118256-upstream-release-1.27 d59b91d97b4 Add ephemeralcontainer to imagepolicy securityaccount admission plugin d71d96a5d24 Merge pull request #118219 from mimowo/automated-cherry-pick-of-#117586-upstream-release-1.27 c48bdec2ced Merge pull request #118279 from aojea/automated-cherry-pick-of-#118200-upstream-release-1.27 c345ce91a03 supported version of etcd 3.5.7-0 for Kubernetes v1.27.0-rc.0 22e8a99ec6e Fix the git-repo test error caused by the correct use of loop variables 009a7a6fb9f dra scheduler plugin test: fix loopvar bug and "reserve" expected data 7888798873e e2e framework retry on Service unavailable errors f41a169a354 e2e: apply timeout for CSI Storage Capacity test only to node 916bc55a7bf Merge pull request #118178 from HirazawaUi/automated-cherry-pick-of-#118156-upstream-release-1.27 e407c2b4b02 Add DisruptionTarget condition when preempting for critical pod d2bd738e274 update webhook test to go 1.21 4025005877a Merge pull request #118105 from SataQiu/automated-cherry-pick-of-#118069-upstream-release-1.27 af024b2a086 Merge pull request #118111 from liggitt/automated-cherry-pick-of-#118104-upstream-release-1.27 9107eee6583 Test APIService safe handling at startup 0bff4e35669 Fix waiting for CRD sync at server start 1ae728f4344 kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet f404d1c4d3c Update CHANGELOG/CHANGELOG-1.27.md for v1.27.2 7f6f68fdabc Release commit for Kubernetes v1.27.2 Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* moby: update to v24.0.5Bruce Ashfield2023-10-021-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping moby to version v24.0.5-20-g00e46f85f6, which comprises the following commits: b7c5385b81 update to go1.20.7 6be708aa7d vendor: gotest.tools/v3 v3.5.0 b6568d2dd5 api/types/filters: fix errors not being matched by errors.Is() 02241b05fc update containerd binary to v1.7.3 3a6899c6fd update containerd binary to v1.7.2 7927cae910 c8d/container: Follow snapshot parents for size calculation 45ba926c6d daemon/list: Drop unused arg from containerReducer 6c4121a943 daemon/list: Refactor refreshImage fcb68e55fa daemon/list: Replace ErrImageDoesNotExist check 3029f554cc c8d/readConfig: Translate c8d NotFound to errdefs 35a8b00b18 hack/integration: Add TEST_INTEGRATION_FAIL_FAST fed26d5b3c vendor: github.com/moby/buildkit v0.11.7-dev eede7f09c7 Remove Upstart scripts 907f838603 Remove Upstart and cgroups bits from Debian sysvinit script f022632503 Dockerfile: update runc binary to v1.1.8 98a6422cbc c8d/inspect: Include platform Variant aab94fb340 Dockerfile: update buildx to v0.11.2 1be48ec553 c8d: Make sure the content isn't removed while we export ff0144de3b ci(buildkit): remove early-return from buildkit-ref a936ae7e98 ci(buildkit): remove misleading code from buildkit-ref 4c29864b02 hack/with-go-mod.sh: warn on stderr 3c5c192baf c8d/resolveImage: Fix Digested and Named reference 572de8764e c8d/inspect: Don't duplicate digested ref 5dded3340c ci: extract buildkit version correctly with replace-d modules bd1ae65aab quota: remove gotest.tools from testhelpers 544032f7a4 hack/d/cli.sh: properly handle errors in curl 0df2e1bdd8 Dockerfile: improve CLI/rootlesskit caching 05f82fdd00 Dockerfile(.simple): align APT_MIRROR support 151686a5c8 Makefile: pass through APT_MIRROR 31567e0973 Dockerfile: use default apt mirrors d94f2dcab2 client: Client.postHijacked: use Client.buildRequest bff68bf2cc client: Client.setupHijackConn: explicitly ignore errors 8bdf6d1baf ci(bin-image): add SHA-based tags 26a457e7a3 ci(bin-image): fix meta step b9904ba319 ci(bin-image): fix typo e7c333cb6e ci(bin-image): don't set tags when pushing by digest fcb87e8ae1 ci: push bin image to Docker Hub 68c0cec772 Disable tls when launching dockerd through hack/make.sh 738d8417e0 libnet: Return a 403 when overlay network isn't allowed a5c0fda157 libnet: Return proper error when overlay network can't be created deea880581 pkg/jsonmessage: use string-literals for easier grep'ing 962a4f434f pkg/ioutils: use string-literals for easier grep'ing cea5829402 pkg/idtools: use string-literals for easier grep'ing 69d77bc150 opts: use string-literals for easier grep'ing ff667ed932 integration: use string-literals for easier grep'ing efe9e90ef5 libnetwork: use string-literals for easier grep'ing 2d2df4376b daemon/cluster: use string-literals for easier grep'ing ae8e3294dd client: use string-literals for easier grep'ing 892857179a cli/debug: use string-literals for easier grep'ing 147b87a03e daemon: use string-literals for easier grep'ing a3f1f4eeb0 integration-cli: use string-literals for easier grep'ing 5bba60b1bb builder/builder-next: use string-literals for easier grep'ing 632fc235d6 builder/dockerfile: use string-literals for easier grep'ing 75a90f85ad gha: add note about buildkit using older go version fa909dfaf4 update go to go1.20.6 bdaadec788 testutil: use dummyhost for non-tcp connections 547ea18fbb pkg/plugins: use a dummy hostname for local connections 597a5f9794 client: define a "dummy" hostname to use for local connections fee4db80a0 client: TestSetHostHeader: don't use un-keyed literals 959889efd9 integration: Don't env cleanup before parallel subtests 6c5144d3e5 Add t.Helper() to the cli test helper functions 9ff2c3918c ci(buildkit): match moby go version for buildkit tests a4b1a5aef4 vendor: github.com/moby/buildkit@v0.11 0a0807e 6c7f6c2d47 daemon/containerd: fix assignment to entry in nil map during commit 0e88c57c47 integration: disable iptables in parallel tests a3049653c1 pkg/plugins: make unit test less time sensitive d3893b58ff daemon: daemon.prepareMountPoints(): fix panic if mount is not a volume 5892aae60f docs: api v1.28 - v1.40: add missing "force" query arg on plugin disable 7adb590e16 docs: api v1.41: add missing "force" query arg on plugin disable b5aacf8161 docs: api v1.42: add missing "force" query arg on plugin disable b732cfd392 docs: api v1.43: add missing "force" query arg on plugin disable 50fb65f0f5 docs: api: amend changelog for API 1.28 for "force" option 32bcbdfe65 api: swagger: add missing "force" query arg on plugin disable f66ef31605 docs: api v1.41: remove outdated information from ServerVersion acb95e4544 docs: api v1.42: remove outdated information from ServerVersion 335ed29345 docs: api v1.43: remove outdated information from ServerVersion 0ef846ce2e api: remove outdated information from ServerVersion af25852baa docs: api v1.42: remove "ClusterStore" and "ClusterAdvertise" fields 7a9c831e6a docs: api v1.43: remove "ClusterStore" and "ClusterAdvertise" fields 649bb2b9b8 api: remove "ClusterStore" and "ClusterAdvertise" fields 457399013b vendor: github.com/containerd/cgroups/v3 v3.0.2 016ad9b3e8 c8d/prune: Handle containers started from image id 87778af711 c8d/prune: Exclude dangling tag of the images used by containers 8bf037b246 c8d/softDelete: Deep copy Labels 8afe75ffa9 c8d/softDelete: Extract ensureDanglingImage e2bade43e7 testutil/environment: Add GetTestDanglingImageId e0091d6616 c8d: ImageService.softImageDelete: rename var that collided with import 42f3f7ed86 c8d: ImageService.softImageDelete: use OCI and containerd constants aace62f6d3 pkg/fileutils: GetTotalUsedFds(): use fast-path for Kernel 6.2 and up bb50485dfd pkg/fileutils: GetTotalUsedFds: reduce allocations 5dcea89ce1 pkg/fileutils: add BenchmarkGetTotalUsedFds 01eb4835c9 pkg/fileutils: GetTotalUsedFds(): don't pretend to support FreeBSD cd44aba8db [24.0] pkg/fileutils: switch to use containerd log pkg ee29fd944b gha: don't fail if no daemon.json is present b8ee9a7829 c8d/images: handle images without manifests for default platform d9e097e328 vendor: github.com/opencontainers/image-spec v1.1.0-rc3 806849eb62 seccomp: add name_to_handle_at to allowlist c24c37bd8a Restore active mount counts on live-restore c306276ab1 remove name_to_handle_at(2) from filtered syscalls d5e31e03b6 gha: Setup Runner: add missing sudo 85ad299668 Dockerfile: make cli stages more resilient against unclean termination e84365f967 Skip cache lookup for "FROM scratch" in containerd 96534f015d integration-cli: don't use pkg/homedir in test 6424ae830b Dockerfile: update buildx to v0.11.0 6055b07292 Fix missing Topology in NodeCSIInfo 2f379ecfd6 daemon: fix restoring container with missing task 136893e33b daemon: fix double-unlock in health check probe 290fc0440c daemon: fix panic on failed exec start 0556ba23a4 daemon: handleContainerExit(): use logrus.WithFields 35a29c7328 builder: pass host-gateway IP as worker label 210c4d6f4b daemon: ensure OCI options play nicely together f50cb0c7bd daemon: stop setting container resources to zero 0a6a5a9140 daemon: modernize oci_linux_test.go c92fd5220a c8d: mark stargz as requiring reference-counted mounts 5e48bbd14c contrib/busybox: Update to FRP-5007-g82accfc19 6776279896 daemon: registerName(): don't reserve name twice 7db3243e34 don't cancel container stop when cancelling context aec7a80c6f c8d: Use reference counting while mounting a snapshot 5652c59647 testing: temporarily pin docker-py tests to use "bullseye" aa47b29dbc vendor: github.com/moby/swarmkit/v2 v2.0.0-20230531205928-01bb7a41396b Bumping libnetwork to version v0.7.0-dev.3-1874-g67e0588f, which comprises the following commits: 11eaf1f0 sync MAINTAINERS file with new moby maintainers dbbf124d Clean up inDelete network atomically Bumping docker-cli to version v24.0.5-6-gb74562d91, which comprises the following commits: c0e376854 update to go1.20.7 1481c8ce9 vendor: gotest.tools/v3 v3.5.0 e97c76557 vendor: github.com/docker/docker v24.0.5 1ee40e2c7 configfile: Initialize nil AuthConfigs 3bd6d6902 Dockerfile: update buildx to v0.11.2 05bf7fbcc vendor: github.com/docker/docker v24.0.5-0.20230718221249-d4a26c153000 8b5023dd2 vendor: github.com/docker/docker v24.0.5-0.20230717072055-8443a06149b5 2a6348d1b Dockerfile: update buildx to v0.11.1 f4782b325 update go to go1.20.6 7d06f6b2f vendor: github.com/docker/docker v24.0.5-0.20230714235725-36e9e796c6fc 1447974b8 docs: rephrase section on credential stores for docker login 46293e97f Dockerfile: update to xx 1.2.1 bfe2ff820 cli/container: Don't ignore error when parsing volume spec b40742962 vendor: github.com/docker/docker v24.0.4 79c42c0b9 vendor: golang.org/x/net v0.10.0 a96d0a526 vendor: golang.org/x/text v0.9.0 5c5c50d71 vendor: golang.org/x/term v0.8.0 4bf11b756 vendor: golang.org/x/sys v0.8.0 224c7dbec vendor: github.com/sirupsen/logrus v1.9.3 e25d5c64c vendor: github.com/opencontainers/image-spec v1.1.0-rc3 419e94df4 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230531205928-01bb7a41396b 2d5f041bd commandconn: return original error while closing 520e3600e commandconn: don't return error if command closed successfully cd68c8f00 docker info: fix condition for printing debug information a78fd6ca6 docs: update link location for the overlay driver 9cd335d44 docs: fix static ip example, network needs a subnet d61e4fe87 docs: fix broken link 8e3a2942a cli/command/context: don't use pkg/homedir in test c3ef1cead docs: update the runtime configuration section 44eebb8bc Dockerfile: update buildx to v0.11.0 7ecfa2e7f Dockerfile: update gotestsum to v1.10.0 f11f30909 update go to go1.20.5 3a6c11773 Dockerfile: update ALPINE_VERSION to 3.17 11af1189d docs: add "--detach-keys" example to docker run reference f118c05e8 docs: move "--detach-keys" example to examples section Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* moby: update to v24.0.2Bruce Ashfield2023-10-021-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping moby to version v24.0.2-56-gd7aa1e14e5, which comprises the following commits: 5652c59647 testing: temporarily pin docker-py tests to use "bullseye" 789a8755b8 run `getent` with a noop stdin f7298b326e vendor: github.com/sirupsen/logrus v1.9.3 1c18ad6ca6 vendor: github.com/rootless-containers/rootlesskit v1.1.1 ae4a10df67 update RootlessKit to v1.1.1 24c882c3e0 update go to go1.20.5 b3133d7471 contrib/check-config: move xt_bpf check to overlay section 8c552012ae contrib/check-config: check for xt_bpf 61d547fd06 Dockerfile: Move dockercli to base-dev e5fbc3f75a hack/cli.sh: Quiet origin cleanup 1a078977e1 Dockerfile/shell: Install buildx cli plugin c4198e6053 Dockerfile: Use separate cli for shell and integration-cli 647ba03224 builder-next: Set moby exporter as default 961fe27408 c8d/handlers: Handle error in walkPresentChildren 087cf6f238 c8d/load: Don't unpack pseudo images 0b9d68f59d c8d/load: Use walkImageManifests cbf0779bfc c8d/list: Use walkImageManifests 0139309fef c8d: Add walkImageManifests and ImageManifest wrapper e1c7956764 Dockerfile: use COPY --link for source code as well 75afe3201b containerd: add c8d version and storage-driver to User-Agent 8018ee4689 dockerversion: DockerUserAgent(): allow custom versions to be passed ed376a603f dockerversion: remove insertUpstreamUserAgent() 1d45ea52f4 dockerversion: simplify escapeStr() a27b0381a6 dockerversion: add a basic unit-test 1fc19772e0 Make sure the image is unpacked for the current snapshotter 4217d9ea0a Dockerfile: use COPY --link to copy artifacts from build-stages 4c6b8e737f added alias validation e370f224ae fixing consistent aliases for OCI spec imports ac1a867282 vendor: github.com/mistifyio/go-zfs/v3 v3.0.1 2949fee1d3 containerd: set user-agent when pushing/pulling images f9c68e5fbc libn: fix resolver restore w/ chatty 'iptables -C' 3452a76589 libnetwork: fix sandbox restore fec801a103 libnetwork: log why osl sandbox restore failed d9e39914a7 Fix npe in exec resize when exec errored 042f0799db libn/d/overlay: support encryption on any port ec8ec9056c builder/remotecontext: deprecate CachableSource, NewCachableSource 7a4ea19803 libcontainerd: work around exec start bug in c8d ae6e9333c0 vendor: github.com/moby/buildkit v0.11.7-0.20230525183624-798ad6b0ce9f 0d9acd24fe c8d/inspect: Fill `Created` time if available 04eccf8165 vendor: github.com/containerd/go-runc v1.1.0 d64bab35ee daemon: lock in snapshotter setting at daemon init 329d671aef Dockerfile: temporarily skip CRIU stage 4cc2081119 integration: Add TestImageInspectEmptyTagsAndDigests 27df42255c hack: Rename .ensure-emptyfs to .build-empty-images 9ee7d30aef hack/ensure-emptyfs: Create dangling image 8a4b7c5af8 Add testenv.UsingSnapshotter utility a753ca64e2 hack/make/.binary: don't use "netgo" when building Windows binaries 5276c2b6e0 c8d/pull: Use same progress action as distribution baf1fd1c3f libnetwork: check for netns leaks from prior tests 992dc33fc5 libnetwork/osl: restore the right thread's netns ef1545ed4a libnetwork: leave global logger alone in tests 876f5eda51 libnetwork: make resolver tests less confusing 47a3dad256 c8d/list: Show layerless images 0869b089e4 libnetwork: just forward the external DNS response 3467ba6451 reorder load funcs to match newServiceConfig()'s order f9b886c01b add mirror to daemon reload test for insecure registries 07140c0eca build: use daemon id as worker id for the graph driver controller d5ad186d49 ci(bin-image): distribute build across runners 4d924c35f7 api/server: allow empty body for POST /commit again 68b7ba0d03 api/inspect: Fix nil RepoTags and RepoDigests 5ea7b8d091 fix: `docker pull` with platform checks wrong image tag Bumping docker-cli to version v24.0.2-9-g0823df7da, which comprises the following commits: 11af1189d docs: add "--detach-keys" example to docker run reference f118c05e8 docs: move "--detach-keys" example to examples section f66f7ed7f cli/command: fix GoDoc referencing wrong const 2814c01b0 Dockerfile.vendor: update GOPROXY to use default with fallback 32f66cbe5 vendor: github.com/docker/docker v24.0.2 dc4707edb [24.0] vendor: github.com/docker/docker v24.0.1 298e67926 docs: fix example for proxies in daemon.json 9175ffa9b man: remove devicemapper from examples beb0330a7 Correct "ps --no-trunc" example output 405be9063 docs: remove AuFS from glossary 7a269817b docs: remove Docker Toolbox from glossary 41ef7c45c docs: remove boot2docker and docker-machine from glossary c184a61da docs/deprecated: remove "disabled by default" for AuFS, overlay e7a60449f docs: remove aufs and legacy overlay 77541afea contrib/completion: remove aufs, legacy overlay e67a7acd0 docs/deprecated: remove .patch release from deprecation status fb6ae356c vendor: github.com/docker/docker v24.0.0-rc.3 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* oci-image-tools: don't build for riscv64Changqing Li2023-09-151-0/+2
| | | | | | | | | | | | | | | | Currently oci-image-tools has a do_compile error for riscv64. The problem could be reproduced by: MACHINE=qemuriscv64 bitbake oci-image-tools So explicitly set COMPATIBLE_HOST here to avoid it building for riscv64. When someone interested in using this recipe for riscv64 fixes the compile issue, this setting could be removed. Also don't build packagegroup-container/packagegroup-kubernetes since they depends on oci-image-tools Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-compose: switch branch to mainBruce Ashfield2023-08-141-1/+1
| | | | | | | | | The upstream repoistory transitioned from master to main, and also deleted the v2 branch this recipe was using. Switch everything to main until (if?) new versioned branches appear. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-distribution: fix for CVE-2023-2253Narpat Mali2023-07-252-0/+670
| | | | | | | | | | | | | | | A flaw was found in the `/v2/_catalog` endpoint in distribution/distribution, which accepts a parameter to control the maximum number of records returned (query string: `n`). This vulnerability allows a malicious user to submit an unreasonably large value for `n,` causing the allocation of a massive string array, possibly causing a denial of service through excessive use of memory. References: https://github.com/distribution/distribution/security/advisories/GHSA-hqxw-f8mx-cpmw https://github.com/distribution/distribution/commit/521ea3d973cb0c7089ebbcdd4ccadc34be941f54 Signed-off-by: Narpat Mali <narpat.mali@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* moby: update to v24.0.0Bruce Ashfield2023-06-071-5/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping moby to version v24.0.0-2-g821e4ec4c7, which comprises the following commits: 5ea7b8d091 fix: `docker pull` with platform checks wrong image tag 907f037141 update containerd binary to v1.7.1 8bbfa32741 c8d: The authorizer needs to be set even if AuthConfig is empty 8587a1c617 c8d/builder: implement cache 9717369913 c8d: implement classic builder 233c49438b c8d: Don't create authorizer for empty AuthConfig 2b7424512a c8d/authorizer: Default to docker.io f77a3274b4 [chore] clean up reexec.Init() calls c76bb6a3a3 ci: bin-image workflow 71846e82c1 bin-image bake target ecbc27aa22 vendor: github.com/docker/distribution v2.8.2 1235338836 c8d: implement missing image delete logic 763d2b7996 c8d: fix image history for dangling images 86770904be c8d: fix missing image history bfffb0974e pkg/aaparser: deprecate GetVersion, as it's no longer used e28bc0d271 profiles/apparmor: remove use of aaparser.GetVersion() d169a57306 contrib/apparmor: remove remaining version-conditionals (< 2.9) from template 63640838ba daemon: handleContainerExit(): add execDuration in attributes 012dd239ce docs/api: version-history: also mention /system/df for VirtualSize a87313497b vendor: github.com/containerd/containerd v1.6.21 5f36d4af15 api: synchronize api/swagger.yaml with docs/api/v1.43.yaml 2b6761fd3e d/graphdriver/copy: support src fs w/o xattr support 3e6092f5b2 pkg/jsonmessage: touch-up GoDoc 05cb0e5a7d pkg/jsonmessage: JSONProgress.String(), JSONProgress.now(): simplify 4cadee65b3 pkg/jsonmessage: JSONMessage.Display(): remove special case for 401 errors 66cf0e3f55 client: slightly improve ContainerDiff tests dbb48e4b29 api/types/container: create type for changes endpoint b7e8868235 update go to go1.20.4 bf3c156654 vendor: github.com/moby/term v0.5.0 c1d420ec60 vendor: github.com/moby/term v0.0.0-20221205130635-1aeaba878587 0df38c3e2b vendor: github.com/opencontainers/runtime-spec v1.1.0-rc.2 167fa429f0 daemon: Daemon.CreateImageFromContainer(): remove intermediate vars bf5ae17c16 api/server/router/container: containerRouter.postCommit: inline struct 9613da63dc c8d: commit: generateCommitImageConfig: don't merge image config e510abbc8c daemon/containerd: containerConfigToOciImageConfig: add ArgsEscaped 3eebf4d162 container: split security options to a SecurityOptions struct 8142051a3b libnetwork/osl: unify stubs for NeighOption 0ea41eaa51 libnetwork/osl: unify stubs for IfaceOption 021e89d702 libnetwork/osl: rename var that collided with import 3a4158e4fa libnetwork: add missing stub for getInitializers() 939a4eb5c9 libnetwork: fix stubs 17feabcba0 libnetwork: overlayutils: remove redundant init() 44a6587608 c8d: delete dangling image on pull 1e9ebfb00c libnetwork: inline sendKey() into SetExternalKey() 9d8fcb3296 libnetwork: setKey(): remove intermediate buffer a813d7e961 libnetwork: don't register "libnetwork-setkey" re-exec on non-unix 881fff1a2f libnetwork: processSetKeyReexec: don't use logrus.Fatal() e974599593 libnetwork: processSetKeyReexec() remove defer() 1845a915b0 c8d/import: Don't gc unnamed images 0ffd3225d2 vendor: github.com/opencontainers/runc v1.1.7 2d0e899819 update runc binary to v1.1.7 56fbbde2ed libnetwork/resolvconf: fix some minor (linting) issues 820975595c libnetwork/resolvconf: improve tests for Build 93c7b25ccd libnetwork/resolvconf: refactor tests for readability 43378636d0 libnetwork/resolvconf: allow tests to be run on unix 73c637ad60 libnetwork/resolvconf: use t.TempDir(), change t.Fatal to t.Error fc1e698914 libnetwork/resolvconf: fix TestGet() testing wrong path 55d18b7db9 libnetwork/resolvconf: use []byte for hash instead of string 630fc3839e libnetwork/resolvconf: simplify hashData() and improve performance 12bf850c84 cmd/dockerd: gracefully shut down the API server 520aa08d42 c8d/prune: Logging fixes 52af6d957e c8d/prune: Remove gc.ref labels from configs of deleted images 993ca8c6de cmd/dockerd/trap: log to logrus directly 0f3c5d3893 cmd/dockerd/trap: don't force exit after cleanup a1e1038736 Use the image service instead of the reference store for tagging 9fe5ac6614 c8d: Handle nil container.ImageManifest 16d5d4b6e1 cmd/dockerd: ignore SIGPIPE using signal.Ignore 2d31697d82 daemon: set docker0 subpool as the IPAM pool d8b784a15e daemon/cluster: inline filters da8e07edb5 volume/service: inline filters in tests c0c4a16053 testutil: inline filters in tests b6154189e8 integration: inline filters in tests 1bc0d7080a integration-cli: inline filters in tests 5bc0832766 daemon: inline filters in tests 081b5e3d4e client: inline filters in tests aca8dde362 integration/TestKillContainer: Bigger timeout on Windows 391f9635cc c8d/list: Initialize capacity instead of length 4ec063fade pkg/sysinfo: omit Getpid call in numCPU f66684fdeb fix some comments c399963243 libn/d/overlay: make VNI matcher IPv6-compatible 7d9bb170b7 libn/d/overlay: test the VNI BPF matcher on IPv4 4876c09b2a build(deps): bump github.com/creack/pty from v1.1.11 to v1.1.18 8df3db4b97 c8d: add support for removing images by shortID 117ceac82b daemon/prune: Use errdefs for invalid "until" value e502c69140 builder: use typed error for invalid "until" value 9791756284 overlay2: remove deprecated overlay2.override_kernel_check option 54a125f677 builder-next/prune: Handle "until" filter timestamps 38e791fb2f vendor: update buildkit to v0.11.6 005150ed69 check-config.sh: do not check for RT_GROUP_SCHED f72548956f remove deprecated legacy "overlay" storage-driver 4ecb587eff daemon: skip TestGetInspectData when using containerd snapshotters a82c434447 daemon: setupFakeDaemon(): add fakeImageService 1261fe69a3 API: deprecate VirtualSize field for /images/json and /images/{id}/json eb7738221c Add no-new-privileges to SecurityOptions returned by /info e7980275c0 c8d: align "Size" and "VirtualSize" for images 1e1efe1f61 libnet/d/overlay: clean up iptables rules on network delete 9a9dfb1d0d api/server: getImagesJSON(): don't check version in a loop 3903f16cd6 daemon: remove deprecated AuFS storage driver 890959eea8 builder-next: fix buildkit version bc37e3f830 Fix returning errors from snapshotter.Prepare f846349824 c8d/list: Implement `until` filter d89590eab9 c8d: Implement prune e6ac640d2e vendor: github.com/opencontainers/runc v1.1.6 f531e3cf69 vendor: golang.org/x/net v0.8.0 3886faced8 vendor: golang.org/x/text v0.8.0 d0efca893b update runc binary to v1.1.6 7fe0f73838 Fix argument quoting bugs in dockerd-rootless.sh 9cb5da400c images/Children: Return error edf802956e c8d/list: Implement `label` and `label!` filter 03fc3aad12 daemon: touch-up flag description for --seccomp-profile 5a922dc162 daemon: deprecate --oom-score-adjust for the daemon f696a1b3b3 Fix error checking when pulling from an insecure registry c957ad0067 libnetwork: clean up inDelete network atomically e5dbd28afd Added timeout to validate job in github actions 106c694993 Dockerfile: update xx to 1.2.1 a5d46a15f5 split GetRepository from ImageService 893d28469f vendor: github.com/ishidawataru/sctp v0.0.0-20230406120618-7ff4192f6ff2 f66374f6a8 golangci-lint: enable importas linter to force consistent aliases 81e62af94a use consistent alias for containerd's errdefs package f691b13450 daemon: move code related to stats together 5c78cbd3be pkg/platform: deprecate OSType in favor or runtime.GOOS cf9a76fe8f pkg/platform: un-export consts that are only for internal use 790dd8cc92 pkg/platform: use const for OSType, improve GoDoc 87019144f6 pkg/platform: replace use of deprecated syscall.Syscall 7ca38d64d2 pkg/platform: move package doc to platform-agnostic file 9434919f76 pkg/platform: rename files for consistency be4abf9d6e Vendor containerd 1.6.x with the readonly mount fix 41a230758c c8d: Set the process user on exec 70229b55ec vendor: github.com/moby/swarmkit/v2 v2.0.0-20230406225228-75e92ce14ff7 3f09316e3b vendor: re-vendor to add missing file 8ed900263e libnetwork/overlay: remove host mode 1d46597c8b libnetwork/overlay: remove KVObject implementation f32f09e78f libnetwork/overlay: don't lock network when accessing subnet vni b67446a8fa libnetwork: remove local store from overlay driver 8aa1060c34 libnetwork/overlay: remove live-restore support e3708a89cc libnetwork/overlay: remove vni allocation e251837445 libnetwork/overlay: remove Serf-based clustering 644e3d4cdb libnetwork/netlabel: remove dead code f8b5fe5724 libnetwork/netutils: remove dead code c8d2c6ea77 libnetwork: remove unused props from windows overlay driver 0fa873c0fe libnetwork: remove global store from overlay driver 00037cd44b libnetwork: remove ovrouter cmd e0f36f9d8b ImageService: Pass ctx to Children bea751beb7 c8d: Implement Children by comparing diff ids ba47cdcc0b c8d/list: Implement `reference` filter 4aa2876c75 docker-rootless-setuptools.sh: improve readability of messages 4d04068184 libn/d/overlay: only program xt_bpf rules f6cc8e3512 update go to go1.20.3 465cbccdaf c8d: use the container's configured snapshotter where possible c8f8d11ac4 awslogs: fix non-blocking log drop bug 1b178dffa3 Send an event when an image is deleted 36d28b73fc Send an event when an image is tagged 750218c5e5 d/config: fix default-network-opts in daemon.json 36935bd869 libcontainerd: close stdin sync if possible 3beda17773 integration-cli: rename vars that collided with imports 92e38b6e27 c8d/list: Ignore attestation manifests 773a9d85a1 c8d: Send event when an image is exported 00545ef4d6 c8d: Send event when an image is imported e59f7fba6a pkg/fileutils: remove aliases for deprecated functions and types 6b9968e8b1 client: deprecate NewClient properly 027f70562e c8d/push: Rename jobs to avoid shadowing type e1dd9c0396 c8d/push: Ignore :port when comparing source repository 4a34c501c1 c8d/push: Parse source labels with multiple sources cb788bea9c c8d/push: Add distribution source labels only on success 013e44ec5d c8d/push: Log error if releasing the lease failed c9012c798e c8d/push: Sync mountableBlobs access f6b50d52d4 libnetwork/netutils: drop ElectInterfaceAddresses 61a0e79ad6 vendor: github.com/containerd/containerd v1.6.20 b8e963595e libnetwork: sbState: rename ExtDNS2 back to ExtDNS 0233029d5a vendor: opencontainers/image-spec v1.1.0-rc2.0.20221005185240-3a7f492d3f1b c733cf223d vendor: github.com/containerd/ttrpc v1.1.1 a0ef2ac59c c8d: push: addressing some nits a75354c045 c8d: Implement push e7393d0fc5 images/push: Accept reference 15b9176d53 Add the events services to the containerd image service 77be7b777c update runc binary to v1.1.5 a17029ba49 vendor: github.com/opencontainers/runc v1.1.5 24804e67f5 c8d/commit: Use manifest digest for dangling image 845b328734 Skip Buildkit digest tests 4c459ddabd c8d: add support for `docker diff` e85c69e1b7 Update `github.com/containerd/containerd` to the HEAD of `release/1.6` and vendor f09b1022aa c8d/inspect: Handle dangling images 9e3a6ccf69 libn/i/setmatrix: make generic and constructorless 713c9280ca Move buildkit client opts to new package 4f511bd06e Add akerouanton as curator bb2c5617d6 Add laurazard as curator 988d26afe4 vendor: github.com/moby/buildkit v0.11.5 6caaa8cadc Prefer loading `docker-init` from an appropriate "libexec" directory bae49ff278 libnet/d/windows: log EnableInternalDNS val after setting it 4f48a4ea2a Update delve version 0fa7a4e3b4 client: Add buildkit ClientOpts 965eda3b9a libnet/d/overlay: insert the input-drop rule 66dfc0169f dockerversion: DockerUserAgent(): use sync.Once to construct User-Agent 72dc7a0f7b vendor: github.com/moby/swarmkit/v2 v2.0.0-20230315203717-e28e8ba9bc83 c7ccc68b15 Silence GRPC logs unless our log level is debug be34e93f20 integration-cli: Enable TestExecStartFails on Windows cb76638699 registry/search: pass User-Agent through headers 88992de283 StartWithLogFile: Fix d.cmd race fed1c96e10 TestDaemonRestartKillContainers: Fix loop capture f5050d4ef2 ci: disable testing mergeop and diffop with the dockerd worker 0ac3bf837b builder-next: disable mergeop and diffop c14463d1e4 ci: enable BuildKit tests with containerd integration worker 105b9834fb libnet/d/overlay: add BPF-powered VNI matcher 44cf27b5fc libnet/d/overlay: extract VNI match rule builder 142f46cac1 libn/d/overlay: enforce encryption on sandbox init 0ac02ba342 vendor: github.com/opencontainers/runtime-spec v1.1.0-rc.1 ab131642a1 vendor: github.com/opencontainers/runc v1.1.4 b98c05dc50 vendor: github.com/klauspost/compress v1.16.3 664c0d3201 vendor: github.com/godbus/dbus/v5 v5.1.0 3e4ce10342 vendor: github.com/coreos/go-systemd/v22 v22.5.0 0a2e3f14e7 vendor: github.com/opencontainers/selinux v1.11.0 bc1dec71c5 vendor: github.com/imdario/mergo v0.3.13 9752e43644 vendor: golang.org/x/sys v0.6.0 d4fd582fb2 libnet/d/overlay: document some encryption code 58504620c5 api/types/container: IpcMode: use common function for container-mode 6f0e28d024 api/types/container: PidMode: fix validation for empty container name/ID 53c813961e api/types/container: fix .Container() returning a name, when it shouldn't c76331e13f api/types/container: put "valid" field as first check in tests 2d49080056 pkg/sysinfo: move MemInfo and ReadMemInfo to a separate package a050db4a6f libnetwork/d/overlay: handle peer ops directly 09d39c023c libnetwork/i/setmatrix: devirtualize 3b569cc686 daemon/graphdriver/windows: cleanup errors bbeaeee3c7 daemon/graphdriver/windows: remove some intermediate variables 9db5dc9a46 daemon/graphdriver/windows: use strings.EqualFold() d742188e3b daemon/graphdriver/windows: remove fileFlagSequentialScan const 3a8c97be45 daemon/graphdriver/windows: rename vars that collided with imports 605e8f53b1 daemon/graphdriver/windows: InitFilter() don't use idtools.MkdirAllAndChown() 34303ccd55 libnetwork/i/setmatrix: un-embed the mutex 127cd9def1 integration/plugin: fix duplicate import 2987393768 integration/volume: fix duplicate import 146df5fbd3 Fix pruning anon volume created from image config 058a31e479 volumes: fix error-handling when removing volumes with swarm enabled a2c29e9128 update containerd binary to v1.7.0 7531f05c7c integration/volumes: TestVolumesRemove: add coverage for force/no-force 7b3acdff5d registry: return concrete service type 3991faf464 Move filtered registry search out of image service 06619763a2 remove GetLayerByID from ImageService interface 02dec48bab update to go1.20.2 37a9d6aabe Fix listener parsering regression when no addr set 3bbffe96e1 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230309194213-a745a8755ce3 af677245fb c8d/builder: Store untagged images as dangling 8f716ca06a builder/overrides: Add consts for attribute key names e807ae4f2e vendor: github.com/containerd/cgroups/v3 v3.0.1 44d0522848 c8d/inspect: Add digested reference to details a8f5c524a0 libcontainerd: Upgrade to typeurl/v2 45ee4d7c78 c8d: Compute container's layer size 4026148ef1 Dockerfile: Update shfmt to 3.6.0 a0741cacef contrib/dockerize-disk.sh: Fix indentation 088aff1620 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230302163403-80a528a86877 f8b468fda2 builder-next: enable more cache backends bba77163ff c8d: Make build and buildx work b0b3c62a84 vendor: github.com/moby/buildkit v0.11.4 117cdb28ce regenerate AUTHORS 608a122aef integration: Extract StopContainerWindowsPollTimeout const 74dbb721aa TestLogs: Increase stop check poll timeout on Windows a34060cdb4 Resolve and store manifest when creating container 168ca2dcc8 Introduce support for docker commit 22f303e422 layer: NewStoreFromOptions(): include driver-name in error message f52e935f36 reference: add test-coverage for digested references f71439d527 reference: don't string-match errors in tests, and fix error format 669940065f reference: use t.TempDir() for tests 520dc12c0e reference: rename variables that collided with type / import c477cda59f c8d/list: Support dangling filter 3e4c4df664 builder/exporter: Remove commented unused const 324290a5eb vendor: buildkit v0.11.4-0.20230228113103-218e934edfba 6588b3eef0 builder: Remove buildkit's build information 4ea1c9f8e5 `docker image ls`: handle multi-platform images a9e7360775 daemon/config: remove AuthzMiddleware field 47e9caede7 libcontainerd/client: Rename `cp` to `checkpoint` 0c751f904f libcontainerd/client: Fix checkpoint not being set be39be87f6 api/server: delete Wait method 91c2b12205 Make default options for newly created networks configurable 19ad4ac03d registry: acquire mutex in IsInsecureRegistry ef6f5367dc vendor: github.com/containerd/containerd v1.6.19 5997ad8512 vendor: github.com/Microsoft/hcsshim v0.9.7 0a6a726d26 api/server: drop unused Config struct 248745004a api: Remove <none> in Repo(Tags|Digests) for >= 1.43 0ffaa6c785 daemon: add annotations to container HostConfig 3c59ef247f libnet/ipam: use netip types internally 01dbe23b6f libnet/ipam: simplify the data model 8273db28f3 libnet/ipam: inline parsePoolRequest function 9a8b45c133 libnet/ipam: drop vestiges of custom addrSpaces 18ac200efe libnet/ipam: get rid of superfluous closure 88f6b637a0 libnet/networkdb: fix nil-dereference panic in test f8791db4be c8d/list: Fix Repo(Digests|Tags) for untagged images cd779dae46 Upgrade to Go 1.20.1 d4e7a87b96 Upgrade to Go 1.20 3606d6a7cd Upgrade to golangci-lint v1.51.2 2f9e3cca3d api: Move Repo(Digests|Tags) <none> fallback from daemon 8657c87c8c c8d/tag: Don't create a separate error variable 9f6649b248 AUTHORS: regenerate 50d7164978 docs/api: add v1.43 OpenAPI definitions bb21e0f191 Close DecompressStream after layer is downloaded d6c4e17411 Upgrade containerd/fifo to v1.1.0 782a369f92 c8d/pull: Add CRI-compatible annotation of pulled content a770153af0 chore: use http constants to replace numbers 9104cd5441 vendor: github.com/moby/buildkit v0.11.3 b0eed5ade6 daemon: allow shimv2 runtimes to be configured 4a886a3e8f dependency: bump go.etcd.io/bbolt to v1.3.7 e40c4c997e update containerd binary to v1.7.0-beta.4 f8cfd3a61f libnetwork: devirtualize Resolver type faaa4fdf18 libnetwork: forward unknown PTR queries externally 8f5a9a741b libnetwork: fail loudly on resolver iptables setup 25b51cad3d libnetwork: replace ad-hoc semaphore implementation a1f7c644be libnetwork: use dns.Client for forwarded requests e6258e6590 libnetwork: reply SERVFAIL if DNS forwarding fails 9cf8c4f689 libnetwork: extract DNS client exchange to method 854ec3ffb3 libnetwork: extract dialExtDNS to method 51cdd7ceac libnetwork: truncate DNS msgs using library method 860e83e52f libnetwork: get rid of truncation red herring 8a35fb0d1c libnetwork: refactor ServeDNS for readability 0bd30e90bb libnetwork: reply SERVFAIL on resolve error 92aa6e6282 libnetwork: extract fn for external DNS forwarding 78792eae68 libnetwork: add regression test for issue 44575 94feb31516 update to go1.19.6 b62445871e libnet/ipam: fix racy, flaky unit test 81f9f90e47 Do not log connection info before the connection exists c4c54683a9 Revert "apparmor: Check if apparmor_parser is available" 174802e15f vendor: github.com/containerd/containerd v1.6.18 a4e3c67e44 api/s/r/swarm: log backend errors at Debug level e66995d840 d/l/awslogs: fix ineffective Add in test 713e02e03e daemon: handle EISDIR error from runtime 97921915a8 distribution/xfer: fix download fencepost bug 0c68b655f6 Fix loop-closure bugs in tests dea3f2b417 Migrate away from things deprecated in Go 1.20 a36286cf89 vendor: golang.org/x/net v0.7.0 c7de76569e vendor: golang.org/x/text v0.7.0 a53b44a266 vendor: golang.org/x/sys v0.5.0 c53e22af19 add new maintainers! 046cc9e776 libnetwork: check DNS loopback with user DNS opts d31fa84c7c libnet/networkdb: use atomics for stats counters 3539452ef0 libnetwork/networkdb: make go test -race ./libnetwork/networkdb pass 5287b2ddbf libnet/ipam: stop eagerly stringifying debug logs 2e19a4d56b contrib/apparmor: remove version-conditionals (< 2.9) from template 7008a51449 profiles/apparmor: remove version-conditional constraints (< 2.8.96) eaeaa7b7fd vendor: update buildkit to latest v0.11 335907d187 builder: define GetRemotes for the worker 80f8432b52 ci: fix branch filter pattern in buildkit workflow 62be425bcc api: Extract parsing reference from repo and tag afc6e3fa46 c8d/import: Use danglingImageName instead of hardcoded b3a8b6b198 api/tag: Reject digested target references eaa56afda9 daemon/c8d: Implement TagImageWithReference 1ca85e835c daemon/imageService: Remove TagImageWithReference 7b6f71dced daemon: Pass ctx to image tagging operations 22776f8fdb ci: enhance tests distribution e304e82b66 ci: update gotestlist to 0.3.1 ab3fa46502 apparmor: Check if apparmor_parser is available 0137446248 Implement run using the containerd snapshotter e564932792 gha: switch buildkit back to upstream for testing 91725ddc92 libnet/d/ipvlan: gracefully migrate from older dbs 21677816a0 Dockerfile: configure code dir as "safe" directory 3bcb350711 graphdriver/overlay2: usingMetacopy ENOTSUP is non-fatal 521c2b25c2 docs: fix JSON format error af32603ae3 daemon/c8d: Implement save and load 043dbc05df github: apply patch for CNI test that was incorrectly skipped 666334bd48 vendor: update buildkit to v0.11.2 85169a04cf vendor: github.com/tonistiigi/fsutil v0.0.0-20221114235510-0127568185cf cf83842304 Dockerfile: Make it easier to use ctr in shell container 0e4d3feb94 daemon: identify container exits by ProcessID 843fcc96f7 libc8d/remote: name task fifos after task ID 719b08313f libc8d/local: set task id to container id d634ae9b60 Wait longer for exit events on Windows 7950abcc46 libnetwork: delete CHANGELOG.md 31f4ec92f6 update containerd binary to v1.7.0-beta.3 c41c8c2f86 vendor: github.com/containerd/containerd v1.6.16 22098745e7 vendor: github.com/pelletier/go-toml v1.9.5 a264f2dc55 libnetwork/ipam: skip Destroy()ing bitseq.Handle values 6f08fe20e9 libnetwork/bit{seq,map}: delete CheckConsistency() a08a254df3 libnetwork: drop DatastoreConfig discovery type 28edc8e2d6 libnet: convert to new-style driver registration 5595311209 libnetwork/drvregistry: split up the registries d478e13639 libnet: un-plumb datastores from IPAM inits 27cca19c9a libnetwork/drvregistry: drop unused args befff0e13f libnetwork: remove more datastore scope plumbing 142b522946 libnetwork/config: remove vestiges of global scope 52d9883812 libnetwork: drop (*Controller).ReloadConfiguration 9900c7a348 client: improve error messaging on crash e8011d7872 libnw/ipamutils: make local defaults immutable 540d1e0561 libnw: untangle IPAM allocator from global state 48ad9e19e4 libnetwork/netutils: drop ElectInterfaceAddresses cc19eba579 daemon: let libnetwork assign default bridge IPAM a654cbfd2f Use GetBoolOrDefault to remove duplicated invalidFilter usages 0d68591c8e api/types/filters: Add GetBoolOrDefault 390532cbc6 libnetwork/windows/overlay: drop unused variables b3e6aa9316 libnetwork/netutils: clean up GenerateIfaceName 3775939303 libnetwork/netutils: refactor GenerateRandomName 1776f72c96 c8d/progress: Update progress when finished 54f0b0ec4b c8d: Implement image history c0eb207b76 libnetwork/bitseq: refactor JSON marshaling 89ae725d23 libnetwork/bitseq: make mutex an unexported field 94ef26428b libnetwork/bitseq: refactor in terms of bitmap 143c092187 libnetwork/bitmap: optimize binary serialization c4d7294b5c libnetwork/bitmap: remove datastore concerns ad03a09451 libnetwork/bitmap: dup from package bitseq cd2e7fafd4 libnetwork/bitseq: add marshal/unmarshal tests b3c5352386 rootless: support `--ipc=host` 67aa86f1e0 hack: check if cross-compiling before setting ARM target name 25f95b0000 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230119195359-904c221ac281 170a1c4709 hack: display build cmd when DOCKER_DEBUG set 877baae03e hack: remove unnecessary vars in make.sh script b80f16157e hack: remove ORIG_BUILDFLAGS var 0c008cc4f8 hack: remove -installsuffix build flag d2d6ef431f Dockerfile: prefer ld for building against arm64 518be73a5c Dockerfile: smoke tests for static builds f676dab8dc Dockerfile: use clang to build dockerd/docker-proxy f49c88f1c4 Disable chrootarchive.init() on Windows 9b5c21309b images: Pass context to commit related operations 596c8960b2 c8d: Fix resolving truncated id to a descriptor 65c6ba1fc4 vendor: golang.org/x/net v0.5.0 ff14f8ef16 Add GetLibHome stub for non-linux OS 824dc51341 vendor: golang.org/x/text v0.6.0 e66e6bb28a vendor: golang.org/x/sys v0.4.0 dcfe23a038 fix blockThreshold full bug 0b83fd3217 ioutils: add regression test for bytespipe deadlock 71fa3b1337 Dockerfile: fix PKG_CONFIG for xx 945704208a hack: name for target ARM architecture not specified 94639eb66f hack: typo in displayed platform name ffd75c2e0c libnetwork: Support IPv6 in arrangeUserFilterRule() (redux) 17723691e5 Revert "libnetwork: Support IPv6 in arrangeUserFilterRule()" 833096ce42 homedir: fallback to user.Current().homeDir if XDG_DATA_HOME/XDG_CONFIG_HOME and HOME are unset af6b5d55db vendor: github.com/moby/ipvs v1.1.0 f53feeea8b vendor: github.com/vishvananda/netns v0.0.2 8be470eea8 libnetwork: don't embed mutex in network c71555f030 libnetwork: return concrete-typed *Endpoint 581f005aad libnetwork: don't embed mutex in endpoint 0e91d2e0e9 libnetwork: return concrete-typed *Sandbox 0425baf883 libnetwork: don't embed mutex in sandbox f96b9bf761 libnetwork: return concrete-typed *Controller ae09fe3da7 libnetwork: don't embed mutex in controller bb5cae2c94 vendor: github.com/vishvananda/netns v0.0.1 102090916e libnetwork: addRedirectRules without reexec 582dd705c1 libnetwork: fwmarker without reexec d6cc02d301 libnetwork: drop (resolver).resolverKey field 50a4951ddc libnetwork: setup DNS resolver without reexec 4733127a04 libnetwork: set default VLAN without reexec 7037c48e58 libnetwork: set IPv6 without reexec 0246332954 libnetwork: create netns without reexec ef161d4aeb libnetwork: Clean up sysfs-based operations 9032e6779d c8d/resolver: Fallback to http for insecure registries c83fce86d4 c8d/resolver: Use hosts from daemon configuration 3a3f98b32b c8d/pull: Don't unpack manually 4a8c4110e3 produce progress events polling ctrd's content.Store 566a2e4c79 libnetwork: Remove iptables nat rule when hairpin is disabled d7deec1993 daemon/c8d: Implement import a254dad2e5 api/import: Guard from Digested instead of Canonical reference 28327f10a2 daemon/import: Extract common logic to api 8dbc5df952 daemon/config: inform the user when the input JSON contains invalid UTF-8 155e8d7d78 update to go1.19.5 d42495033e daemon/config: support alternate (common) unicode encodings using a BOM 8d1e56e210 CONTRIBUTING.md: drop reference to the Derek GitHub bot 0867d3173c cmd/dockerd: use default SIGQUIT behaviour 1dcf7d5b03 daemon/config: clean up tests to use common helper 1e1d326b50 plugins: Move GlobalSpecPaths into LocalRegistry 805aea501a docs: api: synchronise versioned API docs (v1.39 - v1.41) 92cbd1c69e docs: api: synchronise versioned API docs (v1.42) 4f81f9d5ea builder/dockerfile: use example.com for tests 65aa43bf66 libnetwork: use example.com for tests and examples dc30785947 ci: update buildkit to fix integration tests cba3edbc37 daemon/config: group JSON preprocessing steps bb19265ba8 daemon/config: ignore UTF-8 BOM in config JSON 2d397beb00 libnetwork: Support IPv6 in arrangeUserFilterRule() 6ab12ec8f4 rootless: move ./rootless to ./pkg/rootless c1bd5e9144 Use user paths for plugin discovery in rootless mode bffe6d5670 vendor: github.com/containerd/containerd v1.6.15 89fb8b32f6 graphdriver/btrfs: needs kernel headers >= 4.12, not >= 4.7 c12d7b6d21 upgrade to aws sdk go v2 aa80c33360 Dockerfile.*: drop libbtrfs c9d632e485 PACKAGERS: update Btrfs graphdriver dependencies d3778d65fa graphdriver/btrfs: use free wrapper consistently 3208dcabdc graphdriver/btrfs: use kernel UAPI headers 1449c82484 graphdriver/btrfs: drop version information fdcab58ccf Remove reference to "requireRegistryMatch" deb4910c5b integration-cli: Fix hanging TestLogsFollowGoroutines* 1616a09b61 add support for image inspect with containerd-integration bbe6e9e8d1 hack/make: Don't add -buildmode=pie with -race 7e7b0622a6 hack: restore copy_binaries func b37d34307d Clear conntrack entries for published UDP ports 1fdfd45995 Updated outdated docker contributing guidelines link 01fd23b625 Fix volume CreatedAt being altered on initialization d131147a5c use errors.Is() to handle image store errors 83280d44d0 docs: contributing docs update for cross comp e8a82ed24d Dockerfile: add "all" stage to build binaries and extra tools 113e95ec02 ci: add extra steps to check artifacts b565b496ba Dockerfile: rename dev stages 27ba1766e7 ci: use GITHUB_REF and GITHUB_SHA to set version and commit 0b3af098e1 bake: define additional vars 9bcf5bed05 bake: define DESTDIR 491467b0b9 hack: update buildmode pie condition 347a5f68da hack: do not set buildmode pie for statically linked binary e37985f590 hack: use PKG_CONFIG var when checking libdevmapper 84ea9ee0f9 IAmStatic not used anymore 04c90b8cf5 hack: remove containerutility script 8086f40123 Dockerfile: use TARGETPLATFORM to build Docker 722d477bc6 client: defaultHTTPClient(): don't ignore transport errors 31ee158394 client: defaultHTTPClient() accept URL 1de3966b84 image: store: rename vars that collided with types or shadowed vars 2910163df1 daemon/images: imageKey() accept string 040b5bbc52 image: store.restore(): use more structured logs 456ea1bb1d image: deprecate IDFromDigest() a5ebd28797 daemon/graphdriver/devicemapper: simplify Udev log, and update link 155e39187c daemon/logger/gcplogs: remove ensureHomeIfIAmStatic workaround 5fed968b1d api: can marshal and unmarshal when args.fields is empty ad8804885c Update delve version e7d75c8db7 api/types/container: fix validation for UTSMode, UsernsMode, PidMode 018347f802 integration-cli: remove waitInspectWithArgs() 61c434c030 integration-cli: remove inspectMountPointJSON() ffbbe3d103 daemon/graphdriver/btrfs: workaround field rename in btrfs-progs 6.1 0eb7b49a17 daemon: remove some intermediate vars, use struct-literals 288cf20f98 daemon: rename some vars that collided with imports c5d4b6b311 restartmanager: remove RestartManager interface efb97da0da restartmanager: add SetPolicy() to the RestartManager interface d68b68fc43 restartmanager: RestartManager.Cancel(): remove unused error return 42f1be8030 daemon: translateContainerdStartErr(): rename to setExitCodeFromError() 83dd99177f daemon: translateContainerdStartErr(): use exit code 128 as default 46dae0b8bb daemon: translateContainerdStartErr(): use early return for errors 4e750caf96 daemon: translateContainerdStartErr(): extract detecting wrong cmd a756fa60ef daemon: translateContainerdStartErr(): use const/enum for exit-statuses 2cf09c5446 daemon: translateContainerdStartErr(): remove unused cmd argument 087369aeeb daemon: containerStart(): rename return variable 940730093b integration-cli: remove cli.Build(), cli.Inspect() bc0885f364 integration-cli: remove WaitRestart(), un-export WaitForInspectResult() 1bd486666b api/types/container: use strings.Cut() and DRY ab5e69c442 api/types/container: rewrite tests to use subtests and asserts e155cb4fee hostconfig: move unit tests to api/types/container 12df6024db cmd/docker-proxy: add "-v / --version" flag c42b304f62 gha: update buildkit to fix integration tests 799cc143c9 Always use iptables -C to look for rules 205e5278c6 Merge iptables.probe() into iptables.detectIptables() 0787ea8b26 libnetwork: improve logs for DNS failures a959487597 libnetwork/netlabel: remove Key(), Value(), and KeyValue() utils 9015cb7111 libnetwork: controller: rename vars that collided or shadowed 96cfb076ce libnetwork/netlabel: make consts actual consts 36151bd1d7 libnetwork/drivers/bridge: remove "ioctl" fallback code for legacy kernels 6a91e09218 pkg/parsers: use strings.Cut(), and cleanup error-messages 3f935d0e2c daemon/graphdriver/zfs: use strings.Cut, and refactor f95e9b68d6 daemon: use strings.Cut() and cleanup error messages 46f7c92c9a libnetwork: use strings.Cut() and minor refactor 87ca9490b0 libnetwork/datastore: rename var that collided with import ff447f4fd5 runconfig/opts: use strings.Cut() bffb35612c plugin: use strings.Cut() 01365cbd74 libcontainerd/local: use strings.Cut() 6059d38f21 pkg/parsers/operatingsystem: don't use strings.SplitN() 451b8579ef pkg/parsers/kernel: use strings.Cut() and minor refactor 774cd9a26c opts: use strings.Cut() and refactor parseDaemonHost() d3cd746067 integration-cli: use strings.Cut() 38b0c47f37 integration-cli: links: use gotest.tools compare and assert.Check ebda2fa2b5 integration/internal: use strings.Cut() and minor refactor 39f59c3289 daemon/links: use strings.Cut() ad7f1a8dcc daemon/logger: use strings.Cut() 32c4c15f15 daemon/events: use strings.Cut() 5008409b5c cmd/dockerd: use strings.Cut() 19cd5ff164 client: use strings.Cut() 64adea1ce1 volume: use strings.Cut() and minor refactor 19db33afc9 pkg/tarsum: use strings.Cut() and minor refactor 59880cb855 builder/dockerfile: use strings.Cut() 604a2d67b5 builder/remotecontext/git: use strings.Cut() 380a2dfc3a api/types: use strings.Cut() 7841ce781c api/types/time: use strings.Cut() ba9bcf92f6 api/types/filters: use strings.Cut() 6db4af7bd5 graphdriver: windows: use strings.Cut() c545473920 daemon/cluster: use strings.Cut() ec878a3d89 pkg/sysinfo: unify ReadMemInfo implementation 09ea6744fe pkg/sysinfo: remove github.com/docker/go-units dependency 6a516acb2e pkg/system: move memory-info types to pkg/systeminfo 6919b9879b pkg/sysinfo: unify NumCPU implementation c63ea32a17 pkg/ioutils: TempDir: move to pkg/longpath 3314f4ef09 pkg/ioutils: unify TempDir implementation 2e67c85c13 pkg/longpath: fix package GoDoc c4c53659f1 integration-cli: remove uses of ioutils.TempDir 2e67c827bb errdefs: FromStatusCode() don't log "FIXME" debug message 83d7ae76e8 vendor: github.com/containerd/containerd v1.6.14 72ea8cfb43 registry: use http.NewServeMux for tests instead of gorilla/mux 54512f2184 pkg/stringid: optimize performance d20ddb6807 update containerd binary to v1.7.0-beta.1 35cbdc9661 vendor: github.com/containerd/containerd v1.6.13 9300aca2a6 vendor: github.com/Microsoft/hcsshim v0.9.6 19f3448c21 Dockerfile: delve cross build with TARGETPLATFORM ed95e1a9ff Dockerfile: swagger cross build with TARGETPLATFORM 879b023706 Dockerfile: containerutility cross build with TARGETPLATFORM 8d9a357a67 Dockerfile: registry cross build with TARGETPLATFORM a4bc2922c2 Dockerfile: dockercli cross build with TARGETPLATFORM 420591c4a2 Dockerfile: rootlesskit cross build with TARGETPLATFORM f0307892ea Dockerfile: tini cross build with TARGETPLATFORM 5e19d7ec54 Dockerfile: runc cross build with TARGETPLATFORM 81d704d15d Dockerfile: containerd cross build with TARGETPLATFORM b19c11621a Dockerfile: DOCKER_STATIC arg 69c9dfd6d5 Dockerfile: add dummy stage 6cba7d22e9 Dockerfile: add cross compilation helper 0007490b21 vendor: github.com/moby/swarmkit/v2 v2.0.0-20221215132206-0da442b2780f e19dff9285 daemon/config: remove deprecated RootDeprecated field 32b299f63e daemon/config: rename CommonTLSOptions to TLSOptions ef7ab7bde8 cli: remove cli/config package, integrate into cmd/dockerd 6a90113e68 cli: move cobra customizations into cmd/dockerd 3d58b43efe cli: remove unused Errors type 25c3421802 hack: introduce validate/no-module a449f77774 hack: replace go-mod-prepare.sh with wrapper script 388fe4aea8 daemon: drop side effect from registerLinks() 0141c6db81 daemon: don't checkpoint container until registered 00157a42d3 daemon: fix GetContainer() returning (nil, nil) 7b13076f56 daemon: CreateNetwork: remove redundant error check 389dacd6e2 vendor: github.com/tinylib/msgp v1.1.6 24496fe097 vendor: github.com/philhofer/fwd v1.1.2 8fb71ce208 manage image inspect data in backend a8eb15eafb ImageService.ImageHistory(): pass context 0426c76142 List images with multiple since/before filters e214503789 image/store: Use errdefs for errors 28382c58ec container: ViewDB: use logrus.WithError() 6549a270e9 container: ViewDB: return typed system errors 94dea2018e container: ViewDB: GetByPrefix() return typed errors da4d627e79 container: ViewDB: use errdefs for non-existing containers ddaba6d576 daemon: filterByNameIDMatches() fix error handling 8c9a240597 container: use const for null-terminator 200edf8030 libcontainerd/remote: remove stray import comment 12c76d4a15 vendor: github.com/containerd/containerd v1.6.12 4bbc37687e vendor: golang.org/x/net v0.4.0 18f85467e7 docs: add 401 to possible status codes of /auth d331bc3b03 vendor: github.com/containerd/containerd v1.6.11 52bc1ad744 update to go1.19.4 f577f31f50 Add Bjorn Neergaard to maintainers 9da935629e Better not pretend to be an active currator 383e23fd61 Add Kevin Alvarez ("crazy-max") to curators 521b8c02cc builder: handle host-gateway with extra hosts 381fa4afca ci(buildkit): update buildkit ref to fix issue with alpine image a6a539497a distribution: checkSupportedMediaType: allow additional media-types 57b229012a seccomp: block socket calls to AF_VSOCK in default profile eaa74497b8 libnetwork: use go-immutable-radix instead of radix 93fa093122 testing: move fuzzers over from OSS-Fuzz 3d97f1e22d client/list: Handle SharedSize e1c3305015 AUTHORS: regenerate 672383bc56 .mailmap: cleanup and additions b94d1604a9 hack/generate-authors.sh: refactor and simplify 6326ad1729 vendor.mod: remove outdated comment about replaced module 0f0fce5dcc libnetwork/netutils: FindAvailableNetwork(): simplify reading of resolv.conf 0cbe6524db libnetwork/drivers/overlay: getBridgeNamePrefix() simplify reading of resolv.conf 0ef0dab2f7 libnetwork: sandbox.rebuildDNS() make updating sandbox more atomic 806b4fbcad libnetwork: sandbox.rebuildDNS() move variables closer to where they're used d178a71b7c libnetwork: sandbox.rebuildDNS() simplify reading of resolv.conf 05b3356631 libnetwork: sandbox.setupDNS() don't parse host resolv.conf if not needed 08d5e3d0fa libnetwork: sandbox.setupDNS() simplify reading of resolv.conf a44f547343 registry: session: remove unused id fb77973201 pkg/system: move CheckSystemDriveAndRemoveDriveLetter to pkg/archive c4872b4519 pkg/system: CheckSystemDriveAndRemoveDriveLetter: fix error format ad371893f2 pkg/system: move GetLongPathName to integration-cli 9f3e5eead5 pkg/system: deprecate DefaultPathEnv, move to oci dec81e489f daemon/disk_usage: Use context aware singleflight f7e59cbccc Jenkinsfile: Fix dev image build fox ppc64le/s390x archs 85fddc0081 distribution: remove unused RequireSchema2 8feeaecb84 use ad-hoc libtrust key e854b2a459 distribution: use ad-hoc trustkey for tests 5cdd6ab7cd daemon/config: remove TrustKeyPath, and local utilities 1981706196 daemon: remove migrateTrustKeyID() c1756e1b63 update containerd binary to v1.7.0-beta.0 c1a9e82d3e vendor: google.golang.org/grpc v1.50.1 bade242ddd Makefile: always use buildx 426e3926ef ci: define timeout for jobs dc52e08bb5 vendor: github.com/prometheus/client_golang v1.14.0 b2fe29ba79 vendor: github.com/go-logr/logr v1.2.3 7c1b7842c6 vendor: golang.org/x/crypto v0.2.0 efe17dbdb4 vendor: golang.org/x/net v0.2.0 0588a83380 vendor: github.com/opencontainers/runc v1.1.3 38adf7a694 vendor: github.com/klauspost/compress v1.15.12 e1058e6bc3 go.mod: golang_protobuf_extensions v1.0.4 - prevent incompatible versions 62344f515c layer: layerStore.registerWithDescriptor: rename var to prevent shadowing e5e6480694 Add Sam Thibault (sam-thibault) as curator 4769809555 api/server/backend/build: sanitizeRepoAndTags() check for digest 64f9ea1cf5 vendor: github.com/moby/swarmkit/v2 v2.0.0-20221123162438-b17f02f0a054 a5898e3a2d vendor: github.com/prometheus/client_golang v1.13.0 2cc6a86fd3 vendor: github.com/aws/aws-sdk-go v1.37.0 8f1bc3a3b7 vendor: google.golang.org/grpc v1.48.0 b0e20e1b3c vendor: go.uber.org/zap v1.21.0 066fb6c69e vendor: go.uber.org/multierr v1.8.0 b41580d66e vendor: go.uber.org/atomic v1.9.0 341c9e77a8 vendor: github.com/jmespath/go-jmespath v0.4.0 9a8b46518b vendor: google.golang.org/genproto v0.0.0-20220706185917-7780775163c4 1e48b64538 vendor: github.com/fernet/fernet-go v0.0.0-20211208181803-9f70042a33ee 4113a88523 vendor: google.golang.org/protobuf v1.28.1 26c4429f7e vendor: github.com/spf13/cobra v1.6.1 8a46a2a364 Dockerfile: remove hardcoded platforms for vpnkit stage 4f17d17009 ignorefiles: cleanup 61f266f660 vendor: github.com/moby/term v0.0.0-20221120202655-abb19827d345 af8e955e8f hack/go-mod-prepare.sh: find root robustly; make steps transparent 30b0cb0cd4 vendor.mod: add comment about replaced dependency 62a4a45a72 vendor.mod: remove replace for github.com/rexray/gocsi a2d758acc9 vendor: github.com/armon/go-radix v1.0.1-0.20221118154546-54df44f2176c 9f004830a5 hack/validate/vendor: clean up license validation step dbd76848ca hack/validate/vendor: split tidy from vendor 72568286ab hack/vendor.sh: allow running tidy & vendor separately 40069797ef hack: remove obsolete sources for go-autogen 07ba3e35d3 Add additional loggig in case of error of renaming runtimes-old and removing it d591710f82 Handle docker start inside overlayfs ca807edac0 update github.com/tc-hib/go-winres v0.3.0 to fix schema version in manifest 25dc760162 Dockerfile: variant support in frozen-images stage 882ddf4b16 update gotestsum to v1.8.2 b529870558 daemon/config: use strings.Cut(), fix panic in BuilderGCFilter 7ca03c1a79 rootlesskit.installer: s/vendor.conf/vendor.mod/ a2cea992c2 libnetwork/iptables: Fix test panic when execute only one test a6cb8efd81 vendor: golang.org/x/oauth2 v0.1.0 9d7bd47cb6 vendor: golang.org/x/crypto v0.1.0 d9fb730148 update RootlessKit to v1.1.0 08516af897 vendor: github.com/rootless-containers/rootlesskit v1.1.0 be18f92bf4 hack/validate: drop changelog-related steps ec1bb21649 cleanup: drop historical CHANGELOG.md e8ad01594a cleanup: drop .DEREK.yml 4e5c3b82cb vendor: github.com/containerd/containerd v1.6.10 a5979a2106 update containerd binary to v1.6.10 06e4b7d1f8 vendor: github.com/moby/buildkit v0.10.6 40908fca45 fix vendor.mod: add hashicorp/go-multierror as direct dependency 81ccfd44e4 Fix grammar in README.md 6a02afa56f ci(actions): bump outdated actions on Linux 0557569947 ci(actions): migrate to file-based commands 79f9ffd401 vendor: golang.org/x/net v0.1.0 71fa64a272 vendor: golang.org/x/time v0.1.0 4965f19626 vendor: golang.org/x/sync v0.1.0 4bb95eef6f vendor: golang.org/x/sys v0.1.0 67b9f120d5 pkg/archive: switch back to os/exec b7d242f094 builder/remotecontext/gitutils: switch back to os/exec 6a15f40803 libnetwork_test: improve OptionBoltdbWithRandomDBFile a0f9caec99 libnetwork_test: stop controllers at end of test 010077ba0f libnet/d/bridge: fix race condition in test case 7b2308980c libnet/d/bridge: fix bridgeInterface.addresses() c2a087a9f7 libnet/d/bridge: use fresh PortAllocator in tests 1b64f2e28b libnetwork: stop caching global netlink handle d0096bba21 libnetwork_test: overhaul TestParallel 32ace57479 libnetwork_test: isolate tests from each other 0411336b49 libnetwork_test: pass controller into createTestNetwork 9a0953a0a0 libnet/testutils: spawn goroutines in test OS ctxs 07be7b087d libnetwork_test: remove in-container special case e2a89b7ad1 libnet/d/bridge: configure store when opts missing 8a20564847 libnet/datastore: stop sharing defaultScopes singleton 8404507b9b libnet/osl: stop assuming caller thread is clean 0f7c9cd27e Remove uses of deprecated go-digest.NewDigestFromHex, go-digest.Digest.Hex 6174d00c03 replace distribution/digestset with opencontainers/go-digest/digestset bbb1b82232 go.mod: github.com/miekg/dns v1.1.43 d43bc26717 vendor: gotest.tools/v3 v3.4.0 57ba2df970 vendor: github.com/google/go-cmp v0.5.9 to remove golang.org/x/xerrors dep f39b83e232 libnetwork: fix TestParallel "bad file descriptor" fe6706a2ce libnetwork: make tests less dependent on others cea8e9b583 libcontainerd/supervisor: use pkg/pidfile for reading and writing pidfile 14da1bfe40 cmd/dockerd: adjust error message for pidfile changes 7493debe26 pkg/pidfile: implement Read() 7d3e1ad943 pkg/pidfile: Write(): don't automatically create parent directories 81945da0ac pkg/pidfile: Write(): take pid as argument 735e250326 pkg/process: Alive(): fix PID 0, -1, negative values 55d15e9d05 pkg/pidfile, pkg/process: use single implementation for process alive 9d5e754caa move pkg/system: process to a separate package 0040fb93d6 pkg/system: IsProcessZombie() skip conversion to string, use bytes instead 970ad4e3c7 pkg/system: IsProcessZombie() ignore "os.ErrNotExist" errors 8d6da1e100 pkg/system: IsProcessAlive() remove redundant type-cast 2006d9f7d1 cmd/dockerd: Rewrite shutdownDaemon to use context timeout 66a0289081 builder: Don't store context in struct a181a825c8 daemon/start: Revert passing ctx to ctr.Start def549c8f6 imageservice: Add context to various methods 57c2545cd5 vendor: github.com/moby/swarmkit/v2 v2.0.0-20221102165002-6341884e5fc9 1bef9e3fbf Fix containerd task deletion after failed start be1829f63d daemon/logger: fix godoc 407e3a4552 distribution: Error when pulling OCI artifacts 4386e3f7c0 pkg/parsers/kernel: un-export Utsname 775dcab7a2 pkg/parsers/kernel: remove duplicate Package godoc 8d0dc69027 implement docker system df 952e1e62c5 Sort entries in pkg/namesgenerator 5bc17c3e54 Remove long-deprecated "arm" fallback 3d71555a47 Remove errant "runtime.GOARCH" from debug message f9d4589976 Update to Go 1.19.3 to address CVE-2022-41716 1e88fe578e pkg/idtools: remove execCmd() utility 3d73d32499 api/types/filters: add output to example c207947508 integration-cli: DockerPluginSuite: use gotest.tools compare utilities 346a438da8 opts: TestParseLink(): add test-case for legacy format ad4073edc1 daemon: fix docs for config-default constants dcd6c1d2e2 container: make path resolution fns Windows-only 2bdc7fb0a1 daemon: archive in a dedicated mount namespace 7d23c50599 integration: test more copy edge-cases 6750d1bac8 daemon: drop Windows-only code from archive_unix.go 4fd91c3f37 daemon: refactor isOnlineFSOperationPermitted 84cbe29d5b daemon: dupe the archive implementation 60ee6f739f Add reusable chroot and unshare utilities 317d3d10b8 Revert "Use real chroot if daemon is running in a user namespace" 5de229644f pkg/chrootarchive: stop reexec'ing before chroot f2f884a92f pkg/archive: create whiteout temp dir under dest 1f32e3c95d Add integration test for #38995, #43390 6c0aa5b00a Fix the max-concurrent-downloads and max-concurrent-uploads configs documentation 22529b81f8 libnetwork: drop InitOSContext() 7fc29c1435 libnetwork/osl: clean up Linux InvokeFunc() d1e3705c1a libnet/d/overlay: restore thread netns 3e2f0c7a39 libnetwork: fixup thread locking in Linux tests afa41b16ea libnetwork/testutils: restore netns on teardown 04dc007c76 vendor: github.com/containerd/containerd v1.6.9 ac79a02ace update containerd binary to v1.6.9 4f1d1422de integration: download busybox-w32 from GitHub Release 4fdc1bb1fb builder/remotecontext/git: allow building on go1.18 4f43cb660a skip TestImagePullStoredfDigestForOtherRepo() on Windows and rootless 27530efedb Validate digest in repo for pull by digest 92eca900b0 Revert "testutil/registry: remove unused WithStdout(), WithStErr() opts" 201fdf67ac gha: update buildkit to v0.10.5-6-ge27c8e24 to skip some tests 0760c6f4e1 gha: buildkit: make checks more readable cfa2f9a2f2 gha: buildkit: remove "skip-integration-tests" from matrix 67d010bd2c builder: add missing doc comment 94672c89cc builder: fix running git commands on Windows 61acc9939f builder: make git config isolation opt-in 72119f5d9b builder: isolate git from local system 0f7b0897cc builder: explicitly set CWD for all git commands 8deb92d653 builder: modernize TestCheckoutGit 0fc17c42af vendor: github.com/moby/buildkit v0.10.5 51fe170224 daemon: NewDaemon() fix import colliding with local variable 27bd49f4bf daemon: NewDaemon(): replace system.MkdirAll for os.Mkdir where possible 19c5d21e6f daemon: getPluginExecRoot(): pass config 17fb29c9e8 daemon: NewDaemon(): check system requirements early 7ff0f654fb daemon: add TEST_INTEGRATION_USE_SNAPSHOTTER for CI 0a004fd361 daemon: NewDaemon(): log message if containerd snapshotter is enabled 4fa853f5de pkg/fileutils: ReadSymlinkedDirectory: preserve underlying error 24e371c812 pkg/fileutils: improve tests d4d242ba76 pkg/chrootarchive: gofumpt test files dee3f716b3 pkg/chrootarchive: replace system.MkdirAll for os.Mkdir 8a8202fcdc pkg/chrootarchive: TestChrootTarUntar fix copy/paste mistake 0955c88c2e pkg/chrootarchive: use t.TempDir() 30e5333ce3 registry: allow "allow-nondistributable-artifacts" for Docker Hub 69f72417f4 pkg/idtools: remove CanAccess(), and move to daemon ee34a8ac29 pkg/idtools: setPermissions() accept Identity as argument bca90530fa pkg/idtools: simplify if-statement d68fa0382d pkg/idtools: don't use system.Stat() on unix 43d6eb7173 pkg/pidfile: remove PIDFile type, rename New() to Write() dd8983f96c pkg/pidfile: reduce cyclomatic complexity, and small optimisation 4917bcc039 pkg/pidfile: don't ignore all errors when reading file 3ce2a7d026 pkg/pidfile: pkg/pidfile: use strconv instead of fmt.Sprintf(), and unconvert a9fa147a92 daemon/logger/etwlogs: rewrite to use go-winio/pkg/etw f058afc861 pkg/system: synchronize mkdirall() with latest os.MkDirAll() 2e66c0b6f0 pkg/system: create SecurityAttribute only once (Windows) 55ceb5047c pkg/system: update volumePath regex to allow returning earlier cfef1b11e5 pkg/system: compile volume-path regex once, and update GoDoc 264706f804 hack: allow pkg/ to import internal/ packages 3246db3755 fix force remove for cluster volumes 624daf8d9e Change restart delay for Windows service to 15s 3c585e6567 cmd/dockerd: use golang.org/x/sys Service.SetRecoveryActions() 34f459423a Replace overlay2 mount reexec with in-proc impl 6176ab5901 cmd/dockerd: use golang.org/x/sys/windows.SetStdHandle() ffcddc908e cmd/dockerd: replace deprecated windows.IsAnInteractiveSession() 75bdbf02a6 daemon/graphdriver/windows: Remove() don't use defer() in a loop 90431d1857 daemon/graphdriver/windows: use go-winio.GetFileSystemType() e35700eb50 daemon/graphdriver/overlay2: remove deprecated overrideKernelCheck b43a7ac530 integration/plugin: remove deprecated overlay2.override_kernel_check de705907a5 client: remove solaris build-tag, simplify and gofumpt 6fd2d4e772 integration: remove uses of pkg/system.Stat() 0242fef89c integration-cli: remove uses of pkg/system.Stat() 402e0b58ca testutil: use filepath.WalkDir instead of filepath.Walk 3db11af44b libnetwork/drivers/overlay: use filepath.WalkDir instead of filepath.Walk 0ee5518e76 oci: use filepath.WalkDir instead of filepath.Walk ec000ce555 pkg/archive: use filepath.WalkDir instead of filepath.Walk f595434abc daemon/graphdriver/devmapper: use filepath.WalkDir instead of filepath.Walk 8f1bc0bccc daemon/graphdriver/btrfs: use filepath.WalkDir instead of filepath.Walk 1870d5f4aa builder: use filepath.WalkDir instead of filepath.Walk d33428f0bf pkg/system: remove solaris left-over a35bcd01c5 pkg/pidfile: replace uses of windows.Close() with windows.CloseHandle() 89de943401 pkg/pidfile: windows: replace magic consts for golang.org/x/sys consts 11cceea58a pkg/idtools: cleanup errors 8d5b17e939 pkg/idtools: don't use system.MkdirAll() where not needed 2e74e307d0 pkg/idtools: format code with gofumpt 0fc13104e7 pkg/idtools: CanAccess(): reorder checks to allow early return c7c02eea81 pkg/loopback: use ioctl helpers from x/sys/unix 6742f74e0e vendor: golang.org/x/sys v0.0.0-20221006211917-84dc82d7e875 1ffdac4502 layer: gofumpt c3a5641132 layer: use strconv instead of fmt.Sprintf() 1fccb39316 pkg/idtools: remove unused CanAccess() stub for Windows 3b9b5842b3 pkg/idtools: mkdirAs(): move var and comment to where it's used 838fc976c8 integration(-cli): remove some redundant formatting 07b2e4cb79 client: use strconv instead of fmt.Sprintf() 145817a9cf libnetwork: use strconv instead of fmt.Sprintf() 56e64270f3 daemon: use strconv instead of fmt.Sprintf() 533ecb44b1 daemon/logger: use strconv instead of fmt.Sprintf() 7fbf321c2a daemon/graphdriver: use strconv instead of fmt.Sprintf 27aea4956c pkg/idtools: mkdirAs() be more explicit about ignored args on Windows a19ee75bd1 pkg/system: fix missing assertions and use sub-tests for ChTimes a9c5a40087 pkg/system: rename some tests to be more descriptive ab7bc6b7d2 pkg/system: use t.TempDir(), remove some test-utils 7bd051eeec pkg/system: windows: setCTime(): remove redundant conversion 0b8444aa0c pkg/system: rename maxTime and re-use, define unixEpochTime, update GoDoc 2c9684e35c pkg/system: add note about maxTime 247f90c82e pkg/system: move maxTime init() back to Chtimes code 4347080b46 pkg/system: remove Umask() utility 76ce3fd9c9 remove aliases for deprecated pkg/pubsub 89a9d7d650 fix typo c1729f876c remove aliases for deprecated pkg/fsutils ce2abb82c0 remove aliases for deprecated pkg/urlutil a5e1baf3ab vendor: github.com/opencontainers/selinux v1.10.2 1f22b15030 Lock OS threads when exec'ing with Pdeathsig ab677c41ea pkg/system: unconvert 07b1aa822c pkg/system: move GetExitCode() to pkg/idtools, and un-export 5b6b42162b pkg/fsutils: deprecate in favor of containerd/continuity/fs 26659d5eb8 pkg/directory: remove unused MoveToSubdir() utility bd6217bb74 pkg/directory: minor refactor of Size() 0a861e68df pkg/directory: Size(): add back type-casts to account for platform differences 618f26ccbc Volume prune: only prune anonymous volumes by default 7b4e4c08b5 Update to go 1.19.2 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 271243d382 docs: swagger: update description for default builder version c523d6d25c libnetwork: remove some outdated comments 6f435e0bb9 Update awslogs driver batching documentation. 60ace31be0 libnetwork: sandbox.updateDNS(): use const for file permissions f0be4d126d libnetwork: use object-literal for some structs 50a7c67363 libnetwork: fix some whitespace formatting 481185fb8a libnetwork/osl: fix GoDoc formatting 4c0e0979b4 Fix live-restore w/ restart policies + volume refs 3c69b9f2c5 replace pkg/fileutils Matching funcs with github.com/moby/patternmatcher 0249afc523 migrate pkg/pubsub to github.com/moby/pubsub 0440ca07ba pkg/fileutils: remove gotest.tools as dependency, use t.TempDir() f73d72bfdc pkg: replace some README's with GoDoc package descriptions b44b3193d0 oci.DevicesFromPath() switch to use containerd implementation c3a6de9ec8 logger/journald: unlock OS threads e2114731e7 contrib: make dockerd-rootless-setuptool.sh more robust 8a2e1245d4 runconfig, oci, image, layer, distribution: fix empty-lines (revive) f63dea4337 cmd/dockerd: fix empty-lines (revive) cd51c9fafb client: fix empty-lines (revive) f71fe8476a api/server: fix empty-lines (revive) b04f1416f6 opts: fix empty-lines (revive) ddb42f3ad2 daemon: fix empty-lines (revive) 05042ce472 daemon/images: fix empty-lines (revive) 0695a910c6 daemon/logger: fix empty-lines (revive) 9d9cca49b4 daemon/graphdriver: fix empty-lines (revive) 0c7b930952 daemon/cluster: fix empty-lines (revive) 4eb9b5f20e plugin: fix empty-lines (revive) 188724a597 volume: fix empty-lines (revive) e9f1b83a4a testutil: fix empty-lines (revive) 786e6d80ba integration: fix empty-lines (revive) ecb4ed172b builder: fix empty-lines (revive) dc0c2340b8 integration-cli: fix empty-lines (revive) 31441778fa api/types: fix empty-lines (revive) 412c650e05 pkg/*: fix "empty-lines" (revive) 8cd244a318 daemon: replace ErrExtractPointNotDirectory with errdefs c78af57e21 daemon: replace ErrVolumeReadonly with errdefs 0f1eeed5c2 daemon: replace ErrRootFSReadOnly with errdefs e31e9180cd integration-cli: remove isCpCannotCopyReadOnly utility 3564d03b0f daemon: remove getPortMapInfo alias ee5d8f43e1 pkg/signal: remove stubs for deprecated package 4a8b3b8bc5 api/types: remove aliases for deprecated Volume and VolumeUsageData 18ca7546f6 pkg/system: remove stubs for deprecated sequential functions 1e13247d6d pkg/idtools: mkdirAs(): fix infinite loops and repeated "chown" 7f3602f1c9 swagger: update links to logo 5dff494b87 test(pkg/archive): add TestImpliedDirectoryPermissions cd381aea56 libnetwork: fix empty-lines (revive) 267108e113 libnetwork/config: rename ParseConfigOptions() to New() 4831ff9f27 refactor(pkg/archive): factor out createImpliedDirectories helper 09cc2f9d0e libnetwork/config: inline LoadDefaultScopes() 528428919e libnetwork/config: merge DaemonCfg into Config 571baffd59 libnetwork: remove old integration tests 46f4a45769 libnetwork/config: remove ParseConfig() 7d574f5ac6 libnetwork/config: inline ProcessOptions a8a8bd1e42 libnetwork/config: remove "Experimental" and "Debug" options 2f1c382a6d golangci-lint: update to v1.49.0 a5be811269 chore(integration): delete outdated TODO comment 6ca4eda960 daemon: clean up vestiges of ContainerFS 9ce2b30b81 pkg/containerfs: drop ContainerFS type alias e332c41e9d pkg/containerfs: alias ContainerFS to string 95824f2b5f pkg/containerfs: simplify ContainerFS type be4f4644a8 pkg/containerfs: drop Driver abstraction 7014c0d65d pkg/containerfs: drop PathDriver abstraction e37a2d1879 pkg/containerfs: delete Archiver, Driver a7c8fdc55b pkg/containerfs: make ResolveScopedPath a free fn fd16e003fb pkg/containerfs: Remove NewLocalDriver() 4d48c00f94 pkg/containerfs: Trim away Driver interface part 1 489e7b61bf vendor: github.com/moby/sys/sequential v0.5.0 323ab8ef97 vendor: github.com/github.com/coreos/go-systemd v22.4.0 0af7b4961a client: TestNewClientWithOpsFromEnv(): use sub-tests 1a3d8019d1 Remove the OS check when creating a container 3e1601a980 vendor: gotest.tools v3.3.0 49de15cdcc libnetwork/resolvconf: removed unused GetIfChanged() and GetLastModified() 55fd77f724 set ReadHeaderTimeout to address G112: Potential Slowloris Attack (gosec) 6d59619d6e ci: reduce cache throttling limits 511a909ae6 container: remove ViewDB and View interfaces, use concrete types 419c47a80a Jenkinsfile: use Ubuntu 20.04 for DCO stage 5e50d002f1 ci: fix branch filter pattern 8596486743 Jenkinsfile: remove unit-validate stage cd54f31984 Jenkinsfile: remove report bundles creation in unit-validate a354970eaa Jenkinsfile: remove validation steps moved to GHA 85fa72c599 chore: update supported go version to 1.18+ c0fa14e8af vendor: github.com/armon/go-metrics v0.4.1 1d7ceb2fee vendor: github.com/google/btree v1.1.2 2597a71623 client: ignore kernel-memory on API >= 1.42 9b428a3d33 integration-cli: remove TestDockerSuite func 7b9877bd8a ci(test): report summary output 8ad8c6d887 fix debian sysvinit script fails to restart docker daemon when stopped 7602edfd06 ci: reusable dco workflow 5a98363a92 ci(test): dynamic validate matrix 9b71a46899 Revert "validation: temporarily allows changes in integration-cli" 3cb933db9d Update uses of Image platform fields in OCI image-spec a73d78f8d5 ci(test): validate job matrix c7e77dba7f Update some tests for supplementary group permissions f6b695d2fb use consistent alias for gotest.tools/v3/assert/cmp 9f8bd80487 Jenkinsfile: remove steps moved to GitHub Actions 36688496ca ci: fix .windows workflow name 807c849431 ci(test): send coverage to codecov 4c8af0e2f9 ci(test): upload reports 60864229b8 integration-cli: TestPluginInstallImage broken on GitHub Runner b8bf60c590 integration-cli: TestEventsOOM* broken on GitHub Runner df731c745a integration: TestNetworkLoopbackNat is broken on GitHub Runner 2e04be3fb9 ci: gha test workflow for integration and unit test 4dd86a0b33 containerd-integration: prefer error over panic where possible ff81dc3544 api/server/backend/build: remove Tagger and NewTagger 779a5b3029 ImageService.GetImage(): pass context 1eadbdd9fa Update to go 1.19.1 to address CVE-2022-27664, CVE-2022-32190 58413c15cb update to golang 1.19 9dab00a76e daemon/images: manifestMatchesPlatform() punch through context 518179f63e vendor: golang.org/x/net v0.0.0-20220906165146-f3363e06e74c cba36a064d Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190 878906630b Wrap local calls to the content and lease service 0f052eb4f5 namesgenerator: remove Valentina Tereshkova 609d87003a pkg/archive: strip "write" bits again on Windows cddaa84777 pkg/archive: remove backward compat hack for go < 1.9 306b8c89e8 linting: host:port in url should be constructed with net.JoinHostPort 31fb92c609 linting: gosec: fix or suppress G112, G114 in test code 561a010161 linting: suppress false positive for G404 (gosec) a33d1f9a7c libnetwork/diagnostic: EnableDiagnostic(): use net.JoinHostPort de4af86e98 daemon: set containerd default snapshotter if none is configured 13f99eb65f vendor: github.com/docker/go-units v0.5.0 1557892c37 api: swagger: add errorDetail to CreateImageInfo d983fa0ebe api: docs: add errorDetail to CreateImageInfo (v1.42) 8b36298d7f pkg/archive: remove tests for CanonicalTarNameForPath d59758450b pkg/archive: make CanonicalTarNameForPath and alias for filepath.ToSlash 509f19f611 replace pkg/system Sequential funcs with moby/sys/sequential a4d081cc17 ci: move buildkit tests to a dedicated workflow 5cfc9c374c validate: address SC2155 (shellcheck) b9fd2cf605 validate: format vendor script with shfmt 6cef06b940 validate: add yamllint validation 91bb776bb8 validate: yamllint: ignore "truthy value should be one of" warnings cc2134ea83 validate: yamllint: set locale in config file f679d8c821 validate: yamllint: use "parsable" output 5f114b65b4 validate: yamllint rename config-file 1d7cd76ee9 Dockerfile: update yamllint to v1.27.1 5e0599cb6e pkg/jsonmessage: export "Stream" interface 2640aec0d7 pkg/system: make IsAbs() platform-agnostic 65fdd10d4e ci(windows): move windows-2019 to another workflow 8e8d9a3650 ci: fix broken workflow 8b748bd326 daemon: stop health checks before deleting task d0731af939 Unskip TestHealthCheckProcessKilled on Windows f7277806c8 vendor: github.com/klauspost/compress v1.15.9 d52ffce38f update containerd binary to v1.6.8 bd98bf38e9 update runc to v1.1.4 5dcaad0dd3 Upgrades buildx to 0.9.1 c500d8824d vendor: github.com/moby/buildkit v0.10.4 6217f8001e gha: temporarily pin BuildKit integration test version a09f8dbe6e daemon: Maintain container exec-inspect invariant 15b8e4a490 integration: synchronize TestWaitConditions 18e322bc7c Lock container when deleting its root directory 6a2f385aea Share logic to create-or-replace a container 4bafaa00aa Refactor libcontainerd to minimize c8d RPCs 57d2d6ef62 Update container OOMKilled flag immediately b75246202a Stop locking container exec store while starting 92d2e12a4d daemon: getInspectData(): reduce cyclomatic complexity 313a7d716d daemon: getInspectData(): skip graphdriver data for snapshotters 74b84d00b3 integration-cli: add utility to check if snapshotters are enabled 0cbb92bcc5 daemon: capture output of killed health checks 549d24b437 libnetwork/drivers/ipvlan: fix missing IpvlanFlag field in config JSON ba138d6201 daemon: don't set ignoreImagesArgsEscaped, managed where not needed e14924570c client: remove deprecated WithDialer() option 7f0cf432e9 client: remove redundant pluginPermissionDenied c3f0cd7457 client: remove deprecated IsErrUnauthorized, IsErrNotImplemented 23b8fcc74d ci: print Windows daemon event log timestamps 4b84a33217 daemon: kill exec process on ctx cancel 774e25de13 info: add driver-type d8d990f2e3 daemon: make the snapshotter configurable e6ee27a541 Allow containerd shim refs in default-runtime 7b7d1132e8 seccomp: allow "bpf", "perf_event_open", gated by CAP_BPF, CAP_PERFMON 360238e9e1 vendor: github.com/hasicorp/memberlist v0.4.0 b58de39ca7 daemon: complete the "--graph" / "-g" deprecation d2276ff3f2 daemon: remove daemon.graphdriver c6eab4077a daemon: info: fillDriverInfo() get driver-name from ImageService 8dd14509d7 ImageService: rename GraphDriverName to StorageDriver ca52e0a244 vendor: github.com/containerd/containerd v1.6.8 f27b74f0f7 Makefile: update buildx to v0.9.0 327c8fc52f daemon/config: use initialized config in more tests 2d7d81bc46 cmd/dockerd: use initialized config in tests b28e66cf4f daemon/config: New(): initialize config with platform-specific defaults 9d74c7ab99 daemon: Mount(): use container's driver information for error-message 239d9c5eda daemon: restore(): remove fallback for legacy containers 6ccda5a041 daemon: restore(): remove platform-check (was used for LCOW) 9a849cc83a introduce GetImageOpts to manage image inspect data in backend a4b28e23cf integration-cli: Correct emptyfs id under c8d 502d3a1fcb containerd/load: Load all platforms 8925f735a1 daemon/config: fix GoDoc for StockRuntimeName 226e07144e cmd/dockerd: initContainerd() use early return 6560e0b136 cmd/dockerd: initContainerD(): clean-up some logs b6b0b0a05f libcontainerd/supervisor: don't write log-level to config file bff3e85625 libcontainerd/supervisor: store location of config-file 7a9791f096 libcontainerd/supervisor: store location of pidFile 89ab14a115 libcontainerd/supervisor: make supervisor adjust OOM score for containerd 1d2a669445 libcontainerd/supervisor: use correct logger 2d511f28f2 libcontainerd/supervisor: platformCleanup(): use canonical socket address 7b0bd43a27 libcontainerd/supervisor: remove unused remote.rootDir 6b7e19ff42 libcontainerd/supervisor: remove unused RWMutex 37a241768d cmd/dockerd: fix some minor issues in Windows implementation df965f51bf pkg/idtools: remove deprecated NewIdentityMapping, UIDS() and GIDS() 9861dd069b vendor: github.com/moby/swarmkit/v2 v2.0.0-20220721174824-48dd89375d0a 7797480eb0 daemon, builder: rename variables that collided with imports acd0aa7d38 api/server/router/image: address some linter warnings e05f614267 vendor buildkit 8e2d9b9 (v0.10 branch) 4e46d9f963 update containerd binary to v1.6.7 7376bf948b vendor: github.com/containerd/containerd v1.6.7 30295c1750 api: swagger: fix invalid example value (API v1.39-v1.41) 9031de6a9b fix minor code unreachability error 5c96365c94 containerd: Unpack loaded images 50fb999bb1 add image load/save support 43956c1bfc api: swagger: document BuildCache fields (API v1.39-v1.41) 5371c889a8 api: swagger: document BuildCache fields (API v1.42) e0db8207f3 api: add BuildCache.Parents for API >= v1.42 ebf339628a api: deprecate BuildCache.Parent in API >= v1.42 e0286d7f4e api/types: add missing GoDoc for BuildCache fields. dc2b34af6a api: swagger: document BuildCache fields. d4579a983e containerd/pull: Use authorization 340711db3d api: add types/volume.ListOptions for a more consistent API f1d71f7cc3 Update golang to 1.18.5 051e604adc libcontainerd/supervisor: simplify logic for disabling CRI plugin d4d5e0ae0c libcontainerd/supervisor: remove unused options 0f5ac7761d api: api/server/router/build: fix API errors 69f077f1aa vendor: github.com/Microsoft/hcsshim v0.9.4 982f09f837 docs: api: add missing "platform" query-arg on create (v1.42) 1000e4ee7d docs: api: add missing "platform" query-arg on create (v1.41) 3dae8e9fc2 api: swagger: add missing "platform" query-arg on create 7ca66e3cfc api: add registry.EncodeAuthConfig 7819811835 api: add registry.DecodeAuthConfig, registry.DecodeAuthConfigBody e3a7a1c6ae client: linting: fix "invalid auth header" error 360d38adb1 daemon/containerd: use types/registry.AuthConfig 2b7416ef34 testutil, integration: use types/registry.AuthConfig d817f4dcee registry: use types/registry.AuthConfig 55d1a56826 plugin: use types/registry.AuthConfig 04c339a12b distribution: use types/registry.AuthConfig a02abca49a daemon: use types/registry.AuthConfig 39f3adc079 daemon/images: use types/registry.AuthConfig 05eacf92fe daemon/cluster: use types/registry.AuthConfig eaf1a604f2 client: use types/registry.AuthConfig d8a43399a8 api/server/router: use types/registry.AuthConfig 818ee96219 api/types: move AuthConfig to registry types 857cb260c7 api: add const for 'X-Registry-Auth' 26c65447df Implement ImageDelete for containerd f4c0ec8ffc integration-cli: Make service process live forever 547da0d575 daemon: support other containerd runtimes (MVP) 31f654a704 Fix file capabilities droping in Dockerfile ba2ff69894 libcontainerd: switch generated containerd.toml to v2 (v1 is deprecated) ef5b279887 logger/journald: implement --follow correctly e278d3f185 logger/*: fix reading w/ non-monotonic timestamps 342b44bf20 logger/journald: rewrite reader w/o cursors 3e8405aa82 logger/journald: refactor cgo out of business logic 7ff4b64319 logger/journald: simplify control flow f7fe2c2290 logger/journald: follow the thread-safety rules 12744335c0 logger/journald: simplify build constraints 0e0b300a1c Fix `make BIND_DIR=. DOCKER_SYSTEMD=1 shell` a61f7abf5a integration-cli: Enable TestGetContainersAttachWebsocket for Windows 1213881712 libnetwork: refactor networkdb test implementation 6cc644abef integration-cli: Remove unnecessary Windows-only code 7bdc0a6291 compute image's shared size a1bc0a6d79 daemon/containerd: add more TODO's for image list, and reformat f499c6b9ec Test: wait for network changes in TestNetworkDBNodeJoinLeaveIteration 669fbed1ac daemon/containerd: validate image filters 4d3b32bf3d add support for since, before, labels images filters 0e9a66d35a logger/journald: remove journald_compat (for systemd < 209) 75577fe7a8 logger/journald: fix SA4011: ineffective break statement a290f5d04c state/Wait: Fix race when reading exit status 5571d5139b integration: TestWaitRestartedContainer 498803bec9 daemon/restart: Don't mutate AutoRemove when restarting c492105b8f integration: Add TestContainerWithAutoRemoveCanBeRestarted 67c36d5d6e Windows: Re-create custom NAT networks after restart if missing from HNS a46ce37d25 compute image VirtualSize 9c8b0b6050 daemon/containerd: split methods to separate files e4cd1933c6 daemon/containerd: ImageService: rename receiver 91bd9a6642 daemon/containerd: change alias for oci-specs to match existing code b529fe0995 daemon/images: fix some linting issues b94f7157ca daemon/images: rename images.go to image_list.go for consistency 046b3fc5dd daemon/images: move SquashImage to its own file 6e0e5d7a31 daemon/images: rename variables that collided with imports 2527e6dd09 daemon/containerd: ImageService: remove unused LookupImage() 7b510fda0c daemon: ImageService: remove unused Map() method ff3d2eb589 Add Cory Snider (corhere) as maintainer 9464898b47 libnetwork: skip firewalld management for rootless 7d74269c0d Create the containerd image service 4f08346686 fix formatting of "nolint" tags for go1.19 34b8670b1a update golang to 1.18.4 68bf777ece daemon: remove deprecated fields and flags for cluster-advertise 494dadb8a3 api/types: remove deprecated fields for cluster-advertise f02cdb50be api/types/volume: remove deprecated types efb1f141a4 api/types/container: remove deprecated types 10829dd222 daemon: NewDaemon(): fail early on non-supported platforms 1de20b2012 API: bump version to 1.43 264b41fb9e docs: add API v1.42 e258d66f17 profiles: seccomp: add syscalls related to PKU in default policy 9cd67df5b2 timestamp: clarify doc for ParseTimestamp ee230d8fdd client: errors: remove dead code 52c1a2fae8 gofmt GoDoc comments with go1.19 e4e819b49c pkg/parsers/operatingsystem: fix stray import 6668801d40 gofmt files 5b0eb69635 Extract ImageService interface from the image service 98ce26624b maintainers: Add Paweł Gronowski as curator 4336271b57 maintainers: Add Bruno Sousa as curator ab6b40e5a9 Add github issue forms b1a6d5388d libnetwork: macvlan: reduce use of const for driver name aca80d1cda libnetwork: ipvlan: reduce use of const for driver name dddb4d25d2 libnetwork: macvlan: cleanup parseNetworkGenericOptions 1992190162 libnetwork: macvlan: make configuration.fromOptions a constructor 99bde59229 libnetwork: ipvlan: cleanup parseNetworkGenericOptions 1a1a885423 libnetwork: ipvlan: make configuration.fromOptions a constructor 4e39cdd9bb libnetwork: ipvlan: move validation into parseNetworkOptions() 9f0cb20d9f libnetwork: macvlan: move validation into parseNetworkOptions() b768d69c04 libnetwork: macvlan: processIPAM(): simplify 5d13b38479 libnetwork: macvlan: processIPAM(): remove unused arg and error return 798021af9f libnetwork: macvlan: set network ID as part of parseNetworkOptions 35cba9b1c9 libnetwork: ipvlan: processIPAM(): simplify 8d067bbdb4 libnetwork: ipvlan: processIPAM(): remove unused arg and error return a893540b66 libnetwork: ipvlan: set network ID as part of parseNetworkOptions afeb4c7a6e libnetwork: macvlan: use single ipSubnet type d3e3d43482 libnetwork: ipvlan: use single ipSubnet type 9fba1514d2 libnetwork: macvlan: clean up some consts aec4853498 libnetwork: ipvlan: clean up some consts 33121d3d45 introduce Containerd-snapshotter feature flag 2293de1c82 update runc binary to v1.1.3 af7236f85a Check ipt options before looking for ip6t 25345f2c04 AdditionalGids must include effective group ID 7b153b9e28 api: set default "Builder-Version" to "2" (BuildKit) on Linux 70dc392bfa Use hashicorp/go-memdb instead of truncindex 8d5eebcc6e vendor: github.com/bsphere/le_go v0.0.0-20200109081728-fc06dab2caa8 Bumping docker-cli to version v24.0.0, which comprises the following commits: fb6ae356c vendor: github.com/docker/docker v24.0.0-rc.3 de93c9b26 vendor: github.com/docker/distribution v2.8.2 cafdcf283 cli-plugins/manager: fix deprecation comment of Metadata.Experimental 3768143c2 Update tag docs to clarify name 52ac1a974 docs: update description for docker -H flag 58f37f630 vendor: github.com/docker/docker v24.0.0-rc.2 4f97f5599 vendor: github.com/docker/docker v24.0.0-rc.1.0.20230505222407-8d9a40a82034 0428418d6 vendor: github.com/containerd/containerd v1.6.21 05bf6fff2 vendor: github.com/opencontainers/runc v1.1.7 44fce0706 vendor: github.com/mattn/go-runewidth v0.0.14 fd0621d0f update go to go1.20.4 155f7d9e2 cli/command/system: add utilities for printing 1e89037d7 cli/command/system: prettyInfo: accept Streams 8cfefc6ea cli/command/system: prettyPrintServerInfo: accept Streams ba7a200f0 cli/command/system: prettyPrintClientInfo: accept Streams 73938cd61 cli/command/system: printSwarmInfo(): accept io.Writer 2d0ea86b0 cli/command/system: use io.Writer for printing warnings be6f4cd56 cli/command/system: prettyPrintServerInfo: refactor printing "runtimes" 1d70f7cdb cli/command/system: prettyPrintServerInfo: rename var that collided with import 416e55bed github.com/docker/cli/cli/command/system: add BenchmarkPrettyPrintInfo f233becf9 vendor: github.com/moby/term v0.5.0 bd2c26328 vendor: github.com/docker/docker v24.0.0-rc.1 f02301ab5 remove uses of deprecated VirtualSize field eeaaf5d01 e2e: Update alpine to 3.17.2 4569378ca e2e: Match notary server version with the main Dockerfile ec5504a83 test/e2e: Use "frozen" tag to reference test images 41b6ec07c e2e: Skip tests with platform-specific digests on other platforms 962e22c31 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230406225228-75e92ce14ff7 72192c75c vendor: github.com/moby/buildkit v0.11.6 c177e2060 vendor: github.com/creack/pty v1.1.18 e693e7f3b Docs freshness updates 1c1fca4eb docs: update deprecation status of "overlay" and "AuFS" c180202ce cli/command: remove deprecated Stream types 4e19b8128 docs: update deprecation status for overlay2.override_kernel_check 0dec5d20a volumes: prune: add --all / -a option ff7f76af7 Handle empty DOCKER_BUILDKIT like unset 271b9667e Swarm: allow additional properties in `build` e2bfd2199 cli/compose: add schema 3.11 (no changes with 3.10 yet) 6c4c3c23c build(deps): bump docker/bake-action from 2 to 3 8ef8f4131 man/dockerd.8: assorted formatting fixes e3cb324ed man/dockerd.8: escape asterisks and underscores a4bcabc7d vendor: github.com/docker/docker v24.0.0-beta.2 0286e36bb vendor: github.com/opencontainers/runc v1.1.6 1f1a6c5a8 vendor: golang.org/x/net v0.8.0 6e2163a71 vendor: golang.org/x/text v0.8.0 551d519b5 vendor: golang.org/x/term v0.6.0 c97c3211b docs: deprecation: OOM-score adjust for the daemon 88be16cb5 cli/command/container: implement `docker run --annotation` 6f415d240 docs: update deprecation status of BuildKit "buildInfo" for v24.0.0 da3871fd8 cli/command/system: printServerWarnings: use client API version from info be307c579 cli/command/system: prettyPrintServerInfo: move out collecting username 71fde20e1 cli/command/system: prettyPrintServerInfo: simplify username 375b17a31 docker info: don't print "registry" (IndexServerAddress) b87ed3435 cli/command: deprecate EncodeAuthToBase64 5d856a5d9 cli/command/container: pullImage: use DisplayJSONMessagesToStream utility b9b98aee5 cli/command/container/create: pullImage(): use RetrieveAuthTokenFromImage a27acd62b cli/command/container/create: pullImage() remove intermediate vars e0b47cc2c cli/command/image: imagePullPrivileged: remove intermediate variables 372bb56ad cli/command: replace EncodeAuthToBase64 for registry.EncodeAuthConfig 534bfc230 cli/command/registry: remove intermediate var that collided 5e76d41bf cli/command: ConfigureAuth: fix links to related tickets 68d791e56 cli/command: ConfigureAuth: trim whitespace both for username and password d0ec8fa5c cli/command: ConfigureAuth: fix terminal state not being restored on error c846428cb docs: update dockerd usage output for new proxy-options c730a8eb9 docs/reference: dockerd: remove default oom-score-adjust c20974361 docs/reference: dockerd: update seccomp flag description 32bc91200 docs/reference: dockerd: use table for env-vars 370174800 docs/reference: use table for proxy env-vars 879e0804a docs/reference: reformat env-vars table, and simplify 4a863df57 docs/reference: remove mention of DOCKER_NOWARN_KERNEL_VERSION c388fe4de cli: make cobra templates a const 341c843ac ci: remove fetch depth 0 for validate jobs 25ed7847e ci: add validation for generated markdown 04df70025 docs: deprecated: fix version (23.1.0 -> 24.0.0) 5bd359132 cli/command: fix documentation for ResolveAuthConfig 8ee771114 docker info: include Client Version and "platform name" 3347d7b5a cli/command/system: add newClientVersion() utility 3124e779c cli/command/system: clientVersion: make all fields "omitempty" 9202bef4a cli/command/system: add platformInfo type, and fix "omitempty" 5d37acdde cli/command/system:remove versionInfo.ServerOK() utility 5d33b7276 docs: update engine versions in some examples 23bd746c4 fix docker version --format=json not outputting json format 80640bca7 cli/command/system: make default version template a const 46234b82e fix docker info --format=json not outputting json format 1aaa179d9 cli/command/formatter: export JSONFormat const 37e02ff21 docker ps: print warning if both --format and --quiet are set f52290559 docker ps: always use --quiet, also combined with --format f36e4b094 cli/command/container: rename vars that collided c25b8f803 vendor: github.com/spf13/cobra v1.7.0 ca1d0eb90 Update version to v24.0.0-dev 08a794dc0 docs: regenerate markdown docs 37f234fbe scripts/docs/generate-md.sh: fix location of generate code 591bead14 update go to go1.20.3 683e4bf0c Fix plugin completion parsing for plugins using `ShellCompDirectiveFilterFileExt` 808032652 cli/streams: minor refactoring and docs touch-ups 66a1c3bab cli/config/configfile: remove deprecated StackOrchestrator field 328fac3a6 cli/context/docker: remove deprecated Endpoint.TLSPassword aace828bb cli/flags: remove deprecated CommonOptions, NewCommonOptions 8b418be6d cli/context/store: remove deprecated error-utilities 3405eb1f4 cli/command/formatter: remove deprecated KubernetesEndpoint 817897f89 cli/command: fix deprecation comments for Stream types 89583b92b improve plugins listing performance fc560038e vendor: github.com/docker/docker v24.0.0-beta.1 e14f5fc1a revert "improve plugins discovery performance" 05cffcbed vendor: github.com/docker/docker 7c93e4a09be1 (v24.0.0-dev) a36a54d3c vendor: github.com/containerd/containerd v1.6.20 f4b22fb6c vendor: github.com/opencontainers/image-spec v1.1.0-rc2.0.20221005185240-3a7f492d3f1b eb392ff4c cp: Do not block transfer on writing to terminal 7189716d5 replace uses of deprecated api/types.AuthConfig bfa79fd75 vendor: github.com/docker/docker master (v24.0.0-dev) e86d2f411 vendor: github.com/moby/buildkit v0.11.5 cd9c6a4c0 vendor: github.com/klauspost/compress v1.16.3 5843fbd5f vendor: github.com/imdario/mergo v0.3.13 149d28963 vendor: golang.org/x/sys v0.6.0 6dca335d0 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230315203717-e28e8ba9bc83 4389c966f vendor: github.com/opencontainers/runc v1.1.5 a79828287 update to go1.20.2 b8747b0f9 update golangci-lint to v1.52.2 399ded9b9 internal/test: FakeCli: remove name for unused arg (revive) 20a70cb53 internal/test/notary: remove name for unused arg (revive) 90380d957 cli/connhelper/commandconn: remove name for unused arg (revive) dd6ede210 cli/config/configfile: mockNativeStore: remove name for unused arg (revive) 7c8680c69 cli/compose/schema: remove name for unused arg (revive) 6355bcee6 cli/compose/convert: fakeClient: remove name for unused arg (revive) 607f290f6 cli/command/volume: remove name for unused arg (revive) 546cf6d98 cli/command/trust: fakeClient: remove name for unused arg (revive) b32b28041 cli/command/task: fakeClient: remove name for unused arg (revive) 40a51d554 cli/command/swarm: fakeClient: remove name for unused arg (revive) b0d0b0efc cli/command/stack: fakeClient: remove name for unused arg (revive) c69640d8c cli/command/service: fakeClient: remove name for unused arg (revive) 5254081fd cli/command/registry: fakeClient: remove name for unused arg (revive) da3416c02 cli/command/plugin: fakeClient: remove name for unused arg (revive) 625988c3a cli/command/node: fakeClient: remove name for unused arg (revive) 92d9e3bf6 cli/command/network: fakeClient: remove name for unused arg (revive) 316c4992c cli/command/image: fakeClient: remove name for unused arg (revive) ae5a86bb8 cli/command/image/build: remove name for unused arg (revive) 38ef40ee7 cli/command/idresolver: fakeClient: remove name for unused arg (revive) 45b5676ac cli/command/container: fakeClient: remove name for unused arg (revive) 5563c5a91 cli/command/checkpoint: fakeClient: remove name for unused arg (revive) 9dd012aa5 cli/command/secret: fakeClient: include context in fake client (revive) 66c66bdce cli/command/config: fakeClient: include context in fake client (revive) ac024a4d8 internal/test/network: FakeClient: embed interface to remove boilerplating a2d532819 cli/trust: remove name for unused args (revive) f5fad186c opts: NormalizeCapability(): fix redefinition of the built-in function (revive) 9252fae83 cli/registry/client: AuthorizeRequest(): remove name for unused arg (revive) 92506afd4 cli/command/service/progress: remove name for unused parameter (revive) c3d7f167b cli/command: RunPrune(): remove name for unused "all" parameter (revive) b4aff3a14 cli/command/completion: NoComplete(): remove unused argument (revive) f08252c10 cli/command/stack: deprecate now obsolete wrappers 78c474539 cli/command/context: remove redundant if ...; err != nil check (revive) be97731f1 cli/command/container: fix redefinition of the built-in function close (revive) b9a1b0928 cp: Make gocyclo happy 90b7bc36d cp: Reduce number of progress updates efd011b79 cp: reduce branching in progress printer e4436853e gha: align stray go 1.19.4 version 9335690a6 Fix grammar in docs by adding omitted word ccae6e929 cp: Improve tty flashing on progress updates f27927d93 cp: do not emit progress if stderr is not a term a39958846 vendor: github.com/docker/docker v23.0.2 c39c711a1 load plugin command stubs when required 62f2358b9 improve plugins discovery performance bebdb6fa2 ci: enhanced build workflow bec5d37e9 don't use null values in the bake definition b201ce5ef e2e: update notary certificates c6c33380d e2e: increase tests certificates duration (10 years) d234a81de bake target to generate certs for e2e tets 3ce95c7af Dockerfile: build binary if no target specified b854eff30 Dockerfile: align go version 0ba820ed0 cli/trust: remove special handling for "plugin" Class a3d56e7d0 cli/command: remove deprecated ElectAuthServer() 742881fc5 cli/command: fix imports formatting e3fa7280a cli/command: ElectAuthServer: fix deprecation comment db827d583 cli/command/volume: suppress err output in tests aa0aa4a6d Add bash completion for available plugins 8805f8ea2 build(deps): bump actions/setup-go from 3 to 4 e60c748c1 vendor: github.com/moby/buildkit v0.11.4 6c8cc226f vendor: google.golang.org/grpc v1.50.1 d213548bd vendor: golang.org/x/net v0.7.0 3a0d492d1 vendor: golang.org/x/term v0.5.0 f40bbf4f7 vendor: golang.org/x/time v0.3.0 a85537d34 vendor: golang.org/x/text v0.7.0 3e9c6e84c vendor: golang.org/x/sys v0.5.0 ca8783ef4 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230309194213-a745a8755ce3 33806760a vendor: github.com/containerd/containerd v1.6.19 71e495aa5 vendor: github.com/docker/docker v23.0.1 74c4ed417 Dockerfile: update buildx to v0.10.4 23da1cec6 update to go1.19.7 012b77952 stack: Change unexpected environment variable error a47058bbd stack/loader: Ignore cmd.exe special env variables 25ebf0ec9 connhelper: Allow socket path when using SSH 973333448 Don't automatically request size if `--size` was explicitly set to `false` 8bc1aacea docs: Deprecate buildkit's build information 89687d5b3 formatter: Consider empty RepoTags and RepoDigests as dangling a1953e19b test/cli: Use empty array as empty output of images/json e636747a1 docs: drop dated comments about graphdrivers dac79b19a Dockerfile: update buildx to v0.10.3 release notes: https://github.com/docker/buildx/releases/tag/v0.10.3 c2487c299 context: avoid corrupt file writes e921e103a update to go1.19.6 d2f726d5a changed the container name in docker stats page de9b47ae6 Fix styling of arguments 0f3959868 ci: fix branch filter pattern 4254cd19b MAINTAINERS: add myself as curator bbebebaed vendor: github.com/docker/docker v23.0.0 5195db1ff vendor: github.com/containerd/containerd v1.6.16 9b5ceb52b cli/command/container: exit 126 on EISDIR error 56051b84b Fix bad ThrottleDevice path 74973adaa cli/command: embed "Streams" interface in "Cli" 2753057c4 contrib/completion: bash `nounset` mode fixes Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* moby: update to v23.0.6Bruce Ashfield2023-06-071-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping moby to version v23.0.6-2-gcb3fd005d4, which comprises the following commits: e94c22cc39 vendor: github.com/docker/distribution v2.8.2 e73310d8c9 update runc binary to v1.1.7 3f0402cb68 update runc binary to v1.1.6 edadebe177 update containerd binary to v1.6.21 14661fc010 vendor: github.com/containerd/containerd v1.6.21 e00f6efb20 Vendor containerd 1.6.x with the readonly mount fix bd4620f6ee vendor: github.com/containerd/containerd v1.6.20 d06cf03729 vendor: re-vendor to add missing file cf7742ea7c vendor: opencontainers/image-spec v1.1.0-rc2.0.20221005185240-3a7f492d3f1b 382e9ebbf6 vendor: github.com/containerd/ttrpc v1.1.1 e0843f264d Update `github.com/containerd/containerd` to the HEAD of `release/1.6` and vendor 94fcd2d2ef d/graphdriver/copy: support src fs w/o xattr support 70dbd2c870 [23.0] update go to go1.19.9 fe0a414613 Use the image service instead of the reference store for tagging 40ec0eb9fe vendor: github.com/opencontainers/runc v1.1.5 227d3f39a3 daemon: set docker0 subpool as the IPAM pool c82be35412 libnetwork: clean up inDelete network atomically ccccb7a170 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230315203717-e28e8ba9bc83 8a6bec6e16 Silence GRPC logs unless our log level is debug 844fd50c67 Added timeout to validate job in github actions 8cec683574 Dockerfile: update xx to 1.2.1 7ff53c3c78 Update delve version 4d57ee692d TestLogs: Increase stop check poll timeout on Windows 838d5ea058 chore: use http constants to replace numbers 61d084593c client: deprecate NewClient properly 28b694d32d awslogs: fix non-blocking log drop bug 3731ce10d4 Fix argument quoting bugs in dockerd-rootless.sh 23774ada04 vendor: github.com/moby/buildkit v0.10.7-0.20230412161310-d52b2d584242 9277e64444 vendor: github.com/ishidawataru/sctp v0.0.0-20230406120618-7ff4192f6ff2 09fbbd5677 docker-rootless-setuptools.sh: improve readability of messages d3e52936c3 [23.0] update go to go1.19.8 a0a597cbbe [23.0] fix vendor.mod: add hashicorp/go-multierror as direct dependency 063d3a6f1a daemon: let libnetwork assign default bridge IPAM 389e18081d update containerd binary to v1.6.20 348544e6e8 libnet/d/windows: log EnableInternalDNS val after setting it 3923e302a4 update runc binary to v1.1.5 f3946c14fe integration-cli: Enable TestExecStartFails on Windows b87f7f18b8 libnet/d/overlay: insert the input-drop rule c6bf3071fe StartWithLogFile: Fix d.cmd race 7f49ca259b TestDaemonRestartKillContainers: Fix loop capture 98cbcb8003 libnet/d/overlay: add BPF-powered VNI matcher 5c5fac2374 libnet/d/overlay: extract VNI match rule builder c492a22287 libn/d/overlay: enforce encryption on sandbox init 018edb0284 libnet/d/overlay: document some encryption code Bumping libnetwork to version v0.7.0-dev.3-1872-g3f004841, which comprises the following commits: dbbf124d Clean up inDelete network atomically d4d07f4a d/windows: log EnableInternalDNS val after setting it 91f0d508 update maintainers c5aa85f9 drivers/overlay: insert the input-drop rule bef66946 drivers/overlay: appease the old deprecated linter a94fe95b drivers/overlay: add BPF-powered VNI matcher e0376b6c drivers/overlay: extract VNI match rule builder f1945d37 drivers/overlay: enforce encryption on sandbox init 97442407 drivers/overlay: document some encryption code Bumping docker-cli to version v23.0.6-8-g44a7d9537, which comprises the following commits: a98af2b39 vendor: github.com/docker/distribution v2.8.2 6f353c800 cli-plugins/manager: fix deprecation comment of Metadata.Experimental 63b205048 Update tag docs to clarify name c76773b19 docs: update description for docker -H flag c769f2079 [23.0] update go to go1.19.9 802f17488 [23.0] vendor: github.com/docker/docker v23.0.5 498743aed [23.0] vendor: github.com/moby/swarmkit/v2 v2.0.0-20230315203717-e28e8ba9bc83 fde09d1d8 [23.0] vendor: github.com/opencontainers/runc v1.1.5 3cda7c30c [23.0] vendor: github.com/docker/docker v23.0.4 6c0f9022c Docs freshness updates 17357a778 build(deps): bump docker/bake-action from 2 to 3 2cf68537d ci: remove fetch depth 0 for validate jobs 4a4291708 ci: add validation for generated markdown f914316a9 fix docker version --format=json not outputting json format 9dfe5a29e cli/command/system: make default version template a const 2c1fde223 fix docker info --format=json not outputting json format 99124087e cli/command/formatter: export JSONFormat const 86e79b55e volumes: prune: add --all / -a option ada43812d cli/command/volume: suppress err output in tests c648e0b06 Handle empty DOCKER_BUILDKIT like unset b6cd3c85b docs: update dockerd usage output for new proxy-options aa85421ff docs/reference: dockerd: remove default oom-score-adjust 6bc4bf4f0 docs/reference: dockerd: update seccomp flag description 8a35f92ff docs/reference: dockerd: use table for env-vars 2cb152c41 docs/reference: use table for proxy env-vars 623da1997 docs/reference: reformat env-vars table, and simplify e76242fff docs/reference: remove mention of DOCKER_NOWARN_KERNEL_VERSION 4b4d7e2b4 cli/command: fix documentation for ResolveAuthConfig e67e5559d docs: deprecated: fix version (23.1.0 -> 24.0.0) a8e3b4b85 docs: update engine versions in some examples f88c159c7 [23.0] vendor: github.com/docker/docker v23.0.3 6c052fcda vendor: github.com/docker/docker v23.0.2 079e80889 vendor: golang.org/x/net v0.7.0 ff448ff45 vendor: golang.org/x/term v0.5.0 476933b68 vendor: golang.org/x/time v0.3.0 6131fe9e4 vendor: golang.org/x/text v0.7.0 bbc791ed7 vendor: golang.org/x/sys v0.5.0 dd6f77bba vendor: github.com/moby/swarmkit/v2 v2.0.0-20230309194213-a745a8755ce3 cb338ec97 vendor: github.com/containerd/containerd v1.6.19 ffafb38e3 vendor: github.com/docker/docker v23.0.1 a763e5114 Fix plugin completion parsing for plugins using `ShellCompDirectiveFilterFileExt` 3c7de6454 Fix grammar in docs by adding omitted word 3d0d576af ci: enhanced build workflow 2609bd23f docs: regenerate markdown docs 5fd2c0850 scripts/docs/generate-md.sh: fix location of generate code 5cd7710a0 update go to go1.19.8 209e9c0c1 cp: Do not block transfer on writing to terminal ce68ce7ae cp: Make gocyclo happy c28cb35c4 cp: Reduce number of progress updates 948dfa91c cp: reduce branching in progress printer f813c9639 cp: Improve tty flashing on progress updates 97d91f13a cp: do not emit progress if stderr is not a term 6efc4eacc cli/command: fix deprecation comments for Stream types c7cdab58d improve plugins listing performance d93d78588 load plugin command stubs when required 8e38271f2 gha: align stray go 1.19.4 version f6643207a don't use null values in the bake definition f381e0842 Dockerfile: align go version Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to 1.7.1Bruce Ashfield2023-06-071-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping containerd to version v1.7.1-4-g835383b17, which comprises the following commits: 6a5e54c15 Get CDI devices from CRI Config.CDIDevices field 9e60300ea snapshots/testsuite: Rename: fix fuse-overlayfs incompatibility 7b288e2d7 Update ttrpc to v1.2.2 27a0d957b Prepare release notes for v1.7.1 0e0532eb2 bump typeurl to v2.1.1 35e86f96c [transfer] avoid setting limiters when max is 0 f7233811f Update transfer configuration 4510eac00 Fix image pulling with Transfer service aaa65e8c1 Update hcsshim tag to v0.10.0-rc.8 95ef67e19 Fix umarshal metrics for CRI server 3ef5b689a runtime/shim: fix the nil checkpoint options 021bba28b update go to go1.20.4, go1.19.9 6b3ae0129 Remove entry for container from container store on error c0e128624 skip TestContainerStartWithAbsRuntimePath if the runtime is v1 aa3c63c15 integration: add container start test using abs runtime path d2d9eedb1 WithRuntimePath uses the TaskInfo.RuntimePath field fae4b6223 update runc binary to v1.1.7 571715a9d cri: Vendor v0.27.1 a6d336c1f Fix argsEscaped tests 1bbf98e53 oci: partially restore comment on read-only mounts for uid/gid uses 8f6e86fec go.mod: add comment explaining go-fuzz-headers replace rule 1ece0cb50 go.mod: remove replace for github.com/opencontainers/runtime-tools e9f962187 go.mod: integration: use non-pre-release of containerd 84393b005 go.mod: integration: move indirect dependencies to the right group dec2595af update runc binary to v1.1.6 7de8629be cri: Throw an error if idmap mounts is requested 75ac7e0d8 cri: Vendor v0.27.0-beta.0 for mounts uid/gid mappings 54d12b872 oci: Use WithReadonlyTempMount when adding users/groups 624327651 update go to go1.20.3, go1.19.8 1d6641b7c export: add test for WithSkipDockerManifest 0e0d84f6b archive: consistently respect value of WithSkipDockerManifest 9b4935d86 Update sbserver to add noexec nodev and nosuid to /etc/resolv.conf mount bind. 5e953cfa6 Test to ensure nosuid,nodev,noexec are set on /etc/reolv.conf mount. 0aad93f08 Add noexec nodev and nosuid to sandbox /etc/resolv.conf mount bind. 1a64f1b43 ctr/tasks: fix unmarshal the task metrics for cgroups v1 17c52a26d Keep linux mounts for linux sandboxes on Windows/Darwin d81fc15af update runc binary to v1.1.5 755efbe64 go.mod: github.com/opencontainers/runc v1.1.5 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc-docker: update to 1.1.7Bruce Ashfield2023-06-071-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping runc to version v1.1.7-2-gb6109acd, which comprises the following commits: f0ecf30b VERSION: back to development 860f061b VERSION: release 1.1.7 c1063b1c runc.keyring: add Akihiro Suda b0fae8c4 scripts: keyring validate: print some more information 79a52b43 libct/cg/sd: use systemd version when generating dev props 6a806d4d runc.keyring: add Kolyshkin b6f686f2 keyring: add Aleksa's <cyphar@cyphar.com> signing key 63355bf8 keyring: add Aleksa's <asarai@suse.com> signing key 3bdb63bf keyring: verify runc.keyring has legitimate maintainer keys 853d5e38 scripts: release: add verification checks for signing keys bd1d5370 release: add runc.keyring file and script 7cd72cc3 VERSION: go back to development 0f48801a VERSION: release 1.1.6 e4ce94e2 libct/cg: add misc controller to v1 drivers 10cfd816 libctr/cgroups: don't take init's cgroup into account d30d240b tests/int: test for CAP_DAC_OVERRIDE 840b9539 Fix runc run "permission denied" when rootless 165d2323 tests/int: add a "update cpuset cpus range via v2 unified map" test 26a58fdb cgroups: cpuset: fix byte order while parsing cpuset range to bits 8d9d1d25 libct/int: make TestFdLeaks more robust b66d6d56 libct/int: wording nits ddbb6d41 libc/int: add/use runContainerOk wrapper 3531cc2d ci: add call to check-config.sh ed9a0e1d ci/gha: bump actions/cache to v3 7683e508 ci/gha: switch to Go 1.19.x for validate 568d4407 ci/gha: bump golangci-lint to 1.48 1f9e36c0 libct: fixes for godoc 1.19 50f06554 ci: bump golangci-lint to 1.46 77472ef6 libct: fix staticcheck warning 9994fe3f libct: suppress strings.Title deprecation warning 403ea1f0 ci/gha: convert lint-extra from a job to a step d2c83bdf ci/gha: switch to Go 1.18.x for validate 03a631df ci: switch to golangci-lint 1.45 e5a5522a Add supported Go releases (1.19, 1.20) 3ce12483 Dockerfile: fix build wrt new git bac06cf6 ci/gha: remove stable: when installing Go e74040e0 build(deps): bump actions/setup-go from 2 to 3 55462355 Require Go 1.17, bump x/sys and x/net 3ce9c1e2 tests: Fix weird error on centos-9 abd6adde ci: bump shfmt to 3.5.1, simplify CI setup 1a4bf049 man/*sh: fix shellcheck warnings, add to shellcheck 9201794a script/check-config.sh: fix remaining shellcheck warnings 8b976428 shfmt: add more files b0fbd2f8 script/check-config.sh: fix SC2166 warnings 7f8cb3d6 script/check-config.sh: fix wrap_color usage f6562f19 [1.1] libct/cg/dev: skip flaky test of CentOS 7 12f2f03f [1.1] runc run: refuse a non-empty cgroup for systemd driver e618ec36 libct/cg/sd: reset-failed and retry startUnit on UnitExists 931b9bf3 libct/cg/sd: ignore UnitExists only for Apply(-1) b46ac860 libct/cg/sd: refactor startUnit 822623b6 CHANGELOG.md: move 1.1.5 CVEs to Security section 54cfb25d Makefile: add verify-changelog as release dependency 7b3ac330 verify-changelog: allow non-ASCII 37e586ab CHANGELOG: fix a typo de0c2277 [1.1] CHANGELOG: fix 1.1.5 git compare link 1fe2ec53 tests/int/mounts: only check non-shadowed mounts 9b8ebe4d tests/int/mount: fix issues with ro cgroup test 17a2d451 VERSION: back to development Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc-opencontainers: update to 1.1.7Bruce Ashfield2023-06-071-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping runc to version v1.1.7-2-gb6109acd, which comprises the following commits: f0ecf30b VERSION: back to development 860f061b VERSION: release 1.1.7 c1063b1c runc.keyring: add Akihiro Suda b0fae8c4 scripts: keyring validate: print some more information 79a52b43 libct/cg/sd: use systemd version when generating dev props 6a806d4d runc.keyring: add Kolyshkin b6f686f2 keyring: add Aleksa's <cyphar@cyphar.com> signing key 63355bf8 keyring: add Aleksa's <asarai@suse.com> signing key 3bdb63bf keyring: verify runc.keyring has legitimate maintainer keys 853d5e38 scripts: release: add verification checks for signing keys bd1d5370 release: add runc.keyring file and script 7cd72cc3 VERSION: go back to development 0f48801a VERSION: release 1.1.6 e4ce94e2 libct/cg: add misc controller to v1 drivers 10cfd816 libctr/cgroups: don't take init's cgroup into account d30d240b tests/int: test for CAP_DAC_OVERRIDE 840b9539 Fix runc run "permission denied" when rootless 165d2323 tests/int: add a "update cpuset cpus range via v2 unified map" test 26a58fdb cgroups: cpuset: fix byte order while parsing cpuset range to bits 8d9d1d25 libct/int: make TestFdLeaks more robust b66d6d56 libct/int: wording nits ddbb6d41 libc/int: add/use runContainerOk wrapper 3531cc2d ci: add call to check-config.sh ed9a0e1d ci/gha: bump actions/cache to v3 7683e508 ci/gha: switch to Go 1.19.x for validate 568d4407 ci/gha: bump golangci-lint to 1.48 1f9e36c0 libct: fixes for godoc 1.19 50f06554 ci: bump golangci-lint to 1.46 77472ef6 libct: fix staticcheck warning 9994fe3f libct: suppress strings.Title deprecation warning 403ea1f0 ci/gha: convert lint-extra from a job to a step d2c83bdf ci/gha: switch to Go 1.18.x for validate 03a631df ci: switch to golangci-lint 1.45 e5a5522a Add supported Go releases (1.19, 1.20) 3ce12483 Dockerfile: fix build wrt new git bac06cf6 ci/gha: remove stable: when installing Go e74040e0 build(deps): bump actions/setup-go from 2 to 3 55462355 Require Go 1.17, bump x/sys and x/net 3ce9c1e2 tests: Fix weird error on centos-9 abd6adde ci: bump shfmt to 3.5.1, simplify CI setup 1a4bf049 man/*sh: fix shellcheck warnings, add to shellcheck 9201794a script/check-config.sh: fix remaining shellcheck warnings 8b976428 shfmt: add more files b0fbd2f8 script/check-config.sh: fix SC2166 warnings 7f8cb3d6 script/check-config.sh: fix wrap_color usage f6562f19 [1.1] libct/cg/dev: skip flaky test of CentOS 7 12f2f03f [1.1] runc run: refuse a non-empty cgroup for systemd driver e618ec36 libct/cg/sd: reset-failed and retry startUnit on UnitExists 931b9bf3 libct/cg/sd: ignore UnitExists only for Apply(-1) b46ac860 libct/cg/sd: refactor startUnit 822623b6 CHANGELOG.md: move 1.1.5 CVEs to Security section 54cfb25d Makefile: add verify-changelog as release dependency 7b3ac330 verify-changelog: allow non-ASCII 37e586ab CHANGELOG: fix a typo de0c2277 [1.1] CHANGELOG: fix 1.1.5 git compare link 1fe2ec53 tests/int/mounts: only check non-shadowed mounts 9b8ebe4d tests/int/mount: fix issues with ro cgroup test 17a2d451 VERSION: back to development Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kubernetes: update to v1.27.1Bruce Ashfield2023-06-071-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping kubernetes to version v1.27.1-89-g2555e0f90e8, which comprises the following commits: 2eccb77b2c5 OpenAPI V3 invalid document checks 642ea896178 update for feedback 0457fbc83b3 QueryParamVerifier falls back on invalid v3 document 4cd33af1419 QueryParamVerifierV3 resilient to minimal OpenAPI V3 documents ce458add6f1 kubeadm: fix a bug where file copy(backup) could not be executed correctly on Windows platform during upgrade 3a56c1e954b Fix CHANGELOG-1.27 correct fa86f2dce30 benchmark test to evaluate the overhead of podMatchesScopeFunc 4a2e6971f7d Fix incorrect calculation for ResourceQuota with PriorityClass as its scope c041924dd10 Update podFailurePolicy comments from alpha-level to beta 7f9b3cb8540 Disable NewVolumeManagerReconstruction feature gate 3324649c1c6 releng/go: Update images, dependencies and version to Go 1.20.4 ae2f576d0b7 Bump konnectivity-client to v0.1.2 8af1ce5863d Kube-proxy/ipvs: accept access to healthCheckNodePort on LbIP 940b6892a1e node: device-plugin: e2e: Additional test cases 4cf566e32e9 node: device-plugin: add node reboot test scenario d67481c4784 node: device-plugin: e2e: Capture pod admission failure 6f5e29e26c4 node: device-mgr: e2e: adapt to sample device plugin refactoring 367e3d7c471 node: device-mgr: e2e: Update the e2e test to reproduce issue:109595 d241f58d8c8 node: device-mgr: e2e: Implement End to end test aac4c15e624 node: device-mgr: Handle recovery by checking if healthy devices exist b157e1741fb node: device-plugin: e2e: Add test case for kubelet restart 5278e9c02cd node: device-plugin: e2e: Provide sleep intervals via constants b3c58acde98 node: device-plugin: e2e: Update test description to make it explicit 0cd0fe70aa1 node: device-plugin: e2e: Isolate test to pod restart scenario ed8d4e1d6a5 node: device-plugin: e2e: Annotate device check with error message 4899dc75dde node: device-plugins: e2e: s/devLen/expectedSampleDevsAmount c81ec1ae5b0 node: device-plugins: e2e: Refactor parse log to return string and error 86904a7c580 Update kube-openapi to fix race ee1d7eb5d82 Use absolute path instead requestURI in openapiv3 discovery bbca939c661 proxy/ipvs: don't bind nodeips to the dummy device ca1e563141a proxy/ipvs: add a GetAllLocalAddressesExcept() function 3ce0c108fe9 Refactors discovery content-type and helper functions 574829867a9 Fix scheduler performance regression after adding plugin metrics 192e9dae316 Update staging/src/k8s.io/apiserver/pkg/cel/common/values.go 8d0ac2f6f8f Fix bug where CEL listOfString.join() results in unexpected error 57e67a91e39 Fix directory mismatch for `volume.SetVolumeOwnership()` d0514936f3a Fix stomping os env in kubectl e2e tests 7a6640798a7 KCCM: add providerID predicate to service controller 8221a54e1ee Re-work logic in shouldSyncUpdatedNode a9d07f4e9ef add log includes pod preemption details 9ef90afb4fb verifyVolumeNoStatusUpdateNeeded may cause flake and so only keep the last ones b598ea5c392 deflake: Add retry with timeout to wait for final conditions 2eb94fa835a kubelet: Mark new terminal pods as non-finished in pod worker ae07535c855 test: Add node e2e to restart kubelet while pod is terminating 861e1935e2a kubelet: Ensure pods that have not started track a pendingUpdate ae92fd28072 changelog: fix formatting issue with v1.27 change log 95feac5269b Update CHANGELOG/CHANGELOG-1.27.md for v1.27.1 4c9411232e1 Release commit for Kubernetes v1.27.1 2c81ecc2e29 use case-insensitive header keys for http probes 1601bb75401 fix: add the bug as a known issue o on the v1.26 release note fddf859d6a5 kube-aggregator: correctly use client-go TLS cache with custom dialer 845ba3e3a23 Revert "Optimization on running prePreEnqueuePlugins before adding pods into activeQ" a1f97a35fcb Revert "Merge pull request #113151 from ncdc/refactor-crd-conversion" 1da781e29b3 Revert "CR conversion: protect from converter input edits" f564f7a3559 api: encode NamespacedName with lower case in JSON e827a4b61f5 Do not look at VPC-related resources outside the cluster's network d662e339aa5 kubelet: Do not mutate pods in the pod manager d977e7e0dbf Fix azure disk e2e after migration e599722bc59 vendor: bump runc to 1.1.6 25b061d8202 CVE-2023-27561: Bump runc go module v1.1.4 -> v1.1.5 854c72766bb fix: the volume is not detached after the pod and PVC objects are deleted 398e38784e7 Update CHANGELOG/CHANGELOG-1.27.md for v1.27.0 1b4df30b3cd Release commit for Kubernetes v1.27.0 2b6072ba00c Update CHANGELOG/CHANGELOG-1.27.md for v1.27.0-rc.1 ad18954259e CHANGELOG: Update directory for v1.27.0-rc.1 release 80bc6ffd0df Release commit for Kubernetes v1.27.0-rc.1 951f8dcc965 Return error for localhost seccomp type with no localhost profile defined 4e0bc2397da Update publishing-bot rules for release branches to Go 1.19.8 1972dd10058 Do not log entire pod struct while attaching the volume b19c362bf52 Update distroless-iptables to v0.2.3 2a69edb43de [go] Bump images, dependencies and versions to go 1.20.3 b5dd5f1f3a7 Investigate and fix the handling of Succeeded pods in DaemonSet 873127e3b04 Export WebhookHandler struct because some CCMs use Run directly 735bbc135c3 Clean up formatting 27ad623b3d1 Skip vendor directory when removing generated files 63b5ca69f1f .*: update vendor dir and cleanup 1ad7cacba59 publishing-bot rules for the new release-1.27 branch b83600de01e fix nil pointer dereference panic for deprecated metrics 5469c198e5d kmsv2: validate encrypt response at DEK generation time 0e9dd5c51d8 Call function that validates in-place vpa resize policy Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s, kubernetes, nagios-nrpe: fix Upstream-Status formattingMartin Jansa2023-05-082-2/+2
| | | | | Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxcfs: fix build with newer linux-libc-headersMartin Jansa2023-05-082-0/+51
| | | | | Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* aardvark-dns, netavark: add seccomp to REQUIRED_DISTRO_FEATURESMartin Jansa2023-04-122-0/+7
| | | | | | | | | | | | | | | | | | | | | * because of runtime dependency on slirp4netns * fixes: ERROR: Nothing RPROVIDES 'slirp4netns' (but meta-virtualization/recipes-containers/aardvark-dns/aardvark-dns_1.2.0.bb RDEPENDS on or otherwise requires it) slirp4netns was skipped: missing required distro feature 'seccomp' (not in DISTRO_FEATURES) NOTE: Runtime target 'slirp4netns' is unbuildable, removing... Missing or unbuildable dependency chain was: ['slirp4netns'] NOTE: Runtime target 'aardvark-dns' is unbuildable, removing... Missing or unbuildable dependency chain was: ['aardvark-dns', 'slirp4netns'] NOTE: Runtime target 'netavark-dev' is unbuildable, removing... Missing or unbuildable dependency chain was: ['netavark-dev', 'aardvark-dns', 'slirp4netns'] NOTE: Runtime target 'netavark' is unbuildable, removing... Missing or unbuildable dependency chain was: ['netavark', 'aardvark-dns', 'slirp4netns'] NOTE: Runtime target 'aardvark-dns-dev' is unbuildable, removing... Missing or unbuildable dependency chain was: ['aardvark-dns-dev', 'slirp4netns'] Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* crun: fix REQUIRED_DISTRO_FEATURESMartin Jansa2023-04-121-3/+1
| | | | | | | | | | | | | | | | | | | | | * features_check was inherit twice and REQUIRED_DISTRO_FEATURES was set twice as well but both with ?= so the 2nd one was ignored * seccomp was added in: commit b8f2edd39af6b7ac4461158b0d0382e88e93d6f1 Author: Bruce Ashfield <bruce.ashfield@gmail.com> Date: Wed Jun 30 11:22:42 2021 -0400 Subject: crun: add seccomp distro features check but there was already systemd from: commit 144d1ae8973e8c67709d7b544dc53b80bf924754 Author: Bruce Ashfield <bruce.ashfield@gmail.com> Date: Fri Apr 23 10:32:24 2021 -0400 Subject: crun: use REQUIRED_DISTRO_FEATURES to indicate systemd dependency Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: add seccomp and ipv6 to REQUIRED_DISTRO_FEATURESMartin Jansa2023-04-121-0/+4
| | | | | | | | | | | | | | | | * because it rdepends on podman with the same restriction * BTW: .gitignore has: build*/ which gets triggered for buildah as well: meta-virtualization $ git add ./recipes-containers/buildah/buildah_git.bb The following paths are ignored by one of your .gitignore files: recipes-containers/buildah I've adjusted it to /build*/ only. Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* skopeo: update to 1.11.2Bruce Ashfield2023-04-051-3/+3
| | | | | | | | | | | | | Bumping skopeo to version v1.11.2-1-gd79588e6, which comprises the following commits: d79588e6 Bump to v1.11.3-dev dc1e14f7 Release 1.11.2 902506dd bump golang.org/x/net to v0.7.0 b2884205 [release-1.11] Bump to v1.11.2-dev fb1ade6d [release-1.11] Bump to v1.11.1 40dd6507 Update to c/image 5.24.1 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* skopeo: update to 1.11.0-tipBruce Ashfield2023-04-051-1/+1
| | | | | | | | Bumping skopeo to version v1.11.0-102-g1e70fee2, which comprises the following commits: ca0f8418 fix(deps): update module github.com/spf13/cobra to v1.7.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman-tui: update to v0.9.0Bruce Ashfield2023-04-052-44/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We drop our btrfs patch, as it is now part of the upstream. Bumping podman-tui to version v0.9.0-37-g24bdb2a, which comprises the following commits: 449d8f4 golangci-lint system package b0d20b2 Bump actions/stale from 7 to 8 613d18f ui/styles - applying golint 7839523 ui/infobar - applying golint 745a331 ui/help - applying golint 4c27c3d ui/volumes code improvement and golint 02740c1 adding container attach command to container page/view 6b5beb4 fix container create error without health options 705bc34 Bump actions/setup-go from 3 to 4 cf4509e Add container health options to the container create dialog d79883e Add packit configurtion to build RPM as part of PR tests ba02fb5 Update unit tests and github workflow for running the tests 4e3889f fix container create error when volume is selected 0af3e47 update github workflow golang version to 1.18.8 f572f48 Golangci-lint update to v1.51.1 c2932fc fix vendor + codepsell 1e35d9a Bump golang.org/x/crypto from 0.6.0 to 0.7.0 bb17bbc unit tests fix 1328668 Bump to v0.10.0-dev 8ad97a1 Bump to v0.9.0 28f800c Bump github.com/onsi/ginkgo/v2 from 2.8.4 to 2.9.0 f18b55b Bump to podman v4.2.2 064a53b Bump github.com/onsi/gomega from 1.27.1 to 1.27.2 c3c1cb3 Bump github.com/containers/common 28ca42e Bump github.com/containers/podman/v4 from 4.4.0-rc1 to 4.4.2 88e898f Bump github.com/onsi/ginkgo/v2 from 2.8.3 to 2.8.4 df84886 Bump github.com/containers/storage from 1.45.3 to 1.45.4 370a785 New feature - container healthcheck 3d18e6a Bump to v0.9.0-dev 073a500 Bump to v0.8.0 fe2fafb Bump github.com/onsi/gomega from 1.24.1 to 1.27.1 4a78fc7 Bump github.com/onsi/ginkgo/v2 from 2.6.0 to 2.8.3 6d03623 Bump podman/v4 to 4.4.2 fa3ea79 Bump github.com/gdamore/tcell/v2 a6d175a Bump golang.org/x/net from 0.6.0 to 0.7.0 0d6726c Bump github.com/containerd/containerd from 1.6.12 to 1.6.18 5cf21f8 Bump github.com/docker/docker 80431f0 Bump golang.org/x/crypto from 0.5.0 to 0.6.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* nerdctl: update to v1.3.0Bruce Ashfield2023-04-055-810/+397
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping nerdctl to version v1.3.0-2-g1525035, which comprises the following commits: 0973d30 bump: buildkit to v0.11.3, fuse-overlayfs to v1.10, kubo to v0.18.1 813a575 build(deps): bump golang.org/x/term from 0.6.0 to 0.7.0 8a5e2fe build(deps): bump github.com/docker/cli 129a757 build(deps): bump github.com/docker/docker 6b866e0 build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0 a5f95e4 build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0 e2fabe3 build(deps): bump github.com/ipfs/go-cid from 0.4.0 to 0.4.1 bd6d908 pkg/mountutil: improve error messages ffc1577 use digest instead of a tag while signing 29a9cc1 Add manugupt1's GPG key 28aa476 build(deps): bump github.com/opencontainers/runc from 1.1.4 to 1.1.5 ae18699 build(deps): bump github.com/docker/docker 7300210 build(deps): bump github.com/docker/cli 050016d build(deps): bump github.com/compose-spec/compose-go 815d91b Support quiet in push cmd 1fa35ba Refactor image sign and verify logic 5fc6f2e build(deps): bump github.com/compose-spec/compose-go 5482743 build(deps): bump actions/checkout from 3.4.0 to 3.5.0 b6f9cfa Fix nerdctl help show the hidden commands 512bc74 set container state error 3c23201 build(deps): bump github.com/mattn/go-isatty from 0.0.17 to 0.0.18 8bc1d42 rootlessutil: always claim non-rootless on non-Linux. 89a78b4 Refactor run command networking options for Windows support. ade009b Fix the top command on Windows cbead58 Add support for showing image size on inspect 75c7914 build(deps): bump github.com/ipfs/go-cid from 0.3.2 to 0.4.0 ab2beab Completely skip syslog-related tests on Windows. dde73be test: rootless: main: use v2 config 0586121 Upgrade cosign to 2.0.0 in tests 3effa44 Add unit test for exposing devices to Windows containers 5501d46 Add MAINTAINERS_GUIDE.md d12122a build(deps): bump actions/checkout from 3.3.0 to 3.4.0 2d0c580 build(deps): bump github.com/compose-spec/compose-go f42f125 build(deps): bump actions/setup-go from 3 to 4 b455f38 build(deps): bump github.com/containerd/nydus-snapshotter 1780943 build(deps): bump github.com/klauspost/compress from 1.16.0 to 1.16.3 874894d build(deps): bump github.com/fatih/color from 1.14.1 to 1.15.0 9a6810b update containerd (1.7.0) 02c83a1 build(deps): bump github.com/containerd/nydus-snapshotter 6e58c63 build(deps): bump github.com/containerd/containerd ff6ec3c build(deps): bump github.com/containerd/containerd ee64917 Drop dependency on ctr/commands 52d5787 Drop dependency on ctr/commands/content 74fc0b1 Drop dependency on ctr/commands/tasks 23f9c6e remote snapshotters: migrate to containerd-based label management d5f917f build(deps): bump github.com/containerd/containerd 2eb25f1 Port Windows device support from containerd 4d02668 build(deps): bump golang.org/x/crypto from 0.6.0 to 0.7.0 fcb42d6 Add notation signing and verification 361c987 build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0 df08a17 handle container deps removal with postsop hooks b2ac061 build(deps): bump github.com/containerd/containerd 00ea98e Update naming of filter containers function && `container list` handler b50f0b6 build(deps): bump github.com/compose-spec/compose-go 5e6000d build(deps): bump github.com/containerd/nydus-snapshotter ad6ed08 Fix `operation not permitted` with systemd-homed c93f4c8 build(deps): bump github.com/containerd/go-cni 54cb1c4 build(deps): bump github.com/containerd/nydus-snapshotter 52532dc update containerd (1.6.19) 5108bb4 update Kubo (0.18.1) dd87b58 update Nydus (2.1.4) 760d136 update BuildKit (0.11.3) 8c8630e build(deps): bump github.com/klauspost/compress from 1.15.15 to 1.16.0 2905b88 build(deps): bump github.com/containerd/containerd f386373 add network in use check to `compose down` a30e765 feat: resolve special ip host-gateway ca5f02f cmd/compose: add support for profiles 73b8ebd build(deps): bump github.com/opencontainers/runtime-spec 11dc28d build(deps): bump github.com/vishvananda/netns c03d691 update system prune flag `--all` confirm tooltip cf18cc4 build(deps): bump github.com/containerd/nydus-snapshotter dab24b5 Refactor system prune command flag process 84bec01 refactor(container-list): separate main logic out of printing logic 5b481ea Update command-reference system/image prune --all optional ef06dcb refactor(container): refactor cp flag 795c75c func Save shouldn't create file from options.Output a303ab1 fix: `options.Stdout` should be used instead of `os.Stdout` 01cdaf9 Make system prune all flag optional 754f134 Fix unsupported restart policy message 7c78c80 make confirm logic in `volume prune` be consistent with other Prune 0996732 Fix rmi err checking containers with deleted image d688365 build(deps): bump github.com/compose-spec/compose-go 195da3d CI: test compilation with an old release of Go 57165af update Go (1.20) e30503c Add TestRunAddGroup_CVE_2023_25173 6b9fc94 build(deps): bump github.com/containerd/containerd fa9f627 Build containerd and runc for specific arch with xx 484c853 `types.KillOptions` > `types.ContainerKillOptions` to be consistent abb1da2 Fix the rename command on Windows 12cdfe6 build(deps): bump github.com/compose-spec/compose-go efed3ae Fix images output check bug 0e13baa make prune to remove dangling images only 5e60bfb build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0 ba8545f Retag commonimage before loading to ensure it does not fail. 3ad3e1e build(deps): bump github.com/docker/docker ec78af9 build(deps): bump github.com/docker/cli 8aed73e Refactor container prune and rename command flagging process 8fadc65 test for MergeEnvFileAndOSEnv 587e627 Split rootless driver tests by network driver and portdriver. 371ec29 build(deps): bump golang.org/x/crypto from 0.5.0 to 0.6.0 cd1e43e build(deps): bump github.com/containerd/go-cni from 1.1.7 to 1.1.8 2e05e06 build(deps): bump golang.org/x/net from 0.5.0 to 0.6.0 b584d31 Add more comments to imgutil pull 67df79e test for volume create command 50b4289 build(deps): bump golang.org/x/term from 0.4.0 to 0.5.0 402a1a8 accept Ctrl-C in cri log viewer 8db1886 Cache go artifacts that are not tested within docker 84e4cad Combine image filter logic to imgutil 6a5e423 Combine image options types ff5f333 Optimize id walkers and muti error handling faae24a build(deps): bump golang.org/x/sys from 0.4.0 to 0.5.0 d0e36b6 refactor image prune flag 3eedefa refactor: container list flagging process 1802fe3 build(deps): bump github.com/docker/cli c078dea Refactor (un)pause in nerdctl and compose 1e5120b build(deps): bump github.com/docker/docker d8d409b build(deps): bump github.com/containerd/nydus-snapshotter f60251b build(deps): bump docker/build-push-action from 3.3.0 to 4.0.0 47c094a docs: fix internal links to other Markdown docs. efa2c28 Mark `cri` log viewer as experimental 34e5711 typo: Encoode -> Encode 6240ed7 go.mod: github.com/containerd/accelerated-container-image v0.6.0 9dae8e5 compose: show detailed errors again 2220c08 update gotestsum (1.9.0) 6b48134 update Kubo (0.18.0) 3e649f0 update Nydus (2.1.3) 0767970 update BuildKit (0.11.2) b9d9dfb Update CNI plugins (1.2.0) bdb97a3 update containerd (1.6.16) 1ba5b93 go.mod: github.com/containerd/containerd v1.7.0-beta.3 2ab87da refactor: extract main logic of image.List af317f0 refactor: move unpackedImageSize to imgutil ab92b4f ipfs: move to `net/http`-based implementation instead of binary-based one 143a1a1 refactor: container wait flagging process aee0d8a refactor image save flag 0f254af build: propagate SOURCE_DATE_EPOCH from the client env 65eeaec refactor: system events flagging process 72f447f [Refactor] Refactor the (container) pause command flagging process 5d35581 [Refactor] Refactor the new client outside pkg/cmd. efe04d9 refactor restart flag 6db805f Update readme for dangling image support c59b88b Bump github.com/klauspost/compress from 1.15.14 to 1.15.15 ca0af1b Bump github.com/docker/cli 0823d99 Deduplicate client and option creation in inspect 90baad8 Move client create out of pkg/cmd in inspect cmds 318ec06 refactor container top ea9ac34 Fix: inspect multiple networks stops at first inspect fail 609c264 Bump github.com/docker/docker 9c61793 Bump github.com/fatih/color from 1.13.0 to 1.14.1 d50d490 Bump golangci/golangci-lint-action from 3.3.1 to 3.4.0 8d9d83d refactor exec flag 801320a [Refactor] Refactor the container start command flagging process 192ed67 cmd/nerdctl: use canonical filenames (e.g., run.go -> container_run.go) b5c4ca7 mv pkg/cmd/info/info.go pkg/cmd/system/info.go 32d796f [Refactor] Refactor the IPFS command flagging process 105aacb refactor: container stop flagging process fb20478 refactor: container logs flagging process 9470efa refactor: pass an io.Writer to image.List 00cc517 refactor commit flag 71d7b8b [Refactor] Move the function reconfig for container from cmd to pkg/containerutil. 85d2283 refactor image remove command flag 1316fd2 [Refactor] Reorder the method argument ordering in pkg/cmd a09ce88 refactor: move stopContainer to containerutil 0dcf6ab add comment for api types 8cb887a [Refactor] Move generateSharingPIDOpts from cmd to pkg/containerutil 7eae969 Bump github.com/compose-spec/compose-go from 1.8.2 to 1.9.0 0088e84 cmd/nerdctl: withBindMountHostIPC: slight refactor eab7e67 [Refactor] Move withBindMountHostProcfs from cmd to pkg/containerutil eec294d refactor: move updateContainerStoppedLabel to containerutil 7ad50eb Add Windows HyperV container mode a108460 Move command reference to a separate doc 0517682 refactor: consolidate main logic of volume.List into volume.Volumes caf406f refactor image info flag eada6de refactor image pull flag b829764 refactor: image tag flagging process 1089061 Increase CI timeout b726a3a Refactor the network command flagging process 572d790 Bump github.com/containernetworking/plugins from 1.1.1 to 1.2.0 76fb67f Refactor container inspect 287e0af [Refactor] Move getContainerNetNSPath from cmd to pkg/containerutil 9db3857 [Refactor] Refactor the namespace command flagging process ad635da add support logs for namespace k8s.io 0c46a70 [refactor] Adjust code style for apparmor command 0b37d72 [refactor] Adjust the code style in `pkg/cmd/volume/*` fad078a refactor: login flagging process efb501c [Refactor] Move exit_coder from cmd to pkg/exit_coder 5de2d33 Bump docker/build-push-action from 3.2.0 to 3.3.0 393e207 Refactor nerdctl rm 2581da9 [Refactor] Refactor the image_* command flagging process e49e9be [Refactor] Refactor the kill command flagging process. 1d7c743 Refactor network list a91f502 Bump docker/metadata-action from 4.2.0 to 4.3.0 cd5892f go.mod: github.com/docker/docker v23.0.0-rc.2+incompatible 4f33d57 CI: ensure that ./pkg/... is decoupled from the CLI packages 23af1bb nerdctl system prune: drop Go dependency on BuildKit b083a6e update BuildKit (0.11.0) 422e826 tests: rmiAll: prune content blobs 6f1c8eb pkg/cmd: Ls -> List 361099e mv pkg/cmd/load/load.go pkg/cmd/image/load.go 99ba431 mv pkg/cmd/build pkg/cmd/builder ba01a64 Add nerdctl builder build command 907fb61 Fix rename command readme 391bb6a Add ability to run Hostprocess containers 3de4c8c Bump docker/metadata-action from 4.1.1 to 4.2.0 f54251c [Refactor] Refactor all the GlobalCommandOptions from pointer to value reference 4c1097b [Refactor] Refactor the images command flagging process 6dbeba5 Use current console when attaching a tty container bf00c2a ipfs: allow configuring ipfs daemon address b07417f [Refactor] Refactor the compose command flagging process 0c5328c Refactor the volume flagging process efaf3d6 [Refactor] Refactor the load command flagging process b9ce2af [Refactor] Refactor the build subcommand flagging process c2024be Fix the container will be created when `nerdctl run -d --rm` dc374a5 [refactor] Add global flag process helper function c246de7 Bump github.com/compose-spec/compose-go from 1.8.1 to 1.8.2 cd82f2e Bump github.com/containerd/nydus-snapshotter from 0.4.1 to 0.5.0 1488291 Bump actions/checkout from 3.2.0 to 3.3.0 a18765b Bump golang.org/x/crypto from 0.4.0 to 0.5.0 a9d28ac Bump golang.org/x/text from 0.5.0 to 0.6.0 47eb362 Bump github.com/containerd/containerd from 1.7.0-beta.1 to 1.7.0-beta.2 88cabdd CI: Pass GITHUB_TOKEN to containerd/project-checks 156cf0e Bump github.com/klauspost/compress from 1.15.13 to 1.15.14 49d28f0 Add a prefix to apparmor command options to avoid conflict 30b09eb [Refactor] Move the Config Struct from cmd/main.go to pkg/config c79d835 Refactor the volume ls command flagging process e5b76f4 run: Add cgroup-parent flag 5a21b84 tests: Use AssertOk for deferred cleanup 6081141 [Refactor] Move containerd client helper from cmd to pkg/clientutil 606261d Refactor the apparmor flagging process 9d79e98 Filter dangling images using image filters. 52b2fa0 [Refactor]: Move fmtutil from cmd to pkg/formatter 3dc21df Bump github.com/mattn/go-isatty from 0.0.16 to 0.0.17 426208f feat: add `--remove-orphans` flag to `compose down` 0258743 Make nerdctl save work with image ids 17800d1 run: Consolidate namespace options 359521e run: Add --uts flag c7487db fix can't save image by image id 8038d41 retain custom hosts outside markedRegion 0c495fc setPlatformOptions: Change signature 4e33afe Refactor restart flag process in update command d210d08 add update restart policy 5d0d3cc remove processed TODO b7c39f7 Bump github.com/containerd/nydus-snapshotter from 0.4.0 to 0.4.1 858b7be Bump github.com/klauspost/compress from 1.15.12 to 1.15.13 5726ecd Disable default hostname when network is set to container mode 5546d6d IPFS: use ipfs binary instead of library ace02c1 Bump github.com/compose-spec/compose-go from 1.8.0 to 1.8.1 181e5a3 SetInterspersed(false) for compose run 38d03da Add compose create command ae7796c Fix and make compose start work with compose create a0a4006 Clean test duplication 9463f3a Fix a bug that goroutine refers loop variable c67b102 Support NewTerminal & Detached mode 162602b Add RequireExecutable to testutil 07e3c37 Bump github.com/docker/cli 43a7150 Minor format change to pkg/composer/up.go 2d51277 Fix compose dependency order 06f9af8 Bump github.com/containerd/containerd from 1.7.0-beta.0 to 1.7.0-beta.1 44b6a6c Bump github.com/klauspost/compress from 1.15.12 to 1.15.13 385e1fd Add compose start command 73777ec tentative defalke testRunWithJsonFileLogDriver* 0575de8 feat: use buildkit API for clean up build cache 2e13172 MAINTAINERS: add Jin Dong(djdongjin) as a REVIEWER 894abcf feat: support for multi-arch image build support 53c7293 Bump actions/checkout from 3.1.0 to 3.2.0 e541997 Make titles Bold in nerdctl output af06549 go.mod: github.com/ipfs/go-merkledag v0.8.1 dea3ad9 go.mod: accelerated-container-image v0.5.3-0.20221209054854-fbdabc5a08b6 f04c7c0 Fix timeout arg bug e771508 Fix: Delete the used network in other namespace e833819 Bump github.com/ipfs/interface-go-ipfs-core from 0.7.0 to 0.8.0 8fab27b Fix: Deleting multiple networks stops at first delete fail 276be12 build: improve error message 94116f6 CI: add gotestsum with --rerun-fails=2 e2dbab5 Upgrade indirect dependancy go-libp2p-core to v0.20.1 6d03d64 pkg/idutil/netwalker: fix nil pointer dereference 9271dcd Add compose port f0a5c61 Add compose top e772c36 update fuse-overlayfs (1.10) b44116e update containerd (1.6.12) 3442558 Add compose pause and unpause b669481 docs: minimum oom-score-adj for rootless containerd 3bdb39f Bump golang.org/x/crypto from 0.3.0 to 0.4.0 e213a7a Bump golang.org/x/net from 0.3.0 to 0.4.0 09fa4f5 Bump golang.org/x/net from 0.2.0 to 0.3.0 a48a342 Improve compose exec test 40c44ca Fix env flag in compose exec 677c433 fix: multi-image files load output 4404583 Add unit tests for default network creation. f530136 Add usage output to commands without arguments 368ca30 deflake TestNetworkRemoveById 84ed0d6 Add compose exec command 69cdf19 Bump golang.org/x/text from 0.4.0 to 0.5.0 70a864d Bump golang.org/x/sys from 0.2.0 to 0.3.0 41cdacf Make `netutil.CNIEnv` stateless. 6baa5f6 Prevent double-creation of nerdctl default network. fab8702 Add filter by image support by reference 16dc40f Change run to AssertOK in network test 4525c82 deflake network tests 01ca115 Moved NetworkWalker to another package 9165474 Export NetworkConfig struct 98054c2 Add the option to remove a network by id 2b6b614 Remove unnecessary lock aa82640 Improve compose test 2600e0f Bump github.com/compose-spec/compose-go from 1.7.1 to 1.8.0 1ca5e90 doctoc docs/faq.md 51c570b docs: explain how to get rootless containerd socket address 6da1acb allow container network_mode in compose a5ce077 Add json format support in compose ps 12e4f61 fix network rm: no running tasks 9013bdc Deflake TestCompletion 9a184ed Bump github.com/containerd/nydus-snapshotter from 0.3.3 to 0.4.0 b2735d1 Refactor the logging driver process function 74aff28 go.mod: add a comment about indirect dependency on btcsuite/btcd/btcec 150547f Add an extra validation when remove the network ff9775b update Kubo (0.17.0) a388cf0 update containerd-fuse-overlayfs (1.0.5) f13819e update Nydus (2.1.1) f9df0c8 update containerd (1.6.10) b6f90fc update RootlessKit (1.1.0) 977336b MAINTAINERS: add Manu Gupta (manugupt1) as a REVIEWER f1f33d8 MAINTAINERS: promote Ye Sijun (junnplus) from a REVIEWER to a COMMITTER 1767349 MAINTAINERS: add Hanchin Hsieh (yuchanns) as a REVIEWER e830a44 Bump github.com/Masterminds/semver/v3 from 3.1.1 to 3.2.0 a4099c7 Bump github.com/compose-spec/compose-go from 1.7.0 to 1.7.1 8523663 default network creation behavior daa99c3 Refactor remove containers in compose 3c5b069 Add support for filtering images by labels. f07b3f5 Add compose images command 5fea9dc Add yaml linter 72f74f5 Fix block issue for `stats -a` command when there is dead container b318c01 Add compose rm command 579a0e3 binfmt: support /proc/sys/fs/binfmt_misc/rosetta 0c7f619 Resolve flaky TestRunWithLogBinary 671be9a Add project name log in some tests fa8caf9 Add compose restart command 6251c46 Add support to overlaybd convert 5b69fad Bump github.com/tidwall/gjson from 1.14.3 to 1.14.4 cdb5320 MAINTAINERS: promote Zheao Li from a REVIEWER to a COMMITTER 5fb66b8 Ensure compose down is called in tests 1ea5ab8 Reorder internalLabels 4779fa7 Delete setPlatformContainerOptions() 6596486 Simplify internalLabels 4f87ff0 fix stats collect bool var e367097 Use service label to check orphan container e65ac4d relax "containerIP assignment is not supported in rootless mode" error 38f4bcb Copy host env to container for env/envfile option e7674c8 Deny rm image action when this image is used by running container bf0aacf Update command use bef23b9 go.mod: unfork hashicorp/golang-lru dd0ff4b restrict the oom_score_adj value when running in a userNS b532478 Support for ephemeral ports 2d91967 add-golint-revive 292d849 Bump golang.org/x/crypto from 0.2.0 to 0.3.0 cfa27df Fix keyless mode in compose up|run 9a0621f Add cosign in compose run, up, pull, push 229dad2 fix-blkio-weight-panic 47e26a7 golangci lint add unconvert check 7e8a1cf update-golangci-lint 1.50.1 c2523f0 Add more flags for image conversion 89243da Bump github.com/multiformats/go-multiaddr from 0.7.0 to 0.8.0 9148a60 Bump golangci/golangci-lint-action from 3.3.0 to 3.3.1 b0434b5 Enable image convert to customize zstd compression level 65981f1 Let calculate the number of unique images f23d8c9 Refactor stop containers 63ff756 Fix `--time` argument for `nerdctl restart` command a03f8ae update BuildKit (0.10.6) af44dbb update stargz-snapshotter (0.13.0) 48e9c0f Refactor `nerdctl logs` functionality to pkg/logging. 005ad3c Enable 'nerdctl/log-uri' label passing on Windows. 287d7a2 Bump containerd dependency in go.mod. f9a7eb4 Bump github.com/containerd/nydus-snapshotter from 0.3.2 to 0.3.3 805e63c Remove compose stop from unimplemented e6c5c90 Add more specific description about restart and kill command cf3430f Bump github.com/ipfs/go-ipfs-files from 0.1.1 to 0.2.0 086e4eb Small fix on bridge ipam 8cb1679 Bump github.com/compose-spec/compose-go from 1.6.0 to 1.7.0 9593367 Improve the documenation of 'compose build --progress' 41d5019 Bump github.com/containerd/nydus-snapshotter from 0.3.1 to 0.3.2 d43b1f1 Bump github.com/coreos/go-systemd/v22 from 22.4.0 to 22.5.0 cbae86b Update getRestart doc in compose 09f9ed6 Remove DockerIncompatible 85cf730 switch master to main 5836776 removes the obsolete //+build lines with go1.18 a92afb0 CI: support main branch e688de7 Add a dangling image prefix when tag name is not specified. bc69897 containerd-rootless-setuptool.sh: fix CONTAINERD_SNAPSHOTTER isn't recognized a9936f3 Bump github.com/docker/cli 55b8629 Bump github.com/spf13/cobra from 1.6.0 to 1.6.1 0d14fbe Bump github.com/containerd/nydus-snapshotter from 0.3.0 to 0.3.1 91517ae Bump github.com/docker/docker e46eb50 Add support for converting nydus images to `nerdctl image convert` 3df677d Bump golangci/golangci-lint-action from 3.2.0 to 3.3.0 ec8e352 Support `nerdctl build` custom outputs alias of type local a13e1f0 Add '--mode' to 'network inspect' in README 8c59b2b Bump github.com/containerd/nydus-snapshotter from 0.3.0-rc.3 to 0.3.0 b004a8e Dockerfile: demo: enable bash completions d2e5dc8 Dockerfile: demo: configure BuildKit to use containerd worker 132dc09 release note: clarify the compatible containerd versions 6fb9de5 update Kubo (0.16.0) 29f718d update stargz-snapshotter (0.12.1) 6c80673 update BuildKit (0.10.5) 3e367ab update imgcrypt (1.1.7) 98eac1e Bump github.com/docker/cli 666fece Add more examples of Kubernetes (Kind) + IPFS 1f839b2 Bump github.com/docker/docker f83a913 Support --pid=container:xxx for `nerdctl run` cmd 6d5e5a2 Bump golang.org/x/text from 0.3.8 to 0.4.0 490ca8c Bump docker/metadata-action from 4.1.0 to 4.1.1 6c3a519 Bump github.com/containerd/stargz-snapshotter/ipfs from 0.12.0 to 0.12.1 ef50c08 Bump github.com/containerd/stargz-snapshotter from 0.12.0 to 0.12.1 0a8e2c7 Bump github.com/containerd/imgcrypt from 1.1.6 to 1.1.7 174119d Bump containerd/project-checks from 1.0.2 to 1.1.0 5fce296 Bump github.com/docker/docker a446c9a Bump github.com/docker/cli a9dda52 Support build args without explicit value b4036f6 Support `log-path` opt for json-file logging driver ac6c767 Bump docker/login-action from 2.0.0 to 2.1.0 32f541e Bump docker/metadata-action from 4.0.1 to 4.1.0 b963a6e Bump docker/build-push-action from 3.1.1 to 3.2.0 82f806a Use sys/windows to lock file 1708238 Bump github.com/spf13/cobra from 1.5.0 to 1.6.0 0ede9c8 Bump golang.org/x/text from 0.3.7 to 0.3.8 bfc44ae Bump gotest.tools/v3 from 3.3.0 to 3.4.0 adca3e4 Support argument `--mac-address` for nerdctl run command 02ad394 Bump actions/checkout from 3.0.2 to 3.1.0 ea90e56 follow-up TestLoadStdinFromPipe 0bcedac Fix nerdctl load stdin for pipes. a83d5b7 Drop dependency on github.com/docker/docker/registry 184a45e Makefile: Set VERSION & REVISION only if unset ca696e5 Bump github.com/Microsoft/go-winio from 0.5.2 to 0.6.0 5ec1a8f Bump github.com/compose-spec/compose-go from 1.5.1 to 1.6.0 0a5016d Support `syslog` driver for nerdctl 21c6c89 fix flag conflicts 3e1b10d Add `nerdctl compose version` command 2308828 Create an anonymous volume when --mount is specified. 82b9f41 Fix typo: builctl -> buildctl 80bb6cb Bump github.com/coreos/go-systemd/v22 from 22.3.2 to 22.4.0 3603055 Update images usage to contain positional arguments 971d9cb Bump github.com/compose-spec/compose-go from 1.5.0 to 1.5.1 5e93fa5 Change login and logout msg from Docker registry to container registry 0273c00 Implements logURI to support 3rd party ctrd shim logger 6de0662 Bump github.com/docker/cli e953d09 Bump github.com/docker/docker 17a58aa Bump github.com/multiformats/go-multiaddr from 0.6.0 to 0.7.0 70bea8c Bump up buildg to v0.4.1 0b21ba7 Bump github.com/containerd/nydus-snapshotter 42f8a10 ServerAddress: Refactor logic and preserve debug logging e53cde0 Fix crun incompatibility `cannot set swap limit without the memory limit` ba373e5 cmd/nerdctl: simplify --help 37c045d update bypass4netns (0.3.0) 3d6e51a typo 1bbae54 Randomize container names in compose run 7418f35 Bump github.com/docker/go-units from 0.4.0 to 0.5.0 e28ca33 update bypass4netns (0.2.3) c8ab6c3 update Kubo (0.15.0) 6b7a2d6 update BuildKit (0.10.4) aeb3342 update runc (1.1.4) 7828a38 README.md: `nerdctl compose run` is now implemented b5c027b Add tests and docs for compose run command 3296c14 Implement StdinOpen and Tty options in `compose` fbd8ba0 Add compose run command template 0691b36 Support filter argument for `nerdctl ps` command fdaaf34 replace use of deprecated sys.RunningInUserNS 3616607 remove dep between detach and cid in compose run 8c3cf4a golangci-lint: remove deprecated linters fb57539 feat: add an experimental config in toml ed70c23 Support filter argument for nerdctl volume ls command 4929d19 Support filter argument for `nerdctl images` command e62f44c Bump github.com/containerd/nydus-snapshotter 488921c Bump github.com/compose-spec/compose-go from 1.4.0 to 1.5.0 5bff48b run: add a new privileged-without-host-devices option 0d3beee Bump github.com/tidwall/gjson from 1.14.2 to 1.14.3 5dc9863 pkg/testutil: remove unused GolangImage df84d82 update Go (1.19) 2d477e3 go fmt (1.19) 44063b9 go mod tidy (1.19) b36c69f update containerd (1.6.8) 24c851c Bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16 e70f7d7 exclude default bridge network in `network prune` b3d3958 Make the ServerAddress optional for the main docker registry. 3245439 Bump github.com/containerd/nydus-snapshotter d347673 nit: remove unused variable and unreqd variable b71febc fix stats output 4c2140d upgrade containerd to main b1893b2 Bump github.com/tidwall/gjson from 1.14.1 to 1.14.2 20e319e Bump docker/build-push-action from 3.1.0 to 3.1.1 2a7a712 Add ability to show sizes in volume ls as well 013ebdc Bump github.com/containerd/nydus-snapshotter Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: update to 5.0.2-tipBruce Ashfield2023-04-051-1/+1
| | | | | | | | | Bumping lxc to version lxc-5.0.2-1-g727adc052, which comprises the following commits: 727adc052 drop broken lxc-test-fuzzers d57173681 Release LXC 5.0.2 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: update to v1.25.8Bruce Ashfield2023-04-054-1323/+1429
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cobra: update to 1.6.0Bruce Ashfield2023-04-051-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping cobra to version v1.6.0-32-g4dd4b25, which comprises the following commits: 4dd4b25 Update main image to better handle dark background (#1883) 45360a5 Allow sourcing zsh completion script (#1917) c8a20a1 Document suggested layout for subcommands (#1930) b197a24 Update projects_using_cobra.md (#1932) 9e6b58a update copyright year (#1927) fb36524 ci: test Golang 1.20 (#1925) c7300f0 ci: deprecate go 1.16 (#1926) 567ea8e Add support for PowerShell 7.2+ (#1916) 3daa4b9 Add keeporder to shell completion (#1903) a516d41 Removes stale bot from GitHub action (#1908) e839bb3 build(deps): bump golangci/golangci-lint-action from 3.3.1 to 3.4.0 (#1902) 87ebcd8 Update shell_completions.md (#1907) 8b8ee87 Improve MarkFlagsMutuallyExclusive example in User Guide (#1904) d022c0f Add documentation about disabling completion descriptions (#1901) 4fa4fdf build(deps): bump github.com/inconshreveable/mousetrap (#1872) b4f979a completions: do not detect arguments with dash as 2nd char as flag (#1817) bf11ab6 fix: func name in doc strings (#1885) fdffa5a Update badge route (#1884) f25a3c6 fix: conflict import name with variable (#1879) 9235920 ci: deprecate go 1.15 (#1866) a6f198b Update kubescape org (#1874) 7bb1440 build(deps): bump golangci/golangci-lint-action from 3.2.0 to 3.3.1 (#1851) 6200c8e Makefile: add target richtest (#1865) c6b9971 fix: force ForEach-Object to return array in pwsh completion (#1850) 4305498 Update stale.yml (#1863) ad6db7f Create unit test illustrating unknown flag bug (#1854) 6b0bd30 fix: don't remove flag value that matches subcommand name (#1781) cc7e235 Add Sia to projects using Cobra (#1844) 10cf7be Check for group presence after full initialization (#1839) 4b9d00d Replace deprecated ExactValidArgs with MatchAll in user_guide and shell_completions example (#1836) badcce1 style(bash-v2): various cleanups (#1702) 1424b7b Add Constellation to projects using cobra. (#1829) 8607918 feat: make InitDefaultCompletionCmd public (#1467) 2169adb Add groups for commands in help (#1003) 212ea40 Include --help and --version flag in completion (#1813) d4040ad Allow user to add completion for powershell alias (#1621) 23fc5e0 ci: add minimum GitHub token permissions for workflows (#1792) 93d1913 Add OnFinalize method (#1788) 07034fe build(deps): bump actions/stale from 5 to 6 (#1815) 3dc9761 Add allero to list of projects using cobra (#1819) 7039e1f Add '--version' flag to Help output (#1707) fce8d8a Expose ValidateRequiredFlags and ValidateFlagGroups (#1760) a281c8b Document option to hide the default completion cmd (#1779) 459fc5f ci: add workflow_dispatch (#1387) 6d978a9 add missing license headers (#1809) 4065a33 ci: use action/setup-go's cache (#1783) 7e289f4 Adjustments to documentation (#1656) fe08012 Rename Powershell completion tests (#1803) d689184 Support for case-insensitive command names (#1802) 70e53f6 Deprecate ExactValidArgs() and test combinations of args validators (#1643) 2e8ba6f Use correct stale action `exempt-` yaml keys (#1800) 0580724 With go 1.18, we must use go install for a binary (#1726) 2a7647f Clarify SetContext documentation (#1748) 7045405 ci: test on Golang 1.19 (#1782) 22b6179 fix: show flags that shadow parent persistent flag in child help (#1776) dbf85f6 Update gopkg.in/yaml.v2 to gopkg.in/yaml.v3 (#1766) f911c0b fix(bash-v2): activeHelp length check syntax (#1762) 7790bf9 fix: correct command path in see_also for YAML doc (#1771) 6bf8cd8 build(deps): bump github.com/inconshreveable/mousetrap (#1774) 965924a docs: add zitadel to the list (#1772) 162534f doc: Add Okteto for projects using Cobra (#1759) a0aadc6 Spelling for GitHub CLI (#1744) 69083f8 Add Cilium to projects using Cobra (#1745) bba9331 doc: Add CloudQuery for projects using Cobra (#1742) 3d38d18 Add KubeVirt as a project using cobra (#1741) 06b06a9 Bump golangci/golangci-lint-action from 3.1.0 to 3.2.0 (#1697) 5f2ec3c Update shell completion to respect flag groups (#1659) b9ca594 use errors.Is() to check for errors (#1730) ea94a3d undefined or nil Args default to ArbitraryArgs (#1612) 7c9831d Fix handling of descriptions for bash v3 (#1735) ed7bb9d Add unit test for fish completion (#1515) f464d6c Add Active Help support (#1482) 7dc8b00 Bump actions/setup-go from 2 to 3 (#1660) 87ea180 Modify brew prefix path in macOS system (#1719) ca8e3c2 Add Pulumi as a project using cobra (#1720) 37d481d fix: Don't complete _command on zsh (#1690) 5b11656 perf(bash-v2): read directly to COMPREPLY on descriptionless short circuit (#1700) ffa8860 Change links from http:// to https:// (#1695) e1ded5c fix(bash-v2): skip empty completions when filtering descriptions (#1691) 8afe9d1 Bump github.com/cpuguy83/go-md2man/v2 from 2.0.1 to 2.0.2 (#1688) 25f5bb5 Prefer ReplaceAll instead of Replace(..., -1) (#1530) 9e88759 perf(bash-v2): speed up filtering menu-complete descriptions (#1692) fb80311 perf(bash-v2): speed up filtering entries with descriptions (#1689) 95d7df1 perf(bash-v2): short-circuit descriptionless candidate lists (#1686) f17e5a2 style(bash): out is not an array variable, do not refer to it as such (#1684) 09d6ba6 perf(bash-v2): standard completion optimizations (#1683) 4f0facb style(bash-v2): out is not an array variable, do not refer to it as such (#1681) 2722a75 perf(bash-v2): use backslash escape string expansion for tab (#1682) d8184d3 Fix typo sh completion docs (#1678) b9460cc Bump codelytv/pr-size-labeler from 1.8.0 to 1.8.1 (#1661) 89d7b83 Add Polygon Edge as a project using Cobra (#1672) 68b6b24 Add ability to mark flags as required or exclusive as a group (#1654) bf6cb58 Wrap printf tab with quotes (#1665) 9d15fe6 Update stale-bot (#1609) 5271cf4 ci/test: RICHGO_FORCE_COLOR (#1647) ab42c93 Adds size labeler GitHub action (#1610) 52e6099 Bump actions/checkout from 2 to 3 (#1619) 5414d3d Bump golangci/golangci-lint-action from 2 to 3.1.0 (#1615) cf0df73 Bump actions/labeler from 3 to 4 (#1620) 3723151 Bump actions/cache from 2 to 3 (#1640) 1568491 Bump actions/stale from 1 to 5 (#1618) d622355 Changed branch name in the cobra generator link to 'main' (#1645) 03c3eb7 Add Kubescape to projects (#1642) 3a1795b Fix Command.Context comment (#1639) f848943 Add Command.SetContext (#1551) 5d066b7 Introduce FixedCompletions (#1574) 94e552d Add backwards-compatibility tests for legacyArgs() (#1547) 8cc7be2 feat: Add how to load completions in your current zsh session (#1608) 65b1195 ci: test on Golang 1.18 (#1635) 37463cf Remove CHANGELOG.md as it isn't updated (#1634) 81d27c8 fix some typos (#1625) 5b2b9e9 Removes viper dependency by removing cobra/ CLI tool (#1604) 9369465 labeler: fix syntax e1b831e Updates labeler for new labels (#1613) 8267283 Add MAINTAINERS file (alphabetical order) (#1545) 6d2dc43 Add Pixie to projects. (#1581) a599632 Fix install command (#1576) 7cabfeb Update Go Doc link and badge (#1593) e04ec72 Bump license year to 2022 in golden files (#1575) cb9d7b1 Bump github.com/spf13/viper from 1.10.0 to 1.10.1 (#1567) 178edbb Bump github.com/spf13/viper from 1.9.0 to 1.10.0 (#1561) 9054739 Remove __complete cmd for program without subcmds (#1563) 19c9c74 Always include the os package import when generating the root command (#1557) 01e05b8 Bump github.com/spf13/viper from 1.8.1 to 1.9.0 (#1554) 36bff0a fix root.go.golden (#1552) 1854bb5 Fix some typos (mostly found by codespell) (#1514) ff2c55e chore(ci): use golangci-lint-action (#1477) 1beb476 fix: Duplicate error message from cobra init boilerplates (#1463) 6f84ef4 Provide option to hide default 'completion' cmd (#1541) ee75a2b Remove trailing spaces from bash completion command description (#1520) 25bab5a Fix invalid shell completion when used with ~/.cobra.yaml (#1510) 3fed3ef Support different bash completion options (#1509) 507caf5 completions: fix mixed tab/spaces indentation (#1473) c7a4421 fix: typo in {bash,zsh}_completions.go (#1459) c3573e2 Completion: Capitalize short desc, and remove extra space from long (#1455) dd40ab0 feat: improve completions help formatting (#1444) d298d79 Update shell_completions.md to have automatically rootcmd (#1372) 6f19fa9 fix: unbound variables in bash completion (#1321) d65ba12 github: add dependabot configuration file (#1427) 45e521e enable composing PositionalArgs (#896) 9e1d6f1 args_test: add helper functions (#1426) 62a72cd fix(diff): use arg '--strip-trailing-cr' (#949) 442031e Allow specifying licenses using their SPDX identifier (#1159) 78969f9 Remove "Lesser" from header for GPL-2.0 template (#880) 3c84bf8 Small correction in User Guide (#1009) 3ba5f15 Projects using cobra update (#1454) bfacc59 Addressing typos identified by @marckhouzam 2682562 Simplifying goGet function cf87fc4 Updating generator documentation and links c97b7ec Update documentation to reflect the module aware generator 9388e79 Cobra generator now works within Go modules c9edb78 Change generator default license to none dcf42b2 Change generator to require opting in to viper. c0dd5cd Removing unused imports when not using Viper f09e947 readme: remove ToC, since it's now shown by GitHub (#1429) d2c0cb3 DisableFlagParsing must disable flag completion (#1161) c1973d3 Update projects-using markdown with Tanzu (#1501) 4fd30b6 ci: test golang 1.16.x and 1.17.x too (#1425) 2a52778 go.mod: cpuguy83/go-md2man/v2 v2.0.1 (#1460) 56060d1 Add Meroxa CLI (#1377) de187e8 Fix flag completion (#1438) 07861c8 Fix documentation (#1434) 5738d6b Add install instructions for zsh on Mac OS (#1417) 5d46ac9 custom comp: do not complete flags after args when interspersed is false (#1308) 3c8a19e fix RegisterFlagCompletionFunc concurrent map writes error (#1423) 2dea4f2 Bump to viper 1.8.1 (#1433) b361960 Bash completion V2 with completion descriptions (#1146) d0f318d ci: deprecate Travis CI 8eaca5f drop mitchellh/go-homedir (#853) ace6b14 readme: split 'Getting Started' into 'user_guide.md' 701fa6c chore(deps): update viper 9a43267 fix home directory config not loading (#1282) 4590150 Correcting misspelled words (#1349) c2e21bd Fix multiple fish completion issues (#1249) 95d23d2 Fix zsh for DirectiveNoSpace and DirectiveNoFileComp (#1213) 2d94892 Custom completion handle multiple shorhand flags together (#1258) 6d00909 Pass context to completion (#1265) 7223a99 powershell completion fix no file comp directive (#1363) 06e4b59 Allow fish comp to support trailing empty lines (#1284) 3ed6a39 ci/MSYS2: go install @latest (#1366) eb3b639 Bash completion variable leak fixes (#1352) b55fa79 Add PR labeler with pull_request_target (#1338) b312f0a Create 'completion' command automatically (#1192) ded486a Fix trailing whitespace in the powershell completion script (#1342) 893ebf6 Fix typo be1efc8 Update CHANGELOG.md for v1.1.3 7f95502 Update CHANGELOG.md for v1.1.2 07445ea Copyedit shell-completion related documentation b73b344 ci: add GitHub Actions workflow 'Test' (#1339) 652c755 Use golangci-lint (#1044) 1d71ff0 Deprecate Go < 1.14 (#1323) 1135bde Update gopkg.in/yaml.v2 to v2.4.0 9df156e Cobra User Contract (#1292) ff416ad Revert "Add the ability to specify a filePostpender in GenMarkdownTreeCustom (#1270)" (#1317) 23a6174 Add the ability to specify a filePostpender in GenMarkdownTreeCustom (#1270) 4384b91 Bump license year to 2021 in golden files (#1309) a4ab3fa powershell completion with custom comp (#1208) 471c9ac Add the new Twitch CLI to to projects_using_cobra.md (#1301) 7df62f7 fix typos (#1274) 39b5a91 README.md Readability Improvements (#1228) 08c51e5 Add ORY Hydra & Kratos to projects_using_cobra.md (#1273) 86f8bfd fix manpage building with new go-md2man (#1255) f32f4ef Don't use yaml.v2 2.3.0 which has a breaking change (#1259) 142dfb1 Add example for making persistent flags required (#1135) 723d0c3 Add tendermint and cosmos-sdk to the list of projects using cobra (#855) b97b5ea fix: fish output redirection (#1247) f64bfa1 Fix zsh completion not working on the first time in a shell session (#1237) 40d34bc Fix stderr printing functions (#894) 0bc8bfb Remove secondary go mod to prevent broken `go get` (#1233) 7f8e83d Modifying "snake-case" to "kebab-case" for clarity. (#1196) 8a39cb2 Bug fix in README (#1199) 2a8d0f3 Adding Kool to list of projects using cobra (#1224) 6c06523 add arduino-cli to projects using cobra (#1117) 8a63648 Handle linebreaks in custom completions. (#1162) 50258f1 Complete subcommands when TraverseChildren is set (#1171) 02a0d2f doc: GenMarkdown skip Synopsis on empty long cmd (#1207) 9ed1d71 bugfix/cli: Temporary fix for go get on cobra cli (#1200) 8cfa4b4 Add documentation for Use (#1188) 81e0311 modules: add a secondary go.mod to segregate CLI dependencies (#1139) 5cdf8e2 Fix typo (#1187) a0b86e5 Correct a typo in doc/util.go (#1184) a738b60 Add CONTRIBUTING.md (#1183) 96dc555 Update projects_using_cobra.md (#1147) 0e27f22 Add slack badge to point to cobra slack channel (#1181) c6fe2d4 Improve zsh completion documentation (#1169) 19e41cf Adding werf to projects using cobra (#1163) b95db64 Add golangci-lint in project using cobra (#1150) 884edc5 update viper and pflag (#1012) 675ae5f Fish does not accept - or : in vars (#1122) 5d52907 Update README.md (#1154) 207dc47 Close #1152 by upgrading yaml.v2 to v2.3.0 (#1153) 2c5a0d3 Extend Go completions and revamp zsh comp (#1070) (#1070) 0431872 Add completion for help command (#1136) ed7b60e YAML documentation contains "Usage" (#1037) 1d3ac91 Update projects_using_cobra.md (#1113) 94a87a7 disable periodic labeler (#1112) 5155946 Ignore required flags when DisableFlagParsing (#1095) aa5badd Metal Stack CLI is using cobra as well (#1094) a7aaa7c replace labeler action with periodic-labeler (#1097) f8fdd17 Complete command names even if ValidArgs present (#1088) e392f32 Man pages won't have auto gen tag when option is disabled (#1104) 41fd44e Fix cobra init cmd help documentation (#1108) 44d55fb Fix cobra command README (#1106) 11ba63f Add Helm as project using Cobra (#1103) 090d94f Move projects using Cobra (#1090) 8c638d3 Fixed typo. (#1087) a684a6d Fish completion using Go completion (#1048) 7fead4b Remove/replace SetOutput on Command - deprecated (#1078) 4741428 Add Github CLI to list of projects using Cobra (#1034) b84ef40 Rename BashCompDirectives to ShellCompDirectives (#1082) b80aeb1 Add support for custom completions in Go (#1035) 138b98f add support for autolabel stale PR (#1075) d88d9a0 Add Labeler Actions (#1074) bbffa3a rm circle ci badge (#1073) f628835 Replace deprecated SetOutput func with SetOut and SetErr in test (#1053) 6607e6b Partial Revert of #922 (#1068) 95f2f73 Add short version flag -v when not otherwise set (#996) 39cf99f leverage makefile to run build tasks (#976) 3c26245 Correct documentation for InOrStdin (#929) 0da0687 Add support for context.Context 21cab29 fix: undefined er (#1039) 89c7ffb Bump year on golden files (#1010) bf26895 Fix regression when calling *_custom_func (#1001) 447f182 format tpl/main.go templates (#980) 0d9d2d4 Revert change so help is printed on stdout again (#1004) b04b5bf substitute wrong word in md_docs (#998) 77e4d5a Update md2man to v2.0.0 (#977) 8a4b46f update viper to v1.4.0 (#953) c022f6f Update README.md (#944) 48e6ac4 update doc w/ newer cmd/root.go example (#973) 3745fcd add goreportcard to readme (#971) 19cf35e fix: ensure that testproject is removed even after a failure (#948) 606aa57 Used goimports to fix import order (#912) 4f2877d clean(travis): remove shellcheck from before_install (#947) b80588d fix undefined cfgFile in documentation (#924) 993cc53 Adjustments per PR review feedback from @bogem d851963 Correct all complaints from goimports 51f06c7 Correct all complaints from golint 9334a46 Return an error in the case of unrunnable subcommand 9552679 Add idiomatic handling of go error in distinct main func af29f95 Add ignore of cobra posix binary and all of intellij generated files 1c9c46d Update Generator Docs to reflect changes brought in #817 (#904) 2d7544e fix missing newline in cmd/add (#905) 9a31ddf Add Linkerd to list of projects using Cobra (#892) 21f39ca bash: fix shellcheck errors (#889) f2b07da fixing linter issues b635726 considering stderr in UsageString e35034f Add tests cb27ce1 Deprecate and maintain backwards compatibility 618bc00 Allow for explicit output to err/stderr 0ea93dd Fixed linter issues 4a716d1 Extending redirection to stdout, stderr, stdin 5f23f55 Update README.md 9eb9f5c Add gardenctl to projects build using Cobra 2411ac5 remove unused struct fields 984374f clean up testproject files after test executes 11aa612 test add 303a3e5 vgo - strip out unused methods 0bb1506 remove commented field in struct 2fea75b vgo - add command working 3c42f84 fix duplicated dir 221bae3 depricate package name flag b8ad19a reorder some operations 732e4db vgo - trim some uneeded data from struct c7ac101 vgo - fixing up the add op to work with vgo 3741457 add CommandTemplate 50665e9 vgo - update golden templates 642c3c7 vgo - compare generated files against golden files e993d53 vgo - take named directory or current wd 04af6ae vgo - add todo c3b51f3 simplify test 4c22a20 vgo - remove unused methods 73b5215 vgo - fix format 44c2d48 fix calling to createLicenseFile 91dbcb7 remove commented code 5b1685f vgo - generate license abab9aa vgo - add Create method to Project struct 69420a9 vgo - create directory 17dc9f8 fixing up templates more 26d210e vgo - fixing up the root template c356c64 add .idea/* to gitignore 80ea290 vgo-support - re-working code generator d658160 Add markdown file explaining support for PowerShell 21ccc7b Add basic PowerShell completions e2c45ac Started working on Unified API for the various shell completions: 601d830 typo in zsh-completions.md edbb671 zsh-completions: implemented argument completion. d262154 zsh-completion: tidy up function and variable names 8822449 zsh-completion: added escapinng of single quotes in flag description. 66a9880 zsh-completion: test to verify that we're always running on root cmd. 7b62c7d zsh-completion: --version and --help still doesn't work correctly 7ce08e2 zsh-completion: completion should always parse the root command! 91e80cc zsh-completion: remove bad test 0d9a33d zsh-completion: remove temporary file 50f3859 zsh-completion: added support for filename globbing. bda855a zsh-completions: fixed zsh completion markdown file name. dd577bd zsh-completion: added zsh-completion documentation. 461a39d zsh-completion: removed forgotten function. df12a0a zsh-completion: two fixes for identifying flag usage: e9ee8f0 zsh-completion: removed the _dep_ files. ec4b8c9 zsh-completions: revised flags completion rendering + new features: e8018e8 zsh-completion template refactoring: 2662787 zsh-completion: added support for subcommand description. f0508c8 zsh-completion ignores hidden commands and flags :) a15d099 zsh-completion fixed reference to cmd name 7e2436b First try at better zsh completions: 67fc483 added variable to allow configuration of mousetrap message duration (#809) 5755ecf [TrivialPatches] Typos in README.md, fix and update CI, update projects list... (#840) ba1052d Fix two word flags (#807) 7547e83 Run tests against go 1.11 and drop 1.9 (#737) d2d81d9 Fix too many underscore for __custom_func (#794) fe5e611 doc: obey SOURCE_DATE_EPOCH with manpage generation (#735) f619abc Added ExactValidArgs (#765) 40172f1 Remove unneeded imports from README.md example (#767) 8d114be README: Remove Unneeded Newline (#746) 99dc123 Replace Giant Swarm 'swarm' with 'gsctl' (#738) 6fd8e29 Qualify custom bash func name (#730) ff0d02e fix typo in doc/man_docs.go (#732) 7c4570c #716 - Removed useless libraries in readme (#717) a114f31 fix test build breakage with go1.11 (#712) 1e58aa3 Include a basic example #465 (#631) ef82de7 Fixed code sample for bash completion (#687) 0ab5b6b doc: hide hidden parent flags (#686) 7ee208b support completions for command aliases (#669) 6154259 remove dot after the abs path (#672) cd30c2a typo: fix incorrect (#668) 4dab30c Add support for ignoring parse errors (#662) a1f051b Update the Travis and CircleCI Go versions (#651) c439c4f Terminate the stripping of flags when -- is found (#649) c6c44e6 Update the bash completion example for kubectl (#645) 6644d46 Prefix bash functions with root command name (#643) a1e4933 Bash completion aliases (#638) 1a618fb Do not add a space after a single flag completion (#625) be77323 Try out CircleCI. (#630) fd32f09 Fix generated bash completion for Bash 3 (OSX) (#520) 9395926 Add Execute func example in README.md (#629) c2bbfaa Add usage example for required flags (#627) eb58983 Add `CalledAs` method to cobra.Command (w/ tests) (#567) 9979838 Fix attemptd assignment to non-variable in bash 3 (#628) 3a7eb14 fix grammatical error in command.go (#626) f91529f Fix a couple typos (#621) 0c34d16 cmd: Fix #612 (#614) b95ab73 Remove trailing whitespace in rootcmd (#606) ccaecb1 Ensure that '--version' flag works properly for root command (#595) c156af3 Explain OnInitialize better in the GoDoc (#594) de2d9c4 Add alibaba/pouch in README.md (#593) 3a5f27b doc: Add a necessary blank line after SEE ALSO (#592) 45a52e2 doc: Remove one additional blank line after Synopsis (#591) 8678368 Add documentation for '--version' flag to README (#590) b1ec2ce Add support for --version flag (#584) 1be1d28 Make rootCmd private fb02817 Fix README example to be consistent with others (#585) 19e54c4 Update error message for missing required flags (#580) 34ceca5 Disable flags in UseLine (#552) d6948b7 Fix minor typo (#579) 2da4a54 Improve tests in doc/ d6a4305 Edit ResetFlags and ResetCommands descriptions 65c8acb Improve tests 099c5ae Add dots in comments of args.go 18eefcd Add tests for args.go f634327 Fix typo (#573) b3426bb Remove confusing duplicate Execute from README (#554) 7b2c5ac Create new buffer if not present yet (#549) 7cd9cc6 add test for c.Name() if c.Use gets changed (#548) 40f1880 Delete name field from Command (#547) 845c905 Fix typo 4d6af28 enforce required flags (#502) 5020481 Grammar addition (#543) 83b1f03 Add a TraverseChildren option to allow for flags on each command in the hierarchy (#299) 419e0f8 doc: add ReST doc generation (#537) bc69223 Fix dead link in README for cobra generator e8e7fe0 Shorten README d5bde60 cmd: Fix text of custom license 0dacccf Improve consistency of flags when using SetGlobalNormalizationFunc (#522) e5f66de Support default value of $GOPATH (#532) b787445 Use func (c *Command) consistently (#530) 4de692c adding a GenZshCompletionFile function to mirror bash_completion (#529) 3c0b56b correct spelling mistake (#524) 2df9a53 Fix MinimumArgs cb74738 Retab README.md 1723331 Update documentation 8bcacfe Add more examples of Args field 4a7b7e6 *following cb731b8 Specify that parent's name is a variable for clarity. #514 b26b538 Fix remaining reproducibility in TestGoldenAddCmd 3da102d cmd: Fix golden tests if user has config at $HOME 99838a5 cmd: Small fixes d7ba195 Add basic zsh completion (command hierarchy only) 9e024b6 cmd: Refine formatting of included licenses a1b7d3c cmd: Add a blank line between copyright and license 75c6acf cmd: Add "-u" to output unified diff in golden tests cb9cf94 Restore the use of cobra.OnInitialize in cobra executable d4c40bb travis: Update Go versions 750ba8a Fix reproducibility in TestGolden{Add,Init}Cmd 161584f Fix minor typos: "Know" → "Known" 34594c7 Fix TestGlobalNormFuncPropagation() on gccgo 90fc11b Update README.md f20b4e9 Refactor TakesArgs to use an interface for arg validation. d89c499 Allow commands to explicitly state if they do, or do not take arbitrary arguments 715f41b cmd: Ignore hidden files in isEmpty d994347 Delete tab in the long description of help c46add8 Add ability to disable mousetrap 8c6fa02 Fix InitDefaultHelpCmd when custom help command is set 4d647c8 Print err instead of home 6471e3d Rename main func to initConfig f9d3497 Fix RootCmd var name d638dcb Improve readability of README e458bb7 Reword `become unexpected errors` to `encounter errors` 31694f1 Add missing 'and' in comment 99b5d83 Show messages if deprecated flags are used b4dbd37 cmd: Fix tests defa97f cmd: Fix output root.go of init with --viper=false d7cfb13 Update README.md 99ff933 cmd: Add possibility to specify the target package 84f4716 Make BenchmarkBashCompletion more honest 66da711 __ltrim_colon_completions is not always available on macOS (#459) 8d4ce35 Update README.md e606913 Fix typos 4a1a7b0 cmd: Don't print errors from execute to prevent duplication of errors c446db2 cmd: Delete projectBase flag 7918bf6 Add explanation for viper.BindPflag in README.md ca57f0f doc: Ad help flag and cmd when generating docs 52ae6a1 Make initHelpCmd public (#436) ca5710c Fix link to cobra lib in README.md 4ba54a0 Edit installation command in README.md (#451) fb1f399 Add benchmark for GenBashCompletion de6b168 Simplify bash_completions.go 4cdb38c cmd: Use correct HasPrefix function for paths e9078fc cmd: Make more accurate error when there is no $GOPATH fa9ac85 cmd: Make detailed error when project not in $GOPATH 51b7cf5 Fix tests so they give correct args (#445) b536627 cmd: Fix some gometalinter complaints d941496 cmd: Fix error message from go-homedir a28055b cmd: Fix minor bugs in init command (#446) 90687e7 Update pflag link in README (#444) 7d22e77 Fix incorrect merge of pflag.CommandLine to cmd.Flags() 3454e0e cmd: Fix package name when adding command 4673102 Updating bash_completions to clarify markdown (#442) 1362f95 Clean README.md (#441) 347767f Partial revert of 4d2c4af 'Improve template mechanism' (#439) eceb483 Divide fields of Command for readability 90d2fd8 Group fields of Command 1251aef Rename Docker to Moby in README.md e97db2b cmd: Fix tests 4db577d Fix docs for Command 6bfe2ba doc: Add docs 3dc7f13 cmd: Fix docs d236d29 cmd: Make tmpl local variable c0bd07d Use cobra create instead of cobra init in README.md (#396) 4d2c4af Improve template mechanisms d83a1d7 Add comment for InitDefaultHelpFlag fe69f2e Make initHelpFlag public db6b9a8 cmd: Fix incorrect initialzation by `cobra init .` 7bd35d3 cmd: Fix incorrect cmd dir 7bb5276 cmd: Fix panic if cmd ends on dash or underscore efbe9b0 cmd: Use Fatalf instead of Fatal 76a9a66 cmd: Add tests d20925b cmd: Small correctives 84cba62 cmd: Make detection of $HOME work on all systems 6bcf163 cmd: Validate cmd names 903e5b7 cmd: Fix trimSrcPath doc 66cfd1f cmd: Reuse template in helpers 0dd1c42 cmd: Add more docs 32756eb cmd: Rewrite 4061f41 Use pflag.ShorthandLookup 8f0203b Update README.md 69f86e6 Update README.md 6f647b1 Update .travis.yml bc8a58f docs: Update README.md 7b1b6e8 cmd: Edit license texts e2f2121 cmd: Use 'this program' instead of appName in licenses 3d7bff8 Revert "Get rid of flagErrorBuf (#417)" 6dd9084 doc: Use w.Write instead of fmt in yaml_docs 97af803 doc: Cleanup md_docs de484ee doc: Refactor man docs ea3c5be Add TestHelpFlagInHelp 867d414 Initialize help flag in initHelpCmd 6ed17b5 cmd: Add more possible matches for bsd licenses c68a90d Add built-in licenses info to README 164be37 cmd: Add AGPL license 1efd892 cmd: Add LGPL license 6d4267f cmd: Delete redundant symbols from helpers_test.go and licenses.go 78a8032 cmd: Move some license functions from helpers.go to licenses.go 28fe9aa cmd: Fix GPL 3 License header 47029cc cmd: Delete extra whitespace from GPL 3 License header f4f10f6 Simplify stripFlags 63121c8 Delete Parse from Go projects that uses cobra 9890b7b Simplify stripFlags function aea9481 Fix typo at docstring for HasHelpSubCommands (#309) a4f017e Add rclone to list of users (#334) c4f4d75 Use go get so missing dependencies are fetched (#406) 681a777 Delete checkHelpFunc 10f6b9d Make `go path bin` clearer in README 0a4540b Refactor licenses to many files (#323) f58a8d6 Add TestSortedFlags e135867 Make parentsPflags more flexible 3e61377 Use AddFlagSet instead of self-written function 458d797 Add merging of CommandLine flags to Root command 37a4355 Fix tests 3d89ed4 Add only missing persistent flags of parents in mergePersistentFlags 6202b59 Refactor flags mechanisms a3cd8ab Use os.Getenv("HOME") instead of "$HOME" for windows compatibility (#337) b655df6 Get rid of flagErrorBuf (#417) f95d58b Fix #401 (#402) b6cb395 Fix typo in docstring (#360) 0a0df1e Use valid exit code value in `os.Exit` call (#405) 9350054 Keep only one newline between Aliases and Flags in help (#410) 5deb57b Fixed completion of dash parameters arguments (#415) 7aeaa2c Avoid storing pointer to nil (#411) 6421115 doc: Fix govet complaints (#408) 7be4bed remove help command before adding it (#399) 16c014f Add "docker" to readme 0960ff7 Rename IsHelpCommand to IsAdditionalHelpTopicCommand (#398) 24bb44a Fix SilenceUsage and SilenceErrors in readme (#397) fcd0c5a Some fixes related to help command (#394) 92ea23a Fix subcommand locations with NoOptDefValue flags (#391) ee40558 Update the Travis Go versions b5d8e8f cache command name (#390) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* go-digest: update to 1.0.0-tipBruce Ashfield2023-04-051-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update the LICENSE file to adjust to: commit b22736afcd4ef34cfbdb8f0009a03566e620d1e4 Author: Ian Campbell <ijc@docker.com> Date: Mon Apr 30 18:26:12 2018 +0100 Rename LICENSE.code → LICENSE This allows automated tooling (such as license compatibilty checkers) to find it. Fixes #37. Signed-off-by: Ian Campbell <ijc@docker.com> Bumping go-digest to version v1.0.0-25-g65fac7b, which comprises the following commits: c014774 Bump actions/setup-go from 3 to 4 c68b67b Bump actions/setup-go from 2 to 3 58786ae Bump actions/checkout from 2 to 3 ad52b00 Add CODEOWNERS, remove .pullapprove.yml e0313d7 build: add latest versions of go to test matrix 084376b make sure the standard algorithms are registered f0839fe chore(ci): setup dependabot for github-actions bf89259 Add blake3 to github actions tests a63e545 Add BLAKE3 support b9e02e0 Implement dynamic hash registration 41930e4 Remove travis.yml ab23730 Add GH Actions fd8c156 TestParseDigest: add tests for some potential corner-cases 43cccb7 Add release notes for v1.0.0 17eb78b Add copyright to digestset files 132fb47 Enable static checks ecd7b3c digestset: refine some words on unit test 5dd3cbe digest: migrate to opencontainers/go-digest e0bfa0f digest: remove stuttering ParseDigest function 1cbb645 Typo fixes in comments 6ac142d Validate digest length on parsing 45599b9 Add remove and list functions to digest set 96bf78c Refactor specification of supported digests 77570c9 Add digest set implementation 45398c0 MAINTAINERS: add 2, remove 5 f65ba7f MAINTAINERS: remove Brandon Philips @philips 264d27f *: add OCI copyright 9d15c98 README: spit paragraphs to new lines 51d31fa Update pull approve configuration ac2cd61 Update Aaron's e-mail address 232efbd travis: update list of go versions ed218d0 add go.mod f35593a MAINTAINERS: fix jonboulle's email be46cde updating CoC link and security link 21d40dc Bump Go versions and use '.x' to always get latest patch versions b22736a Rename LICENSE.code → LICENSE 4ca1301 disallow upper characters (/A-F/) in hex-encoded portion 678a95e digest: allow validation of urlsafe base64 encoding 55f6758 digest: update package methods to reflect changes 5ab10f5 digest: allow separators in algorithm field d1caf20 doc: tweak wording around algorithms b74b840 *: clarify we only deal with hex-encoded digests b6234c3 *: add LICENSE headers to Go files 0c91155 README: update security email Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-compose: update to v2.17.2Bruce Ashfield2023-04-054-156/+303
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping compose to version v2.17.2-8-g02ad467f, which comprises the following commits: a4c324b8 build(deps): bump github.com/docker/cli 087fae98 build(deps): bump github.com/docker/docker c5317496 workaround race condition in ContainerList 72a61c06 add dry-run support to run command b24af42b ci: bump compose-go to v1.13.2 3b85cd2f test: fix e2e commands on Windows 45a852f4 test: generate valid Compose project names from Cucumber specs cd17c8a9 test: update error message 36625ed2 test: fix race in e2e build test a6ffdf61 ci: upgrade to Go 1.20.2 & bump deps 9ab5d8c4 build(deps): bump github.com/moby/buildkit from 0.11.4 to 0.11.5 d637cc3a watch involves up --build after change has been detected 16d5354d watch: add note about goroutine-safety & test 7aaea283 watch: data race / segfault fixes 6bedc196 update -p project name flag documentation a11515e0 introduce `ignore` attribute for watch triggers 6c1f06e4 Run classic builder with BuildConfig, not buildx.Options 88b0d17f use `build` as common API for build scenarios 9e19bc84 use progress to show copy status 105a7c5b watch: add file delete/rename handling f7a13aee build(deps): bump github.com/docker/buildx from 0.10.3 to 0.10.4 bfeb1dc2 Fix concurrent map read/write when recreating containers 0b41df98 build(deps): bump github.com/moby/buildkit from 0.11.3 to 0.11.4 643557d5 build and push binaries images when a PR is merged or a tag pushed 200f47e5 Add support for `additional_contexts` in `build` service config e0aaccf4 introduce dockerfile_inline 754c0688 one off container name use configured Separator for naming e492330d collect built image IDs bbe1b77a progress writer uses dockercli.Err stream fc4d2dfd Remove "-s" from LDFLAGS 85ddfde5 use go 1.20 -cover support 6a0398d7 pad can be negative on small terminal 4434cea5 add dry-run support for push command 3f7d3c26 add dry-run support for pull command 9cc1613b adopt http://no-color.org/ 167c6a89 add dry-run support to restart command 3cfbac66 restart only needed services by checking depends_on relations a3bed265 update compose-go ae26426c Report error if project name is empty after normalization 4ea44797 only consider containers with config_hash labels (i.e, created by compose) 89633748 build(deps): bump github.com/containerd/containerd from 1.6.18 to 1.6.19 33aa6ace build(deps): bump go.opentelemetry.io/otel from 1.13.0 to 1.14.0 e31b95c1 test: tweak pause test to try and prevent failures in Windows CI 7bb60d09 build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2 da1ca578 watch: ignore ephemeral files & minor output tweaks 18af72af bump golang/x/net to v0.7.0 (CVE-2022-41723) e831ea82 add support for `restart` for `depends_on` 1edc64ef build(deps): bump github.com/containerd/containerd from 1.6.17 to 1.6.18 f3e543fd apply config options for pseudo-subcommands 9732608e build(deps): bump github.com/docker/buildx from 0.10.2 to 0.10.3 24ff0982 compact TUI to monitor layers download progress 593c4263 ci: bump to Go 1.20.1 and latest deps 313b82e9 ignore services without a build section 5e3e2171 sort service --hash output by service name 9ac0392b introduce --timeout on `up` 0612b34c introduce --no-deps on restart 92e0cd40 also restart dependent services after a service has been restarted 282a29e6 build(deps): bump go.uber.org/goleak from 1.1.12 to 1.2.1 256ec499 exclude unstable labels from config hash 9765f171 store exec details to offer better dry-run status on ExecStart b19df5c9 add support for `excludes` and `rebuild` 7a42ba7e use CGO to enable fsevent on OSX 5b043c4d ci: don't use `-race` on Windows 15f7104c ci: use CGO for tests to enable race detector eb1c7989 support dry-run for rm command 78b94047 support dry-run for stop command 25be264e support dry-run for exec command 7532f769 build(deps): bump go.opentelemetry.io/otel from 1.12.0 to 1.13.0 70ab9f8f bump docker engine and cli version to 23.0.0 with buildkit(v0.11.2) and buildx (v0.10.2) 93bffd9a prevent assignment to entry in nil map 52478f0c wait on service containers as dependencies to be deterministic b5f0a4ee use containers we expect to start for wait condition 0f5b5ccb detect replacement container is created and inform printer so it attach and don't stop a2d36b6c bump golang to 1.20 30772342 ci: Replace deprecated command with environment file fdc17381 add log when copying files/directories between host and containers (both way) 2336d9fe support dry-run for cp command 1640f155 initial support for `sync` e63cbfba use tilt watcher to track filesystem changes 25576289 adjust code and dependencies 7d6ee74e cleanup deprecated ioutil functions (#5919) c08e0771 watch: optimization to help avoid inotify nodes for large file trees (#5769) cf314623 tests: make test fixtures responsible for tearing themselves down (#5512) 1b71e3ef lint: fix local-prefixes for goimports (#5453) 4d822676 ci: add exportloopref linter and upgrade to golangci-lint v1.43.0 (#5281) 6fc0b6ff build: ensure file handles properly closed (#5298) ab84b6ac Fix local go_lintfix errors (#5191) 7161778c watch: use WalkDir to speed up file listing (#4684) 1f5bfe88 test: clean up test loggers a bit (#4580) f79c75ab test: fix lint errors on Darwin (macOS) (#4247) e62993a8 test: enable unused check, remove dead code (#4208) 28251e8b watch: improve error messages when you run out of inotify instances (#3960) c7ba7d9d dockerignore: convert ignore patterns to absolute paths [ch9237] (#3743) 8b393223 watch: fix a dumb errcheck (#3622) b3615d64 watch: increase the windows watch i/o buffer (#3620) 1a1d1707 change org name from windmilleng to tilt-dev (#3346) fd3e0bbe watch: use the recursive watcher on windows (#3306) d2d4d052 Revert "watch: fix inotify tests on windows" (#3147) dda0362b watch: fix inotify tests on windows (#3140) ddc88ec4 circleci: run make shorttest on windows. flag off a large swath of broken tests (#3132) 92c6a65a tilt: enable errcheck on tests (#2877) 00b3caec ci: enable staticcheck, fix problems that were surfaced (#2809) 17087447 logger: move to pkg (#2031) ec781687 watch: add retry counts to fsync (#2023) b22dde9f dockerignore: improve MatchesEntireDir (#1865) a31350ed watch: move more of the directory-skipping logic into the interface (#1864) d744c97f watch: add a simple check when there are no exclusions (#1863) 37647bc6 watch: skip setup if nothing is being watched (#1861) 21e5d564 watch: FileEvents must always be absolute (#1841) 390d5cf1 watch: add tests for ignores and number of watches (#1838) 7f6e189d watch: change the watcher interface to better match how we actually use it (#1835) b5ccea7b watch: record num watches in expvars (#1795) 47551895 makefile: fix goimports -local (#1763) 5e0f1eec watch: fix spurious errors while watching (#1726) f82e2de5 watch: don't watch each individual file (#1613) 9c7f7bc0 live_update: error if syncing from outside of docker context (#1396) 6defe7ca watch: tfw you have a test that asserts broken file-watch behavior :cry: (#1354) 0482f927 watch: add watch function that traverses up directory structure recursively (#1013) e8a34c8d watch: remove inotify-specific bits of watcher_linux (#890) 9e261c18 watch: fix a bug when a file and its ancestor both have direct watches (#863) 1fd7ca54 testing: update internal/watch to use the tempdir fixture (#862) 139edc40 cleanup: wrap errors properly (#772) 38b3f3b6 watch: use `sinceWhen` and `HistoryDone` to avoid spurious events (#557) c5bce8bd watch: fix a spurious error (#344) c8a358a4 watch: try a slightly different ignore strategy (#174) a6701652 watch: fix more data races on darwin (#166) 4562b0bf watch: a new strategy for handling spurious events, hoping to fix race conditions (#163) 4801d2b1 watch: fix a flaky test by ignoring spurious events correctly (#162) 3850a341 watch: fix a segfault on linux (#148) 664e6f6f watch: stop skipping tests (#145) d4f074b3 watch: simplify the fileEvent interface to only contain paths (#144) a3b012d8 add errcheck (#93) a755c84e tilt: copy watch code from tesseract ef34a38a Add remote buildx driver 41e05634 rename `convert` to `config` to align with compose v1 UX c0b4dd86 build(deps): bump go.opentelemetry.io/otel from 1.11.2 to 1.12.0 6754c6b6 add dry-run support of pause and unpause commands 982a8ccb support dry-run for kill command 790712fa update tty and plain text writers to support dry run mode 6fae6a41 Update emacs ignore patterns (#5903) dd5ea044 ignore: add Go umask files to ephemeral set (#5740) 12de97b8 filewatch: use apiserver FileWatch model in EngineState (#4277) 62b5f78f Add .kate-swp files to ignore pattern (#3380) 3f526c5c change org name from windmilleng to tilt-dev (#3346) 12916b75 tilt: ignore a few more vim swap files (#2190) e3948f6b ignore: auto-ignore jetbrains .idea file (#2065) 91a2bdd6 model: move to pkg (#2024) ce61e7bf ignore: improve the ephemeral temp file patterns [ch2663] (#1925) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-ce: update to v23.0.2Bruce Ashfield2023-04-051-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping docker to version v23.0.2, which comprises the following commits: c6bf3071fe StartWithLogFile: Fix d.cmd race 7f49ca259b TestDaemonRestartKillContainers: Fix loop capture 1363b3e372 ci: disable testing mergeop and diffop with the dockerd worker d43958b50b builder-next: disable mergeop and diffop fd80ca60da Fix pruning anon volume created from image config ae0cc08cab Dockerfile: Update shfmt to 3.6.0 42751cc892 contrib/dockerize-disk.sh: Fix indentation 6c65a9a07f volumes: fix error-handling when removing volumes with swarm enabled e3c642d1ea integration/volumes: TestVolumesRemove: add coverage for force/no-force c48f7fd12c [23.0] update to go1.19.7 f3416271a3 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230309194213-a745a8755ce3 3bd2fc8d62 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230302163403-80a528a86877 a79be4cf31 vendor: github.com/moby/buildkit v0.10.7-0.20230306143919-70f2ad56d3e5 6ac39568ee libnet/ipam: fix racy, flaky unit test 7158f76b8b vendor: github.com/containerd/containerd v1.6.19 67990f983b vendor: github.com/Microsoft/hcsshim v0.9.7 3125aa0aef [23.0] update containerd binary to v1.6.19 b1d9012969 Wait longer for exit events on Windows 2337258d28 libnet/networkdb: fix nil-dereference panic in test Bumping libnetwork to version v0.7.0-dev.3-1861-g25ec449c, which comprises the following commits: 91f0d508 update maintainers 615c9801 libnetwork/overlay:fix join sandbox deadlock 047ac186 Cleanup servicebindings only on Windows 6f36306d Delay network deletion until after lb cleanup a9c349a6 Log HNS policylist removal failures Bumping docker-cli to version v23.0.2, which comprises the following commits: f6643207a don't use null values in the bake definition f381e0842 Dockerfile: align go version d3a36fc38 e2e: update notary certificates 59bb07f2e e2e: increase tests certificates duration (10 years) 80f27987f bake target to generate certs for e2e tets a43c9f344 Don't automatically request size if `--size` was explicitly set to `false` 114e17ac4 cli/command: fix imports formatting e2c402118 cli/command: ElectAuthServer: fix deprecation comment d07453890 Add bash completion for available plugins 90a72a589 Dockerfile: update buildx to v0.10.4 4c63110a9 update to go1.19.7 b61b5a987 stack: Change unexpected environment variable error 84fe451ec stack/loader: Ignore cmd.exe special env variables 95066ff3a Dockerfile: update buildx to v0.10.3 release notes: https://github.com/docker/buildx/releases/tag/v0.10.3 0dbf70fad docs: Deprecate buildkit's build information 5af8077ee formatter: Consider empty RepoTags and RepoDigests as dangling 57a502772 context: avoid corrupt file writes 14ac8db96 test/cli: Use empty array as empty output of images/json 1810e922a docs: drop dated comments about graphdrivers 5051d82a1 update to go1.19.6 7f4e3ead7 changed the container name in docker stats page Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* moby: update to v23.0.2Bruce Ashfield2023-04-051-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping moby to version v23.0.2, which comprises the following commits: c6bf3071fe StartWithLogFile: Fix d.cmd race 7f49ca259b TestDaemonRestartKillContainers: Fix loop capture 1363b3e372 ci: disable testing mergeop and diffop with the dockerd worker d43958b50b builder-next: disable mergeop and diffop fd80ca60da Fix pruning anon volume created from image config ae0cc08cab Dockerfile: Update shfmt to 3.6.0 42751cc892 contrib/dockerize-disk.sh: Fix indentation 6c65a9a07f volumes: fix error-handling when removing volumes with swarm enabled e3c642d1ea integration/volumes: TestVolumesRemove: add coverage for force/no-force c48f7fd12c [23.0] update to go1.19.7 f3416271a3 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230309194213-a745a8755ce3 3bd2fc8d62 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230302163403-80a528a86877 a79be4cf31 vendor: github.com/moby/buildkit v0.10.7-0.20230306143919-70f2ad56d3e5 6ac39568ee libnet/ipam: fix racy, flaky unit test 7158f76b8b vendor: github.com/containerd/containerd v1.6.19 67990f983b vendor: github.com/Microsoft/hcsshim v0.9.7 3125aa0aef [23.0] update containerd binary to v1.6.19 b1d9012969 Wait longer for exit events on Windows 2337258d28 libnet/networkdb: fix nil-dereference panic in test Bumping libnetwork to version v0.7.0-dev.3-1861-g25ec449c, which comprises the following commits: 91f0d508 update maintainers 615c9801 libnetwork/overlay:fix join sandbox deadlock 047ac186 Cleanup servicebindings only on Windows 6f36306d Delay network deletion until after lb cleanup a9c349a6 Log HNS policylist removal failures docker-moby/cli: update to -tip f6643207a don't use null values in the bake definition f381e0842 Dockerfile: align go version d3a36fc38 e2e: update notary certificates 59bb07f2e e2e: increase tests certificates duration (10 years) 80f27987f bake target to generate certs for e2e tets a43c9f344 Don't automatically request size if `--size` was explicitly set to `false` 114e17ac4 cli/command: fix imports formatting e2c402118 cli/command: ElectAuthServer: fix deprecation comment d07453890 Add bash completion for available plugins 90a72a589 Dockerfile: update buildx to v0.10.4 4c63110a9 update to go1.19.7 b61b5a987 stack: Change unexpected environment variable error 84fe451ec stack/loader: Ignore cmd.exe special env variables 95066ff3a Dockerfile: update buildx to v0.10.3 release notes: https://github.com/docker/buildx/releases/tag/v0.10.3 0dbf70fad docs: Deprecate buildkit's build information 5af8077ee formatter: Consider empty RepoTags and RepoDigests as dangling 57a502772 context: avoid corrupt file writes 14ac8db96 test/cli: Use empty array as empty output of images/json 1810e922a docs: drop dated comments about graphdrivers 5051d82a1 update to go1.19.6 7f4e3ead7 changed the container name in docker stats page Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* crun: update to v1.8.3Bruce Ashfield2023-04-051-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping crun to version 1.8.3-5-gd2ff390, which comprises the following commits: 59f2beb NEWS: tag 1.8.3 ae18930 update: initialize the rt_scheduler only on cgroupv1 5855e70 [1.8.2][CentOS 7] Missing `#include <linux/sched.h>` a4393f2 docs: add a tryout example with podman bf70c97 NEWS: tag 1.8.2 ba6c957 cgroup: cgroupfs attempt new sibling cgroup 74dc9b4 cgroup: libcrun_get_current_unified_cgroup can return relative path b7b5265 cgroup: drop duplicated variable 11bdc13 linux: set label for pre-created devices 4b04b01 linux: refactor code in a new function 770ad48 linux: extend fsopen_mount to specify label 7578a1a wasm, wasmedge: add current directory to preopen paths 90dd7b7 test_mount: fix incorrect comment 51aba04 linux: readonlyPaths should inherit flags from parent mount 5ad1507 lua: add Lua bindings 5d54a85 scheduler: use sched_setattr 6a132c3 libcrun_container_create(): fix memory leak 6ba6a00 container: add custom annotation to specify the scheduler 5bdd930 cgroup: systemd initialize rt limits 8b18fc7 cgroup: add new function openat_with_alias e914059 libcrun: add alias argument to function a4aebb9 libcrun: new function write_cgroup_file_or_alias d36c1a2 test: remove irqbalance tests 56a2550 cgroup: fallback to blkio.bfq files 34950dc crio: skip test 710d8dd libcrun: chown tty to the exec user e067714 python: fix create() referencing container_run() 11d1baf build(deps): bump actions/upload-artifact from 2 to 3 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-tools: update to v1.26.1Bruce Ashfield2023-04-051-3/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We adjust our install routine to find the binaries in architecture and OS target specific directories, but otherwise the build is unchanged. Bumping cri-tools to version v1.26.0-122-g4daea449, which comprises the following commits: 1dbda3f7 Bump github.com/opencontainers/runc from 1.1.4 to 1.1.5 6f1de233 Bump github.com/docker/docker d55f85f2 update release support details in the README 3e40ab7e Bump github.com/onsi/gomega from 1.27.4 to 1.27.5 13c94c7a Update Ubuntu 18.04 to 20.04 8de6b6d7 Bump github.com/urfave/cli/v2 from 2.25.0 to 2.25.1 8db31a76 Bump github.com/onsi/ginkgo/v2 from 2.9.1 to 2.9.2 3c0741e5 Bump github.com/golang/glog from 1.1.0 to 1.1.1 4d45340a feat: add riscv64 53e4c3ba Bump github.com/onsi/gomega from 1.27.3 to 1.27.4 e13ad25e Bump github.com/onsi/ginkgo/v2 from 2.9.0 to 2.9.1 21e62dde Bump github.com/onsi/gomega from 1.27.2 to 1.27.3 02317f82 Bump github.com/golang/protobuf from 1.5.2 to 1.5.3 9d847e2c Bump golang.org/x/net from 0.7.0 to 0.8.0 bfdb44b5 Bump github.com/urfave/cli/v2 from 2.24.4 to 2.25.0 060929a6 Bump github.com/golang/glog from 1.0.0 to 1.1.0 c020f31f Bump golang.org/x/term from 0.5.0 to 0.6.0 47b33362 Bump github.com/onsi/ginkgo/v2 from 2.8.4 to 2.9.0 f8cb6925 Bump github.com/onsi/gomega from 1.27.1 to 1.27.2 578b38a1 Bump github.com/onsi/ginkgo/v2 from 2.8.3 to 2.8.4 ce2c55c0 Bump github.com/onsi/gomega from 1.26.0 to 1.27.1 f7333f20 Run GitHub actions by `push` only on `master` and tags 64f3f275 Bump github.com/onsi/ginkgo/v2 from 2.8.1 to 2.8.3 8f27b574 Bump github.com/urfave/cli/v2 from 2.24.3 to 2.24.4 b27232f2 Bump golang.org/x/net from 0.6.0 to 0.7.0 61a85a93 Bump github.com/onsi/ginkgo/v2 from 2.8.0 to 2.8.1 c61a79e9 fix crictl config list display error 595572a6 crictl code and args optimization. 85c6f21d Bump github.com/docker/docker 63a1d5a6 crictl config add list flag b4ffa89f Bump golang.org/x/net from 0.5.0 to 0.6.0 3c35861c Bump github.com/opencontainers/selinux from 1.10.2 to 1.11.0 753c9a88 Makefile support cross compilation, build_bin_path optimization fda6d7f8 crictl stats add name row be5f634b Bump golang.org/x/term from 0.4.0 to 0.5.0 82c3e8ae Bump golang.org/x/sys from 0.4.0 to 0.5.0 6fc9e4af Bump github.com/urfave/cli/v2 from 2.24.2 to 2.24.3 01796ae5 Bump github.com/docker/docker dd20ea16 Bump github.com/onsi/ginkgo/v2 from 2.7.1 to 2.8.0 ef8a0d68 Bump github.com/urfave/cli/v2 from 2.24.1 to 2.24.2 0b81ff2a Bump github.com/onsi/ginkgo/v2 from 2.7.0 to 2.7.1 a4c976aa Makefile: pass in a custom variable GOARCH f6ec8fec Bump github.com/onsi/gomega from 1.25.0 to 1.26.0 5923662b Bump github.com/urfave/cli/v2 from 2.23.7 to 2.24.1 a8ddf64a Bump github.com/docker/docker 1e27c2c4 Bump github.com/onsi/gomega from 1.24.2 to 1.25.0 edf14e37 Update docs version to match latest release 850c8469 Bump other OTEL deps 6d46b592 Bump go.opentelemetry.io/otel/trace from 1.10.0 to 1.11.2 5364af0f fix: formatting 6f078ed6 fix(docs): add a note about other supported platforms c2573905 Pass `nil` as tracer provider 8ac43a45 fix: add tip on latest version 8dee7ff5 Update ginkgo and gomega 92edf29e Switch to `registry.k8s.io` aa036b5a Increase defualt timeout on Windows 5886c7df Add support for calling Windows pod stats 64e8f6b8 Bump golang.org/x/net from 0.4.0 to 0.5.0 3a981a98 Switch away from Docker Hub to avoid rate limits b3262be7 Bump github.com/docker/docker 5046b65b Add haircommander to reviewers 4e387743 set LTS v1.6.12 into matrix to replace old v1.5 entry baefda37 gh actions: remove dockershim tests 24cc748b plumb context through CRI 86befea9 bump to go 1.19 a7154756 vendor: bump kube to 1.26 f9764647 Bump github.com/urfave/cli/v2 from 2.23.5 to 2.23.7 6220423b Bump golang.org/x/net from 0.3.0 to 0.4.0 d6d8005f Bump golang.org/x/net from 0.2.0 to 0.3.0 f4cf7b6e Bump golang.org/x/term from 0.2.0 to 0.3.0 c37655ee Bump golang.org/x/sys from 0.2.0 to 0.3.0 9962fb03 add missing CPU count 7493f666 Add detach key sequence support ca1571e6 critest: ensure server is running before portforward b6fb4b1d Bump github.com/urfave/cli/v2 from 2.23.4 to 2.23.5 fa370cc5 Bump golang.org/x/net from 0.1.0 to 0.2.0 f1998865 Bump golang.org/x/term from 0.1.0 to 0.2.0 5c48eb26 Bump github.com/urfave/cli/v2 from 2.23.0 to 2.23.4 6b420011 Bump golang.org/x/sys from 0.1.0 to 0.2.0 6f8965f4 Bump github.com/onsi/gomega from 1.23.0 to 1.24.0 913089a4 Bump github.com/urfave/cli/v2 from 2.20.3 to 2.23.0 622b04f1 Bump github.com/onsi/gomega from 1.22.1 to 1.23.0 5acd3285 Bump github.com/docker/docker c4b3e806 Bump github.com/urfave/cli/v2 from 2.20.2 to 2.20.3 0b1abed2 Bump github.com/onsi/ginkgo/v2 from 2.3.1 to 2.4.0 91521036 specify one supplementalGroup instead of two to make test code simpler 2649f53e added a validation test case For SupplementalGroups with the predefined groups in the container image d965134b fix copyright section in image-predefined-group's Dockerfile 59137ff5 images/image-predefined-groups: don't specify group in USER f1cb7aff Bump github.com/docker/docker 72d1ed12 add test image for testing SupplementalGroups with predefined groups in the container image 0fd7a1b4 Bump github.com/urfave/cli/v2 from 2.19.2 to 2.20.2 ac1c0c5b Bump github.com/docker/docker 44965774 Bump github.com/onsi/gomega from 1.21.1 to 1.22.1 78d5c955 Bump github.com/onsi/ginkgo/v2 from 2.3.0 to 2.3.1 11c282fd Bump github.com/onsi/ginkgo/v2 from 2.2.0 to 2.3.0 6e9a4670 Bump github.com/urfave/cli/v2 from 2.17.1 to 2.19.2 93332157 Bump github.com/onsi/gomega from 1.20.2 to 1.21.1 4b984ddc Implement password input on the command line 4507e46c Add recurring working areas to CONTRIBUTING fd4bb370 Bump github.com/urfave/cli/v2 from 2.16.3 to 2.17.1 49249cbc Bump github.com/opencontainers/selinux from 1.10.1 to 1.10.2 adac6827 Cleanup owners eb69454a Bump github.com/onsi/ginkgo/v2 from 2.1.6 to 2.2.0 373e7090 Bump github.com/urfave/cli/v2 from 2.16.2 to 2.16.3 6f5588ba Bump github.com/docker/docker 30d32dab Bump github.com/urfave/cli/v2 from 2.14.1 to 2.16.2 fd1c34d3 Bump github.com/urfave/cli/v2 from 2.14.0 to 2.14.1 46197a85 Bump github.com/urfave/cli/v2 from 2.11.2 to 2.14.0 a07c04ee Print deleted digest when repo tags empty d3e8a304 Bump github.com/docker/go-units from 0.4.0 to 0.5.0 5bf099af Bump github.com/onsi/gomega from 1.20.1 to 1.20.2 74915650 Bump github.com/onsi/ginkgo/v2 from 2.1.5 to 2.1.6 9bad5cb3 Ensure benchmarks are skipped during validation tests. fd16071d Bump github.com/onsi/ginkgo/v2 from 2.1.4 to 2.1.5 c148f5b2 Bump github.com/onsi/gomega from 1.20.0 to 1.20.1 778b8ed9 vendor: github.com/moby/term v0.0.0-20220808134915-39b0c02b01ae 5168c419 cmd/crictl: replace deprecated pkg/term 0e31acb9 Update version references in docs and go.mod 3efdd0f4 Bump github.com/opencontainers/runc from 1.1.3 to 1.1.4 7abda56b Bump Kubernetes to v1.25.0 1151eb16 Bump github.com/urfave/cli/v2 from 2.11.1 to 2.11.2 a685ed61 No truncate PodID in ps command if --no-trunc exists 7cf65e12 Migrate to native ginkgo v2 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-o: update to 1.26.2Bruce Ashfield2023-04-051-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping cri-o to version v1.26.2-10-gc0557b868, which comprises the following commits: 6ee82e547 Update crun to v1.8.3 and runc to v1.5.1 4bea0d45b create the metrics endpoint with correct shutdown logic 778169257 Update CNI plugins to v1.2.0 8f943a9cc Add spdx signature and cert to release notes ab5daed67 Fix release notes build for release-1.26 branch fc032744b version: bump to v1.26.2 141c69ac6 build(deps): bump sigstore/cosign-installer from 2 to 3 46e4d5286 Bump crun to v1.8.1 12cc52830 Pin nix version to fix static builds 2c3c8c7d8 unit-test: call UpdateContainerResources when nri enabled d3504291c nri: add protection against nil dereference 8438fdf40 docs-validation: try String() for struct field values. b997d9a61 internal/oci: don't crash when getting unset Spec. 96c12e147 test: update NRI BATS test. d19c65049 completions, docs: update completions and man pages. 3c1bb518c config,criocli: update NRI deps, configuration. 9831dddef Fix cgroup leak for systemd cgroup driver 0c32aa50d Update to c/image 5.24.2 0015d0477 test/*: add test for checking the /etc folder permission b1113fa78 server: fix the permission issue for `/etc` 7f60e0419 Update github.com/containers/image to v5.24.0 1f0b14da9 Update opencontainers/runtime-tools to a6a073817ab0. 0841fe69a Add container stats to the ListPodSandboxStats response 3facc028e Make storage unmount less strict b93180c99 Inject release-notes branch from GitHub actions 5ce93c60e ci-verify: Run get-scripts only on main branch d8c6707bd version: bump to 1.26.1 741be35fa vendor: bump storage to v1.44.1-0.20230101110555-a747b27fe4ca f49c3b608 Update critest parameters 1b1b95af8 hostport: use generic Set 1e66eb86e server: update streaming interface to take context 2adc326f6 ci: bump cri-o.spec file to 1.26 ae0a0d5f9 static: bump go version 8f8228b77 bump to cri-tools 1.26.0 fff07d82f server: add support for new CRI calls cac6a729e server/streaming: add context to methods ec5beb231 vendor: bump kube to 1.26.0 8ffb14733 mocks: update with new c/storage mocks 48d0bf4ca job get script: fix conflist path 7705f9942 bump to v1.26.0 d06cae7c9 contrib/cni: use cniVersion 0.3.1 for ipv4 only bridge config 5526fae33 bundle: use ipv4 only config because of gh action limitation 1b8b28433 Support evented PLEG in CRI-O 5783c3254 Bump cri-api to support evented pleg 29ce5a7b2 get script: fix conflist path f317b267d Fix-6080: Update the CNI version to 1.0.0 54b7b5fc0 test, Makefile: hook NRI tests into localintegration. ab73c1dcd test/nri: add a test client with basic NRI tests. 36305e7bd server: hook NRI into request processing. 773e6e005 nri: add experimental NRI adaptation interface. 907f4edf5 config,cli: add support for NRI configuration. a6430c8c8 Add test for conmonrs cgroup with no infra container b6f92b04f Add test for default conmon cgroup type f323d022c Fix applying cgroup for conmonrs when pinned 6c62954e8 Remove cri wrapper package 093d680dd server/metrics: Update seccomp notifier metrics to reduce cardinality fe2458341 ci: make golangci-lint happy da96d6be4 Support checkpointing infra less containers 4a541607e build(deps): bump github.com/onsi/ginkgo/v2 from 2.5.0 to 2.6.1 ebe73f411 build(deps): bump google.golang.org/grpc from 1.50.1 to 1.51.0 7d8f2328f Merge log and metrics interceptor cb8aa99d7 ResourceStore: delete entries after they're used 1b42a3d4c Use containerd v1.7.0-beta.0 41dca27cb server: fail if HOME variable has a newline c1d7c54fa systemd: use on-failure as restart policy 88782d59c contrib/test/ci: fix SELinux permission issue on RHEL9 8132ef511 ci: update system-packages.yml to install gpgme-devel on fedora ac319a568 OWNERS: move vrothberg to emeritus approvers c095c4781 build(deps): bump github.com/urfave/cli/v2 from 2.23.5 to 2.23.7 7150ba10b contrib/test/ci: fix the when condition for CentOS Stream 9 0ffec79a4 contrib/test/ci: enable crb repo for CentOS Stream 9 905e8485a Update security process 3232ffe2a Downgrade cgroupfs test to Ubuntu 20.04 7d848b3c1 Fix GitHub actions CI b6b4f8235 Add Reddit to ADOPTERS.md 189e9f7eb Disable typecheck linter b9d94374b Bump golang dependencies 5e71e4f9c contrib/test: set env variables for integration tests 22249fcf9 build(deps): bump sigs.k8s.io/bom from 0.3.0 to 0.4.1 a67e7776c Port remaining logrus with internal/log 14547d489 Pass ctx so that more tracing spans could be created 19bc7330f internal/log: add a function to start new tracing span 834b60336 Setup logrus hook to attach logs to traces ef3bed00b Remove CRI v1alpha2 support c9316ec2a Update golangci-lint and config 3b631242b Add seccomp notifier feature e3416bda9 build(deps): bump cachix/cachix-action from 11 to 12 71252c17b Disable checkpoint image check as early as possible 658a11552 Correctly extend $PATH before calling conmon during restore a93201a8e Use correct key for tracing hostname field 923f665ca Add docs that `tracing-sampling-rate-per-million` set to 1000000 refers to always sample 999ba7f59 Fix CI 1e8229d45 build(deps): bump github.com/urfave/cli/v2 from 2.19.2 to 2.20.2 3327991b0 build(deps): bump cachix/cachix-action from 10 to 11 0ce9fb039 build(deps): bump google.golang.org/grpc from 1.50.0 to 1.50.1 1f8221f07 build(deps): bump cachix/install-nix-action from 17 to 18 376f7e9df Update dependencies 316830590 Add logs to OpenTelemetry traces e56855dc7 docs: updated kubernetes tutorial 53e631663 Update conmon-rs to latest `main` 8bf89f341 Minor Checkpoint/Restore improvements 62d77513b Track type of all bind mounts during checkpointing 331f30bfb build(deps): bump google.golang.org/grpc from 1.49.0 to 1.50.0 997032dec .github/CODEOWNERS: drop runcom a7a279c84 build(deps): bump sigs.k8s.io/zeitgeist from 0.3.2 to 0.3.5 fb66985f1 config: avoid segfault when workloads.resources is nil 0244fee08 support checkpointing to oci image ae5d39c74 Fix lint CI on `main` eabfdb404 [#5240] update supported OS versions 26614cad9 build(deps): bump github.com/urfave/cli/v2 from 2.15.0 to 2.17.1 f7c9c2754 build(deps): bump github.com/Microsoft/go-winio from 0.5.2 to 0.6.0 42bb61393 fix: give loopback a name 9ee3457ff test/README: Update url for kata containers f1be99faa images/os/Dockerfile: Delete this, it's dead code 570a4c1b9 config: translate monitor fields when printing config 32e6520ff Update config readme 5d20c76fb Allow complete Runtimes config to change 88cc2f9b9 build(deps): bump k8s.io/klog/v2 from 2.70.1 to 2.80.1 28861ed60 build(deps): bump actions/stale from 5 to 6 88c1f772f build(deps): bump github.com/opencontainers/image-spec b6755fc94 build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc c9ba93e08 build(deps): bump github.com/containers/podman/v4 from 4.2.0 to 4.2.1 2a876f1a7 build(deps): bump github.com/containers/buildah from 1.27.0 to 1.28.0 db20b31e1 Do not use deprecated SetNames 4ea5eeddf build(deps): bump github.com/container-orchestrated-devices/container-device-interface 481683497 config: do not remove runc if different default runtime f24ea6702 workloads: fix whitespace b3f877a64 template: fix whitespace and comments in runtimes table b7b56c202 contrib/test: set LOG_DIR to debug kubernetes issues 0b0e16b1c Update conmon-rs 8e1a561e8 Bump conmon-rs code to latest `main` 506e0cbef contrib/test: drop userns integration tests 9db3e8e64 Add basic integration tests for runtime reload 877b5fbdc Add notes on runtime reload support to documentation a3fb007fb Reload runtime configs on reload 29bff1526 Invert conditional check in ValidateDefaultRuntime 2ba6ee2ed Move default runtime validation to its own function 018657b37 use cri-tools version from dependencies.yaml 406f367cb use AddInheritableCapabilities 9070d982d config: add field AddInheritableCapabilities 9d5fbfd90 resourcestore: add test for stages 40d41e3fb server: update stages according to progress with resource creation bce2bc388 resource store: return stage when a watcher is requested a8e2fc166 resource store: introduce stages 1955be644 Add conmon-rs e2e to ansible playbook 24304da5e server: return already created ID for duplicated requests 6b627cbc0 cli: fix some inconsistencies in the help text 0cdd90155 Update vendored files 14926effc go.mod: update goresctrl to v0.3.0 53182dd9b build(deps): bump github.com/urfave/cli/v2 from 2.11.2 to 2.15.0 3b6b98872 Add scripts to run node e2e tests using custom cri-o builds 6d66ea7e6 Fix integration CI runs 7a0b131f5 build(deps): bump sigs.k8s.io/zeitgeist from 0.3.1 to 0.3.2 388032759 metrics: close listener on shutdown ee5d97254 cgmgr: use NewSystemd from createSandboxCgroup aede1956a contrib/test/ci: add rhel9 variant-specific changes 8ec499266 removes async b2a72cbd8 migrates tests to run on GCP 76ec212ea Update build instructions for RHEL 8 distribution Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to 1.7.0Bruce Ashfield2023-04-051-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping containerd to version v1.7.0-11-g6ea9bc57f, which comprises the following commits: d81fc15af update runc binary to v1.1.5 755efbe64 go.mod: github.com/opencontainers/runc v1.1.5 90591db47 Defer uid lookups on Darwin b7d87b190 Add `WithReadonlyTempMount` to create readonly temporary mounts 1c1b6bcb2 CRI: Don't always close netConfMonitor channel cf2e454bf Sandbox: Correct/add some fields to Status() ce68e8e0d Sandbox: Cleanup shim on Start failure e13a9165e Prepare release notes for v1.7.0 625217d5f RELEASES.md: describe the deprecated config properties 703e2ba4b docs: link docs/managed-opt.md to client.Install f2bb9c9b0 Go 1.20.2 56354c7de Update ttrpc to v1.2.1 5144ba9c4 sandbox: create sandbox with network namespace path dd3eedf3c labels: Add LabelDistributionSource 5c9c630c3 use uppercase letters for flag usage 0efc498d3 Prepare release notes for v1.7.0-rc.3 ff4acdc42 metadata: add comments about Image.CreatedAt 6d46bb410 go.mod: go.opentelemetry.io/otel/* v1.14.0 d26587c72 archive: disable looking up usernames and groupnames on the host 535ef5054 go.mod: github.com/stretchr/testify v1.8.2 2b4f830ed go.mod: github.com/opencontainers/selinux v1.11.0 6bfc82daf go.mod: github.com/opencontainers/runtime-spec v1.1.0-rc.1 7c70185ae go.mod: github.com/klauspost/compress v1.16.0 8e67b2731 go.mod: github.com/imdario/mergo v0.3.13 6afec5558 go.mod: github.com/emicklei/go-restful/v3 v3.10.1 c4f928f88 go.mod: github.com/containerd/ttrpc v1.2.0 5630d6a84 go.mod: github.com/containerd/fifo v1.1.0 6d9513231 go.mod: github.com/containerd/cgroups/v3 v3.0.1 da1ffdd75 go.mod: github.com/Microsoft/hcsshim v0.10.0-rc.7 60738e31d Update imgcrypt to v1.1.7 8a4d409b9 Add release notes for v1.7.0-rc.2 d602c9aec docs: fix typo of shim.RunManager's function comment f70657650 feat: tag image using Transfer api f7eb86ef3 Sandbox: Delete shim+shutdown sandbox on create failure 6b4b6956e Sandbox: Fix/enhance error messages for Create 8ce3e4e15 epoch: fix unit test when SOURCE_DATE_EPOCH is set 32ed559c8 Add Windows Sandbox Stats (sbserver) 08aa576a9 Add Windows Sandbox Stats 8137e41c4 Add ArgsEscaped support for CRI 5946c1051 *: fix code style issue 98cb6d7eb cri/sbserver: ignore the NOT_FOUND error in exec cleanup 01671e9fc cri: add config ut for invalid drain io timeout value 55e25f164 integration: add testcase to drain exec IO in time ffebcb122 cri: disable drain-exec-IO if it is empty timeout 791f137a5 *: update drainExecSyncIO docs and validate the timeout 13bf5565e [transfer] update export to use image store references e2283edef [transfer] update export API types f6491b004 feat: export images using Transfer api b9d7eae1a feat(api): add fields to ImageExportStream 3c18decea *: add DrainExecSyncIOTimeout config and disable as by default a9cbddd65 *: fix typo and skip exec-io-drain-testcase in win b91f42a14 ctr/tasks: support remapped UID/GID 2e96ba95e Create config struct to take user input f25ec98d0 Fix linting error `sets.String is deprecated` 8145b15f0 Bump k8s.io deps 04dfd6275 pkg/cri/sbserver: add timeout to drain exec io 82c0f4ff8 pkg/cri/server: add timeout to drain exec io 43d36a254 Add experimental section to RELEASES.md cd84f752c Prepare release notes for v1.7.0-rc.1 ae42f836f Update mailmap 4522ad886 Update CRI guide link 57fb2d30f Add max shim version environment variable 5c6e9f83d Fix streaming manager deadlock on collection acf6e9411 Update README with location of security audits 30883d831 Increase CI workflow timeout on Windows. af7477e43 docs: fix typos in historical/design/data-flow.md 6b589a89f releases: mark 1.5 as EOL dba6f9db1 Add version to shim protocol 36ae2f6b9 bump go-cni to v1.1.9 cf46d3c6f Treat sandboxes as root gc resources and scan referenced objects 35d42b47f Add Linux arm64 arch to install-protobuf script 727f8530c Prepare release notes for v1.7.0-rc.0 2e9aaf094 docs: update instructions for enabling NRI. 310be5ce6 pkg/nri: update NRI configuration. 8a47c6910 Add a leading space after the comment sign f53417921 Add unit test to getSupportedPlatform a6ad9e04e Rewrite install-protobuf script 3769b4840 Rewrite install-protobuf script 47305392c Add configuration options to local transfer service bd0a2a927 CRI: remove duplicated snapshotters code 49abbe4f2 fix failing TestCDIInjections 30e4a1409 update CDI version to v0.5.4 4728800ab runtime/v2: Get rid of last logrus.Fields usage 4278fbbc7 runtime/v2: Call onCloseWithShimLog for grpc shims 06e085c8b Add Fields type alias to log package 0ecdd341d docs: add more comment to logging.LoggerFunc ea83632a8 docs: Show how to select GRPC for shims 369339897 Migrate from k8s.gcr.io to registry.k8s.io a48dbefc1 Fix concurrent writes for UpdateContainerStats dc27cc0a2 Add macOS build notes 56274749c sandbox: start sandbox with options 2716fd041 dependency: bump go.etcd.io/bbolt to v1.3.7 979a74412 runtime/v2: Log BootstrapParams 4baa1876b contrib/apparmor: remove code related to apparmor_parser version 0ced6ac64 Prepare release notes for v1.7.0-beta.4 90d004ae8 Go 1.20.1 281f89a9d go.mod: go 1.19 d8b68e3cc Stop using math/rand.Read and rand.Seed (deprecated in Go 1.20) a9ac5f9cb lint: remove `//nolint:dupword` that are no longer needed 9b510e9a8 lint: silence "SA1019: tar.TypeRegA has been deprecated... (staticheck)" 8bf975b4f lint: silence "type `HostFileConfig` is unused (unused)" 4b9fd6ba5 golangci-lint v1.51.1 ac31c9a53 Clean up repeated package import 39bac0dbe error strings should not be capitalized 9a9cfe85e Go 1.19.6 0166783c7 cni: pass in the cgroupPath capability argument d14758b60 go.mod: bump to go-cni main e855a5998 cmd/ctr/commands/images: support usage subcommand 9c82e929f release: xx v1.2.1 844252164 Add fallback for windows platforms without osversion 081601f52 Update imagestore interface to support multiple references 646bc3a94 CRI: Create DefaultCRIAnnotations helper 5aab634e1 CRI: Pass sandbox annotations to _other platforms 2b24af8d1 Use options to pass PodSandboxConfig to shims ebbcb57a4 pkg/cri/sbserver: experimental NRI integration for CRI. 8a1dca0f4 pkg/cri: split out NRI API from pkg/cri/server. a8bb1ad2a loadConfig pre-inspection in advance 36e7dbdcb ctr version: add args check, prohibit incoming args 750d18ace Extract CRI instrument package 60d04b0b0 pkg: rename {blockio,rdt}_default.go -> nonlinux.go b61988670 go.mod: github.com/containerd/typeurl/v2 v2.1.0 74b371b98 CRI: Mirror generic toml runtime config under server 8ef298d86 Add transport credentials GRPC opt 77fc0948c Use switch when creating TTRPC/GRPC client a82e37a5a Add shim bootstrap params fc2e761e2 Initial GRPC client support 9e5c207e4 Wire up client bridges 4b1ebef3c Add Sandbox service GRPC bridge 47cb5f64b Add Task Service GRPC bridge 51a8db233 Send container events with nil PodSandboxStatus 27c8f4085 Move PLEG event generation back to sbserver to avoid missing pod sandbox status 7cf556075 test: add hostNetwork tests for both windows and linux d33a43cc2 pkg/apparmor: clarify Godoc a3265102d Revert "Don't check for apparmor_parser to be present" c990e3f2e contrib/apparmor: remove version-dependent rules fe0116ec2 CI: skip some jobs when `repo != containerd/containerd` 3eda46af1 oci: fix additional GIDs ef2560d16 oci: fix loop iterator aliasing 52f82acb7 btrfs: depend on kernel UAPI instead of libbtrfs 62df35df6 *: introduce wrapper pkgs for blockio and rdt 6cdc221f5 'go routine' should be 'goroutine' b0e97c0f9 Use multierror for cleanup error 34314717b Remove sandox store and controller service type a788f6c79 Move local sandbox controller under plugins package 2717685da Refactor sandbox controller interface 0b33a45fa cri: fix Mirrors deprecation comment 5bc3fea62 update fuzz function names in docs with golang naming convention 904a87d26 docs: fix function names in fuzzing test documentation 9e4acc028 importer: stream oci-layout and manifest.json Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* conmon: update to 2.1.3-tipBruce Ashfield2023-04-051-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping conmon to version v2.1.3-43-g9a3af8f, which comprises the following commits: 9a3af8f logging: avoid opening /dev/null for each write 813c8d7 oom: restore old OOM score 9d3a955 Update CI VM images b1d7297 Use default umask `0022` 54a0c9c exit: Free allocated string dbade0d version: bump to v2.1.7 1841000 Fix leaking symbolic links in the opt_socket_path directory 5cff0ce cgroup: Stumble on if we can't set up oom handling 5f669ba bump to v2.1.6 3dc09f6 packit: build in dedicated projects fffef27 hack: build ginkgo in GOPATH ef8a9f2 vendor bump ginkgo to v2 b042229 gh actions: bump to go 1.20 c002534 Use --detach instead of -d df277e2 Fix OOM watcher for cgroupv2 `oom_kill` events 4cb1e4d Lint/format fixes for golang 1.19 a10fe91 Update CI VM Images to F36/F37 2d03ad0 ctrl: drop fifo perms to 0660 8c72109 Fix tools/Makefile with GNU make 4.4 6b600ac bump to v2.1.5 28b3bc7 don't leak syslog_identifier f903e20 logging: do not read more that the buf size f4d3beb logging: fix error handling 21f648b cli: Fix conmon-pidfile/container-pidfile description 1df3e90 Makefile: Fix install for FreeBSD cb0c68b signal: Track changes to get_signal_descriptor in the FreeBSD version 1fbfa33 Packit: initial enablement 5e82bb4 bump to 2.1.4 1420874 signal: handle SIGUSR1 with signalfd 636e239 Use /usr/bin/env to locate bash Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc-docker: update to 1.1.5Bruce Ashfield2023-04-051-2/+2
| | | | | | | | | | | | | Bumping runc to version v1.1.5-1-g17a2d451, which comprises the following commits: 17a2d451 VERSION: back to development f19387a6 VERSION: release v1.1.5 8ec02ea1 nsexec: retry unshare on EINVAL 0abab45c Prohibit /proc and /sys to be symlinks 0e6b818a rootless: fix /sys/fs/cgroup mounts f6e2cd3b nsexec: Check for errors in write_log() Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc-opencontainers: update to 1.1.5Bruce Ashfield2023-04-051-2/+2
| | | | | | | | | | | | | Bumping runc to version v1.1.5-1-g17a2d451, which comprises the following commits: 17a2d451 VERSION: back to development f19387a6 VERSION: release v1.1.5 8ec02ea1 nsexec: retry unshare on EINVAL 0abab45c Prohibit /proc and /sys to be symlinks 0e6b818a rootless: fix /sys/fs/cgroup mounts f6e2cd3b nsexec: Check for errors in write_log() Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kubernetes: make CC for amd64 match other architecturesChen Qi2023-03-271-9/+16
| | | | | | | | | | | Change 0001-hack-lib-golang.sh-use-CC-from-environment.patch to also remove the 'export CC=xxx' for amd64. The original patch is a little strange, it removes such statements for other archs but leaves amd64 untouched. If we're using CC from our environment, we use it for all targets. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kubernetes: update to v1.27.x-rcBruce Ashfield2023-03-272-15/+19
| | | | | | | | | | | Bumping kubernetes to the next release candidate (april 2023). We refresh our $GO patch, drop the need to do release artifacts preparation and add a new INSANE_SKIP for kubelet. But otherwise, the build and content the same or similar. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: update to 4.4.3Bruce Ashfield2023-03-241-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping libpod to version v4.4.3-2-g6172f29f9, which comprises the following commits: 2c01aa7e3 Bump to v4.4.4-dev d2f93d621 Bump to v4.4.3 2ae3c4fe9 Release notes for v4.4.3 d6ea3983d compat: /auth: parse server address correctly 0a897f03f vendor github.com/containers/common@v0.51.1 f7fccc87c pkginstaller: bump Qemu to version 7.2.0 53212ea0e podman machine: Adjust Chrony makestep config 06925d554 [v4.4] fix --health-on-failure=restart in transient unit 9c0d2dc2f podman logs passthrough driver support --cgroups=split a0fad9f8c journald logs: simplify entry parsing 54b070ee6 podman logs: read journald with passthrough c5fa9c50f journald: remove initializeJournal() 6b19e1437 netavark: only use aardvark ip as nameserver d737a815a compat API: network create return 409 for duplicate 1a3a5594a fix "podman logs --since --follow" flake bd65bf2ed system service --log-level=trace: support hijack 8ab00424b podman-mac-helper: exit 1 on error badbd8a34 bump golang.org/x/net to v0.8.0 36ab43f77 Fix package restore df0fe4fcc Quadlet - use the default runtime 594d488b8 Bump to v4.4.3-dev 74afe2688 Bump to v4.4.2 87a1c2701 Release notes for v4.4.2 3abff420a Revert "CI: Temporarily disable all AWS EC2-based tasks" 8322cab91 kube play: only enforce passthrough in Quadlet d69512b98 Emergency fix for man pages: check for broken includes 9606d7f99 CI: Temporarily disable all AWS EC2-based tasks ab7a47840 quadlet system tests: add useful defaults, logging 805e94b03 volume,container: chroot to source before exporting content 321d05aa9 install sigproxy before start/attach 84521f52d Update to c/image 5.24.1 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: templates/lxc-busybox.in: if busybox contains init then use itXiangyu Chen2023-03-172-0/+46
| | | | | Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: add -L option for curl in templates-use-curl-instead-of-wget.patchXiangyu Chen2023-03-171-1/+1
| | | | | | | | | | | | | | Add support of redirect option for curl, the linuxcontainers.org sometimes redirect to other mirror site such like us.lxd.images.canonical.com, this would cause the lxc-download script report download failed. Reproduce and verified on following command: lxc-create -t download -n test -- --dist archlinux --release current --arch arm64 Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containers: use VIRTUAL-RUNTIME variable to allow container runtime flexibilityBruce Ashfield2023-03-083-3/+3
| | | | | | | | | Rather than using virtual-runc (which choses between the old docker and opencontainer variants), use the newly added VIRTUAL-RUNTIME_container-runtime variable, which allows switching betwen runc and crun. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: use VIRTUAL-RUNTIME variable for flexible RDEPENDSBruce Ashfield2023-03-081-1/+1
| | | | | | | | | To make it simpler to vary the container runtime and the networking infrastructure to be used with podman, we use the recently introduced VIRTUAL-RUNTIME variables that control these values. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-ce: update to v23.0.1-tipBruce Ashfield2023-03-081-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping docker to version v23.0.1-34-gbfc8e1ae36, which comprises the following commits: 2337258d28 libnet/networkdb: fix nil-dereference panic in test d6d48dd95d Upgrade to golangci-lint v1.51.2 c4b655830d Migrate away from things deprecated in Go 1.20 c6bf777eae d/l/awslogs: fix ineffective Add in test da10937926 daemon: handle EISDIR error from runtime 938ed9a1ed distribution/xfer: make off-by-one error a feature ca712d6947 Fix loop-closure bugs in tests 2c55b264f7 Upgrade containerd/fifo to v1.1.0 8fd038fb71 dependency: bump go.etcd.io/bbolt to v1.3.7 87a1517f8f vendor: golang.org/x/net v0.7.0 d15010643c vendor: golang.org/x/text v0.7.0 0727310950 vendor: golang.org/x/sys v0.5.0 b8c448ef24 Revert "apparmor: Check if apparmor_parser is available" a3f5319563 vendor: github.com/containerd/containerd v1.6.18 52d667794f [23.0] update containerd binary to v1.6.18 11715a05ca update to go1.19.6 962c238c17 libnet/networkdb: use atomics for stats counters 20d05e235e libnetwork/networkdb: make go test -race ./libnetwork/networkdb pass c2d69d06b0 api/s/r/swarm: log backend errors at Debug level 7c09feb58c libnetwork: check DNS loopback with user DNS opts 6c2637be11 Do not log connection info before the connection exists 4002fa877b vendor: update buildkit to latest v0.10 Bumping docker-cli to version v23.0.1-2-g1ab7665be, which comprises the following commits: 1810e922a docs: drop dated comments about graphdrivers 27b19a6ac ci: fix branch filter pattern Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* moby: update to v23.01-tipBruce Ashfield2023-03-081-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping moby to version v23.0.1-34-gbfc8e1ae36, which comprises the following commits: 2337258d28 libnet/networkdb: fix nil-dereference panic in test d6d48dd95d Upgrade to golangci-lint v1.51.2 c4b655830d Migrate away from things deprecated in Go 1.20 c6bf777eae d/l/awslogs: fix ineffective Add in test da10937926 daemon: handle EISDIR error from runtime 938ed9a1ed distribution/xfer: make off-by-one error a feature ca712d6947 Fix loop-closure bugs in tests 2c55b264f7 Upgrade containerd/fifo to v1.1.0 8fd038fb71 dependency: bump go.etcd.io/bbolt to v1.3.7 87a1517f8f vendor: golang.org/x/net v0.7.0 d15010643c vendor: golang.org/x/text v0.7.0 0727310950 vendor: golang.org/x/sys v0.5.0 b8c448ef24 Revert "apparmor: Check if apparmor_parser is available" a3f5319563 vendor: github.com/containerd/containerd v1.6.18 52d667794f [23.0] update containerd binary to v1.6.18 11715a05ca update to go1.19.6 962c238c17 libnet/networkdb: use atomics for stats counters 20d05e235e libnetwork/networkdb: make go test -race ./libnetwork/networkdb pass c2d69d06b0 api/s/r/swarm: log backend errors at Debug level 7c09feb58c libnetwork: check DNS loopback with user DNS opts 6c2637be11 Do not log connection info before the connection exists 4002fa877b vendor: update buildkit to latest v0.10 Bumping docker-cli to version v23.0.1-2-g1ab7665be, which comprises the following commits: 1810e922a docs: drop dated comments about graphdrivers 27b19a6ac ci: fix branch filter pattern Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* crun: update to v1.8.1Bruce Ashfield2023-03-081-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping crun to version 1.8.1-3-ga09ab72, which comprises the following commits: 11d1baf build(deps): bump actions/upload-artifact from 2 to 3 f8a096b NEWS: tag 1.8.1 4748543 utils: drop magic number 4096 b022227 utils: use mempage size buffer to read /proc/mounts 2da0773 linux: always use direct mapping 6cdf51c container: delete cgroup on errors fba646e cgroup: rmdir the entire systemd scope 3221684 crun.1.md: fix typo 31bcf8f crun.1.md: fix markup 5007784 build: delete .version file on make clean 46fbeee cgroup: reset systemd unit if start fails 7e7a4db cgroup: do not add default dependencies 4bd4c4e test: run codespell on the correct directory 8b46c45 src: run codespell b841b71 Support passing an attribute to change the mount_context_type 2ca4233 test: fix path for crictl ce66b2e Revert "Support passing an attribute to change the mount_context_type" 87b69c3 Support passing an attribute to change the mount_context_type d23a94a krun: create /dev/sev as part of the OCI configuration 84092f6 handlers: add hook for exec 83f3ab2 handlers: rename exec_func to run_func 93a8e2f krun: always allow /dev/kvm 675e87c handlers: update uses modify_oci_configuration 1efd61a update: move json parsing to container c9b230a handlers: provide cleanup function bd22751 handlers: move cookie data under the same struct 71bf884 handlers: add new hook to modify the OCI configuration b3e167d crun: set handler for all commands f0f7b8c handlers: initialize handler in the parent process cfec5ce NEWS: tag 1.8 957796e libcrun: remove unused intprops.h 8363deb linux: move PR_SET_DUMPABLE after userns creation 83de960 dist: do not include binary tests 188e0ce nix: add gcrypt dependency f7c715d nix: remove protobuf dependency 765161c nix: refactor same command line 98898d2 nix: update image to nixos/nix:2.12.0 bcae634 Add support for ppc64le 9b287dd README.md: add CodeQL badge ed7598d README.md: drop lgtm badges 1a61b4d utils: shrink read buffer if necessary 2a5cc1d nix: update packages 7d9fa03 tests, centos8-build: add safe.directory /crun 822ca4a utils: add utils to access /proc/$PID/fd/$FD paths 0554b0a utils: change initial size for buffer 742e8fc utils: reallocate only if needed 4e379c6 cgroup: support cpuset mounted with noprefix 58166e6 linux: set PR_SET_DUMPABLE 908bfc4 linux: mount cgroup ro on /sys bind mount fallback cd1cf0b linux: add two new arguments to get_bind_mount b84bde9 linux: mount the source cgroup if cgroupns=host 03d2969 linux: refactor out helper function 75f5c1a linux: fix error message 234d77c linux: precreate devices on the host f23cd15 utils: add functions to read overflow IDs 85767be linux: remove duplicate slash 1e29136 linux: generalize fsopen_mount a186e8a linux: add dirfd argument to get_bind_mount 7e42a18 linux: add infra to send devices mounts a6c9453 linux: generalize receive_mounts b0fe2e4 linux: refactor code in a separate function 05f1298 contrib, seccomp-notify-plugin: free args on error to prevent leak a34dd94 cri-o,test: skip failing test unrelated to crun 78cf10f crun: fix clang format 278b9b4 src/crun.c: fix build without dlfcn.h 0ebf4e7 build(deps): bump uraimo/run-on-arch-action from 2.3.0 to 2.5.0 4832ca4 Don't clone self from read-only mount 9df7442 tests, wasmedge: copy libraries under /usr/lib64 2044720 tests, wasmedge-build: install which 6f0d03c tests, crio: skip checkpoint/restore tests d406a97 tests, centos9-build: add safe.directory /crun 81b4ba0 tests, cri-o: add criu-libs rpm ca41c80 cloned_binary: use cleanup_close e1c3906 tests, cri-o: update go to 1.19 a83001b cgroups v1: fix legacy mode mount. 26fe138 utils: fix applying AppArmor profile 1cfaf54 tests: disable some CRI-O failing tests 5e3ef32 crun: write setgroups=deny when mapping a single uid/gid da84be0 github: fix cri-o CI on cgroupv2 cdf7864 tests: disable test that requires io.bfq.weight c54fc6f github: fix running on cgroupv2 0356bf4 NEWS: tag 1.7.2 d389308 criu: hardcode to libcriu version 2 3880f04 cgroup: always enable controller 258c237 crun: fix compile time check for CRIU 6ce11e8 copr: enable wasmedge on all active envs ada59b2 tests: fix podman tests d068462 NEWS: tag 1.7.1 9893e99 utils: Improve debug message db08071 linux: include terminal \0 when copying mapping 67f58c6 utils: fix creating default userns 5689bd1 krun: disable libkrun's collection of env vars 6b8da56 krun: copy the OCI configuration file 92db973 configure.ac: do not link libcriu dynamically f6a5109 criu: add check at runtime for the version 8c3fc12 criu: load libcriu dynamically b3189ef src: run make clang-format be6c22c fix timestamp format, tv_usec is microsecond not nanosecond ff95309 copr: enable wasmedge on epel9 40f66c0 seccomp: initialize libgcrypt 9bff00a Add setlinebuf() when --debug and --log=file: are used. cb6ae27 handlers: set selinux/apparmor profile 0efbe56 utils: change AppArmor profile for the current proc f1f286a utils: change SELinux label for the current proc a1cd1a6 handlers: use only the handler name if needed Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* aardvark-dns: Add ptest supportVasileios Anagnostopoulos2023-03-082-0/+27
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* netavark: Add ptest supportVasileios Anagnostopoulos2023-03-083-0/+51
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* aardvark-dns: add the recipeVasileios Anagnostopoulos2023-03-083-0/+174
| | | | | | | | | The aardvark-dns is an optional runtime dependency of the netavark. This recipe introduces the aardvark-dns, so it can be integrated to netavark. Signed-off-by: Vasileios Anagnostopoulos <vasileios.anagnostopoulos@siemens.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* netavark: update the netavark versionVasileios Anagnostopoulos2023-03-081-30/+41
| | | | | Signed-off-by: Vasileios Anagnostopoulos <vasileios.anagnostopoulos@siemens.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* netavark: add the netavark recipePascal Bach2023-03-082-0/+209
| | | | | | | | | The recipe is generated via cargo-bitbake. Modifications are done in netavark.inc to allow re-genrating the recipe for future updates. Signed-off-by: Pascal Bach <pascal.bach@siemens.com> Signed-off-by: Vasileios Anagnostopoulos <vasileios.anagnostopoulos@siemens.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>