summaryrefslogtreecommitdiffstats
path: root/recipes-containers
Commit message (Collapse)AuthorAgeFilesLines
...
* podman: update to 5.0.0-rcBruce Ashfield2024-03-151-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping libpod to version v5.0.0-rc4-2-g460fc4d65, which comprises the following commits: fc4e16366 Bump to v5.0.0-dev cfc5b8e0f Bump to v5.0.0-RC4 0898b338b Use stop timeout of zero for system reset 542883b9b chore(deps): update dependency python-dateutil to ~=2.9.0 99bb2bfce CI: must-add-tests check: use GH label, not text c5c294a35 fix(deps): update module github.com/shirou/gopsutil/v3 to v3.24.2 3abc488c8 Vendor in containers/(buildah, common) 4a03da22a Run codespell on code 03f6589f3 Fix events by fully adding the new PullError event 52fd284fd Update dependency pytest to v7.4.4 2b86ab5a1 Change image-path to image for tests 527b3793b Use machine image as specified in containers.conf 4c1c4c082 Vendor latest c/common and fix tests c50826cea test: fix manifest e2e test assumption f168b3c11 podman manifest add: support creating artifact manifest on the fly 2bbed8f20 Add man page content for artifacts d8bb63705 pkg/env.Join(): don't modify passed-in maps 66d60384f add --retry --retry-delay to podman run/create c3c0c4ab9 Add support for podman push --retry --retry-delay e5ee0bb5f pullImage does not need to be exported 2c9c7273c Vendor in latest containers/common 99b2f369d test/system: fix mount external container test 35133c842 Move locks to shim layer 6957c7819 CI: run logformatter on mac fd1d95126 Move ignition functions into Containerfiles b58f20bdb machine/ociartifact: Include image name in error 064258b49 Reenable boltdb upgrade tests 77bcf233e fix: split string Entrypoint by space 90e6478cf refacto: unknown signal return signal number without prefix 1de94dceb ci: fix module not found 585af039d feat: allow compatibility with podman v4 machine facad62af tests: fix after make podman inspect cmd return compatible with Docker API v1.44 23d6377ac chore: rename var host hostIP 2cd72c272 tests: add docker api compatibility test de845a5b4 feat: make inspect compatible with docker v1.44 950f612b5 logging: new mode -l passthrough-tty 5952486df podman network inspect: include running containers 8f02822c1 Remove xz unit tests as they are flaky f8abd7ff7 machine config: make write atomic 26ec570c6 Ensure HyperV 9p mounts work when a dir doesn't exist dfae51a4b Clean up gvproxy if machine start fails ee52f9cd7 systests: kube play URL: workaround for ECONNREFUSED 7e374a52a Vendor in latest containers/(image,storage) 698219cf9 Expose as-tested Mac/Windows repository state 9f5c20f9b macos installer: Add vfkit entitlement 15734f8c5 macos-installer: Remove hvf.entitlements 74b87874b macos installer: Default to using ad-hoc signing c2a2113bb new vms, with rc6 rawhide kernel 7b6d9a586 Fixup: avoid overriding io.Copy error 59704665a Avoid overriding io.Copy error 24a33a538 Move code for sparse optimized copy to a dedicated method 50a0c5176 [CI:BUILD] rpm: Add fallback for $SOURCE_DATE_EPOCH not being set e32c9bb5e Makefile: add machine policy.json to podman-remote.zip 1e5b5a889 macos installer: install default policy.json file bed61806c pkg/machine/ocipull: add default policy.json file f5a268319 Makefile: add MACHINE_POLICY_JSON_DIR option a02aa8f6a pkg/machine/ocipull: add custom policy.json location a210a4d7c test/compose: add test for default connection d9aff9b41 podman compose: only trim path suffix when ssh protocol 3cada0409 podman compose: correctly accept --connection/--url 6d3571dcf podman compose: build for all arches 7d5a68c9c CI: e2e: use distinct ports, not just 5000 5e387cd8a [CI:BUILD] rpm: Use $SOURCE_DATE_EPOCH instead of the current date 8d9ff04d1 vendor update gopkg.in/yaml.v2 to v3 cc7b19279 [CI:BUILD] rpm: Make BuildRequires independent of the environment 5b28a2b4a Fix podman stop -t -1 CID 656bf7b76 Change QEMU netdev to Unix domain socket 19b676f85 Enable lint for Darwin and fix identified issues 1b068b79f Fix nightly cron checks 83671ac34 systests: enable ipv6 tests 188404366 Update github.com/containers/libhvee digest to c1bda9d f099250be Better file close and err handling ea4553d59 integrating changes from #21768 fa99b9be9 renamed testfiles as testdata 0b3f3f0ef Use faster gzip reader 2245cf8dc Remove duplication and make consistent usage of the progress bar c42d3a74e Add a comment to explain why we look at file name for zip files 95aa2c4e6 Use github.com/stretchr/testify assert in compression_test.go 88af8852d Refactor machine decompress.go ecda4eab3 Update module go.etcd.io/bbolt to v1.3.9 53b5fc781 Update module golang.org/x/tools to v0.18.0 608976902 Update module github.com/openshift/imagebuilder to v1.2.6 3b127286a Adds example for secret creation from environment variable b68d3c7a0 Fix race conditions in hyperv readiness checking 127a8060a Ignore docker's end point config when the final network mode isn't bridge. 5d303ca26 Reformulate sparseWriter to deal with starting/ending zeroes explicitly c5434bf71 Expand sparseWriter tests a9ee31b92 Bump to v5.0.0-dev 54795efeb Bump to v5.0.0-RC3 3e76e594b Fix assumptions in 'push with --add-compression and --force-compression' 8e99c697f Fix assumptions in 'push test --force-compression"' 7acb49875 Update module golang.org/x/net to v0.21.0 f601a446b Bump VMs. New pasta, gvisor d85a71b4d Update module github.com/klauspost/compress to v1.17.7 d7f7f07c9 Stop using rm'd inspect format templates in tests be9aba7cc Remove image provenance from `machine inspect` d68240b15 Update machine files rm order and add QEMU rm 4078a4405 libpod/events: remove duplicated Details ID field 6f6925cca pkg/machine: ignore gvproxy pidfile not exists error 8f1cebf96 cmd/podman: remove duplicated event ToHumanReadable() a3a1b44c3 libpod/events: Update event time format and add timeNano f218f8430 machine: implement http proxy logic for all providers c4e68bdae Cirrus: Reuse shared clone script on Mac 2af73b83f Vendor vfkit v0.5.1 and gopsutil v3.24.1 f7d1726f9 Rearrange CI tasks for safety + efficiency 89b415ba3 Comply to Kubernetes specifications for annotation size. a31e8d2a2 zstd now default compression for podman machine 1c61f766d CI: fix search-test flakes 0b861350c machine: add sparse file writer 7746e2a3f systests: auto-update: minor cleanup 09095acf2 machine: Add `ConnectionInfo` to `MachineConfig` 5effdcca3 Fix up example description of podman-system commands ec68f07c0 Fix Lint on Windows and enable the job 66fd41ff1 cirrus logcollector: update package list 5327ddfdf Build with CNI support on FreeBSD c5a71c4fd Apply suggestions from code review 67ead5cb5 Apply suggestions from code review 408772d34 Apply suggestions from code review 1612ff69c Fix up example description of podman-inspect.1.md.in 62148bf61 Apply suggestions from code review b8c1a8e79 Apply suggestions from code review 66f39eee5 machine: Remove unnecessary TODOs 5b5343b38 Apply suggestions from code review 9d73dc6ed Apply suggestions from code review f7659b12e Apply suggestions from code review 4f13b836b Codespell code fc7140151 Fix up example description of podman-mount.1.md.in ee078a7e6 Update docs/source/markdown/podman-cp.1.md 606865a47 Fix up example description of podman-container commands 22effe8d4 Fix up example description of podman-stats.1.md.in 3fd09dd18 System tests: enable debugging for parallel-rm test 49400ecce Extract waitForGvProxy into shared utility function a0109caa7 Fix up example description of podman-volume commands 803410f1a Fix up example description of podman-kill.1.md.in bc5a4fbb2 Fix up example description of podman-pod commands 93a0c242c [skip-ci] Packit: Update downstream task targets 8ed6d4fe5 Fix up example description of podman-build.1.md.in 433efc1f5 Fix up example description of podman-commit.1.md fe910ae96 Fix up example description of podman-logout.1.md.in 12af4f36b Fix up example description of podman-images.1.md.in 66ed46987 Apply suggestions from code review de7cb639c Fix up example description of podman-export/export commands f59a5f135 Fix running container from docker client with rootful in rootless podman. 10d748f58 Introduce Podman machine reset d4b3ab521 Fix up example description of podman-create.1.md.in 717c00569 Fix up example description of podman-diff.1.md.in 4e268c667 Fix up example description of podman-events.1.md 537490cb9 Fix up example description of podman-farm commands aad195ca3 Fix up example description of podman-network commands 777b258a7 Fix up example description of podman-image commands 664d4ed28 Fix up example description of podman-port.1.md.in 1116e68dd Fix up example description of podman-push.1.md.in 79a10419c Fix up example description of podman-unshare.1.md 63d9bf128 Fix up example description of podman-pause.1.md.in 4b6ca1687 Fix up example description of podman-start.1.md.in f5c666d07 Fix up example description of podman-rm.1.md.in 6c8123325 Fix up example description of podman-info.1.md 8cbbd631d Fix up example description of podman-history.1.md 1a06ec802 Fix up example description of podman-healthcheck-run.1.md 10af44854 Fix up example description of podman-exec.1.md.in 7e611f60b Fix up example description of podman-cp.1.md 47d0aa1bc Fix up example description of podman-manifest commands 7ba23cd6f Allow podman pull to specify --retry and --retry-delay f036476cf fix usermode test 24b8d1446 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0 2846027dc machine init: validate machine name and username 8be1c0b04 [CI:DOCS] Update dependency golangci/golangci-lint to v1.56.2 30a18fc02 pkg/machine: make only one AddConnection() call 7f2a6c735 Bump to v5.0.0-dev f620aa0fb Bump to v5.0.0-rc2 d60757cca pkg/machine: cleanup MakeSSHURL e0a766854 Improve cross platform support in QEMU machine sources bd0a9e903 Fix remove docker.sock symlink 1f64ae10f Prune FCOS related code 4fffa78ee Manually discover wsl.exe location 889454104 Turn WSL machine tests back on a9401dead Build tag out QEMU for Darwin c7537d193 man-page xref: make nested-structure warnings fatal d221e0b00 Remove log-level from runSystemCommand since wsl does not support it 9ee17d422 machine/qemu: use extra gvproxy socket 3ca221360 Add a helper for stopping pods and containers in E2E bcec7e627 machine: ocipull do not error if downloaddir exists e5f86f862 More test tweaks to avoid "StopSignal ... 10 seconds" warning 144e420bb Add testcase for WSL dist conflicts d23dd35dc Correct VM existance check on WSL db34827bb Test PR, add a inconsequential period to docs 9abc04232 Fix small bug in ocipull 42a78c714 Add volumes-from support using annotation in kube yaml 068d4e81c Allow CI user to cleanup own files 41c3f9d4b chore(deps): update docker.io/library/golang docker tag to v1.22 3de467d9f machine: Re-enable USBs check for wsl machine set 0e9d86755 machine: `machine set` only when machine's stopped 92d6194f0 Fix freebsd indentation + enable release-testing tasks f9bc9a85b Replace panic with no-op 45b701b12 chore(deps): update dependency setuptools to ~=69.1.0 464638cc8 Enable windows and PM windows testing 001824b9f Windows uses USERPROFILE not HOME 4c0d05718 Readme updates for Podman 87947761e [CI:BUILD] Add VFKit into pkginstaller, remove QEMU 7f2d8ae80 [CI:DOCS] Update dependency golangci/golangci-lint to v1.56.1 66e292ebb Fix build on Main c29fde265 libpod: correctly map UID/GID for existing dirs 2430fc71a Allow podman machine to download from oci registry ad55ba6eb Handle DOCKER_HOST environment for podman-docker package 36853c0d0 Consistant handling DESTDIR variable expansion 5eb801a56 Bump CI VMs to ones with netavark 1.10.3 f7f4d1064 Fix the build on main eb8428df5 podman-image-scp: Load images without the use of a temporary file. f8847ea04 Improve comments on waitOnProcess d3328d4f3 Don't panic on podman4 machine configs 00180bd5b Enforce podman-machine mac CI results 667311c7d Use persist dir for oom file 1f8a69bc9 docs: clarify when a URL is treated as a git repo bb7d8fdc4 Workaround connection hangups in start/stop racing 09b86e26d Improve robustness of pipe checks 487219d80 Complete WSL implementation, refactor a few areas d7cb66492 wsl - wip e74d268bf Minor cleanup from podman 4 2a61998f0 Fail if vm exists in hyperv already 477cb90a3 Update .cirrus.yml 325d7f489 Re-enable mac testing 7ecc41467 Vendor crc CopySparse 69163af2a Remove gitleaks scanning 5b6b68976 Remove disused Containerfile and docs d676c1b1a fix(deps): update module github.com/docker/docker to v25.0.3+incompatible 4413e75f0 [CI:BUILD] rpm: bump podman module version 1ca608ea9 fix "podman run port forward range" flake 41cd90a8e image scp: don't require port for ssh URL dbfa201c9 new testimage and systemd-image a2c086c78 [CI:DOCS] fix userns.pod.md mapping table 3495aae42 docs: resole hierarchical issues with userns parameters 7be6cd4b0 machine: USB passthrough 02eb907db machine: change getDefaultDevices signature dc0d07c71 document new connection/farm storage location ef8e63cb2 update c/common to latest main 10265661e Fix Quadlet Options=key=value documentation/example 9f38b2215 pkg/machine: make it build for freebsd bcd48a6a7 Bump to v5.0.0-dev dc218a3c6 Bump to v5.0.0-rc1 7e73bb341 Add v4.8, v4.9 to release notes 30fb5de71 Restore Cirrus DEST_BRANCH to main 72f1617fa Bump Go module to v5 c023b789f Re-enable passing a logfile to gvproxy 69d54c482 Bump gvisor-tap-vsock from 0.7.2 to 0.7.3 e20b70c2e Upgrade tests: reenable, but revamped d47979761 Quadlet - do not look for line continuation in comment lines 90c938737 Add functionality for `podman machine set --rootful` f23b144c6 Podman Machine AppleHV CI fixes d5eb8f3b7 AppleHV - make gz ops sparse 85d828148 create machine dirs at discovery b1ce6ef9a podman machine 5 - hyperv 6b02c4894 Podman 5 machine refactor - applehv e8501ca99 Implement generic providers 9bb191df5 [CI:MACHINE]Podman5 QEMU refactor b9bcfa474 podman5 machine reconfig 1 c89dd4a92 Use tmpfs mounts when creating a memory-backed emptyDir volume 3cf2f8ccf Handle more states during refresh 77847bd67 docs: make --seccomp=profile.json clearer 6ca6184ed gomod: Update containers/psgo to 1.9.0 a8b2256cc Set interface name to the network_interface name for macvlan and ipvlan networks 6e0decbe0 Send container stats over API on a per-interface basis 9983e8744 Remove leftover autoremove containers during refresh 43a01d7dc Temporarily ignore windows-linting failures defbf4237 Lint before windows-cross build d44bafc3c Reimplement lint with improved compatibility c7910e75e Show network name network events with podman -remote events 46fe7ef3b use pkg/strongunits from c/common 5de4bd5d1 vendor: update c/common + libhvee to latest main a997d7d81 test/e2e: unskip netavark macvlan/ipvlan tests 7d15bc2ef fix userns + restart policy with slirp4netns fcae70220 Reuse timezone code from containers/common 85904e01f Vendor in containers/common 01a8539ef Warn if cgroups-v1 d3281cf88 Use tmpfs mounts when creating a memory-backed emptyDir volume 2eee3cd81 Corrected markdown documentation for `--stars` 35d1f1221 make podman pod inspect output a json array 26cd01ee5 Do not test CNI in CI ee923358c Vendor c/common 249474a84 drop support for "pasta" as a network name a09889910 Use semi-colon as the field separator for internal volumes-from inspect annotation d217de642 [skip-ci] Update github/issue-labeler action to v3.4 9e3d61a9d fix(deps): update module github.com/docker/docker to v25.0.2+incompatible 39f22c382 Include machine-tests in cirrus-cron jobs 7de64b47f Vendor c/storage main 9fb57d346 Cease using deprecated runc userlookup 91b8f208a Bump to runc main 6a727fdbe Fix updated runc dep breaking pod devices cgroup 2818abf84 Update to runc main, removing pin to an older version 0da405453 Verify the empty mounts.conf does not generate warnings. 1ab55defb Test new CI VMs c5c079932 Scan-secrets: Fix PR forcepush detection condition 0a4beea6d Scanning-secrets: Support new-branch/renovate link 0e9b07a02 Secret-scanning: Fix newly-opened PR conditional 3f3d1e4de Temporarily ignore mac-linting failures d9ad7cbc9 Run lint for mac builds 90d6e92f2 fix(deps): update module github.com/opencontainers/runc to v1.1.12 [security] a06685a54 Farm build should read server registries.conf 28856b6c1 Make leak-detection readable by humans b028f6aa7 add new libpod/images/$name/resolve endpoint f3ab6268a fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.21 74454bf59 rework system connection and farm storage a1c47f029 Return nil health when inspecting containers without healthchecks 6eca2f651 [skip-ci] Update dawidd6/action-send-mail action to v3.11.0 76791a21c pkginstaller: bump Qemu version to 8.2.1 d202acd86 Bump containers/common to latest main 174631f72 Convert SpecGen values to be nullable where possible f8e1ea414 Fix SSH Host argument in tag command during scp. 3136f0fca Don't require engine connection for farm 0ec84b8ec Revert "Enable win podman-machine test failure" 39e53e6dc chore: extract duplicate codes 8d14d4155 Run codespell on code d5bed05df docs: fix podman-manifest-rm header 3592b56c3 docs: fix unclosed code block 6678260eb man: Minor wording tweak for host/connection cd5982e98 quadlet: Add tests for templates dc94a10d6 quadlet: Add documentation about template use to manpage 01dccba50 quadlet: When loading dropin files for foo@instance, also load those for foo@. bb6dec46f quadlet: Support [Install] for templated units 7e1942ed4 systemd.parser: Add GetTemplateParts() 2df994ba0 quadlet: Don't put @ in container names for templated units b73eec88d [CI:DOCS] Packit: podman5 downstream for f40+ 7dcbc75aa [CI:DOCS] minor man page cleanup 202cab612 Fix inspect test that rely on digest ffd7a8998 Update module github.com/google/uuid to v1.6.0 848078c93 Fix auto-update digest comparison 93510a299 bindings: suggest using -tags remote to reduce file size f18ebad1e bindings: pods uses entities/types 668d517af bindings: volumes uses entities/types df6cc8550 bindings: secrets uses entities/types aee733c58 bindings: network uses entities/types c736a8e20 bindings: manifests uses entities/types 34cc55741 bindings: play uses entities/types 528414970 bindings: generate uses entities/types 5ddc82f7a bindings: images uses entities/types 08cd7ce41 specgen: use storageTypes instead of storage package 7aede410d bindings: containers/update uses entities/types 40cc962a5 bindings: containers/exec uses directly Docker type 88fb291a3 bindings: containers/create uses entities/types 6c5704a09 bindings: containers/containers uses entities/types 2d8231efe bindings: containers/commit uses directly Docker type 9f0ea0dc8 bindings: containers/checkpoint uses entities/types b304ac1ea bindings: containers/archive uses entities/types 923123420 domain: move system structs to types sub-package 48a99c651 domain: move Event to types sub-package ee61b130a [CI:DOCS] Update farm docs 90867d987 Fix image filters parsing 7c8c94549 Vendor in latest c/common 27e76f3ee Update module github.com/mattn/go-sqlite3 to v1.14.20 505ed030e [CI:BUILD] rpm: use go-rpm-macros on RHEL 10 56cf5b6df Update module github.com/docker/docker to v25.0.1+incompatible 3e6bfb6e9 Update module github.com/docker/docker to v25 269149a9f Kube Play - allow creating image based volumes cf0b436b9 Deprecate BoltDB, preventing creation of new databases. d3a49fded Add information about --latest support on man pages d792cc448 Warn about whitespace in /etc/subuid and /etc/subgid files 5cc83da1c Pass the OCI runtime an empty entrypoint when there is no entrypoint f53cb9c27 chore: remove unused file [NO NEW TESTS NEEDED] 2e38b9816 Restrict building the pkg/fileserver implementation to windows 17613cc96 podman farm is no longer hidden. Enable doc checks. 0e64e107b Fix Mount Unit Option 660778b2e [skip-ci] Update dawidd6/action-send-mail action to v3.10.0 8d733b6d0 Update module github.com/onsi/gomega to v1.31.1 a2cc04b15 Update module github.com/opencontainers/image-spec to v1.1.0-rc6 a0c914c6d [CI:DOCS]Remove final references to varlink 70c3accf7 Update module golang.org/x/tools to v0.17.0 75790b42b Label host volume mounted content in machine as nfs_t 7472bdb16 Ensure podman temp directory is created on Start as well. a5612bc54 Quadlet: ensure all keys are documented 0c3b5e433 quadlet.go: clean up keys 77389bd05 Add missing check for errors returned from SpecGenToOCI to MakeContainer. 6226b5669 Update module github.com/onsi/gomega to v1.31.0 4c583e7a1 Update module golang.org/x/net to v0.20.0 e757f7631 Update module github.com/onsi/ginkgo/v2 to v2.14.0 728e842db Update module github.com/docker/go-connections to v0.5.0 f9a05717a Update module github.com/vbauerster/mpb/v8 to v8.7.2 c566551e9 gvproxy: Update to 0.7.2 release 1964dbd40 Set up podman machine remote user correctly 1c88b1220 rm pod with podman run if ctr creation failed 79fad91db Add a net health recovery service to Qemu machines e66413b51 CI: reenable tests that are working again 3fef531d9 applehv: return socket path from setupAPIForwarding 90f69891d applehv: Remove unneeded cmd.ExtraFiles assignment ab1316551 fix mongo-driver dependency 971f2eb45 [NO NEW TESTS NEEDED] [FreeBSD] Fix crash when running podman inspect dbe0e6789 Man pages: tighter documenting of --format fields d95710a89 farm build: push built images to registry 992e83d20 machine: Enable console autologin by default f374e07fb AppleHV: update LastUp time b94be90a1 Remove Libpod special-init conditions 46cfc9858 Make --gpus work with nvidia gpus 0e09527bd systests: kube with policies test: fix race f6107f631 Assign separate ports for each appleHV machine eeff3d2de Fix machine inspect test config 7bd5dd42c Fix `podman machine set --rootful` for applehv 585fbe373 Run mac jobs on labeled hosts a60fe34fd Fix `podman system reset` with external containers 522934d5c Replace strings.SplitN with strings.Cut 3714ae342 quadlet: fix quoting of example option values in container unit file documentation 4e4c3e3db cmd: support --config option to locate authentication file 83fa4843f Fix podman machine ssh command 780733415 System tests: fixes for RHEL8 gating failures 380fa1c83 Remove redundant code in generateSpec() a8c2b84c2 docs: update mariadb example d7760b23c labeler: Use `machine` label bccfda505 [CI:DOCS]Periodic update to OWNERS file 3b881d4ec feat: disable pid max in the podman machine c90e9dad7 e2e: reenable warning checks on Debian e3f167f77 Add API forwarding support for HyperV a0a541351 consolidate ignition ready socket unit 8341ca0e7 Remove --latest from podman CMD --help output 06064150e machine: use GlobalDataDir helper 8bdf77aa2 Refactor: replace StringInSlice with slices.Contains 25602a03a fix(deps): update module golang.org/x/sys to v0.16.0 3bfdd7915 Fix init teardown on bad ignition path b01a330d3 Use single persistent ssh key for all machines 260f814bd test/system: add test for mounting issue in the init container f0319d5b7 Error messages not being reported unless more then one error present 49e2589a5 fix(deps): update module golang.org/x/sync to v0.6.0 450862054 xref-manpages script: more regression tests e63513542 Vendor latest c/image 98f332d48 Use parser.UnitFile c728eeb39 Create `pkg/machine/ignition` package 560455cbd docs: fix typos 2a2d0b0e1 chore: delete obsolete // +build lines 92f3bacc6 machine/qemu: A few debugging prints 876b2207e ci/labeler: Add area/machine label f5a986f4e Set applehv as default darwin provider 689d97a1d Quadlet - add StopTimeout key for .container file ac0353aec chore: remove unused link 8c546cf7e CI: bump VMs f9de9809e docs/build_osx.md: Describe external gvproxy 5827ecb42 fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.12 70a53cb76 Quadlet - fix trailing whitespaces handling c315c8e74 Makefile - make sure gitvalidation is installed before calling it 55b08d3ba applehv - fix vm lookup ec5422af5 e2e: Skip journalctl if journald is unavailable 4f94c96b9 remote: fix podman-remote kube play --publish-all 4083ddbb0 Kube Generate - check options in bind-mount-options exist before accessing f10a7bfd4 Add mmap cache option to QEMU mount 2fc862d39 chore(deps): update module github.com/containerd/containerd to v1.7.11 [security] 90b09b586 chore(deps): update module golang.org/x/crypto to v0.17.0 [security] f90b4e79a Tests for xref-helpmsgs-manpages 1322f3193 abi: drop check for IsRootless() 9d0da9d0f Strip key/values of external quotes 4dd58f226 Move golang requirement from 1.18 to 1.20 f169fc76a Allow PublishPorts to be used with [Pod] entry 6a96c8b5f quadlet container support multiple Ulimit options ccc3eb774 Improve compose tests e51bab3c9 Remove duplicated content in docs d76bb978b docs: oci-dir does not support compress as suggested f02fe73c3 Update module github.com/vbauerster/mpb/v8 to v8.7.1 5c4c76b8c Update module github.com/mattn/go-sqlite3 to v1.14.19 db68764d8 Fix Docker API compatibility with network alias (#17167) 7c72d8c2f Fix path to example files 5cc5b4347 Error on HyperV VM start when gvproxy has failed to start 58edd06ff [skip-ci] Update actions/upload-artifact action to v4 d026ccf9a Kube Play - pass arguments to build e4ecd7cca doc cleanup 1c59a9ced CI: safer podman-stop tests 8d94fc156 fix(deps): update module github.com/containers/libhvee to v0.6.0 3a842027a CheckExclusiveArch should use local JSON too c290a561b Update gitleaks baseline w/ harmless findings 446df4379 machine e2e : set default disk size to 11 126670d5d Fix push endpoint stream 232c32bd3 CI: systests: safer isolation in registry & tests f51ff7764 Support podman ps --format '{{ .Label label }}' 36e04599a fix(deps): update module golang.org/x/tools to v0.16.1 5ca255c2c fix(deps): update module github.com/google/uuid to v1.5.0 5c7f74546 Remove deprecated field ContainerState.NetworkStatusOld e5c726daf Make hyperv pass e5a4f00b7 Podman 5 machine config file - Step 1 95eb22c71 Support a machine-test only mode 0f02e43ce cli: podman manifest annotate --annotation use StringArray() d8c3e5b3c cli: podman manifest add --annotation use StringArray() 3e10a6832 cli: podman kube play --configmap use StringArray() 2be4b007b cli: podman kube play --log-opt use StringArray() 48ab4aec3 podman kube play: fix broken annotation parsing e916f49f0 cli: podman kube play --annotation use StringArray() 47b65086e cli: podman image trust set --pubkeysfile use StringArray() cdb178e95 cli: podman push --encryption-key use StringArray() 3e1b9146f cli: podman pull --decryption-key use StringArray() 36e29a843 Fix WSL machine test regressions 6415471dc EMERGENCY: fix broken CI 952c70890 added system test 23f6c4851 Add test for relative idmap mount e7eb97b84 fix checking of relative idmapped mount c823d49fd CI: unskip tests 4590b663a add test for podman exec --env-file 06cee546a cli: podman exec --env-file use StringArray() 7866f6c6e cli: podman run/create --blkio-weight-device use StringArray() 432be1330 cli: podman run/create --device-{read,write}-bps use StringArray() 8de13271c cli: podman run/create --device-{read,write}-iops use StringArray() e763cc62b cli: podman run/create --device use StringArray() 833163ff3 add podman create --label-file test 19571f750 cli: podman run/create --label-file use StringArray() 24d08a94d cli: podman run/create --decryption-key use StringArray() f9b2da3eb [CI:BUILD] override crun-wasm in fcos + podman-next image build 6c2a0196a machine: usb: Fix 'passtrough' typo 201920f6a cli: podman run/create --chrootdirs use StringArray() dbbec9936 cli: podman run/create --log-opt use StringArray() b011aa443 cli: podman run/create --env-file use StringArray() ef10073b5 cli: podman run/create --annotation use StringArray() c5258d463 cli: podman --hooks-dir use StringArray() 12c39ffda cli: podman --module use StringArray() c97560841 cli: add docs for StringArray vs StringSlice options 1ebd507fb Fix regression in e2e machine test suite 95145d957 buildah treadmill: cleaner YAML, uglier script 0d1b90d36 CI: systests: fix flaking --since test 9a963221b [CI:DOCS]use nginx in podman tutorial a1cc99dd4 [CI:DOCS] compat api: fix formatting syntax cac4aa3b4 [skip-ci] Update actions/stale action to v9 19457f382 system service: split out cgroups call into linux specific file 03d411abc libpod: split out cgroups call into linux specific file 32c25c602 pkg/specgen/generate: NOP verifyContainerResources() on freebsd a687c3886 use rootless netns from c/common 3d740674b Improve error handling in win-lib.ps1 d78212a00 Update vendor of containers/storage 98df5b397 Fix user-mode net init flag on first time install 10db6442d [skip-ci] Update actions/setup-go action to v5 8d8fb726f fix broken labeler.yml config 4d2125baf systests: cp: add wait_for_ready 7cc6501cf Add e2e tests for quadlet Entrypoint option 01d397a65 podman: new option --preserve-fd a943be7e8 Kube Play - set ReportWriter when building an image 972ffaca4 Add support for Entrypoint in quadlet 94e67cfc7 fix(deps): update module github.com/containernetworking/plugins to v1.4.0 1f42aff93 systests: debug systemd failures 7f4b0f208 apiv2 tests: fix race f1dc126bf Do not aggregate failing mac test status 2d46d0537 Implement bare-metal Mac M1 podman-machine testing b7a81c1ce Fix command failure not resulting in task failure ca66a90b8 [skip-ci] Update actions/labeler action to v5 b1eccedf5 [CI:DOCS] Update health-start-periods docs bb1307970 fix(deps): update github.com/opencontainers/runtime-spec digest to 0625254 07104fb27 fix podman-systemd.unit.5 Mask/Unmask placement 0a72e3dad fix(deps): update github.com/docker/go-connections digest to fa09c95 7e2a8d58a Quadlet .pod - add support for the Volume Key 212b4c9e9 Quadlet .pod - add support for the Network Key 0d260bdc1 Quadlet - fix pod service file name 04519234e Add support for the userns annotation in kube play f384bdf66 Handle symlinks when checking DB vs runtime configs e14aa09bb Update podman-systemd.unit.5.md 6efba48e2 fix(deps): update github.com/containers/image/v5 digest to 671ab94 4e21ce5ba fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.11 45e53ed7b libpod: Detect whether we have a private UTS namespace on FreeBSD 00d96c2b9 fix(deps): update github.com/openshift/imagebuilder digest to ef2a5fe b1acb43d7 CI: fix system_test_aarch64 dependencies f9e8585c5 Enable win podman-machine test failure 269f8ff06 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.2 c1eea91a0 fix(deps): update common, image, and storage deps 31df9c237 Move the --farm flag to farm build command fa0aa9113 @@option volume.image: be specific that -v only affects RUN 426db6fcc Accept a config blob alongside the "changes" slice when committing e197cf57d container create: use ParseUserNamespace to parse a user namespace setting f95dd21d5 deferred test failures: handle a corner case 42ea21121 Fix locking error in WSL machine rm -f d5cf46e80 support lookup of intermediate IDs in gidmapping/uidmapping options in userns=auto 5b3d82f9b sqlite: set busy timeout to 100s d4ac2f3dd libpod: Allow using just one jail per container on FreeBSD 55373dcce Vendor c/common 3e7041508 Gating test fixes 86296ff8d pkg/bindings: add new APIVersionError error type a5d11f404 Set `BUILDAH_ISOLATION=chroot` within Podman containers f35d1c1c2 Don't update health check status during initialDelaySeconds 8ee262202 quadlet: Support systemd style dropin files 93bcd2a25 fix podman-remote exec regression with v4.8 cf1ad300b utils: close a couple of ReadClosers 4314b1c34 Fix transferring data using tar 7b4d6a295 [CI:DOCS] Fix markdown bugs a2bf8c6d5 refactor(machine): improve machine marker value 572f38c0d Set correct exitcode in remove events and change ContainerExitCode from int to int ptr d7b970a4c sqlite: fix issue in ValidateDBConfig() e26f677b1 sqlite: fix missing Commit() in RemovePodContainers() 248cbc6f6 docs: drop default for tmpfs-mode 6b2f48129 Quadlet - Add support for .pod units c664cfe88 [systests] podman mount no-dereference: complete rewrite 13e548820 [CI:DOCS] performance: document sometimes slow native overlayfs b39f76474 fix(deps): update module github.com/gorilla/schema to v1.2.1 07a7b3ae5 fix(deps): update module golang.org/x/tools to v0.16.0 c8f262fec Use idtools.SafeChown and SafeLchown everywhere 29d18079c [systests] new defer-assertion-failure f07b15105 fix(deps): update module golang.org/x/net to v0.19.0 8e2d5e191 Fix wsl.conf generation when user-mode-networking is disabled d280e481a test/compose: remove debug leftovers ac3d57016 [CI:BUILD] rpm: remove dnsname 386c8d6bf swagger: document play kube annotations param f6b2a1378 Clean up farm-build miscommit c7f6844c0 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.7.0 41a6b992a system: enhance check for re-exec into rootless userns e82465773 Fix Ulimit syntax. fe65f059a libpod: drop dead code cd21973f4 pkg/util: use code from c/storage 98c525cf9 Remove unnencessary pregenerated doc 3ca8b4013 fix(deps): update module github.com/crc-org/vfkit to v0.5.0 da9349ce4 podman machine image from oci updates 75638a72a If API calls for kube play --replace, then replace pod 414642efd [CI:DOCS] Add podman farm build doc ddd6cdfd7 Ignore SELinux relabel on unsupported file systems e85cedf43 Use configured timeout in list_test.go 478afa728 vendor: update containers/{common,storage,image,buildah} 48cf44f23 machine applehv: create better error on start failure 6cb2f9b12 quadlet: Support `healthy` for `Notify` directives 2b95700bc No longer support deprecated legacy QEMU machine structures e40d70cec new 'no-dereference' mount option be2463330 Bump to v5.0.0-dev e75fbe54e Update dependency setuptools to v69 ae9b63fbf Check for imageID, not imageName ff80e40ad Use NewStoreReference instead of ParseStoreReference e9587f5e3 Don't re-assign imageID c85068220 Remove clearly dead code 87cef3654 Update release notes from v4.7 branch 8b2667ef6 More rootless-tutorial fixes 62060f323 Get masked paths and readonly masked patchs from containers/common 4c249a219 Change default QEMU CPU level to `qemu64` on Windows amd64 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* netavark: update to 1.10.3Bruce Ashfield2024-03-152-54/+76
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updated via: bitbake -c update_crates netavark Bumping netavark to version v1.10.3-1-gbe7bd48, which comprises the following commits: d9f9fdc v1.10.3 a88dc00 fix netavark update to not start a new aardvark-dns 664637b Release v1.10.2 8e53052 Release notes for v1.10.2 c70dc8e [CI:BUILD] Packit/rpm: fix aardvark-dns handling 8a7422e Do not perform network namespace detection on AV update a78cfa8 Release v1.10.1 187e0a6 Updated release notes for v1.10.1 851ac90 update to nftables release 0.3 from crates.io 1f60bce DISTRO_PACKAGE: fix incorrect vendored tar archive URL 3328784 Bump to 1.11.0-dev 799c1ae Release 1.10.0 2965880 Release notes for 1.10.0 f20eeeb RPM: update .cargo/config before building fddc681 Add support for isolation to the nftables driver 04538cd build(deps): bump h2 from 0.3.22 to 0.3.24 020cdd2 chore(deps): update rust crate chrono to 0.4.32 b953314 fix(deps): update rust crate env_logger to 0.11.0 a6f8855 chore(deps): update dependency containers/automation_images to v20240102 687f07e Bump nftables-rs to latest commit db43e53 Netavark: nftables support c31d678 fix(deps): update rust crate serde_json to 1.0.111 f59c28d feat: added the --firewall-driver option 1f75d87 Document how to generate a code coverage report for netavark 40a6ee0 fix(deps): update rust crate clap to ~4.4.12 9b3a3d0 fix(deps): update rust crate serde_json to 1.0.110 04f1517 fix(deps): update rust-futures monorepo to 0.3.30 059c0cb fix(deps): update rust crate nispor to 1.2.16 5fe12c3 chore(deps): update rust crate tempfile to 3.9.0 a6afa03 Use tonic::transport::Uri instead of HTTP 33d8d04 chore(deps): update dependency containers/automation_images to v20231208 3faf33f fix(deps): update rust crate tokio to 1.35 4759152 dhcp-proxy: return actual error instead of generic one f571e31 dhcp-proxy: skip set gateway if missing 87f6691 bump netlink-packet-route to 0.18.1 63c34a5 chore(deps): update rust crate once_cell to 1.19.0 ff45e22 fix(deps): update rust crate nispor to 1.2.15 c85d844 fix(deps): update rust crate serde to 1.0.193 3bbc9fd fix(deps): update rust crate clap to ~4.4.10 4f27552 aardvark: show error if process is in wrong netns a4e082d aardvark: remove unessesary unlock lockfile calls 4c58983 fix(deps): update rust crate url to 2.5.0 f588f1d Bump working version to v1.10.0-dev Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* nerdctl: update to v2.0.0-betaBruce Ashfield2024-03-155-284/+372
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updated via: oe-go-mod-autogen.py --repo https://github.com/containerd/nerdctl.git --rev v2.0.0-beta.1 One patch refresh, no other modifications. Bumping nerdctl to version v2.0.0-beta.1-10-g0a20db63, which comprises the following commits: 4420aa67 update BuildKit (0.13.0-rc1) 4acb599e CI: test compilation with Go 1.22 6f1c767e build(deps): bump github.com/tidwall/gjson from 1.17.0 to 1.17.1 07dc8a58 build(deps): bump github.com/opencontainers/image-spec 72a9737d platform: support loongarch64 1b05ff3e Remove the support for the old CNI isolation plugin 4c29703b rootless: fix `Not Authorized(uid): org.fedoraproject.FirewallD1.config` 1eada1af build(deps): bump github.com/opencontainers/runtime-spec fdf7968b Fix soci image push with multi-platforms flags 09168445 build(deps): bump golangci/golangci-lint-action from 3.7.1 to 4.0.0 6fd3fb73 build(deps): bump golang.org/x/net from 0.20.0 to 0.21.0 cad6b2af build(deps): bump golangci/golangci-lint-action from 3.7.0 to 3.7.1 679adcf8 build(deps): bump golang.org/x/crypto from 0.18.0 to 0.19.0 c6236eea build(deps): bump tonistiigi/xx from 1.3.0 to 1.4.0 cfc063cc update slirp4netns (1.2.3) 2d59841b build(deps): bump github.com/rootless-containers/rootlesskit/v2 5733be85 update RootlessKit (2.0.1) ae224f40 build(deps): bump github.com/containerd/console from 1.0.3 to 1.0.4 c797578e build(deps): bump github.com/klauspost/compress from 1.17.5 to 1.17.6 6a229537 `containerd-rootless-setuptool.sh uninstall` cleanup all relevant services 9ae613b3 support build attest 741d06e5 Add support to run systemd in containers (with --systemd flag) b452c64b Support --ipc=container:<id> option 3b45cc18 build(deps): bump github.com/containerd/nydus-snapshotter 5df53e5f update BuildKit (0.13.0-beta3) 37168690 build(deps): bump docker/metadata-action from 5.5.0 to 5.5.1 a3e8cb46 build(deps): bump github.com/containerd/containerd from 1.7.12 to 1.7.13 dc7bbed8 update Kubo (0.26.0) ad02e192 update bypass4netns (0.4.0) 02dc9b44 update runc (1.1.12) 3ab02f69 update containerd (1.7.13) 4892364c [Carry 2535] rootless: support detach-netns mode 328497a8 update RootlessKit (2.0.0) 58cc30c7 update BuildKit (0.13.0-beta2) 5e38fa10 containerd-rootless-setuptool.sh: avoid creating buildkitd.toml 76199746 build(deps): bump github.com/containerd/nydus-snapshotter bd6a915c build(deps): bump github.com/containerd/nydus-snapshotter 1050dd65 build(deps): bump github.com/klauspost/compress from 1.17.4 to 1.17.5 8df3f8a9 containerd/containerd/platforms -> containerd/platforms 0ac36b66 Retag images when tag is already present in nerdctl build 2863b6c7 CI: use standard GHA runner for Windows too 3149671e build(deps): bump github.com/opencontainers/image-spec 3a7948b3 CI: use standard GHA runners 7f88313c build(deps): bump actions/cache from 3 to 4 77234f5a update gpu image to 12.3 2410e1f6 go.mod: github.com/rootless-containers/rootlesskit/v2 v2.0.0 d307fda9 build(deps): bump github.com/containerd/containerd from 1.7.11 to 1.7.12 4af27bd1 go.mod: module github.com/containerd/nerdctl/v2 5ee55f28 add allow option in build 410d5915 Document that profiles are supported 05059400 build(deps): bump github.com/rootless-containers/bypass4netns 3b5717be containerd-rootless-setuptool.sh nsenter: inherit RootlessKit env 8e09af1e shfmt containerd-rootless-setuptool.sh a71209f8 fix: return error if volume create failed d0179a63 build(deps): bump golang.org/x/net from 0.19.0 to 0.20.0 aa11ded3 build(deps): bump github.com/docker/go-connections from 0.4.0 to 0.5.0 3fa62388 build(deps): bump docker/metadata-action from 5.4.0 to 5.5.0 ce955db1 build(deps): bump golang.org/x/sync from 0.5.0 to 0.6.0 2053c384 build(deps): bump golang.org/x/term from 0.15.0 to 0.16.0 b0458662 logging: respect ctx 9afd9e3e update runc (v1.1.10) 695f11a2 cniNetworkManager: move Windows-specific variable to `_windows.go` c44427fb nerdctl rm: fix printing `error="<nil>"` on warning df43d623 build(deps): bump go.uber.org/mock from 0.3.0 to 0.4.0 f60bbc65 build(deps): bump github.com/containerd/cgroups/v3 from 3.0.2 to 3.0.3 f59c2bed Add docs for trouble shooting nvidia gpu operator 970fed9f Remove "soci image rpull" from testing suite 843d8600 fix typo in filename e4bf8b99 Fix #2199 to allow users to bind a named pipe on Windows. 392daca1 go.mod: clean up c2d71273 fix groupadd in compose ea3a4e02 build(deps): bump github.com/awslabs/soci-snapshotter ffd76b5b build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 ef00a6d6 build(deps): bump docker/metadata-action from 5.3.0 to 5.4.0 255716ea docs: Fix typo in command-reference.md b6436017 fix etchosts in host network 990d7eca implement persistent logging for contaiers running in foreground ae004af5 fix deadlinks in the notation doc e538124a build(deps): bump github.com/pelletier/go-toml/v2 from 2.1.0 to 2.1.1 24aa6e27 update BuildKit (0.12.4) de985457 update containerd (1.7.11) 139022f8 build(deps): bump github.com/containerd/containerd from 1.7.10 to 1.7.11 8567678e Dedup mounts for /etc/hosts /etc/resolv.conf a56dcfac build(deps): bump actions/setup-go from 4 to 5 a4c33929 build(deps): bump github.com/containerd/nydus-snapshotter 06628f63 nerdctl run: reset the default value of limits. f6004169 build(deps): bump docker/metadata-action from 5.2.0 to 5.3.0 f2030d29 update CNI plugins (1.4.0) 722040c4 build(deps): bump github.com/containernetworking/plugins f709735a build(deps): bump github.com/klauspost/compress from 1.17.3 to 1.17.4 198797f2 build(deps): bump docker/metadata-action from 5.0.0 to 5.2.0 0e73e3ed update containerd (1.7.10) 21dc100a fix typo ed633b3b build(deps): bump github.com/containerd/containerd from 1.7.9 to 1.7.10 71bf53b3 update golangci-lint (1.55.2) a8aaac29 build(deps): bump golang.org/x/net from 0.18.0 to 0.19.0 d6c7f0f3 build(deps): bump golang.org/x/crypto from 0.15.0 to 0.16.0 aeeb338b update Nydus (2.2.4) e0808016 update Kubo (0.24.0) ec728349 update containerd (1.7.9) 6e5c7f76 build(deps): bump github.com/containerd/accelerated-container-image 2d508151 Fix nerdctl system info : sort problem. afe990db remove incompatible in TestComposeExecTTY 8e9ca2b1 build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1 30eaca09 build(deps): bump github.com/compose-spec/compose-go 76c57d20 fix: typo 51d09871 build(deps): bump github.com/klauspost/compress from 1.17.2 to 1.17.3 9b62e889 Add SOCI index digest flag d7676628 docs: read-only (RRO) bind-mount have been support by docker 77d1fd64 build(deps): bump github.com/containerd/containerd from 1.7.8 to 1.7.9 ca8c1180 build(deps): bump github.com/compose-spec/compose-go c6a4bfeb build(deps): bump docker/build-push-action from 5.0.0 to 5.1.0 0d934074 Deflake TestContainerListWithFilter 33350146 build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 411f9daf build(deps): bump github.com/fatih/color from 1.15.0 to 1.16.0 a7cdd348 build(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 651cc8cb build(deps): bump golang.org/x/net from 0.17.0 to 0.18.0 6c560bcf [build][iidfile] Setthe same permissions as docker d08f4c47 build(deps): bump golang.org/x/text from 0.13.0 to 0.14.0 d9d684bf chore(test): remove some incompatible in compose test a78b50ef Add diff command to docs & fix usage message 3d1a5f11 Use prepared Stdout d03a5993 Fix wrong comment of completion 00c0d3b7 Fix missing error handling cc52ea45 Support diff command's autocompletion da85b403 Remove diff test from windows 2fcd3c4c Add comment to diff test d96ad3b4 Add `diff` command 0008cd6c build(deps): bump github.com/Microsoft/hcsshim from 0.11.2 to 0.11.4 a9e5ea43 update containerd-fuse-overlayfs (1.0.8) ae12819e Fix unstable sort of container list in compose 0e643d2b update imgcrypt (1.1.9) 2c57b5ca update BuildKit (0.12.3) 9c1ee066 update runc (1.1.10) 2c3cb4a4 update containerd (1.7.8) 2af4cef9 nerdctl ps: implement `--format {{.Label "foo"}}` 3dd95cd4 Dockerfile: stargz-snapshotter v0.15.1 b5da5ea3 fix add-host overwritten 9143054e build(deps): bump github.com/containerd/stargz-snapshotter/ipfs 147cbbef build(deps): bump github.com/containerd/imgcrypt from 1.1.8 to 1.1.9 e6e24c21 build(deps): bump github.com/containerd/stargz-snapshotter 1138bfbe nerdctl-full: compile ipfs (Kubo) as a static binary ac0ceb5a nerdctl-full: compile containerd as static binaries a6a2d917 Support IPv6 for nerdctl network 55987ae9 Add support to CernVM-FS Snapshotter fff98e35 build(deps): bump github.com/docker/cli 792a0cb1 support running container with network id 63b8df5e build(deps): bump github.com/containerd/containerd from 1.7.7 to 1.7.8 59640025 build(deps): bump github.com/docker/docker 161bf205 compose_config_test: workaround for Docker Compose v2.23.0 0b977127 Vagrantfile.freebsd: pin generic/freebsd13 to version 4.3.2 ae17b486 build(deps): bump google.golang.org/grpc from 1.56.2 to 1.56.3 caea0f91 fix ps format names 35966845 support ip-masq option 5d18f61d build(deps): bump github.com/klauspost/compress from 1.17.1 to 1.17.2 1c41c10f Replace logrus.SetOutput() with log.L.Logger.SetOutput() 10854249 docs: minor soci push fix a97162ed build(deps): bump github.com/containerd/nydus-snapshotter 8a5177c7 build(deps): bump github.com/containerd/continuity from 0.4.2 to 0.4.3 0af5badb build(deps): bump tonistiigi/xx from 1.2.1 to 1.3.0 f51e06d2 build(deps): bump github.com/compose-spec/compose-go 35a7920a build(deps): bump github.com/Microsoft/hcsshim from 0.11.1 to 0.11.2 8c2610a1 build(deps): bump github.com/mattn/go-isatty from 0.0.19 to 0.0.20 6c8ea8bc build(deps): bump actions/checkout from 4.1.0 to 4.1.1 41f2647a build(deps): bump github.com/klauspost/compress from 1.17.0 to 1.17.1 63d446f1 Use https://github.com/containerd/log for logging 04a35f82 build(deps): bump github.com/containerd/accelerated-container-image bc62b220 fix: typo 5d4f0325 nerdctl compose: fix --env-file 5a874813 build(deps): bump github.com/containerd/nydus-snapshotter ff0fa841 chore: unnecessary code a2cfe916 build(deps): bump golang.org/x/net from 0.16.0 to 0.17.0 3b09b4cb fix: call client close 3b6cf701 go.mod: github.com/containerd/containerd v1.7.7 b6d76eae dockerconfigresolver: nullify DefaultTLS when DefaultScheme == "http" e590756c update gotestsum (1.10.0) 98d5724e update Kubo (0.23.0) 02a59fc5 update containerd-fuse-overlayfs (1.0.7) 869dec83 update slirp4netns (1.2.2) ea86ea87 update containerd (1.7.7) abec5ef0 containerd/containerd/log -> containerd/log 93cb4802 chore: Comment should with an optional leading article d5dd50ce build(deps): bump golang.org/x/net from 0.15.0 to 0.16.0 3006f23e release.yml: migrate from `hub` to `gh` 6664661c build(deps): bump golang.org/x/crypto from 0.13.0 to 0.14.0 11a43ac4 build(deps): bump golang.org/x/sync from 0.3.0 to 0.4.0 980019a2 build(deps): bump golang.org/x/term from 0.12.0 to 0.13.0 fdf4b2c0 build(deps): bump golang.org/x/sys from 0.12.0 to 0.13.0 34f73335 build(deps): bump github.com/containerd/nydus-snapshotter c1fd6782 Fix port allocate iptables regex 6b5c43e2 CNI: prioritize `/opt/cni/bin` over `/usr/lib/cni` e230c3cf build(deps): bump github.com/containerd/nydus-snapshotter 88188be6 docs: minor fixes to soci documentation 72665a07 update toml to v2 8ce38135 fix: client close connection 004a05a8 Support zstd (non-chunked) conversion 7291147c build(deps): bump github.com/tidwall/gjson from 1.16.0 to 1.17.0 3b644b19 build(deps): bump actions/checkout from 4.0.0 to 4.1.0 a9fb4c56 chore: Comment should with an optional leading article 4b5129b5 build(deps): bump github.com/Microsoft/hcsshim from 0.11.0 to 0.11.1 1b5a9867 add missing flags for compose ps 20f929d1 add featrue network filter c407ceb5 build(deps): bump github.com/compose-spec/compose-go 357113b4 nerdctl version: skip inspecting rootless daemon if the daemon is not running 42cfd144 docs: add SOCI snapshotter guideline in README.md 65334cc7 build(deps): bump github.com/klauspost/compress from 1.16.7 to 1.17.0 98e87997 build(deps): bump gotest.tools/v3 from 3.5.0 to 3.5.1 6db2c459 update containerd (1.7.6) 4c82cde7 feat: support push with soci dd03ebea nerdctl compose cp: support rootless 69a1833e compose: silence "build.config should be relative path" warning 1605587b Implement `nerdctl compose exec -T` a08e668f docs: fix docs for supported quiet flag of push command 76dd7065 build(deps): bump github.com/opencontainers/image-spec 78c855e0 add feature nerdctl compose cp ce611af1 build(deps): bump github.com/containerd/nydus-snapshotter 9d4e5d68 seccomp: rename "default" to "builtin" to follow Docker 23 be2acea7 update golangci-lint (1.54.2) ba3c6b91 update soci-snapshotter (0.4.0) b5b1f2a1 update Nydus (2.2.3) c5794dd6 update Kubo (0.22.0) ee1ac8f0 update fuse-overlayfs (1.13) bdb2c006 update slirp4netns (1.2.1) 70b1ba31 update RootlessKit (1.1.1) 822f1154 update imgcrypt (1.1.8) bcface07 update BuildKit (0.12.2) e4a2ceb7 update containerd (1.7.6) 1e0b0bbf image: dedup same platform entry 6d77b40b build(deps): bump github.com/containerd/containerd from 1.7.5 to 1.7.6 c373e1bc build(deps): bump docker/login-action from 2.2.0 to 3.0.0 81f4dba5 build(deps): bump docker/setup-qemu-action from 2 to 3 765711c4 build(deps): bump docker/metadata-action from 4.6.0 to 5.0.0 ebede8d0 build(deps): bump docker/setup-buildx-action from 2 to 3 03cb689c build(deps): bump docker/build-push-action from 4.2.1 to 5.0.0 68b58d8a build(deps): bump github.com/compose-spec/compose-go 248b2b3a remove useless option from containerd-rootless-setuptool fe87f8b7 build(deps): bump docker/build-push-action from 4.1.1 to 4.2.1 bc7edb76 MAINTAINERS: add Kay Yan (yankay) as a REVIEWER a976067c fix bash completion of volume rm 2cbb162b build(deps): bump github.com/cyphar/filepath-securejoin e1bad09d adjust writers fmt a80e0eb1 fix container_create_windows_test b598b583 add missing zero-length list check cdc917eb build(deps): bump github.com/docker/cli 84309f24 build(deps): bump github.com/docker/docker 1bb407c0 build(deps): bump golang.org/x/net from 0.14.0 to 0.15.0 cf6ba305 build(deps): bump golang.org/x/term from 0.11.0 to 0.12.0 c565933b build(deps): bump golang.org/x/text from 0.12.0 to 0.13.0 c2b9f877 build(deps): bump golang.org/x/sys from 0.11.0 to 0.12.0 f7752221 build(deps): bump actions/checkout from 3.6.0 to 4.0.0 2739c8fc fix nerdctl run -v when host folder does not exist for bind mounts 1352ac0d build(deps): bump github.com/awslabs/soci-snapshotter 6e542c3a Makefile: install docs da05f926 Makefile: fix overriding GO command fa9e4edb Makefile: add GO_BUILD_FLAGS variable 4dbe249e Makefile: derive BINDIR from PREFIX d30f0788 fix: grammatical errors 79a15782 fix: succeeded typo c6dd2f5f build(deps): bump github.com/containerd/containerd from 1.7.3 to 1.7.5 9a41384b build(deps): bump actions/checkout from 3.5.3 to 3.6.0 a0aac07a Support copying out of volumes in stopped containers 31d5d4ad Fix typo 4dcef6e0 pkg/version: fulfill fields from `debug/buildinfo` 1e5baaaf Fix usage of `errors.Join` 91295033 build(deps): bump github.com/compose-spec/compose-go 6ed3118e build(deps): bump github.com/containerd/imgcrypt from 1.1.7 to 1.1.8 ccd5be5d build(deps): bump golangci/golangci-lint-action from 3.6.0 to 3.7.0 0844a51e support test integration docker 23 compatibility 42c312a8 support volume create anonymous 89bb5bc3 update runc (1.1.9) 5130ccbf Remove dependency on github.com/hashicorp/go-multierror b98ce6a6 build(deps): bump github.com/compose-spec/compose-go 3bc8f05b build(deps): bump github.com/tidwall/gjson from 1.15.0 to 1.16.0 56b0a7cb Update to Go 1.21 in CI ac0146f9 build(deps): bump github.com/fahedouch/go-logrotate from 0.1.3 to 0.2.0 424bf4ed FreeBSD: Linux Container Support and BuildKit Integration 0d631726 build(deps): bump golang.org/x/net from 0.13.0 to 0.14.0 569fe4e3 CI: Windows: enable Hyper-V containers 3df165d0 fix attach help is messed up dd60cfe6 build(deps): bump golang.org/x/crypto from 0.11.0 to 0.12.0 2888c388 CI: move Windows tests to GHA 855da424 CI: move FreeBSD tests to GHA 65934e92 test-integration-docker-compatibility: install Docker 20.10 cf7b7428 build(deps): bump github.com/coreos/go-iptables from 0.6.0 to 0.7.0 b8a8100e .cirrus.yml: fix FreeBSD CI failure be2ba3ef build(deps): bump golang.org/x/net from 0.12.0 to 0.13.0 f0140a5c feat: add 'nerdctl container attach' 35296268 Bump containerd to 1.7.3 7f5bca18 Remove special case for Windows when mounting view f57cb241 Add lease to prevent containerd GC Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: update to v1.28.7Bruce Ashfield2024-03-154-524/+1250
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Generated with: ./scripts/oe-go-mod-autogen.py --repo https://github.com/rancher/k3s.git --rev v1.28.7+k3s1 plus one manual modification to relocation.inc: - sigs.k8s.io/kustomize/kustomize/v5:sigs.k8s.io/kustomize/kustomize/v5:force + sigs.k8s.io/kustomize/kustomize/v5:sigs.k8s.io/kustomize/kustomize/v5/kustomize:force Bumping k3s to version v1.28.7+k3s1, which comprises the following commits: 051b14b248 Fix netpol startup when flannel is disabled 4c1b91e3f9 Use 3/2/1 cluster for split role test 16ad3bc39c Change default number of etcd nodes in E2E splitserver test 9c0e5a5ff8 Rename AgentReady to ContainerRuntimeReady for better clarity 80baec697f Restore original order of agent startup functions f19db855bf remove e2e logs drone step (#9516) 25e12bc10c [Release-1.28] Fix drone publish for arm (#9508) 9f78e474d7 Update Kubernetes to v1.28.7 (#9492) 1ca64a81be [Release-1.28] Support PR testing installs (#9469) 45860105bb [Release-1.28] Test_UnitApplyContainerdQoSClassConfigFileIfPresent (#9440) 78543f4850 [Release-1.28] Enable longer http timeout requests (#9444) 3d0674ad1c Bump kine and set NotifyInterval to what the apiserver expects a3770d21e2 Expose rootless containerd socket directories for external access 0259b8e535 Expose rootless state dir under ~/.rancher/k3s/rootless 865b454a05 Don't verify the node password if the local host is not running an agent 493ebb9517 Fix ipv6 endpoint address selection for on-demand snapshots cd7c557754 Fix issue with coredns node hosts controller 3d46c7da70 Bump CNI plugins to v1.4.0 b620348998 Add check for etcd-snapshot-dir and fix panic in Walk 6b2c1ecb0f Retry startup snapshot reconcile c2c9a265bf Fix excessive retry on snapshot reconcile dda9780f23 Update Kube-router to v2.0.1 a922a0e340 allow executors to define containerd and docker behavior 034ee89344 Update flannel to v0.24.0 and remove multiclustercidr flag (#9075) 6ff57ab749 Bump flannel version 25c7208b7e Changed how lastHeartBeatTime works in the etcd condition f3b4effb32 Runtimes refactor using exec.LookPath 5eb278b838 [Release-1.28] Auto Dependancy Bump (#9419) 190864259e Consistently handle component exit on shutdown 5857584463 Bump cri-dockerd 35ef1cec92 Bump Local Path Provisioner version (#8953) (#9426) c9f49a3b06 Bump helm-controller to fix issue with ChartContent 2f9788ab55 Bump runc and helm-controller versions 14fdacb85b gofmt config_test.go aebdccfae5 Fix issues with certs.d template generation 39a0001575 Use `ipFamilyPolicy: RequireDualStack` for dual-stack kube-dns (#8984) c236c9ff77 Update to v1.28.6 (#9260) 6224ea62af Error getting node in setEtcdStatusCondition 470bcd1bff Move proxy dialer out of init() and fix crash 04ce0ac0a9 Rebase & Squash (#9070) 4724315b8c Pin opa version for missing dependency chain (#9216) 2858f89a5b Bump quic-go for CVE-2023-49295 b04e18c4a0 Enable network policy controller metrics bda4b73493 Add e2e test for embedded registry mirror f3c6250b28 Add embedded registry implementation ef4e7ae143 Add server CLI flag and config fields for embedded registry ece564ec93 Add ADR for embedded registry ea66fe65b4 Propagate errors up from config.Get a62ee4fd0d Move registries.yaml load into agent config ace1714e0c Pin images instead of locking layers with lease 3b863906e0 Fix OS PRETTY_NAME on tagged releases ee85990a83 Add runtime checking of golang version 3be858a878 Add more paths to crun runtime detection (#9086) fa798ba272 Add support for containerd cri registry config_path f95ab7aaf9 Fix nil map in full snapshot configmap reconcile fe19faaf9a Handle logging flags when parsing kube-proxy args fc3136f54f Fix the OTHER log message that prints the wrong variable 9d5950741e Dockerfile.dapper: set $HOME properly 3248fd05c7 Add ServiceLB support for PodHostIPs FeatureGate a503d13591 Remove GA feature-gates (#8970) 53c6e05ef5 Handle etcd status condition when cluster reset and disable etcd 3d08cfd0fe Wait for taint to be gone in the node before starting the netpol controller 90367d80b0 Add a retry around updating a secrets-encrypt node annotations (#9125) 5b2d1271a6 Only publish to code_cov on merged E2E builds (#9083) 19b361f30b Update to v1.28.5-k3s1 (#9081) 71a3c35fb7 Bump containerd to v1.7.11 08509a2a90 Allow setting default-runtime on servers b9c288f702 Bump containerd/runc to v1.7.10-k3s1/v1.1.10 03532f7c0b Added runtime classes for crun/wasm/nvidia 9c6ba42ca0 Nov 2023 stable channel update (#9022) 79438cecaa Modify CONTRIBUTING.md guide d34550fb2f Fix overlapping address range 6ba6c1b65f remove s390x from manifest (#8998) 022cf6d51f remove s390x steps temporarily since runners are disabled 3f23723035 Update to v1.28.4 (#8920) 6d3a92a658 Print key instead of file path in snapshot metadata log message b23e70d519 Don't apply s3 retention if S3 client failed to initialize a92c4a0f17 Don't request metadata when listing objects 96ebb96317 Fix flakey dynamic-cert.json in cert rotation e2e test 611ac0894c Revert e2e pipeline depends_on change 3a6284e2b9 Bump dynamiclistener to fix secret sync race 1e0a7044cf Reorder snapshot configmap reconcile to reduce log spew during initial startup e53c189587 Handle nil pointer when runtime core is not ready in etcd 6c544a4679 Add jitter to client config retry fa4c180637 Update install.sh sha256sum (#8885) da0593bcf9 More improves for K3s patch release docs (#8800) abc2efdd57 Disable helm CRD installation for disable-helm-controller (#8702) 07ee854914 Tweaked order of ingress IPs in ServiceLB (#8711) 7ecd5874d2 Skip initial datastore reconcile during cluster-reset 2088218c5f Fix issue with snapshot metadata configmap fd8db56d5a Fix wrong warning from restorecon in install script (#8871) 78ea593780 General updates to README (#8786) 19fd7e38f6 enh: Force umount for NFS mount (like with longhorn) b47cbbfd42 add agent flag disable-apiserver-lb (#8717) 30c8ad926d QoS-class resource configuration 32a1efa408 Bump kine to fix multiple issues a26441613b add: timezone info in image 0011eb5ead optimize: Simplify and clean up Dockerfile (#8244) 8f7a8b23b7 Improve dualStack log f5920d7864 Add warning for multiclustercidr flag (#8758) ba5fcf13fc Wasm shims and runtimes detection 875a9d19c6 Added ADR for etcd status c5cd7b3d65 Added etcd status condition 022c49242d update channels latest to v1.27.7+k3s2 (#8799) bbafb86e91 Don't use iptables-save/iptables-restore if it will corrupt rules 9e13aad4a8 Update traefik to fix registry value (#8792) 1ae053d944 Upgrade traefik chart to v25.0.0 (#8771) f575a05be2 fix: Access outer scope .SystemdCgroup (#8761) c7c339f0b7 chore: Bump Trivy version (#8739) 1e99a46256 chore: Update sonobuoy image versions (#8710) 9377accd9e update stable to v1.27.7+k3s1 (#8753) 112e1339b7 Restore selinux context systemd unit file (#8593) 49411e7084 Don't try to read token hash and cluster id during cluster-reset 6aef26e94b Update to v1.28.3 (#8682) 5b6b9685e9 Manually requeue configmap reconcile when no nodes have reconciled snapshots 3db1d33282 Re-enable etcd endpoint auto-sync b8dc95539b Fix CloudDualStackNodeIPs feature-gate inconsistency 0c9bf36fe0 [K3s][Windows Port] Build script, multi-call binary, and Flannel (#7259) aaf8409096 Use version.Program not K3s in log (#8653) 9597ea1183 Start etcd client before ensuring self removal 2291d6d079 Add etcd-only/control-plane-only server test 7bb4a826af Update kube-router package in build script 3abc8b82ed Bump traefik, golang.org/x/net, google.golang.org/grpc 1ffb4603cd Use IPv6 in case is the first configured IP with dualstack 3d25e9f66c Switch build target from main.go to a package. (#8342) 7c5b69ca1d Fix etcd snapshot integration tests d885162967 Add server token hash to CR and S3 550ab36ab7 Switch to managing ETCDSnapshotFile resources 5cd4f69bfa Move snapshot delete into local/s3 functions a15b804e00 Sort snapshots by time and key in tabwriter output 7464007037 Store extra metadata and cluster ID for snapshots 80f909d0ca Move s3 snapshot list functionality to s3.go 8d47645312 Consistently set snapshotFile timestamp f1afe153a3 Tidy s3 upload functions 2b0e2e8ada Elide old snapshot data when apiserver rejects configmap with ErrRequestEntityTooLarge 676b00aa0e Move etcd snapshot code into separate file 500744bb94 Add new CRD for etcd snapshots 64107b54e4 Minor updates as per design review discussion 22065affa2 Add ADR for etcd snapshot CRD migration 9bb1ce1253 Bump busybox to v1.36.1 5fe4f6709a Bump containerd to v1.7.7-k3s1 7d38b4a3db E2E Domain Drone Cleanup (#8579) dface01de8 Server Token Rotation (#8265) ced25af5b1 Fixed tailscale node IP dualstack mode in case of IPv4 only node ba750e28b7 [v1.28] System agent push tags fix (#8568) e33359d375 Update install.sh.sha256sum a6acdd0d75 Fix slemicro check for selinux (#8526) e82b37640a Network defaults are duplicated, remove one d4a487d83f Fix spellcheck problem (boostrap ==> bootstrap) f2c7117374 Take IPFamily precedence based on order 0b23a478cf ipFamilyPolicy:PreferDualStack for coredns and metrics-server 021c5b291b Improve release docs - updated (#8414) 0e5c760625 Pass SystemdCgroup setting through to nvidia runtime options 1e38b5d904 Don't ignore assets in home dir if system assets exist fe18b1fce9 Add --image-service-endpoint flag (#8279) 79b44cee29 Create and validate install.sh signatures (#8312) ad206310d1 Update kube-router b6ab24c4fd Added error when cluster reset while using server flag b010c941cf Fix .github regex to skip drone runs on gh action bumps (#8433) d349c9db6c Added cluster reset from non bootstrap nodes on snapshot restore e2e test d0ab4ef26b Added advertise address integration test 172a7f1d1a Fix gofmt error 8705a88bf4 Clear remove annotations on cluster reset; refuse to delete last member from cluster 002e6c43ee Reorganize Driver interface and etcd driver to avoid passing context and config into most calls 890645924f Don't export functions not needed outside the etcd package a3c52d60a5 Skip creating CRDs and setting up event recorder for CLI controller context 391e61bd72 Use admin kubeconfig instead of supervisor for etcd snapshot CLI bd9dad87d5 Typo fix 5c5d957e73 Set server-token adr to accepted 6398c38690 Server token rotation ADR 8c73fd670b Disable HTTP on main etcd client port 12459fca97 Add extraArgs to tailscale 8c197bdce4 Include the interface name in the error message 56abe7055f add link to drone in documentation (#8295) e1706875f4 Update channel latest to v1.27.6+k3s1 (#8397) 66cb1064d1 Add context to flannel errors d3f7632463 Fix error reporting Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-tools: update to v1.29.0Bruce Ashfield2024-03-151-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping cri-tools to version v1.26.0-489-g17b4dd65, which comprises the following commits: 949545e1 Readd the logPath to the list 5afb4c73 Matching kubelet's containerLogManager.rotateLog() glob pattern 09b9303e Applying comment 64e373b2 Changing option to keep-logs and inverting default 67679ee3 1197: adding rm --dl (--deletelog) option edccf499 Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc dee3de0a Bump go.opentelemetry.io/otel/sdk from 1.23.1 to 1.24.0 af4707c2 Don't remove pinned images on image prune fd867e1c A bunch of changes: * handle regexp error * better usage info * better documentation 98843b15 Implemented the `--filter` flag for `images` command. 196f9421 Update Kubernetes to v1.30.0-alpha.2 376d9251 Don't skip windows tests 2529cea9 Don't fail-fast containerd test matrix 58cfa5b3 Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc 3afa43ab Bump golang.org/x/net from 0.20.0 to 0.21.0 f6e57a25 Add support for OTEL tracing 9d1a1a1d Bump golang.org/x/term from 0.16.0 to 0.17.0 e9842e43 Bump golang.org/x/sys from 0.16.0 to 0.17.0 325307a6 Bump github.com/docker/docker 16c59bdc Bump github.com/docker/docker 32452408 Bump github.com/opencontainers/runc from 1.1.11 to 1.1.12 971120b9 Replace dockershim with containerd c4276c46 Bump github.com/google/uuid from 1.5.0 to 1.6.0 44e8b572 Bump github.com/onsi/gomega from 1.30.0 to 1.31.1 4c9f5e69 Bump github.com/docker/docker 0d805e78 Add corresponding man page 8e04084e docs: state that crictl is GA ade93e9f Bump actions/cache from 3 to 4 8badaef0 Bump github.com/onsi/ginkgo/v2 from 2.14.0 to 2.15.0 1f0b5766 Bump golang.org/x/net from 0.19.0 to 0.20.0 4cf8a2d2 Update Snyk configuration file to exclude vendor directory with a prefix 2522d997 Bump github.com/onsi/ginkgo/v2 from 2.13.2 to 2.14.0 f43276b7 Bump github.com/urfave/cli/v2 from 2.26.0 to 2.27.1 7f90228b Bump golang.org/x/term from 0.15.0 to 0.16.0 8010f920 Bump github.com/opencontainers/runc from 1.1.10 to 1.1.11 a7b83b1c Provide precompiled manpage version 43f44445 Bump actions/upload-artifact from 3 to 4 746fa3dc Update vendored Kubernetes to v1.29.0 51e7735f Add a .snyk file to configure the Snyk security scanner ddb95e1f Bump github.com/google/uuid from 1.4.0 to 1.5.0 b0129e72 Vendor Kubernetes v1.29.0-rc.2 87e7961e Bump google-github-actions/setup-gcloud from 1 to 2 ed48a82e more detailed output for split filesystem b12bab01 Drop support for `linux/arm` platform 7e24e264 Bump actions/setup-go from 4 to 5 34721f47 Add darwin/arm64 to release binaries 8643906d add support container runtime use systemd cgroups c5e443ae adding imagefsinfo endpoint for both container and image filesystems 310528b8 Bump github.com/urfave/cli/v2 from 2.25.7 to 2.26.0 83fc34e9 Update golangci-lint to v1.55.2 f409932e Update vendored Kubernetes to v1.29.0-rc.1 58d450ce Bump github.com/onsi/ginkgo/v2 from 2.13.1 to 2.13.2 31cda1d3 Bump golang.org/x/net from 0.18.0 to 0.19.0 6245bad2 Bump golang.org/x/term from 0.14.0 to 0.15.0 950fb1b6 add cases.NoLower to cases.Title function c98c5ba4 add unit tests CI for crictl e992c1d4 add container_test.go 8cf5fc4c ci: Switch to ubuntu 22.04 and go 1.21 01dc72dd Bump github.com/onsi/ginkgo/v2 from 2.13.0 to 2.13.1 16fb7a3f Bump golang.org/x/net from 0.17.0 to 0.18.0 a6344e02 Bump golang.org/x/term from 0.13.0 to 0.14.0 135c8ad0 Bump github.com/onsi/gomega from 1.29.0 to 1.30.0 5933733c Bump golang.org/x/sys from 0.13.0 to 0.14.0 5d34c252 Bump golang.org/x/text from 0.13.0 to 0.14.0 f3aaa5c0 Update to Ubuntu 22.04 445aa46f Bump github.com/opencontainers/runc from 1.1.9 to 1.1.10 b45f7c09 Bump github.com/google/uuid from 1.3.1 to 1.4.0 320ad0eb Bump github.com/docker/docker 9a3c60e9 Bump github.com/onsi/gomega from 1.28.1 to 1.29.0 28556ddd Bump sigs.k8s.io/yaml from 1.3.0 to 1.4.0 935d5c3e Fix CRI-O get script location 63ff0e12 Bump github.com/onsi/gomega from 1.28.0 to 1.28.1 f570bc09 Bump golang.org/x/net from 0.16.0 to 0.17.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-compose: update to v2.24.6Bruce Ashfield2024-03-154-451/+396
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping compose to version v2.21.0-154-gce1ddb6c, which comprises the following commits: c665c53c bump buildx to v0.12.0 and adapt code to changes a39cf75e build(deps): bump github.com/compose-spec/compose-go 46ba9c99 build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 5c5d30c6 build(deps): bump github.com/docker/cli 36fa8d4e build(deps): bump github.com/docker/docker 2384635e build(deps): bump github.com/moby/buildkit from 0.12.2 to 0.12.3 2ba5e4c1 in watch mode force pull policy to build for services with both build and develop attributes This default behaviour will force a rebuild of the service images at watch process startup and be sure containers will be in sync with the local source code b1a26dac Assume /src/pkg/compose/testdata absolute workingdir to make tests reproducible 5e77ae92 avoir use of []types.ServiceConfig f5572201 identify services to build and don't display 'building' if none 8e1b3236 fix --remove-orphans not to consider disabled services as orphaned 7cb1f8ba introduce RuntimeVersion for code to check container runtime supports required features cb01186c push also consider build.tags 9c4efbdd Strip project prefix from docker-compose up output 8ea7c9e0 Make it context aware and add test skipping options c1694360 render quiet after filtering applied 254a94b0 bump golang to version 1.21.4 cf608fa9 bump compose-go to v1.20.1 426377a4 reject compose file using `secrets|configs.driver or template_driver` 493f6c80 skips flaky e2e tests on watch and attach 646a8fc0 fix docker/compose#11170 add newline in cmd/compose/build.go fmt.Fprint 2945532f fix --pull documentation e5cd265a improve watch configuration logging Add action associated to each managed path d646d757 lint 71237ef6 do not resolve cache dir until remote resource is in use 0d905a89 add a copyright notice with original author b847c7f5 implement runtime file selection 5e3d8f67 re-implement cache folder detection 67279088 introduce --resolve-image-digests for publish to seal service images by digest 4cd61957 fix build 0d4cbbdb fix 9631a49d ENGDOCS-1764 328ca3f2 add docs upstream validation workflow e1bbfc63 build(deps): bump go.uber.org/goleak from 1.2.1 to 1.3.0 616bba0a linter errors fixed ee6e3c2a NetworkList to NetworkInspect for ID search c7e31a3c Squashing feature branch commits in order to add signoff message. 704a9fd3 Use project.ServiceNames() if no service specified in hash d9e0e42d Add branch configuration for pull_request trigger c48e3c4a Initial codeql.yml commit dd0803db fix SIGTERM support to stop/kill stack 39008c53 align with OCI artifact best practices 6c345b37 refactor(cmd/compose/run): remove redundant `len` check 1ffa194e fail start if depependency is missing b9298101 check that the pull policy provided is a valid one or is not missing when --pull is used 3d0207eb remove uncessary return value of pullComposeFiles function 16a7c209 enable profile when down is ran with explicit service names 818bc3c3 add sync+restart action to watch attribute 38bc6d5d build(deps): bump github.com/containerd/containerd from 1.7.6 to 1.7.7 0b6ce6ee build(deps): bump github.com/google/go-cmp from 0.5.9 to 0.6.0 ae16bbbf build(deps): bump google.golang.org/grpc from 1.58.2 to 1.59.0 d13ad1f9 build(deps): bump golang.org/x/sync from 0.3.0 to 0.4.0 9b4d577c remove refrecence docs generation 14b43c1a remove cucumber tests as we haven't added new ones for a while 9dd081b9 add support of COMPOSE_ENV_FILES env variable to pass a list of env files 2c0b0232 add dry-run support for publish command 599e4b24 extract method to reduce cyclomatic complexity fe8c2780 warn user remote resource is disabled a345515f Don't delete dependent services 8967df7a Apply platform before hashing 4f694919 deps: remove deprecated github.com/pkg/errors 6ecab957 Include image name in error message 12e0ac89 pkg/compose/publish: use empty config descriptor mediaType a6b7d785 pkg/remote/oci: check artifactType instead of config.mediaType 991901f2 pkg/remote/oci: refer to the manifest as manifest 2d971fc9 update the watch warning message when no services with a develop section 78f33619 ci: enable verbose output for e2e tests (#11045) 44d21280 truncate command by default, introduce --no-trunc flag to get the full command ff2ff18c build(deps): bump google.golang.org/grpc from 1.58.1 to 1.58.2 ab81db5b config --xx don't need `env_file` being parsed 61c8be11 remove --timeout=0 flag to cleanup function of watch e2e test compose down command need the watch process to be killed to succeed 6be5f300 move watch from alpha to main command c34c306c TestWatch to use new `develop` section 5ca35c88 implement publish 805541be watch: use official `develop` section (#11026) 8f489d6d build(deps): bump github.com/opencontainers/image-spec 9ea8fbc6 build(deps): bump github.com/moby/buildkit from 0.12.1 to 0.12.2 76f150e4 build(deps): bump gotest.tools/v3 from 3.5.0 to 3.5.1 f447c809 build(deps): bump google.golang.org/grpc from 1.58.0 to 1.58.1 4587d4ba build(deps): bump github.com/containerd/containerd from 1.7.3 to 1.7.6 a697a069 introduce pull --missing flag to only pull images not present in cache 8af49ff3 resolve service reference into container based on observed state f6e31dbc don't rely on depends_on to resolve volume_from, better use observed state 6d5eb6fd update to go1.21.1 9d7e0ad6 correct scale error messages formatting 1a98a70b add scale command 19bbb12f ci: tweak restricted imports in linter (#10992) 7a134578 deps: upgrade Moby to v24.0.6 and gRPC to v1.58.0 (#10991) 13115468 cli: fix `--build` flag for `create` (#10982) e1aa4f77 otel: add args & flags to cli traces (#10974) d7b0b2bd watch: build & launch the project at start (#10957) e0f39ebb pull OCI remote resource c9d54f09 introduce publish (alpha) command 52e54ef9 doc: updated README.md to remove broken link f4f2e934 migrate to github.com/distribution/reference 32c3d0a3 Enable service explicitly requested to be restarted 1fdbcb62 build: pass BuildOptions around explicitly & fix multi-platform issues 407a0d5b up: fix various race/deadlock conditions on exit (#10934) 8caa6f1f pkg/api: replace uuid for basic random id Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* crun: update to v1.14.3Bruce Ashfield2024-03-151-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | Bumping crun to version 1.14.3-8-g89d4446, which comprises the following commits: 5884fd4 linux: fix mount of file with recursive flags b9e87e7 tests: test bind mounts of files e81086b rpm: Use relative, not absolute, symbolic links 9079a6d release: enable parallel builds 1961d21 NEWS: tag 1.14.3 0860c0f crun: really drop version check 32b139f NEWS: tag 1.14.2 4532a38 crun: drop check for OCI version de537a7 NEWS: tag 1.14.1 fdb41c3 linux: initialize options variable 31b08fc container: do not leak capabilities buffer 1716fde container: do not leak version_string e72f3bc container: fix leak of mount_options_list 242bb34 cgroup: do not leak dirfd deffa39 cgroup: fix leak of cpus/mems string buffer 3df8f0c Add force_no_cgroup & no_pivot arguments to make_context() Python function b883e6c Make function arguments valid Python identifiers e0027bc Add no_new_keyring argument to make_context() Python function Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* conmon: update to 2.1.10Bruce Ashfield2024-03-151-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping conmon to version v2.1.3-138-gaffab49, which comprises the following commits: 9ce7b1a Add support for s390x 3e103d6 Remove checks for (long)deprecated libsystemd-journal in favor of libsystemd f2be46f update packit config, enable downstream tasks 59c6de4 fix(deps): update module github.com/onsi/gomega to v1.31.1 1e0d24b [skip-ci] Update actions/setup-go action to v5 bc27f79 [skip-ci] Update actions/cache action to v4 386bb80 fix(deps): update github.com/opencontainers/runtime-tools digest to 408c51e 14a34a8 chore(deps): update dependency containers/automation_images to v20240102 8c6e47f drop --tty on exec 3e425d1 chore(deps): update dependency containers/automation_images to v20231208 90432cc docs/Makefile: softcode GOMD2MAN 2dcd736 bump to 2.1.10 5fec3c0 fix(deps): update module github.com/onsi/gomega to v1.30.0 8babb44 chore(deps): update module github.com/docker/docker to v24 [security] 2bc8747 chore(deps): update module golang.org/x/net to v0.17.0 [security] 8557c11 Fix incorrect free in conn_sock 116675e logging: Respect log-size-max immediately after open fad6bac fix some issues flagged by SAST scan 91092aa version: bump to 2.1.9 521f585 README.md: update the correct Nix channel 26053bd Fix podman tests 20ce441 Forward more messages on the sd-notify socket 57eedf0 ci: skip broken cri-o tests 03b64fa logging: -l passthrough accepts TTYs 3605a36 src: fix write after end of buffer f269c2f src: open all files with O_CLOEXEC 633ac6b oom-score: restore oom score before running exit command f0eb924 src/seccomp_notify.c: fix static build a58206d CI: Update Fedora names f5eeb6a chore(deps): update dependency containers/automation_images to v20231004 6d88cb3 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: update to 1.34Bruce Ashfield2024-03-151-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping buildah to version v1.34.0-30-gdbeb097c6, which comprises the following commits: 30a9cd1c0 [release-1.34] Bump to v1.34.2-dev a2bab63fd [release-1.34] Bump to v1.34.1 b7a4562ad [release-1.34] Vendor bumps 83a136866 manifest: addCompression use default from containers.conf ae557ac9c Build with CNI support on FreeBSD cd59f7c16 tests: retrofit test for heredoc summary 2a399d67b build, heredoc: show heredoc summary in build output be6b9c3f0 docs: correct default authfile path 6a8e296ea Make buildah match podman for handling of ulimits 70fd07877 imagebuildah: fix crash with empty RUN aa729810a docs: move footnotes to where they're applicable 58820ffd1 Run codespell on code 638a825b1 Fix FreeBSD version parsing 78599048e Allow users to specify no-dereference 029063b9f Fix a build break on FreeBSD bb70cfc50 Remove a bad FROM line 6fe37a59b commit: force omitHistory if the parent has layers but no history b0fb0cacb docs: fix a couple of typos 6cacd1478 stage_executor,heredoc: honor interpreter in heredoc b8c0e21cf stage_executor,layers: burst cache if heredoc content is changed 702dfe84f Replace map[K]bool with map[K]struct{} where it makes sense f818763f3 Replace strings.SplitN with strings.Cut 47ecb727f Document use of containers-transports values in buildah d49e48412 commit: add a --add-file flag 27018aef5 mkcw: populate the rootfs using an overlay 413a35959 Ignore errors if label.Relabel returns ENOSUP 1b00f9e63 manifest: addCompression use default from containers.conf 21ec7aceb Bump to v1.34.0 6977c91e2 fix(deps): update module github.com/containerd/containerd to v1.7.11 b9852af08 fix(deps): update github.com/containers/storage digest to 15c3cb7 ad90fba16 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.2 669f19f6c fix(deps): update github.com/containers/common digest to 630c929 bdbd69e38 fix(deps): update module github.com/moby/buildkit to v0.12.4 ec76cbb60 fix(deps): update github.com/openshift/imagebuilder digest to ef2a5fe 7dfdcf33b [CI:DOCS] man pages: underscores, too-wide lines b7a0f6b13 fix(deps): update module github.com/containerd/containerd to v1.7.10 1f9103562 run.bats: use --quiet --pull=false when using a prefetched image 3b795dd4b internal/mkcw/embed/entrypoint.gz: rename to include the arch 7788160cb internal/mkcw/embed/entrypoint.gz: compress with -n9 76c9307ff fix(deps): update module golang.org/x/crypto to v0.16.0 d10b1e35b Integration tests: make skip_if_no_unshare check --map-users 028a3f9a3 fix(deps): update module golang.org/x/term to v0.15.0 3c23118f6 fix(deps): update module golang.org/x/sys to v0.15.0 d4f577b39 fix(deps): update module github.com/onsi/ginkgo to v2 c174e9162 vendor: update c/{common,image,storage} a23927ab5 run: Allow using just one jail per container on FreeBSD 12b205f69 Remove makefile targets entrypoint{,.gz} for non x86_64 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* aardvark-dns: update to v1.10.0Bruce Ashfield2024-03-152-39/+47
| | | | | | | | | | | | | | | | | | | | Bumping aardvark-dns to version v1.10.0-14-g526260a, which comprises the following commits: 875c717 Release 1.10.0 09cf01b Release notes for 1.10.0 be398c4 chore(deps): update rust crate chrono to 0.4.32 9330e9c chore(deps): update dependency containers/automation_images to v20240102 0f509bb fix(deps): update rust crate futures-util to 0.3.30 74b3618 fix(deps): update rust crate anyhow to 1.0.79 c706497 fix(deps): update rust crate tokio to 1.35.1 b70e31b chore(deps): update dependency containers/automation_images to v20231208 d2a7877 fix(deps): update rust crate tokio to 1.35.0 26e2439 fix duplicated IP CI flake 1525a69 server: remove unused kill switch faf66df fix(deps): update rust crate clap to ~4.4.10 ffb59da Bump working version to v1.10.0-dev Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* devtools: depreciate the go source-only packagesBruce Ashfield2024-03-154-0/+8
| | | | | | | | | | | We are now using vendoring from the upstream repos, or creating our own vendor directory. We no longer need these source only recipes. Add an inherit to each recipe to warn that it will be removed in the future. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* crun: remove unneeded depsChen Qi2024-03-151-1/+0
| | | | | | | | These two deps do not affect the build result and are not used, remove them. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* oci-image-tools: remove unneeded depsChen Qi2024-03-151-9/+0
| | | | | | | These deps no longer have any effect. Remove them. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc-opencontainers: update to 1.1.12Bruce Ashfield2024-03-151-2/+2
| | | | | | | | | | | | | | | | | | | | Bumping runc to version v1.1.12-2-ga9833ff3, which comprises the following commits: 29d6d873 VERSION: back to development 51d5e946 VERSION: release 1.1.12 e9665f4d init: don't special-case logrus fds 683ad2ff libcontainer: mark all non-stdio fds O_CLOEXEC before spawning init b6633f48 cgroup: plug leaks of /sys/fs/cgroup handle 284ba305 init: close internal fds before execve fbe3eed1 setns init: do explicit lookup of execve argument early 0994249a init: verify after chdir that cwd is inside the container 506552a8 Fix File to Close d0b1a374 keyring: update AkihiroSuda key expiry d561e5da keyring: update cyphar@cyphar.com key expiry 7887736f VERSION: back to development 4bccb38c VERSION: release 1.1.11 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to v2.0.0-beta-tipBruce Ashfield2024-03-151-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping containerd to version v2.0.0-beta.2-204-gb1624c362, which comprises the following commits: 5351ad6b4 .github: windows should use fix critool version a2768f19d plugins/sandbox: move local plugin into services 464319b3a Remove pause package from runc shim 2cd08156e cri: Expose runtimeHandler support for userns 358aef4bc go.mod: Update cri-api to include userns changes 105f2d727 build(deps): bump google.golang.org/grpc from 1.61.0 to 1.62.0 02db6beb8 build(deps): bump github.com/prometheus/client_golang 75f58579c build(deps): bump github.com/opencontainers/runtime-spec 522130a66 sandbox: support vsock connection to task api f0e874941 Add ttrpc generated services 65031eade Update protobuild to build ttrpc services 04c37d565 build(deps): bump the k8s group with 5 updates bd4810415 ci: update crun version to 1.14.3 50d0de96a Update 1.7 support timeline 4fbc9842d Changes to configuring otel from env only 753a525b3 Deprecate otel configs 0693b936d replace deprecated Prestart to CreateRuntime hook 6a21c96b5 Replace go-grpc-prometheus with go-grpc-middleware/providers/prometheus 567e56a20 build(deps): bump github.com/opencontainers/image-spec 6a759713a Update golangci-lint to v1.56.1 f44d90be4 Rename variables and snapshotter option to resolve lint warnings 5611db530 cri: Make sure host sandbox files exist before adding them to mounts 9077d1372 KEP-3857: Recursive Read-only (RRO) mounts 83ad4367d script/test/utils.sh: readiness_check: print daemon log f8f1e5f7a Add container monitor plugin type for restart c86c8a16f integration: add case related to ContainerStats in upgrade suite acec60f55 integration: update recover case for upgrade e659cd275 integration: connect to shim by bridge client 51689b661 integration: introduce hook for upgrade test suite a95c8ed59 integration: check data dir after delete container or pod ec759f5be integration/*: extend Runtime.Status response 401d4b491 integration: add some helper function to release upgrade cases 7cf8a00c7 Run failpoints tests only for runc a890c8e53 Add job to report statuses from matrix jobs 132485adb Convert CLI to urfave v2 c8766123d Prevent GC from schedule itself with 0 period. a086125ae Move config version to version package 99721c27e Disable the support for Schema 1 images b9dfba5b8 Add CRIImageService.RemoveImage() 4c775fcfb Pass runtimehandler from CRI pull image request 4dcf089fa Move high volume event logs to Trace level 1b3a96da6 cri: propagate deprecation list to runtime status ac7febc93 moving up for new CRI changes ccec1e6e4 Remove internal LoopConfig struct 3d8da2ebf build(deps): bump the golang-x group with 1 update a274439f2 build(deps): bump golangci/golangci-lint-action from 3 to 4 468bee9a7 ctr: print deprecation warnings on every invocation c2dfae8d0 go.mod: Bump golang.org/x/sys to v0.17.0 41bb8b816 Revert "Fix for k8s nfs related tests" 48c8c5f50 Remove ParseSignal from client 281eb22cc Remove deprecated dialer 1ce7b9951 Remove deprecated filesys funcs 5ca56ddbb Remove deprecated funcs from restart package 653b80899 Remove deprecated docker package 413fbe82c Fix unpacker link in remote snapshotter docs 23ebfd030 Fix for k8s nfs related tests 25ab90219 Update to v0.29.1 cri-api 5e3e12d2a build(deps): bump the otel group with 8 updates c4bb72ae4 Remove CRI plugin path note 87aa9e800 Drop go 1.20 and build against 1.22 276384695 Update codeql-action/upload-sarif dependency in scorecards workflow 634ac2f8f Update migration script for transfer packages f46aea618 Move transfer and unpack packages d9b95ab68 Update gce configure.sh to use registry config_path 360fbf197 Fix windows integration tests 2820343d4 Update workflow files to install Go via composite action 488b56361 Extract a composite action to install Go 5aa05481d Add OSVersion to platform protobuf d9cae66d8 Extend string match in make protos c58b1fb40 Update github.com/containerd/console to v1.0.4 06ed897b2 cri/server: Add userns tests in PodSandboxStatus 6c356a5c7 cri: Expose userns in PodSandboxStatus rpc 1eaf0c1f0 bug fix: make sure cri image is pinned when it is pulled outside cri 9eb9038a9 Avoid publishing data events during transaction 86530c0af Move image event publishing to metadata store 32bd8eff9 Move inline PS scripts into files 4e8e21a7d go.{mod,sum}: update NRI dependency, re-vendor. 5cbe92e88 Clean up repeated package import 72950c00b Treat PRs that require rebase > 90 days as stale db437580b build(deps): bump github.com/opencontainers/image-spec 2c7d69530 build(deps): bump github.com/klauspost/compress from 1.17.5 to 1.17.6 da1673f55 Update vendor 047d42e90 Update ttrpc to v1.2.3 64e96c7d4 Update hcsshim to v0.12.0-rc.3 a9060cda4 Support inject delay running with the old version (4.x) of strace for test case. 9ef94fe52 fix(docs): fix cp and add step to include binaries in the $env:Path fe24b918f pkg/nri, docs: enable NRI by default. e230ed939 sandbox: add sandbox recover ut and e2e test 312496474 sandbox: fix recover status set issue 256637249 Fix config import relative path glob 667069583 Revert "cri: make read-only mounts recursively read-only" a9152ebf8 copy: prevent potential deadlock if close before fully written b48e1141e copy: setError should imply Close e4f91c2df copy: remove max number of ErrResets 651cfa2a2 pushWriter: refactor reset pipe logic into separate function 9d7641ff3 copy: improve error detection from closed pipes 91a50f70b copy: check if writer was closed before setting a pipe 4660f6303 copy: remove wrapping io.NopCloser from push writer pipe 0facc8592 Fix proto formatting 7f2d2c4f4 Move Message proto to types 287524733 Fix formatting after moving CRI bbac058cf Move CRI from pkg/ to internal/ 6e365e925 CRI: An empty DNSConfig != unspecified 9340be717 Remove duplicated TOML duration parsers b2f254fff cri: make read-only mounts recursively read-only f74e5ce7e Move differ default to its own file 82fb589ff Update runc binary to v1.1.12 87a9835f1 docs: fix typo 81409e937 Add a default differ that matches the snapshotter 2369185aa CI: update Rocky Linux to 8.9 d8460a702 CI: bump up crun to 1.14 ebbce7423 rm docs/cri/installation.md 49d5cc7f9 build(deps): bump github.com/klauspost/compress from 1.17.4 to 1.17.5 4d33170ea build(deps): bump github.com/google/uuid from 1.5.0 to 1.6.0 3a5b47d73 build(deps): bump google.golang.org/grpc from 1.60.1 to 1.61.0 9a983caad build(deps): bump github.com/containerd/plugin 495afb0c0 build(deps): bump lycheeverse/lychee-action from 1.9.1 to 1.9.3 5365a1089 build(deps): bump google-github-actions/upload-cloud-storage 64b4778fc Add deprecation warnings to CRI image server configuration 65b3922df Split streaming config from runtime config 58ff9d368 Move cri plugin to plugins subpackage d29a1bc6a Move sandbox info to cri types packages 9795677fe Move cri base plugin to CRI runtime service 966d51801 The `Links` workflow should be disabled in forks. e15f191a2 Fix func (m manager) Info in containerd-shim-runc-v2 4f570db1a refactor: remove containerd/containerd/log 010857d33 Add errdefs and platforms to migration script 7cf54b437 Remove unused pkg/errdefs package fb9b59a84 Switch to new errdefs package 6b906a22d Prepare release notes for v2.0.0-beta.2 b608c6f73 doc: fix package import path in sample code b16e3572a refactor: move plugin/fieldpath to api/types/ 22d586e51 api/services/instrospection: add PluginInfo ad869e905 Use tags.cncf.io CDI url in config.md eb8981f35 mv contrib/seccomp/kernelversion pkg/kernelversion a6e52c74f seccomp: kernel 6.7 ed4710241 Code clean for nri_api. ade80789b Remove walker diff plugin for Windows af6a90bf5 remotes/docker/authorizer.go: invalidate auth tokens when they expire. e79ec7a09 Remove deprecated platforms package 3f620143f Use github.com/containerd/platforms package 9dd29b3cf Update container-device-interface to v0.6.2 7eccde5d0 Clean plugin indent in containerd-config.toml.5.md b16d46740 pod: CreatedAt time will be 269 years ago while creating cri network failed. 378e9f443 build(deps): bump actions/cache from 3 to 4 748fe2035 integration: add test for recovering images 2e8e03389 Add multi-subscriber support to GetContainerEvents CRI API e7eb08eb5 Add support for multiple subscribers to CRI container events cfe8321b4 strip-volatile-option-tmp-mounts d34725f85 CI: use standard GHA runners 9d2c22123 Prepare release notes for v2.0.0-beta.1 e9f2bba1f remotes: FetchByDigest: propagate media type from config to desc d7689ae8b Remove CRI plugin config after migrating f48f61fd8 Add migration integration test eb9925d88 Update config migrations to decode using the plugin type 15713014d Update server config slice merge strategy cf6f439eb Fix transfer plugin unpack configuration eb123db5f ctr: use transfer service by default 94d1b2098 Add migration script to contrib 9ee1f4716 Rebuild protos with updated runtime location dbc74db6a Move runtime to core/runtime df9b0a067 Move metrics to core/metrics 19e763553 Move pkg/truncindex to internal/truncindex 764c90700 Move pkg/tomlext to internal/tomlext 1c4be2d88 Move pkg/testutil to internal/testutil 114df368f Move pkg/registrar to internal/registrar 4ee6419fa Move pkg/randutil to internal/randutil 696cf2565 Move pkg/kmutex to internal/kmutex 5e1d9543b Move pkg/hasher to internal/hasher 23914a01b Move pkg/failpoint to internal/failpoint c79ecfe24 Move pkg/cleanup to internal/cleanup 8f0eb2631 Move tracing to pkg/tracing 6be90158c Move sys to pkg/sys de606680b Move rootfs to pkg/rootfs fdb8a527c Move reference to pkg/reference e59f64792 Move oci to pkg/oci fa8cae99d Move namespaces to pkg/namespaces b76236bb4 Move labels to pkg/labels bb71c2835 Move identifiers to pkg/identifiers 5e00f63ce Move gc to pkg/gc 11114b0a9 Move gc/scheduler to plugins/gc c38f2ab72 Move filters to pkg/filters 44a836c9b Move errdefs to pkg/errdefs 70ed2696f Move events to pkg/events b0c3d00e9 Move cio to pkg/cio 8e14c39e8 Move archive to pkg/archive fcd39ccc5 Move snapshots to core/snapshots e0fe656da Move snapshots/windows to plugins/snapshots/windows 57bdbfba6 Move snapshots/overlay to plugins/snapshots/overlay 9b8c558f9 Move snapshots/native to plugins/snapshots/native 5c07d5d36 Move snapshots/lcow to plugins/snapshots/lcow 8473322f0 Move snapshots/devmapper to plugins/snapshots/devmapper 7dd96fe34 Move snapshots/btrfs to plugins/snapshots/btrfs 2909f07f8 Move snapshots/blockfile to plugins/snapshots/blockfile 92d2a5fc0 Move services to plugins/services ce41d1c90 Move services/server to cmd/containerd/server 228ad5a5c Move sandbox to core/sandbox d133019c9 Move runtime/restart/monitor to plugins/restart 0dabf6f15 Move remotes to core/remotes 6e5408dce Move mount to core/mount 1a1e0e8c8 Move metadata to core/metadata 18b3cbe4f Move metadata/plugin to plugins/metadata f80760f9f Move leases to core/leases cc6a5c9c6 Move leases/plugin to plugins/leases 57ea8aef3 Move images to core/images 913edcd48 Move diff to core/diff d14350376 Move diff/windows to plugins/diff/windows 2d861b6ea Move diff/walking to plugins/diff/walking aaf6ac04c Move diff/lcow to plugins/diff/lcow 9456048f4 Move containers to core/containers 21b4f3f0a Move content to core/content 846f7d4e6 Move content/local to plugins/content/local 725c92e7c include image name in error message 18b0d236c build(deps): bump actions/upload-artifact from 3 to 4 f45b46b67 runtime/v2: reduce shim plugin log 20619a7c9 ci: make artifact name unique in linux integration 2053d9157 build(deps): bump lycheeverse/lychee-action from 1.9.0 to 1.9.1 d4396c96b mount: UnmountRecursive return nil if path doesn't exist 8aa2551ce Move DefaultSnapshotter constants c8e8a093c config: enable CDI by default 5a3d3f613 Update load image test to use local import 6041d4e60 Update fuzz contrib for updated image service 2a476d421 Move ParseImageReferences to cri util 3baf5edb8 Separate the CRI image config from the main plugin config ad4c9f8a9 Update CRI runtime platform and pinned image configuration 11f311fdd Add minimal interface to CRI image store 02a9a456e Split image config from CRI plugin d23ac1122 Split CRI image service from GRPC handler a2472c0b5 transfer: add OCI descriptors to Progress structure f26196950 Move certain debug logs to trace logs a5d958706 update to go1.21.6, go1.20.13 21640c57a Uninstall mingw before attempting upgrade 174efb1e0 update imgcrypt binary to v1.1.9 dfb175380 build(deps): bump the golang-x group with 2 updates 2b415c911 build(deps): bump lycheeverse/lychee-action from 1.8.0 to 1.9.0 7dadd5f1b sandbox: remove sandboxStore from podsandbox a3c62e698 add label flags to ctr import, add integration tests d01056555 Handle failure when stopping a sandbox 8235665e7 content: Add InfoReaderProvider fa83bc8de integration: remove use of golang.org/x/sys/execabs dffeea471 add get cgroupdriver from RuntimeConfig to integration 46b2f1d16 Use latest VM image to get Windows updates regularly a8d39666d Move cimfs OS build compat check to the operation functions instead of init() 0d3c3efe3 integration/import-export: Add WithSkipMissing tests b9af453f0 export: Copy distribution source labels to manifest annotations 61a7c4999 import/export: Support references to missing content 1ab4fac94 update runc binary to v1.1.11 5387747e9 build(deps): bump github.com/containerd/cgroups/v3 from 3.0.2 to 3.0.3 a1e0601e0 fix: Update go.opentelemetry.io/otel/sdk/trace to satisfy traceProvider interface 78421616e deps: Update otelgrpc bd4c281c5 build(deps): bump github.com/fsnotify/fsnotify from 1.6.0 to 1.7.0 62a824a4b build(deps): bump github.com/intel/goresctrl from 0.5.0 to 0.6.0 7fe038e4a build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.32.0 81bb66942 build(deps): bump github.com/google/uuid from 1.3.1 to 1.5.0 9d328410a shim: Create pid-file with 0644 permissions daa1ea522 Add cimfs differ and snapshotter c19193574 fix: return gRPC code "unavailable" if server is not initialized yet 1f9151af6 build(deps): bump google.golang.org/grpc from 1.58.3 to 1.60.1 0b48b5659 build(deps): bump google-github-actions/upload-cloud-storage 97ec26a5e build(deps): bump actions/download-artifact from 3 to 4 22138541a tracing/plugin: newTracer: ignore context.Canceled errors on Close() 7c651e183 docs: fix CI badge in README e10c82e4c build(deps): bump github.com/google/uuid from 1.3.1 to 1.5.0 25dc823bf integration: fix format string for klog.Infof fc4b78c05 build(deps): bump github.com/intel/goresctrl from 0.3.0 to 0.5.0 1c96087ce build(deps): bump github.com/Microsoft/hcsshim 7e3c8af52 build(deps): bump github.com/prometheus/client_golang f9303d04d build(deps): bump github/codeql-action from 2 to 3 4c1ebe33b build(deps): bump docker/setup-buildx-action from 2 to 3 51fd1d47e dependabot: enable groups 4a71a9360 build(deps): bump github.com/moby/sys/mountinfo from 0.6.2 to 0.7.1 344fe957f build(deps): bump golang.org/x/mod from 0.13.0 to 0.14.0 6726a2aeb build(deps): bump k8s.io/component-base from 0.28.2 to 0.28.4 0c98f1063 build(deps): bump github.com/klauspost/compress from 1.17.2 to 1.17.4 39ba0347e build(deps): bump go.etcd.io/bbolt from 1.3.7 to 1.3.8 db43e3d1f build(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 4660090ba build(deps): bump actions/stale from 8 to 9 ace8ab1bd build(deps): bump docker/login-action from 2 to 3 0b94716e8 build(deps): bump actions/github-script from 6 to 7 9133ad811 build(deps): bump actions/upload-artifact from 1 to 3 c1823a7c6 build(deps): bump ossf/scorecard-action from 2.0.3 to 2.3.1 36b12cbcb build(deps): bump crazy-max/ghaction-github-runtime from 2 to 3 dc5a6cfae build(deps): bump google-github-actions/auth from 0 to 2 f6a9c6966 build(deps): bump actions/setup-go from 3 to 5 e27ea7d1a build(deps): bump google-github-actions/upload-cloud-storage 3ca95282e build(deps): bump actions/checkout from 3 to 4 1398186ca WithAppendAdditionalGroups: better /etc/group handling 5a140dca5 CI: enable dependabot c1197995b go.mod: Bump up github.com/pelletier/go-toml to v2.1.1 23278c81f *: introduce image_pull_with_sync_fs in CRI bd5c602c4 api: introduce sync_fs to diff.ApplyRequest 6bb81ee57 Document `ns` query string added to mirror requests 98526c9d3 Exclude releases directory from links checker f67c1632f Add ignore list for links e740dd3d6 Add links status badge bfa651c69 Fix broken links c9fa5b980 Add nighly job to verify doc links 25b052cbc Move GenerateRuntimeOptions() to pkg/cri/config cb5a48e64 *: enable ARM64 runner 596ada3ac release: add .dockerignore to fix repeated builds cf4b57989 Remove deprecated tracing function 8203bb997 Add HTTP client update function to tracing library ad3b806a4 fix(tracing): use latest version of semconv 22db60b6b upgrade crun version from 1.9 to 1.12 993790969 go.mod: Bump up github.com/containernetworking/plugins to v1.4.0 734219a21 update to go1.21.5, go1.20.12 212200452 update to go1.21.4, go1.20.11 ad96fded4 Don't block snapshot garbage collection on Remove failures 8bbce8d37 pkg/process: Check using idmap mount options too 96aaf5a3b Add core and internal root packages 6c6dfcbce contrib/apparmor: deny /sys/devices/virtual/powercap 106a9b776 oci/spec: deny /sys/devices/virtual/powercap Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* moby: update to v25.0.3Bruce Ashfield2024-03-151-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping moby to version v25.0.3, which comprises the following commits: acd023d42b c8d: Use the same logic to get the present images ed7c26339e seccomp: add futex_wake syscall (kernel v6.7, libseccomp v2.5.5) 74e3b4fb2e seccomp: add futex_wait syscall (kernel v6.7, libseccomp v2.5.5) 4cc0416534 seccomp: add futex_requeue syscall (kernel v6.7, libseccomp v2.5.5) f9f9e7ff9a seccomp: add map_shadow_stack syscall (kernel v6.6, libseccomp v2.5.5) 5fb4eb941d seccomp: add fchmodat2 syscall (kernel v6.6, libseccomp v2.5.5) 67e9aa6d4d seccomp: add cachestat syscall (kernel v6.5, libseccomp v2.5.5) 61b82be580 seccomp: add set_mempolicy_home_node syscall (kernel v5.17, libseccomp v2.5.4) 0227d95f99 image/cache: Use Platform from ocispec fa9c5c55e1 image/cache: Ignore Build and Revision on Windows 1652559be4 Dockerfile: update RootlessKit to v2.0.1 147b5388dd integration/save: Add tests checking OCI archive output ba4a2dab16 plugins: fix panic installing from repo w/ digest 51133117fb tests: add plugin install test w/ digest 269a0d8feb Dockerfile: update docker compose to v2.24.5 876b1d1dcd Dockerfile: update dev-shell version of the cli to v25.0.2 0bcd64689b Dockerfile: update docker compose to v2.24.3 8d454710cd Dockerfile: update dev-shell version of the cli to v25.0.1 c12bbf549b libcontainerd/supervisor: fix data race 9150d0115e d/logger/journald: quit waiting when logger closes 9af7c8ec0a d/logger/journald: sync logger on close in tests 3344c502da d/logger/loggertest: improve TestConcurrent 6c9fafdda7 d/logger/journald: log journal-remote cmd output f8a8cdaf9e d/logger/journald: fix data race in test harness 7a659049b8 libnet: bridge: ignore EINVAL when configuring bridge MTU 0ccf1c2a93 api/t/network: ValidateIPAM: ignore v6 subnet when IPv6 is disabled 28c1a8bc2b Revert "daemon: automatically set network EnableIPv6 if needed" bbe6f09afc No inspect 'Config.MacAddress' unless configured. 5b13a38144 Only restore a configured MAC addr on restart. 990e95dcf0 Add internal n/w bridge to firewalld docker zone c48b67160d api: Document `version` in `/build` 225e043196 c8d/save: Handle digested reference same as ID 78174d2e74 image/save: Fix untagged images not present in index.json 85f4e6151a Assert temp output directory is not an empty string dd4de8f388 docs: remove dead links from api verison history f5ef4e76b3 ci: update to docker/bake-action@v4 6c5e5271c1 ci: update to codecov/codecov-action@v4 693fca6199 ci: update to actions/download-artifact@v4 and actions/upload-artifact@v4 49487e996a ci: update to actions/cache@v3 0358f31dc2 gha: update to crazy-max/ghaction-github-runtime@v3 081cffb3fa gha: update to docker/login-action@v3 9de19554c7 gha: update to docker/setup-qemu-action@v3 2a80b8a7b2 gha: update to docker/bake-action@v4 61ffecfa3b gha: update to docker/setup-buildx-action@v3 02cd8dec03 gha: update to docker/metadata-action@v5 1d7df5ecc0 gha: update to actions/setup-go@v5 4e68a265ed gha: update to actions/github-script@v7 e437f890ba gha: update to actions/checkout@v4 fd6a419ad5 update containerd binary to v1.7.13 13ce91825f vendor: github.com/moby/buildkit v0.12.5 4b63c47c1e vendor: github.com/opencontainers/runc v1.1.12 4edb71bb83 update runc binary to v1.1.12 1b47bfac02 hack/make.ps1: Fix go list pattern f2d0d87c46 logger/journald: drop errDrainDone sentinel 6ac38cdbeb logger/journald: wait no longer than the deadline d7bf237e29 logger/journald: use deadline for drain timeout f41b342cbe l/journald: make tests compatible with systemd 255 f413ba6fdb daemon/logger/loggertest: expand log-follow tests c2ef38f790 vendor swarmkit v2.0.0-20240125134710-dcda100a8261 d5eebf9e19 builder/windows: Don't set ArgsEscaped for RUN cache probe f3f5327b48 image/cache: Check image platform 05a370f52f image/cache: Restrict cache candidates to locally built images be7b60ef05 daemon/imageStore: Mark images built locally 6d05b9b65b image/cache: Compare all config fields c01bbbddeb pkg/ioutils: Make subsequent Close attempts noop 32635850ed add more //go:build directives to prevent downgrading to go1.16 language 2cf1c762f8 De-flake TestSwarmClusterRotateUnlockKey... again... maybe? 5295e88ceb daemon: rename: don't reload endpoint from datastore 3de920a0b1 volume/local: Fix cifs url containing spaces a445aa95e5 volume/local: Add tests for parsing nfs/cifs mounts cb77e48229 volume/local: Break early if `addr` was specified e8801fbe26 daemon: only add short cid to aliases for custom networks b8cc2e8c66 fix "host-gateway-ip" label not set for builder workers fcccfeb811 c8d/snapshot: Create any platform if not specified f8eaa14a18 pkg/platforms: internalize in daemon/containerd ac76925ff2 volume/local: Make host resolution backwards compatible ff15b49b47 Dockerfile: update docker compose to v2.24.2 c0573b133f pkg/system: return even richer xattr errors 7c185a1e40 daemon: return an InvalidParameter error when ep settings are wrong 2b036fb1da Remove generated MAC addresses on restart. 1f24da70d8 docs/api: remove version matrices from swagger files 358fecb566 docs: remove documentation for deprecated API versions < v1.23 f030b25770 Dockerfile: update docker compose to v2.24.1 e07aed0f77 Dockerfile: update dev-shell version of the cli to v25.0.0 cdf3611cff integration-cli: TestInspectAPIMultipleNetworks: use current version 05267e9e8c integration-cli: TestInspectAPIBridgeNetworkSettings121: use current version e5edf62bca integration-cli: TestPutContainerArchiveErrSymlinkInVolumeToReadOnlyRootfs: use current API e0acf1cd70 daemon/cluster/executer: Add missing `StartInterval` 1e335cfa74 image/save: Fix layers order in OCI manifest 4d287e9267 image/save: Change layers type to DiffID 0240f5675b Fix isGitURL regular expression 13964248f1 libnetwork: loosen container IPAM validation 05695c2458 c8d/integation: Adjust error in TestPullLinuxImageFailsOnWindows Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* crun: update to v1.14Bruce Ashfield2024-03-151-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping crun to version 1.14-19-g9d01392, which comprises the following commits: 3df8f0c Add force_no_cgroup & no_pivot arguments to make_context() Python function b883e6c Make function arguments valid Python identifiers e0027bc Add no_new_keyring argument to make_context() Python function cb3ffb5 apparmor: Fix wrong determination whether crun is confined adb912d linux: harden chdir() f157e80 container: attempt to close all the files before execv(2) ed1abf9 container: simplify statement 3aaadf3 ebpf: add fallback when bpf(2) fails with ENOSPC f2ade60 ebpf: add fallback when bpf(2) fails 8b611f2 ebpf: try harder to bump RLIMIT_MEMLOCK d88d77e build(deps): bump uraimo/run-on-arch-action from 2.6.0 to 2.7.1 f70fe0b cgroup, systemd: fix segfault if resources not specified 667e6eb NEWS: tag version 1.14 688f186 build(deps): bump actions/cache from 3 to 4 8d96f08 build: drop gcrypt dependency 5221ca8 seccomp: use blake3 instead of libgcrypt 6d9fa42 cpuset: don't clobber parent cgroup value 3873541 build: embed blake3 hashing function 4f1f3d4 seccomp: include default_errno_ret in cache digest beb9565 utils: remove unneeded if statement 9306457 ebpf: do not require MEMLOCK for eBPF programs 87740ce linux: force umask(0) 5078ce6 apparmor: stack apparmor profiles if nnp and confined c761349 NEWS: tag 1.13 cb53ac2 build(deps): bump actions/upload-artifact from 3 to 4 94a5950 cgroup: use "max" when pids limit < 0 3b819bc Improve error msg on idmap mounts bace3a2 build(deps): bump github/codeql-action from 2 to 3 4ddf5e6 criu: remove unneeded if statement 8c27dea error: reset pointer after vasprintf failure c5643c4 status: fix double free ece4f9e utils: return a valid error if access fails 68a9487 list: initialize variable ea27b13 libcrun: fix compile error without libseccomp and libcap 487ba3a fix checking of relative idmapped mount 49f439d ctx: drop no_subreaper bool Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-o: update to 1.30Bruce Ashfield2024-03-151-3/+3
| | | | | | | | | | Bumping cri-o to version v1.29.0-44-g5aff11c7c, which comprises the following commits: 1b9754486 fix missing line ending on crio.8.md 3cbaa5294 fix grep for whitespace 8dea35388 add metrics_host to config Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* skopeo: update to 1.14.1Bruce Ashfield2024-03-151-2/+2
| | | | | | | | | | | | | | | | | | | | Bumping skopeo to version v1.14.1-4-g695538a3, which comprises the following commits: 4baf4fe9 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc6 e32dfefb Bump to v1.15.0-dev 45b7bf5e Bump to v1.14.1 b7ec87a1 fix(deps): update module github.com/containers/common to v0.57.2 92edbcb7 fix(deps): update module github.com/containers/image/v5 to v5.29.1 5684cd12 chore(deps): update dependency containers/automation_images to v20240102 c7053312 Fix libsubid detection e51dbbd8 fix(deps): update module golang.org/x/term to v0.16.0 852cca63 fix(deps): update golang.org/x/exp digest to 02704c9 d1cb2e2c chore(deps): update dependency containers/automation_images to v20231208 fe83b6fe [skip-ci] Update actions/stale action to v9 f346045d fix(deps): update module github.com/containers/common to v0.57.1 48d11dac fix(deps): update golang.org/x/exp digest to 6522937 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* moby: update to v25.0.0Bruce Ashfield2024-03-152-8/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping moby to version v25.0.0, which comprises the following commits: 05695c2458 c8d/integation: Adjust error in TestPullLinuxImageFailsOnWindows ae6468b4b9 c8d/mount: Use ref-counted mounter by default bd481592ff ci: Always run snapshotter tests on Linux ed15f1d717 net=host: remove /var/run/docker/netns/default from OCI config 568c064795 docker-py: unskip some tests e8f4bfb374 Root.Path for a process-isolated WCOW container must be the Volume GUID ec041193f9 Windows doesn't have 'host' mode networking, so use 'auto'. 66325f7271 Implement GetLayerFolders for the containerd image store 0dc07ccc3a Unmount RWLayer during Commit a1f6b64e24 Don't call setupInit in a temp mount if setupInit is nil efadb70ef8 The Windows snapshotter and graphdriver have different names 641050c93f Typo fixes 508a2d979a Revert "temporary: Disable deprecate-integration-cli validation" f7065ab207 Add testutil.TempDir function 84d2229ffe dockerd-rootless-setuptool.sh: add `nsenter` subcommand 7d08d84b03 dockerd-rootless.sh: set `rootlesskit --state-dir=DIR` ae9fbcb82c testutil/daemon: shorten XDG_RUNTIME_DIR bdc7d0c2db temporary: Disable deprecate-integration-cli validation 8390bc5683 c8d/cache: Use ContainerConfig from content store f760cb4f97 c8d/builder: Store ContainerConfig a5a15c7782 c8d/cache: Optimize `FROM scratch` case 71ebfc7c63 c8d: make the cache in classic builder work 24da5233dd integration: Fix Parallel before setupTest d22c775e04 cdi: use separate feature-flag fa4deb02af environment: Error when t.Parallel was called before Protect 97d32bb7d7 daemon: stop checkpointing health probes to disk a6d9462cb1 (*Daemon).fillRootlessVersion: fix nil panic e954cdc188 dockerd-rootless.sh: fix inconsistent description about "builtin" driver 9de132dbf6 integration/image: Move Parallel after setupTest f0efb90f21 c8d/integration-cli: Skip tests checking `ContainerConfig` 2a02403a94 c8d/exporter: Use WithSkipMissing 9f50e06993 image/save: Refactor saveLayer b5a5ecf4a3 dockerd-rootless.sh: add comments about pasta f5d05b43d7 Dockerfile: update RootlessKit to v2.0.0 ba86626642 vendor.mod: github.com/rootless-containers/rootlesskit/v2 v2.0.0 312450d079 integration: test container healthcheck is reset c58acf06c2 image/save: Derive Descriptor from actual tar archive c4d2968183 vendor: github.com/moby/sys/mountinfo v0.7.1 075e1141b8 vendor: golang.org/x/sys v0.16.0 a759acd958 vendor: github.com/google/uuid v1.5.0 3bcb01a84f vendor: github.com/google/go-cmp v0.6.0 36dd2f029f doc: Correct typo in doc comments for volume/mounts/mounts/MountPoint 92175dd78c vendor: containerd v1.7.12, and switch to dario.cat/mergo v1.0.0 cd1709b0d4 update containerd binary to v1.7.12 2c45df2ab4 image/save: Fix missing layers in manifest 0790864064 Dockerfile: update buildx to v0.12.1 a9d0128bd7 Dockerfile: update docker compose to v2.24.0 28f48ce1ac c8d/commit-builder: Extract common code 659d7b190f libcontainerd: create unstarted tasks d7141cfd06 update to go1.21.6 0e62dbadcd daemon: reinit health monitor on live-restore 71c9aec834 Add Rob Murray (robmry) to curators e8e20c0897 daemon/config: setPlatformDefaults: use debug for missing userland-proxy 18a0e144c2 c8d/getImageLabelByDigest: Fix misspelled `labels` check e27ffdab0f Dockerfile: update rootlesskit to v1.1.1, and use tags as reference 782fe1fe82 layer: ChecksumForGraphID: remove unused code for for migrating v1 layers 1dd415df1a vendor: github.com/vbatts/tar-split v0.11.5 372cd16b88 vendor: otelhttptrace v0.45.0 to align with other OTEL packages 22597efa06 vendor: github.com/docker/go-connections v0.5.0 1f9098e7d0 builder: remove redundant ExecBackend.ContainerKill() 0aa96c5512 builder/dockerfile: containerManager.RemoveAll() prevent partial cleanup 03a8188a9a builder/dockerfile: remove containerManager.removeContainer() a38b5d7430 daemon: Daemon.ContainerRename: move vars closer to where they're used 00a863b25e daemon: Daemon.connectToNetwork: rename named return to prevent shadowing 0f337e9c14 feat: make errdefs.IsXXX helper functions work with wrapped errors dd41f86339 hack/make: Refactor VERSION normalization 2af17cd3f5 vendor: github.com/containerd/cgroups/v3 v3.0.3 9a5393d500 hack/make: Strip "v" tag prefix name from VERSION 12128189eb vendor: github.com/cilium/ebpf v0.11.0 07d2ad30e5 daemon/cluster: Cluster.imageWithDigestString: include mirrors to resolve digest 8aacbb3ba9 api: fix "GET /distribution" endpoint ignoring mirrors b9e27acabc libnet/d/bridge: dead code: no conflict on stale default nw 0a26cdf344 libnet/d/bridge: remove dead ActiveEndpointsError 6d2c4f87af daemon: work around go1.21 compiler bug 69c23cc0c9 docs/api: add documentation for API v1.44 ce574949f7 api: Deprecate outdated fields in NetworkSettingsBase d5a3fccb06 update golangci-lint to v1.55.2 9b184e1268 daemon: remove dead code relying on SecondaryIPAddress 7b0f8122b2 update AUTHORS fc8fcf85a2 vendor: github.com/opencontainers/runc v1.1.11 5fa4cfcabf update runc binary to v1.1.11 b8f2caa80a pkg/containerfs: deprecate ResolveScopedPath 90f37f48e2 pkg/containerfs: unify CleanScopedPath implementation 6fae583dba pkg/aaparser: remove, and integrate into profiles/apparmor 53d405c37f pkg/aaparser: remove deprecated GetVersion utility f714730c40 libnetwork/portallocator: PortAllocator.ReleasePort: remove unused err-return 4f9db655ed portmapper: move userland-proxy lookup to daemon config 214ab2caef libnetwork/portmapper: PortMapper.MapRange: inline "cleanup" closure 6ae6dcfc53 libnetwork/portmapper: PortMapper.MapRange: fix defer 8712c6df22 libnetwork/portmapper: PortMapper.MapRange: rename err-return 341e7b35a6 Updated manifest v2 URLs in image spec README 882b79b254 Dockerfile: update crun to 1.12 dc23efd3a2 vendor: github.com/klauspost/compress v1.17.4 f74ca4ed36 Update commit id unmap to directly use active mounts 0252a6f475 ci(bin-image): fix merge job run condition 1ea1d561c7 ci: do not run ci workflow on push tag events 141cb65e51 Check, then assume an IPv6 bridge has a subnet. 437bc829bf Don't try to validate incomplete network config. 52d9b0cb56 Remove unused error types. f9135cdeb5 libnet: Improve the debug log written when the extKeyListener is stopped 13915f6521 libnet: document what Network.networkType represents 6a2542dacf libnet: remove Endpoint.anonymous cf5a3bc531 c8d: Fix image commit with userns mapping 5eaf898fcb libnetwork: write ServFail if DNS reply msg is bad 1da85f7bdc libnetwork: assert DNS replies are well-formed f6a160d34e c8d/docker-py: Temporarily skip test_commit_* cf1ea9237c Add dangling image reference on delete when last image has children 9603adb5b4 c8d/docker-py: Temporarily skip test_save_and_load* 7a9b680a9c libnet: remove Endpoint.myAliases 523b907359 daemon: no more IsAnonymousEndpoint 8b7af1d0fc libnet: update dnsNames on ContainerRename 3bb13c7eb4 libnet: Use Endpoint.dnsNames to create DNS records f5cc497eac libnet: populate Endpoint.dnsNames on UnmarshalJSON ab8968437b daemon: build the list of endpoint's DNS names 0c6e9121b2 Add support for removing repo and digest c22fc41ddf vendor: golang.org/x/crypto v0.17.0 87c87bccb5 Update cleanup logic to use resolve all images 529d19bad8 Add resolve all images and unit test eb9ce779f6 Update OTEL in client hijack to use transport c84e889a69 Remove httputil lint exceptions 35a51fd697 Update authz plugin test to not use httputil bb4e9c72d7 Replace use of httputil in client hijack dc1e73cbbf libnet: add a new dnsNames property to Endpoint 1eb0751803 daemon: endpoints on default nw aren't anonymous 27f3abd893 Allow overlapping change in bridge's IPv6 network. 18b1aec0ee c8d/inspect: Fill `Parent` property e48b58e1be vendor: golang.org/x/crypto v0.16.0 44511f9e43 vendor: golang.org/x/text v0.14.0 2cdd4906ac vendor: golang.org/x/sys v0.15.0 d6a656cf7f libnet: Remove unused cmd/readme_test aa5d1a8897 typo fixes 2cf230951f add //go:build directives to prevent downgrading to go1.16 language 9e6d012e9c docker info: expose runtime features ("rro" mount mode, etc.) 1602e2f4f1 api: Deprecate `Container` and `ContainerConfig` for `/images/{id}/json` d91bf690ef ci(bin-image): fix conditional run for skipped job 61d5e5ca9a ci(test): do not run on push tag events f8275cb303 c8d/docker-py: Skip test_build_squash 279e6658ac Add devcontainer configuration d11a772080 c8d/tag: Remove duplicate label copy 3b1d9f1a26 add validation and migration for deprecated logentries driver 3a14b1235c docs/api: remove logentries 30f739db44 api/swagger: remove logentries cd41f655f9 logger: remove logentries driver dbdfc71026 vendor: resenje.org/singleflight v0.4.1 4d2a324fce update to go.opentelemetry.io/otel/semconv/v1.21.0, remove "httpconv" uses 7d991b6e42 vendor: github.com/moby/buildkit v0.12.5-0.20231208203051-3b6880d2a00f fcf03cdfa9 vendor: github.com/containerd/containerd v1.7.11 7028a03ffa vendor: github.com/containerd/containerd v1.7.10 49ad10261e vendor: github.com/containerd/containerd v1.7.9 c14bd4f1ad vendor: vendor: upgrade OpenTelemetry to v1.19.0 / v0.45.0 291eaf0a77 vendor: github.com/cyphar/filepath-securejoin v0.2.4 b524ed2dda testing: update docker-py to 7.0.0 33d2ec08ba update containerd binary to 1.7.11 c51a262e34 update containerd binary to 1.7.10 12c70b4386 vendor: github.com/grpc-ecosystem/grpc-gateway/v2 v2.16.0 a0615f6839 vendor: github.com/felixge/httpsnoop v1.0.4 afe281964d daemon/logger/local: always use UTC for timestamps bea729c030 c8d/prune: Familiarize image names that were untagged 8ba8a59697 c8d/prune: Default `dangling` filter to true eaaf1ea96d integration/prune: Run in a separate daemon 90dfb1c8ad c8d/integration-cli: Adjust TestBuildClearCmd 0f9f9a132e Move 'netip' utils from 'ipam' to 'internal'. 1931a1bdc7 libnetwork/diagnostic: lock mutex in help handler 424ae36046 libnetwork/diagnostic: use standard http.Handler bc94dfc7d2 hack: Load special images on demand 7cb1efebec api/types: move NetworkListConfig to api/types/backend a58b0a3d9c api/types: move Plugin-types to api/types/backend 862caf826c update to go1.21.5 0bf6ffba43 update to go1.21.4 08e4e88482 daemon: raise default minimum API version to v1.24 484e6b784c api/types: move ContainerCreateConfig, ContainerRmConfig to api/types/backend c786c3a974 Dockerfile: update criu stage to Debian 12 (Bookworm) d5eba1bfe5 integration/build: Use setupTest 713c7d49a1 integration(-cli): remove skips for old daemon versions (<20.10) 7f68e3107e integration-cli: TestAPIClientVersionOldNotSupported: use daemon API version 97549d923c integration/container: TestInfoAPIVersioned: adjust API version 410feab962 integration/container: TestKillDifferentUserContainer: adjust API version 757a004a90 libnetwork/diagnostic: drop Init method f270057e0c libnetwork/diagnostic: un-embed sync.Mutex field aa2fa2caa3 un-containerize TestDaemonNoSpaceLeftOnDeviceError 49f3e7d233 Dockerfile: remove APT_MIRROR build-arg baca6cb417 Don't allow port in CIFS URL c8134fa046 vendor: github.com/moby/buildkit v0.12.4 a189832454 add TaskStatus to swagger docs faa843fcef vendor: github.com/gorilla/mux v1.8.1 028ed1bb22 vendor: github.com/spf13/cobra v1.8.0 e18f5a5304 container: internalize InitAttachContext fcb89da9c2 c8d/integration-cli: Skip TestListDanglingImagesWithDigests 61d94850a7 cmd/dockerd: make cobra templates a const 0f163170a7 cmd/dockerd: remove various cobra templating 3bfb6a9420 frozen images: update to debian:bookworm-slim fd40dfaf58 Dockerfile: remove uses of DEBIAN_FRONTEND e72c4818c4 Dockerfile: update to Debian "bookworm" (current stable) 8ae94cafa5 cifs volume resolves hostname correctly. 3a0af5ad30 integration/TestLiveRestore: Wait for process to exit 61d8f57f2a daemon: kill: use log level to "warn" if container doesn't exit in time e262cd38ad c8d/integration-cli: Adjust DockerRegistryAuthTokenSuite 49d088d9ce builder-next: fix timing filter for default policy c3eed9fa3e integration-cli: fix TestDaemonICC tests for newer iptables versions c5ea3d595c liverestore: Don't remove `--rm` containers on restart 9b399814e7 integration-cli/TestCrossRepositoryLayerPush: Change repo name 9709b7e458 quota: increase sparse test-image to 300MB 65cfcc28ab hack/dind: update comments around AppArmor cfb8ca520a hack/dind-systemd: make AppArmor work with systemd enabled 203bac0ec4 daemon/c8d: Unmount container fs after unclean shutdown 964ab7158c Explicitly set MTU on bridge devices. 05523e289b c8d/integration: Adjust TestSaveCheckTimes b1676a289c daemon: ContainerRename: move log args to log fields d2865f1e8a daemon: win: set DNS config on all adapters 0fd0e8255f daemon: build ports-related ep options in a dedicated func 7786f8512b Revert "testing: temporarily pin docker-py tests to use "bullseye"" 4394c61e6c testing: update docker-py to 7.0.0b1 f877360dc1 api/t/swarm: Fix deprecation for ServiceSpec.Networks 681c94ca17 Dockerfile: update buildx to v0.12.0 68e73ceb67 update containerd binary to v1.7.9 2f28582b55 vendor: github.com/Microsoft/hcsshim v0.11.4 f4776ef9df ci(bin-image): skip dco on push tag events 8641d2da3b client: update example in readme 0ab7267ae3 Fix support for pull by digest ba46bda149 update authors and mailmap a3fdad84ad graphdriver/copy: faster copy of hard links fb53da508f vendor: github.com/opencontainers/runc v1.1.10 15bcc707e6 update runc binary to v1.1.10 84036d3e18 daemon/config: change DNSConfig.DNS to a []net.IP 1eadfb0e28 opts: ValidateIPAddress: improve error, godoc, and tests 981a878cf5 vendor: github.com/docker/go-connections fa09c952e3ea (v0.5.0-dev) 677d41aa3b Plumb context through info endpoint f0b89e63b9 Fix missing import for "scope" package 33564a0c03 libnetwork/d/overlay: support IPv6 transport e1d85da306 libnetwork/d/overlay: parse discovery data eagerly d47b3ef4c9 libnet: early return from updateSvcRecord if no addr available f5a611a74c daemon: ContainerRename: use named error-return 8074e7a437 Bump go-connections for TLS 1.3 support d06af368ad c8d: "unremap" the user namespace on commit a7acfffea6 test: Add a test for userns remapped daemon commit 876d4e5484 c8d: cleanup imports in the image builder file 7995e3288f Add until filter to docker image ls Signed-off-by: Rachit Sharma <rachitsharma613@gmail.com> 58785c2932 integration/networking: fix TestBridgeICC 6979503a85 Include port in URL for locally built Swagger docs 755f008c1e Default the auth config domain to the target image domain 7d9d601e6d project: document supported containerd versions 29ac09ee9d Revert "libcontainerd: work around exec start bug in c8d" c1a289e05a docs/api: update redirect metadata for hugo 49e04102c1 Update container-device-interface to v0.6.2 26f63600c1 daemon/snapshotter: Align mounter implementations d5d41c2849 daemon/config: Put params for the default network into a dedicated struct 587ad8845a integration/system: update TestInfoAPI to not use string-matching c1ab6eda4b integration/networking: Test bridge ICC and INC 409ea700c7 integration: Add a new networking integration test suite 02a932d63f Fix case where health start interval is 0 uses default 891241e7e7 seccomp: block io_uring_* syscalls in default profile 3c2b06099d Skip TestPullManifestList when using containerd 6ca1b9e4ce Skip the busybox digest check when containerd is enabled 123ade3763 builder/dockerfile: errmsg: quote build target 7257c77e19 libnetwork/ipam: refactor prefix-overlap checks 4e8ba395f2 integration: TestSaveRepoWithMultipleImages: minor cleanup 0dae0f2b5e integration: TestSaveRepoWithMultipleImages remove redundant remove 30cd8b8fca integration: make TestSaveRepoWithMultipleImages less flaky 1c50526092 daemon: improve daemon start informational log message a99bb24ea8 builder-next: make sure worker platforms normalized for containerd 29977d5058 contrib/check-config: conditionally disable color output. d60de4cafd Move the golangci-lint configuration file to the root dir cd95cd0671 c8d/push: Return error when repository has no tags df34db1158 c8d/pull: Don't wrap `no basic auth` error 5a83bebf76 ci: Setup otel tracing for windows integration tests 29ddf2214d docs(API): Add reason to network connect 403 63a9d72ee8 pkg/tarsum: handle xattrs like archive/tar does 4356962c69 update containerd binary to v1.7.8 38c4ceb00a vendor: github.com/containerd/containerd v1.7.8 34f5793521 vendor: google.golang.org/grpc v1.58.3 bd23c7729e vendor: golang.org/x/tools v0.10.0 205e4de3fd vendor: golang.org/x/mod v0.11.0 153d7e4038 exec/tests: add test for `--group-add` with `--user` 27e064e7e9 c8d/history: Fix nil dereference 808120e5b8 New `host_ipv6` bridge option to SNAT IPv6 connections 9d578a2e6d Cleanup duplicate imports 59c5f6e35b integration-cli: mark dockerCmdWithFail as an helper function 61c78d9438 daemon: Validate MacAddress on container create ee9f0ed895 api: Deprecate ContainerConfig.MacAddress 052562ffd5 api: Add a field MacAddress to EndpointSettings 98323ac114 integration/container: target v1.43 in a soon-to-break test 4f0cab3b74 api: ContainerCreate: re-organize BC conditions 79589354df api: ContainerCreate: remove repetitive nil checks 44a25f31a8 api: ContainerCreate: lowercase ErrEmptyConfig 91eee33f62 api: ContainerCreate: return an error when config is nil 417018659b daemon: remove redundant withResetAdditionalGIDs option 8f756fe679 c8d: show the real image creation date when listing images a73dfe68d3 api: ContainerCreate: init hostConfig and networkingConfig when nil 7e0cb4c46f c8d: Use the labels to get the children of an image f5535d516f c8d: Preserve image labels when tagging 70158284b7 api: fix a nil check on the wrong var d7266afc7e c8d/exec: Add additional groups on exec df3a321164 migrate to github.com/moby/sys/user aeb8972281 daemon: daemon.containerRestart: don't cancel restart on context cancel 52da88201c hack/validate: stop suppressing Xattrs deprecation c44c9dfa79 pkg/tarsum: migrate to (tar.Header).PAXRecords 3cf409aa9e pkg/archive: migrate to (tar.Header).PAXRecords 6a8a792019 pkg/archive: test tar headers are interoperable f2c67ea82f vendor: github.com/klauspost/compress v1.17.2 a7b44ea10f Dockerfile: update github.com/tc-hib/go-winres v0.3.1 0cf113e250 Add unit tests for outgoing NAT rules 619d98ab49 vendor: github.com/moby/buildkit v0.12.3 aad51c0b4e daemon: daemon.shutdownContainer: use context.WithoutCancel dca89c67ef daemon: daemon.containerStop: use context.WithoutCancel 8166818791 c8d: Return the "tag does not exist error" 4af420f978 libnetwork/internal/kvstore: prune unused method 4039b9c9c4 libnetwork/datastore: drop (KVObject).DataScope() 4f4a897dda libnetwork/datastore: drop (*Store).Scope() method 4b40d82233 libnetwork/datastore: un-embed mutex from cache 9536fabaa8 libnetwork/datastore: minor code cleanup 43dccc6c1a libnetwork/datastore: unconditionally use ds.cache 5a72ed3406 integration-cli: remove deprecated dockerCmd and waitRun utilities 06115bf82c integration-cli: DockerCLIPruneSuite: replace dockerCmd 285ab8c861 integration-cli: DockerCLIPluginsSuite: replace dockerCmd e28da7686e integration-cli: DockerCLIPluginLogDriverSuite: replace dockerCmd a837cb444c integration-cli: DockerExternalVolumeSuite: replace dockerCmd 5f884478e5 integration-cli: DockerCLIImportSuite: replace dockerCmd 885eceba1d integration-cli: DockerCLITopSuite: replace dockerCmd 6ce6b63482 integration-cli: DockerCLIHistorySuite: replace dockerCmd 268e72f10f integration-cli: DockerCLIRestartSuite: replace dockerCmd and waitRun c388416aac integration-cli: DockerCLICreateSuite: replace dockerCmd and waitRun 5c297fcc09 integration-cli: DockerCLIStatsSuite: replace dockerCmd and waitRun 7d2a6f2030 integration-cli: DockerCLICommitSuite: replace dockerCmd a4522b6a8f integration-cli: DockerCLIStartSuite: replace dockerCmd f7ddfdbae6 integration-cli: DockerCLIUpdateSuite: replace dockerCmd and waitRun d1108b8a06 integration-cli: DockerDaemonSuite: replace dockerCmd 9c161cc65a integration-cli: DockerCLIVolumeSuite: replace dockerCmd f482857959 integration-cli: DockerCLIImagesSuite: replace dockerCmd f1102e98bb integration-cli: DockerCLIPortSuite: replace dockerCmd and waitRun ba4d491562 integration-cli: DockerCLIRmiSuite: replace dockerCmd 5b3086db1f libnetwork/datastore: prevent accidental recursion 16e4bc9827 integration-cli: DockerCLISearchSuite: replace dockerCmd 89d7b77022 integration-cli: DockerRegistrySuite: replace dockerCmd c867ac4527 integration-cli: DockerCLICpSuite: replace dockerCmd 980a5bc72a integration-cli: DockerCLIBuildSuite: replace dockerCmd 4292f42308 integration-cli: DockerCLISaveLoadSuite: replace dockerCmd 50062b413c integration-cli: DockerCLIRunSuite: replace dockerCmd and waitRun d63cab5193 integration-cli: DockerCLILogsSuite: replace dockerCmd and waitRun 8e2e1f3d28 integration-cli: DockerRegistryAuthHtpasswdSuite: replace dockerCmd d3f4580519 integration-cli: DockerCLILinksSuite: replace dockerCmd and waitRun 58c5986f8b integration-cli: DockerCLIHealthSuite: replace dockerCmd and waitRun 707bb9b9ed integration-cli: DockerBenchmarkSuite: replace dockerCmd and waitRun eafb618594 integration-cli: findContainerIP: replace dockerCmd ba32bebd05 integration-cli: DockerCLIInfoSuite: replace dockerCmd and waitRun 4562f07887 integration-cli: DockerCLIExecSuite: replace dockerCmd and waitRun 8c661b5e9a integration-cli: DockerCLIEventSuite: replace dockerCmd and waitRun cf95278122 integration-cli: DockerCLIAttachSuite: replace dockerCmd and waitRun 1baec48367 integration-cli: DockerAPISuite: replace dockerCmd and waitRun 908821d48a integration-cli: dockerCmdWithFail: remove unused return 02fd8485fa integration-cli: DockerCLINetmodeSuite: replace dockerCmd and waitRun dbb2bd727d integration-cli: DockerNetworkSuite: replace dockerCmd and waitRun 5cc978c6a0 integration-cli: DockerCLIInspectSuite: replace dockerCmd and waitRun 86fb048e59 integration-cli: DockerCLIPsSuite: replace dockerCmd and waitRun b4ff5234bd integration-cli: remove transformCmd utility cdb44010c9 c8d/history: Fill ID for parents without the label d28bd54f2a c8d/history: Fix Tags assigned from parents e97716a95a Fix disk usage test cf9073397c Update check-config.sh 7bb54c3dc5 vendor: gotest.tools/v3 v3.5.1 bcca214e36 libnetwork: open-code updating svc records 33cf73f699 libnetwork: drop (*Controller).nmap 804ef16822 libnetwork: only delete svc db entry on network rm c85398b020 libnetwork: drop vestigial endpoint-rename logic 29da565133 libnetwork: change netWatch map to a set 0456c0db87 libnetwork: refactor isDistributedControl() 749d4abd41 libnetwork: get rid of watchLoop goroutine f05dce8d3a replace some strings with OCI consts e3feb05175 vendor: github.com/opencontainers/image-spec v1.1.0-rc5 0d27579fc7 Ensure that non-JSON-parsing errors are returned to the caller 26730c891a vendor: google.golang.org/grpc v1.56.3 6f625ae65a c8d integration: skip TestImportWithCustomPlatform 9357bcb582 c8d/pull: Return same access denied error as graphdrivers 488559a330 c8d/push: Set distribution source recursively d9b5445f39 c8d/pull: Handle pull all tags 095d2a29a3 distribution: Add Tags 9664f33e0d daemon: release sandbox even when NetworkDisabled 2df698025c HealthCheck: add validation for minimum accepted start-interval 25fb4dd50d switch to go.opentelemetry.io/otel/semconv/v1.17.0 96f85def5b s/HostIP/HostIPv4/ for `com.docker.network.host_ipv4` setting 2a14b6cf60 Use `iptRule` to simplify `setIcc` (code health) d7c6fd2f80 Move `programChainRule` logic to `iptRule` methods (code health) e260808a57 Move duplicate logic to `iptRule.Exists` method (code health) 14d2535f13 Move `iptables.IPVersion` into `iptRule` struct (code health) 4e219ebafb Eliminate unnecessary `iptRule.preArgs` field (code health) 4662e9889c Simplify `setupIPTablesInternal` parameters (code health) 919fe72f60 vendor: github.com/moby/buildkit v0.12.3-dev 40fde69be9 Revert "Return no basic auth creds error when needed" e1bacd18a3 ci: continue-on-error on non-PR with snapshotter enabled 70892220c8 ci: use matrix to test containerd backed image store 03decbc1e6 ci: split tests in a reusable workflow bb7408e851 c8d/changes: Fix concurrents diffs e3d8e979de integration-cli/TestSaveAndLoadWithProgressBar: Skip with c8d f51c5e1a5c c8d/save: Don't save name if exported by digest b5f5987959 c8d/load: Fix `Loaded image` message 42af8795a3 c8d/save: Implement exporting all tags f20abbc96c libnetwork: use conntrack and --ctstate for all rules c279c48a0e Skip TestPullAllTagsFromCentralRegistry 8777592397 Return no basic auth creds error when needed ebef4efb88 api/types: move ContainerLogsOptions to api/types/container 9670d9364d api/types: move ContainerListOptions to api/types/container 7bce33eb0f api/types: move ContainerStartOptions to api/types/container 0f77875220 api/types: move ContainerRemoveOptions to api/types/container 9498d897ab api/types: move ContainerCommitOptions to api/types/container 30f09b4a1a api/types: move ContainerAttachOptions to api/types/container 95b92b1f97 api/types: move ResizeOptions to api/types/container ec69501e94 api/types: move ServiceCreateResponse, and generate from swagger 5b3e6555a3 api/types: move ServiceUpdateResponse 48cacbca24 api/types: move image-types to api/types/image 44dbbeb196 c8d/progress: Remove unused mountable bcbbd9538f c8d/progress: Show Mounted/Exists status bb8bc1ffc8 update to go1.21.3 3bc45d78c9 update to go1.21.2 1800dd0876 vendor: golang.org/x/net v0.17.0 1946aead21 vendor: golang.org/x/crypto v0.14.0 0679ae984b vendor: golang.org/x/text v0.13.0 bc33c27796 vendor: golang.org/x/sys v0.13.0 db806533e6 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230911190601-f082dd7a0cee b81b27c21f vendor: github.com/go-logr/logr v1.2.4 cff4f20c44 migrate to github.com/containerd/log v0.1.0 e1d0aacb6a vendor: github.com/docker/distribution v2.8.3 0cd02ab1b4 integration/c8d: Skip TestBuildSquashParent aca9ea42bd vendor: github.com/moby/buildkit 0.12.3-dev d871a665de daemon/RegistryHosts: Don't lose mirrors a293cd6ab9 vendor: github.com/containerd/containerd v1.7.7 f3aa9e151d c8d: Simplify error handling and distribution source label 5f062032f7 TestPullNonExistingImage: Move to integration 53345fe357 TestPullNonExistingImage: Use subtests 2edb858b18 vendor: golang.org/x/net v0.13.0, golang.org/x/crypto v0.11.0 87de23a6cd vendor: golang.org/x/text v0.11.0 23f2e0fea7 Skip tests that check max concurrency 37ca57e9d5 libnet/d/bridge: inline error checks fcabc48ee4 c8d/load: Handle compressed archives cbc2a71c27 libnet/d/bridge: Don't set container's gateway when network is internal 491758a446 Dockerfile: upgrade Delve c587ba3422 registry: allow mirror path prefix in config 2c4551d86d libnet: resolver: remove direct use of logrus 4de8459265 libnet: add OTEL tracing to the embedded DNS b8ba263099 c8d/rmi: Handle explicit dangling name 25a813e924 c8d/rmi: Don't emit Untagged for dangling images f99c4ec798 c8d/history: Fill ID and Tags for all entries 1f6bacc486 TestDaemonNoSpaceLeftOnDeviceError: Adjust to snapshotters 28d057cb0e c8d/TestPsListContainersSize: Only check if size increased 34400dd4a2 TestPsListContainersSize: Fix size parsing/formatting e0e6ae741e daemon/c8d: Use WithoutCancel instead of context.Background c47cdd5f39 Revert "daemon/logger/etwlogs: rewrite to use go-winio/pkg/etw" 6f27bef9fc daemon/c8d: Use non cancellable context in defers 77f7c83114 c8d/push: Show progress only on blobs e8a7a9435f Dockerfile: update test-registry to v2.8.3 5b16dd6469 Remove duplicated trace logs ad877271f3 Limit OOMScoreAdj when running in UserNS ("Rootful-in-Rootless") 3d70af4ee4 adjust stats sampling order 16063c7456 vendor.mod: bump go line to 1.20 a4822abe37 c8d: Skip TestPullFailsWithAlteredManifest f9f439763a c8d/TestPullFailsWithAlteredManifest: Adjust error message 4001241ccf c8d/TestPullByDigestNoFallback: Adjust error message 9e3ed7b429 pkg/chrootarchive: fix Darwin build e465ebf2f3 update to go1.21.1, and fix download-URL aa282973d4 Dockerfile: use GOTOOLCHAIN=local f66c000229 c8d: Fix getting the platform of a single-platform image 2c89640ab9 distribution: TestPullSchema2Config fix test response a9fcb775e5 integration-cli: fix getTestTokenService not sending header 3197160114 daemon: Daemon.SetNetworkBootstrapKeys: make error-handling idiomatic f91c3cfda6 daemon: Daemon.initNetworkController: remove intermediate var dcc75e1563 libnetwork: Controller: agentInit, agentDriverNotify rm intermediate vars a384102fdf libnetwork/datastore: Store.Map, Store.List: remove intermediate vars bb5402e6fb libnetwork: Controller: getKeys, getPrimaryKeyTag: slight refactor 603f49706e libnetwork: Controller: getKeys, getPrimaryKeyTag: prevent panic f6e44bc0e8 internal: Add compatcontext.WithoutCancel 95aea39348 Make one-shot stats faster 618d9b5d54 libnetwork: nwAgent: un-export mutex 7cda3fb7b5 libnetwork: inline populateSpecial NetworkWalker ca1307c56e libnetwork: Controller: remove mutex for "store" a8ea752a93 libnetwork: Controller.cleanupLocalEndpoints: return errors 2e60051c92 libnetwork: Controller.sandboxCleanup: return errors 642cf261a8 libnetwork: Controller.NetworkByID: remove redundant error-handling 430a5f8581 api: Add method and path to trace operation string 41c186c344 hack: Run integration tests through Delve 42a51cb285 Add support for swarm seccomp and apparmor 0c66111c40 daemon: containers list code refactor 13b775a96e integration-cli/TestSaveAndLoadRepoFlags: Ignore LastTagTime difference 7c202d2fa4 integration-cli/SaveLoad: Don't check `repositories` file 724db8650c integration-cli: Skip TestLoadZeroSizeLayer with c8d 1337a66130 integration-cli: Skip Parent tests with c8d d5b067e04a ci(buildkit): remove regex skipping tests with digest inconsistency 286704bf6f ci(buildkit): expose github runtime for gha tests 34e71b374b builder-next/a/ci/pull: strongly type flightcontrol.Group c8773e10b1 builder-next/wrapper: use new exptypes constants a728bd0ee9 builder-next/pull: use ResolveMode.String() helper 221b73e23d builder-next: apply source policies on config resolve 2246297ae6 builder-next: adopt new wrapped types c217e3c87a vendor: github.com/moby/buildkit v0.12.2 8cd5f04ea3 daemon/c8d: use new containerd LabelDistributionSource constant fd6dd6935b vendor: github.com/containerd/containerd v1.7.6 79a4cbbec9 builder-next: make stub executor generic d7a31cfb2d libnetwork: Sandbox.resolveName: slightly simplify locking f549aaa205 libnetwork: Sandbox.resolveName: add fast-path for alias lookups 9249b34be8 libnetwork: Sandbox.resolveName: rename vars for clarity 4401ccac22 libnetwork: Sandbox: remove some intermediate vars 0e80073e01 daemon: strongly type containerd log.OutputFormat 4ff252456b libnetwork: rewrite Network.isClusterEligible to return agent 6203e3660d libnetwork: Endpoint: return early if no agent was found 6eeef51c6a libnetwork: Controller.agentSetup: use structured logs 8b95ea4a35 libnetwork: Controller.agentSetup: remove redundant condition e852ba55a5 vendor: github.com/Microsoft/hcsshim v0.11.1 06a640084f Fix graphdriver lookup in makefile 093481618d c8d: Skip the test that checks Config.Image e6907243af client: negotiate api version before handling version-specific code 3936c57294 c8d: test a backend dependent error on pull 207c4d537c c8d: Fix `docker diff` 601c9b29e6 c8d/pull: Fix stale Downloading progress 313a090c0e libnetwork/osl: add some TODOs 9d3b1f9419 libnetwork/osl: make constructing Interfaces more atomic 47f9e70385 libnetwork/osl: Namespace.Restore: conditionally fetch IPs ee5a91e663 libnetwork/osl: Namespace.Restore: flatten nested conditions 299bd58c5a libnetwork/osl: Namespace.Restore: rename vars for readability 7b96663082 libnetwork/osl: Namespace: inline setGateway and setGatewayIPv6 bd17d27658 libnetwork/osl: Namespace: make error-handling more idiomatic 0b4a70ca2c libnetwork/osl: Namespace: programRoute, removeRoute rm path arg 542fe0da40 libnetwork/osl: Namespace: make mutex private 338fc49060 libnetwork/osl: implement Namespace.RemoveInterface 3ff75aeb07 c8d/pull: Deprecation notice for schema1 manifests 2cb94ade6c distribution: Extract schema1 deprecation notice 39fe25b69e c8d: Fix getting image with platform 68b67b3230 c8d/pull: Support legacy schema1 prettyjws manifests d5425f28ae Don't run tests twice bddd826d7a profiles/apparmor: deny /sys/devices/virtual/powercap 83cac3c3e3 oci/defaults: deny /sys/devices/virtual/powercap 2394b07bce c8d: Number of containers using an image e19e541e2c libnet: add comment to ipamType acf825def2 api/t/net: test EndpointIPAMConfig.Validate() 3092b261e2 daemon: move most of validateEndpointSettings into api/t/net 554036040b vendor: github.com/AdaLogics/go-fuzz-headers v0.0.0-20230811130428-ced1acdcaa24 6fc3ead321 vendor: google.golang.org/grpc v1.56.2 73041028b6 vendor: google.golang.org/protobuf v1.31.0 54dc8d2968 vendor: github.com/cenkalti/backoff/v4 v4.2.1 d97e4300ee vendor: google.golang.org/api v0.114.0 d50585b05b vendor: golang.org/x/tools v0.8.0 51d8a975ab vendor: golang.org/x/oauth2 v0.7.0 9670db3904 vendor: golang.org/x/crypto v0.9.0 a046616249 vendor: golang.org/x/sys v0.10.0 f29155950f vendor: golang.org/x/sync v0.3.0 0354791147 vendor: github.com/klauspost/compress v1.16.5 87dd1de046 vendor: github.com/tonistiigi/vt100 v0.0.0-20230623042737-f9a4f7ef6531 bd6cadffb0 vendor: github.com/containerd/continuity v0.4.2 6d93db06db vendor: github.com/vbatts/tar-split v0.11.3 171ecf8cf2 vendor: github.com/vishvananda/netns v0.0.4 81ab8db1c3 api/t/net: add missing comment to ValidateIPAM 04a47e88d2 api/t/net: move endpoint structs into endpoint.go 19c07198b6 daemon: Check if endpoint address is in allowed range bfd8c6deb7 daemon: Validate EndpointSettings.IPAMConfig.LinkLocalIPs 4bd0553274 daemon: Return all validation errors for NetworkingConfig and EndpointSettings ff503882f7 daemon: Improve NetworkingConfig & EndpointSettings validation 4c03618fab registry: remove jsonmessage dependency 6c563cda82 c8d: fix TestRemoveContainerAfterLiveRestore 0c4397deaf api/pull: Validate repo name ccb37fa567 imageService/PullImage: Move reference parse to api 28861e0c47 c8d: Skip TestRemoveImageGarbageCollector bf692d47fb deprecate pkg/loopback (utility package for devicemapper) 96faee9762 libcontainer: client.processEventStream: use locally scoped variables 32e2c53467 c8d: Fix pull progress update 5a4962f80d c8d: Refuse images with digest algo when tagging bd523abd44 remove more direct uses of logrus 1ffbbe798a vendor: github.com/containerd/containerd v1.6.24 7f281907dd c8d/push: Add missing message about repository babf907bfd c8d/push: Support pushing all tags 7ec9f304e9 daemon/cluster: create managed ctr with multiple EndpointsConfig 5e15ed314b api: Improve error on ContainerCreate with multiple endpoints cc9c930e29 vendor: github.com/Microsoft/hcsshim v0.9.10 24102aa8ca update containerd binary to v1.7.6 bbcd662532 api: Allow ContainerCreate to take several EndpointsConfig for >= 1.44 35e9d688ba libnetwork: remove netWatch.remoteEps, as it's unused 8ae5dc4aae libnetwork: Network.updateSvcRecord: remove unused localEps arg 37b2ea9a8d libnetwork: Controller.processEndpointCreate, Delete: remove nmap arg 62e55fd58a Add support for registry token in containerd pull logic 14c5f7bf1d contrib: outline purpose of download-frozen-images-v2.sh 0937aef261 libcontainerd/windows: Don't reap on failure b805599ef6 libcontainer/windows: Remove unneeded var declaration 55b664046c libcontainer/windows: Fix process not being killed after stdio attach failure 9c84994830 libnetwork/portmapper: remove unused PortMapper.checkIP f5d6af13d0 libnetwork/portmapper: un-export PortMapper.Allocator 863909a749 libnetwork/portmapper: New(): remove unused argument 5ab8d41d9f Add dmcgowan as curator de2447c2ab daemon: overlay2: Write layer metadata atomically 78479b1915 libnet: Make sure network names are unique 5fa011dc0c vendor: resenje.org/singleflight v0.4.0 fd15ddbc30 daemon: GetImageAndReleasableLayer: simplify "FROM scratch" case 4229032676 daemon/containerd: use "DiffID" type for diff fields 5d5eeac310 daemon: automatically set network EnableIPv6 if needed 0313544f4a c8d: Handle userns properly c63a952dc9 c8d/builder: Don't append empty tar layer to manifest 9127285985 c8d/builder: Lease layer snapshots f22b112005 c8d/commit: Unpack committed image 8832cdf6e1 c8d: Common unpack code for specific manifest c6bded3475 c8d/builder: Don't use diffID as snapshot parent 8c7e19c5ff c8d/builder: Set empty diffID for rolayer 6ebfa57364 c8d/builder: Don't mount the rolayer snapshot c41121cc48 update to go1.20.8 4acbf7d8c3 c8d: disable schema1 registry integration tests 833b514d98 c8d/mount: Create same directory owners as graphdrivers a8975c9042 api: Add consts for predefined networks 12e27dfd8f Fix host_ipv4 bridge option when IPv6 and ip6tables are enabled 7c0f6741eb go mod tidy cd204f1118 libnetwork/osl: Namespace.DeleteNeighbor: remove intermediate vars 4215a1542b libnetwork/osl: Namespace.DeleteNeighbor: remove osDelete argument bc77104fed libnetwork/osl: Namespace.DeleteNeighbor: don't warn on non-existing neighbor 5e7eade1f7 integration: don't poll for containers to be running b7d29c1e23 registry: un-skip some tests that don't require root de27973538 registry: merge validateEndpoint into newV1Endpoint 6cc6682f5f daemon: fix under what conditions container's mac-address is applied 820f37b1a6 hack: compile w/o optimizations & inlining when debugging c44f8958f6 vendor: github.com/cncf-tags/container-device-interface v0.6.1 fa3ddc5116 distribution: newRepository: remove naked return and intermediate vars 43740ab642 registry: remove intermediate vars in mock 550e628f05 registry: newV1Endpoint: make it clear we skip validation for Docker Hub 5728516371 c8d/image: Allow truncated id to have sha256: prefix c2004fb8c4 hack: Add TEST_IGNORE_CGROUP_CHECK 7e506f71f3 registry: v1Endpoint.ping: include URL in debug log 0c6f8f9290 registry: v1Endpoint.ping: don't io.Readall the response e9ad878df6 registry: v1Endpoint.ping: add fast-path for X-Docker-Registry-Standalone 9e797a6db9 c8d: Remove the panic from UpdateConfig 4982c70db4 integration-cli: Skip TestRmiParentImageFail when using c8d snapshotters 0f7a65e59b registry: remove use of v1 Version field and X-Docker-Registry-Version 3d8b8dc09a Use process substitution to redirect to tee c0ece8d4f3 integration-cli: Use different label in TestBuildMultiStageGlobalArg 081b74b97d c8d/builder: Store parent in c8d image label 5f59f7bb49 integration/container: combine TestResize tests into subtests a4ceb0e4ac integration/container: TestResize, TestResizeWithInvalidSize: rm poll.WaitOn ee7ca6822a integration/container: fix flaky TestResizeWhenContainerNotStarted da5ed8b35b CI: Switch to use tracing action a3c97beee0 image: implement CheckOS, deprecate pkg/system IsOSSupported 150b657bad pkg/system: move ErrNotSupportedOperatingSystem to where it's used 9b7784781d Add test for buildkit history trace propagation 3b4ccb2eca CI: Setup otel tracing for integration tests e8dc902781 Wire up tests to support otel tracing 642e9917ff Add otel support 776c376227 c8d: Better pull progress 1cb45e582c c8d/import: Don't close compressed stream twice b5376c7cec pkg/idtools: remove sync.Once, and include lookup error 0be416dfdc distribution: filterManifests split complicated condition 150b1c8c73 daemon: daemon.createSpec: remove uses of logrus dbb4d54e01 c8d: Add image save events 09470db089 c8d: Add image pull events 1847dc4b7f c8d: Add image push events 1148a24e64 migrate to new github.com/distribution/reference module dffccfd0f1 integration-cli/build: Alias `cmp` as `is` 5dbd198b53 integration-cli/build: Parse multiline `images -q` output 96516002cc c8d: Print the tag, digest and size after push 417328e44e libnetwork/osl: remove dead code 237eb3b5f1 docs(api): rephrase description for /images/create 0ffa3dd870 daemon/c8d: Use Docker imagespec 14af90b868 c8d/integration/TestBuildOnBuildCache skip parent check 366a5f1d74 image/spec: Add Go structs 536826d66f image/spec: Add Healthcheck.StartInterval (v1.3) 75097cf09a test: remove platform related timeout values 6dd78a9ac2 image/spec: Fix typo in "superseded" 84a4f37cf7 test: use info from the version endpoint for arch checks 159b168eea test/integration: Remove checks for "not arm" in tests ebb9fade23 makefile: use info -f to get the current storage driver c243efb0cd client: TestImageTagInvalidSourceImageName remove invalid test-case 3a4a04e462 distribution: simplify mocks d864d1eb97 image/spec: add back versioned files b8de6c01b5 image/spec: rename v1.2.md to spec.md c3f2bd1009 image/spec: rename v1.1.md to spec.md 7ff38506ab image/spec: rename v1.0.md to spec.md 32d5e6312d image/spec: use permalink to versioned documents 7b7019a4da image/spec: add missing "Shell" field (v1.2) 5380f3f0c4 image/spec: add missing "ArgsEscaped" field (v1.1, v1.2) f33370219b image/spec: add missing "OnBuild" field e19edd3f25 image/spec: minor fixes and touch-ups in markdown files b9f9e20f01 daemon: Daemon.killWithSignal(): don't discard snapshotting errors af535233cc daemon: Daemon.killWithSignal(): don't discard handleContainerExit error 8c6a46f643 libnetwork: Endpoint.AddStaticRoute don't create StaticRoute if unused 1dcb11f81d libnetwork: Endpoint.InterfaceName: remove redundant nil check a9a0ffaf51 testing: update docker-py 6.1.3 f6959bc597 test-docker-py: skip AttachContainerTest::test_run_container_reading_socket_ws e0f171f342 testing: update docker-py 6.0.1 79a0f82ca1 test-docker-py: remove comment about docker 17.06 limitations be90e5e1d4 libnetwork: Controller.addServiceBinding: fix duplicate word in comment 77c2613d3a libnetwork: fix some missing imports on macOS and FreeBSD 5da2dd98e9 registry: move search-related code to separate files f1a7028900 registry: rename v1-endpoint tests to have a common prefix 19f6f0b3db registry: move v1 endpoint tests to endpoint_test.go 47bf587f84 registry: ResolveAuthConfig: rename var that collided with import a0a8d9d057 libnetwork: notify another driver registerer 2689484402 volume/local: Don't unmount, restore mounted status f1a6e16258 errdefs: remove redundant import comments b6ba2a4f75 errdefs: remove gotest.tools dependency 3f8cbd8ec9 registry: update some godoc e10eca3d1a daemon/containerd: rename some vars that collided with imports aefbd49038 daemon/containerd: newROLayerForImage: remove unused args 28d201feb7 daemon/containerd: log errors when releasing leases d43e61758a registry: deprecate APIEndpoint.Version and APIVersion type aef703fa1b integration/liveRestore: Check volume content 4e4f62b6db distribution: use registry consts for API version in tests aa59b0f5a2 registry: improve error for invalid search endpoints 14b53c6318 registry: simplify `trimV1Address` 062c80199f registry: combine TestEndpointParse and TestEndpointParseInvalid 0f871f8cb7 api/types/events: define "Action" type and consts 10a3a3bc49 daemon: inline some variables when emitting events 9331d6de1e daemon/events; fix TestLoadBufferedEventsOnlyFromPast f6f6c32138 api: ValidateRestartPolicy: improve errors for invalid policies 333e04e84e integration-cli: TestEventsFormat: rewrite test to not use deprecated fields fa79b5d59f integration/container: TestPause: don't depend on deprecated fields 0161aad462 client: TestEvents: don't depend on deprecated fields 5123ae4352 daemon: TestLogContainerEventCopyLabels: inline vars 2928c5ae92 daemon: TestHealthStates: don't depend on deprecated fields 62ec14d9ec daemon/events: verify non-deprecated fields f443006fa2 daemon/events: rewrite test-assertions with gotest.tools 70ad5b818f api/types/events: make events.Type an actual type 5a02ed5e84 integration: use events-consts in tests 9ea50365d6 daemon/events: use events-consts in tests, and fix vars that collided 2f8e957713 Dockerfile: update crun binary to v1.8.7 32e79c464a libnetwork: Network: return early where possible 5512c7e838 libnetwork: Network.Services: remove some intermediate vars d6b8298cfd libnetwork: Network.Services: return early and don't lock in a loop 8b21609654 libnetwork: remove Endpoint.Interface f8181b8875 libnetwork: Endpoint.Iface, Endpoint.Interface remove redundant "if" 6a61bacafe libnetwork/drivers/remote: rollbackEndpoint.Interface: return concrete type dc061d2ed3 libnetwork/drivers/remote: driver.DeleteNetwork: remove var that collided 40b1389917 libnetwork/drivers/remote: remove unused testEndpoint.Interface 15435f7293 libnetwork/drivers/bridge: testEndpoint.Interface: return concrete type 9afb688f5f libnetwork/drivers/bridge: getIPv4Data: remove unused argument 639449f84e libnetwork: nwAgent.bindAddr: change to net.IP b75e831567 libnetwork: resolveAddr: add GoDoc ebe2347ac6 daemon: remove LogPluginEventWithAttributes as it's not used aa764e6009 daemon: logNetworkEvent, logSecretEvent, logConfigEvent rm unused args fa13b0715f integration/internal/swarm: rename max/min as it collides with go1.21 builtin 79495c5b6a pkg/tailfile: rename max/min as it collides with go1.21 builtin df2f25a977 pkg/plugins: rename max/min as it collides with go1.21 builtin 6c036f267f pkg/sysinfo: rename max/min as it collides with go1.21 builtin 55192de9e3 pkg/archive: rename max/min as it collides with go1.21 builtin a3867992b7 daemon: rename max/min as it collides with go1.21 builtin f6b2e34268 Update example in README.md to close cli object 318b3d4fe5 api/types/versions: rename max/min as it collides with go1.21 builtin cb394a62e5 restartmanager: rename max/min as it collides with go1.21 builtin 8f64e2e925 daemon: daemon.logClusterEvent: use events.Type for event-types 3dea2f230a daemon: inline some vars when producing events 385f6429be api/server/router/network: remove empty file 350223201e integration/container: TestCheckpoint: remove intermediate vars b688af2226 api/types: move checkpoint-types to api/types/checkpoint 70baaec6a5 Dockerfile: remove libdevmapper-dev 12d1f4f385 hack: remove devicemapper leftovers and build-tags f6a5318f94 Dockerfile: Windows: update Golang download domains to cut down redirects 2aabd64477 hack: update link to GOPATH documentation b18e170631 CONTRIBUTING.md: update links to golang docs and blog 136e86bb5c api: swagger: update link to Go documentation 4862d39144 docs/api: update links to Go documentation cd49f9affd update golangci-lint to v1.54.2 d52f20048d api/server: format code with gofumpt e9b09b49fd builder/builder-next: format code with gofumpt 73894af9ff contrib/apparmor: format code with gofumpt ce01d779df daemon: format code with gofumpt 211d3a8c32 pkg/stack: format code with gofumpt 95e99e629c pkg/fileutils: format code with gofumpt 6c6e1fb13d pkg/containerfs: format code with gofumpt 1e579a7a2a pkg/sysinfo: format code with gofumpt 263c00f27c testutil: format code with gofumpt b71951c70c container: format code with gofumpt 87cedbe443 image: format code with gofumpt 976da91fb7 pkg/loopback: format code with gofumpt b4d6eca9b8 pkg/chrootarchive: format code with gofumpt 07e6b0ac70 integration: format code with gofumpt 498da44aab remove some remaining pre-go1.17 build-tags 210abfaef6 libnetwork: add godoc to Endpoint 04422f5ec1 daemon: WithNamespaces(): add notes about user-namespaces dd26e6b15e daemon: Daemon.getIpcContainer: make errors less repetitive 3d94eb9bcd daemon: Daemon.getPidContainer: change to accept "id" argument bc7f341f29 daemon: WithNamespaces(): fix incorrect error for PID, IPC namespace bd5d6480e7 daemon: WithNamespaces(): remove redundant "if" 6eaefe5bf5 daemon: WithNamespaces(): use switch instead of if/else if/else 43aa67a982 daemon: WithNamespaces(): use OCI-spec consts for namespaces 759698581e daemon: WithNamespaces(): inline variables 13648a0e21 daemon: remove Daemon.checkContainer and related utils 78828f9b58 test/integration: Download the registry binary bd2c553870 Fix some broken executable flags 143b3b2ef3 test: update registry version to latest 01214bafd2 c8d/builder: Don't drop fields from created image b92cf68add libnetwork/osl: remove Sandbox and Info interfaces c881360e88 libnetwork/osl: remove Interface.Master() as it's unused b9bf407929 libnetwork/osl: remove Interface Interface 8631e69cdf libnetwork/osl: remove Sandbox.InterfaceOptions() etc. f3d29db6a2 libnetwork/osl: remove Sandbox.NeighborOptions() etc. a365fb0e9d libnetwork: move more osl.Sandbox related code to Linux-only files 95abde479a libnetwork: implement Controller.setupOSLSandbox 35456d2eb1 libnetwork/osl: add godoc to networkNamespace aecfa55c4c libnetwork/iptables: (Add|Del)InterfaceFirewalld: check firewalld status 4b0d38de06 TestDiskUsage: don't panic if results don't match c0568a95d8 integration/container: check some error-types in tests 2b583c0923 daemon: cleanupContainer: slightly cleanup error messages 69cf2ad6a5 daemon: cleanupContainer: don't fail if container is already stopped 20b770237c daemon/network: Settings: move sandbox fields together 405f571ae8 daemon: updateSandboxNetworkSettings: remove unused error-return 2eccf0e8d1 libnetwork: Controller.NewSandbox: don't generate ID if not used 6cbe06ff3f test: Skip graph driver tests when using containerd snapshotters 3553b4c684 replace dockerfile/dockerignore with patternmatcher/ignorefile a479b287c7 vendor: github.com/moby/patternmatcher v0.6.0 bedcc94de4 daemon: Handle NotFound when deleting container lease dfaff9598c c8d/run: Allow running container without image eb56493f4e c8d/commit: Don't produce an empty layer 3e8af0817a ipam: Replace ChildSubnet with parent Subnet when its mask is bigger 4f47013feb api: Validate IPAM config before creating a network 2be118379e api/types/container: add RestartPolicyMode type and enum b8ff8ea58e Don't return an error if the lease is not found dff53a02ef libnetwork: remove Controller.Sandboxes as it's no longer used d6f340e784 gha: set 10-minute timeout on "report" actions f44fbab3ec libnetwork: remove Controller.WalkSandboxes and related code 6dba98cf38 libnetwork: implement Controller.GetSandbox(containerID) 6c4153f348 libnetwork: parallelTester: move vars closer to where they're used e690cdb6a3 libnetwork: remove redundant sandboxTable type 3c10db669e libnetwork: remove unused SandboxKeyWalker cc414a2012 libnetwork/osl: remove Sandbox.Info() 3b9f4395cf libnetwork: remove InterfaceInfo interface d146e592d8 api/t/network: Move IPAM types to their own file 219d4d9db9 ci(bin-image): check repo origin d125823d3f hack: use long SHA for DOCKER_GITCOMMIT 2010f4338e ci(bin-image): clean up metadata ad91fc1b00 ci(bin-image): clean up env var handling 5dc44f03f0 classic builder: align "removing intermediate container" output 06e540c271 libnetwork: move all SandboxOptions to a separate file 2afa4eba43 libnetwork: resolver: Resolver.dialExtDNS use joinHostPort and cleanup 3218e26a22 libnetwork: resolver: remove some intermediate variables 986de11464 libnetwork: resolver: remove setCommonFlags, use createRespMsg 7f965d55c7 volume/local: Fix debug log typo 678ce73907 windows: update default base image for dev container 0c522c6bbf libnetwork/datastore: remove deprecated scope consts 73ffb48bfb ci(bin-image): populate DOCKER_GITCOMMIT, take 2 9aed6308d4 ci(bin-image): populate DOCKER_GITCOMMIT c22ec82477 libnet: Fix error capitalization bd0111c1f4 libnet: Replace NoServiceError with UnavailableError 42d34e40f9 libnet: Replace BadRequest with InvalidParameter a64adda4e7 c8d/inspect: Ignore manifest with missing config c85a33d74b libnetwork/iptables: un-export ZoneSettings, and slight refactor d979d2af45 libnetwork/iptables: fix TestFirewalldInit 513063bcf9 libnetwork/iptables: ProgramChain: don't fail if interface not found 64de635626 Add a temporary drop-in replacement for errors.Join cff341e5e6 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230815220644-3f2e40b3ed51 56b62640a2 libnetwork: Controller.NewSandbox: use named error-return cbe692ffd1 libnetwork: Controller.NewNetwork: use named error-return e2f9d6c4c3 libnetwork: rename vars that collided with builtins e8f0f5a4ce libnetwork: rename agent type to reduce collisions 0503cf2510 libnetwork/drivers/bridge: setupIPChains(): name output variables b9d9504df5 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230808164555-1983e41a9fff 7b66ae1531 vendor: golang.org/x/crypto v0.3.0 59aa3dce8a remove s390x and ppc64ls pipelines ea2d686468 libnetwork/iptables: DeleteConntrackEntries: remove "totals" returns f1240393d9 libnetwork/iptables: reduce DeleteConntrackEntriesXX debug logs 18a0ff2b2b daemon: Daemon.handleContainerExit(): rename err-var for clarity 178125ae39 libcontainerd/supervisor: explicitly ignore process kill errors f8363690ca daemon: Daemon.handleContainerExit(): reduce ambiguity in error handling 72648f0ba6 oci: DefaultLinuxSpec: use OCI-spec consts for namespaces 17571ff199 integration/internal/container: add WithPIDMode option 917dae58e1 integration/internal/container: remove import aliases e0f5bb4820 daemon: withLibnetwork(): return early if networking is disabled 225691e258 daemon: withLibnetwork(): use OCI-spec consts for namespaces 8376595621 libnetwork: un-export SetExternalKey 91a3a95385 libnetwork/options: OptionExecRoot: skip osl.SetBasePath on non-Linux 48ea7ec970 libnetwork/osl: use filepath.Join() only when changing basedir 8bf62010a4 libnetwork: merge linux-only test-files c0562d4eed libnetwork: rename unix-only testfiles 8070f15966 libnetwork/drivers/bridge: rename some linux-only files 014fefee1d libnetwork/drivers/bridge: minor formatting fixes 80d158e0de daemon: remove containerNotModifiedError dffe634c19 daemon: Daemon.ContainerStart(): make validateState a regular function 6da42ca830 c8d/diff: Reuse mount, mount parent as read-only 051d51b222 c8d/export: Use ref counted mounter 303e2b124e integration: Add test for not breaking overlayfs 05deecaa45 internal/testutils/netnsutils: move utils that were not used on Windows d4e1c072e2 libnetwork: move resolverIPSandbox closer to where it's used f661bd8ee5 libnetwork: Resolved.SetupFunc() minor cleanup de4ba13400 libnetwork: move resolver tests that were skipped on Windows 1e4e9161c5 libnetwork: move TestDNSOptions to a non-windows file bf1fb97575 daemon: Daemon.containerStart(): add comment to clarify error-type b039bbc678 update runc binary to v1.1.9 79b467808e vendor.mod: github.com/opencontainers/runc v1.1.9 74feadacf8 integration/internal/container: refactor CreateExpectingErr 0899ba4a3f integration/internal/container: add NewTestConfig utility 3cb52a6359 integration/internal/container: use consistent name for api-client 26be2bc6b9 integration/container: use consistent name for api-client 38e26c4717 daemon/create.go: Fix error capitalization 435ecfe6e0 test/volume: Replace Check with NilError where suitable 3d3ce9812f integration/tag: Move to client unit test 742475bc8d daemon/create.go: Supersede github.com/pkg/errors 4cc796ab93 client: Client.buildRequest: use http.NewRequestWithContext 58dc0fcd1e client: Client.Ping: re-use request when falling back to GET 87fff769f4 client: Client.checkResponseErr: change errorMessage to an error 71da8c13e1 integration/tag: Use subtests and make parallel 11a0c2779b pkg/plugins: Rewrite with assert.Check 43956e1b71 hack/test: Don't exit early when all tests are filtered out ae008570ff hack/test: Split -test.run for integration and integration-cli 510cac5f5b hack/test: Fix checking if integration-cli are filtered out 8a1ca49657 libnetwork/osl: nwIface: add godoc 16785b9b7b libnetwork/osl: move all networkNamespace methods together 5b0fa7aaca libnetwork/osl: some minor nits 972d80b596 libnetwork/osl: clean up newInfo() a bit 0da721ec38 libnetwork/osl: make newKey and newInfo a t.Helper() d9442aab88 libnetwork/osl: nwIface: remove mutex altogether 2afe18d2ce libnetwork/osl: nwIface: unexport sync.Mutex 8b989ac665 libnetwork/osl: let's not do this, etc. 3d0a7d819c libnetwork: remove Network.Info() and remove NetworkInfo interface 74354043ff remove uses of libnetwork/Network.Info() 36a0946aa9 libnet/ipamapi: Remove unused errors fd4ec26313 daemon/network.go: Fix error capitalization 64e01c627f daemon/network.go: Remove github.com/pkg/errors pkg 94dc10378d libnetwork: network.requestPoolHelper: slightly optimize order of checks 67e2c1d482 libnetwork: network.requestPoolHelper: remove dead code ad68883c5a libnetwork: network.requestPoolHelper: don't defer in a loop 32fcde6d9e libnetwork: network.IpamConfig, network.IpamInfo: name output vars df03357d19 libnetwork/ipam: move PoolID.FromString() to a PoolIDFromString() func 808fed550d libnetwork/ipam: PoolID.String(): don't use fmt.Sprintf 87fc8c772b libnetwork/ipam: Allocator.RequestPool: name args, output vars 6dbc9c1c53 libnetwork/ipam: Allocator.RequestPool: mark options arg as unused 7047964bd6 libnetwork/ipam: Allocator.RequestPool: make parseErr only handle errors 821ef5cbaf libnetwork/ipams/null: use consts for fixed values 05ef5559c3 pkg/plugins: override timeouts during tests 6841a53d17 hack/test: Don't fail-fast before integration-cli 2aa24519da ibnetwork/drivers/bridge: newLink: validate before creating 5d722b35d9 libnetwork/drivers/bridge: bridgeNetwork.getEndpoint(): move lock eba15fe905 libnetwork/drivers/bridge: driver.link: don't defer in a loop 76b736c242 libnetwork/drivers/bridge: driver.link: name return var for defer handling ea5f21ceac libnetwork/drivers/bridge: don't convert IP to string and back again 8b6203b613 libnetwork/drivers/bridge: link.Enable: don't register reload on error 0f4ba145ee libnetwork/drivers/bridge: link.Enable, link.Disable use iptables.Action 40adb4317b api: Remove duplicated check on CheckDuplicate 3e52785aae volume/drivers: use plugin Content-Type headers v1.2 481dde8b70 libnetwork: use plugin Content-Type headers v1.2 93b5c31541 integration-cli: use plugin Content-Type headers v1.2 b663c7c5c3 pkg/plugins: add convenience alias for VersionMimeType c8930105bc fix: Normalize `RLIMIT_NOFILE` to sensible defaults 4f9540f19f daemon: remove some intermediate vars and some cleanup 8153a7760e daemon: Daemon.tryDetachContainerFromClusterNetwork: cleanup a018bb1da7 daemon: Daemon.initializeNetworking: remove var declaration 12d8029d56 daemon: Daemon.getNetworkedContainer: remove intermediate var d1aa1979b4 daemon: buildEndpointInfo: minor refactor 7a59913b1a Add CDISpecDirs to Info output 0034a98eb1 pkg/plugins: Guard storage and unparallel racy tests bbb9255562 Skip CDI driver registration if CDISpecDirs is empty 3b71197fb8 Set default CDI spec dirs after parsing args f3e62199ea daemon: Remove unneeded error wrapping in verifyNetworkingConfig d7a9f15775 bakefile: Remove default value of DOCKER_GITCOMMIT 2b028dc55b daemon: Daemon.buildSandboxOptions: use range when looping 33b4285eb1 daemon: Daemon.buildSandboxOptions: don't use PortBinding.GetCopy() ddb3d46533 daemon: Daemon.buildSandboxOptions: remove intermediate vars 27a27db73f daemon: Daemon.buildSandboxOptions: move vars to where they're used 91cab53a3e libnetwork: make OptionDNS, OptionDNSOptions, OptionDNSSearch take a slice 2cbed9d2a8 daemon: inline Daemon.getDNSSearchSettings 603547fa19 daemon: change Daemon.setupPathsAndSandboxOptions to a regular func 07f2df69c7 daemon: buildCreateEndpointOptions: minor nits 5158a33f15 daemon: buildCreateEndpointOptions: use range when looping 1c6dae1291 daemon: buildCreateEndpointOptions: don't use PortBinding.GetCopy() cc79024761 daemon: buildCreateEndpointOptions: remove intermediate vars 45de99aa06 daemon: buildCreateEndpointOptions: don't parse empty vip 7d429125d2 daemon: buildCreateEndpointOptions: move vars to where they're used 6ce92aa523 daemon: buildCreateEndpointOptions: skip getPortMapInfo() if not needed 9e9a17950a daemon: FindNetwork: minor cleanups 8c4af5dacb distribution: show image schema deprecation on all registries 982bc0e228 distribution: update warning for deprecated image formats 5bd8aa5246 integration: Add RunAttach helper d7fb4dd170 integration: Extract stream demultiplexing from container.Exec 584f016e99 docs/api: remove stray underscore in version-history.md d5cb7cdeae update to go1.20.7 fced566714 client: move resolveTLSConfig to a Client.tlsConfig() 47af265234 client: Dialer: inline fallbackDial 74d9850bb9 client/buildkit: ClientOpts: update docs to use doc-links, and inline 971083d419 api: search: deprecate is_automated field, and is-automated filter 5e2a1195d7 swap logrus types for their containerd/logs aliases 1a51898d2e TestDaemonProxy: use new scanners to check logs 476e788090 Fix daemon proxy test for "reload sanitized" e2d400bea9 libnet/d/bridge: Inline InvalidLinkIPAddrError 6df4a00bb9 libnet/d/bridge: Remove pointless BadRequestError impl 7c13985fa1 libnet/d/bridge: Inline InvalidIPTablesCfgError d8f42ee21a libnet/d/bridge: Inline IPTableCfgError a40d00c421 libnetwork: remove ErrDataStoreNotInitialized 66b379785e libnetwork: remove unused InvalidContainerIDError d8cd4f6421 libnetwork: remove unused UnknownEndpointError fc5c16f491 libnetwork: remove unused NetworkTypeError e9f1888560 libnetwork: remove unused ErrInvalidConfigFile eadaaa7f79 libnetwork: remove unused ErrNoContainer 99ab11bb90 libnetwork: remove unused ErrInvalidJoin 9174eb00e2 libnetwork: remove unused ErrInvalidNetworkDriver 7c2665298a libnetwork/types: move GetMinimalIP to overlay-driver and un-export d9b7a5f01a libnetwork/types: remove ErrInvalidProtocolBinding 4445169cb5 libnetwork/types: remove PortBinding.Equal 4269712d06 libnetwork/types: remove unused UUID type c203171ef6 libnetwork/types: remove unused RetryError and TimeoutError 6d37ab0a83 libnet/d/bridge: Change interface implemented by error types 03db2f8c3d libnet/d/bridge: Remove unused error types 8197752d68 TestDaemonProxy: check proxy settings early 4d674897f3 vendor: github.com/containerd/containerd v1.6.22 5438356348 libnetwork: rename vars that collided with builtin and type ce053a14aa vendor: gotest.tools/v3 v3.5.0 be0f4a4737 libnetwork/driver: remove discoverAPI from Windows and Windows overlay 6ec03d6745 libnetwork: move datastore Scope consts to libnetwork/scope 86299bbd35 vendor: github.com/opencontainers/image-spec v1.1.0-rc4 fca38bcd0a libnetwork/driverapi: make discoverAPI an optional part of the interface 490fee7d45 api/types/filters: fix errors not being matched by errors.Is() bf48d3ec29 update containerd binary to v1.7.3 a78381c399 update containerd binary to v1.7.2 0d76fc431a libnetwork/remote: newDriver(): return concrete type 3e8fda0a70 windows: fix --register-service when executed from within binary directory d69b1fdb72 volume/mounts: cleanup tests da9e44a620 libnet/d/bridge: Allow IPv6 ICC from any IP address 31d09f6ee9 testutils: move Logger interface to testutils 492c09276d tests: Move libnetwork/testutils to internal/testutils/netnsutils 13180c1c49 daemon/list: Drop unused arg from containerReducer 68991ae240 daemon/list: Refactor refreshImage e5cffc07b3 c8d: Fix TestImagesFilterMultiReference 1d8108b009 c8d: images/json, add image labels to the response a0bba26919 c8d: Populate RepoTags instead of adding a new image to the list ad2760ec80 integration: Move image filter tests to integration 4d8e3f54cc c8d/container: Follow snapshot parents for size calculation 5a39bee635 daemon/list: Replace ErrImageDoesNotExist check 7379d18018 c8d/readConfig: Translate c8d NotFound to errdefs f3b76bc1da daemon: refactor buildNetworkResource to use a struct-literal a8c0b05052 daemon: split buildDetailedNetworkResources into two functions 8caf974dcd daemon: refactor buildEndpointResource 437ced91ec daemon: refactor buildIpamResources ca5ac19ea4 daemon: refactor buildPeerInfoResources 02dc5ea720 libnetwork/datastore: remove Store.KVStore() 0f7bf67f83 pkg/plugins: TestGet(): use sub-tests e1ad4aa002 pkg/plugins: make package-level socketsPath var a LocalRegistry field 5bd44cf3c4 pkg/plugins: remove "load()" function 77c03221c9 pkg/plugins/transport: remove RequestFactory interface d12ec5f796 pkg/plugins/transport: remove unused Transport interface dfd331b2c8 pkg/plugins/transport: export httpTransport, and return concrete type 77103c7c03 pkg/plugins/transport: inline newHTTPRequest 4af4adc7ba pkg/plugins: remove LocalRegistry.SpecsPaths() a44c25c2f1 pkg/plugins: split exported from implementation 954d50b88a plg/plugins: rename vars that collided, or poorly cased 20889dbac6 pkg/plugins: move Plugin.ScopedPath to platform-agnostic file a5ee0d6af8 libnetwork: don't access KVStore directly in tests b378669836 libnetwork/datastore: don't access KVStore directly in tests 65978e6982 libnetwork/datastore: cleanup tests 478f4aed63 libnetwork/datastore: ScopeCfg.IsValid(): un-wrap conditions 37cbdeb1f2 libnetwork: remove most of kvstore d713b7ed45 api/server/router/network: remove unused Backend.FindNetwork 1bc7a2aacd daemon/containerd: ImageService. LoadImage fix stray slash in comment 126a089382 vendor: github.com/opencontainers/runtime-spec v1.1.0 42fa7a1951 Integration test for capabilities 5ef9e2632f libnetwork/datastore: prevent data races in Key() 48cc28e4ef hack/integration: Add TEST_INTEGRATION_FAIL_FAST f70e1b315f libnetwork/datastore: remove unused ParseKey() utility 704a19b25d libnetwork/datastore: remove DataStore interface d5b1e43b8f libnetwork/datastore: move MockData to a _test file 0ec73a7892 vendor: github.com/moby/buildkit v0.11.7-dev 64c6f72988 libnetwork: remove Network interface edafcb2c39 libnetwork/iptables: un-export ErrConntrackNotConfigurable, IsConntrackProgrammable e57b807a42 libnetwork: Controller.NewNetwork: inline arrangeUserFilterRule() be8ff186d6 libnetwork: refactor TestErrorInterfaces into a test 9484520327 libnetwork: arrangeUserFilterRule: don't return early a5f45b47a3 libnetwork: Controller: combine iptablesEnabled and ip6tablesEnabled 483a1933a2 volume: remove the short RRO forms in favor of the long forms 5da84141c4 vendor: github.com/prometheus/common v0.42.0 44ab4d44e0 vendor: github.com/prometheus/procfs v0.9.0 6791b8051a vendor: github.com/felixge/httpsnoop v1.0.3 9d3590f375 vendor: github.com/Microsoft/go-winio v0.6.1 35d180126a vendor: google.golang.org/protobuf v1.30.0 b835c28383 vendor: golang.org/x/oauth2 v0.6.0 3cfc1ffb0a pkg/ioutils: some cleanups in tests df86d855f5 Dockerfile: update runc binary to v1.1.8 f5e64a9eaa vendor: github.com/containerd/stargz-snapshotter/estargz v0.14.3 d431345bf3 vendor: google.golang.org/protobuf v1.29.1 30916df3d3 vendor: github.com/containerd/ttrpc v1.2.2 4f4dd2d995 vendor: github.com/containerd/go-cni v1.1.9 287130a254 vendor: github.com/cenkalti/backoff/v4 v4.2.0 7145129f27 vendor: k8s.io/klog/v2 v2.90.1 410a52b763 vendor: github.com/fsnotify/fsnotify v1.6.0 741c28ae9f vendor: github.com/containerd/cgroups v1.1.0 e84b72710b vendor: github.com/aws/aws-sdk-go-v2/config v1.18.16 e235763a38 vendor: github.com/aws/aws-sdk-go-v2/credentials v1.13.16 4c30bf1667 vendor: github.com/aws/aws-sdk-go-v2 v1.17.6 cb53ce9f89 vendor: github.com/aws/smithy-go v1.13.5 f463e50719 vendor: github.com/AdaLogics/go-fuzz-headers v0.0.0-20230106234847-43070de90fa1 359ab384fd vendor: google.golang.org/genproto v0.0.0-20230306155012-7f2fa6fef1f4 b11bdb9212 vendor: cloud.google.com/go/logging v1.7.0 64609120d8 vendor: github.com/googleapis/gax-go/v2 v2.7.0 2990defea7 vendor: go.opencensus.io v0.24.0 d7aa47ddb8 vendor: github.com/googleapis/enterprise-certificate-proxy v0.2.3 296040b1f4 vendor: github.com/cespare/xxhash/v2 v2.2.0 033f882314 vendor: golang.org/x/oauth2 v0.5.0 b615d195b2 vendor: github.com/golang/protobuf v1.5.3 c5c8f433e6 vendor: github.com/containerd/typeurl/v2 v2.1.1 2659f7f740 c8d/inspect: Include platform Variant a8fd1e3135 Dockerfile: update compose to v2.20.1 d78893921a Dockerfile: update buildx to v0.11.2 f3a6b0fd08 c8d: Make sure the content isn't removed while we export 6cba44277f AUTHORS,.mailmap: update with recent contributors 8b843732b3 pkg/chrootarchive: fix FreeBSD build eaf141c86a c8d/resolveImage: Fix Digested and Named reference 028eab9ebb c8d/inspect: Don't duplicate digested ref 7310a7cd0c ci(buildkit): remove early-return from buildkit-ref 4ecc01f3ad ci(buildkit): remove misleading code from buildkit-ref 48ff8a95cc hack/with-go-mod.sh: warn on stderr 750c441dfd daemon: remove intermediate var 468d6616bf daemon: configureLocalContentStore: return concrete types 375c4eb31c daemon: rename vars that shadowed package-level types 034e7e153f daemon: rename containerdCli to containerdClient 1aa17222e7 quota: remove gotest.tools from testhelpers a972dbd682 hack/make/.binary: use with-go-mod.sh 5563b09ac2 hack: use Git-free ROOTDIR convention 780e8b2332 hack/d/cli.sh: properly handle errors in curl 12a19dcd84 Dockerfile: improve CLI/rootlesskit caching 235cd6c6b2 Dockerfile(.simple): align APT_MIRROR support bcea83ab9b Makefile: pass through APT_MIRROR f8c0d92a22 ci: extract buildkit version correctly with replace-d modules 010c3718e3 vendor: github.com/tonistiigi/fsutil v0.0.0-20230629203738-36ef4d8c0dbb 531dbd7af5 vendor: github.com/containerd/continuity v0.4.1 eb68c5e747 daemon: support using CIDR notation for getting registry hosts e0b065cc33 daemon: use the registry service config for getting registry hosts 2da589d454 client: return explicit "nil" for no errors, and remove nil check 738b16d873 libnetwork/config: add Config.DriverConfig() and un-export DriverCfg 82bb3d8d2b libnetwork: TestUserChain: use assert.Check and is.ErrorContains 4e709e75da libnetwork: TestUserChain: re-use IPTables instances c471255153 libnetwork: TestUserChain: don't manually manipulate Controller.cfg.DriverCfg ddd33c6bbd libnetwork/iptables: move IPTable.LoopbackByVersion() to a utility aad2dbb93d libnetwork/iptables: GetIptable: validate provided IPversion 47063ca3ae libnetwork/iptables: un-export IPTable.Version 9c2cd65c0d libnetwork/iptables: make some vars local, and move bestEffortLock lock 93d050f504 libnetwork/iptables: NewChain, RemoveExistingChain: validate chain, table ad0c928ab5 libnetwork/iptables: resetIptables(): don't pass empty table name 1198fe8f6b libnetwork/iptables: un-export FirewalldInit 20900b76f9 libnetwork/iptables: make xLockWaitMsg a const 995da1e51d libnetwork/iptables: group "enum" consts per type c74a083672 libnetwork/iptables: IPTable.ExistChain(): remove redundant if/else 9f9d57590b libnetwork: getTestEnv(): use literals for options 534858aaed libnetwork/drivers: rewrite some strings to reduce quote-escaping 7c360778bb libnetwork/drivers/bridge: driver.configure: remove redundant err-check e21ff6c0c9 libnetwork/config: remove IsValidName utility 948f55d0b7 libnetwork/options: remove unused NewGeneric, and use map[string]any fa5c13542c libnetwork/drivers/bridge: setupBridgeNetFiltering: improve error handling 077049d0b9 client: WithTLSClientConfig: return early if no transport is set 6846c63252 client: WithTLSClientConfig, WithTLSClientConfigFromEnv: inline vars 9d1e690751 client: TestGetAPIPath: don't use un-keyed structs 6552441b46 client: TestClientRedirect: cleanup 8d514f4e2e client: touch-up docs, and user doc-links c219b09d4a client: Client.postHijacked: use Client.buildRequest e11555218b client: Client.setupHijackConn: explicitly ignore errors 41f235a2f8 gha: add note about buildkit using older go version 1ead2dd35d update go to go1.20.6 e1db9e9848 testutil: use dummyhost for non-tcp connections 6b7705d5b2 pkg/plugins: use a dummy hostname for local connections 92975f0c11 client: define a "dummy" hostname to use for local connections 2a59188760 client: TestSetHostHeader: don't use un-keyed literals f93cfb2e31 Support for health start interval to swarm mode 16e6d8af55 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230713153928-bc71908479e5 79c72390b9 integration/container: use subtests for TestAttach f9e2eed55d integration: Don't env cleanup before parallel subtests cdac084fb4 Add t.Helper() to the cli test helper functions c395496e06 testutil: rename variable that collided with import 1370b3c679 client: minor test improvements for requests f7f0a17ea2 client: TestSetHostHeader: use sub-tests 2cb982b506 pkg/plugins: run tests with t.Parallel() b39362295a pkg/plugins: don't share plugin server between tests ee9fe2c838 ci(buildkit): match moby go version for buildkit tests 3379414c76 vendor: github.com/moby/buildkit@v0.11 (0a15675) 5e4878ed2b Dockerfile/shell: install compose cli plugin ecfa4f5866 ci(bin-image): add SHA-based tags ce2e6b5cda Bump container-device-interface dependency to v0.6.0 0a126a85a4 ci(bin-image): fix meta step 749d7449f9 ci(bin-image): fix typo 1686540594 ci(bin-image): don't set tags when pushing by digest 83477ce8d0 client: remove custom "headers" type, and use "http.Header" instead e4ce676d3d client: ServiceCreate, ServiceUpdate: omit "version" header on API >= 1.30 d29240d9eb libnet: Return a 403 when overlay network isn't allowed 21dcbada2d libnet: Return proper error when overlay network can't be created 93853eca94 pkg/fileutils: GetTotalUsedFds(): slight optimization for macOS c5c977855d registry: session.searchRepositories(): return typed error, and small cleanup 68ebfa2f18 registry: session.searchRepositories(): log actual search URL 27698f1d13 registry: ParseSearchIndexInfo: remove redundant error-handling a0e1155b28 daemon/containerd: fix assignment to entry in nil map during commit 6b1b71ced4 Disable tls when launching dockerd through hack/make.sh 079a9d4562 Sort unconsumed build arguments before usage 41261ea4ec ci: push bin image to Docker Hub 5b3acc15d1 libnetwork: drop legacy driver cruft f9a83daebb libnetwork: delete package bitseq 8b167535db libnetwork: delete package idm 7366e44019 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230707182847-6f78b8199b05 a490248f4d daemon: daemon.prepareMountPoints(): fix panic if mount is not a volume c90229ed9a api/types: move system info types to api/types/system 3aef732e61 Do not drop effective&permitted set d519bde5da libnet/drivers: stop passing config to drivers... 1980deffae libn: refactor platform driver registration c87c4b5bbf Add Albin Kerouanton (@akerouanton) as maintainer 0066138379 Add Kevin Alvarez (@crazy-max) as maintainer d8056ddecd Add Laura Brehm (@laurazard) as maintainer 2216d3ca8d Add health start interval 2ab2503b6c Put integration daemon socket in /run 914888cf8b Improve test daemon logging 51bcf5954f libnet/d/overlay: parse VNI list w/o allocating 96ca669fa4 libnet/d/overlay: extract VNI option parsing... a940462fc7 libnetwork/drivers/bridge: minor cleanups for iptables funcs 6817b3697b libnetwork/iptables: signalHandler(): use s switch 51bbcdb3c5 libnetwork/iptables: merge Conn.initConnection into newConnection 0921360133 libnetwork/iptables: checkRunning(): use early return 98592608d4 libnetwork/iptables: remove unused Ebtables const 126525c03e libnetwork/iptables: TestReloaded(): minor cleanup b216669a02 libnetwork/iptables: TestPassthrough(): skip without firewalld 753c190ef9 libnetwork/drivers/bridge: rename vars that collided with type d1ebe6689f libnetwork/iptables: errors should not be capitalized afe8d3076f libnetwork/iptables: remove ErrIptablesNotFound 16f80f649b libnetwork/iptables: ChainInfo: don't pass whole IPTable as value 42653787ea libnetwork/iptables: ChainInfo.Output(): explicitly suppress errors ea4baa24b1 libnetwork/iptables: IPTable.RemoveExistingChain() slight refactor 04e54c6bb0 libnetwork/iptables: IPTable.exists(): return early on error 829374337f libnetwork/iptables: don't use err.Error() if not needed 9717734d1c libnetwork/iptables: IPTable.NewChain() minor cleanups 9bb0e7a5ee libnetwork/iptables: inline some args 564a13285f libnetwork/bitmap: improve documentation 0fc6bf9a6e libn/d/o/ovmanager: assign vxlans using bitmap pkg f0127f1617 libn/d/o/ovmanager: inline obtainVxlanID method e97492e579 libn/d/o/ovmanager: drop mutex from network type 6fb6635ceb libn/d/o/ovmanager: make mutexes private fields cdcb7c28c5 integration: disable iptables in parallel tests 9cee34bc94 pkg/plugins: make unit test less time sensitive 3721a525ce daemon: initBridgeDriver(): pass BridgeConfig, instead of daemon config b8220f5d0d daemon/config: move MTU to BridgeConfig 11abd0742e dockerd: "--mtu": update description, hide on Windows and warn if set 6944d2dddb libnetwork: TestBoltdbBackend(): use t.TempDir() 2fd88c7ca4 libnetwork: inline store config options cda187222e libnetwork/config: remove options that were only used in tests bc80c5d067 libnetwork: rename vars that shadowed with pkg vars and imports 332ffe8d74 libnetwork/networkdb: NetworkDB.Watch(): remove unused "key" argument 4c4149a09c libnetwork/internal/kvstore: remove unused Delete() 4d09e60f5b libnetwork/internal/kvstore: remove unused Watch() method c14a9f5b3d libnetwork/datastore: un-export Mutex e21e802fc6 libnetwork/datastore: remove unused DeleteTree() method 58d2f21dae libnetwork/datastore: remove unused PutObject(), DeleteObject() a3b0181503 libnetwork/datastore: remove Watch(), Watchable(), RestartWatch() 2409a36e29 libnetwork/datastore: cache.get(): remove unused "key" argument 824abbf8d9 libnetwork/datastore: remove redundant datastore.sequential e9b6965079 libnetwork/datastore: remove unused datastore.Active() b32e41f016 libnetwork/internal/kvstore/boltdb: un-export Mutex 7e7c7bbc17 libnetwork/internal/kvstore/boltdb: BoltDB.List(): minor cleanup 95b96eebdd libnetwork/internal/kvstore/boltdb: BoltDB.Get(): don't shadow error fb61b07bcf libnetwork/internal/kvstore/boltdb: BoltDB.Exists(): fix error handling c94ccd4207 libnetwork/internal/kvstore/boltdb: minor cleanup/refactor acfd3934a7 libnetwork/internal/kvstore: AtomicDelete(): remove unused "deleted" return b576682bdc libnetwork/internal/kvstore: AtomicPut(): remove unused "created" return c37b58bbc3 libnetwork/internal/kvstore: remove unused WriteOptions e515bef423 libnetwork/internal/kvstore: remove unused WatchTree and NewLock methods a373983a86 libnetwork/internal/kvstore: fix some linting issues 05988f88b7 libnetwork/internal/kvstore: remove unused Config options ec11aea880 pkg/jsonmessage: use string-literals for easier grep'ing fded42c3bd pkg/ioutils: use string-literals for easier grep'ing 1da079f211 pkg/idtools: use string-literals for easier grep'ing 84000190d3 opts: use string-literals for easier grep'ing ddec605aef integration: use string-literals for easier grep'ing 96a1c444cc libnetwork: use string-literals for easier grep'ing 0db4a32b9c daemon/cluster: use string-literals for easier grep'ing 4e69e16fde client: use string-literals for easier grep'ing c3d533f37f cli/debug: use string-literals for easier grep'ing 02815416bb daemon: use string-literals for easier grep'ing 6331a3a346 integration-cli: use string-literals for easier grep'ing 2f61620339 builder/builder-next: use string-literals for easier grep'ing 202907b14c builder/dockerfile: use string-literals for easier grep'ing a1c9a686b0 api: use singleflight for /info endpoint 8846c7e0ae daemon/cluster/executor/container: fix mixed pointer/value receiver 8ea78b34ab rename some variables that shadowed imports or package types 9f4acceb6a remove redundant alias for libnetwork/datastore imports cffe563d4d pkg/system: remove windows stubs for MkDev/MkNod 6b6fed06b1 integration: don't use pkg/system MkNod/mkDev 94c975e25a api: info: don't use ad-hoc type for compatibility with old api versions 9ffca1fedd libnetwork/drivers/remote: rename vars that collided f6258f70cb docs: api v1.28 - v1.40: add missing "force" query arg on plugin disable 892e9f2c23 docs: api v1.41: add missing "force" query arg on plugin disable a4bdfb963f docs: api v1.42: add missing "force" query arg on plugin disable 85ccb25eb8 docs: api v1.43: add missing "force" query arg on plugin disable aba8e04ab1 docs: api: amend changelog for API 1.28 for "force" option 7055244547 docs: api v1.32 - v1.40: remove outdated information from ServerVersion ed0dbb8518 docs: api v1.41: remove outdated information from ServerVersion b770a50dee docs: api v1.42: remove outdated information from ServerVersion 18d77ff455 docs: api v1.43: remove outdated information from ServerVersion 92f1ddaf0a api: remove outdated information from ServerVersion e8f206972a docs: api v1.42: remove "ClusterStore" and "ClusterAdvertise" fields e58a60902c docs: api v1.43: remove "ClusterStore" and "ClusterAdvertise" fields 3c905d0db9 api: remove "ClusterStore" and "ClusterAdvertise" fields e4d809b2b0 vendor: github.com/tinylib/msgp v1.1.8 f379af6d17 vendor: github.com/containerd/cgroups/v3 v3.0.2 e638351ef9 c8d/prune: Handle containers started from image id a93298d4db c8d/prune: Exclude dangling tag of the images used by containers a6d5db3f9b c8d/softDelete: Deep copy Labels 2b0655a71a c8d/softDelete: Extract ensureDanglingImage a96e6044cc testutil/environment: Add GetTestDanglingImageId 13472c6cf1 daemon/config: remove unused CommonConfig.Context 40908c5fcd libnetwork/drivers: inline capabilities options 97285711f3 libnetwork/drivers/overlay: Register does not require DriverCallback a718ccd0c5 libnetwork/drivers: remove unused "config" parameters and fields 264dbad43a gha: don't fail if no daemon.json is present ec79d0fc05 pkg/fileutils: GetTotalUsedFds(): use fast-path for Kernel 6.2 and up eaa9494b71 pkg/fileutils: GetTotalUsedFds: reduce allocations 03390be5fa pkg/fileutils: add BenchmarkGetTotalUsedFds 252e94f499 pkg/fileutils: GetTotalUsedFds(): don't pretend to support FreeBSD 7747327561 AUTHORS,.mailmap: update with recent contributors 60d2eeaa5b MAINTAINERS: update my email a764cd5a40 pkg/chrootarchive: format code with gofumpt 210932b3bf daemon: format code with gofumpt e236994b76 daemon/snapshotter: format code with gofumpt 9213e35011 daemon/containerd: format code with gofumpt 4b3900a257 daemon/logger: format code with gofumpt 050de1e4f6 daemon/logger/journald: format code with gofumpt a083677af2 daemon/logger/local: format code with gofumpt 74db0e9339 daemon/logger/loggertest: format code with gofumpt 48124bac18 daemon/logger/loggerutils: format code with gofumpt 011a32a4ad daemon/logger/gelf: format code with gofumpt 7ed5a30b5c daemon/logger/splunk: format code with gofumpt bb5a1eb99d daemon/logger/jsonfilelog: format code with gofumpt 1437037ed2 daemon/logger/awslogs: format code with gofumpt f930559076 pkg/stdcopy: format code with gofumpt 1216328c2d pkg/plugins: format code with gofumpt 651086d1d9 pkg/jsonmessage: format code with gofumpt 1291bbfa50 pkg/capabilities: format code with gofumpt 79af23e1ea pkg/ioutils: format code with gofumpt ac1514abf4 reference: format code with gofumpt 99968eec3f restartmanager: format code with gofumpt f18ac2d0bc quota: format code with gofumpt b2663a0f73 layer: format code with gofumpt 83b2daca6a plugin: format code with gofumpt 169fab5146 profiles/seccomp: format code with gofumpt 4175a550fd libcontainerd: format code with gofumpt 091991606a opts: format code with gofumpt 784ba59a08 registry: format code with gofumpt dd5ea7e996 libnetwork: format code with gofumpt bba21735bf libnetwork/ipamutils: format code with gofumpt 0b75c02276 libnetwork/resolvconf: format code with gofumpt 801cd50744 libnetwork/portallocator: format code with gofumpt 6187ada21f libnetwork/options: format code with gofumpt 882f7bbf1f libnetwork/osl: format code with gofumpt 32e716e848 libnetwork/networkdb: format code with gofumpt 65e2149b3e libnetwork/netutils: format code with gofumpt 1cd937a867 libnetwork/etchosts: format code with gofumpt 540e150e4e libnetwork/cmd: format code with gofumpt fffcbdae4c libnetwork/iptables: format code with gofumpt 6f3fcbcfe1 libnetwork/ipam(s): format code with gofumpt eb6437b4db libnetwork/datastore: format code with gofumpt defa8ba7b4 ibnetwork/bitmap: format code with gofumpt f349754b55 libnetwork/bitseq: format code with gofumpt 3af2963c74 libnetwork/drvregistry: format code with gofumpt dc17f5e613 libnetwork/drivers/remote: format code with gofumpt 485977de57 libnetwork/drivers/windows: format code with gofumpt 2cc5c2d2e6 libnetwork/drivers/overlay: format code with gofumpt e74028554e libnetwork/drivers/macvlan: format code with gofumpt 7b02ccda86 libnetwork/drivers/ipvlan: format code with gofumpt 17a35bc645 libnetwork/drivers/bridge: format code with gofumpt d2a6956afb daemon/graphdriver: format code with gofumpt 8d923c60b9 daemon/config: format code with gofumpt 425ccb1241 runconfig: format code with gofumpt c0edf0861b integration/system: format code with gofumpt 5cc1c6eca0 integration/service: format code with gofumpt bb5ace2efb integration/plugin: format code with gofumpt 9bd3e011e1 integration/internal: format code with gofumpt 89a4e6b889 integration/container: format code with gofumpt 846bcd7dd1 distribution: format code with gofumpt b7f5db432f daemon/images: format code with gofumpt 2d12dc3a58 daemon/cluster: format code with gofumpt 316c7331eb pkg/parsers: format code with gofumpt fb017754e1 pkg/system: format code with gofumpt ee2ac6c205 cmd/dockerd: format code with gofumpt 47276bdb28 cmd/docker-proxy: format code with gofumpt 0af6d9e291 client: format code with gofumpt 3146ecbae6 api/types: format code with gofumpt b9833a2059 builder: format code with gofumpt 540d6539be builder/remotecontext: format code with gofumpt 3e0565e17c builder/dockerfile: format code with gofumpt 9d4abbbc30 builder/builder-next: format code with gofumpt 6592646632 api/server: format code with gofumpt 5e9a354ff1 pkg/tarsum: format code with gofumpt 2aac054f52 pkg/authorization: format code with gofumpt f7552f1de4 pkg/archive: format code with gofumpt 7c697f58f2 Makefile: remove unused BUILD_APT_MIRROR a1d2132bf6 Dockerfile: use default apt mirrors 225e2562c9 integration-cli: format code with gofumpt a31411c679 testutil: format code with gofumpt 4c281fb29a volume: format code with gofumpt a08abec9f8 Update dockerd to support JSON logging format b335e3d305 seccomp: add name_to_handle_at to allowlist 6d3bcd8017 c8d/images: handle images without manifests for default platform 8caf63896c docs: document more buildx targets 647c2a6cdd Restore active mount counts on live-restore d8bc5828cd gha: Setup Runner: add missing sudo fdc9b7cceb remove name_to_handle_at(2) from filtered syscalls 9f6dbbc7ea Dockerfile: make cli stages more resilient against unclean termination 19bd0730ef vendor: github.com/moby/swarmkit/v2 v2.0.0-20230627115642-ad0f3ae162fa e2dad6c3ff Revert "Temporarily skip DCO check" 1741771b67 Skip cache lookup for "FROM scratch" in containerd 7d7225fae6 Temporarily skip DCO check e60cda7051 libnetwork/internal/kvstore/boltdb: fix linting issues d18b89ced6 libnetwork/internal/kvstore: remove some unused code b873d70369 replace libkv with local fork 5d25143ef3 libnetwork/kvstore: rewrite code for new location dd1c95edcd integration/windows: Unskip some kill tests 3c1de2e667 pkg/homedir: deprecate Key() utility ddd9665289 pkg/homedir: deprecate GetShortcutString() utility 6876e45f9e pkg/homedir: unify implementations 0aca7f2a0d pkg/homedir: use os.UserHomeDir() 0215a62d5b integration-cli: don't use pkg/homedir in test 76d8bfdff4 testutil/environment: remove Execution.OSType field 325786430b testutil/environment: remove unused TEST_OSTYPE env-var 0fe2ac0437 testutil/environment: rename var that collided with import 74da6a6363 Switch all logging to use containerd log pkg cdb1293eea Fix missing Topology in NodeCSIInfo 165dfd6c3e daemon: fix restoring container with missing task 786c9adaa2 daemon: fix double-unlock in health check probe 3b28a24e97 daemon: fix panic on failed exec start e010223186 contrib/busybox: Update to FRP-5007-g82accfc19 21e50b89c9 builder: pass host-gateway IP as worker label 21c0a54a6b c8d: mark stargz as requiring reference-counted mounts 4d831949a7 Dockerfile: update buildx to v0.11.0 fc94ed0a86 don't cancel container stop when cancelling context 19d860fa9d testing: temporarily pin docker-py tests to use "bullseye" cfa08f8366 builder-next: enable OTLP tracing for history records 98a44bb18e update go to go1.20.5 3ba67ee214 daemon: registerName(): don't reserve name twice 2a6ff3c24f Use OCI "History" type instead of inventing our own copy 59b5c6075f pkg/rootless: remove GetRootlessKitClient, and move to daemon 3cc5d62f8a run `getent` with a noop stdin 71589848a0 daemon: test runtimeoptions runtime options a6048fc792 client: add WithUserAgent() option 197b0b16e3 vendor: github.com/sirupsen/logrus v1.9.3 038a361a91 daemon/cluster: convert new BindOptions d41d2c3751 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230607145746-36334ed1876 32d58144fd c8d: Use reference counting while mounting a snapshot 8a094fe609 daemon: ensure OCI options play nicely together dea870f4ea daemon: stop setting container resources to zero 8c4dfc9e6a vendor: github.com/rootless-containers/rootlesskit v1.1.1 0b1c1877c5 update RootlessKit to v1.1.1 9ff169ccf4 daemon: modernize oci_linux_test.go 0f9c8e684a Dockerfile: Move dockercli to base-dev 5433b88e2d hack/cli.sh: Quiet origin cleanup 800ea039ec contrib/check-config: move xt_bpf check to overlay section 49f76a34b5 Dockerfile/shell: Install buildx cli plugin 17c99f7164 Dockerfile: Use separate cli for shell and integration-cli 1910fdde81 contrib/check-config: check for xt_bpf d63569c73d builder-next: Set moby exporter as default 4295806736 c8d/handlers: Handle error in walkPresentChildren ff2342154b Dockerfile: use COPY --link for source code as well 0f6eeecac0 daemon: consolidate runtimes config validation d222bf097c daemon: reload runtimes w/o breaking containers 0b592467d9 daemon: read-copy-update the daemon config 742ac6e275 daemon: make config reloading more transactional 038449467e Update BuildKit registry config on daemon reload 982e4fb448 api/server: get features from a callback fn d099e47e00 containerd: add c8d version and storage-driver to User-Agent a6da1480b5 dockerversion: DockerUserAgent(): allow custom versions to be passed 9a1f2e6d7c dockerversion: remove insertUpstreamUserAgent() ff40d2d787 dockerversion: simplify escapeStr() eb9a5392bc dockerversion: add a basic unit-test 66137ae429 containerd: set user-agent when pushing/pulling images 06aaf87aab vendor: github.com/moby/swarmkit/v2 v2.0.0-20230531205928-01bb7a41396b 637ca59375 Dockerfile: use COPY --link to copy artifacts from build-stages 4d3238dc0b c8d/load: Don't unpack pseudo images b08bff8ba3 c8d/load: Use walkImageManifests 5210f48bfc c8d/list: Use walkImageManifests fabc1d5bef c8d: Add walkImageManifests and ImageManifest wrapper 1178319313 libn: fix resolver restore w/ chatty 'iptables -C' 50eb2d2782 libnetwork: fix sandbox restore 18bf3aa442 libnetwork: log why osl sandbox restore failed ed32f5e241 Make sure the image is unpacked for the current snapshotter d58df1fc6c Update blogpost URL 44124ab6b0 builder/remotecontext: remove CachableSource, NewCachableSource 5efe72415d remove Dockerfile.e2e fd72b134d5 update generated files 735537d6b1 replace gogofast with gogofaster extension 1eaea43581 fix protos and "go generate" commands 7daaa00120 hack: generated files update and validation f1ca793980 use tools build constraint for proto dependencies 1e55ace875 Add oci index and layout files to exported tars 487ea81316 Fix npe in exec resize when exec errored 9a692a3802 libn/d/overlay: support encryption on any port e410e27547 builder/remotecontext: remove mimeTypes struct, use consts b42e367045 vendor: github.com/opencontainers/image-spec v1.1.0-rc3 37d4b0bee9 builder/remotecontext: deprecate CachableSource, NewCachableSource fb7ec1555c libcontainerd: work around exec start bug in c8d 79ca6630d4 vendor: github.com/moby/buildkit v0.11.7-0.20230525183624-798ad6b0ce9f 5045a2de24 Support recursively read-only (RRO) mounts 3512b04093 vendor: github.com/containerd/go-runc v1.1.0 b9b8b6597a c8d/inspect: Fill `Created` time if available f17c9e4aeb c8d: ImageService.softImageDelete: rename var that collided with import df5deab20b c8d: ImageService.softImageDelete: use OCI and containerd constants 9b9c5242eb daemon: lock in snapshotter setting at daemon init 53d1b12bc0 hack/make/.binary: don't use "netgo" when building Windows binaries a7bc65fbd8 c8d/pull: Use same progress action as distribution 6506579e18 integration: Add TestImageInspectEmptyTagsAndDigests a93aadc2e6 hack: Rename .ensure-emptyfs to .build-empty-images 3a31f81838 hack/ensure-emptyfs: Create dangling image 4373547857 Add testenv.UsingSnapshotter utility d3d2823edf Dockerfile: temporarily skip CRIU stage 86108812b8 vendor: github.com/mistifyio/go-zfs/v3 v3.0.1 ddd67b2535 Make image save more like the OCI layout for blobs 871cf72363 libnetwork: check for netns leaks from prior tests 6d79864135 libnetwork/osl: restore the right thread's netns d4f3858a40 libnetwork: leave global logger alone in tests 0cc6e445d7 libnetwork: make resolver tests less confusing 411a9e1b86 daemon: remove devicemapper driver-warnings 424a1c5d21 daemon: remove warning for overlay/overlay2 without d_type ab35df454d remove pre-go1.17 build-tags 34964c2454 c8d/list: Show layerless images 61757032da d/graphdriver/vfs: fix unit test 6e4bd3bbc2 vendor: github.com/spf13/cobra v1.7.0 6690d2969c pkg/archive: bail if setting xattrs is unsupported 0cdfd5f275 pkg/system: return rich errors from L(g|s)etxattr 41356227f2 libnetwork: just forward the external DNS response 6d139e5e95 build: use daemon id as worker id for the graph driver controller 668af4be82 ci(bin-image): distribute build across runners 1be26e9f0c api/inspect: Fix nil RepoTags and RepoDigests f450ea64e6 fix: `docker pull` with platform checks wrong image tag f3645a2aa3 reorder load funcs to match newServiceConfig()'s order 3b15156e4d add mirror to daemon reload test for insecure registries 0d8087fbbc Remove Upstart scripts 967c7bc5d3 api/server: allow empty body for POST /commit again 3ceb3810d7 client: don't marshal typed nils in request body ae737656f9 Remove Upstart and cgroups bits from Debian sysvinit script c2630c93f2 Update vendoring dedf5747cc Remove need to set Capabilities for cdi driver 7ec9561a77 Add support for CDI devices to docker daemon under linux 5a200ade7c Rename daemon/devices_liunx.go to daemom/devices.go 484785456c update containerd binary to v1.7.1 348a79958d c8d: The authorizer needs to be set even if AuthConfig is empty 2f0ba0a7e5 more robust dockerd-rootless-setuptools.sh 135d8f04f9 ci: bin-image workflow ae1ca67178 bin-image bake target 3309e45ca1 c8d: Don't create authorizer for empty AuthConfig 2ad499f93e c8d/authorizer: Default to docker.io bd6868557d c8d/builder: implement cache 7821d2d788 vendor: github.com/docker/distribution v2.8.2 e46674b6a7 c8d: implement classic builder 8d76acfe6c testutil: replace uses of client.IsErrNotFound 56fb56ccf0 integration: update error-assertions in tests 0538cdd226 integration-cli: update error-assertions in tests 66ff1e063e client: update error-assertions in tests 685b3d820a client: make IsErrNotFound an alias for errdefs.IsNotFound 9e817251a8 libnetwork/docs: fix broken link 17882ed614 libnetwork: update example in README.md 4603b6d6b6 c8d: fix image history for dangling images 4e0319c878 [chore] clean up reexec.Init() calls 9e43c11480 AUTHORS: regenerate 5fee4439a0 .mailmap: update with my new email e8be792130 c8d: fix missing image history e3e715666f pkg/aaparser: deprecate GetVersion, as it's no longer used 71d7908656 added alias validation ecaab085db profiles/apparmor: remove use of aaparser.GetVersion() f445ee1e6c contrib/apparmor: remove remaining version-conditionals (< 2.9) from template 307b09e7eb fixing consistent aliases for OCI spec imports 2ad37e1832 daemon: handleContainerExit(): add execDuration in attributes cad97135b3 c8d: implement missing image delete logic de363f1404 daemon: handleContainerExit(): use logrus.WithFields fb96b94ed0 daemon: remove handling for deprecated "oom-score-adjust", and produce error 316781be48 api/types/container: remove deprecated ContainerChangeResponseItem 9c14f98583 api/types: remove deprecated AuthConfig 55608d8381 pkg/system: remove deprecated IsProcessAlive, IsProcessZombie, KillProcess a3b12ec420 pkg/system: remove deprecated DefaultPathEnv() dc76b90705 pkg/system: remove deprecated MemInfo, ReadMemInfo() 7d0488b11e pkg/ioutils: remove deprecated TempDir() alias 152c482fee pkg/platform: remove deprecated OSType const 913b0f51ca API: omit deprecated VirtualSize field for API v1.44 and up fdc7a78652 docs/api: version-history: also mention /system/df for VirtualSize fd0b109bf7 API: bump version to 1.44 43b1afb2cf make chownComment easy to read 7665feeb52 hack: enable Go modules when building dockerd and docker-proxy 5400366b90 Set BuildKit version using buildinfo c33b31116c daemon/graphdriver: remove isDeprecated() utility dc11d2a2d8 remove deprecated devicemapper storage-driver 1e195acee4 libn/d/overlay: stop programming INPUT ACCEPT rule eb0edeafdd api: swagger: add missing "force" query arg on plugin disable ea4dd1bbf6 boltdb/bolt is not maintained. Used bbolt 6c0e0d6250 Allow client to set boltdb timeout a0f6d0798a Do not return boltdb bucket not found error deb21faad0 Add support for etcd authentication cc0ed694ee fix typo fbdb24ec6a Fix typo in error text dcf8828165 Return store.ErrKeyExists on AtomicPut 002f9c37ca Synchronize boltbd libkv apis 15e5d4067a Change unsupported call error in boltdb backend to use general store error 3b5fb3ec87 Remove docs in libkv.go 2603af65e5 Migration to the new Etcd client f06f78e638 boltDB AtomicDelete fails for non-existent key 0b81042dc3 Add transient connection option to bolt db 7225aba3af add TTL to consul lock using store.LockOptions and add tests for the Lock ttl behavior 1f9cf17713 Fix AtomicPut panic if previous KVPair is not nil and key not exists in boltdb 599deba8c7 nits and refactor for etcd tls config cc9e627f8e Add etcd TLS client code and update README.md. Signed-off-by: Adam Thornton <adam.thornton@gonkulator.io> 64eb25dff9 Honoring ConnectionTimeout in boltdb 3ec6dfa346 Refactor libkv to not directly import storage backends f817826408 Create dir first before opening data file of boltdb 29af4e0f27 BoltDB backend support for libkv 06f01227c5 change heartbeat/ephemeral combination to use a single ttl field f26e4f4c52 Minor fix of store comment 6b43181cfa Notify user of supported backend storage a961b70b2b Remove unused type WatchCallback 06151b8a4d add top-level godoc: sample some parts of the README a2d4e1c246 API Change: AtomicPut with previous = nil is create. fcb98254b1 Use Backend type for stores 79c320c1cf remove testify dependency through mock package 48f5dca2ce Remove logging in library dbc1a6fa9a refactor and move store backends in sub-packages Bumping docker-cli to version v25.0.0-7-g01f933261, which comprises the following commits: 21c12847b docs: move base command to docker.md 22e1f2cbf docs: fix broken links to alias pages 68abf14c1 vendor: github.com/docker/docker v25.0.0 9e1e07657 docs: add documentation for CDI cdb1c105f vendor: github.com/docker/docker v25.0.0-rc.3 3df149545 docs(plugins): fix typos and formatting 22bbdc798 docs: add "builder" key to full daemon.json example d2efc5b09 deprecate old API versions (1.23 and lower) 508346ef6 plugins: fix plugin socket being closed before use f722e07c6 gha: update to use macos-12 runners 5f6c55a72 plugins: don't handle signal/notify if TTY 26560ff93 Revert "plugins: run plugin with new process group ID" 37f551566 docs: fix broken link to tmpfs (missing anchor) b35361e8d docs: regenerate stubs for non-canonical commands dfa2930af ci: Add bin-image workflow 21c253605 vendor: golang.org/x/sys v0.16.0 a6774de68 docs: rename cli reference aliases to canonical cf9d3692a docs: remove empty cli reference stubs d868dca00 vendor: github.com/docker/docker v25.0.0-rc.2 1609916f2 Revert "Dockerfile/binary: Output the binary directly" ff25c4334 Revert "ci: Add bin-image workflow" ef5e5fa03 plugins: run plugin with new process group ID 6d0b329b0 cli-plugins: use non-abstract socket on darwin dbf992f91 cli-plugins: move socket code into common package 8b6ffbdf7 vendor: github.com/containerd/containerd v1.7.12 ccc7ad2f2 Dockerfile: update buildx to v0.12.1 fdcb78a0f Dockerfile: update docker compose to v2.24.0 15d4c99f3 ci: Add bin-image workflow ecf338f43 scripts/build: Handle VERSION containing git ref 6ad07f2a4 Dockerfile/binary: Output the binary directly 0e37dd49f cmd/docker: registerCompletionFuncForGlobalFlags: take store.Store as argument c0a0b05dc cli-plugins: helloworld: rename var that collided with import 11b2e871b cmd/docker: move main() to the top 4dc2c895b cli-plugins/manager: getPluginDirs: take ConfigFile as argument 79992184e docs: dockerd: rephrase environment-variables intro 4d2b4e7fb docs: dockerd: fix stray column-separateor in env-var table a5e5563f1 vendor: github.com/docker/docker-credential-helpers v0.8.1 4f4950886 update to go1.21.6 26f59b2f6 cli/compose/loader: use golden.Assert() for readability 9db56ea2f vendor: golang.org/x/tools v0.16.0, golang.org/x/mod v0.14.0 efae960e5 vendor: golang.org/x/net v0.19.0 996cce909 vendor: golang.org/x/sync v0.6.0 4b10e5525 vendor: github.com/google/go-cmp v0.6.0 1ebc233b4 vendor: github.com/creack/pty v1.1.21 b4fe77a12 vendor: github.com/docker/go-connections v0.5.0 909111b3a docs: fix incorrect heading levels in docker run reference b43ea528b vendor: github.com/docker/docker v25.0.0-rc.1 6d0aa0a52 cli/command/container: parseSecurityOpts: fix --security-opt seccomp=builtin 9be600a97 Docker build command docs refresh 878b1c55b docs: add links to volume ls, network ls, stack ps formatting examples f0edc7953 change back nolint -> nosec c1016c05c vendor: github.com/mitchellh/mapstructure v1.5.0 58524685d vendor: github.com/mattn/go-runewidth v0.0.15 1e38fc3b9 vendor: github.com/klauspost/compress v1.17.4 0fa3a365f vendor: github.com/docker/docker v25.0.0-beta.3 d1a51582e update authors and mailmap 60af715d6 id and name filter in service ls is the prefix not a part 90a1887d3 Fix wrong docker run command 64e9cadd1 Add networking reference link 924ec7f4c docs/deprecated: update "oom-score-adjust" status for daemon 800a728e1 deprecated: fix anchor and add missing version c1c6198ae docs: deprecate short cid in Aliases field 336787c50 vendor: github.com/docker/docker 7bc56c53657d (v25.0.0-dev) 53a129e3d docs(plugins): remove Weave engine network plugin 3ecd6b6c7 docs(plugins): remove inline CSS markup a4d805f9c docs(plugins): add Kathará engine network plugin 1dcd5487f docs(plugins): update Docker Store to Docker Hub 46355a194 export RunStat, StatsOptions, and add Filters option e9a5590ad cli/command/container: statsOptions: add GoDoc b642078c8 prevent "docker stats" from hanging if the initial API call fails 633ba88c2 cli/command/container: runStats(): move code to where it's used 5ed6c128e cli/command/container: runStats(): don't register unused event handlers 2389768fb cli/command/container: runStats(): minor cleanup and fixes 4d434dc69 vendor: github.com/docker/docker 388216fc45ab (v25.0.0-dev) 5eac07b10 update typos and style in docs 6fd4cff1f docs: minor editorial improvements, typo fixes 0de84f019 vendor: golang.org/x/crypto v0.17.0 3cf0bf84a vendor: golang.org/x/crypto v0.16.0 36d4db27d vendor: golang.org/x/text v0.14.0 3d70100d5 vendor: golang.org/x/sys v0.15.0 70216b662 add //go:build directives to prevent downgrading to go1.16 language 88e647435 build(deps): bump github/codeql-action from 2 to 3 ca9ff8daf docs: run-reference: use table for health options 77e67a0f9 docs/deprecated: mark logentries logging-driver as "removed" 8f13b0416 cli/command: remove "logentries" driver from tests and fixtures d79dd7c53 docs, man: remove logentries logging-driver b14094df5 contrib/completion: remove logentries logging-driver f63065a58 vendor: github.com/docker/docker f3cc93630ed8 (v25.0.0-dev) fa1914426 vendor: github.com/docker/docker v25.0.0-beta.2 e81a66661 docs/deprecated: mark logentries log-driver for removal f8dd8f074 docs: refresh --publish, add --publish-all 5400a48aa Plumb contexts through commands aec7ec7f6 vendor: github.com/docker/docker 92884c25b394 (v25.0.0-dev) 0a3a16d2b vendor: github.com/containerd/containerd v1.7.11 54c103aff vendor: upgrade OpenTelemetry to v1.19.0 / v0.45.0 d49970590 vendor: github.com/felixge/httpsnoop v1.0.4 7af509c7f cli/command: merge DockerCliOption and InitializeOpt types 1554ac3b5 cli-plugins: terminate plugin when CLI exits 2e394eb5f docs: rewrite section on working directory 4a8451455 docs: rewrite section on setting user id 259aa9005 docs: rewrite section on filesystem mounts 52716c813 docs: move --tmpfs to docker run reference 5ede4c82a docs: minor improvements to the healthcheck section 7585d66a0 docs: rewrite section on overriding environment variables 3eeac2059 docs: rewrite section on exposing ports 0a94d85cd docs: fix typo in "network create" docs b01e28752 docs: rewrite section on default entrypoint c695ad9d7 docs: rewrite section on overriding image defaults 4a6cde885 docs: move --log-driver to docker run reference 72df1960e docs: move --cgroup-parent to docker run reference 9e75a4cf6 docs: move --init to docker run reference 92c664b0d docs: move info about --security-opt to docker run reference f98444490 docs: move --rm to docker run reference 32189ca27 docs: improve description about container exit codes dbffa0d12 docs: move --restart to docker run reference 73620975d docs: simplify container networking intro 5dd6e9a4d docs: move --ipc to docker run reference ff62bf47b docs: move --uts to docker run reference d66fe7881 docs: move --pid to docker run reference 03dc8832e docs: improve docs on container identification fad227d3f docs: move info about fg/bg flags to run reference 2f48f41fc docs: improve introduction to docker run 3f519b824 docs/deprecated.md: add version for "-g" / "--graph" removal 6dc92b667 docs/deprecate.md: add version for devicemapper removal to table a682b8e65 Permit '=' separator and '[ipv6]' in --add-host 626e64ccf build(deps): bump actions/setup-go from 4 to 5 0cf7bff0b vendor: github.com/docker/docker 4046ae5e2fd4 (v25.0.0-dev) bdb45a9c2 update to go1.21.5 afc62d8d1 update to go1.21.4 8bbc97c86 prune: fix build cache prune warning e93ec2f6a Fix typo in dockerd reference documentation 5a0470888 vendor: github.com/docker/docker 029519a1498b (v25.0.0-dev) aa9fdb4dd vendor: github.com/gorilla/mux v1.8.1 a431b1dda exec.md: remove misleading part b62b5d48f Readme: remove reference to "Docker EE" 354f62f0c docs: reference/commandlin/cli: remove redundant italic e2626200a docs: remove "{% raw %}" / "{% endraw %}" Jekyl (liquid) leftovers 174cbb588 docs/man: fix -name flag with single hyphen 539537ddf vendor: github.com/docker/docker cfdca8dc1d4c (v25.0.0-dev) 6a74a63ee Dockerfile: update ALPINE_VERSION to 3.18 35c6e915d Dockerfile: update buildx to v0.12.0 6468c63c8 docs: update debian examples to use bookworm 0d95231cc Dockerfile: use "debian" in stages instead of distro name c5194a9e5 Dockerfile: update to debian bookworm 7be05a6f4 mount: bind-recursive: remove boolean convenience values dad4a1962 vendor: github.com/docker/docker v25.0.0-beta.1 30d36e977 templates: linting: fix "error return value is not checked (errchkjson) 4e2477f85 golangci-lint: enable more linters 0e73168b7 golangci-lint: revive: enable use-any 9c0c49a5f golangci-lint: revive: enable empty-lines 8e9aec690 golangci-lint: revive: enable import-shadowing f387558b5 Add zstd as supported in load command doc f4962c65b vendor: github.com/Microsoft/hcsshim v0.11.4 391668f57 golangci-lint: enable perfsprint linter 8bbdb93cf golangci-lint: enable nilerr linter 7e9d2c78c golangci-lint: enable dupword linter 2d61f70f0 golangci-lint: govet: enable shadow check 606cbd60a golangci-lint: enable predeclared linter 8661552e7 golangci-lint: enable thelper linter 8e98c765f cli/command/system: fix deprecated comments (gocritic) 9d7e21be2 cli/command/manifest: rename vars that collided with import 3f0c189e4 linting: address slice-append issues found by gocritic a2c9f3c6c linting: address else/if/elseif statements found by gocritic 888df0987 linting: address assorted issues found by gocritic d0dee3ceb linting: Consider pre-allocating sliceVar (prealloc) efbcdce9b linting: cli/command/trust: unusedwrite: unused write to field Hashes (govet) 580ebf41a dockerfiles: update golangci-lint to v1.55.2 8642b3c35 update authors and mailmap 685d1baa0 vendor: github.com/docker/docker 34e923e3e31b (v25.0-dev) f0816bf67 opts: remove unused IPOpt option b0ee27d65 opts: ValidateIPAddress: improve error, godoc, and tests b24e7f85a Fix setting ServerAddress property in NativeStore f65d4a479 vendor: github.com/docker/go-connections fa09c952e3ea (v0.5.0-dev) b7c31c36f not actually a maintainer f9622b659 vendor: update go-connections for TLS 1.3 support 4cf1c50ad Revert "update to go1.21.4" due to regressions / breaking changes. 6472dabe4 update to go1.21.4 3cd77c9d5 cli/command/container: ForwardAllSignals: rewrite to use ContainerAPIClient a2ec50a46 make `container` an explicit, required parameter a4abe42cb make runAttach public and allow passing context 2b1f5a2e3 TestParseWithMacAddress: check endpoint-specific MacAddress field 8f59f841a cli/command/container: mustParse: return network.NetworkingConfig d46de7087 vendor: github.com/docker/docker c14694a424ab (v25.0.0-dev) efc923679 --env-file about comments doc updated Signed-off-by: Saurabh Kumar <saurabhkumar0184@gmail.com> 07338fe96 docs: update redirect metadata for hugo 0239b8fd9 vendor: github.com/spf13/cobra v1.8.0 848fe622c docs: add default-network-opt daemon option 54eee599b Update container-device-interface to v0.6.2 e08866098 vendor: github.com/docker/docker ed1a61dcb789 (v25.0.0-dev) 13d34b21e vendor: github.com/containerd/containerd v1.7.8 aa24d611b vendor: google.golang.org/grpc v1.58.3 784149382 vendor: golang.org/x/tools v0.10.0 1a0ae8c6b vendor: golang.org/x/mod v0.11.0 39b1d37b3 Update CodeQL workflow 663a89b7a vendor: github.com/docker/docker fc4d035e7a4e (v25.0.0-dev) 6891974ee vendor: github.com/opencontainers/image-spec v1.1.0-rc5 827c404ca vendor: github.com/moby/swarmkit/v2 v2.0.0-20230911190601-f082dd7a0cee 137c495f7 vendor: github.com/go-logr/logr v1.2.4 6372c6aae vendor: github.com/klauspost/compress v1.17.2 8073525c0 vendor: google.golang.org/grpc v1.56.3 b7b5b31a7 update to golangci-lint v1.55.0 9e1f8d646 image/build: use "nolint" comment to work around gosec regression 2294b17e7 cli/command/network: runCreate: inline types.NetworkCreate 594aeb390 cli/command: remove dot-imports and unhandled errors b08e34b9f swarm: TestSwarmUpdate: remove non-existing "--quiet" flag defa52b8c stacks: Add support for start interval 9df7be5d5 cli/compose: add schema 3.12 (no changes with 3.11 yet) 7a2ea5c53 vendor: gotest.tools/v3 v3.5.1 f2fced487 cli/compose/loader: remove platform-specific path handling 74990623e cli/compose/loader: use gotest.tools/v3/golden 8bf121c3b Add docker ps status descriptions a252a106c - What I did Removed broken link in #937 - How I did it Removed first section of CONTRIBUTING.md - How to verify it Check CONTRIBUTING.md - Description for the changelog Removed broken link in contributing to Docker documentation. A picture of a cute animal (not mandatory but encouraged) Closes #937 74bace156 docs: add `bind-recursive` mount option 46d0ba20f vendor: github.com/docker/docker cdb3f9fb8dca (v25.0.0-dev) 3441151e0 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230823155524-12f0c246fed0 412ebb677 vendor: github.com/containerd/containerd v1.7.7 78eaac75c vendor: update OTEL dependencies a27466fb6 vendor: golang.org/x/net v0.17.0 612a17155 vendor: golang.org/x/crypto v0.14.0 392db31e2 vendor: golang.org/x/term v0.13.0 ac307788a vendor: golang.org/x/text v0.13.0 48655f794 vendor: golang.org/x/sys v0.13.0 6de525416 vendor: github.com/docker/distribution v2.8.3 ceab9b5e8 update to go1.21.3 d249ce279 update to go1.21.2 3f1195e4e update go-md2man to v2.0.3 fc6976db4 mount: add `bind-recursive=<bool|string>` and deprecate `bind-nonrecursive=<bool>` 0f59f04f5 Update minimum Go version to 1.19 d254cc3bb update golang to go1.21.1 4c75107a6 vendor: github.com/distribution/reference v0.5.0 112d79a41 appcontext: remove unused parts febb37a38 remove buildkit as dependency e9759cee6 Dockerfile: use GOTOOLCHAIN=local f07e7e1ee Dockerfile: build gotestsum and goversioninfo without cgo 9e424af5d e2e: update to use compose v2, and don't depend on distro-packages 3e2187b4c vendor: github.com/docker/docker d3afa80b96bf (v25.0.0-dev) f90890fb4 vendor: github.com/Microsoft/hcsshim v0.11.1 23f50a066 vendor: github.com/containerd/containerd v1.6.24 497b13c66 vendor: github.com/klauspost/compress v1.16.5 e0ad0127b vendor: google.golang.org/grpc v1.56.2 c2308ad6f vendor: google.golang.org/protobuf v1.31.0 56396ba35 vendor: golang.org/x/tools v0.8.0 c9d56b850 vendor: golang.org/x/crypto v0.9.0 ffea6940e vendor: golang.org/x/sys v0.10.0 1554b4932 vendor: golang.org/x/sync v0.3.0 78012b00a vendor: container-device-interface v0.6.1 3a16c3bb0 docs: fix duplicate words in "docker tag" reference 7e9467506 build(deps): bump docker/bake-action from 3 to 4 315ff202c build(deps): bump docker/setup-buildx-action from 2 to 3 4b00be585 update to go1.20.8 9e1b42e64 Add missing opts to --network advanced syntax 58f426087 Rename expectedCfg into expectedHostCfg f1048e1a3 Create default EndpointSettings if no --network provided 2c193b59d Fix extremely minor typo in docker-run man page 40dc66b26 vendor: github.com/docker/docker 06499c52e2b1 (v25.0.0-dev) f13b78672 vendor: github.com/docker/docker 032797ea4bcb (v25.0.0-dev) fb2ba5d63 migrate reference github.com/distribution/reference 04af12821 vendor: github.com/docker/docker 7abd7fa73965 (v25.0.0-dev) dee40053f build(deps): bump actions/checkout from 3 to 4 6dfdd1eae cli/command/system: fix "docker events" not supporting --format=json db6209abd update golangci-lint to v1.54.2 9ad079244 cli/registry/client: remove some redundant conditions 22b4bab90 cli/registry: client.iterateEndpoints: remove check for APIVersion1 5250f1bab cli/registry: fix client.pullManifestList not de-referencing manifest d40fc1a0f vendor: github.com/docker/docker a65c948e7edf (v25.0.0-dev) 261c18f9e ParseRestartPolicy: validate for missing policy-names 3d2aac6a0 docs/reference: run.md: remove stray whitespace 4cce7bb2f rewrite TestParseRestartPolicy to use sub-tests 42ac5d4bf force TestNewHistoryCommandSuccess to use UTC timezone 17f4c8259 update cli-docs-tool to v0.6.0 be219b317 adding -c option for docker run/build in manpages 273f2cd95 cli/command/manifest: update link to Go documentation 722e3aae4 man: update links to Go documentation dc4feccb8 docs/reference: update links to Go documentation 1d3af726e CONTRIBUTING.md: update links af05a6882 Dockerfile: use COPY --link where possible 1da67be9c Stop slowing bash init by caching plugins path slowly 5bff12354 replace dockerfile/dockerignore with patternmatcher/ignorefile 55ff9e609 vendor: github.com/moby/patternmatcher v0.6.0 e050312e6 update flag-description for --cgroup-parent d2047b954 cli/registry/client: set actions when authn with token 1c2cc4bbe info: add CDI spec directories to output bb57783ab cmd/docker: areFlagsSupported: don't Ping if not needed 6e2e92d77 Update docs/command output for volume pruning 4fc3f0e6f search: deprecate "is-automated" filter and "IsAutomated" field 299925f4c docs: document special host-gateway value for add-host 211220cbb cli/command: ResolveAuthConfig, GetDefaultAuthConfig: take ConfigFile as arg 57f0e46de cli/command/registry: cleanup login tests 84c956a17 cli/command/registry: cleanup search tests 3d0b14c3e vendor: github.com/docker/docker 4b19b2f4babd (25.0-dev) f38870e68 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230713153928-bc71908479e5 a53b03520 vendor: github.com/opencontainers/image-spec v1.1.0-rc4 8d51f36ca login: Add message about using PATs 6517db939 update to go1.20.7 373fa57ed vendor: github.com/containerd/containerd v1.6.22 0b535c791 vendor: gotest.tools/v3 v3.5.0 7a89e897e cli/command/container: waitExitOrRemoved: take APIClient as argument ce038e77b vendor: github.com/prometheus/common v0.42.0 bffe277c9 vendor: github.com/prometheus/procfs v0.9.0 92906a993 vendor: github.com/Microsoft/go-winio v0.6.1 aacdca0fe vendor: google.golang.org/protobuf v1.30.0 3cf34c6d9 vendor: google.golang.org/grpc v1.53.0 5b138189b vendor: github.com/cespare/xxhash/v2 v2.2.0 c1d065702 vendor: github.com/golang/protobuf v1.5.3 0b7c72c3b cli/command/container: RunStart: inline variable ad43df5e8 configfile: Initialize nil AuthConfigs b52fd79f1 docs: add missing docs for "DOCKER_TLS" env-var 298bddcc2 cli/command/container: deprecate NewStartOptions 00870d68f Dockerfile: update buildx to v0.11.2 78e463392 vendor: github.com/docker/docker-credential-helpers v0.8.0 ff9f1be19 Dockerfile: update buildx to v0.11.1 680fafdc9 update go to go1.20.6 223bf80d4 cli/context/docker: Endpoint.ClientOpts, withHTTPClient: inline variables 3469beb80 replace uses of deprecated api/types that moved to api/types/system 1f87420b5 vendor: github.com/docker/docker dab9ffb252186f4c47416addb136d579f9314c6a (25.0-dev) 4d03b935c vendor: github.com/moby/swarmkit/v2 v2.0.0-20230707182847-6f78b8199b05 fe7afb700 cli/container: Don't ignore error when parsing volume spec 323ca1d56 Bump container-device-interface dependency to v0.6.0 fca67dd81 Dockerfile: update to xx 1.2.1 de9f1f5b9 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230627115642-ad0f3ae162fa 125eeb7ab Add docs for health-start-interval 986879c07 Add flags to container/service for health start interval 9bfaa6ff7 revendor docker/docker from master dbd9d5d74 Update vendoring for CDI parser dad225d1e Support CDI devices in --device flag d5f564ada commandconn: return original error while closing 92d7a234d docker info: fix condition for printing debug information 88f44ec15 cli: SetupRootCommand: remove redundant flags return 3cad05fbf cli: move "config" flag to cli/flags/ClientOptions.InstallFlags() 1c1329fc7 cli/flags: add EnvEnableTLS const for "DOCKER_TLS" 0b3cadb05 cli/config: add EnvOverrideConfigDir const 13e842a11 cli/config: add synchronisation for configDir (Dir, SetDir) 9f4af6cb7 vendor: docker/docker 7f8b1cd7f928dee54174d51dc9da17f443c31480 (v25.0-dev) b32264a1a rename and update mergo module 5936fd2a8 docs: fix static ip example, network needs a subnet b85d6a8f9 docs: fix broken link 79ff64f06 cli/command/context: don't use pkg/homedir in test 6c7d17fa0 docs: update the runtime configuration section bf5d1ce97 Dockerfile: update buildx to v0.11.0 2133d0446 cli/command/context: remove deprecated k8s / orchestrator option-stubs 2d06cfcde cli/command: newAPIClientFromEndpoint: use WithUserAgent 8181aa887 cli/command/context: don't pass CLI if we only need context-store 3b8d5da66 update go to go1.20.5 acb248f8d Dockerfile: update ALPINE_VERSION to 3.17 9c2694d2b Dockerfile: update gotestsum to v1.10.0 c2535aa46 build: error if Dockerfile name is passed with Dockerfile from stdin 77dd05caa cli/command/image: remove errStdinConflict d68b36153 cli/compose/convert: convertEnvironment: sort results f4bde6869 replace some basic uses of fmt.Sprintf() 6a50c4f70 cli-plugins: remove deprecated Metadata.Experimental 58ec4161b vendor: github.com/moby/swarmkit/v2 v2.0.0-20230607145746-36334ed18760 bf492bffd vendor: docker/docker ed798d651a50cbd0af4dca127c4bfa243dda9cf7 (v25.0.0-dev) 54c80d49d vendor: github.com/opencontainers/image-spec v1.1.0-rc3 9ad605acc vendor: github.com/sirupsen/logrus v1.9.3 e15ae9e2e vendor: golang.org/x/net v0.10.0 3b62102ea vendor: golang.org/x/term v0.8.0 db7886eef vendor: golang.org/x/text v0.9.0 45fd37aaa vendor: golang.org/x/sys v0.8.0 a5ebe2282 commandconn: don't return error if command closed successfully 2331e4d52 cli/command/container: don't mutate ConfigFile.DetachKeys 23e26f40f cli/command/container: createContainer(): return container-ID c2c6fbe23 cli/command/container: TestCreateContainerImagePullPolicy: use sub-tests 0c5adb2e9 cli/command/container: attach: rename var that collided with import 47951ff44 docs: add "--detach-keys" example to docker run reference c17b0df2a docs: move "--detach-keys" example to examples section e4ceed468 docs: added example for specifying socket path with -H 5251d3748 cli/command: add EnvOverrideContext const for "DOCKER_CONTEXT" 6458dcbe5 Dockerfile.vendor: update GOPROXY to use default with fallback 0692d762a cli/command: fix GoDoc referencing wrong const 982857531 docs: rephrase section on credential stores for docker login 5d6612798 docs: remove devicemapper 4cf04988a remove uses of golang.org/x/sys/execabs db5e1fa54 vendor: update docker/docker to latest v25.0.0-dev 2713d0bcd docs: fix example for proxies in daemon.json b22290052 docs: remove AuFS from glossary e4211c91e docs: remove Docker Toolbox from glossary c246ea851 docs: remove boot2docker and docker-machine from glossary 4c11f73dc man: remove devicemapper from examples c61b56518 docs/deprecated: remove "disabled by default" for AuFS, overlay 9f537a756 docs: remove aufs and legacy overlay 73fbcdea0 contrib/completion: remove aufs, legacy overlay 1ec68fabe cli/command/system: remove aufs from fixtures 6460eea54 docs/deprecated: remove .patch release from deprecation status 035e26fb0 docs: update link location for the overlay driver 988e37956 Correct "ps --no-trunc" example output 2fc30fd45 replace uses of client.IsErrNotFound for errdefs.IsNotFound 537b88dab cli/command: don't use legacy "notfound" error-type in tests 353e0a942 vendor: github.com/docker/distribution v2.8.2 379122b03 cli/config: remove warning for deprecated ~/.dockercfg file 9b791b4fe cli/config: Load: remove outdated FIXME ff7111ae2 cli/command: remove deprecated EncodeAuthToBase64 d3ac80127 cli/command/stack: remove deprecated RunDeploy, RunPS, RunRemove, GetServices 72e3813ab cli-plugins/manager: fix deprecation comment of Metadata.Experimental 4119d268e Update tag docs to clarify name 28bc90f3b vendor: update docker/docker to v25.0.0-dev, API v1.44 60b4cdf04 Update version to v25.0.0-dev 759fa585c docs: update description for docker -H flag 1d8e2b652 vendor: github.com/docker/docker v24.0.0-rc.2 ce11b28d8 cli/config/credentials: skip unneeded exec.LookPath() 2ae223038 remove pre-go1.17 build-tags 1073b0269 cli/context/docker: rename receiver for Endpoint 2b7bfb399 cli/command/image/build: GetContextFromReader: rename var that collided ab17029c6 cli/command/container: hijackedIOStreamer: explicitly ignore err f5e224e94 un-skip history test and fix golden mismatches Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc-docker: update to 1.1.11Bruce Ashfield2024-03-151-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping runc to version v1.1.11-2-g452f520c, which comprises the following commits: 7887736f VERSION: back to development 4bccb38c VERSION: release 1.1.11 617db785 configs: make id mappings int64 to better handle 32-bit e65d4cac specconv: temporarily allow userns path and mapping if they match 2dd8368e integration: add mega-test for joining namespaces 8f8cb455 configs: disallow ambiguous userns and timens configurations 0c8e2cc6 *: actually support joining a userns with a new container 87792ce0 libct/cg: add swapOnlyUsage in MemoryStats 32a26a71 build(deps): bump github.com/cyphar/filepath-securejoin be887840 VERSION: back to development 18a0cb0f VERSION: release 1.1.10 b426e9b7 libct/cgroups.OpenFile: clean "file" argument 8214e634 libct/cg: support hugetlb rsvd f8be7009 [1.1] tests/int/helpers: add get_cgroup_path 1f66027a ci/gha: fix downloading Release.key 5a5b2cc3 Fix directory perms vs umask for tmpcopyup b365458f fix a typo in cloned_binary.c: re-use -> reuse 8f66c9fb fix two typos 016b2b42 Handle kmem.limit_in_bytes removal 11737f55 VERSION: back to development ccaecfcb VERSION: release 1.1.9 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc-opencontainers: update to 1.1.11Bruce Ashfield2024-03-151-2/+2
| | | | | | | | | | | | | | | | | | Bumping runc to version v1.1.11-2-g452f520c, which comprises the following commits: 7887736f VERSION: back to development 4bccb38c VERSION: release 1.1.11 617db785 configs: make id mappings int64 to better handle 32-bit e65d4cac specconv: temporarily allow userns path and mapping if they match 2dd8368e integration: add mega-test for joining namespaces 8f8cb455 configs: disallow ambiguous userns and timens configurations 0c8e2cc6 *: actually support joining a userns with a new container 87792ce0 libct/cg: add swapOnlyUsage in MemoryStats 32a26a71 build(deps): bump github.com/cyphar/filepath-securejoin be887840 VERSION: back to development 18a0cb0f VERSION: release 1.1.10 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* layer-wide: drop PYTHON_PNBruce Ashfield2024-02-211-3/+3
| | | | | | | | | | | Similar to OE core commit b566b1e32c7993d1ab7795562f648e52ce186a70, we no longer need PYTHON_PN for any abstraction of python2 vs python3. Our similar / dup recipes are now causing signature differences, so we go ahead and make the substitution, even if it isn't stricly required. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* container-host-config:storage.conf: sync with libpod v4.8.2Ming Liu2024-02-011-7/+55
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The current storage.conf is based on v1.33.0 of: https://github.com/containers/storage.git while in podman v4.8.2, it has been upgraded to v1.50.3-0.20231005112617-44418abb2d89 of: https://github.com/containers/storage.git let's sync it with podman v4.8.2. which comprises the following commits in storage.conf: ``` 42d1d9637 Run codespell on code 91da0c2be add documentation on imagestore and add a warning if set 01fccaa58 options: enable Remap-User/Group setting e125790e9 Fix typo in storage.conf 57582350c Document transient_store in man page 522b67c94 Add new storage.conf option "transient_store" 5e9e2ba6b Revert incorrect "heeded" -> "needed" typo fix cffa19709 fix typos and spelling 268af0001 chunked: drop host dedup feature b64cfb4f4 Document the pull_options 17fccdc2d Clearup inheritance rules for storage.conf 3c76f174d Tell users who change graphroot location to fix the SELinux labels ``` Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd-opencontainers: Use RDEPENDS:${PN} instead of RDEPENDS:${BPN}Peter Kjellerstedt2024-01-191-1/+1
| | | | | | | | | | | | | | | | | | | The original purpose of using BPN vs PN in the RDEPENDS was due to 32bit multilib issues. Those problems are no longer present, so we can adjust this recipe to use the standard PN in rdepends. This change avoids the following warning: WARNING: .../containerd-opencontainers_git.bb: Variable key RDEPENDS:${PN} (...) replaces original key RDEPENDS:containerd-opencontainers ( ${VIRTUAL-RUNTIME_container_runtime}). if, e.g., RDEPENDS:${PN}:append = " ..." is used in a bbappend or bbclass. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: update to 1.33.3Bruce Ashfield2024-01-191-2/+2
| | | | | | | | | | Bumping buildah to version v1.33.3-1-g5ca83472c, which comprises the following commits: 21e754fd3 [release-1.33.2] Bump Buildah to v1.33.3 b44d6bd56 [release-1.33.2] Bump c/common to 0.57.2 and c/image to 5.29.1 7fffb3366 [release-1.33.2] Bump to v1.33.2 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: fix branch nameChen Qi2024-01-191-1/+1
| | | | | | | | The branch 1.33.2 is not there any more. The correct branch for now is 1.33. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* criu: add cgroup-lite to RDEPENDSXiangyu Chen2024-01-191-1/+1
| | | | | | | criu needs cgroup-lite to init the cgroup configurations during system start. Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: adjust the lxc-test-unpriv running orderXiangyu Chen2024-01-191-1/+24
| | | | | | | | | | Some of lxc test cases can not full clean the system environment, that cause lxc-test-unpriv cannot execute successfully. Since those code in lxc are using for tests, so just adjust the cases order. Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: add test instructions for podman system serviceMing Liu2024-01-191-0/+21
| | | | | Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-compose: introduce pkgconfig docker-pluginMing Liu2024-01-041-9/+9
| | | | | | | | | | This allows docker-compose choose to be built as a docker plugin or a standalone binary, in the later case, docker-compose does not have to rdepends on docker, so nother container tools like podman can also use it. Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman-tui: update to v0.14.0Bruce Ashfield2024-01-041-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping podman-tui to version v0.9.0-207-gc545dbd7, which comprises the following commits: c545dbd7 Bump to v0.14.0 ac61433c container create dialog - user/groups category options c3274937 Bump github.com/containers/common from 0.57.0 to 0.57.1 7227ec91 Bump actions/stale from 8 to 9 808dc504 Bump actions/setup-python from 4 to 5 d4121000 Bump actions/setup-go from 4 to 5 1df86623 Bump github.com/containers/podman/v4 from 4.8.0 to 4.8.1 9822b029 container create dialog - environment category options 7f698267 container create options (privileged, timeout) b985d1fa Bump to v0.14.0-dev c0bf2daa Bump to v0.13.0 74103352 running golangci-lint on ui/containers package 6fad611b Bump github.com/containers/podman/v4 from 4.7.2 to 4.8.0 717e859a running golangci-lint on ui/images package e9207835 Bump golang.org/x/crypto from 0.15.0 to 0.16.0 0ab99d84 running golangci-lint on ui/dialogs package f19ddfc2 running golangci-lint on ui/networks package f99918f6 running golangci-lint on ui/pods package 068b7c00 running golangci-lint on ui/system package e27eaf42 running golangci-lint on ui/utils package c5f1711c running golangci-lint on app package b94bfa90 running golangci-lint on config package ce5905bd running golangci-lint on cmd package 56190b2a github action update 05f7e7ab adding container create mount inputfield option 8cfb6130 use inputfield for container create volume option 76e6d03a Bump github.com/navidys/tvxwidgets from 0.4.0 to 0.4.1 7a7897c6 Bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1 ef812d9c Bump github.com/containers/storage from 1.50.2 to 1.51.0 ae72e400 EPEL rpm package e62199b1 docs update - add Gentoo in packaged versions 35468621 Bump to v0.13.0-dev 15759448 Bump to v0.12.0 28e8a2d5 Bump github.com/containers/buildah from 1.31.2 to 1.32.2 5ce10afe Bump github.com/containers/podman/v4 from 4.6.2 to 4.7.2 1e56294d gh action update 226be72d using github.com/distribution/reference 38ed7d29 Bump github.com/docker/distribution 00759199 Bump github.com/docker/docker d61975c8 Bump google.golang.org/grpc from 1.57.0 to 1.57.1 8231c9ca Bump golang.org/x/net from 0.13.0 to 0.17.0 c42e4015 Bump golang.org/x/crypto from 0.13.0 to 0.15.0 4cca7cae update ginkgo cli version to 2.11.0 03ad465a Bump github.com/spf13/cobra from 1.7.0 to 1.8.0 0b5ff67e running codespell 8cfaf08d Bump github.com/rs/zerolog from 1.30.0 to 1.31.0 f5e6f7ed Bump github.com/containers/storage from 1.48.0 to 1.50.2 fa255fdc Bump github.com/navidys/tvxwidgets from 0.3.0 to 0.4.0 2d854793 Bump github.com/containers/podman/v4 from 4.6.1 to 4.6.2 c132c0e6 Bump github.com/cyphar/filepath-securejoin from 0.2.3 to 0.2.4 e4643785 Bump github.com/docker/docker f05f381b Bump golang.org/x/crypto from 0.12.0 to 0.13.0 78ce8c9d Bump actions/checkout from 3 to 4 de8383d9 Bump tim-actions/commit-message-checker-with-regex from 0.3.1 to 0.3.2 11f9b244 Bump to v0.12.0-dev 33d9be57 Bump to v0.11.0 74360a37 fix missing volume list created time column c532db41 Bump github.com/containers/podman/v4 to 4.6.1 65b96aa3 Vagrantfile update (fedora-38 image) 78e96572 Bump github.com/containers/buildah from 1.31.1 to 1.31.2 af0700f2 Bump github.com/containers/common from 0.55.2 to 0.55.3 a6c67e96 Bump golang.org/x/crypto from 0.11.0 to 0.12.0 83f9b0f0 Bump github.com/docker/docker bd51d4bd Bump github.com/rs/zerolog from 1.29.1 to 1.30.0 f1e9e1fb Bump github.com/containers/buildah from 1.30.0 to 1.31.1 24ff42f2 Bump github.com/containers/common from 0.53.0 to 0.55.2 6e9ce1bc Bump golang.org/x/crypto from 0.10.0 to 0.11.0 efdfbe48 Bump github.com/containers/storage from 1.46.1 to 1.48.0 e99a7b0e Bump golang.org/x/crypto from 0.9.0 to 0.10.0 98c6660a Bump github.com/BurntSushi/toml from 1.2.1 to 1.3.2 cc2eedf9 Bump github.com/docker/docker dbe94d6c Bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3 4479d607 Bump github.com/containers/podman/v4 from 4.5.0 to 4.5.1 22e1da63 Bump github.com/sirupsen/logrus from 1.9.0 to 1.9.2 661d46e4 Bump github.com/docker/distribution 3f90e76b Bump github.com/sigstore/rekor from 1.1.0 to 1.2.0 9ab5f1fa Bump tim-actions/get-pr-commits from 1.2.0 to 1.3.0 ee3cfd11 Bump github.com/containers/common from 0.52.0 to 0.53.0 9596156d Bump to v1.5.0-dev 53e2d8af Bump to v1.4.0 ef699e43 Bump github.com/rs/zerolog from 1.29.0 to 1.29.1 3213a478 Bump github.com/containers/podman/v4 from 4.4.0-rc1 to 4.5.0 55bdd266 Bump github.com/containers/common 24231629 Bump github.com/docker/docker 84ae09ed podman update to v4.4.4 d7314c7a Bump github.com/spf13/cobra from 1.6.1 to 1.7.0 d8d12e1a Bump github.com/containers/storage from 1.45.4 to 1.46.0 c8141ba5 packit update - remove centos stream build 449d8f48 golangci-lint system package b0d20b2a Bump actions/stale from 7 to 8 613d18f4 ui/styles - applying golint 78395235 ui/infobar - applying golint 745a331d ui/help - applying golint 4c27c3de ui/volumes code improvement and golint 02740c14 adding container attach command to container page/view 6b5beb41 fix container create error without health options 705bc347 Bump actions/setup-go from 3 to 4 cf4509ed Add container health options to the container create dialog d79883ea Add packit configurtion to build RPM as part of PR tests ba02fb57 Update unit tests and github workflow for running the tests 4e3889f0 fix container create error when volume is selected 0af3e47b update github workflow golang version to 1.18.8 f572f481 Golangci-lint update to v1.51.1 c2932fc2 fix vendor + codepsell 1e35d9af Bump golang.org/x/crypto from 0.6.0 to 0.7.0 bb17bbc5 unit tests fix 13286688 Bump to v0.10.0-dev 28f800cd Bump github.com/onsi/ginkgo/v2 from 2.8.4 to 2.9.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: update to v4.8.2Bruce Ashfield2024-01-041-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping libpod to version v4.8.2-2-g0ec4c8b1d, which comprises the following commits: 4aab4e3fe bump release to v4.8.3-dev aa546902f v4.8.2 a9b20a4a2 [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2 775054343 Kube Play - set ReportWriter when building an image 1864ea94f Fix user-mode net init flag on first time install 3c0d66d83 bump c/common to v0.57.1 b0e2ffc51 bump version to v4.8.2-dev ef6e5ac40 v4.8.1 0b72d1bf2 Update RELEASE_NOTES.md for v4.8.1 2d20d2e5c Handle symlinks when checking DB vs runtime configs 6bbbfaa05 libpod: Detect whether we have a private UTS namespace on FreeBSD a8b8dc570 pkg/bindings: add new APIVersionError error type 86bb91001 fix podman-remote exec regression with v4.8 9c9d2fcaf sqlite: fix issue in ValidateDBConfig() 1e5a1336f sqlite: fix missing Commit() in RemovePodContainers() 429080f02 sqlite: set busy timeout to 100s a72c39a53 Fix locking error in WSL machine rm -f a7c522dfe Gating test fixes a62b81d90 If API calls for kube play --replace, then replace pod 70ba64f4c Fix wsl.conf generation when user-mode-networking is disabled e627de1b4 Bump to v4.8.1-dev c4dfcf148 Bump to v4.8.0 0efc6ea30 Update release notes for 4.8.0 4b95c6c30 Add notes on upcoming deprecations to release notes 1c1477ddf [v4.8] Bump to Buildah v1.33.2 f02155142 [CI:DOCS] Update release notes 697e66c78 machine applehv: create better error on start failure 53f176732 Bump to v4.8.0-dev ac1d54e68 Bump to v4.8.0-rc1 66cba2794 Create release notes for v4.8.0 ac290f446 Update release notes from v4.7 branch 883ce7704 Cirrus: Update operating branch 9ea390191 rootless_tutorial: modernize ee1654622 Bump Buildah to v1.33.1 3d86a9658 Bump Buildah to v1.33.0 60d9f9b80 Update to libhvee 0.5.0 d32f61d91 vmtypes names cannot be used as machine names d0b32255e Add support for --compat-auth-file in login/logout a3d5814e0 Update tests for a c/common error message change ced07a55f Update c/image and c/common to latest, c/buildah to main a10b88cb2 CI: test overlay and vfs da899b92d [CI:DOCS] Add link to podman py docs d2a4ec867 Test fixes for debian 23ead49de pasta tests: remove some skips d711c3f46 VM images: bump to 2023-11-16 5f3f8a3ca fix(deps): update module k8s.io/kubernetes to v1.28.4 [security] 3d88f614f [CI:DOCS] Machine test timeout env var e35fc92c0 Quadlet - add support for UID and GID Mapping dc709e4d7 Quadlet - Allow using symlink on the base search paths 7b826b230 [skip-ci] Update dessant/lock-threads action to v5 ea89eaa1c Avoid empty SSH keys on applehv 33ddd79e2 qemu,parseUSB: minor refactor 669829447 fix(deps): update module github.com/gorilla/handlers to v1.5.2 49b152f49 docs: fix relabeling command 5dc807487 Pass secrets from the host down to internal podman containers 047da19b5 (Temporary) Emergency CI fix: quay search is broken e1f3ae0d8 Update podman-stats.1.md.in 6fa4a975c [CI:BUILD] packit: handle builds for RC releases bd375058c Quadlet test - add case for multi = sign in mount 5e0471ba7 set RLIMIT_NOFILE soft limit to match the hard limit on mac d636ce8d7 rootless: use functionalities from c/storage 6b5b39912 CI: e2e: fix a smattering of test bugs that slipped in d07263f34 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1 fbd1ba68f vendor: update c/storage 956c0d6ec Improve the documentation of quadlet 39d647a2f Fix socket mapping socket mapping nits 5388836c1 fix(deps): update module golang.org/x/tools to v0.15.0 60f67eec7 fix(deps): update github.com/containers/libhvee digest to 9651e31 9cd975d59 [skip-ci] Update github/issue-labeler action to v3.3 b8d59030c Document --userns=auto behaviour for rootless users c23963d7a machine: qemu: add usb host passthrough 4a75a2b3c fix(deps): update module golang.org/x/net to v0.18.0 1c5bc7e09 fix(deps): update module github.com/onsi/gomega to v1.30.0 b2c56365b Refactor Ignition configuration for virt providers 81dc3f183 [CI:BUILD] rpm: disable GOPROXY 78798cab0 Automatic code cleanups - JetBrains a45ba06d0 Refactor key machine objects 1c969219d systests: add [NNN] prefix in logs, NNN = filename 92cd7b25f systests: add a last-minute check for db backend d44f71c13 applehv: allow virtiofs to mount to / c2de6d34c Run codespell on podman 8f5c46c9e update completion scripts for cobra v1.8.0 28f3e9fe3 Fix man page display of podman-kube-generate 8effb7825 Try to fix the broken formatting of man podman‐kube‐apply(1). 3eb2d5ceb fix(deps): update module golang.org/x/text to v0.14.0 108d2bc43 docs: make CNI removal explicit c1fe1f9d3 fix(deps): update module github.com/gorilla/mux to v1.8.1 e78288344 fix(deps): update module github.com/spf13/cobra to v1.8.0 0824e45c8 fix(deps): update module golang.org/x/sync to v0.5.0 da897bd04 fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18 420316ef6 Podman push --help should reveal default compression 942bcf34b Update container-device-interface (CDI) to v0.6.2 375b0cc13 fix: adjust helper string in machine_common 9e05fb14a fix: adjust helper string in machine_common 607aff55f remote,test: remove .dockerignore which is a symlink 6b7d7f6fb [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2 b5f854458 fix: adjust helper string in machine_common ce334ed9d vendor: update github.com/coreos/go-systemd/v22 to latest main 2a17baa29 CI: default to sqlite 33753db47 vendor: update c/common 613f50c7a check system connections before machine init ea4775ec9 Consume OCI images for machine image d2a37222b freebsd: drop dead code 06a07c98e libpod: make removePodCgroup linux specific e4f1c87ea containers: drop special handling for ErrCgroupV1Rootless 0b6abfe1e compose: fix compose provider debug message aefa9abf4 image: replace GetStoreImage with ResolveReference 03419d6da vendor: bump c/image to 373c52a9466f ce9c1b9b8 Refactor machine socket mapping f6ec210f3 AppleHV: Fix machine rm error message af0ef47f0 Add status messages to podman --remote commit 3241b3259 End-of-Life policy for github issues 390e9ddc9 fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10 18d6bb40d Support passing of Ulimits as -1 to mean max 78765b14d fix(deps): update github.com/docker/go-connections digest to 0b8c1f4 ffb96ad8b fix(deps): update github.com/crc-org/vfkit digest to f3c783d 7153124f9 Log gvproxy and server9 to file on log-level=debug d9c388e2f Change to using gopsutil for cross-OS process ops 642fa9897 Initial addition of 9p code to Podman b332ca7a0 libpod: fix /etc/hostname with --uts=host 89d7b2735 systests: stty test: retry once on flake 6b94c8fd3 systests: pasta: avoid hangs 4c67a6aed Fix secrets scanning GHA Workflow 2193bb8fc [skip-ci] Update dawidd6/action-send-mail action to v3.9.0 e9dd41183 docs: clarify systemd cgroup mount a1577ec7b podman build --remote URI Dockerfile shoud not be treated as file 95a5ad258 Small fixes for wacko CI environments c6d410cc3 Do not add powercap mask if no paths are masked 3743955d6 compose: try all possible providers before throwing an error 91df369ae podman kube play --replace should force removal of pods and containers 3ce62d3cc Sort kube options alphabetically e966c86d9 container.conf: support attributed string slices 91ccd7cd2 CI: podman farm tests cleanup be7dd128e Mask /sys/devices/virtual/powercap 05a607f14 Update module github.com/google/uuid to v1.4.0 6a0b2c680 fix(deps): update module github.com/docker/docker to v24.0.7+incompatible 6badb659c fix(deps): update module go.etcd.io/bbolt to v1.3.8 9e3363c5e CI: systest: safer random_rfc1918_subnet c841fa9e9 CI: e2e: safer GetPort() fd5140d87 Fix broken code block markup in Introduction.rst d0ce60c63 chore(deps): update module google.golang.org/grpc to v1.57.1 [security] 15969a60b chore: remove npipe const and use vmtype const for checking 2158e1540 Update module github.com/onsi/gomega to v1.29.0 c0fb8fe59 CI: try to fix more networking flakes c21f28813 fix: check wsl npipe when executing podman compose 9ea1ed6d4 [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1 76cca08f8 Quadlet - explicit support for read-only-tmpfs c13b8e3c9 compat API: fix image-prune --all 0e15861c5 Makefile - allow more control over Ginkgo parameters ebe01ca29 Add e2e tests for farm build 989afd910 vendor c/{buildah,common}: appendable containers.conf strings, Part 1 dd8f57a3b Add podman farm build command 2e88d580a Add emulation package 06b726497 Use buildah default isolation when working with podman play kube 0a2aae119 docs(API): Fix compat network (dis-)connect 1b466ccbd test/e2e: do not import buildah 8a0968baa pkg/specgen: remove config_unsupported.go cb9dfeb8e pkg/parallel/ctr: add !remote tag d4a67cf45 pkg/domain/filters: add !remote tag 9cecae8c2 pkg/ps: add !remote tag 1d1630990 pkg/systemd/generate: add !remote tag bad25da92 libpod: add !remote tag abb5c86b6 pkg/autoupdate: add !remote tag 01a750699 vendor latest c/common 3615af903 libpod: remove build support non linux/freebsd 1850670f1 Fix typo 2e57746ff test/apiv2: adapt apiv2 test on cgroups v1 environment c3ba0221e ginkgo setup: retry cache pulls ee6070888 Support size option when creating tmpfs volumes 8876380af not mounted layers should be reported as info not error 85cc4092f CI: stop using registry.k8s.io a8e1a5ed1 fix(deps): update module github.com/vbatts/git-validation to v1.2.1 6d99cb5cd test fixes for c/common tag chnages dfdd93323 vendor latest c/common d6f44d956 hyperV: Update lastUp time 1ac110835 [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0 9e648a1f5 lint: disable testifylint 29273cda1 lint: fix warnings found by perfsprint 64f43fed4 lint: fix warnings found by inamedparam c21f42a4e lint: fix warnings found by protogetter 03947ab03 libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon 936e30f68 Use node hostname in kube play when hostNetwork=true bd953fdc7 cirrus setup: special-case perl unicode ca9efb0cd network: document ports and macvlan interaction f2bc63894 quadlet: document cgroupv2 requirement e8183e836 [skip-ci] Update actions/checkout digest to b4ffde6 1d2589c3f Revert "Emergency workaround for CI breakage" f48a706ab remote: exec: do not leak session IDs on errors ad1ab71b8 fix(deps): update github.com/containers/storage digest to 79aa304 d1086281b fix(deps): update module k8s.io/kubernetes to v1.28.3 657029da7 System tests: fix broken silence127 b72bb1162 Add TERM iff TERM not defined in container when podman exec -t 44ed415b2 Emergency workaround for CI breakage d4d76479c Kill gvproxy when machine rm -f cad4d0ee9 Fix path for omvf vars on Darwin/arm64 285718915 Allow systemd specifiers in User and Group Quadlet keys caef657c5 libpod: rename confusing import name efe5e98d0 use FindInitBinary() for init binary 1d3ec78e0 vendor latest c/common fa19e1baa exec: do not leak session IDs on errors 1efcd1ecf systests: cp test: lots of cleanup 2d65e57ae Define better error message for container name conflicts with external storage. 9b8e01efd Quadlet - support ImageName for .image files 64171043a test/system: ignore 127 if it is the expected rc c65d1c02b test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1 831844b59 image history: fix walking layers ad5319025 fix(api): Ensure compatibality for network connect e0561301c [CI:DOCS] Add cross-build target info. dc705d370 machine set: document --rootful better bbd6281ec libpod: restart+userns cleanup netns correctly 3b6a4ac37 Minor log and doc fixes f875ae317 Quadlet man page - discuss volume removal explicitly 5d5facbd7 Quadlet - add support for KubeDownForce 6ba67ba96 System Test - Quadlet kube oneshot 9637fed2f Fix output of podman --remote top dcb421bc5 buildah-bud: test relative TMPDIR c8604081e Fix handling of --read-only-tmpfs flag 1b0be2f34 Vendor common and buildah main 5db3b753a remote,build: wire unsetlabels 331e47acb test: build with TMPDIR as relative 6cf3dd493 docs: add unsetlabel 64ff14932 vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85 74ed1d6e7 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2 b9f2c4d17 fix: pull error response docker rest api compatibility 29f5c563e Show client info even if remote connection fails 52112fc5c fix(deps): update github.com/containers/libhvee digest to e51be96 cb53bcf23 Run codespell 987dc2b8b SetLock for all virt providers 61e0b64b9 Machine: Teardown on init failure 99a14332e healthcheck: make sure to always show health_status events 7b84b55da Apply suggestions from code review ca518888e [CI:DOCS]rtd: implement v2 build file 702f15528 Quadlet - support oneshot .kube files 3cc9db862 libpod: fix deadlock while parallel container create 2301320f6 fix(deps): update module golang.org/x/net to v0.17.0 8b46e852e api: add `compatMode` paramenter to libpod's pull endpoint 76fec1227 api: break out compat image pull 40f897653 fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3 29ae51600 use sqlite as default database 8a52e638e vendor latest c/common acd0a93c3 fix(deps): update module github.com/nxadm/tail to v1.4.11 d18369ee8 Check for image with /libpod/containers/create 8ac2aa793 container: always check if mountpoint is mounted 787b1b25c fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0 9beb3a972 vendor: update c/storage 36bf90518 api: drop debug statement d321d427d Quadlet - add support for global arguments 732cec794 Add system test 10aa39068 fix(deps): update module golang.org/x/tools to v0.14.0 3fdb6ee2d Don't ignore containerfiles outside of build context b3209dc5d fix(deps): update github.com/containers/libhvee digest to fcf1cc2 eda275820 fix(deps): update module golang.org/x/term to v0.13.0 da6c86dfc Update module golang.org/x/sys to v0.13.0 1c0780097 [CI:DOCS] Add updating version on podman.io to release process 362eca669 containers.conf: add `privileged` field to containers table 6cb10425d Implement secrets/credential scanning 106abd13b Cirrus: Execute Windows podman-machine e2e tests 338e4f590 vendor: bump c/storage 8807243cc Update module golang.org/x/sync to v0.4.0 2168f0745 [CI:DOCS] update swagger version on docs.podman.io 0414f88b3 Create Qemu command wrapper df6a00026 Adjust to path name change for resolved unit 2a38f30b6 Revert "Fix WSL systemd detection" f622a2a54 [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL 27f58803d [CI:DOCS] update kube play delete endpoint docs 3fc7c42e1 [CI:DOCS] Remove dead link from README 1b3cedbf3 test/system: --env-file test fixes 617af9bea Revert "feat(env): support multiline in env-file" 5f340487e Revert "docs(env-file): improve document description" 9599589f1 Revert "fix(env): parsing --env incorrect in cli" 7e6e26732 Filter health_check and exec events for logging in console 0443c5166 inspect: ignore ENOENT during device lookup b576b7932 test, manifest: test push retry cbca39529 Fix locale issues with WSL version detection b988eadaf vendor: update module github.com/docker/distribution to v2.8.3+incompatible 1ebd22303 vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509 8b647cdb5 Update github.com/containers/libhvee digest to e9b1811 cc946daff windows: Use prebuilt gvproxy/win-sshproxy binaries 979c77f10 Volume create - fast exit when ignore is set and volume exists 874e4466a Update golang.org/x/exp digest to 9212866 22a1d015c Update github.com/opencontainers/runtime-spec digest to c0e9043 229734c10 remove selinux tag as not needed anymore 049a5fb92 [skip-ci] Improve podmansh(1) 85ed9edde Build applehv for Intel Macs 7ef8519f4 Revert "GHA Workflow: Faster discussion-locking" 59e0919bc update vfkit vendored code 17cebb3ff Add DefaultMode to kube play ba788c1bb Fix broken podman images filters 9b3964111 Remove `c.ExtraFiles` line in machine f21c1d238 podman: run --replace prints only the new container id bcfd9f340 New machines should show Never as LastUp 94818f594 podman machine: disable zincati update service b284128d7 Revert "cirrus setup: install en_US.UTF-8 locale" b28188de2 Cirrus: CI VM images w/ newer automation-library 2b9c0555f CI VMs: bump to f39 + f38 ecd7b3802 [CI:DOCS] Update podman load doc 58b5ae22e Update mac installer to latest gvproxy release 5b990c383 Fix WSL systemd detection be823b388 Add documentation for the vrf option on netavark fda028ca0 fix(deps): update github.com/containers/common digest to 9342cdd 6306e8985 fix: typos in links, path and code example ccb7da52c e2e: ExitCleanly(): manual special cases 611db19b3 e2e: ExitCleanly(): the final fron^Wcommit 149d3f7ad [CI:DOCS] Add win-sshproxy target to winmake 0d4526e61 wsl: enable machine init tests 455d16549 Update docs/source/markdown/options/rdt-class.md bfbd0c896 move IntelRdtClosID to HostConfig 4853320ce use default when user does not provide rdt-class 77336de8f Add documentation for Intel RDT support 24b2f829b Add test for Intel RDT support 40d3c3b9b Add Intel RDT support 295439265 [CI:DOCS] Fix podman form update --help examples f0eb45667 Quadlet container mount - support non key=val options 0b5ea1e6e test/e2e: default to netavark 4ed9dc1ad [skip-ci] Update dawidd6/action-send-mail action to v3.9.0 48ea4b9ec fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1 90eb73629 fix(deps): update github.com/containers/common digest to 4619314 172494423 applehv: enable machine tests for start 2ff43429f applehv: machine tests for stop and rm 127ebe2b2 Update machine tests README 995a6a8ac Add podman socket info to machine inspect 80952db0b Fix podman machine info test for hyperV 7ade97210 libpod: pass entire environment to conmon e4b7455b7 e2e: ExitCleanly(): manual fixes to get tests working dbd946a93 e2e: ExitCleanly(): a few more 59ffea80d FCOS+podman-next: correct GHA conditional syntax 8bad842a4 pkg/machine/e2e: wsl stop 217c4d546 wsl: machine tests for inspect e4bfcfc25 wsl: machine tests for ssh 5636d0219 fix(deps): update github.com/containers/common digest to e18cda8 a112ee895 wsl: machine start test d3d5011dc wsl machine tests: set cc4917d81 wsl: machine tests ec68a7489 Skip proxy test for hyperV 33a92aa00 Enable machine e2e test for applehv 65ce03486 hyperV: Respect rootful option on machine init 52ba1bfff [CI:BUILD] FCOS image: enable nightly build ffd67cf75 e2e: use safe fedora-minimal image 41e51f473 hyperv: machine e2e tests for set command 59e295f2a podman build: correct default pull policy 6293ec2e2 fix handling of static/volume dir 26b5b1dd3 unbreak CI: useradd not found 08936db35 hyperv: set more realistic starting state 2bef573f3 hyperv: use StopWithForce with remove f52b02f40 Fix all ports exposed by kube play cd4f61181 Fix setting timezone on HyperV 172369b54 fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6 e0b44bcf3 Fix farm update to check for connections d8e305716 Adjust machine CPU tests 8188a6fcf Bump version on main e65874903 [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds 96142c2f7 Vendor c/common af2665c28 pod rm: do not log error if anonymous volume is still used 4916f7d77 e2e: ExitCleanly(): manual fixes to get tests passing 8e743fa1d e2e: ExitCleanly(): a few more c66aa3b7b fixes for pkg/machine/e2e on hyperv 83b6975d1 test: fix rootless propagation test 6c2493f78 [CI:BUILD] packit: tag @containers/packit-build team on copr build failures 92f4dcb09 Enable disk resizing for applehv 5b3801776 Various updates for hyperv and machine e2e tests 682ca6b2e test: update fedoraMinimal version 8d3010d06 specgen, rootless: fix mount of cgroup without a netns 39ba5ff24 Automatically remove anonymous volumes when removing a container 24d3347ed Use ActiveServiceDestination in ssh remoteConnectionUsername b6ea49f5a fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405 c69873d67 e2e: ExitCleanly(): generate_kube_test.go 841cfa802 e2e: generate kube -> kube generate d1f86d524 e2e: ExitCleanly(): generate_kube_test.go f3e9a6369 windows cannot "do" extra files 62e13bec7 e2e: ExitCleanly(): Fixes for breaking tests 09c3ac48f play kube -> kube play e83ced8a0 e2e: ExitCleanly(): play_kube_test.go eb9283c6f introduce pkg/strongunits 6d8b3047d Makefile equiv Powershell script 4652a2623 pass --syslog to the cleanup process 73dc72f80 vendor of containers/common 1cbe692de fix --authfile auto-update test 8e5adde0b compat API: speed up network list 8c95aa402 Change priority for cli-flags for remotely operating Podman befdb4199 libpod: remove unused ContainerState() fucntion 0ec63abca [CI:BUILD] Packit: Enable failure notifications for cockpit tests 0ac98176b e2e: ExitCleanly(): more low-hanging fruit a50fb7e06 e2e: ExitCleanly(): more low-hanging fruit 1908663f1 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1 38f5ead33 Enable machine e2e tests for WSL ff07abea4 systests: tighter checks for unwanted warnings 618f846ed GHA Workflow: Faster discussion-locking 289be0c01 [CI:BUILD] FCOS + podman-next image: pull in wasm 649539519 [CI:BUILD] rpm: remove gvproxy subpackage b0f7072ac [CI:DOCS] Tweak podman to Podman in a few farm man pages 8afffa1aa Docs on sig-proxy are wrong, we support TTY 4fca726f7 e2e: ExitCleanly(): low-hanging fruit, part 2 64c46c429 e2e: ExitCleanly(): low-hanging fruit, part 1 113b41b6f Buildtag out unix commands for common OS files aec58f515 systests: clean up after tests; fix missing path in logs fa7150451 [CI:BUILD] followup PR for fcos with podman-next 289e59ee1 Implement gvproxy networking using cmdline wrapper e68e37136 fix, test: rmi should work with images w/o layers e9b98510d vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282 50a685bd1 Quadlet Image test - rearrange test function e6cf09b68 e2e: continuing ExitCleanly() work: manual tweaks d78221545 e2e: continuing ExitCleanly() work 47160da7a [CI:DOCS] Improve podman-tag man page ef553fb0d [CI:DOCS] Improve podman-build man page 93dc30e1e [CI:DOCS] Include precheck to release process a80a908df [CI:DOCS] consistentize filter options in man pages 55ca571e5 Quadlet - add support for .image units 41beb5374 --env-host: use default from containers.conf 0b7142f4a error when --module is specified on the command level deba3b80a man page crossrefs: add --filter autocompletes 03dd5f256 Fix specification of unix:///run 98e6dda69 Add label! filter and tests to containers and pods 6f4f94137 Add test for legacy address without two slashes 336055fe3 Use url with scheme and path for the unix address Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* netavark: update to v1.9.0Bruce Ashfield2024-01-042-297/+333
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping netavark to version v1.9.0-20-g167e2e4, which comprises the following commits: 3faf33f fix(deps): update rust crate tokio to 1.35 4759152 dhcp-proxy: return actual error instead of generic one f571e31 dhcp-proxy: skip set gateway if missing 63c34a5 chore(deps): update rust crate once_cell to 1.19.0 ff45e22 fix(deps): update rust crate nispor to 1.2.15 c85d844 fix(deps): update rust crate serde to 1.0.193 3bbc9fd fix(deps): update rust crate clap to ~4.4.10 4f27552 aardvark: show error if process is in wrong netns a4e082d aardvark: remove unessesary unlock lockfile calls 4c58983 fix(deps): update rust crate url to 2.5.0 f588f1d Bump working version to v1.10.0-dev 1ac6900 v1.9.0 Release d688bdc v1.9.0 Release notes 2f31a95 test: fix syntax problem in helpers.bash 530c911 run cargo update d49f979 use OsString/Path over String for file paths c6f48d6 chore(deps): update dependency containers/automation_images to v20231116 8e943b5 firewalld-reload: fix CI tests 2172205 firewalld-reload: prevent race which could leak fw rules 6aee10f fix(deps): update rust crate clap to ~4.4.8 74ed450 CI: skip broken firewalld test e281e9b fix(deps): update rust crate http to 0.2.11 708bd43 rpm: add netavark-firewalld-reload.service to spec b5d7510 firewalld-reload: add integration tests 268a927 firewall/state: make sure to ignore enoent on read 0449ba5 firewall-reload: integrate actual logic to reload rules 13b2133 firewall/state: improve error messages d2eeaab firewall: add state functions to serialize configs cd1114c firewalld: fix lint errors with rust v1.73 28c48ce firewall: do not use full Network in NetworkStruct aebb5da firewall: add dns_port to SetupNetwork cb5aa2e add firewalld-reload subcommand 3df3c88 fix(deps): update rust crate http to 0.2.10 9a3266b fix(deps): update rust crate env_logger to 0.10.1 a063151 fix(deps): update rust crate tokio to 1.34 dce15ba Update rust container build files 730e1bf bridge: force static mac on bridge interface fca4999 fix(deps): update rust crate futures-core to 0.3.29 6291f27 fix(deps): update rust crate serde to 1.0.190 e7a4435 fix(deps): update rust crate serde_json to 1.0.108 b4ca3e0 fix(deps): update rust crate sysctl to 0.5.5 9d9f600 fix(deps): update rust-futures monorepo to 0.3.29 78b4fea CI: Drop CI VM distro name 116d565 chore(deps): update dependency containers/automation_images to v20231004 f42b296 fix(deps): update rust crate tokio to 1.33 881828f build-sys: Filter to tier 2 Linux declaratively f29b03f fix(deps): update rust crate sha2 to 0.10.8 a54db5d fix podman.io community link 33a4c86 Bump to v1.9.0-dev 837f1f3 Release v1.8.0 046b4cf update release notes for v1.8.0 11db130 run cargo update 4b6d5ab Add vrf support for bridges d211c7a Packit: switch to @containers/packit-build team for copr failure notification comments 6989cda fix(deps): update rust crate nispor to 1.2.14 40df9d9 [CI:BUILD] Packit: tag @lsm5 on copr build failures b8671a6 chore(deps): update rust crate chrono to 0.4.31 2904dc1 fix(deps): update rust crate serde_json to 1.0.107 bc383f2 rust io safety: convert RawFd to BorrowedFd<> 61b8e62 bump nix to 0.27.1 156073b chore(deps): update rust crate chrono to 0.4.30 521e490 fix(deps): update rust crate serde_json to 1.0.106 b9441cf chore(deps): update rust crate chrono to 0.4.29 8c6c7fd fix(deps): update rust crate netlink-packet-route to 0.17.1 f5d0a95 Bump tonic and prost 70cc3e9 Update container image to F38 3806d9a Add ACCEPT rules in firewall for bridge network with internal dns. d9961dc chore(deps): update rust crate tonic-build to 0.10 7d581d2 fix(deps): update rust crate nispor to 1.2.13 ddbfc60 fix(deps): update rust crate serde to 1.0.188 96368f4 Fix clippy warnings about formatting 4b0b499 update chrono crate be29339 fix(deps): update rust crate url to 2.4.1 bcd1ebc Add protoc dependency to README 9c840e9 [CI:BUILD] rpm: spdx compatible license field a19bf24 fix(deps): update rust crate tokio to 1.32 4636b22 chore(deps): update dependency containers/automation_images to v20230816 735ea2f fix(deps): update rust crate serde_json to 1.0.105 719ded6 fix(deps): update rust crate tokio to 1.31 3b5ce46 fix(deps): update rust crate log to 0.4.20 60d6185 run cargo update ab90b2b update tonic-build to 0.9.2 fcdacab bump rust edition to 2021 845fbdf iptables: drop invalid packages 080a814 fix(deps): update rust crate tokio to 1.30 6caef06 docs: Convert markdown with go-md2man instead of mandown bb22c34 fix(deps): update rust crate clap to 4.3.21 00c05a6 packit: Build PRs into default packit COPRs 2f44e50 chore(deps): update dependency containers/automation_images to v20230807 c5df890 fix(deps): update rust crate serde to 1.0.183 be2a8ea fix(deps): update rust crate serde to 1.0.181 067bbde fix(deps): update rust crate serde to 1.0.180 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* aardvark-dns: update to v1.9.0Bruce Ashfield2024-01-042-193/+183
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping aardvark-dns to version v1.9.0-10-gf1c946c, which comprises the following commits: e4785bd Release v1.9.0 e406f83 v1.9.0 Update release notes 8880d68 run cargo update 864fa96 chore(deps): update dependency containers/automation_images to v20231116 a8642b3 fix(deps): update rust crate tokio to 1.34.0 b154c3b fix(deps): update rust crate async-broadcast to 0.6.0 5ee6646 update trust-dns to hickory f516597 fix(deps): update rust crate futures-util to 0.3.29 20ab8f5 fix(deps): update rust crate trust-dns-server to 0.23.2 d9f023a fix(deps): update rust crate trust-dns-proto to 0.23.2 645fb12 tmt: initial enablement 3633db0 aardvark main: change error reporting 7820735 chore(deps): update dependency containers/automation_images to v20231004 dc1ef13 fix(deps): update rust crate trust-dns-proto to 0.23.1 085608c fix(deps): update rust crate trust-dns-client to 0.23.1 ceca55b clippy: some format fixes 9c90865 fix(deps): update rust crate tokio to 1.33.0 3391c8d Bump to v1.9.0-dev 1ed9402 Release v1.8.0 a9e95ca update release notes for v1.8.0 1730fef run cargo update 2a3415e Packit: switch to @containers/packit-build team for copr failure notification comments 82752dd [CI:BUILD] Packit: tag @lsm5 on copr build failures 0356081 chore(deps): update rust crate chrono to 0.4.31 0d831cf cargo: bump chrono to 0.4.30 ea06d05 test: IPv6 format is changed in v1.72.0 d2a7527 bump nix to 0.27.1 20e5b56 vendor: bump trust_dns_proto and trust_dns_client to 0.23.0 cce63be fix(deps): update rust crate trust-dns-server to 0.23.0 c81a038 [CI:BUILD] rpm: spdx compatible license field cae27d7 fix(deps): update rust crate anyhow to 1.0.75 b46553e fix(deps): update rust crate tokio to 1.32.0 1d8d421 chore(deps): update dependency containers/automation_images to v20230816 f8bdbf1 fix(deps): update rust crate tokio to 1.31.0 88e847d fix(deps): update rust crate anyhow to 1.0.74 3f74fdc fix(deps): update rust crate anyhow to 1.0.73 17ca8a1 fix(deps): update rust crate log to 0.4.20 70ad545 chore(deps): update dependency containers/automation_images to v20230809 cb2b0e6 fix(deps): update rust crate tokio to 1.30.0 def4232 fix(deps): update rust crate clap to 4.3.21 cd85a71 packit: Build PRs into default packit COPRs 4df6054 chore(deps): update dependency containers/automation_images to v20230807 a713fa6 fix(deps): update rust crate anyhow to 1.0.72 dc36e6b fix(deps): update rust crate signal-hook to 0.3.17 62cd6e2 fix(deps): update rust crate clap to 4.3.19 7f3c50d fix(deps): update rust crate clap to 4.3.15 8821976 fix(deps): update rust crate signal-hook to 0.3.16 75a7b92 [CI:BUILD] Packit: remove pre-sync action 1e54ac4 fix(deps): update rust crate clap to 4.3.11 389a189 fix(deps): update rust crate tokio to 1.29.1 836a441 fix(deps): update rust crate clap to 4.3.10 c81743a [CI:BUILD] RPM: cleanup spec and fix eln builds 2703165 bump to v1.8.0-devel Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* skopeo: update to 1.14.0Bruce Ashfield2024-01-041-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping skopeo to version v1.14.0-10-ga85eaac9, which comprises the following commits: 48d11dac fix(deps): update golang.org/x/exp digest to 6522937 87eef310 DOCS: add Gentoo in install.md f50dc204 DOCS: Update to add Arch Linux in install.md 9f52e728 fix(deps): update module golang.org/x/term to v0.15.0 efd76e74 Bump to v1.14.1-dev 6abf96bb Bump to v1.14.0 14496ba4 fix(deps): update module github.com/containers/common to v0.57.0 fa85e47b chore(deps): update dependency containers/automation_images to v20231116 e4b67e78 fix(deps): update module github.com/containers/image/v5 to v5.29.0 edefdb66 Add documentation and smoke tests for the new --compat-auth-file options 518181e5 Update c/image and c/common to latest 56b96a4d fix(deps): update module github.com/containers/storage to v1.51.0 a8e7d94e fix(deps): update module golang.org/x/term to v0.14.0 50cffa38 fix(deps): update module github.com/spf13/cobra to v1.8.0 0c2cca96 [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2 6b2a26f1 [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1 6ef8acff fix(deps): update github.com/containers/common digest to 3e5caa0 5d4e89cc chore(deps): update module google.golang.org/grpc to v1.57.1 [security] 5307dd66 fix(deps): update module github.com/containers/ocicrypt to v1.1.9 03c94252 Update github.com/klauspost/compress to v1.17.2 91611a3a chore(deps): update module github.com/docker/docker to v24.0.7+incompatible [security] a9c7c505 Fix ENTRYPOINT documentation, drop others. 70551db8 Remove unused environment variables in Cirrus a2eb508b [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0 1fa360a6 chore(deps): update dependency containers/automation_images to v20231004 fa3e62f2 chore(deps): update module golang.org/x/net to v0.17.0 [security] dc4fa672 copy: Note support for `zstd:chunked` 538dd6f3 fix(deps): update module golang.org/x/term to v0.13.0 611db7c3 fix(deps): update module github.com/docker/distribution to v2.8.3+incompatible 43e1a96e fix(deps): update github.com/containers/common digest to 745eaa4 5fad766c Packit: switch to @containers/packit-build team for copr failure notification comments d8b3a17f Packit: tag @lsm5 on copr build failures 57034826 vendor of containers/common 7db8fbde fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc5 4d921585 fix(deps): update module github.com/containers/common to v0.56.0 9e89e18f Cirrus: Remove multi-arch skopeo image builds 32c8a05a fix(deps): update module github.com/containers/image/v5 to v5.28.0 679615f5 Increase the golangci-lint timeout c1e7c974 fix(deps): update module github.com/containers/storage to v1.50.2 9563e3b8 fix(deps): update module github.com/containers/storage to v1.50.1 427e58f5 fix(deps): update golang.org/x/exp digest to 9212866 7c39f363 Fix a man page link 897619f6 fix(deps): update github.com/containers/image/v5 digest to 58d5eb6 2976f4f8 GHA: Closed issue/PR comment-lock test 46979914 fix(deps): update module github.com/containers/common to v0.55.4 3249973d fix(deps): update module github.com/containers/storage to v1.49.0 b87a1b3e rpm: spdx compatible license field b0d587a9 chore(deps): update dependency golangci/golangci-lint to v1.54.2 7ced0fb0 chore(deps): update dependency containers/automation_images to v20230816 4b952d61 Packit: set eln target correctly 6b827fa7 packit: Build PRs into default packit COPRs fec950c2 DOCS: Update Go version requirement info 449ac9bb DOCS: Add information about the cross-build 78187ca8 fix(deps): update module github.com/containers/ocicrypt to v1.1.8 df117e28 fix(deps): update module github.com/containers/common to v0.55.3 4ee2946b Update c/image after https://github.com/containers/image/pull/2070 0e3efc64 chore(deps): update dependency golangci/golangci-lint to v1.54.1 46fcbd3a chore(deps): update dependency containers/automation_images to v20230809 e98561e2 fix(deps): update golang.org/x/exp digest to 352e893 4f5ba65a chore(deps): update dependency containers/automation_images to v20230807 5abce03c Update to Go 1.19 276b8095 fix(deps): update module golang.org/x/term to v0.11.0 60ee543f Update c/image for golang.org/x/exp ab892075 RPM: define gobuild macro for rhel/centos stream f236b5ef Fix handling the unexpected return value combination from IsRunningImageAllowed c40f1485 Close the PolicyContext, as required by the API e90ad861 Use globalOptions.getPolicyContext instead of an image-targeted SystemContext a4aa15f4 Packit: remove pre-sync action a0a340a1 fix(deps): update module github.com/containers/common to v0.55.2 f7dc0847 proxy: Change the imgid to uint64 a39972ca [CI:BUILD] Packit: install golist before updating downstream spec 2945e9e0 Update module golang.org/x/term to v0.10.0 5f87f6ab Bump to v1.14.0-dev cb1e9012 Bump to v1.13.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* crun: update to v1.12Bruce Ashfield2024-01-041-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | Bumping crun to version 1.12-19-g90b21dd, which comprises the following commits: 49f439d ctx: drop no_subreaper bool b5ad30f krun: fix use of uninitialized integer 7c5a32a criu: do not set CLOEXEC on fds to inherit c9e23a8 criu: fix error return value 501aa98 handlers: Fix -Werror=unused-parameter build error for spin c9014f8 src: use O_CLOEXEC with pipes 3ad89be src: use O_CLOEXEC for all open/openat calls 0f0d5be src: close std streams on exec 08b7d33 build(deps): bump uraimo/run-on-arch-action from 2.5.1 to 2.6.0 2ad31d4 linux: fix error string ce429cb NEWS: tag 1.12 08d9fea preconfigure cpuset with required resources a18356e README.md: update the correct Nix channel da991db utils: try attr/<lsm>/* before attr/* 616aea7 feat: add spin handler 172bbd0 container: move dereference after check 2cc04ea systemd: fallback to system bus Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* moby: update to v24.0.7-tipBruce Ashfield2024-01-041-1/+1
| | | | | | | | | | | | | | Bumping moby to version v24.0.7-9-gafcd2cde95, which comprises the following commits: d0b5a5a8a5 integration/TestLiveRestore: Wait for process to exit f0b5ca47fb liverestore: Don't remove `--rm` containers on restart bfbb1dd890 update containerd binary to v1.7.9 8a9a6702d0 update containerd binary to v1.7.8 56d9d85c99 Dockerfile: update github.com/tc-hib/go-winres v0.3.1 6d5c35c0ce update runc binary to v1.1.10 05d7386665 daemon: daemon.containerRestart: don't cancel restart on context cancel Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: update to 1.33.2Bruce Ashfield2024-01-041-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping buildah to version v1.33.2-1-g8be6786d5, which comprises the following commits: 7fffb3366 [release-1.33.2] Bump to v1.33.2 7add02a3b Update minimum to golang 1.20 b92ad028b fix(deps): update module github.com/fsouza/go-dockerclient to v1.10.0 20565e530 fix(deps): update module github.com/moby/buildkit to v0.12.3 bd0ae2aff Bump to v1.33.2-dev 38d6d5f11 Bump to v1.33.1 6d66008b6 Bump to v1.31.2-dev f18868d06 Bump to v1.31.1 f6cb3e474 fix(deps): update module github.com/moby/buildkit to v0.11.4 [security] 7aa395489 test,heredoc: use fedora instead of docker.io/library/python:latest 8fb826177 Bump to v1.33.1-dev 98da6c8d6 Bump to v1.33.0 2087848c3 Never omit layers for emptyLayer instructions when squashing/cwing 3a61cc099 Add OverrideChanges and OverrideConfig to CommitOptions bbb55b8b8 buildah: add heredoc support for RUN, COPY and ADD 69f52f805 vendor: bump imagebuilder to v1.2.6-0.20231110114814-35a50d57f722 fadc0ba08 conformance tests: archive the context directory as 0:0 (#5171) 3c61dfd4f blobcacheinfo,test: blobs must be resued when pushing across registry 19d9a6bc0 Bump c/storage v1.51.0, c/image v5.29.0, c/common v0.57.0 b2b761573 pkg/util.MirrorToTempFileIfPathIsDescriptor(): don't leak an fd 1fab39559 StageExecutor.Execute: force a commit for --unsetenv, too 4cf16730b Increase a copier+chroot test timeout 57d863dfd Add support for --compat-auth-file in login/logout dcfbe69a3 Update existing tests for error message change 5fc64afe1 Update c/image and c/common to latest eebecc94d fix(deps): update module github.com/containerd/containerd to v1.7.9 fe9bdce86 build: downgrade to go 1.20 4f3876d8e Add godoc for pkg/parse.GetTempDir 00e73de71 conformance tests: use go-dockerclient for BuildKit builds 0a85c0629 Make TEE types case-insensitive bc59f69c0 fix(deps): update module golang.org/x/crypto to v0.15.0 10c0222d4 Tweak some help descriptions 8df9b760b Stop using DefaultNetworkSysctl and use containers.conf only 99cad6ee1 Implement ADD checksum flag #5135 1d30520e8 vendor of openshift/imagebuilder #5135 7e0d66483 Pass secrets from the host down to internal podman containers 8f86c5784 Update cirrus and version of golang 61de02b0f image: replace GetStoreImage with ResolveReference 1306a64cd vendor: bump c/image to 373c52a9466f af394a83d pkg/parse.Platform(): minor simplification d1bfccf22 createConfigsAndManifests: clear history before cw-specific logic 9f1c9a8ee Use a constant definition instead of "scratch" 6552b619c conformance: use require.NoErrorf() more acf60abbe fix(deps): update module golang.org/x/term to v0.14.0 4a470feec fix(deps): update module golang.org/x/sync to v0.5.0 e8ae12013 fix(deps): update module github.com/spf13/cobra to v1.8.0 fc74d5071 fix(deps): update module golang.org/x/sys to v0.14.0 892014df1 fix(deps): update github.com/containers/common digest to 8354404 2f118fe61 fix(deps): update module github.com/opencontainers/runc to v1.1.10 ef439b8ad fix(deps): update github.com/containers/luksy digest to b5a7f79 934c40e73 Log the platform for build errors during multi-platform builds 3b96b1caf Use mask definitions from containers/common 34ac2cc4f Vendor in latest containers/common 2779e7062 fix(deps): update module github.com/containerd/containerd to v1.7.8 52d48d720 fix(deps): update module go.etcd.io/bbolt to v1.3.8 02f781b35 container.conf: support attributed string slices 2b2a4bed8 fix(deps): update module sigs.k8s.io/yaml to v1.4.0 03b004224 Use cutil.StringInSlice rather then contains 48a9c4371 Add --no-hostname option to buildah containers c536048ca vendor c/common: appendable containers.conf strings, Part 1 a9e06a64d fix(deps): update module github.com/onsi/gomega to v1.28.1 2a3a956cb chroot.setupChrootBindMounts: pay more attention to flags a4f0d7dec chore(deps): update dependency containers/automation_images to v20231004 7c8b51068 Vendor containers/common 0f0ca0cfc chore(deps): update module golang.org/x/net to v0.17.0 [security] 9c99d7ca8 run: use internal.GetTempDir with os.MkdirTemp 7704ca6d3 fix(deps): update module github.com/containerd/containerd to v1.7.7 07d955f27 imagebuildah,multi-stage: do not remove base images 6fd4f0373 gitignore: add mkcw binary 9c57af8d1 mkcw: remove entrypoint binaries b97f887ca fix(deps): update module golang.org/x/crypto to v0.14.0 4e6c2b2cd fix(deps): update module golang.org/x/sys to v0.13.0 f99de537e fix(deps): update module golang.org/x/sync to v0.4.0 5bfc7d9a4 Update some comments related to confidential workload c48a459ea Use the parent's image ID in the config that we pass to imagebuilder 2d4896f6e fix(deps): update github.com/containers/common digest to 8892536 065c8d43e fix(deps): update github.com/containers/luksy digest to 6df88cb 249e30c98 bug: Ensure the mount type is always BindMount by default ad3211c26 Protocol can be specified with --port. Ex. --port 514/udp a3d2c3125 fix(deps): update module github.com/onsi/gomega to v1.28.0 8b63fa37b build,config: add support for --unsetlabel 91f54ed54 tests/bud: add tests 351012792 [CI:BUILD] Packit: tag @containers/packit-build on copr build failures ae5f11e45 stage_executor: allow images without layers 4c6255679 vendor of containers/common b3084b5f4 Removing selinux_tag.sh as no longer needed after 580356f [NO NEW TESTS NEEDED] 9dd66e4cb add/copy: make sure we handle relative path names correctly 68ffd1e97 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc5 abc57f8df Bump to v1.33.0-dev b574b806e imagebuildah: consider ignorefile with --build-context Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to 2.0-betaBruce Ashfield2024-01-042-11/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We refresh our GO_FLAGS patch for new context, and drop the install of v1 or unversioned shims as the runtime-v1 has been dropped Bumping containerd to version v2.0.0-beta.0-88-g87bf39a7f, which comprises the following commits: 96aaf5a3b Add core and internal root packages c0363754f sandbox: get runtime info from sandbox or container 95d2a3b7c upgrade: add cri upgrade test case 0bc963341 runtime/v2: net.Dial gRPC shim sockets before trying grpc e1b495866 sandbox: keep rootDir and stateDir compatible b0fef6738 sandbox: migrate sandbox_mode to sandboxer c8012b6d7 sandbox: make a clear dependency of cri plugins 2ead89509 Support gzip and zstd HTTP transport compression to fetch remote resources 8e567aa58 mv pkg/process cmd/containerd-shim-runc-v2/process a813097dc Bump up github.com/fsnotify/fsnotify to v1.7.0 c384e3717 containerd-stress: use config address for CRI test d4c828c2c integration: add new binary upgrade case 8e91edb71 fix(pkg/dialer): minor fix on dialer function for windows ad3f8c563 tomlext.Duration add MarshalText method 6da015284 go.mod: github.com/containerd/continuity v0.4.3 cd348e6ef .golangci.yml: remove directories that don't exist 4b556a6e0 Bump up golangci-lint to v1.55.2 c51d4f9b6 push: always inherit distribution sources from parent e15c24655 Move CRI image service into a separate plugin 80dd779de remotes/docker: close connection if no more data 7f410ae05 integration: reproduce #9347 2e9686c05 fix: deflake TestCRIImagePullTimeout/HoldingContentOpenWriter 4aa932337 CI: update Fedora to 39 f6c4de6b5 fix: podsandbox depends on Lease plugin 1b65fe264 fix ticker leak 1af0cba1a Update documentation for containerd v2.0 packages 4f42da416 adopters.md: remove Eliot project 01c442147 Enhance container image unpack client logs e7390d4ed vendor: upgrade OpenTelemetry to v1.19.0 / v0.45.0 1a1bd6d0a runtime/v2/shim: use structured log for plugin ID 71fd85f5e runtime/v2/shim: run(): remove unused "name" argument 0a59c33be runtime/v2/shim: rename var that shadowed package var be22e12d5 services/server: use structured log for plugin ID 09de4f1fc services/server: rename var that collided with import 14e621cf9 services/server: gofumpt 32bf805e5 sandbox: add a sandboxService interface to criService 25a4c3d23 sandbox: remove SandboxersServicePlugin 0cf48bab2 sandbox: podsandbox init its own client 7d65a4563 Move runc shim implementation to cmd e682da76c fix labels in pod sandbox 64c41162c update tests to use labels from cri/labels 7e79225ce refactor labels used in cri server 274a16282 update runc binary to v1.1.10 2e014fa2a cri: fix update of pinned label for images cb555fa16 golangci-lint: enable depguard to prevent re-introducing libcontainer dac056fe7 integration: deflake TestIssue9103 7b9fcfd7c add default enable unprivileged icmp/ports a7cd49c68 expected and actual field position adjustment e099717f9 validate kernel version for unprivileged icmp/port 76049170b document runtime and shim configuration and selection 2fab240f2 integration: init release upgrade test 2af6db672 switch back from golang.org/x/sys/execabs to os/exec (go1.19) a596d09ec cri: add deprecation warning for configs 35924bccc cri: add deprecation warning for auths d7cb25d77 cri: add deprecation warning for mirrors 58cc275eb cri: add ability to emit deprecation warnings 68cac3f62 client: remove obsolete ErrCheckpointRWUnsupported df19888f8 add warning use inheritable Capabilities 411e2bce4 Remove plugins package 9db21401c Switch to github.com/containerd/plugin a48ddf4a2 Don't allow io_uring related syscalls in the RuntimeDefault seccomp profile. 2dfae4c4b Prepare release notes for v2.0.0-beta.0 6ca4b5260 Update mailmap a67efe88d Add tests cases f1d659dc5 Update package name in Makefile 0ffc3e987 Handle ArgsEscaped for new Sb Server b85df264e Rename opt to avoid stutter 261e01c2a Move client to subpackage b6adf43d4 test: use 'Autoclear: ture' in TestRwLoop and add Autoclear test 124d3a20a Sync ops.md, update CLI --help output to be consistent in descriptions 5fdf55e49 Update go module to github.com/containerd/containerd/v2 abfc8be53 Fix lint in integration/client ddd73ad30 Move protofiles generated into v2 directory 638b474c8 Temporarily remove imgcrypt in CRI to fix circular dependency 192168038 Temporarily remove integration/client submodule 4e3fbd36e vendor: github.com/klauspost/compress v1.17.2 856d1053f vendor: google.golang.org/grpc v1.58.3 466ee870d Check scheme and host of request on push redirect 3fff8b4f6 ctr: new deprecations command 079383dbe dynamic: record deprecation for dynamic plugins 260e71abc server: add ability to record config deprecations bc861b66f pull: record deprecation warning for schema 1 9aab44673 introspection: add support for deprecations 57c897f10 api/introspection: deprecation warnings in server 240733ce2 warning: new service for deprecations aff5b809c deprecation: new package for deprecations d48ceb606 Avoid TLS fallback when protocol is not ambiguous ed759bae3 Update go fuzz to directly instantiate server 09e40511a fix bug that using invalid token to retry fetching layer 2fea521d0 Disable windows-2019 integration test temporarily 9fc407d8c ci: bump up golangci-lint to v1.55.0 8b4f9656d sandbox: remove ValidateMode as it is not used 337cc2171 pkg/cri: should ignore no sandbox bucket f515cd5c5 Reorder fields when writing bootstrap params 3d53fbe85 Fix CRI integration tests f76eaf5a6 Fix 'not a directory' error when restoring bootstrap.json cf75cfa32 Add more logs around shim restore 8061cb023 Save bootstrap.json instead of address file e03bf32b8 Switch runc to v3 7a2d801d6 Expose shim instance version f66c46806 Bridge task service v2 daaf67662 Switch runc shim to task v3 bb64e6a8e Initialize sandbox controller list on CRI server creation 03d81f595 Use cri streaming pkg from k8s staging b006f1c15 integration/client: replace hardcoded strings for OCI-spec consts d3f5e0c90 images/archive: replace hardcoded strings for OCI-spec consts 8e7c10c6d CRI: enhance ImageFsInfo() to support multiple snapshotters e4639ad18 Add exports to proxy plugin config 3986f80c3 go.mod: bump up github.com/opencontainers/image-spec to v1.1.0-rc5 f7c9e9942 vendor: golang.org/x/net v0.17.0 c3652540c vendor: golang.org/x/text v0.13.0 ff602c213 vendor: golang.org/x/sys v0.13.0 39b168cdb vendor: google.golang.org/grpc v1.57.1 930ee552e Fix typos 3ef300ca7 sandbox: remove global variable of podsandbox controller 7bca70c0c sandbox: do not call Connect when loadShim d2d434b7d sandbox: add all sandbox information to Create method 0707f6869 sandbox: ignore not found error when remove sandbox 2951fb6dc sandbox: support more sandbox controllers 8b3597685 sandbox: add Sandboxer field to sandbox metadata 69e501e7c sandbox: change SandboxMode to Sandboxer f372b3501 sandbox: add sandboxer field of sandbox requests a782fd6da Use LOOP_CONFIGURE when creating loop devices 771237563 Add a new image label if it is docker schema 1 5ad6f3432 CRI: use (snapshotter_id, snapshot_key) to uniquely identify snapshots 41b2b2a7b go.mod: bump up github.com/klauspost/compress from v1.17.0 to v1.17.1 4febb0852 deprecated: go-plugin library as runtime plugin 51c9ffe46 remotes: add handling for missing basic auth credentials 4f339b5b5 RELEASES.md: mark legacy CRI as removed status 0a4f79211 Remove use of v1 runtime plugin type for Unix 71f8b4357 Move dynamic plugins to a subpackage 7b2a91821 Generalize the plugin package a80606bc2 Move plugin type definitions to containerd plugins package cb969085f Temporarily remove zfs as built in plugin 2486c1298 Exit shim when shutdown manager is done 1b3199324 Rename sbserver to server 4edc6c2d9 Add note about configuration versions in releases c5c94dc86 Fix CRI tests panic on CI a3c2c1e4d Clean shell scripts fa1d3a9cc Fix dependencies after remove 3742f7f0d idmapped: use pidfd to avoid pid reuse issue 2332b9ba1 Remove legacy CRI from CI 536abf1b3 Remove legacy CRI 33b1a833c Move CRI testing package out 016114ff6 Move bandwidth package out of CRI server 3c1e7ffb8 Integration: Alter TestContainerPids for Windows 8f013bb71 Add migration for older configuration versions 313f514fd update to go1.21.3. gp1.20.10 6b752b536 update to go1.21.2, go1.20.9 8f3d1c9d9 add cpu-burst param to ctr command 3ddcd6120 add Duration type to compatible toml v1 version 535916d1d Skip exec.LookPath if a specific gzip implementation is disabled 4b59d67dd add a new flag "skip-reference-check" to skip reference name check 34378ec9b Use Intel ISA-L's igzip if available 7d6369087 Fix windows default path overwrite issue 13dcf558e Fix windows default path overwrite issue 39478eeec go.mod: Bump up github.com/klauspost/compress v1.16.7 to v1.17.0 859c2651e remotes/docker: Fix MountedFrom prefixed with target repository c85b1d1e4 Bump up golangci-lint to v1.54.2 6169433b6 Fix linter issues for golangci-lint 1.54.2 e3cb7471a CRI: Snapshotter per runtime handler adjustments 42dc8faba Bump x/net to 0.13 79772a0dd remotes: always try to establish tls connection when tls configured 11a7751af *: add runc-fp as runc wrapper to inject failpoint 68dd47ef7 containerd-shim-runc-v2: avoid potential deadlock in create handler 6604ff6c5 containerd-shim-runc-v2: remove unnecessary `s.getContainer()` 0d76fe5c1 Fix some assertions for integ tests 1dced31c3 ci-fix: pin the mingw version 12.2.0.3042023 aae71aa8e update gitignore to indicate that where contributors can use global gitignore 8ffb03d68 cri: stop recommending disable_cgroup 5365f4b29 cri: call RegisterReadiness after NewCRIService 46645b393 Call migrations per version 5518a5026 remotes: simplify mediatype logic 8b105984b pkg/transfer/local: simplify mediatype logic 79acce462 integration: use mediatype helpers 0ba5b4b62 oci: use mediatype helpers cdba61603 remotes: use mediatype helpers 69034f755 pkg/display: use mediatype helpers 5ab04ac5a pkg/unpack: use mediatype helpers da1196979 pkg/snapshotters: use mediatype helpers f1cbc5f90 containerd: use mediatype helpers 4b1bb1293 remove github.com/opencontainers/runc dependency 62f621a34 images: simplify mediatype logic 377c5ca9c images/archive: use mediatype helpers bb8a472f2 images: use mediatype helpers e7254406c Require plugins to succeed after registering readiness 62f273d50 Add migrate subcommand to config command 0320ad184 Add config migration to plugin package f58158e2d Add config migration and bump config version bf4fbe4e8 docs: Update `transfer` service docs to reflect completed implementations for 1.7 b40e95e0e images: Config: explicitly return nil-error 36c2222d3 Add usage calculation test 3b60e9366 Create new imagetest package 4c344f2fa Add warning for plugin configs with unknown fields a9ba33f8f Allow for images with artifacts to pull 650148313 Add warning log for unknown config fields b5615caf1 Update go-toml to v2 8b413daff Remove log package except for exported const used by hcsshim 2f1b92710 Update zfs library to use new log repository 508aa3a1e Move to use github.com/containerd/log f1070c4e1 docs/userns: Clarify requirements for k8s 1.25/1.26 42eee8bf0 fix: Add `containerd` to the message type reference 9e819fb4a Update CRI image store to not use containerd client dcb2e7447 Improve doc of func NewNetNS 2ce971d89 Add delete target to image remove f8fb2dad3 api: update image service to support target in delete request 8e3722c7d CI: Set slow_chown for overlayfs snapshotter 46d3094aa docs/userns: Fix small typo d008d64a8 docs/userns: Clarify containerd 1.7 limitations e37908200 docs/userns: Document the need to opt-in for a slow chown 8bf8e2b97 snapshotter: Use capa prefix consistently for capabilities ec9e0dca9 overlay: Require opt-in if idmap mounts are not supported. 03b9ce56b deprecate logs package, but disable linter (for transitioning) d69ae811d alias log package to github.com/containerd/log v0.1.0 729c97cf3 Handle unexpected shim kill events ed5f7e7c8 Update image in client to use new usage package 96a23ccc1 Create new usage package 79f781d00 Refactor: Removing inherently flaky and unused SourceDateEpochOrNow function. 8cbb4ea5d vendor: github.com/containerd/nri v0.5.0 3ca39ef01 fix: Remove `LimitNOFILE` from `containerd.service` 83240a4f7 Bump crun to 1.9 967313049 doc: Add documentation about CRI user namespaces 2e13d3954 pkg/process: Only use idmap mounts if runc supports it fce1b9507 go.mod: Update runtime spec to include features.MountExtensions a81f80884 Revert "cri: Throw an error if idmap mounts is requested" e832605a8 integration: Simplify WithVolumeMount() 24aa808fe integration: Add userns test with volumes ab5b43fe8 cri/sbserver: Pass down UID/GID mappings to OCI runtime e916d77c8 platforms: move ToProto, FromProto to api/types 381442945 platforms: remove errdefs dependency e0b2b17de cri/server: Add tests for the linux-specific parts of VolumeMounts() 10cb112e4 cri/server: Add tests for ContainerMounts() 97dfa7f55 cri/server: Pass down uidMappings to OCI runtime b42bdd125 release: remove `cri-containerd-*.tar.gz` release bundles 9656b8c0d nri: update mock plugin handlers 6f9de91ef vendor: update github.com/containerd/nri@v0.4.0 f7089ba22 leases: add WithLabel 1480e3bd4 leases: cleanup TestWithLabels d94a789d1 Fix usages of `mountinfo.PrefixFilter` 45e303eea task: expose criu work path opt f77185f9e Fix "even if IPv4 comes first" test to have IPv4 first 88a849626 Don't use `To16() != nil` to detect IPv6 addresses eaf607101 update to go1.21.1, go1.20.8 1a7490c5a Add link to CONTRIBUTING from README 0413f1272 Add contributors guide 05093d7c0 vendor: github.com/cncf-tags/container-device-interface v0.6.1 ac1d556b9 Add image verifier transfer service plugin system based on a binary directory 55b2df560 go.mod: github.com/grpc-ecosystem/grpc-gateway/v2 v2.16.2 a00888db8 fix reference to canonical fieldmask type 0041996ca CI: bump up crun to 1.8.7 4bc0b2660 Revert the removal of the parameter Container 6ec0d4a3a prevent ctr from creating tags with forbidden characters a4bdbf784 content: reduce the contention between ref lock and boltdb lock abfabb6d8 contrib/fuzz: fix redeclared issue 295bcec07 snapshotter: implement unit tests for idmapped mounts for overlay 9d01ed1c3 integration: add test for idmapped mounts e49e6d6fd snapshotter: implement slow path for idmapped mounts check for overlay 1555a31bf mount: support idmapped mount points 723c88ce3 snapshotter: add "--remap-labels" support to overlayfs e8ddf669f snapshotter: support "remap-ids" capability for overlayfs ef6b91947 fix(docs): fix on the windows installation script 5d31e9378 pkg/systemd: use sync.Once for systemd detection 7d0ab4fc2 remove uses of github.com/runc/libcontainer/cgroups 9bc6441c2 vendor: github.com/google/uuid v1.3.1 13ff185ba Blockfile: Enlighten blockfile copy on Darwin a3e8503ed .github: enable fuzz build cd705af89 metadata: add image delete events during garbage collection 3f9756c18 gc: add support for image expiration b32638e21 ctr: pull or fetch image metadata by default 20f79300c push: inherit distribution sources from parent 24aca53fa Update use of content.Infoprovider f8c789f31 content: add InfoProvider interface 02d519ad6 Update hcsshim tag in runhcs-version script a2817ca16 CRI: Include sandbox ID in failed to load error 492347090 replace reference/docker for github.com/distribution/reference v0.5.0 26dcae2f6 fix ossfuzz building error 19d6c37a3 Revert "log: define G() as a function instead of a variable" fd5d92a7f Update hcsshim tag versioning to v0.12.0-rc.0 779875a05 Add missing unpacker.Wait for image import 4f5db2bc0 metadata: format unit test output 15b13fb3e Windows: Supply windows shim version via file 7a0ad09a0 make repositories of install dependencies configurable 34def8b33 Remove redundant nil check fc45365fa Remove most logrus f9c35feb3 Makefile: allow overriding GO_BUILD_FLAGS via environment 490905be6 go.mod: github.com/containerd/continuity v0.4.2 03abceac5 Update LTS description 34f32043b Blockfile: Expose RecreateScratch option b4f487ce9 Apply suggestions from code review 1e3540e11 Add stale bot 4e236962f Update critools to 1.28.0 c92f4a160 Update RELEASES c3f3cad28 Use sandboxed CRI by default b76cd4d9f replace some fmt.Sprintfs with strconv bbdbf7ab6 Add inspect image commands 78308b4a4 Add manifest printer library 11a5dd826 snapshots: replace some fmt.Sprintfs with strconv 06765c9ef oci: replace some fmt.Sprintfs with strconv 710d22366 removes/docker: replace some fmt.Sprintfs with strconv d7bc8694b pkg/cri: replace some fmt.Sprintfs with strconv 73e9cfd1c append k8s 1.28 to releases 6d8329d7f Remove unnecessary joinError unwrap 8399a4ee7 Remove temporary replace 7ad0a6ccf Update to latest releases in RELEASES.md cd8c8ae4b Remove hashicorp/go-multierror 1571a5aa0 ctr: metrics: drop unused retval from printWindowsStats() 7063ae1f6 Makefile: add rule for installing documentation de4c338ab Docs: Document proxy plugin diff support d09f7cbe0 cri: Fix sandbox_mode "shim" 60b2cb143 cmd: containerd: allow building w/o systemd notify 23c95359a Add WithMetaStore to overlay snapshotter to allow bringing your own 0c1ad52ea cri: spec_linux: drop unused retvals eacd74c2b Go 1.21.0 5756cb00e CI: increase timeout for Binaries c883410c9 CI: Explicitly upgrade MinGW on Windows 2019 GitHub runners. 0f043ae43 seccomp, apparmor: add go:noinline 5d9bf7d13 CI: temporarily disable ci_fuzz due to incompatibility with recent Go e2ce4f58f Populate commit memory for windows memory usage stats 823e0420e Fix transfer service dependencies: cfb30a31a Invoke Stable ABI compatibility function in windows platform matcher 0cea317a5 FreeBSD: set default runtime def5ff3c4 Sandbox: Add annotations to controller CreateOptions 939ccbed4 Sandbox: Add annotations to CreateSandbox surface 1fd3a4652 archive/tarheader: fix FreeBSD hdr for regular files f8edd5555 update runc binary to v1.1.9 f35d1f08e go.mod: github.com/opencontainers/runc v1.1.9 00ef8ba99 Vagrantfile: add strace tool 601699a18 integration: add ShouldRetryShutdown case based on #7496 8dcb2a6e6 pkg/cri/sbserver: fix leaked shim issue for podsandbox mode 72bc63d83 pkg/cri/server: fix leaked shim issue 5bdd9ca93 integration: add case to reproduce #7496 b451fa96a bump client-go v0.26.4 a645ff2e6 Update dependencies after protobuf update in hcsshim e7e5619fe Update hcsshim tag to v0.10.0 54baf766e add metrics for discarding events 189a1599c archive/compression: update out of date RFC draft link cac8b6f4b Makefile: allow overriding the binary executable target dir 90443f038 CI: update Rocky Linux to 8.8 0a57dc2a0 CI: update Fedora to 38 30dd0a17f CI: install Vagrant from Hashicorp 965641dbc Makefile: allow REVISION be overwritten by environment fc32197d4 Makefile: fix overriding go command 2d3360ec7 CI: move Vagrant tests to GitHub Actions (larger runners) 4f3c8c468 replace mcr.microsoft.com registry to ghcr.io/containerd registry d41c62a55 .github/workflows: add dmesg step for integration-linux fd8778fba delete checkout branch in doc c62abcb14 docs: document CRI cgroup driver auto detection c80a3ecaf cri/sbserver: Use platform instead of GOOS for userns detection 157dff281 update to go1.20.7, go1.19.12 687a5f51a fix: allow attaching to any combination of stdin/stdout/stderr aa8b094ab platforms: clarify docs for amd64/arm64 variant normalization 710d987d2 Fix default platform matcher when ctr import 2d64ab8d7 cri: Don't use rel path for image volumes 85a2c9a01 log: swap logrus functions with their equivalent on default logger 6baff1694 log: add package documentation and summary of package's purpose 238da2c52 log: make Fields type a generic map[string]any 634a4a1bb log: add log.Entry type dd67240f1 log: define OutputFormat type 778ac302b log: define G() as a function instead of a variable 81ac648d9 log: add all log-levels that are accepted 0b6333a41 log: group "enum" consts and touch-up docs 4a36022e2 log: WithLogger: remove redundant intermediate var 40ee5fb11 log: SetFormat: include returns in switch 6fe7e03b8 log: remove testify dependency e2ad5a985 removes/docker: remove unnecessary conversion (unconvert) ed47d6ba7 cri: implement RuntimeConfig rpc a1cdf60cb docker: add test to ensure not found error is returned by resolve b4814a29d docker: return most relevant error from docker resolution 7f7ba31b6 cri: fix using the pinned label to pin image 480757135 pkg/epoch: fix Y2038 on 32-bit hosts 98974117b migrate to community owned bucket a3404ac42 docker: add missing info log for 4XX/5XX responses 850b2e1bf go.mod: update cri-api to v1.28.0-beta.0 480bc8a2b .github/workflows/ci.yml: upgrade Ubuntu from 20.04 to 22.04 bc96b9039 go.mod: github.com/AdamKorcz/go-118-fuzz-build v0.0.0-20230306123547-8075edf89bb0 da2740885 go.mod: google.golang.org/genproto v0.0.0-20230720185612-659f7aaaa771 73dc13ad6 go.mod: github.com/urfave/cli/compare v1.22.14 1c4fc568b go.mod: github.com/prometheus/client_golang/compare v1.16.0 68abb525a go.mod: github.com/minio/sha256-simd v1.0.1 1f2216cc7 go.mod: github.com/klauspost/compress v1.16.7 3c6ab0420 go.mod: dario.cat/mergo v1.0.0 4bda0a69e go.mod: github.com/grpc-ecosystem/go-grpc-middleware v1.4.0 0f033b612 go.mod: github.com/emicklei/go-restful/v3 v3.10.2 90e050298 go.mod: github.com/containernetworking/plugin v1.3.0 0498acefb go.mod: github.com/.../container-device-interface v0.6.0 74b8cb850 go.mod: github.com/opencontainers/runc v1.1.8 895dd2e93 go.mod: github.com/opencontainers/image-spec v1.1.0-rc4 235a4452d go.mod: github.com/opencontainers/runtime-spec v1.1.0 06f18c69d cri: memory.memsw.limit_in_bytes: no such file or directory f3daf32c7 Fix ro mount option being passed b2967a8d6 update runc binary to v1.1.8 90ecb8104 fix: `ctr images check` outputs not unpacked images in quite mode 98f27e1d9 Revert "Add support for mounts on Darwin" e939d1319 Revert "Revert 416899fc8e81a80a4b09b59c801f98d36ddc0e74" 6c9c71112 Revert 416899fc8e81a80a4b09b59c801f98d36ddc0e74 2799b28e6 Add support for mounts on Darwin 56d80f81a Update hcsshim tag to v0.10.0-rc.9 9c673f967 pkg/cri/server: TestImageGetLabels: use registry.k8s.io f914edf4f [cri] Handle Windows pod transitions gracefully 52ef3468b Update Go to 1.20.6,1.19.11 48cdf1fe2 integration: Enable userns tests for sbserver 9160386ec cri/sbserver: Test net.ipv4.ping_group_range works with userns 1c6e26844 cri/sbserver: Fix net.ipv4.ping_group_range with userns 36a96d7f3 cri/sbserver: Remap snapshots for sbserver too 508e6f6e0 cri/sbserver: Add userns tests to TestLinuxSandboxContainerSpec() fb9ce5d48 cri/sbserver: Support pods with user namespaces c99cb95f0 cri/sbserver: Let OCI runtime create netns when userns is used 73c75e2c7 cri/sbserver: Copy userns helpers to podsandbox 0b6a0fe77 cri/sbserver: Move runtimeStart to match position with cri/server 90087ac44 WithRemapperLabels: Update doc to mention overlay supports it 9d9903565 cri: Fix comment typos 9e34b8b44 Uncopypaste parsing of OCI Bundle spec file 232538b76 bugfix(port-forward): Correctly handle known errors 5c480d9c8 Modify loopback size 7ef133ad4 Fix mount pkg typo 83ff030e4 Change http.Header copy to builtin Clone cdb153ec9 Resolve docker.NewResolver race condition 01a6e1c73 Dedup WithNewSnapshotView 6a913ac82 Cirrus CI: configure apt-get to wait for locks 38f9bc3e0 fix ci Linux Integration test fail c17d3bdb5 pkg/cri/server: Test net.ipv4.ping_group_range works with userns 9bf5aeca7 pkg/cri/server: Fix net.ipv4.ping_group_range with userns 05fef52b6 vendor: github.com/containerd/zfs v1.1.0 073de9308 Fix the auto restart fail when using LogURI and TTY together 00e5ae211 shim: change ttrpcService and ttrpcServerOptioner to exported interfaces e9f63f64f update go to go1.20.5, go1.19.10 22a7c63c0 Sandbox: Change to mount.Mount for CreateOptions 51a1e7f0b Fix example shim to actually use its task service a9cb6090e ci: remove libseccomp-dev installation for nightly 0607e7326 Move GetTopic function out of runc shim 5dedb6d0d archive: use 1970-01-01 as the whiteout timestamp d6dbc4040 go.mod: Update cgroups to 3.0.2 f3b7436b6 Platforms: Add From/ToProto helpers for types b3ab1f26c Snapshots: Add From/ToProto helpers for types 0a6b8f0ee OCI: Add From/ToProto helpers for Descriptor 4df27fd77 Update ginkgo to match cri-tools' version 9a202e342 seccomp: always allow name_to_handle_at 55a8102ec mount: Add From/ToProto helpers e85352183 integration/client: Rework withBytesBuffers 54a93c6c5 Make ptypes.Empty a var in contentserver cdc90c838 Remove duplicated code in content Copy 50376ec9f remotes: allow FetchByDigest client to pass mediatype as header 0a92661e6 Add a platform.ParseAll helper e89d7204e MergeStringSlices use sets 8760b8717 pkg/epoch: extract parsing SOURCE_DATE_EPOCH to a function 9924e56f4 pkg/epoch: fix tests on macOS dfd7ad8b3 Reword Windows file related TODO 44e2b26a8 pkg/epoch: replace some fmt.Sprintfs with strconv f82d9b799 Integration: Align empty IO func on Windows f3124d569 Makefile: Remove hcsshim related TODO 2aeac9a8f Remove duplicated writeIndex func 7601dd9a9 Dedup manifest config platform helper f3df7f739 log when a lease expires a01118bbe Minor changes to sandbox metadata f60a4a271 cri: drop unused arg from generateRuntimeOptions 1fb835f04 Remove unnecessary label bucket loop a207b430e snapshots/blockfile: fix lint issue 59b0b39af vendor: update github.com/containerd/continuity d358f1680 fix unbound variable f4ad68d5f fix-push-image-rate 7de95cbc4 snapshots/blockfile: deflaky the testsuite 6dfb16f99 snapshots|pkg: umount without DETACH and nosync after umount 72b7d1650 mount: support direct-io for loopback device 437f13410 Don't run CI on push e26c97cb8 Save marshalled empty response in streaming service 9e09bfb59 Use RWMutex in NSMap and reduce lock area 38b0f970f No more nondistributable layers in MS registry d278d37ca Sandbox: Add Metrics rpc for controller d115129d1 Add configurable mount options to overlay d56722ef2 Sandbox: Add SandboxMetrics rpc 4bb709c01 avoid "any" as variable name 577696f60 replace some basic uses of fmt.Sprintf() 5cd6210ad runtime/v2/runc: handle early exits w/o big locks df280942a integration/client: add timeout to `TestShimOOMScore` 6dd529e40 Pass in imagespec.Platform to WithVolumes() d18026592 release ticker correctly 28a5199ff Add a check to skip stats for containers that are not running 34a93a0c2 task: don't `close()` io before `cancel()` 007c5b6e3 Setup otlp from env 104b9ef9e Update x/sys to 0.8.0 69b451af5 RELEASES.md: de-deprecation of CNI conf_template will be v1.7.3 ab5365222 ctr: update WritePidFile to use atomicfile c409c631c shim: WritePidFile & WriteAddress use atomicfile 3c4a1ab1c cri: write generated CNI config atomically on Unix f3ba7c8a3 atomicfile: new package for atomic file writes 28d8c79de Replace atomicBool with the standard library atomic.Bool fe4f8bd88 Pinned image support a85b12d4d docs: cherry-pick individual commits instead of merge commit 738c4c6fa Fix issue for HPC pod metrics 52997ea98 remotes/docker: ResolverOptions: fix deprecation comments a35ead5b9 bugfix: add nil pointer check for cgroup v1 mem usage 2a60fe5a6 Remove events from init context d3887b2e6 Support CDI devices in ctr --device flag 3ca5b4437 Remove cni conf_template deprecation 94f0af3ec Image.IsUnpacked(): make error-handling more iodiomatic 54658a115 Image: rename variable that shadowed import d2b7a1e29 cleanup DEPRECATED TLS config f857626d6 Move PLEG event back to CRI fc50334ca Generate sandbox exit events from CRI d2605de73 add handling of a '.' commondir and bounds checking to mount_linux cf5605459 Move pod sandbox recovery to podsandbox/ package 45dbb4e54 Publish sandbox events 65906335b Add sandbox events protos 21b3318eb Fix several conversions of "ocispec.Image" to "ocispec.Platform" f2bc73782 Add cpuset-mems flag to 'ctr run' command f642c0a5f ctr: add cpuset-cpus flag to 'ctr run' command 314d758fa update auths code comment 9702d4aee snapshots/blockfile: use passed in dst in scratchGenerator bb82f3683 snapshots/blockfile: use loop if options is empty 9287711b7 upgrade registry.k8s.io/pause version fbb38ab6b Fix the spelling of repository within the NRI plugin documentation. 752e13d9a fix(docs): minor fix on the windows installation steps c1b926800 Windows Integration: Switch Azure-based CI to vanilla 2019 image. b9dfd29b7 Update tests to use volume-copy-up:2.2 4bfcac85f notify readiness when registered plugins are ready 7819da843 Document Protocol Buffer Setup 579b5596c Update volume-ownership image with latest hashes 88a3e25b3 Add targetOS to WithVolumes() c7ec95caf Reword comment and make slight change to code ec2bec648 Fix non C volumes on Windows 3d7522b7f ctr: allow run to override mounts 7beaa5e85 Add mount options to blockfile snapshotter 261d45efe docs/remote-snapshotter.md: update links and description 7274e33e3 CRI: Make stats respect sandbox's platform 82deabf9d Optimize metadata Schema notes to correctly match metadata structures a6cd5e3f4 bugfix: resolve symlink when looking up mountpoint b9f2e48e3 feat: make overlay sync removal configurable becf04a59 Update to docker/login-action V2 79709a205 disable provenance 1be571b14 Add sync before unmount on snapshotter layer test b729962e3 Add blockfile snapshotter to snapshotters doc 798dba9fa Add blockfile as a builtin 0c386e2eb Add blockfile snapshotter d280cb83b chore: update comment for NetworkPluginSetupSerially f8907ab87 Update volume-copy-up 811456b31 go.mod: github.com/containerd/continuity v0.4.0 6f715ab10 go.mod: github.com/containerd/go-runc v1.1.0 85cf9a09e Bump seccomp version to be the same as one in runc repo cdaa4025e Fix some typos 3d9dd2022 ctr: fix the cleanup of task 66307d0b4 CRI: Support Linux usernames for !linux platforms 5dbae3819 snapshots/testsuite: Rename: fix fuse-overlayfs incompatibility df65e321e Simplify closing bundle dir fd 718250b6b Update ttrpc to v1.2.2 7e42dc34d improve container Task comment 4347fc8bc go.mod: github.com/opencontainers/image-spec v1.1.0-rc3 5e054ee63 go.mod: github.com/opencontainers/runtime-spec v1.1.0-rc.2 bb61a6d4b cache diffIDs 6e2c915a4 Bump up golangci-lint to v1.52.2 ecb693ec7 bump typeurl to v2.1.1 f5211ee3f Change to Readdirnames for some cases e60a17925 .github: disable cache for actions/setup-go@v4 52afa34f5 cri: update WithoutDefaultSecuritySettings comment 6f34da5f8 Cleanup logrus imports 717169bb8 plugin: remove go < 1.8 stub, enable on windows and arm64 28d749c9e move to CRI-TOOLS v1.27.0 27f56e607 Fix umarshal metrics for CRI server b947a6f52 update go to go1.20.4, go1.19.9 c54b706c0 Add faasd and actuated into the ADOPTERS file d56466cf3 [transfer] avoid setting limiters when max is 0 2e53c0ec8 Windows integration: fix critest binary path in Azure-based workflow. 9e7f8fe30 Update CRI registry configuration docs 0d975230e Fix panic when remote differ returns empty result c58a229e5 Run CI when adding to the merge queue 0ba066474 vendor: github.com/opencontainers/runc v1.1.7 cbd10e41a vendor: github.com/opencontainers/runc v1.1.6 27c0fe3eb update runc binary to v1.1.7 4891bba83 Update tar tests to run on Darwin d9f3e387c Remove entry for container from container store on error 8ba285f6b fix unable to checkpoint the container more than once 370be0c18 Move logrus setup code to log package 92b93e376 cri: Vendor v0.27.1 8c80ccc7f Update external repo links that changed default branch to main 519457e3e ctr: Add sandbox flag to ctr run c786994ea Update transfer configuration 4e5693938 Add platform config to proxy plugins 4192ca8f8 pkg/cri/server: sub-test uses array and capture range var 8bcfdda39 pkg/cri/sbserver: sub-test uses array and capture range var 745ec84e5 Add diffservice to contrib 3784c1c91 Add proxy differ cb2c3ec8f oci: partially restore comment on read-only mounts for uid/gid uses f23816740 go.mod: add comment explaining go-fuzz-headers replace rule ec9e74ed9 go.mod: remove replace for github.com/opencontainers/runtime-tools 6c40cf305 go.mod: integration: use non-pre-release of containerd 92d1e9bee go.mod: integration: move indirect dependencies to the right group 18d7e84f9 runtime/shim: fix the nil checkpoint options cd16b31cd Get CDI devices from CRI Config.CDIDevices field da4de96e2 containerd support k8s 1.27 4b35c3829 update shim example 71ababe30 runtime/shim: remove runc/v2/services b71f4b751 runtime/shim: rename RunManager to Run 49111b115 update runc binary to v1.1.6 85df1cc6b doc: update CI signal info in README 7e6ab8488 cri: Throw an error if idmap mounts is requested 85afda6f5 cri: Vendor v0.27.0-beta.0 for mounts uid/gid mappings f7b8b1181 update the version of the runc shim in the readme and examples dc2fc987c capture desc variable in range variable just in case that it run in parallel mode 05bb52b27 Use t.TempDir instead of os.MkdirTemp 7a7519a78 CRI Sbserver: Make PodSandboxStatus friendlier to shim crashes 79cb4b000 [sbserver] handle missing cpu stats 464a4977a [sbserver] Refactor usageNanoCores be to used for all OSes e0b817ec1 Fix argsEscaped tests aee358765 Update to setup-go@v4 action 811be6085 Update Azure-based Windows workflow image SKUs. dfc7590d5 remotes/docker: Add MountedFrom and Exists push status db223271e Register imagePullThroughput and count with MiB 6f0714efc Use RunWithPrivileges b41ca1159 Fix access denied on mounted vhdx root a7fddb40b Use wait instead of a sleep to check for startup delay d0527e228 Support for dropping inheritable capabilities 0fb2d9132 update go to go1.20.3, go1.19.8 cab056226 oci: Use WithReadonlyTempMount when adding users/groups c9e5c33a1 UnmountAll is a no-op for missing mount points 8538e7a2a Improve error messages and remove check ba74cdf15 Make ReadOnly() available on all platforms 7bb2756bc Increase integration test tmieout to 20m 1279ad880 Remove bind code path in mount() 6a5b4c9c2 Remove "bind" code path from diff 76690706f CI: bump up crun to 1.8.3 d373ebc4d Properly mount base layers ca5605b4a Skip parent layer options on bind mounts 7f82dd91f Add ReadOnly() function 157fe6a13 docs: fix typo in comment of ExitStatus.Exit(Code|Time) 4012c1b85 Remove escalated privileges 54f8abe55 Use DefaultSnapshotter 47dd3dcff use t.Fatal if we cannot enable process privileges e31bef15f Update continuity 95687a932 Fix go.mod, simplify boolean logic, add logging 7a36efd75 Ignore ERROR_NOT_FOUND error when removing mount db3279859 Update continuity, go-winio and hcsshim 00efd3e6d Remove unused function dc980b14a Grant needed privileges for snapshotter tests feb637f92 Fix layer comparison and enable read-only checks 36dc2782c Use bind filer for mounts d591bb042 Enable TestSnapshotterClient on Windows 7b36becd2 Run Windows snapshotter through the test suite ac30eabbd Fix misspelling of 'Native' as 'Naive' 639c5799a Add paired 'mount' log for 'unmount' 8395e3a89 Don't use all-upper-case filenames in snapshot tests 909730dec Skip tests that do not apply to WCOW on Windows 469c13997 Ensure mounts are unmounted before leaving the test 84cc3e496 Unify testutil.Unmount on Windows and Unix 474a257b1 Implement Windows mounting for bind and windows-layer mounts 34b07d3e2 Implement WCOW parentless active snapshots and view snapshots 82ec62b86 fix: cio.Cancel() should close the pipes ac84bf7c8 Update sbserver to add noexec nodev and nosuid to /etc/resolv.conf mount bind. 126ab72fe Keep linux mounts for linux sandboxes on Windows/Darwin 990199a02 Test to ensure nosuid,nodev,noexec are set on /etc/reolv.conf mount. 96490734b update runc binary to v1.1.5 b55dad06a go.mod: github.com/opencontainers/runc v1.1.5 c89438e83 integration: add container start test using abs runtime path 3557ac884 Extract image service from CRI 97064b077 WithRuntimePath uses the TaskInfo.RuntimePath field c56f54aa1 devmapper plugin: skip plugin when not configured a11e47b48 Use built in atomic.Bool 87346df54 Defer uid lookups on Darwin ae4dbb60d Add noexec nodev and nosuid to sandbox /etc/resolv.conf mount bind. 1be08b10f ctr/tasks: fix unmarshal the task metrics for cgroups v1 8322bcb88 Adds a file header 50b576a94 Adds a dev container and Codespaces docs 0bbca7f1b Cleanup protobuild config daa3a7665 Add `WithReadonlyTempMount` to create readonly temporary mounts f48ae2227 fix: Update error message format based on feedback 3193650f1 fix: 'failed to resolve symlink' error messaging 14714b94d Fold the output of `crictl info` 5fdca538d adding cni metadata to the container in the `ctr run --config` 32d431a7c Update crictl doc 690ae58ca Update cri-tools version on windows 5956cdea8 Remove third-party package cri-api c011502bd Remove cri v1alpha1 services 23d288a80 Remove the CriuPath field from runc's options 62f98a1c1 CRI: Don't always close netConfMonitor channel a4d33a784 Remove support for config.toml `version = 1` 3e87f05b6 Fix image pulling with Transfer service c5f1086ad Update docs fda5c84bc Update gce contrib to use v2 by default 8bd82e355 Remove no_pivot when creating container from CRI 07c2ae12e Remove v1 runctypes c50a3ef04 Update Makefile and CI ef516a150 Remove runtime v1 76778aee6 integration: add restart monitor test for paused task 35a103d32 Remove "containerd.io/restart.logpath" label (deprecated since v1.5) 08337f356 Pre-splice strings and determine whether it is a file and check criCleanup err. e0d9b9663 Fix restarting the paused containers 86fc1ccab Remove `aufs` snapshotter (deprecated since v1.5) 50740a1a0 use strings.Cut instead of strings.Split for parsing imageConfig.User b39ac5d09 docs: fix typo in comment of plugin.Plugin.Err() d835fd2a3 Sandbox: Correct/add some fields to Status() d3e856da7 export: add test for WithSkipDockerManifest 70da5c783 Sandbox: Cleanup shim on Start failure 406583165 archive: consistently respect value of WithSkipDockerManifest 727b25403 fix userstr for dditionalGids on Linux Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: add distrosysconfdir option to make sure the lxc configuration in ↵Xiangyu Chen2023-12-041-1/+1
| | | | | | | | | | | | | | | | correct folder After the commit[1] "meson.build: allow explicit distrosysconfdir", the config of lxc would install to distrosysconfdir[2], if this value not set, it might set to /etc/sysconfig, that cause lxc-net configuration cannot be found[3] due to our bb file install the lxc-net to /etc/default folder. Ref: [1] https://github.com/lxc/lxc/commit/16ebb29dccb35bf74e8a19e8c45d2513f927476f [2] https://github.com/lxc/lxc/blob/main/config/sysconfig/meson.build#L9 [3] https://github.com/lxc/lxc/blob/main/config/sysconfig/lxc.in#L28 Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-compose: v2.20.3 -> v2.21.0Jose Quaresma2023-12-044-13/+21
| | | | | | | | | | | | | | | | | | | | | | | | - d6f842b0 test: e2e test reliability improvements (#10950) - 4fbbf201 build(deps): upgrade to compose-go v1.18.3 (#10947) - 935d72f4 added the dot at the end of the sentence - 41682acc add support for attributes exposed by `docker ps` - 1054792b align docker compose ps with docker CLI to support --format - 19f66918 watch: only allow a single instance per-project - 186744e0 ci: bump golangci-lint to v1.54.2 - bc9d696f Merge pull request #10922 from thaJeztah/replace_dockerignore - 6204fb1c logs: fix for missing output on container exit (#10925) - 5d732010 replace dockerfile/dockerignore with patternmatcher/ignorefile - 2006f3fe go.mod: github.com/moby/patternmatcher v0.6.0 - 192718c0 go.mod: remove some outdated comments - c79f67fe otel: add `include` to project up span - 3b294bfd build(deps): bump github.com/compose-spec/compose-go from 1.18.1 to 1.18.2 (#10915) - dd34f7a2 include: add experimental support for Git resources (#10811) - caad7271 up: handle various attach use cases better - 792afb8d build: use correct values for proxy variables (#10908) - 150449bb warn user secret uid/gid/mode is not supported Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-compose: drop patches from the removed python versionJose Quaresma2023-12-042-85/+0
| | | | | | | | | Drop unused patches from the python version removed in 7bd56074. https://git.yoctoproject.org/meta-virtualization/commit/recipes-containers/docker-compose?id=7bd56074fece944ef9279d87106eb16452ec6338 Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: remove unnecessary dependenciesChen Qi2023-12-041-16/+1
| | | | | | | | The build is not using the codes from these source packages. Remove the dependencies. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc-opencontainers: update to 1.1.10Bruce Ashfield2023-11-241-2/+2
| | | | | | | | | | | | | | | | | | | Bumping runc to version v1.1.10-2-gf3446b1e, which comprises the following commits: be887840 VERSION: back to development 18a0cb0f VERSION: release 1.1.10 b426e9b7 libct/cgroups.OpenFile: clean "file" argument 8214e634 libct/cg: support hugetlb rsvd f8be7009 [1.1] tests/int/helpers: add get_cgroup_path 1f66027a ci/gha: fix downloading Release.key 5a5b2cc3 Fix directory perms vs umask for tmpcopyup b365458f fix a typo in cloned_binary.c: re-use -> reuse 8f66c9fb fix two typos 016b2b42 Handle kmem.limit_in_bytes removal 11737f55 VERSION: back to development ccaecfcb VERSION: release 1.1.9 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* crun: update to v1.11.2Bruce Ashfield2023-11-241-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping crun to version 1.11.2-7-gff2b74f, which comprises the following commits: 2cc04ea systemd: fallback to system bus 767ba88 Fix build without libcap 98d9cc9 systemd, cgroup: configure cgroups before joining them ab0edee NEWS: tag 1.11.2 c965462 src: fix codespell error 267f2c5 make: fix clang-format 6e65f5e cgroup: fix crash on cgroup v1 without cpu resources 57e6f9c terminal: adopt ptsname_r POSIX specified return value 6674353 fix: remove the redundant header file 1084f95 NEWS: tag 1.11.1 4cbc9ad linux: force remount with mounts from parent 11f8d3d NEWS: tag 1.11 f8e4f4e cgroup: honor cpu burst 8b44699 systemd: set CPUQuota and CPUPeriod on the scope 5a0ede2 systemd, cgroupv1: set the cpuset data also on the scope 20bb4aa systemd, cgroupv2: set the cpuset data also on the scope 970d20e tests: fix ioprio test 3b874c2 linux: append tmpfs mode if missing for mounts 863008d init: add new function to check file mode 7c3393c cgroup: always use the user session for rootless c60c9f2 Update nixpkgs c053c83 NEWS: tag 1.10 2cc7390 linux: new mount option "copy-symlink" 33cabe6 tests: fix test name 9ee3460 linux: fix error propagation 53c28d9 utils: export safe_readlinkat a549ce0 tests: skip ioprio tests as rootless 1466b7b linux: Fix -Wunused-result compiler warnings when run './configure' only bdb95d6 features: export intelRDT status e2f9853 update: support update of Intel RDT 05bc600 libcrun: support update of Intel RDT 41ae2a2 libcrun: plug Intel RDT support 52d5faa libcrun: add Intel RDT support functions a7a1af9 container: fix early return Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* moby: update to v24.0.7Bruce Ashfield2023-11-241-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping moby to version v24.0.7, which comprises the following commits: 05d7386665 daemon: daemon.containerRestart: don't cancel restart on context cancel dd37b0b960 vendor: github.com/klauspost/compress v1.17.2 7058c0d24d vendor: github.com/klauspost/compress v1.16.5 57bd388582 daemon: overlay2: Write layer metadata atomically 05d95fd503 daemon: release sandbox even when NetworkDisabled 2783345d3a daemon/c8d: Use non cancellable context in defers a9e20aeaed daemon/containerd: rename some vars that collided with imports a8d0a58b24 daemon/containerd: newROLayerForImage: remove unused args c981f8aff7 daemon/containerd: log errors when releasing leases 73814c48df internal: Add compatcontext.WithoutCancel 535b70e90c Update check-config.sh dde5995051 vendor: golang.org/x/net v0.17.0 8864727bae vendor: golang.org/x/crypto v0.14.0 81d73e17f7 vendor: golang.org/x/text v0.13.0 d8c62df0b6 vendor: golang.org/x/sys v0.13.0 d7a1fcef8f vendor: golang.org/x/net v0.13.0, golang.org/x/crypto v0.11.0 a22da0d5c4 vendor: golang.org/x/text v0.11.0 85234039a6 vendor: golang.org/x/crypto v0.9.0 9702281ba0 vendor: golang.org/x/sys v0.10.0 01860dc813 vendor: golang.org/x/crypto v0.3.0 daf599ea0a replace dockerfile/dockerignore with patternmatcher/ignorefile 1dffa3a814 vendor: github.com/moby/patternmatcher v0.6.0 58c1c7b8dc Limit OOMScoreAdj when running in UserNS ("Rootful-in-Rootless") 19039eae0b profiles/apparmor: deny /sys/devices/virtual/powercap 164a1a0f14 oci/defaults: deny /sys/devices/virtual/powercap Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: drop statically linked x86 entrypointBruce Ashfield2023-11-091-0/+4
| | | | | | | | | | | | | | | | | | | commit e89fac6c9bf8d0b [Add `buildah mkcw`, add `--cw` to `buildah commit` and `buildah build`] added a statically linked x86 entrypoint binary This entrypoint is not currently used in the tested / supported worflows. To avoid packaging QA warnings on non-x86 architectures, we remove the binary during the compilation phase. If it does need to be rebuilt in the future, buildah's Makefiles will have to be changed to not test the host for architecture support, and use the OE defined target arch and cross compilers instead. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: fix documentation build issuesBruce Ashfield2023-11-091-2/+5
| | | | | | | | | | | | | | | podman commit dfec510b41b5 [go-md2man: use vendored-in version, not system] removes the shell test for go-md2man, which means our native executable is not found. While we could export GOMD2MAN and point it to our sysroot version (${RECIPE_SYSROOT_NATIVE}/usr/bin/go-md2man), we could run into the issues with formatting that the podman commit is trying to avoid. If we pass our build host architecture to the build, it will be used and the executable created as part of the compilation. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* umoci & buildah & podman-tui: mark incompatible with mipsKai Kang2023-11-063-0/+6
| | | | | | | | | | | Since the runtime dependency skopeo has been marked incompatible with mips, mark for umoci accordingly. buildah and podman-tui rdepends on podman which has been marked incompatible with mips, so mark for them too. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>