Cannot talk to GitHub #887

vinayak-kukreja · 2022-08-13T07:36:36Z

URL: https://gopkg.in/yaml.v3, gives an error.

Cannot obtain refs from GitHub: cannot talk to GitHub: Get https://github.com/go-yaml/yaml.git/info/refs?service=git-upload-pack: net/http: request canceled (Client.Timeout exceeded while awaiting headers)

I am seeing this popping up for other's as well,

The text was updated successfully, but these errors were encountered:

porjo · 2022-08-13T10:46:44Z

I'm experiencing the same problem. Github is blocking connections from gopkg.in....not an issue with go-yaml per se.

bhushan-mdn · 2022-08-13T10:50:18Z

Can confirm the same. Seeing the same error while using go get gopkg.in/yaml.v3

go: module gopkg.in/yaml.v3: git ls-remote -q origin in /home/ubuntu/go/pkg/mod/cache/vcs/0901dc1ef67fcce1c9b3ae51078740de4a0e2dc673e720584ac302973af82f36: exit status 128:
	remote: Cannot obtain refs from GitHub: cannot talk to GitHub: Get https://github.com/go-yaml/yaml.git/info/refs?service=git-upload-pack: net/http: request canceled (Client.Timeout exceeded while awaiting headers)
	fatal: unable to access 'https://gopkg.in/yaml.v3/': The requested URL returned error: 502

Agreed, @porjo. Seems like this happened earlier in 2018 too. Link to old issue niemeyer/gopkg#63

yairlempert · 2022-08-13T16:28:04Z

Any news on this?

SVilgelm · 2022-08-13T22:37:20Z

I see same issue:

go: gopkg.in/[email protected]: unrecognized import path "gopkg.in/check.v1" (parse https://gopkg.in/check.v1?go-get=1: no go-import meta tags ())
go: gopkg.in/[email protected]: unrecognized import path "gopkg.in/yaml.v2" (parse https://gopkg.in/yaml.v2?go-get=1: no go-import meta tags ())

porjo · 2022-08-14T05:46:12Z

As mentioned in the linked issue the workaround is to set environment variable GOPROXY=https://proxy.golang.org.

I'm guessing this approach works as the proxy has copies of go-yaml packages cached. Once that cache expires however the problem will return (assuming Github continues to block gopkg.in).

Closes srvaroa#43 See go-yaml/yaml#887 (comment) for more information.

Closes #43 See go-yaml/yaml#887 (comment) for more information.

Signed-off-by: Samuel Karp <[email protected]>

Signed-off-by: Samuel Karp <[email protected]> (cherry picked from commit 396d2a7) Signed-off-by: Samuel Karp <[email protected]>

Bumping containerd to version v1.6.8-8-g579a6380e, which comprises the following commits: 1efd8b947 ci: remove GOPROXY environment variable due to go-yaml/yaml#887 0448673af Do not append []string{""} to command to preserve Docker compatibility 5c230ece0 Fix cleanup in critest ed9d3dc37 oci: WithDefaultUnixDevices(): remove tun/tap from the default devices 3364f411e Prepare release notes for v1.6.8 390920429 release workflow: remove Go setup action cf48ba6e8 release workflow: increase timeout to 30 minutes 57873e652 release: rollback Ubuntu to 18.04 (except for riscv64) eccb82f6d Update release build timeout to 20 minutes 6a854d4b5 Update mailmap 61612e1a2 Prepare release notes for 1.6.7 d199ee462 Update golang to 1.17.13 0578d20c5 Change os.Stderr reassign for Windows service 12cae4961 Update Vagrant CI to macos-12 bc4091aae chore: bump macos runner version cb73bd050 Windows HostProcess container CRI stats test ac388525a Add validations for Windows HostProcess CRI configs 0007f40fe [release/1.6] go.mod: Bump hcsshim to v0.9.4 c9607e78c Update Fedora version to 36 2952b66c0 CI: add riscv64 builds 6b2dc9a37 release/Dockerfile: update Ubuntu to 22.04 for supporting riscv64 745dc07c4 seccomp: support riscv64 c2f841f21 Create ppc64le release 86b55bd8d seccomp: allow clock_settime64 when CAP_SYS_TIME is added f3da3e51f allow ptrace(2) by default for kernel >= 4.8 aa1101068 [release/1.6] update golang to 1.17.12 37dfc5c9d [release/1.6] Fix WWW-Authenticate parsing Signed-off-by: Bruce Ashfield <[email protected]>

brycahta · 2022-08-18T14:25:23Z

semi-related: Our repos were experiencing the same failures with GOPROXY="direct|https://proxy.golang.org". I would expect this to be a valid solution because the documentation states the go command should try the proxy url after any failures (i.e. this one). Am I misunderstanding the docs? Or can someone clarify why it wouldn't work?

Bumping containerd to version v1.6.8-8-g579a6380e, which comprises the following commits: 1efd8b947 ci: remove GOPROXY environment variable due to go-yaml/yaml#887 0448673af Do not append []string{""} to command to preserve Docker compatibility 5c230ece0 Fix cleanup in critest ed9d3dc37 oci: WithDefaultUnixDevices(): remove tun/tap from the default devices 3364f411e Prepare release notes for v1.6.8 390920429 release workflow: remove Go setup action cf48ba6e8 release workflow: increase timeout to 30 minutes 57873e652 release: rollback Ubuntu to 18.04 (except for riscv64) eccb82f6d Update release build timeout to 20 minutes 6a854d4b5 Update mailmap 61612e1a2 Prepare release notes for 1.6.7 d199ee462 Update golang to 1.17.13 0578d20c5 Change os.Stderr reassign for Windows service 12cae4961 Update Vagrant CI to macos-12 bc4091aae chore: bump macos runner version cb73bd050 Windows HostProcess container CRI stats test ac388525a Add validations for Windows HostProcess CRI configs 0007f40fe [release/1.6] go.mod: Bump hcsshim to v0.9.4 c9607e78c Update Fedora version to 36 2952b66c0 CI: add riscv64 builds 6b2dc9a37 release/Dockerfile: update Ubuntu to 22.04 for supporting riscv64 745dc07c4 seccomp: support riscv64 c2f841f21 Create ppc64le release 86b55bd8d seccomp: allow clock_settime64 when CAP_SYS_TIME is added f3da3e51f allow ptrace(2) by default for kernel >= 4.8 aa1101068 [release/1.6] update golang to 1.17.12 37dfc5c9d [release/1.6] Fix WWW-Authenticate parsing Signed-off-by: Bruce Ashfield <[email protected]>

Signed-off-by: Samuel Karp <[email protected]>

johnpekcan · 2022-11-04T19:53:26Z

/go/pkg/mod/github.com/spf13/[email protected]/internal/encoding/ini/codec.go:9:2: unrecognized import path "gopkg.in/ini.v1": reading https://gopkg.in/ini.v1?go-get=1: 502 Bad Gateway
	server response: Cannot obtain refs from GitHub: cannot talk to GitHub: Get https://github.com/go-ini/ini.git/info/refs?service=git-upload-pack: net/http: request canceled (Client.Timeout exceeded while awaiting headers)
/go/pkg/mod/github.com/spf13/[email protected]/internal/encoding/yaml/yaml3.go:6:8: unrecognized import path "gopkg.in/yaml.v3": reading https://gopkg.in/yaml.v3?go-get=1: 502 Bad Gateway
	server response: Cannot obtain refs from GitHub: cannot talk to GitHub: Get https://github.com/go-yaml/yaml.git/info/refs?service=git-upload-pack: net/http: request canceled (Client.Timeout exceeded while awaiting headers)

more people chiming in here: niemeyer/gopkg#63 (comment) and here: niemeyer/gopkg#78
seems to be more then just the yaml package.

metal3d · 2022-11-04T21:04:45Z

As mentioned in the linked issue the workaround is to set environment variable GOPROXY=https://proxy.golang.org.

@porjo thanks a lot.

Right, that's mainly because the cache is OK. Hope that it will not be clear soon...

gnovack · 2022-11-04T21:54:32Z

Just started working for me again without setting GOPROXY

johnpekcan · 2022-11-10T16:13:22Z

for future historians: Looks like canonical maintains gopkg.in
niemeyer/gopkg#78 (comment)

Bumping moby to version v20.10.21-4-g4ed81ac0e2, which comprises the following commits: f292bf0f4f distribution: Error when pulling OCI artifacts 0211f9e44d [20.10] update to Go 1.18.8 to address CVE-2022-41716 f99cb8297b integration: download busybox-w32 from GitHub Release 3f9dc25f5c update containerd binary to v1.6.9 87ccd38cea vendor: moby/term, Azure/go-ansiterm for golang.org/x/sys/windows compatibility e83e465ae2 [20.10] vendor: github.com/moby/buildkit eeb7b65ab7d651770a5ec52a06ea7c96eb97a249 (v0.8 branch) 9c84417c1b skip TestImagePullStoredfDigestForOtherRepo() on Windows and rootless 5b5b5c6f13 builder: add missing doc comment 05e25f7892 builder: fix running git commands on Windows 2f3bf18014 [20.10] vendor moby/buildkit v0.8.3-31-gc0149372 6699afa549 registry: allow "allow-nondistributable-artifacts" for Docker Hub 4b9902bad4 Validate digest in repo for pull by digest c0d1188c14 builder: make git config isolation opt-in 9f5f3abcee builder: isolate git from local system 10db4c2db7 builder: explicitly set CWD for all git commands 8816c3c2aa builder: modernize TestCheckoutGit 11bdbf40b9 [20.10] Update to go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 66ddb7f91c Fix live-restore w/ restart policies + volume refs c003392582 contrib: make dockerd-rootless-setuptool.sh more robust 53313be0f3 docker-rootless-setuptools.sh: use context after install 9c486bd267 swagger: update links to logo fa17fab895 vendor: github.com/containerd/console v1.0.2 481bee51b5 vendor: github.com/armon/go-metrics v0.4.1 39ba2873e8 vendor: github.com/google/btree v1.1.2 c2755f40cd vendor: github.com/hasicorp/memberlist v0.4.0 5ba3208ec7 Dockerfile: Update Dockerfile syntax, switch to bullseye, add missing libseccomp-dev, remove build pack 6d6a236286 [20.10] Update uses of Image platform fields in OCI image-spec 2570784169 [20.10] vendor: github.com/moby/buildkit 3a1eeca59a9263613d996ead67d53a4b7d45723d (v0.8 branch) fcd4df906b Update some tests for supplementary group permissions 6a0186b357 Wrap local calls to the content and lease service 3d4616f943 Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190 23c7d84b84 docs: api: adjust ContainerWaitResponse error as optional 3e9e79d134 docs: api: document ImageSummary fields (api v1.39-v1.41) fdd438ae03 api: docs: improve documentation of ContainerConfig type (API v1.30-v1.41) 97014a8db5 namesgenerator: remove Valentina Tereshkova e44d7f735e AdditionalGids must include effective group ID 9e7662e4a7 [20.10] vendor: update containerd to latest of docker-20.10 branch 7dac25a3a9 vendor: update tar-split to v0.11.2 8bd86a0699 update containerd binary to v1.6.8 6c8dd6a6f2 update runc to v1.1.4 418c141e64 [20.10 backport] daemon: kill exec process on ctx cancel d127287d92 Allow different syscalls from kernels 5.12 -> 5.16 57db169641 seccomp: add support for Landlock syscalls in default policy 7ba8ca042c Update golang to 1.18.5 f2a3c3bcef update golang to 1.18.4 a99c9cd852 update golang to 1.18.3 82939f536b update golang to 1.18.2 ecd1aa081f update golang to 1.18.1 7ba67d05a8 [20.10] vendor: update archive/tar for go 1.18 0bc432241e update golang to 1.18.0 bb95d09f9a staticcheck: ignore "SA1019: strings.Title is deprecated" a7299ae72c Dockerfile: update golangci-lint v1.44.0 d97fd533cf integration-cli: SA5011: possible nil pointer dereference (staticcheck) e6aee04a88 client.NewClientWithOpts(): remove redundant type assertion (gosimple) 0523323c28 daemon/logger/awslogs: suppress false positive on hardcoded creds (gosec) adeb29c64c client/request.go:157:8: SA1019: err.Temporary is deprecated (staticcheck) 50361d91a6 registry: trimV1Address(): simplify trimming trailing slash ae3a9337dd golangci.yml: do not limit max reported issues 9820255a1c golangci.yml: skip some tests d223f37300 golangci.yml: update regex for ignoring SA1019 ec3bfba89d graphdriver: temporarily ignore unsafeptr: possible misuse of reflect.SliceHeader f2f387b131 daemon: var-declaration: should omit type bool (revive) 2fb7c9fea7 daemon/config: error strings should not be capitalized fa6954cb98 reformat "nolint" comments 45fa675a35 if-return: redundant if ...; err != nil check (revive) 9e88f8435a daemon/splunk: ignore G402: TLS MinVersion too low for now 2de90ebbe4 pkg/archive: RebaseArchiveEntries(): ignore G110 14b475d091 daemon/stats: fix notRunningErr / notFoundErr detected as unused (false positive) db7b3f4737 unused: ignore false positives b6de0ca7c5 G601: Implicit memory aliasing in for loop e8b838e99f gosec: G601: Implicit memory aliasing in for loop 2ddf6e598a gosimple: S1039: unnecessary use of fmt.Sprintf fadf8bbdff staticcheck: SA4001: &*x will be simplified to x. It will not copy x 7573e32577 client: S1031: unnecessary nil check around range (gosimple) e738a57a6d daemon/logger/journald: fix linting errors 34f6b94255 gosec: G404: Use of weak random number generator a6d7b61c8b update containerd binary to v1.6.7 b4ba1ee22f update runc binary to v1.1.3 da8828c4b3 api: swagger: fix invalid example value (API v1.39-v1.41) 9501d91e19 api: swagger: document BuildCache fields (API v1.39-v1.41) 61fdea902b api: swagger: document BuildCache fields. c77432c889 [20.10] Update golang to 1.17.13 2833aa1e4b docs: api: add missing "platform" query-arg on create (v1.41) a8c28260ad api: swagger: add missing "platform" query-arg on create cfdc075b1c Fix file capabilities droping in Dockerfile 2daa6bb6b3 Windows: Re-create custom NAT networks after restart if missing from HNS 903cd53ce4 vendor: libnetwork 0dde5c895075df6e3630e76f750a447cf63f4789 eccaf6d368 [20.10] update golang to 1.17.12 ff7feeac37 vendor: github.com/containerd/continuity v0.3.0 Bumping libnetwork to version v0.7.0-dev.3-1841-gdcdf8f17, which comprises the following commits: 5e08bdb1 Revert: Added API to set ephemeral port allocator range 563fe8e2 README.md: repo was moved to https://github.com/moby/moby/tree/master/libnetwork bea0bcf5 libnetwork: skip firewalld management for rootless af0c46d8 Apply peformance tuning to new sandboxes also Bumping docker-cli to version v20.10.21, which comprises the following commits: 3e3677e47d docs: fix links to BuildKit backend 20e3951aeb Remove "experimental" gates around "--platform" in bash completion 75d7ce92a2 fixed the plugin command docker-runc a12c535f6e [20.10] vendor docker 03df974ae9e6c219862907efdd76ec2e77ec930b (v20.10.20) d18a3e9004 [20.10] vendor moby/buildkit v0.8.3-31-gc0149372 932ca73874 [20.10] vendor: github.com/docker/docker v20.10.19 7d51e65e72 [20.10] vendor: github.com/moby/buildkit 3a1eeca59a9263613d996ead67d53a4b7d45723d (v0.8 branch) 1ea8d69d6f feat(docker): add context argument completion e82aa85741 [20.10] vendor: github.com/docker/docker v20.10.18 e9176b36cc [20.10] vendor: github.com/containerd/continuity v0.3.0 bc6ff39e42 docs/reference: run.md update confusing example name 3fa7a8654f docs: update deprecation status for "overlay2.override_kernel_check" 3e06ce8bfa [20.10] Update go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 93eead45ee Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190 45075ea08c [20.10] vendor: github.com/docker/docker v20.10.17 c2dcaecf19 make compose plugin detection in bash completion work on Mac OS 613b9362d0 Detect compose plugin b30d250320 Add completion for docker-compose plugin 6b25bc3003 fix race condition in TestRemoveForce bdac0b38d9 Update golang to 1.18.5 c70b01ec1f update golang to 1.18.4 0389090aeb update golang to 1.18.3 c904936d69 update golang to 1.18.2 386d50c2e9 update golang to 1.18.1 990186f2f6 update go to 1.18.0 86bf1966e2 staticcheck: ignore SA1019: strings.Title is deprecated b3022b91d1 [20.10] Dockerfile.lint: use go install f14ba9f5d7 [20.10] Dockerfile: use syntax=docker/dockerfile:1 c189c4dbea [20.10] vendor: github.com/json-iterator/go v1.1.12 for Go 1.18 compatibility 0c46ffc1f9 [20.10] vendor: github.com/modern-go/reflect2 v1.0.2 for Go 1.18 compatibility 6be9ce798e [20.10] vendor: github.com/google/gofuzz v1.0.0 779ed309a8 lint: update golangci-lint to v1.45.2 2f7e84be65 linting: fix incorrectly formatted errors (revive) e628209d9b linting: ignore some "G101: Potential hardcoded credentials" warnings 80a3add604 cli/command/container: unnecessary use of fmt.Sprintf (gosimple) 80fb0d575e [20.10] Update golang to 1.17.13 d72bef2088 [20.10] update golang to 1.17.12 7502d7e560 Fix dead external link 308624c3b1 fix: remove asterisk from docker command suggestions de7d866b6a [20.10] update golang to 1.17.11 240e4b5501 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 5d4776bd90 [20.10] update golang to 1.17.10 49e9c2ae3d vendor: golang.org/x/sys 63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17) 87a3ce2699 vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456 1d8abed17d vendor: update x/sys to 134d130e 31dad66f9a [20.10] update golang to 1.17.9 80f673bf9e gofmt with go1.17 3d4cc8e699 [20.10] update remaining files to go1.17.8 30277a8f80 update go to 1.17.8 cfef3a7dc1 docs: deprecated: add entry for "fluent-async-connect" log-opt 53426025c3 [20.10] docs: reformat table for compatibility 573a664639 Describe privileged mode in terms of capabilities cf0ab7ac4c [20.10] vendor: github.com/docker/distribution v2.8.1 d05fd4ffc8 [20.10] vendor: github.com/opencontainers/image-spec v1.0.2 870f138250 [20.10] vendor: github.com/docker/docker v20.10.14 198d6b8724 [20.10] circleci: update buildx to v0.8.2 55a14ec851 [20.10] update remaining Dockerfiles to go 1.16.15 1f9a0df05a e2e: update docker-compose to 1.29.2 4ae338b33a docs: reference: remove trailing space to fix yaml formatting 6380142dd4 docs: fix (table) formatting, fix some broken links 82f422fcf3 docs: build: fix minor markdown and syntax issues 80fd77903b Update the list of log drivers c3d4d623c8 Fix CMD --ignored-param1 example 2e82d11def docs: dockerd: fix broken link in blockquote area 738a6ee1cc improve cp documentation with some illustration examples 246d96bb6c docs: unify "docker create" and "docker run" reference 2fd0f17057 docs: add missing documentation for --pull flag 5fa500000a Fix incorrect pointer inputs to `json.Unmarshal` 1e6a8ce2b7 Dockerfile: update xx to 1.1 6f7a931a2d [20.10] use GO_LDFLAGS instead of LDFLAGS to prevent inheriting unrelated options 91bab605f7 [20.10] vendor.conf: don't use git:// protocol a282e0c5d2 [20.10] update to go 1.16.15 to address CVE-2022-24921 700364e304 Fix mistake with env var example in docker run docs 62d27c32ff Update WORKDIR command information c0e952cf04 Fix the (dead) link for docs for Dockerfile syntax reference 04104a04d3 Update dockerd.md b721998b7b Fixing typo (his --> its) 4065e1246e format create.md table f1002eb9fb Fix typo e97c7b240e added missing closing parenthese aa78937634 Update stats.md add example json output 40fe0573aa Update Ubuntu version number references in push.md c9737e1c37 docs/daemon: replace deprecated '-g' option for '--data-root' 5c6723d080 Correct device syntax to --gpus fd5fc61ecd [20.10] Update Go to 1.16.14 3624019d83 [20.10] update Go to 1.16.13 f3ff8e6ad6 [20.10] vendor: compose-on-kubernetes v0.5.0 to remove github.com/golang/glog ee1ac1b319 fix innocuous data-race when config.Load called in parallel 38dd744a11 [20.10] Update Go to 1.16.12 4de40a825e Update Go to 1.16.11 03fa8f92c8 Update Go to 1.16.10 9989fdbc40 Update most links in docs to use https by default 0e20c1fd21 Update Go to 1.16.9 1c0927a041 Dockerfile: update tonistiigi/xx to 1.0.0-rc.2, add XX_VERSION arg 82f9d5921b info: skip client-side warning about seccomp profile on API >= 1.42 adb01ca79d docs: some minor touch-ups in checkpoint reference 8260476a06 docs: remove trailing space to fix generated YAML format bce2e1f953 docs: create.md: typo fix 44064f51c8 Fix typo in documentation - build.md 292779add5 Add doc for BUILDKIT_PROGRESS env var f2e79b826c docs: use "console" code-hint for shell examples fa46b92361 docs: rewrite reference docs for --stop-signal and --stop-timeout 400f81089a experimental: fix broken link to "checkpoint and restore" page c72057c8db docs: move checkpoint/restore doc from experimental into reference 77db97d595 Use private network address for default-address-pools setting in daemon.json example cbf0d2b7b7 docs: fix some broken anchors d0014a86bc docs: fix description of restart-delay to mention max (1 minute) 6c1c8b55aa docs: fix search results by filterd is-official 44fdac11f5 Update Go to 1.16.8 061051c24d docs: add missing redirect, and remove /go/experimental redirect 2012fbf111 Update Go to 1.16.7 42d1c02750 registry: ensure default auth config has address 0b924e51fc Update to go1.16.6 6288e8b1ac change TestNewAPIClientFromFlagsWithHttpProxyEnv to an e2e test 1e9575e81a cli/config/configfile: various test cleanups c98e9c47ca Use designated test domains (RFC2606) in tests 8437cfefae context: deprecate support for encrypted TLS private keys 68a5ca859f cli/context: ignore linting warnings about RFC 1423 encryption 8a64739631 Update Dockerfiles to latest syntax, remove "experimental" 1d37fb3027 Deprecate Kubernetes context support 0793f96394 Deprecate Kubernetes stack support b639ea8b89 Deprecate Kubernetes stack support Signed-off-by: Bruce Ashfield <[email protected]> docker-ce: update to v20.10.21 Bumping docker to version v20.10.21-4-g4ed81ac0e2, which comprises the following commits: f292bf0f4f distribution: Error when pulling OCI artifacts 0211f9e44d [20.10] update to Go 1.18.8 to address CVE-2022-41716 f99cb8297b integration: download busybox-w32 from GitHub Release 3f9dc25f5c update containerd binary to v1.6.9 87ccd38cea vendor: moby/term, Azure/go-ansiterm for golang.org/x/sys/windows compatibility e83e465ae2 [20.10] vendor: github.com/moby/buildkit eeb7b65ab7d651770a5ec52a06ea7c96eb97a249 (v0.8 branch) 9c84417c1b skip TestImagePullStoredfDigestForOtherRepo() on Windows and rootless 5b5b5c6f13 builder: add missing doc comment 05e25f7892 builder: fix running git commands on Windows 2f3bf18014 [20.10] vendor moby/buildkit v0.8.3-31-gc0149372 6699afa549 registry: allow "allow-nondistributable-artifacts" for Docker Hub 4b9902bad4 Validate digest in repo for pull by digest c0d1188c14 builder: make git config isolation opt-in 9f5f3abcee builder: isolate git from local system 10db4c2db7 builder: explicitly set CWD for all git commands 8816c3c2aa builder: modernize TestCheckoutGit 11bdbf40b9 [20.10] Update to go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 66ddb7f91c Fix live-restore w/ restart policies + volume refs c003392582 contrib: make dockerd-rootless-setuptool.sh more robust 53313be0f3 docker-rootless-setuptools.sh: use context after install 9c486bd267 swagger: update links to logo fa17fab895 vendor: github.com/containerd/console v1.0.2 481bee51b5 vendor: github.com/armon/go-metrics v0.4.1 39ba2873e8 vendor: github.com/google/btree v1.1.2 c2755f40cd vendor: github.com/hasicorp/memberlist v0.4.0 5ba3208ec7 Dockerfile: Update Dockerfile syntax, switch to bullseye, add missing libseccomp-dev, remove build pack 6d6a236286 [20.10] Update uses of Image platform fields in OCI image-spec 2570784169 [20.10] vendor: github.com/moby/buildkit 3a1eeca59a9263613d996ead67d53a4b7d45723d (v0.8 branch) fcd4df906b Update some tests for supplementary group permissions 6a0186b357 Wrap local calls to the content and lease service 3d4616f943 Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190 23c7d84b84 docs: api: adjust ContainerWaitResponse error as optional 3e9e79d134 docs: api: document ImageSummary fields (api v1.39-v1.41) fdd438ae03 api: docs: improve documentation of ContainerConfig type (API v1.30-v1.41) 97014a8db5 namesgenerator: remove Valentina Tereshkova e44d7f735e AdditionalGids must include effective group ID 9e7662e4a7 [20.10] vendor: update containerd to latest of docker-20.10 branch 7dac25a3a9 vendor: update tar-split to v0.11.2 8bd86a0699 update containerd binary to v1.6.8 6c8dd6a6f2 update runc to v1.1.4 418c141e64 [20.10 backport] daemon: kill exec process on ctx cancel d127287d92 Allow different syscalls from kernels 5.12 -> 5.16 57db169641 seccomp: add support for Landlock syscalls in default policy 7ba8ca042c Update golang to 1.18.5 f2a3c3bcef update golang to 1.18.4 a99c9cd852 update golang to 1.18.3 82939f536b update golang to 1.18.2 ecd1aa081f update golang to 1.18.1 7ba67d05a8 [20.10] vendor: update archive/tar for go 1.18 0bc432241e update golang to 1.18.0 bb95d09f9a staticcheck: ignore "SA1019: strings.Title is deprecated" a7299ae72c Dockerfile: update golangci-lint v1.44.0 d97fd533cf integration-cli: SA5011: possible nil pointer dereference (staticcheck) e6aee04a88 client.NewClientWithOpts(): remove redundant type assertion (gosimple) 0523323c28 daemon/logger/awslogs: suppress false positive on hardcoded creds (gosec) adeb29c64c client/request.go:157:8: SA1019: err.Temporary is deprecated (staticcheck) 50361d91a6 registry: trimV1Address(): simplify trimming trailing slash ae3a9337dd golangci.yml: do not limit max reported issues 9820255a1c golangci.yml: skip some tests d223f37300 golangci.yml: update regex for ignoring SA1019 ec3bfba89d graphdriver: temporarily ignore unsafeptr: possible misuse of reflect.SliceHeader f2f387b131 daemon: var-declaration: should omit type bool (revive) 2fb7c9fea7 daemon/config: error strings should not be capitalized fa6954cb98 reformat "nolint" comments 45fa675a35 if-return: redundant if ...; err != nil check (revive) 9e88f8435a daemon/splunk: ignore G402: TLS MinVersion too low for now 2de90ebbe4 pkg/archive: RebaseArchiveEntries(): ignore G110 14b475d091 daemon/stats: fix notRunningErr / notFoundErr detected as unused (false positive) db7b3f4737 unused: ignore false positives b6de0ca7c5 G601: Implicit memory aliasing in for loop e8b838e99f gosec: G601: Implicit memory aliasing in for loop 2ddf6e598a gosimple: S1039: unnecessary use of fmt.Sprintf fadf8bbdff staticcheck: SA4001: &*x will be simplified to x. It will not copy x 7573e32577 client: S1031: unnecessary nil check around range (gosimple) e738a57a6d daemon/logger/journald: fix linting errors 34f6b94255 gosec: G404: Use of weak random number generator a6d7b61c8b update containerd binary to v1.6.7 b4ba1ee22f update runc binary to v1.1.3 da8828c4b3 api: swagger: fix invalid example value (API v1.39-v1.41) 9501d91e19 api: swagger: document BuildCache fields (API v1.39-v1.41) 61fdea902b api: swagger: document BuildCache fields. c77432c889 [20.10] Update golang to 1.17.13 2833aa1e4b docs: api: add missing "platform" query-arg on create (v1.41) a8c28260ad api: swagger: add missing "platform" query-arg on create cfdc075b1c Fix file capabilities droping in Dockerfile 2daa6bb6b3 Windows: Re-create custom NAT networks after restart if missing from HNS 903cd53ce4 vendor: libnetwork 0dde5c895075df6e3630e76f750a447cf63f4789 eccaf6d368 [20.10] update golang to 1.17.12 ff7feeac37 vendor: github.com/containerd/continuity v0.3.0 Bumping libnetwork to version v0.7.0-dev.3-1841-gdcdf8f17, which comprises the following commits: 5e08bdb1 Revert: Added API to set ephemeral port allocator range 563fe8e2 README.md: repo was moved to https://github.com/moby/moby/tree/master/libnetwork bea0bcf5 libnetwork: skip firewalld management for rootless af0c46d8 Apply peformance tuning to new sandboxes also Bumping docker-cli to version v20.10.21, which comprises the following commits: 3e3677e47d docs: fix links to BuildKit backend 20e3951aeb Remove "experimental" gates around "--platform" in bash completion 75d7ce92a2 fixed the plugin command docker-runc a12c535f6e [20.10] vendor docker 03df974ae9e6c219862907efdd76ec2e77ec930b (v20.10.20) d18a3e9004 [20.10] vendor moby/buildkit v0.8.3-31-gc0149372 932ca73874 [20.10] vendor: github.com/docker/docker v20.10.19 7d51e65e72 [20.10] vendor: github.com/moby/buildkit 3a1eeca59a9263613d996ead67d53a4b7d45723d (v0.8 branch) 1ea8d69d6f feat(docker): add context argument completion e82aa85741 [20.10] vendor: github.com/docker/docker v20.10.18 e9176b36cc [20.10] vendor: github.com/containerd/continuity v0.3.0 bc6ff39e42 docs/reference: run.md update confusing example name 3fa7a8654f docs: update deprecation status for "overlay2.override_kernel_check" 3e06ce8bfa [20.10] Update go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 93eead45ee Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190 45075ea08c [20.10] vendor: github.com/docker/docker v20.10.17 c2dcaecf19 make compose plugin detection in bash completion work on Mac OS 613b9362d0 Detect compose plugin b30d250320 Add completion for docker-compose plugin 6b25bc3003 fix race condition in TestRemoveForce bdac0b38d9 Update golang to 1.18.5 c70b01ec1f update golang to 1.18.4 0389090aeb update golang to 1.18.3 c904936d69 update golang to 1.18.2 386d50c2e9 update golang to 1.18.1 990186f2f6 update go to 1.18.0 86bf1966e2 staticcheck: ignore SA1019: strings.Title is deprecated b3022b91d1 [20.10] Dockerfile.lint: use go install f14ba9f5d7 [20.10] Dockerfile: use syntax=docker/dockerfile:1 c189c4dbea [20.10] vendor: github.com/json-iterator/go v1.1.12 for Go 1.18 compatibility 0c46ffc1f9 [20.10] vendor: github.com/modern-go/reflect2 v1.0.2 for Go 1.18 compatibility 6be9ce798e [20.10] vendor: github.com/google/gofuzz v1.0.0 779ed309a8 lint: update golangci-lint to v1.45.2 2f7e84be65 linting: fix incorrectly formatted errors (revive) e628209d9b linting: ignore some "G101: Potential hardcoded credentials" warnings 80a3add604 cli/command/container: unnecessary use of fmt.Sprintf (gosimple) 80fb0d575e [20.10] Update golang to 1.17.13 d72bef2088 [20.10] update golang to 1.17.12 7502d7e560 Fix dead external link Signed-off-by: Bruce Ashfield <[email protected]> containerd: update to v1.6.9 Bumping containerd to version v1.6.9-12-g6c41694da, which comprises the following commits: 5af8d89ce overlayutils: Add fastpath for userxattr check 303f608dd [release/1.6] update to Go 1.18.8 to address CVE-2022-41716 3f9f9508d ctr export strictly match default platform df73acad5 [release/1.6] go.mod: Bump hcsshim to v0.9.5 658490b78 ctr import: strictly match platform 4907b4d72 Migrate away from GitHub actions set-output f1493f665 Prepare release notes for v1.6.9 346412f5a adding support of CAP_BPF and CAP_PERFMON 99578d1fc Update mailmap a956d8415 Add logging volume metrics to Containerd CRI plugin 29e2dea50 fix pusher concurrent close channel 8a9d69385 [release/1.6] Stats() shouldn't assume s.container is non-nil a9adc7938 cri: PodSandboxStatus should tolerate missing task b66eb726a migrate from k8s.gcr.io to registry.k8s.io 5b40993a5 [release/1.6] upgrade containerd/continuity from v0.2.2 to v0.3.0 f2376e659 Update container with sandbox metadata after NetNS is created 06f82efef archive: validate digests before use 28324c529 [release/1.6] Update go 1.18.7, addresses CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 0aeeb62cb [release/1.6] update golangci-lint to v1.19.0 7db9d1f76 Fix linter warnings 4dc932e62 [release/1.6] gofmt with go1.19 7b8d679ad [release/1.6] integration: remove use of deprecated io/ioutil 926b9c72f retry request on writer reset b9a35c6af Add integration tests with failpoint 1f29fac48 Persist container and sandbox if resource cleanup fails, like teardownPodNetwork a85709c6c integration: simplify CNI-fp and add README.md d89a8d223 pkg/failpoint: add FreeBSD link and update pkg doc b0ce2965a integration: Add injected failpoint testing for RunPodSandbox a7f956d86 integration: CNI bridge wrapper with failpoint 07c479471 pkg/failpoint: add DelegatedEval API 4a5bc05aa runtime/v2/shim: return if error in load plugin 71ee7de24 bin/ctr,integration: new runc-shim with failpoint 3e2e77849 runtime/v2: manager supports server interceptor cb935bf49 pkg/failpoint: init failpoint package 2fdfd564c make xattr EPERM non-fatal in createTarFile 89e49609d remotes/docker/config: Skipping TLS verification for localhost b720be2ce remove stray .zuul.yaml 6b30bc4b4 .zuul: remove the zuul because it is offline 0f7e258ee Set grpc code for unimplemented cri-api methods fb753e5cd update intergration 6ee5bb7ea bump cri-api ae8598615 ContainerStatus to return container resources d3c7e31c8 Update CRI-API 5b44c5271 vendor: golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd 3507d600b update runc binary to v1.1.4 1efd8b947 ci: remove GOPROXY environment variable due to go-yaml/yaml#887 Signed-off-by: Bruce Ashfield <[email protected]>

Bumping containerd to version v1.6.9-12-g6c41694da, which comprises the following commits: 5af8d89ce overlayutils: Add fastpath for userxattr check 303f608dd [release/1.6] update to Go 1.18.8 to address CVE-2022-41716 3f9f9508d ctr export strictly match default platform df73acad5 [release/1.6] go.mod: Bump hcsshim to v0.9.5 658490b78 ctr import: strictly match platform 4907b4d72 Migrate away from GitHub actions set-output f1493f665 Prepare release notes for v1.6.9 346412f5a adding support of CAP_BPF and CAP_PERFMON 99578d1fc Update mailmap a956d8415 Add logging volume metrics to Containerd CRI plugin 29e2dea50 fix pusher concurrent close channel 8a9d69385 [release/1.6] Stats() shouldn't assume s.container is non-nil a9adc7938 cri: PodSandboxStatus should tolerate missing task b66eb726a migrate from k8s.gcr.io to registry.k8s.io 5b40993a5 [release/1.6] upgrade containerd/continuity from v0.2.2 to v0.3.0 f2376e659 Update container with sandbox metadata after NetNS is created 06f82efef archive: validate digests before use 28324c529 [release/1.6] Update go 1.18.7, addresses CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 0aeeb62cb [release/1.6] update golangci-lint to v1.19.0 7db9d1f76 Fix linter warnings 4dc932e62 [release/1.6] gofmt with go1.19 7b8d679ad [release/1.6] integration: remove use of deprecated io/ioutil 926b9c72f retry request on writer reset b9a35c6af Add integration tests with failpoint 1f29fac48 Persist container and sandbox if resource cleanup fails, like teardownPodNetwork a85709c6c integration: simplify CNI-fp and add README.md d89a8d223 pkg/failpoint: add FreeBSD link and update pkg doc b0ce2965a integration: Add injected failpoint testing for RunPodSandbox a7f956d86 integration: CNI bridge wrapper with failpoint 07c479471 pkg/failpoint: add DelegatedEval API 4a5bc05aa runtime/v2/shim: return if error in load plugin 71ee7de24 bin/ctr,integration: new runc-shim with failpoint 3e2e77849 runtime/v2: manager supports server interceptor cb935bf49 pkg/failpoint: init failpoint package 2fdfd564c make xattr EPERM non-fatal in createTarFile 89e49609d remotes/docker/config: Skipping TLS verification for localhost b720be2ce remove stray .zuul.yaml 6b30bc4b4 .zuul: remove the zuul because it is offline 0f7e258ee Set grpc code for unimplemented cri-api methods fb753e5cd update intergration 6ee5bb7ea bump cri-api ae8598615 ContainerStatus to return container resources d3c7e31c8 Update CRI-API 5b44c5271 vendor: golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd 3507d600b update runc binary to v1.1.4 1efd8b947 ci: remove GOPROXY environment variable due to go-yaml/yaml#887 Signed-off-by: Bruce Ashfield <[email protected]>

Release aligned with Docker-CE v20.10.21. Changes also aligned with latest from meta-virtualization (1.6.8). Relevant changes: - 1c90a4424 Merge pull request #7573 from samuelkarp/release/1.6.9 - 96929a5d3 Merge pull request #7574 from swagatbora90/backport-cap-bpf-perfmon - f1493f665 Prepare release notes for v1.6.9 - 346412f5a adding support of CAP_BPF and CAP_PERFMON - 99578d1fc Update mailmap - 8b9c35a19 Merge pull request #7571 from sophieliu15/release/1.6 - a956d8415 Add logging volume metrics to Containerd CRI plugin - 8658d0b51 Merge pull request #7562 from dcantah/cp-concurrent-closech - 29e2dea50 fix pusher concurrent close channel - 9a194f78b Merge pull request #7557 from kzys/backport/1.6/stats-nil - 9edb14386 Merge pull request #7551 from samuelkarp/ip-leakage-flake/1.6 - 8a9d69385 [release/1.6] Stats() shouldn't assume s.container is non-nil - 74e9e4c43 Merge pull request #7549 from SergeyKanzhelev/switchToRegistry - a9adc7938 cri: PodSandboxStatus should tolerate missing task - b66eb726a migrate from k8s.gcr.io to registry.k8s.io - 6afbeac96 Merge pull request #7518 from kzys/backport/1.6/continuity-fix - 5b40993a5 [release/1.6] upgrade containerd/continuity from v0.2.2 to v0.3.0 - dccb15294 Merge pull request #7505 from qiutongs/backport-netns-1.6 - f2376e659 Update container with sandbox metadata after NetNS is created - d9e2ba255 Merge pull request #7490 from samuelkarp/archive-dgst-validate/1.6 - 06f82efef archive: validate digests before use - 1eb637f95 Merge pull request #7475 from thaJeztah/1.6_bump_go_1.18.7 - 6496ac61e Merge pull request #7461 from akhilerm/cherry-pick-6995-1.6 - 28324c529 [release/1.6] Update go 1.18.7, addresses CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 - 0aeeb62cb [release/1.6] update golangci-lint to v1.19.0 - 7db9d1f76 Fix linter warnings - 4dc932e62 [release/1.6] gofmt with go1.19 - 7b8d679ad [release/1.6] integration: remove use of deprecated io/ioutil - a91dd679b Merge pull request #7456 from qiutongs/backport-ip-leakage-1.6 - 926b9c72f retry request on writer reset - b9a35c6af Add integration tests with failpoint - 1f29fac48 Persist container and sandbox if resource cleanup fails, like teardownPodNetwork - 6338ef8d1 Merge pull request #7455 from qiutongs/backport-failpoint-1.6 - a85709c6c integration: simplify CNI-fp and add README.md - d89a8d223 pkg/failpoint: add FreeBSD link and update pkg doc - b0ce2965a integration: Add injected failpoint testing for RunPodSandbox - a7f956d86 integration: CNI bridge wrapper with failpoint - 07c479471 pkg/failpoint: add DelegatedEval API - 4a5bc05aa runtime/v2/shim: return if error in load plugin - 71ee7de24 bin/ctr,integration: new runc-shim with failpoint - 3e2e77849 runtime/v2: manager supports server interceptor - cb935bf49 pkg/failpoint: init failpoint package - 2cbb524b9 Merge pull request #7447 from estesp/cp-7094-1.6 - 2fdfd564c make xattr EPERM non-fatal in createTarFile - 7b93a228e Merge pull request #7438 from Iceber/skip_verify_1.6 - 89e49609d remotes/docker/config: Skipping TLS verification for localhost - bf1b93eac Merge pull request #7427 from fuweid/16-cp-7369-7416 - b720be2ce remove stray .zuul.yaml - 6b30bc4b4 .zuul: remove the zuul because it is offline - 3228848c6 Merge pull request #7421 from ruiwen-zhao/release-1.6-grpc - 0f7e258ee Set grpc code for unimplemented cri-api methods - 462caf1eb Merge pull request #7410 from ruiwen-zhao/container_resource_1.6 - fb753e5cd update intergration - 6ee5bb7ea bump cri-api - ae8598615 ContainerStatus to return container resources - d3c7e31c8 Update CRI-API - 23d2278a2 Merge pull request #7340 from dcermak/backport-golang-x-crypto-vendor - 5b44c5271 vendor: golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd - de1a1905d Merge pull request #7333 from thaJeztah/1.6_backport_runc - 3507d600b update runc binary to v1.1.4 - 579a6380e Merge pull request #7299 from samuelkarp/ci-workflow-goproxy/1.6 - 1be2cb348 Merge pull request #7298 from deckhouse/docker-compat-1.6 - 1efd8b947 ci: remove GOPROXY environment variable due to https://github.com/go-yaml/yaml/issues/887 - 0448673af Do not append []string{""} to command to preserve Docker compatibility - 9ff72800f Merge pull request #7274 from mxpv/critest - 5c230ece0 Fix cleanup in critest - 026ac1c17 Merge pull request #7268 from thaJeztah/1.6_backport_no_tun - 9cd3357b7 Merge pull request #7263 from dmcgowan/prepare-1.6.8 - ed9d3dc37 oci: WithDefaultUnixDevices(): remove tun/tap from the default devices - 3364f411e Prepare release notes for v1.6.8 - a76f3c831 Merge pull request #7261 from samuelkarp/release-workflow/1.6 - 390920429 release workflow: remove Go setup action - cf48ba6e8 release workflow: increase timeout to 30 minutes - 76f5db42f Merge pull request #7260 from samuelkarp/fix-7255/1.6 - 57873e652 release: rollback Ubuntu to 18.04 (except for riscv64) - 0197261a3 Merge pull request #7250 from dmcgowan/release-1.6-update-build-timeout - eccb82f6d Update release build timeout to 20 minutes - 5f242b5bf Merge pull request #7225 from dcantah/v1.6.7-rnotes - 6a854d4b5 Update mailmap - 61612e1a2 Prepare release notes for 1.6.7 - 78f438957 Merge pull request #7244 from dcantah/update-go-1.17.13 - d199ee462 Update golang to 1.17.13 - d97553c9a Merge pull request #7242 from dcantah/cp-windows-svc-osstderr - 0578d20c5 Change os.Stderr reassign for Windows service - 7438c0a7b Merge pull request #7230 from estesp/cp-7206 - 2e236d4fc Merge pull request #7227 from dcantah/cp-hpcstats-test - 12cae4961 Update Vagrant CI to macos-12 - bc4091aae chore: bump macos runner version - cb73bd050 Windows HostProcess container CRI stats test - ac388525a Add validations for Windows HostProcess CRI configs - d97257190 Merge pull request #7200 from dcantah/1.6-hcsshim-v0.9.4 - 0007f40fe [release/1.6] go.mod: Bump hcsshim to v0.9.4 - 6ae451b97 Merge pull request #7217 from estesp/update-fedora - c9607e78c Update Fedora version to 36 - 1f5ca004e Merge pull request #7170 from AkihiroSuda/riscv64-1.6 - 2952b66c0 CI: add riscv64 builds - 6b2dc9a37 release/Dockerfile: update Ubuntu to 22.04 for supporting riscv64 - 745dc07c4 seccomp: support riscv64 - c2f841f21 Create ppc64le release - 73b85c0c5 Merge pull request #7171 from AkihiroSuda/cherrypick-6810-1.6 - 0a0a154d6 Merge pull request #7172 from AkihiroSuda/cherrypick-7149-1.6 - 86b55bd8d seccomp: allow clock_settime64 when CAP_SYS_TIME is added - f3da3e51f allow ptrace(2) by default for kernel >= 4.8 - 604d0bdf5 Merge pull request #7160 from thaJeztah/1.6_update_go - aa1101068 [release/1.6] update golang to 1.17.12 - 4e92d8e7e Merge pull request #7131 from kzys/backport/1.6/7126 - 37dfc5c9d [release/1.6] Fix WWW-Authenticate parsing - 288440aad Merge pull request #7133 from kzys/backport/1.6/7106 - fa2016d58 [release/1.6] Downgrade MinGW to version 10.2.0 - 6309dc487 Merge pull request #7051 from Iceber/fix-run-controller-manager-1.6 - 99c56d217 ctr: fix label args used in NewContainer - 3dce36e42 Merge pull request #7045 from kzys/backport/1.6/7022 - 51de785f8 [release/1.6] Make building static binaries simpler - 9abd4b3f3 Merge pull request #7036 from thaJeztah/1.6_update_runc2 - 2ea4e6348 update runc binary to v1.1.3 - 10c129548 Merge pull request from GHSA-5ffw-gxpp-mxpf - 61213742a Prepare release notes for v1.6.6 - f92068350 Implicitly discard the input to drain the reader - 2eb67213b [release/1.6] Limit the response size of ExecSync - 96df0994f Merge pull request #7021 from dmcgowan/prepare-1.6.5 - 185e87275 Prepare release notes for v1.6.5 - af315d4a4 Merge pull request #7013 from thaJeztah/1.6_bump_golang_1.17.11 - 3691a3b64 Merge pull request #7011 from fuweid/cherry-pick-7009 - 5c9c83d3e [release/1.6] update golang to 1.17.11 - fdcdc27bc update go-cni/for cni update fixing plugins that don't respond with version - ae3c2ac47 Merge pull request #6985 from AkihiroSuda/cherrypick-6982-1.6 - e33b9e709 archive: add human-readable hint to Lchown error - feb0d5b17 Merge pull request #6968 from dcantah/gomod-hcsshim-0.9.3 - 856815579 Merge pull request #6980 from AkihiroSuda/cherrypick-6972-1.6 - 3bb5a9d19 config: improve config v1 deprecation message - 6eff5b6c0 [release/1.6] go.mod: Bump hcsshim to 0.9.3 - 6532af416 Merge pull request #6927 from thaJeztah/1.6_bump_golang_1.17.10 - f1d2d9260 [release/1.6] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad - 9f99be51b [release/1.6] update golang to 1.17.10 - c6e009522 Merge pull request #6929 from ambarve/backport_path_fix - 9f76550df Merge pull request #6942 from psschwei/release/1.6 - 1bb7d3909 Merge pull request #6936 from thaJeztah/1.6_bump_runc - 246a1b42e vendor: github.com/opencontainers/runc v1.1.2 - 43717e03a update runc binary to v1.1.2 - 82a77be2d reverts removal of parallel run from critest - 74c1e96aa Merge pull request #6941 from estesp/backport-vagrant-fix - 06bdfeb67 Allow git commands in Vagrantfile - 70839a344 Bug fix for mount path handling - bee37b011 Merge pull request #6895 from psschwei/release/1.6 - 1520bae0f update critools to v1.24 - 212e8b6fa Merge pull request #6887 from dmcgowan/prepare-1.6.4 - 0d1d2953b Prepare release notes for 1.6.4 - db40e2128 Merge pull request #6878 from thaJeztah/1.6_backport_bump-opencontainers_selinux_to_v1.10.1 - 42d691fe6 Bump opencontainers/selinux from 1.10.0 to 1.10.1 - 6eeeaaddc Merge pull request #6877 from MikeZappa87/update-go-cni-v2 - e9f22e008 Update go-cni to v1.1.5 - 50e24461e Merge pull request #6859 from fuweid/cp-16-6842 - be4909e95 cri: close fifos when container is deleted - f83086606 Merge pull request #6844 from dmcgowan/prepare-1.6.3 - baa386dc0 Prepare release notes for v1.6.3 - 595e77bba Merge pull request #6853 from kzys/16-backport-6789 - e8da82adc tracing: fix panic on startup when configured - ec44f6b65 Merge pull request #6816 from dims/RFC-enhance-pull-performance-1.6 - 1764ea9a2 CRI: improve image pulling performance - 64d2cf44d Merge pull request #6823 from thaJeztah/1.6_backport_bump_golang_1.17.9 - 9cd76d465 [release/1.6] update golang to 1.17.9 - b7bce90eb Merge pull request #6813 from mikebrow/cherrypick-#6806-release-1.6 - c09cc1242 check for duplicate nspath possibilities - eed3a2a99 Merge pull request #6801 from fuweid/cherry-pick-6772 - fe6ba62ce metrics/cgroups: fix deadlock issue in Add during Collect - 4f30ddacd Merge pull request #6766 from thaJeztah/1.6_fix_pseudo_version - 8b81a7843 [release/1.6] go.mod: update image-spec to merge-commit of v1 into main - 5ff8fce1f Merge pull request #6759 from thaJeztah/1.6_backport_runc_1.1.1 - cd89e29d2 Merge pull request #6752 from AkihiroSuda/rocky-ci-1.6 - f2ba2041b update runc binary to v1.1.1 - b736b4dab go.mod: github.com/opencontainers/runc v1.1.1 - 72f1e58c7 CI: add Rocky Linux 8 - bb8da7abc Merge pull request #6739 from thaJeztah/1.6_bump_imgcrypt - 7ede40c5c [release/1.6] vendor: github.com/containerd/imgcrypt v1.1.4 - 264371e06 Merge pull request #6728 from thaJeztah/1.6_backport_update_go_cni_to_v1.1.4 - bee69923e Merge pull request #6732 from thaJeztah/1.6_backport_update_prom_dep - 5a760443c Merge pull request #6731 from thaJeztah/1.6_backport_xfs - de12f3717 Merge pull request #6730 from thaJeztah/1.6_backport_improve_container_mount - ddbe66cac Merge pull request #6727 from thaJeztah/1.6_backport_snapshot_deadlocks - fc14cfddd Merge pull request #6734 from AkihiroSuda/cherrypick-6323-1.6 - 5538be6cf cgroup2: monitor OOMKill instead of OOM to prevent missing container OOM events - da35c19da Test turning off golang CI lint cache - de8046a55 Merge pull request #6725 from dmcgowan/prepare-v1.6.2 - a0213573b Add nolint:staticcheck to platform-specific calls - ad0036ed6 Update prometheus client vendor - c7bbf316f Mount devmapper xfs file system with "nouuid" option. - a1de89c3e Make the temp mount as ready only in container WithVolumes - 82a12edf2 moving up to go-cni v1.1.4 - 28b44826b native: fix deadlock from leaving transactions open - 8461dd6e5 Prepare release notes for v1.6.2 - 91800c4e9 Add static checks to shim for Windows - 8a36855c6 Merge pull request #6724 from dmcgowan/1.6-update-go-mod - ca51d7f85 Update go.mod go version - 82c43268f Merge pull request #6717 from thaJeztah/1.6_remove_empty_mod - 765df6609 [release/1.6] remove empty go mod to allow building for go 1.18 - 921cf570e Merge pull request from GHSA-c9cp-9c75-9v8c - e9af80859 Fix the Inheritable capability defaults. - 104824c3d Merge pull request #6673 from estesp/cp-6569 - 7c929318a Update TestNormalize to only test Windows - 7c9082e97 Merge pull request #6675 from estesp/cp-6666 - 06985e7d0 Upgrade golangci-lint and its GitHub Action - d12516713 Merge pull request #6623 from kzys/fix-6611 - b13d3e05c cri: relax test for system without hugetlb - ff6a78445 Merge pull request #6620 from thaJeztah/1.6_backport_bump_go_1.17.8 - b325d5647 update to go 1.16.15, 1.17.8 to address CVE-2022-24921 - 10f428dac Merge pull request #6607 from dmcgowan/prepare-v1.6.1 - 787b4671d Prepare release notes for v1.6.1 - 075cfdff6 Merge pull request from GHSA-crp2-qrr5-8pq7 - 7078e50e2 Merge pull request #6572 from fuweid/cp-1.6-6452-6571 - 444eba43d containerd-shim-runc-v1: return init pid when clean dead shim - 37bb915c6 containerd-shim-runc-v2: return init pid when clean dead shim - 9f316fa4b Use fs.RootPath when mounting volumes - 39259a8f3 Merge pull request #6531 from dmcgowan/prepare-v1.6.0 - 8713c0472 Prepare release notes for v1.6.0 - b73979f11 Merge pull request #6555 from thaJeztah/bump_go_1.17.7 - f261498e0 Update Go to 1.16.14, 1.17.7 - de8c9651b Merge pull request #6533 from a2ush/modify-cri-architecture-doc - 7efd485b6 Merge pull request #6543 from dmcgowan/update-cni-v1.1.2 - fa19714db Update go-cni to v1.1.3 - e0fc9fe44 Merge pull request #6544 from bobbypage/cloudinit - 6e3cc28a6 Wait for containerd installation in GCE scripts - c0f818846 Update go-cni to v1.1.2 - a7f43c892 Merge pull request #6540 from gabriel-samfira/enable-tests-on-windows - e2c5f8f93 Merge pull request #6500 from NickJackolson/nickjackolson/docupdate - dea7ae27a Add instructions on using go with admin perms - 4f0d5f0ee Enable TestContainerPTY and TestContainerUsername - 0340e84cd Merge pull request #6537 from dmcgowan/prepare-v1.6.0-rc.4 - 732103271 Change the context to avoid misunderstandings - 6827eec7a Prepare release notes for v1.6.0-rc.4 - eb011d127 Merge pull request #6536 from mxpv/runtime-name - b0623a06e Change file name for shim binary path - e8a5a5443 Merge pull request #6532 from egernst/image-param-for-ctr-stress - a9f61ba2c Merge pull request #6524 from dmcgowan/prepare-1.6.0-rc.3 - 1a3efb5cd Merge pull request #6529 from Gorgonx7/dark-light-mode-logo - daaf031e2 Use white logo in github dark mode - efc6ca4c4 Prepare release notes for v1.6.0-rc.3 - 6a628b64a Merge pull request #6514 from marquiz/fixes/rdt - 33b7f779a Merge pull request #6504 from jepio/jepio/pkg-oom-v2-quiet-shutdown - d1c3b751c Merge pull request #6523 from fuweid/fix-6484 - 2a588a619 Merge pull request #6518 from egernst/ctr-stress-exec-fixup - 7e821fb61 fix: .dockerignore makes git working tree dirty - ac2692d30 containerd-stress: introduce option for specifying image - 8b9571e34 containerd-stress: start task ctr before starting execs - 9b1fb8258 cri: fix handling of ignore_rdt_not_enabled_errors config option - 4f5ce5615 Merge pull request #6501 from henry118/issue6499 - a5d093991 Merge pull request #6510 from smira/adoption-talos - dcbe3e471 docs: add Talos Linux to the list of adopters - 943ca856a Merge pull request #6502 from dmcgowan/prepare-1.6.0-rc.2 - 821c961c8 pkg/oom/v2: handle EventChan routine shutdown quietly - 2d9d5fddb Document fs_type and fs_options in snapshots/devmapper/README.md - 604c462d7 Merge pull request #6497 from thaJeztah/platform_keep_osversion_osfeatures - 9a08d6fcd Merge pull request #6457 from kzys/otel-http - a31e28e2c Prepare release notes for v1.6.0-rc.2 - 8944c12f5 Update releases document - 75d594834 Merge pull request #6498 from dmcgowan/update-cgroups-1_0_3 - d6a576ae6 Merge pull request #6494 from AkihiroSuda/seccomp-5.16 - 05177ab5c Merge pull request #6243 from ktock/pusher-abort - 8d69c041c Update cgroups to v1.0.3 - bec6e4dd6 platforms.Normalize(): do not reset OSVersion and OSFeatures - 34f717349 seccomp: kernel 5.16 (futex_waitv) - 8632bdcb7 seccomp: kernel 5.15 (process_mrelease) - c013db696 seccomp: kernel 5.14 (quotactl_fd, memfd_secret) - 17a2831f7 seccomp: kernel 5.13 (landlock_{add_rule,create_ruleset,restrict_self}) - 1329ea371 seccomp: kernel 5.12 (mount_setattr) - 52b8ca554 Merge pull request #6411 from nmeum/swapcontext - c2cb58922 Merge pull request #6478 from fuweid/enhance-no-sync-during-create - e178d831e Merge pull request #6475 from estesp/import-correct-media-type - 82af36e59 Merge pull request #5828 from cpuguy83/shimv2_exit_on_signals - cc59ae4d9 tracing: return (ctx, span) from StartSpan - e751f1f44 tracing: support OTLP/HTTP in addition to gRPC - 9c676e98d Merge pull request #6481 from Junnplus/acr-400 - 813a061fe oci: use readonly mount to read user/group info - a43703fcb Merge pull request #6455 from tonistiigi/amd64-variants - c0e00f19a fix acr fetch token 400 - 3f5d789df Merge pull request #6476 from gabriel-samfira/various-periodic-fixes - 4cd9f37f5 Fix windows periodic workflow - 4aff7431f Fix possibly incorrect media type default on import - 3ffb6a611 shimv2: handle sigint/sigterm - 2986d5b07 Merge pull request #6473 from kzys/gc-docs - f048a2593 docs: add doc-comments on GC-related methods - 731518417 Merge pull request #6465 from fuweid/fix-issue-6429 - 31a710c49 fix: should not send 137 code event if cmd is notfound - ab8d99cf4 Merge pull request #6463 from Junnplus/empty-scope - 936faf9c9 fix empty scopes return - ad771115b Merge pull request #6462 from dmcgowan/prepare-1.6.0-rc.1 - 62f6c8175 Merge pull request #6424 from cpuguy83/nondist-blob-push - c1e17d8ba Prepare release notes for v1.6.0-rc.1 - 60703af9f Merge pull request #6461 from dmcgowan/ci-compile-go-1.16 - a37209766 Merge pull request #6432 from dmcgowan/fix-introspection-service - f2c2d0768 Merge pull request #6458 from dcantah/change-to-constant-win2022 - 4f552b077 Compile binaries for go1.16 and go1.17 in CI - 762b01896 Merge pull request #6460 from dmcgowan/update-kubernetes-vendors-0.22 - 7d7064e6b Integration: Change to Windows Server 2022 build number constant - 13b804c10 Merge pull request #6459 from dmcgowan/fix-rdt-build-tags - 2898004a5 Update kubernetes vendor to 0.22.5 - 5089b1210 Merge pull request #6439 from dmcgowan/remove-submodule-go-mod - 4e9e14c2b Fix rdt build tags for go 1.16 - 778da8bae Merge pull request #6453 from dcantah/bump-hcsshim-0.9.2 - f0afdea2a Merge pull request #6375 from AkihiroSuda/runc-1.1.0 - af83e9af1 platforms: add support for matching amd64 variants - af39d2ad7 go.mod: Update hcsshim to v0.9.2 - fcb7bd699 Remove api go submodule - 46312f4a1 Update makefile to remove API submodule - fd35ca235 Merge pull request #6443 from kzys/otel-fix - 2b8386e0d Merge pull request #6386 from kzys/codeql-pr - 297115dd3 Merge pull request #6445 from cpuguy83/disable-client-trace - 6eff8392c Merge pull request #6451 from ningmingxiao/dev7 - ed0828bb6 delete useless code - 21a748e38 go.mod: github.com/opencontainers/runc v1.1.0 - dba897c35 update runc binary to v1.1.0 - d5e8edf2d Do not automatically inject client traces - 140ecc924 Merge pull request #6440 from IRCody/revert_shared_namespace - 69ae95531 tracing: fix OTLP tracer's initialization - 8dd36423b Revert "Add shared content label to namespaces" - c3177caf0 Merge pull request #6435 from alunsin/dev/build-image-for-ppc64le - 2311f1e5f Merge pull request #6427 from lining2020x/main - 6e211a774 Merge pull request #6431 from dmcgowan/prepare-1.6.0-rc.0 - a1ba38056 Update caching logic to avoid map access - ce3871966 services/introspection: support to show introspection grpc service - 30a60663f Merge pull request #6397 from aznashwan/windows-integration-gcloud-auth-action - a018ae3f6 Prepare release notes for v1.6.0-rc.0 - 919797163 Integration: Switch to `upload-cloud-storage` Gcloud action. - 8a2b61356 Integration: Switch to using `auth` Gcloud action in Windows workflow. - bce18cb04 Merge pull request #6426 from ningmingxiao/dev6 - c0a31a7a4 Add ppc64 support for test images - a303d552a ctr: Unify the delete subcommand alias - b35fb7d44 remove io/ioutil - d05194f0a ctr: flag to toggle non-distributable blob push - f77989036 Add image handler to skip non-distributable blobs. - 8c194d8f3 gha: run CodeQL scan on pull requests - 62a4e7020 Merge pull request #6418 from bobbypage/cgroupv2-cos-fix - 4cbd366f9 Merge pull request #6378 from aznashwan/windows-integration-enable-2022 - f99e92359 Enable critest tests on Windows Server 2022. - 55b89eabf Parametrize CRITest test images in Windows Periodic workflow. - 35b96f9b1 Merge pull request #6415 from dmcgowan/contrib-apparmor-cleanup - e4bf68633 Merge pull request #6419 from sachaos/feature/fix-wrong-log-message - 18592b2f5 Fix wrong log message - bdc852190 test: e2e node COS cgroupv2 script - ee326447e Merge pull request #6414 from dmcgowan/followup-errors-change - 468513820 Merge pull request #6351 from adisky/update-k/k-1.23 - 9028832e4 Merge pull request #6416 from marosset/adopters-azure - e38946d86 Updating adoption of containerd for AKS - c124253e0 Merge pull request #6413 from SergeyKanzhelev/patch-1 - 647308bc4 Merge pull request #6410 from AkihiroSuda/update-go-mod-20220107 - 8aca314dd Update error message for apparmor parser - 48c7529de Fix incorrect error wrapped when closing ingest file - 0c2c289d4 Fix seek error used without nil check - 8816006d1 Fix followup items from errors replacement - 77d53d2d2 Merge pull request #6366 from jonyhy96/feat-errors-replace - a94f32ce0 update the adoption status of containerd in GKE - adee2c797 seccomp: add support for "swapcontext" syscall in default policy - 72d2913c8 Merge pull request #6412 from jklippel/correct-link-in-documentation - 4f0f36350 corrected link in cri architecture documentation - d3724a6c1 go.mod: update github.com/containerd/{continuity,go-cni,imgcrypt} - bbe46b8c4 feat: replace github.com/pkg/errors to errors - 3ccd43c8f Merge pull request #6396 from AkihiroSuda/refresh-token - 857b35de6 Merge pull request #6407 from dmcgowan/prepare-1.6.0-beta.5 - e43d4206a Update k/k to 1.23.0 - 8d5af6be8 Prepare release notes for v1.6.0-beta.5 - 1b8af3752 Merge pull request #6292 from aznashwan/windows-integration-conditional-artefact-upload - 644a01e13 Merge pull request from GHSA-mvff-h3cj-wj9c - 893701220 Merge pull request #5439 from marquiz/devel/rdt - 9c2e3835f cri: add ignore_rdt_not_enabled_errors config option - eba104816 Update dependencies - f4a191917 cri: annotations for controlling RDT class - eae14688c tasks: add Linux rdt support - 9e755d12e cmd: add --rdt-class command line option - 2946db890 oci: implement WithRdt - 4045b7ce8 Merge pull request #6391 from jonyhy96/fix-placeholder - fcf956a9e Merge pull request #6403 from tklauser/timespec-unix - 07aa42f42 Merge pull request #6207 from marquiz/devel/docs - bf60e2d17 Merge pull request #6304 from lippertmarkus/fix-ctr-cni-windows - df21828d2 content/local: use syscall.Timespec.Unix - ff7fd4eb2 Merge pull request #6394 from dcantah/fix-makefile - 3ab676ce2 Merge pull request #6395 from jonyhy96/fix-abstract - 85326d76f fix: only test abstract unix socket on linux - 90426378e Integration: Check GCP secrets on Windows CI artifact upload. - 97623ab0c remotes/docker: allow fetching "refresh token" (aka "identity token") - 1a078e689 Merge pull request #6390 from gabriel-samfira/fix-restart-container-test - 8094f50dd remotes/docker/config: allow setting custom AuthorizerOpts - 8e6afaa20 Fix $(PWD) issue for Windows makefile - 653b8b02a Expect ErrorNotFound on Windows after Kill() - ac8129706 fix: use _ for consistency - f39b3ac7e fix(ctr): enable networking for Windows containers - 653f2f1ce Merge pull request #6291 from ningmingxiao/dev1 - 3ae95e78a Merge pull request #6384 from dcantah/fix-nodaemon - 0ff87a892 Replace tskill with taskkill - fd07b0368 Merge pull request #6122 from alakesh/ext4_lazy - f41e5c7e1 Merge pull request #6385 from gabriel-samfira/fix-list-stats-flake - e0a433abf Merge pull request #6347 from gabriel-samfira/fix-windows-test-setup - aadae6d50 Fix flakiness on Windows for list stats - d53c43133 Fix no-daemon flag for integration/client tests - b93119501 Merge pull request #6383 from kzys/otel-upgrade - 5c2edeffb Upgrade k8s.io/klog/v2 from 2.9.0 to 2.20.0 - 2ee3ce510 Use insecure.NewCredentials instead of grpc.WithInsecure - 2fb739aa2 Upgrade OpenTelemetry dependencies - 28ffedd06 Merge pull request #6322 from dcantah/fix-makefile-windows - 34c4abc34 Fix default makefile target for windows - e6dd97d9d Merge pull request #6379 from dcantah/disable-TestContainerHook-Windows - 2c9d80aba Merge pull request #6372 from fidencio/wip/seutil-fix-container_kvm_t-type-detection - 78ad7a2d3 cri-integration: Add Windows default paths - abcf7c2f6 Disable TestContainerHook on Windows - 3c3486f91 Merge pull request #6350 from aznashwan/windows-integration-disable-2004 - 89437597a Merge pull request #6308 from thaJeztah/rootless_devices - 949db5721 Merge pull request #6320 from endocrimes/dani/cri-swap - 0def0dbec Merge pull request #6275 from gabriel-samfira/enable-volume-ownership-test - d0da25cf5 Merge pull request #6296 from dmcgowan/prepare-1.6.0-beta.4 - 330961c2d Merge pull request #6358 from jonyhy96/feat-error - d47fa40d1 Merge pull request #6021 from dmcgowan/runc-shim-plugin - ac531108a Merge pull request #6155 from egernst/cri-update-for-sandbox-sizing - 7d268f712 Merge pull request #6354 from kzys/ns-snapshot - f1c799331 seutil: Fix setting the "container_kvm_t" label - 5bd38c6a1 Merge pull request #6373 from minbaev/add-list-stat - c8a009d18 add-list-stat: return container list if filter is nil - d977f77a5 Merge pull request #6369 from fuweid/fix_test_case - f83ab813d Use task plugin for runc shim - 04e57d71b Seperate shim manager and task service - 44b28b61f medatada: make namespaces' deletion error less cryptic - 20419feaa cri, sandbox: pass sandbox resource details if available, applicable - 6e9e75955 Merge pull request #6225 from jonyhy96/feat-blot-open-timeout - 9e9ee66bf integration: deflake TestContainerdRestart - dd26d3d09 feat: support custom timeout for blot open - c0d07094b feat: Errorf usage - 7fa44fc98 Merge pull request #6333 from thaJeztah/bump_go_1.17.4 - 0e472420b Update Go to 1.17.5 - 569042e6d Prepare release notes for v1.6.0-beta.4 - 4236f6b22 Merge pull request #6332 from thaJeztah/consistent_import_alias - 1057ed385 Merge pull request #6364 from dmcgowan/disable-restart-monitor-test-windows - 552a27081 Disable restart monitor test in Windows - a95a8b8ff Merge pull request #6338 from kzys/windows-fail-fast - b7f673790 OCI: Mount (accessible) host devices in privileged rootless containers - 7f70ff967 oci.getDevices(): move "non-dir, non '/dev/console'" case into switch - 95b83fa54 Merge pull request #6355 from dmcgowan/integration-client-restart-daemon-output - 2c96d5b06 Run windows parallel integration test as short - 807213fd3 Update restart monitor test to output daemon logs on failure - 26d356d09 Merge pull request #6263 from thaJeztah/bump_oci_specs - 9b0303913 only relabel cri managed host mounts - 90cdc6c9a images/converter: remove deprecated types - fc8138468 go.mod: update image-spec to latest (v1.0.3-dev) - 2d3009038 cri/server: use consistent alias for pkg/ioutil - a04656c1d Merge pull request #6353 from mxpv/gids - f9cfadcdd Merge pull request #6303 from jsturtevant/fix-rg-timestamp - dc13bcd51 Enable lazy init for ext4 with devicemapper - 68dabdcc6 Use RFC3339 format so rg cleanup works - 6f9d80907 Remove Windows integration testing for 2004. - 77a321a07 Replace find with native Go code - 22dc60e05 Enable TestVolumeOwnership on Windows - 441bcb56d Skip WithAdditionalGIDs on Darwin - 4c1e26cd5 Don't fail-fast on Windows integration tests - 753f95e23 Merge pull request #6330 from AkihiroSuda/runc-1.0.3 - 1c32c00fe Merge pull request #6329 from mxpv/mac - c9d1e155c go.mod: github.com/opencontainers/runc v1.0.3 - 44995d483 update runc binary to v1.0.3 - 416899fc8 Allow native snapshotter on Darwin - 292b0c156 Merge pull request #6328 from kzys/go-install - 4af023480 Merge pull request #6326 from mxpv/builtins - 6b0e2414c Do not use `go get` to install executables - d2f1dda0f Include runtime v2 in default builtins - d06bce4d3 Merge pull request #6314 from dcantah/ws2022-ci - d74245308 Merge pull request #6324 from gabriel-samfira/set-explicit-acl - 2c1f51781 Merge pull request #6311 from thaJeztah/update_test_image - 072177796 Merge pull request #6325 from gabriel-samfira/set-containerd-root - e0e605cf3 Merge pull request #6312 from thaJeztah/export_DeviceFromPath - 392f604eb Use a single RUN command - 533dd1c0e fixup: check for swap accounting - f33d38c7c integration: align tags of test images - c5b0a18b6 fixup: handle diff between cgroupsv1 and v2 - 9cc0d1f07 Set explicit ACL on test files - 4ccf287da Set CONTAINERD_ROOT in Windows cri-integration - 106086d65 Merge pull request #6321 from gabriel-samfira/update-volume-test-images - ff77dd112 Add Windows Server 2022 CI runs - fd0850e9e Update continuity dependency - ff9d7aef3 Update volume test images - 08812f3fb Merge pull request #6201 from dmcgowan/test-restart-monitor-check-timestamp - 2fa4e9c0e cri: add support for configuring swap - 8063fdab0 Merge pull request #6319 from dmcgowan/update-windows-integration-image-to-ghcr - bae0d88ae Add error logging on cleanup - d43a90b98 Merge pull request #6301 from mxpv/migration - 6bccd67e8 Revert shim plugin migration - 665877a5b Move volume images from gcr to ghcr - 2190192b5 Merge pull request #6317 from gabriel-samfira/add-github-packages-login - 323a62d7b Add permissions - f3195b3b5 export oci.DeviceFromPath() - 16c233b6d Merge pull request #6306 from thaJeztah/update_oci_getdevices - c6d26f0d3 Authenticate against ghcr.io - 30d8dccd3 Merge pull request #6315 from dcantah/skip-multilayertest-windows - 2a6857d06 Skip TestExportAndImportMultiLayer on Windows - 6ff1a5934 fix when kernel version < 4.13rc1 by using index=off cause overlay test error - 94462d8f5 oci/deviceFromPath(): correctly check device types - 591d7097e Merge pull request #6290 from gabriel-samfira/add-test-image-build-action - f419d4a0a Merge pull request #6286 from aznashwan/windows-integration-separate-trigger - 3d1c85d95 Merge pull request #6274 from gabriel-samfira/build-image-on-windows - 2a36dcdda Merge pull request #6297 from adisky/patch-2 - 7a4415dd5 Add VMware TKG & TCE to Containerd adopters - 8757b92c7 Merge pull request #6293 from AkihiroSuda/fedora35 - 1fe214c22 Merge pull request #6269 from estesp/test-ci-readme - 46892d340 Vagrantfile: update to Fedora 35 - 2877865a9 Merge pull request #6278 from mxpv/resolve - 9e7910ebd Merge pull request #6271 from fuweid/move_stdout_to_stderr - 0d720ff9c Merge pull request #6289 from ManaSugi/add-ctr-caps - 7cfccdbad Merge pull request #6270 from fuweid/enhance_test_case - 8de1117c9 integration: add stats result in error message - 6681cc4b9 ctr/snapshots/diff: don't show the media-type in output - a97564411 remotes: fix dockerPusher to handle abort correctly - 1698d061c Build volume test images on Windows - 7ccd733d2 Add image build workflow - 95b3ab2a4 ctr: Add Linux Capabilities control flags - ff1a105d7 Merge pull request #6287 from samuelkarp/1.4-extended-docs - 3d318b3bb docs: mark 1.4 as Extended - 9a994877c docs: fix RELEASES.md gRPC API anchor - 0a25bc1aa Integration: Separate Windows Periodic Tests workflow trigger. - 0a284fcdb Merge pull request #6284 from jonyhy96/feat-ci-skip-fork - 507bfc91b feat: skip ci for fork - cf6f19cea Merge pull request #6280 from wzshiming/fix/close-with-seek-fail - 72384a653 Merge pull request #6268 from aznashwan/windows-ci-autodetect-az-cli - 9dfbcbbc4 content/local: Close the file if Seek fails - 5015130f7 Fix executable file not found when restoring shims - 51e60404a Merge pull request #6276 from sachaos/feature/fix-wrong-document-about-make-install-deps - 2b28dd363 Fix wrong make target on documentation - cb1359fa8 Integration: Remove explicit version passing to `azure/CLI`. - b6b8facf1 Merge pull request #6272 from jonyhy96/fix-error-return - fa6759ae5 fix: server error return - 1a88cf524 Merge pull request #6267 from dmcgowan/prepare-v1.6.0-beta.3 - 5e4b033ec Update README.md repo->org - db9c6fc72 Merge pull request #6254 from jonyhy96/feat-support-callopts - 69822aa93 Merge pull request #6258 from wllenyj/fix-registry-panic - 5f293d9ac [CRI] Fix panic when registry.mirrors use localhost - af93ea7f1 Merge pull request #6241 from jterry75/main - 674b94c42 Prepare release notes for v1.6.0-beta.3 - f5863e22f Update API version in go.mod - 5df9ec366 Update release name to use consistent format - aa2733c20 Merge pull request #6170 from olljanat/default-sysctls - f8d734e40 fix: make max recv/send msg size setting default - a776a27af Merge pull request from GHSA-5j5w-g665-5m35 - 9afc778b7 Merge pull request #6111 from crosbymichael/latency-metrics - 63895de45 Add support for TMP override on toml - 4aea5da85 Merge pull request #6255 from aznashwan/generalize-windows-ci-setup-user - 7758cdc09 Merge pull request #6253 from jonyhy96/feat-rwmutex - 444ef2f6d Generalize Windows CI setup script for any user. - 3d6bfa3f5 Standardize cmdlet capitalization in Windows CI scripts. - 6835a9470 Split runc shim into plugin components - 6eea8f3f6 Add shutdown package - 547040cd5 feat:support custom callopts on client side - bef792b96 feat: use rwmutex instead - d055487b0 Merge pull request #6206 from mxpv/path - 77e76d7a5 Merge pull request #6246 from wzshiming/fix/close-file-with-modify-perm - eee8c969d Merge pull request #6250 from cpuguy83/fix_release_tar_name - 2f31dcda7 release: change tar name to match prior releases - 70c88f507 schema1: reject ambiguous documents - eb9ba7ed8 images: validate document type before unmarshal - 2a81c9f67 CRI: Support enable_unprivileged_icmp and enable_unprivileged_ports options - db124c560 Close file if permission modification fails - 5b09dc5eb Merge pull request #6237 from cpuguy83/fix_wrong_restore_error - aa1b07361 Merge pull request #6221 from ktock/urls-fallback - 526defb57 Fix containerd fails to pull OCI image with non-`http(s)://` urls - 89eebc4c0 Fix wrong error returned for image index lookup - bd81f8a39 Merge pull request #6223 from dmcgowan/v1.6.0-beta.2 - bd30398f4 Merge pull request #6196 from cpuguy83/add_arm64_release - be84932e1 Rename release dockerfile to omit distro name - 28126fd60 release: improve dockerfile - 27d7c5038 Add arm64 to releases - 7ad570964 Merge pull request #6236 from crosbymichael/cri-panic - 6765524b7 use write lock when updating container stats - 9093c1c69 Merge pull request #6230 from dcantah/update-hcsshim-0.9.1 - b103bee4c go.mod: Bump hcsshim to v0.9.1 - e17fe37e0 Fix package alias - 60c55c80f Merge pull request #6228 from dcantah/update-ttrpc-1.1.0 - 920b24793 go.mod: Bump ttrpc to 1.1.0 - 6870f3b1b Support custom runtime path when launching tasks - 91bbaf679 [cri] add sandbox and container latency metrics - 195def141 Merge pull request #6213 from thaJeztah/bump_moby_sys - 4b7cc560b Merge pull request #6222 from jonyhy96/add-more-description - a3b756ce1 Prepare release notes for v1.6.0-beta.2 - 574800633 cleanup: add more description on comment - 432ddecaa Merge pull request #6211 from thaJeztah/bump_go_1.17.3 - 76a63427e Merge pull request #6214 from AkihiroSuda/crun-1.3 - a22346622 CI: bump up crun: 1.0 -> 1.3 - 97073c943 go.mod: github.com/moby/sys/mountinfo v0.5.0 - 19d9d0d2a go.mod: github.com/moby/sys/signal v0.6.0 - 9c455ded6 go.mod: github.com/moby/sys/symlink v0.2.0 - fa12f4e69 go.mod: golang.org/x/sys v0.0.0-20211025201205-69cdffdb9359 - 869ccc01c Update Go to 1.17.3 - d41866088 Merge pull request #6205 from gabriel-samfira/pin-azcli-version - 3196e65f5 docs: document the runtime shim plugin config options - 0d8e07681 docs: use proper markdown lists in containerd-config.toml.5.md - 54c0cdae6 Update TestRestartMonitor expected time check - d4f4c1380 Add runtime path in CreateTaskRequest - b5b83e051 Merge pull request #5918 from mxpv/shim-manager - 548579d0e Pin az CLI version - bfc714d3a Merge pull request #6113 from bobbypage/cri-stats - 2e6d5709e Implement CRI container and pods stats - b69bbe25a Vendor latest k8s.io/cri-api and netlink - 1e36eaf11 Merge pull request #6200 from bobbypage/restart_integration_test - fd07d74d6 Merge pull request #6179 from claudiubelu/integration/enable-test-runtime-handler - 9bfec3980 test: Add grace period for restart monitor test - 0478e04ae Merge pull request #6171 from EGuesnet/Dockerfile_mkdir - 702071964 Merge pull request #6189 from fuweid/followup-6166 - d022fbe78 Address PR comments - 82cb0a63e Add mkdir on Dockerfile - 11ed34067 Merge pull request #6184 from mikebrow/network-setup-logging - 27e3dba36 Merge pull request #6176 from ktock/converter-hook - cc5a4c829 Merge pull request #6177 from dkkb/feature/zstd_with_skippable_frame - 6fa1bb4a5 Fix build after rebase - 2cec3a34b Migrate task directory - 8b788d9df Expose shim process interface - 733519677 Fix after rebase - df8c206a9 Cleanup shim loading - b554b577b Move shim restore to a separate file - a3d298193 Fix backward compatibility with old task shims - 33786ee4d Add plugin dependency between shim and shim services - fb5f6ce3c Rework task create and cleanup flow - 7c4ead285 Add task manager - 2d5d3541e Rename task manager to shim manager - ea8978810 adds additional debug out to timebox cni setup - c8e88447a Merge pull request #6182 from claudiubelu/integration/windows-test-volume-copy-up - 6fa9f22fa compression: support zstd with skippable frame - f0d3ea96c converter: Allow hooks during image conversion - 6ee8577e5 sys/reaper: avoid leaky goroutine when exec timeout - d0bdb0b65 Merge pull request #6121 from claudiubelu/integration/enables-windows-tests-part-2 - d97b40c30 Merge pull request #6085 from claudiubelu/integration/enables-windows-tests - dc869b785 Merge pull request #6125 from xens/update_doc_to_v2 - 185c0fb94 Merge pull request #6166 from botieking98/fix-wait-block - 0800b45dd Merge pull request #6145 from tonistiigi/content-close-fix - 64f7abd69 Merge pull request #6165 from jmacelroy/main - 88fc5cf2d Adding scope tests for ParseAuthHeader - 720781830 Merge pull request #6167 from claudiubelu/update-go-cni - 3e51312a6 fix shim reaper wait command execute blocked - aa65faebd Merge pull request #6159 from claudiubelu/commands/tasks-metrics-windows - 7438edc7e Adding tests for GenerateTokenOptions - 9b4a6f129 Generate token options with each scope as a separate string. - 0d0fb6858 Merge pull request #6149 from ukontainer/vendor-moby-sys - b8f3ebb03 vendor: update moby/sys for darwin support - 45c529870 Merge pull request #6144 from dmcgowan/prepare-v1.6.0-beta.1 - 0ccc386c8 Prepare release notes for v1.6.0-beta.1 - e5fc3b38e Update mailmap - 37720fc6f Update api vendor - fc5c51d5f Merge pull request #6136 from zouyee/cni100 - a217b5ac8 bump CNI to spec v1.0.0 - 010a9e2bc content: close stream after commit request - 006b44181 Merge pull request #5992 from cpuguy83/client_otel_trace - ebc5cf19a feat(doc): update to version 2 syntax - 294143bf3 Inject otel traces to grpc client. - 51de1d3a4 Merge pull request #6142 from AkihiroSuda/client-expose-image-platform - cd2f2b0af client: expose (*image).platform - ac5790c8e Merge pull request #6128 from xens/feat/doc_sched_core - 3f26fd22e Merge pull request #6130 from cpuguy83/inject-ns-to-rpc - f44d4cf8c Merge pull request #6109 from timchenxiaoyu/githubdev - 9c488e5da Merge pull request #6124 from samj1912/large-labels - 535191abf fix #6054 MaxConcurrentDownloads is not effect when Unpack is true - 59ca4bfd7 Merge pull request #6132 from dcantah/wcow-snapshotter-spelling - 3b73922fb feat(doc): add Core Scheduling documentation - c18c2e735 Fix spelling mistake in Windows snapshotter - 4da5d94da Merge pull request #6126 from claudiubelu/cleanup-wcow-layers - 130a9c7dd Ensure namespace is proxied to grpc/ttrpc plugins - 2a8dac12a Output a warning for label image labels instead of erroring - 10d9d1a60 Merge pull request #6118 from zouyee/ioutil - 602018900 integration: Enable some tests for Windows - 1f1cad391 io/ioutil package has been deprecated in Go 1.16 that replaces io/ioutil functions - 085572537 Merge pull request #6115 from zouyee/utest - 3f417d61e Merge pull request #5778 from claudiubelu/windows/adds-resource-limits - 46be06937 close Writer after use which may leak mem - 5b29542cb Merge pull request #6098 from dmcgowan/prepare-1.6.0-beta.0 - 37e9efbe6 Merge pull request #6105 from dmcgowan/test-add-error-testcontainerdrestart - 2e3c8d5e6 Merge pull request #6110 from rgl/rgl-new-container-doc-typo - 1abe50512 Prepare release notes for v1.6.0-beta.0 - c5947557d Add error message to in TestContainerdRestart integration test - 6927fc327 Merge pull request #6104 from dmcgowan/update-cgroups - 072a7074b Fix typo in the NewContainer function documentation - 193bafc42 Merge pull request #6100 from jonyhy96/cleanup-test - ac2df3ba9 test: check file content after mount - 18d483b23 Update cgroups to v1.0.2 - a4663097e Merge pull request #6107 from estesp/test-timeout - 4ed3c524c Update test timeout based on recent cancellations - 3f033aeff Merge pull request #6106 from dmcgowan/test-cri-teardown-check-pid - d252a293d Remove extra test_teardown - 4a569c889 Check the pid in cri test teardown - cb6fb93af Merge pull request #6011 from crosbymichael/schedcore - 60ffa3ff7 Merge pull request #5579 from claudiubelu/integration/restart-containerd - c01ebe7cf Merge pull request #6099 from dcantah/update-hcsshim-0.9 - 26ee1b1ee Merge pull request #4695 from crosbymichael/cri-class - f1054dbbd fix integration client vendor - e48bbe839 add runc shim support for sched core - 88e1cf5fb Merge pull request #6102 from thaJeztah/bump_go_1.17.2 - de1a39bf3 Update Go to 1.17.2 - 46b152f81 vendor: Bump hcsshim to 0.9.0 - fb4432c24 integration: Enables TestVolumeCopyUp for Windows - 0ba3532f5 integration: Enables TestRuntimeHandler for Windows - e648fa2e8 Merge pull request #5933 from claudiubelu/integration/import-multilayer - 2d48b6a86 Merge pull request #6031 from fuweid/carry-5648 - 7b8a697f2 Merge pull request #6034 from claudiubelu/windows/fixes-image-volume - 830b3c26e integration: Enable some tests for Windows (part 2) - 228265688 Merge pull request #6094 from zouyee/go117 - 3a713811b run `gofmt` with Go 1.17 - 7b2a5f1c0 Merge pull request #6088 from AkihiroSuda/pkg-cap-fix-comment - 6e5ce1486 Merge pull request #6066 from cpuguy83/fix_tracing_attrs_usage - 96018b7db vendor: Updates go-cni - 703b86533 pkg/cap: remove an outdated comment - 1ee2bff0e Update go otel 1.0.1 - 79e35892c Merge pull request #6086 from estesp/add-adopters - 97e201640 Merge pull request #6082 from Dragoncell/cgroupv2_fix - b9a0c5080 modify the way for checking cos - c528d2c39 Update ADOPTERS.md with additional uses - 5b222d54a commands: Enables task metrics for Windows - d193dc2b8 Merge pull request #5915 from AdamKorcz/fuzz12 - 4acb18c95 Merge pull request #6081 from adelina-t/fix_tests - 3f00006f7 Merge pull request from GHSA-c2h3-6mxw-7mvq - 9734b4039 Pin mingw to version 10.2.0 - d19af5afb Update to golang 1.17.1 - 3cb0ec01e Install nssm - 64291df71 Merge pull request #6079 from cpuguy83/correct_task_error - 63b7e5771 Merge pull request #5973 from Juneezee/deprecate-ioutil - 02e77bcdc task service: return known error type - 791e175c7 Windows: Fixes Windows containers with image volumes - fbdcddedc Merge pull request #6076 from jonyhy96/cleanup-import - c76c9f2cc Merge pull request #6069 from jonyhy96/feat-grpc-options - 049042382 fix: update vendor - 5c2426a7b cleanup: import from k8s.io/utils/clock/testing instead - 6484fab1e cleanup: import from k8s.io/utils/clock instead - d16942cf1 feat: enable cri remote client to call with grpc calloptions - a06a0990e Merge pull request #6074 from mikebrow/cleanup - ca35f4e82 Windows: Cleanup rm- prefixed layers - f6b7e07fd cleanup k8s ansible yaml (carry for https://github.com/jayonlau <[email protected]>) - f90ebaf1c Merge pull request #6070 from jonyhy96/feat-import-platform - 96fda588b Merge pull request #6065 from dmcgowan/mirror-action-custom-tag - 933ddaa6f fix: wrong flag type - da16d492c feat: support import image for specific platform - d132691f1 Merge pull request #6059 from jonyhy96/feat-cmd-flag - 67b883146 Update mirror images to take target image name - e6ddffc2a fix: make exec-id flag required in exec command - 0f27a423e Merge pull request #6052 from ktock/uncompress-compression-pkg - 6416cc35c Merge pull request #5922 from zouyee/replace - 09c9270fe images: enable converter to uncompress zstd - 5162238c7 Merge pull request #5853 from claudiubelu/integration/windows-hostprocess - 694a00754 replace deprecated function - f40df655c Merge pull request #6047 from ktock/fix-build-main - 2bc77b8a2 Adds Windows resource limits support - 224454062 Fix main branch build is broken - 22beecb7d Merge pull request #6003 from cpuguy83/add_otel_log_hook - efc90baf5 Merge pull request #6023 from dcantah/fix-lcow-withusername - 7c621e1fc btrfs: reduce permissions on plugin directories - 4921fb6b6 Merge pull request #5946 from zouyee/errors - fcffe0c83 switch usage directly to errdefs.(ErrAlreadyExists and ErrNotFound) - 45e0e5a77 Merge pull request #5926 from claudiubelu/import-add-platform-check - c5e23649d Merge pull request #6043 from dmcgowan/fix-metadata-content-panic - c23f52af3 Merge pull request #6001 from cpuguy83/trace_exporter_plugin - b23ec233a Merge pull request #5916 from claudiubelu/windows/image-import - a4fa3a716 Merge pull request #6017 from thaJeztah/fix_main_nomodules - b9cf0d75a Fix panic in metadata content writer on copy error - 6886c6a2e v1 runtime: reduce permissions for bundle dir - 7d56b24f1 v2 runtime: reduce permissions for bundle dir - d0bedc5bd Merge pull request #5979 from TianTianBigWang/fix/err-string-fmt - 7a7a9a282 integration: Adds test for multilayer image import - f7658e37d runtime: should fail fast if dial error on shim - 483d2e947 go.mod: update opentelemetry modules to v1.0.0 - 483e23bdc Merge pull request #6036 from dmcgowan/add-mirror-action - f6c1e7ed8 Merge pull request #6027 from alakesh/log-fix - 084387e0b Move tracing to plugin - 45c3453a7 Add open telemetry logging hook for logrus - 6fd80dea3 Merge pull request #5991 from akhramov/freebsd/fix-tar-headers - 16f3d67b5 add current process state to the error message - 407d60694 Add github action to mirror image - 03d1a0fa7 Merge pull request #6035 from kzys/virt-ip - 97df73004 gha: collect Vagrant VMs' IP addresses - 2bffb5f9b FreeBSD: fix tar headers & the nil check on getxattr - 3393970dd Merge pull request #6033 from zouyee/continuity - 90c6ff97a Merge pull request #5997 from ktock/deduped-ref - 7854e0bff bump continuity and console version that remove pkg/errors - 2e2956ba2 Merge pull request #5998 from kaijchen/patch-1 - 16d3f48a2 ctr namespaces: improve usage string - ecbd7c653 Merge pull request #6028 from zouyee/bump - 50da67359 refactor: move from io/ioutil to io and os package - a68fb7add bump console version to v1.0.3 that remove pkg/errors - c16be1a5e Merge pull request #6032 from dmcgowan/update-integration-test-images - 3e72e335f Use github images for integration tests - d72d2794d Merge pull request #5995 from wssccc/wssccc-patch-2 - 55893b9be Add CNI conf based on runtime class - 50a568595 Change oci.WithUser behavior for LCOW - 65f6a896c Fuzzing: Add 4 fuzzers + small modifications - 7ddf5e52b Merge pull request #6012 from estesp/set-image-labels - 7d6e9773a Merge pull request #5970 from cpuguy83/cancel_on_signal - 2fecf5b02 Make sure exit signals trigger an exit during init - f40df3d72 Enable image config labels in ctr and CRI container creation - d081457ba Merge pull request #5974 from claudiubelu/hanging-task-delete-fix - 40c7d1d16 Merge pull request #5985 from AkihiroSuda/crun-1.0 - 6875aa5d3 import: Add option to skip creating digest image - da6b0efcc Merge pull request #5982 from AkihiroSuda/clone3 - f700ae873 CI: bump up crun to 1.0 - 55923daa9 seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted) - 8596d1188 Fix typo - 493220b71 Merge pull request #5990 from estesp/update-go-1.17.1 - 73dbbf5bf Update to Go 1.17.1 - cbf9d88c9 Merge pull request #5987 from wllenyj/ci - 498e5b27f fix error string format - 6d961f967 CI: Switch to available latest images - 8493cd1a5 Merge pull request #5610 from alakesh/xfs-support-devmapper - e087b47e9 import: Raise error if the imported image is filtered out - 8cf06feac Merge pull request #5956 from claudiubelu/windows/fixes-task-delete-force - e1ad77910 Merge pull request #5817 from dmcgowan/shim-plugins - 91b64c58b add xfs support to devicemapper snapshotter - 3d734d034 Merge pull request #5976 from ukontainer/pr-continuity - d9f921e4f Merge pull request #5906 from thaJeztah/replace_os_exec - 8766f2118 Merge pull request #5972 from zouyee/labels - 94b86a6b9 Merge pull request #5966 from dmcgowan/fix-unexpected-eof-handling - 8ff8b1b82 vendor: update continuity for darwin support - 6589876d2 Merge pull request #5964 from crosbymichael/cni-pref - 689a863ef Merge pull request #5939 from scuzhanglei/privileged-device - 1ddc54c00 Merge pull request #5954 from claudiubelu/fix-sandbox-remove - 1efed4309 add ip_pref CNI options for primary pod ip - 16cd6ed13 Additional integration tests for pulling image with labels - 756f4a314 cri: add devices for privileged container - a4d64e5e0 Merge pull request #5969 from crosbymichael/pin-pbuild - 55c55b071 Merge pull request #5965 from crosbymichael/ctd-metric - 9954147c0 pin protobuild version to tag - 2458afeb1 Fix content copy to not ignore unexpected EOF - 6bec0d39b use a const metric for build_info - ae27a6b05 Add metric exposing build version&revision - d58542a9d Merge pull request #5627 from payall4u/payall4u/cri-support-cgroup-v2 - d040ca384 Merge pull request #5861 from kzys/restart-monitor - 5e32e9d85 Merge pull request #5917 from mxpv/issue_forms - b01cad3b5 Merge pull request #5945 from fuweid/fix_5900 - 99987f2a5 Merge pull request #5936 from ukontainer/feature-darwin-runtime-shim - bdb41f607 Merge pull request #5858 from levinxo/patch-1 - 5540fc428 Merge pull request #5949 from wzshiming/fix/write-diff - bef14adfd Merge pull request #5958 from zouyee/dail - b06d0a3e0 Merge pull request #5951 from adelina-t/ws_2022_job - 8e850bc0f replace deprecated Dail with DailContext - ff75f7d48 Merge pull request #5943 from AdamKorcz/fuzz13 - 0ae5c41f1 Merge pull request #5944 from zouyee/deprecated - 132aa56ee Merge pull request #5947 from kerthcet/feature/upgrade-pause-image-to-3.6 - aeea697d8 Add WS2022 support in Windows Periodic tests - 55faa5e93 task delete: Closes task IO before waiting - f42513112 integration: Adds Windows HostProcess tests - ccc5ee303 archive: Add WriteDiff error logs - 820bd9269 fix document non-synchronous in crictl.md - 2bcd6a4e8 cri: patch update image labels - 789abc936 using Hosts replace deprecated field - 57e10439d Fixes task kill --force on Windows - abf4de498 integration: Enables Windows containerd restart test - 96ec0b6f3 content fuzzer: Clean up tempdir - 61a46e9fd Merge pull request #5929 from dcantah/update-hcsshim-0.8.21 - dd8b6ee3f Merge pull request #5937 from kolyshkin/riscv-pie - eb2530be8 Makefile.linux: build on riscv with PIE - 6b0b64a51 ctr: Fixes Windows image import - a43fa9f28 darwin: runtime support - 5dd38792a darwin: use the default values for socketRoot variable - 1dfd8a279 Merge pull request #5932 from dcantah/ctr-exec-add-cwd - 27046a9e0 Fix cwd flag for `ctr tasks exec` - 24cec9be5 sandbox: Allows the sandbox to be deleted in NotReady state - 1dd0d59b7 go.mod: Update hcsshim to v0.8.21 - e00f87f1d Merge pull request #5927 from adelina-t/ws_2022_image_update - 4bc5ca76e Merge pull request #5122 from mythi/non-root-containers-and-devices-v2 - 6d3d34b85 Update Pause image in tests & config - 278176db1 Address issue forms feedback - 44d5a7e26 Merge pull request #5921 from ktock/fix-failed-precondition - 0d5223d70 Merge pull request #5845 from alexandref75/fix-dir-device-support - 838afd211 Adding testing of two devices - ebcf876bf Merge pull request #5914 from claudiubelu/windows/platform-default-match - e0f8c04da cri: Devices ownership from SecurityContext - 7bc5aa74c Fix pull fails on unexpected EOF - 11ab3cba0 Use issue forms for bug reporting - e2c769d6f windows: The DefaultSpec platform should match the Default matcher - 7826a21ac Update RELEASES.md - af1a0908d Merge pull request #5865 from dcantah/windows-pod-runasusername - 2ac996840 replace uses of os/exec with golang.org/x/sys/execabs - ebe8f8c6b Merge pull request #5899 from AkihiroSuda/runc-v1.0.2 - 6fa958853 Merge pull request #5903 from AkihiroSuda/gofmt117 - 81317350c Merge pull request #5905 from thaJeztah/update_toml - 25644b461 Add RunAsUserName functionality for the Windows Pod Sandbox Container - e18516767 go.mod: update runc to v1.0.2 - 3f8ea1b6a update runc binary to v1.0.2 - f43f22966 Merge pull request #5902 from dweomer/rke2-690-on-main - 429296910 go.mod: github.com/pelletier/go-toml v1.9.3 - f8dfbee17 add cri test case - 9a8bf1315 feature: add field LinuxContainerResources.Unified on cri - d3aa7ee9f Run `go fmt` with Go 1.17 - c3609ff4c cri: filter selinux xattr for image volumes - ff2e58d11 Merge pull request #5131 from perithompson/windows-hostnetwork - 736222dd8 Merge pull request #5897 from kzys/upgrade-golangci-lint - 70d122b29 Merge pull request #5889 from estesp/update-go-1.17 - a6034d021 Merge pull request #5896 from kzys/pid-order - 4dd5ca70f script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0 - f7b1ceb9f integration: investigate TestRestartMonitor's failure - acb81bbda integration: fix TestContainerPids - 9fe7bc938 Bump integration timeout to 35 min - 7fba86264 Fix dir support for devices V3 (#4847) - a5eccab27 Merge pull request #5891 from crosbymichael/net-host-env - 6f60b3016 [ctr] add HOSTNAME env for host network - 8d135d284 Add support for shim plugins - fda782a7b Merge pull request #5886 from AdamKorcz/fuzz11 - c076ede40 Merge pull request #5884 from adisky/add-systemd-env - f8602c372 Update to Go 1.17 - c9b1b2fd5 Fuzzing: Add fuzzer - 9e1b57ca0 Add env for SystemdCgroup driver - 024804b1b Merge pull request #5878 from gjkim42/allow-expanded-dns-config - 1224060f8 Allow expanded DNS configuration - d0be7b90f Merge pull request #5863 from AdamKorcz/fuzz10 - 538d93d2f Fuzzing: Add 4 fuzzers - 79b369a0b Added windows hostProcess cni skip - 7d4c95ff0 Merge pull request #5813 from mxpv/shim_cleanup - 159c0f04e Merge pull request #5840 from AdamKorcz/fuzz9 - 1c4e9d048 Merge pull request #5846 from crosbymichael/ctr-cpu.shares - 0fbcf9b97 Merge pull request #5847 from kzys/master-to-main - 4c7338aa6 Merge pull request #5849 from kzys/lock-error-2 - 0ae2d3987 Merge pull request #5857 from dims/fix-bad-make-protos-failure - 82fe0db9a Fix bad `make protos` failure - ed564061e Merge pull request #5851 from zouyee/location - 56c5daa52 Merge pull request #5856 from kzys/remove-fossa - 37f2c7ca8 Merge pull request #5850 from thaJeztah/runc_build_docs - 284c29dde Merge pull request #5836 from dcantah/k8s122 - 1c47fb17f docs: remove FOSSA's badge - bc4cea4e4 docs: rename main to master - 9d07f8d9a Merge pull request #5852 from adelina-t/add_trap_cri_integration_script - 5e49ec27d Use http.Get to download binaries instead of exec.Command - e6538b8bc Add trap to cri-integration test script - d2f3b7146 add cpu-shares to ctr - 30b832e49 archive docs and point to new location fix #https://github.com/containerd/cri/issues/1624 - 9cc179aa7 BUILDING.md: remove some bits about building runc - 42b57cc73 BUILDING.md: markdown fixes - 0bcd45d3a Merge pull request #5848 from kzys/build-flags - a3d6edc0e content: return the error with its timestamp - a5468852f docs: list all snapshotter-related build flags - e634f04d8 go.mod: update kubernetes to v1.22.0 - 11a90c7ff Fuzzing: Add experimental version of container fuzzer - 218db0f9a Merge pull request #5835 from dmcgowan/plugin-events-cleanup - 7f0be5edd Merge pull request #5839 from dcantah/ci-weirdness - 1373bc519 Merge pull request #5842 from thaJeztah/update_go_116 - 42a28ad2c Update Go to 1.16.7 - fedd657ea Merge pull request #5838 from mxpv/ci - 534685f95 Fix Linux CI Linter using go 1.15.14 - 10eab21a4 Cleanup CI - 587fc0925 Merge pull request #5834 from dmcgowan/remove-redundant-build-tags - 0a0621bb4 Move plugin context events into separate plugin - 6f027e38a Remove redundant build tags - b43d9502c Merge pull request #5830 from mxpv/darwin - 5b76d08f4 Merge pull request #5731 from alakesh/opentelemetry-basic - 3c5424454 [otel-tracing] vendor and go modules changes - 3597ac859 [otel-tracing] Initial opentelemetry support - 7917da764 Change default directories on Darwin - 10824eaf2 remove go 1.13 from containerd - d30d897ef Cleanup v2 shim - b97a56b71 Merge pull request #5829 from AdamKorcz/fuzz8 - c3c276ae1 Fuzzing: Fix for OSS-fuzz issue 36825 - dd08c7a49 Merge pull request #5825 from AdamKorcz/fuzz7 - 424d7e47b Merge pull request #5760 from thaJeztah/cleanup_test_scripts - 6c257552a scripts: declare ROOT closer to where it's used, and some DRY changes - dba0ef4eb scripts: add missing quotes, and minor linting issues - 0cb656860 test/build-utils.sh: remove support for Debian Jessie - 41a04246f Fuzzing: Add two more fuzzers - 7d4891783 Merge pull request #5821 from thaJeztah/simplify_platforms_format - 58dbe9685 Merge pull request #5823 from AdamKorcz/fuzz6 - 2c699cc35 Fuzzing: Remove panics of container_fuzzer - f2c3122e9 platforms: Format(): use path.Join() instead of joinNotEmpty() - f12040b6b Merge pull request #5785 from AdamKorcz/fuzz5 - acecd6603 Change protoc link - fcd9c4199 Merge pull request #5746 from lifupan/main - ee1dfc0cd Merge pull request #5809 from isugimpy/main - ce437864b mergo: Upgrade to 0.3.12 to fix panic - 4282ec12c Merge pull request #5802 from rst0git/ci-criu-ppa - d1e868c83 ci: install criu from PPA - 5d3e8fd2c Merge pull request #5144 from devholic/release-non-cni-version - a3e431ad4 Merge pull request #5725 from adelina-t/enable_critest - 2b9f8334c Merge pull request #5792 from dims/script-to-check-if-entries-in-go.mod-files-are-in-sync - fb589a713 Merge pull request #5043 from IRCody/shared_namespace - 9eb08bf8e Merge pull request #5784 from thaJeztah/update_goos_list - 1dadd6a1d Merge pull request #5804 from IRCody/proto-download - e692a0192 Add shared content label to namespaces - 3a8622e30 Updates the location of protobuf downloads in docs - c4664bdac Merge pull request #5803 from dmcgowan/fix-protobuf-install - 0d9393650 Update protobuf install to use correct repository - d62d6c11d Split release steps into multiple tasks - b4807122d Update release workflow to upload binary without CNI - 5280530a0 Merge pull request #5624 from ktock/overlayupper - 67406b373 overlay: add an optional label of upperdir location of each snapshot - 43117cf91 Script to check if entries in go.mod files are in sync - caf9e256b Merge pull request #5693 from kzys/sigrtmin - 742ffadfb Merge pull request #5800 from zhuangqh/binarycall-timeout - 6d31cdda5 Merge pull request #5716 from dims/add-new-go-module-for-api-directory - 4ab3e7a53 runtime: fix the issue of create new socket with abstract address - cc88f8e0a Split fuzzer to two fuzzers - 7a10fd4fc respect context timeout in shim binary call - 23bc3db91 Enable critest on Windows - 494b940f1 Introduce a new go module - containerd/api for use in standalone clients - 158901756 Merge pull request #5606 from zwtop/master - b5b5dcc27 Merge pull request #5162 from claudiubelu/integration-test-images - ce3d6e9bf Merge pull request #5795 from mikebrow/cri-support-metrics - 0def98e46 Merge pull request #5794 from mikebrow/clarify-host-docs - 4fdb88464 add CRI support matrix to RELEASES.md - b5fc7846c adding a little more clarity - 3a503acd5 Merge pull request #5793 from thaJeztah/gotestsum_1.7 - 1d3d08026 Support SIGRTMIN+n signals - 18d6cc1b0 update gotestsum to v1.7.0 - 3b7a3d599 Merge pull request #5756 from Kern--/discard-blocks - f6fa3fdd7 Merge pull request #5590 from oss-qm/submit/makefile-tags - 559f9a5b9 Merge pull request #5744 from mxpv/metrics - ee3272e9c Merge pull request #5745 from yylt/check - c3f1f0e5e Merge pull request #5775 from kzys/pid-order - efa8ab715 Add runtime label to metrics - 6294235d8 Fuzzing: Add container fuzzer - 2405671d4 platforms: add "ios" as known OS, "loong64" as known ARCH - a963242f7 Merge pull request #5779 from AdamKorcz/fuzz4 - 2556aac67 Fuzzing: Add archive fuzzer - 0d45ac14e interface about shim build check - 00d52bb15 integration: log all processes to investigate the test failure - a137b64f5 Merge pull request #5687 from AdamKorcz/fuzz3 - ee27cde73 Merge pull request #5735 from ktock/diffcompression - f1d79d33b Discard blocks when removing a thin device - 6389fc79f Merge pull request #5770 from wzshiming/fix/push-docker-remote-close - 5a874e081 Merge pull request #5769 from wzshiming/fix/fetch-docker-remote-close - e325184c8 Merge pull request #5771 from thaJeztah/update_md2man - d2b6d192d Update cpuguy83/go-md2man binary to v2.0.1 - 53ec1abec remotes/docker/pusher.go: Fix missing Close() - 67d07fe5c remotes/docker/fetcher.go: Fix missing Close() - 0789a0c02 Add docker fetch fuzzer - b809212b1 Merge pull request #5750 from thaJeztah/cleanup_test_dockerfile - b483177ee Support custom compressor for walking differ - 1292c50fe Merge pull request #5754 from thaJeztah/update_gotestsum - 51a8f969b Merge pull request from GHSA-c72p-9xmj-rx3w - b88bf1eca Merge pull request #5755 from adisky/gce-configure-use-systemd - 29b86c547 Merge pull request #5751 from AkihiroSuda/runc-v1.0.1 - 150e07b64 Use systemd cgroup driver for cgroupv2 tests - 603962bc8 update gotestsum to current master - a12c7bd1c go.mod: runc v1.0.1 - 43e0594ae update runc binary to v1.0.1 - 9537bc265 Dockerfile.test: build containerd in separate stage - 36be5ef3a Dockerfile.test: add GOLANG_IMAGE build arg to allow overriding - 8faacfca1 Dockerfile.test: clean up apt indexes after installing - 9f7e6335c Dockerfile.test: build critools in a separate stage - 7ec8e2d36 Dockerfile.test: build cni in a separate stage - f9f423c07 Dockerfile.test: standard directory to collect build aftifacts - e9f26eb87 Dockerfile.test: split dev stage, and optimize order - 25fada0cc Dockerfile.test: skip curl, gcc, git and make install - 546538971 install-critools: make sure DESTDIR exists - e830c5364 Merge pull request #5737 from thaJeztah/remove_redundant_check - dbef1d56d runtime: runc v2: remove redundant validation - 34fb8d896 Merge pull request #5727 from dmcgowan/test-monitor-restart-grace - 18321f539 Move loop check to before sleep - 2e8a572df Add timestamp to flaky restart monitor test - d527926cd Merge pull request #5722 from AkihiroSuda/go1.16.6 - 55fd2ab5d integration/client: go mod tidy - e72046f86 Update Go to 1.16.6 - cbdebd18e Merge pull request #4447 from kzys/grpc-error - b6aa5a48b Merge pull request #5712 from coryb/docker-push-close-body - bc4e416c8 Add test for archive breakout test for lchmod - a8ef1fc48 Merge pull request #5710 from fuweid/cri-cleanup - 894b6ae39 Fix missing Body.Close() calls on push to docker remote - ac75071b4 remove pkg/cri/platforms package - 51f2ce92f Merge pull request #5709 from cpuguy83/custom_client - 0a8802df6 Allow WithServices to use custom implementations - 0dcffc3ee Merge pull request #5673 from dcantah/hcsshim-0.8.18 - d38c186d9 Merge pull request #5578 from claudiubelu/integration/failed-container - cf600abec Merge pull request #5619 from mikebrow/cri-add-v1-proxy-alpha - 9fa7d1507 Merge pull request #5682 from kzys/gha-fork - 31d78444e Merge pull request #5666 from wllenyj/plugin_test - aefbe7c1c Merge pull request #5700 from AkihiroSuda/test-cri-in-userns - 71c1dc661 Merge pull request #5676 from dmcgowan/update-for-distribution-spec-1.0 - aefabe546 Dockerfile.test: add "cri-in-userns" (aka rootless) test stage - 0573e22e3 Merge pull request #5702 from dmcgowan/archive-cleanup-lchmod - 53835221f Cleanup lchmod logic in archive - d1c105192 use fu wei's suggeted interface pick for marshaling - 14962dcbd add alpha version - 4c6e4a06f gha: make release workflow work in forks - 73d28ddeb client: surface a connection error more clearly - 7eceeb950 Merge pull request #5571 from adelina-t/win_set_specific_go_version - a7ad6b3be Add support for registry host path override - 3a0b9ec6b Add unit test for plugin - 95c708572 Update documenation for OCI distribution 1.0 - a81f05f36 [Vendor] Update hcsshim to 0.8.18 - 16deba098 integration: Windows volume-copy-up images - 63fe34add grpc config add options tcp_tls_ca - 25d7f907c Merge pull request #5660 from BigVan/main - a5c417ac0 move up to CRI v1 and support v1alpha in parallel - bda7b5866 feat: Add snapshotter label to the new snapshot for container. - 0bd2a86b1 Merge pull request #5655 from kzys/dm-log - e72a56a1e Merge pull request #5662 from thaJeztah/fix_destdir - 2019a1e68 Makefile: fix DESTDIR and PREFIX concatenation - 04ab4418f test integration: Adds a test that restarts a failed container - e1f28659b Merge pull request #5287 from claudiubelu/cri-integration-cleanup - 03ee45006 snapshot/devmapper: log exported methods correctly - c8c6e…

Bumping moby to version v20.10.21-4-g4ed81ac0e2, which comprises the following commits: f292bf0f4f distribution: Error when pulling OCI artifacts 0211f9e44d [20.10] update to Go 1.18.8 to address CVE-2022-41716 f99cb8297b integration: download busybox-w32 from GitHub Release 3f9dc25f5c update containerd binary to v1.6.9 87ccd38cea vendor: moby/term, Azure/go-ansiterm for golang.org/x/sys/windows compatibility e83e465ae2 [20.10] vendor: github.com/moby/buildkit eeb7b65ab7d651770a5ec52a06ea7c96eb97a249 (v0.8 branch) 9c84417c1b skip TestImagePullStoredfDigestForOtherRepo() on Windows and rootless 5b5b5c6f13 builder: add missing doc comment 05e25f7892 builder: fix running git commands on Windows 2f3bf18014 [20.10] vendor moby/buildkit v0.8.3-31-gc0149372 6699afa549 registry: allow "allow-nondistributable-artifacts" for Docker Hub 4b9902bad4 Validate digest in repo for pull by digest c0d1188c14 builder: make git config isolation opt-in 9f5f3abcee builder: isolate git from local system 10db4c2db7 builder: explicitly set CWD for all git commands 8816c3c2aa builder: modernize TestCheckoutGit 11bdbf40b9 [20.10] Update to go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 66ddb7f91c Fix live-restore w/ restart policies + volume refs c003392582 contrib: make dockerd-rootless-setuptool.sh more robust 53313be0f3 docker-rootless-setuptools.sh: use context after install 9c486bd267 swagger: update links to logo fa17fab895 vendor: github.com/containerd/console v1.0.2 481bee51b5 vendor: github.com/armon/go-metrics v0.4.1 39ba2873e8 vendor: github.com/google/btree v1.1.2 c2755f40cd vendor: github.com/hasicorp/memberlist v0.4.0 5ba3208ec7 Dockerfile: Update Dockerfile syntax, switch to bullseye, add missing libseccomp-dev, remove build pack 6d6a236286 [20.10] Update uses of Image platform fields in OCI image-spec 2570784169 [20.10] vendor: github.com/moby/buildkit 3a1eeca59a9263613d996ead67d53a4b7d45723d (v0.8 branch) fcd4df906b Update some tests for supplementary group permissions 6a0186b357 Wrap local calls to the content and lease service 3d4616f943 Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190 23c7d84b84 docs: api: adjust ContainerWaitResponse error as optional 3e9e79d134 docs: api: document ImageSummary fields (api v1.39-v1.41) fdd438ae03 api: docs: improve documentation of ContainerConfig type (API v1.30-v1.41) 97014a8db5 namesgenerator: remove Valentina Tereshkova e44d7f735e AdditionalGids must include effective group ID 9e7662e4a7 [20.10] vendor: update containerd to latest of docker-20.10 branch 7dac25a3a9 vendor: update tar-split to v0.11.2 8bd86a0699 update containerd binary to v1.6.8 6c8dd6a6f2 update runc to v1.1.4 418c141e64 [20.10 backport] daemon: kill exec process on ctx cancel d127287d92 Allow different syscalls from kernels 5.12 -> 5.16 57db169641 seccomp: add support for Landlock syscalls in default policy 7ba8ca042c Update golang to 1.18.5 f2a3c3bcef update golang to 1.18.4 a99c9cd852 update golang to 1.18.3 82939f536b update golang to 1.18.2 ecd1aa081f update golang to 1.18.1 7ba67d05a8 [20.10] vendor: update archive/tar for go 1.18 0bc432241e update golang to 1.18.0 bb95d09f9a staticcheck: ignore "SA1019: strings.Title is deprecated" a7299ae72c Dockerfile: update golangci-lint v1.44.0 d97fd533cf integration-cli: SA5011: possible nil pointer dereference (staticcheck) e6aee04a88 client.NewClientWithOpts(): remove redundant type assertion (gosimple) 0523323c28 daemon/logger/awslogs: suppress false positive on hardcoded creds (gosec) adeb29c64c client/request.go:157:8: SA1019: err.Temporary is deprecated (staticcheck) 50361d91a6 registry: trimV1Address(): simplify trimming trailing slash ae3a9337dd golangci.yml: do not limit max reported issues 9820255a1c golangci.yml: skip some tests d223f37300 golangci.yml: update regex for ignoring SA1019 ec3bfba89d graphdriver: temporarily ignore unsafeptr: possible misuse of reflect.SliceHeader f2f387b131 daemon: var-declaration: should omit type bool (revive) 2fb7c9fea7 daemon/config: error strings should not be capitalized fa6954cb98 reformat "nolint" comments 45fa675a35 if-return: redundant if ...; err != nil check (revive) 9e88f8435a daemon/splunk: ignore G402: TLS MinVersion too low for now 2de90ebbe4 pkg/archive: RebaseArchiveEntries(): ignore G110 14b475d091 daemon/stats: fix notRunningErr / notFoundErr detected as unused (false positive) db7b3f4737 unused: ignore false positives b6de0ca7c5 G601: Implicit memory aliasing in for loop e8b838e99f gosec: G601: Implicit memory aliasing in for loop 2ddf6e598a gosimple: S1039: unnecessary use of fmt.Sprintf fadf8bbdff staticcheck: SA4001: &*x will be simplified to x. It will not copy x 7573e32577 client: S1031: unnecessary nil check around range (gosimple) e738a57a6d daemon/logger/journald: fix linting errors 34f6b94255 gosec: G404: Use of weak random number generator a6d7b61c8b update containerd binary to v1.6.7 b4ba1ee22f update runc binary to v1.1.3 da8828c4b3 api: swagger: fix invalid example value (API v1.39-v1.41) 9501d91e19 api: swagger: document BuildCache fields (API v1.39-v1.41) 61fdea902b api: swagger: document BuildCache fields. c77432c889 [20.10] Update golang to 1.17.13 2833aa1e4b docs: api: add missing "platform" query-arg on create (v1.41) a8c28260ad api: swagger: add missing "platform" query-arg on create cfdc075b1c Fix file capabilities droping in Dockerfile 2daa6bb6b3 Windows: Re-create custom NAT networks after restart if missing from HNS 903cd53ce4 vendor: libnetwork 0dde5c895075df6e3630e76f750a447cf63f4789 eccaf6d368 [20.10] update golang to 1.17.12 ff7feeac37 vendor: github.com/containerd/continuity v0.3.0 Bumping libnetwork to version v0.7.0-dev.3-1841-gdcdf8f17, which comprises the following commits: 5e08bdb1 Revert: Added API to set ephemeral port allocator range 563fe8e2 README.md: repo was moved to https://github.com/moby/moby/tree/master/libnetwork bea0bcf5 libnetwork: skip firewalld management for rootless af0c46d8 Apply peformance tuning to new sandboxes also Bumping docker-cli to version v20.10.21, which comprises the following commits: 3e3677e47d docs: fix links to BuildKit backend 20e3951aeb Remove "experimental" gates around "--platform" in bash completion 75d7ce92a2 fixed the plugin command docker-runc a12c535f6e [20.10] vendor docker 03df974ae9e6c219862907efdd76ec2e77ec930b (v20.10.20) d18a3e9004 [20.10] vendor moby/buildkit v0.8.3-31-gc0149372 932ca73874 [20.10] vendor: github.com/docker/docker v20.10.19 7d51e65e72 [20.10] vendor: github.com/moby/buildkit 3a1eeca59a9263613d996ead67d53a4b7d45723d (v0.8 branch) 1ea8d69d6f feat(docker): add context argument completion e82aa85741 [20.10] vendor: github.com/docker/docker v20.10.18 e9176b36cc [20.10] vendor: github.com/containerd/continuity v0.3.0 bc6ff39e42 docs/reference: run.md update confusing example name 3fa7a8654f docs: update deprecation status for "overlay2.override_kernel_check" 3e06ce8bfa [20.10] Update go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 93eead45ee Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190 45075ea08c [20.10] vendor: github.com/docker/docker v20.10.17 c2dcaecf19 make compose plugin detection in bash completion work on Mac OS 613b9362d0 Detect compose plugin b30d250320 Add completion for docker-compose plugin 6b25bc3003 fix race condition in TestRemoveForce bdac0b38d9 Update golang to 1.18.5 c70b01ec1f update golang to 1.18.4 0389090aeb update golang to 1.18.3 c904936d69 update golang to 1.18.2 386d50c2e9 update golang to 1.18.1 990186f2f6 update go to 1.18.0 86bf1966e2 staticcheck: ignore SA1019: strings.Title is deprecated b3022b91d1 [20.10] Dockerfile.lint: use go install f14ba9f5d7 [20.10] Dockerfile: use syntax=docker/dockerfile:1 c189c4dbea [20.10] vendor: github.com/json-iterator/go v1.1.12 for Go 1.18 compatibility 0c46ffc1f9 [20.10] vendor: github.com/modern-go/reflect2 v1.0.2 for Go 1.18 compatibility 6be9ce798e [20.10] vendor: github.com/google/gofuzz v1.0.0 779ed309a8 lint: update golangci-lint to v1.45.2 2f7e84be65 linting: fix incorrectly formatted errors (revive) e628209d9b linting: ignore some "G101: Potential hardcoded credentials" warnings 80a3add604 cli/command/container: unnecessary use of fmt.Sprintf (gosimple) 80fb0d575e [20.10] Update golang to 1.17.13 d72bef2088 [20.10] update golang to 1.17.12 7502d7e560 Fix dead external link 308624c3b1 fix: remove asterisk from docker command suggestions de7d866b6a [20.10] update golang to 1.17.11 240e4b5501 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 5d4776bd90 [20.10] update golang to 1.17.10 49e9c2ae3d vendor: golang.org/x/sys 63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17) 87a3ce2699 vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456 1d8abed17d vendor: update x/sys to 134d130e 31dad66f9a [20.10] update golang to 1.17.9 80f673bf9e gofmt with go1.17 3d4cc8e699 [20.10] update remaining files to go1.17.8 30277a8f80 update go to 1.17.8 cfef3a7dc1 docs: deprecated: add entry for "fluent-async-connect" log-opt 53426025c3 [20.10] docs: reformat table for compatibility 573a664639 Describe privileged mode in terms of capabilities cf0ab7ac4c [20.10] vendor: github.com/docker/distribution v2.8.1 d05fd4ffc8 [20.10] vendor: github.com/opencontainers/image-spec v1.0.2 870f138250 [20.10] vendor: github.com/docker/docker v20.10.14 198d6b8724 [20.10] circleci: update buildx to v0.8.2 55a14ec851 [20.10] update remaining Dockerfiles to go 1.16.15 1f9a0df05a e2e: update docker-compose to 1.29.2 4ae338b33a docs: reference: remove trailing space to fix yaml formatting 6380142dd4 docs: fix (table) formatting, fix some broken links 82f422fcf3 docs: build: fix minor markdown and syntax issues 80fd77903b Update the list of log drivers c3d4d623c8 Fix CMD --ignored-param1 example 2e82d11def docs: dockerd: fix broken link in blockquote area 738a6ee1cc improve cp documentation with some illustration examples 246d96bb6c docs: unify "docker create" and "docker run" reference 2fd0f17057 docs: add missing documentation for --pull flag 5fa500000a Fix incorrect pointer inputs to `json.Unmarshal` 1e6a8ce2b7 Dockerfile: update xx to 1.1 6f7a931a2d [20.10] use GO_LDFLAGS instead of LDFLAGS to prevent inheriting unrelated options 91bab605f7 [20.10] vendor.conf: don't use git:// protocol a282e0c5d2 [20.10] update to go 1.16.15 to address CVE-2022-24921 700364e304 Fix mistake with env var example in docker run docs 62d27c32ff Update WORKDIR command information c0e952cf04 Fix the (dead) link for docs for Dockerfile syntax reference 04104a04d3 Update dockerd.md b721998b7b Fixing typo (his --> its) 4065e1246e format create.md table f1002eb9fb Fix typo e97c7b240e added missing closing parenthese aa78937634 Update stats.md add example json output 40fe0573aa Update Ubuntu version number references in push.md c9737e1c37 docs/daemon: replace deprecated '-g' option for '--data-root' 5c6723d080 Correct device syntax to --gpus fd5fc61ecd [20.10] Update Go to 1.16.14 3624019d83 [20.10] update Go to 1.16.13 f3ff8e6ad6 [20.10] vendor: compose-on-kubernetes v0.5.0 to remove github.com/golang/glog ee1ac1b319 fix innocuous data-race when config.Load called in parallel 38dd744a11 [20.10] Update Go to 1.16.12 4de40a825e Update Go to 1.16.11 03fa8f92c8 Update Go to 1.16.10 9989fdbc40 Update most links in docs to use https by default 0e20c1fd21 Update Go to 1.16.9 1c0927a041 Dockerfile: update tonistiigi/xx to 1.0.0-rc.2, add XX_VERSION arg 82f9d5921b info: skip client-side warning about seccomp profile on API >= 1.42 adb01ca79d docs: some minor touch-ups in checkpoint reference 8260476a06 docs: remove trailing space to fix generated YAML format bce2e1f953 docs: create.md: typo fix 44064f51c8 Fix typo in documentation - build.md 292779add5 Add doc for BUILDKIT_PROGRESS env var f2e79b826c docs: use "console" code-hint for shell examples fa46b92361 docs: rewrite reference docs for --stop-signal and --stop-timeout 400f81089a experimental: fix broken link to "checkpoint and restore" page c72057c8db docs: move checkpoint/restore doc from experimental into reference 77db97d595 Use private network address for default-address-pools setting in daemon.json example cbf0d2b7b7 docs: fix some broken anchors d0014a86bc docs: fix description of restart-delay to mention max (1 minute) 6c1c8b55aa docs: fix search results by filterd is-official 44fdac11f5 Update Go to 1.16.8 061051c24d docs: add missing redirect, and remove /go/experimental redirect 2012fbf111 Update Go to 1.16.7 42d1c02750 registry: ensure default auth config has address 0b924e51fc Update to go1.16.6 6288e8b1ac change TestNewAPIClientFromFlagsWithHttpProxyEnv to an e2e test 1e9575e81a cli/config/configfile: various test cleanups c98e9c47ca Use designated test domains (RFC2606) in tests 8437cfefae context: deprecate support for encrypted TLS private keys 68a5ca859f cli/context: ignore linting warnings about RFC 1423 encryption 8a64739631 Update Dockerfiles to latest syntax, remove "experimental" 1d37fb3027 Deprecate Kubernetes context support 0793f96394 Deprecate Kubernetes stack support b639ea8b89 Deprecate Kubernetes stack support Signed-off-by: Bruce Ashfield <[email protected]> docker-ce: update to v20.10.21 Bumping docker to version v20.10.21-4-g4ed81ac0e2, which comprises the following commits: f292bf0f4f distribution: Error when pulling OCI artifacts 0211f9e44d [20.10] update to Go 1.18.8 to address CVE-2022-41716 f99cb8297b integration: download busybox-w32 from GitHub Release 3f9dc25f5c update containerd binary to v1.6.9 87ccd38cea vendor: moby/term, Azure/go-ansiterm for golang.org/x/sys/windows compatibility e83e465ae2 [20.10] vendor: github.com/moby/buildkit eeb7b65ab7d651770a5ec52a06ea7c96eb97a249 (v0.8 branch) 9c84417c1b skip TestImagePullStoredfDigestForOtherRepo() on Windows and rootless 5b5b5c6f13 builder: add missing doc comment 05e25f7892 builder: fix running git commands on Windows 2f3bf18014 [20.10] vendor moby/buildkit v0.8.3-31-gc0149372 6699afa549 registry: allow "allow-nondistributable-artifacts" for Docker Hub 4b9902bad4 Validate digest in repo for pull by digest c0d1188c14 builder: make git config isolation opt-in 9f5f3abcee builder: isolate git from local system 10db4c2db7 builder: explicitly set CWD for all git commands 8816c3c2aa builder: modernize TestCheckoutGit 11bdbf40b9 [20.10] Update to go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 66ddb7f91c Fix live-restore w/ restart policies + volume refs c003392582 contrib: make dockerd-rootless-setuptool.sh more robust 53313be0f3 docker-rootless-setuptools.sh: use context after install 9c486bd267 swagger: update links to logo fa17fab895 vendor: github.com/containerd/console v1.0.2 481bee51b5 vendor: github.com/armon/go-metrics v0.4.1 39ba2873e8 vendor: github.com/google/btree v1.1.2 c2755f40cd vendor: github.com/hasicorp/memberlist v0.4.0 5ba3208ec7 Dockerfile: Update Dockerfile syntax, switch to bullseye, add missing libseccomp-dev, remove build pack 6d6a236286 [20.10] Update uses of Image platform fields in OCI image-spec 2570784169 [20.10] vendor: github.com/moby/buildkit 3a1eeca59a9263613d996ead67d53a4b7d45723d (v0.8 branch) fcd4df906b Update some tests for supplementary group permissions 6a0186b357 Wrap local calls to the content and lease service 3d4616f943 Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190 23c7d84b84 docs: api: adjust ContainerWaitResponse error as optional 3e9e79d134 docs: api: document ImageSummary fields (api v1.39-v1.41) fdd438ae03 api: docs: improve documentation of ContainerConfig type (API v1.30-v1.41) 97014a8db5 namesgenerator: remove Valentina Tereshkova e44d7f735e AdditionalGids must include effective group ID 9e7662e4a7 [20.10] vendor: update containerd to latest of docker-20.10 branch 7dac25a3a9 vendor: update tar-split to v0.11.2 8bd86a0699 update containerd binary to v1.6.8 6c8dd6a6f2 update runc to v1.1.4 418c141e64 [20.10 backport] daemon: kill exec process on ctx cancel d127287d92 Allow different syscalls from kernels 5.12 -> 5.16 57db169641 seccomp: add support for Landlock syscalls in default policy 7ba8ca042c Update golang to 1.18.5 f2a3c3bcef update golang to 1.18.4 a99c9cd852 update golang to 1.18.3 82939f536b update golang to 1.18.2 ecd1aa081f update golang to 1.18.1 7ba67d05a8 [20.10] vendor: update archive/tar for go 1.18 0bc432241e update golang to 1.18.0 bb95d09f9a staticcheck: ignore "SA1019: strings.Title is deprecated" a7299ae72c Dockerfile: update golangci-lint v1.44.0 d97fd533cf integration-cli: SA5011: possible nil pointer dereference (staticcheck) e6aee04a88 client.NewClientWithOpts(): remove redundant type assertion (gosimple) 0523323c28 daemon/logger/awslogs: suppress false positive on hardcoded creds (gosec) adeb29c64c client/request.go:157:8: SA1019: err.Temporary is deprecated (staticcheck) 50361d91a6 registry: trimV1Address(): simplify trimming trailing slash ae3a9337dd golangci.yml: do not limit max reported issues 9820255a1c golangci.yml: skip some tests d223f37300 golangci.yml: update regex for ignoring SA1019 ec3bfba89d graphdriver: temporarily ignore unsafeptr: possible misuse of reflect.SliceHeader f2f387b131 daemon: var-declaration: should omit type bool (revive) 2fb7c9fea7 daemon/config: error strings should not be capitalized fa6954cb98 reformat "nolint" comments 45fa675a35 if-return: redundant if ...; err != nil check (revive) 9e88f8435a daemon/splunk: ignore G402: TLS MinVersion too low for now 2de90ebbe4 pkg/archive: RebaseArchiveEntries(): ignore G110 14b475d091 daemon/stats: fix notRunningErr / notFoundErr detected as unused (false positive) db7b3f4737 unused: ignore false positives b6de0ca7c5 G601: Implicit memory aliasing in for loop e8b838e99f gosec: G601: Implicit memory aliasing in for loop 2ddf6e598a gosimple: S1039: unnecessary use of fmt.Sprintf fadf8bbdff staticcheck: SA4001: &*x will be simplified to x. It will not copy x 7573e32577 client: S1031: unnecessary nil check around range (gosimple) e738a57a6d daemon/logger/journald: fix linting errors 34f6b94255 gosec: G404: Use of weak random number generator a6d7b61c8b update containerd binary to v1.6.7 b4ba1ee22f update runc binary to v1.1.3 da8828c4b3 api: swagger: fix invalid example value (API v1.39-v1.41) 9501d91e19 api: swagger: document BuildCache fields (API v1.39-v1.41) 61fdea902b api: swagger: document BuildCache fields. c77432c889 [20.10] Update golang to 1.17.13 2833aa1e4b docs: api: add missing "platform" query-arg on create (v1.41) a8c28260ad api: swagger: add missing "platform" query-arg on create cfdc075b1c Fix file capabilities droping in Dockerfile 2daa6bb6b3 Windows: Re-create custom NAT networks after restart if missing from HNS 903cd53ce4 vendor: libnetwork 0dde5c895075df6e3630e76f750a447cf63f4789 eccaf6d368 [20.10] update golang to 1.17.12 ff7feeac37 vendor: github.com/containerd/continuity v0.3.0 Bumping libnetwork to version v0.7.0-dev.3-1841-gdcdf8f17, which comprises the following commits: 5e08bdb1 Revert: Added API to set ephemeral port allocator range 563fe8e2 README.md: repo was moved to https://github.com/moby/moby/tree/master/libnetwork bea0bcf5 libnetwork: skip firewalld management for rootless af0c46d8 Apply peformance tuning to new sandboxes also Bumping docker-cli to version v20.10.21, which comprises the following commits: 3e3677e47d docs: fix links to BuildKit backend 20e3951aeb Remove "experimental" gates around "--platform" in bash completion 75d7ce92a2 fixed the plugin command docker-runc a12c535f6e [20.10] vendor docker 03df974ae9e6c219862907efdd76ec2e77ec930b (v20.10.20) d18a3e9004 [20.10] vendor moby/buildkit v0.8.3-31-gc0149372 932ca73874 [20.10] vendor: github.com/docker/docker v20.10.19 7d51e65e72 [20.10] vendor: github.com/moby/buildkit 3a1eeca59a9263613d996ead67d53a4b7d45723d (v0.8 branch) 1ea8d69d6f feat(docker): add context argument completion e82aa85741 [20.10] vendor: github.com/docker/docker v20.10.18 e9176b36cc [20.10] vendor: github.com/containerd/continuity v0.3.0 bc6ff39e42 docs/reference: run.md update confusing example name 3fa7a8654f docs: update deprecation status for "overlay2.override_kernel_check" 3e06ce8bfa [20.10] Update go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 93eead45ee Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190 45075ea08c [20.10] vendor: github.com/docker/docker v20.10.17 c2dcaecf19 make compose plugin detection in bash completion work on Mac OS 613b9362d0 Detect compose plugin b30d250320 Add completion for docker-compose plugin 6b25bc3003 fix race condition in TestRemoveForce bdac0b38d9 Update golang to 1.18.5 c70b01ec1f update golang to 1.18.4 0389090aeb update golang to 1.18.3 c904936d69 update golang to 1.18.2 386d50c2e9 update golang to 1.18.1 990186f2f6 update go to 1.18.0 86bf1966e2 staticcheck: ignore SA1019: strings.Title is deprecated b3022b91d1 [20.10] Dockerfile.lint: use go install f14ba9f5d7 [20.10] Dockerfile: use syntax=docker/dockerfile:1 c189c4dbea [20.10] vendor: github.com/json-iterator/go v1.1.12 for Go 1.18 compatibility 0c46ffc1f9 [20.10] vendor: github.com/modern-go/reflect2 v1.0.2 for Go 1.18 compatibility 6be9ce798e [20.10] vendor: github.com/google/gofuzz v1.0.0 779ed309a8 lint: update golangci-lint to v1.45.2 2f7e84be65 linting: fix incorrectly formatted errors (revive) e628209d9b linting: ignore some "G101: Potential hardcoded credentials" warnings 80a3add604 cli/command/container: unnecessary use of fmt.Sprintf (gosimple) 80fb0d575e [20.10] Update golang to 1.17.13 d72bef2088 [20.10] update golang to 1.17.12 7502d7e560 Fix dead external link Signed-off-by: Bruce Ashfield <[email protected]> containerd: update to v1.6.9 Bumping containerd to version v1.6.9-12-g6c41694da, which comprises the following commits: 5af8d89ce overlayutils: Add fastpath for userxattr check 303f608dd [release/1.6] update to Go 1.18.8 to address CVE-2022-41716 3f9f9508d ctr export strictly match default platform df73acad5 [release/1.6] go.mod: Bump hcsshim to v0.9.5 658490b78 ctr import: strictly match platform 4907b4d72 Migrate away from GitHub actions set-output f1493f665 Prepare release notes for v1.6.9 346412f5a adding support of CAP_BPF and CAP_PERFMON 99578d1fc Update mailmap a956d8415 Add logging volume metrics to Containerd CRI plugin 29e2dea50 fix pusher concurrent close channel 8a9d69385 [release/1.6] Stats() shouldn't assume s.container is non-nil a9adc7938 cri: PodSandboxStatus should tolerate missing task b66eb726a migrate from k8s.gcr.io to registry.k8s.io 5b40993a5 [release/1.6] upgrade containerd/continuity from v0.2.2 to v0.3.0 f2376e659 Update container with sandbox metadata after NetNS is created 06f82efef archive: validate digests before use 28324c529 [release/1.6] Update go 1.18.7, addresses CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 0aeeb62cb [release/1.6] update golangci-lint to v1.19.0 7db9d1f76 Fix linter warnings 4dc932e62 [release/1.6] gofmt with go1.19 7b8d679ad [release/1.6] integration: remove use of deprecated io/ioutil 926b9c72f retry request on writer reset b9a35c6af Add integration tests with failpoint 1f29fac48 Persist container and sandbox if resource cleanup fails, like teardownPodNetwork a85709c6c integration: simplify CNI-fp and add README.md d89a8d223 pkg/failpoint: add FreeBSD link and update pkg doc b0ce2965a integration: Add injected failpoint testing for RunPodSandbox a7f956d86 integration: CNI bridge wrapper with failpoint 07c479471 pkg/failpoint: add DelegatedEval API 4a5bc05aa runtime/v2/shim: return if error in load plugin 71ee7de24 bin/ctr,integration: new runc-shim with failpoint 3e2e77849 runtime/v2: manager supports server interceptor cb935bf49 pkg/failpoint: init failpoint package 2fdfd564c make xattr EPERM non-fatal in createTarFile 89e49609d remotes/docker/config: Skipping TLS verification for localhost b720be2ce remove stray .zuul.yaml 6b30bc4b4 .zuul: remove the zuul because it is offline 0f7e258ee Set grpc code for unimplemented cri-api methods fb753e5cd update intergration 6ee5bb7ea bump cri-api ae8598615 ContainerStatus to return container resources d3c7e31c8 Update CRI-API 5b44c5271 vendor: golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd 3507d600b update runc binary to v1.1.4 1efd8b947 ci: remove GOPROXY environment variable due to go-yaml/yaml#887 Signed-off-by: Bruce Ashfield <[email protected]>

Bumping containerd to version v1.7.0-beta.0-284-gf2cf411b7, which comprises the following commits: d5010a12d docs: Authorizer.Authorize could return ErrUnexpectedStatus 2eabcf702 fix: check for tmpfs when evaluating if userxattr should be used a6929f9f6 Add Evented PLEG support to sandbox server a338abc90 Add container event support to containerd e14753fc5 Respect no_cri constraint 3bc8fc4d3 Cleanup build constraints c040f8382 Fix default config for Darwin 0b349428e CI: Vagrant: pin rockylinux/8 to v5.0.0 662d8a085 vendor: golang.org/x/net v0.4.0 f9295aa49 Fix context when waiting sandbox 8ab1d4496 Pass runtime configuration as TOML blob 3e92dedc2 Update runtime options to include bytes blob a113737cc sbserver bug fixing 85776d2c6 update to go1.19.4, go1.18.9 840a657eb Change PushContent to require only Provider 847294679 Adding unit tests to opentelemetry tracing 8a25fa584 Unwrap proto errors in streaming client b0dd50655 fix panic when containerd-stress density --count 0 39cc684c6 docs: Add extra security instructions afa19a0a7 Fix process_vm_* syscall names in seccomp 740e90177 go.mod: re-vendor NRI from the official repo. 345332175 upgrade the ops.md output for current 1.7 version . f88162587 Rename transferer to transferrer fc2754204 Cleanup code comments and lint fixes f1598cf5e Update transfer docs 01bd314b1 Rename local transfer plugin c387a5205 Add variables names to transfer interface 8304a61b5 Combine stream fuzz tests 0762a3a75 Add media type to export stream 52341a234 Update export API types 42eedc0bc Update ctr to make local the default for distribution ef61e13a6 Update import cli to use transfer service 11c1c8e6f Update import logic 66dc4d106 Update API for import types b991c71e9 Update pull command to use filter arguments 40d3fa3af Add filter fields to image store types 9ae92f16e Improve push handler ordering 737257bb4 Add push progress e88baa087 Fixup pull authorization and labeling 478f1c934 Lint fixes 28ea75456 Regenerated protobuf files with updated version b0f519703 Add transfer docs cd67a98ec Add transfer integration test 0aca4bb1f Update ctr commands to use transfer interface 6b5df1ee1 Update transfer packages 2a8d7a744 Update transfer API 7318a2def Add transfer plugin registration d1627e3c7 Add basic import and export handlers adfaeeff0 Add binary stream functionality and helpers e506cd103 Implement client interface for transfer service 81afd9c36 Add progress 0e4e96544 Add transfer proxy client 6f64cb859 Transfer interface and plugin work in progress f61ed7e94 Transfer API types a24ea31c2 Add transfer API dcf5687ca Add streaming service 08d5879f3 Added nullptr checks to pkg/cri/server and sbserver 8e0a3c51a Add ctr image prune ceab73007 use MaxConcurrentDownloads instead of MaxConcurrentUploadedLayers f012617ed CRI stream server: Fix goroutine leak in Exec 9f4ba4883 [sandbox] Fix panic when waiting for sandbox controller dbc6d33ac [sandbox] Specify sandbox ID when using sandboxed shims 9a53a6c34 [sandbox] Don't access pause container when creating pod container cc111eef6 [sandbox] Move sandbox info to podsandbox controller a0daf1c28 docs: add NRI-related documentation. 02f0a8b50 pkg/cri/server: nuke old v0.1.0 NRI hooks. ca84aba6c integration: add first NRI integration tests. b27ef6f16 pkg/cri/server: experimental NRI integration for CRI. 43704ca88 nri: add experimental NRI plugin. a6d1d53cc [sandbox] Update Controller.Status protos 2136736f5 go.mod: golang_protobuf_extensions v1.0.4 - prevent incompatible versions 63c6c55ab go.mod: roll back github.com/containerd/cgroups to v1.0.4 release 3c1c0878e integration/client: update containerd version to v1.7.0-beta.0 ebd63adac integration/client: fix go.mod grouping 8d868dadb Add ptrace readby and tracedby to default AppArmor profile 8c035d387 Resolve warnings in Windows GitHub Actions periodic workflows ae0da7dc5 Use sandbox store to retrieve runtime info for sandboxed containers 3ddaa3444 Retrieve sandbox creation time from store. 4b3281982 Remove duplicated helpers 3f331e7d1 Specify runtime configuration for sandbox shims c4dee237f Fix order of operations when setting lease labels a22f0a4c3 archive: set WithModTimeUpperBound when WithSourceDateEpoch is set ed3a49c0e fix for OSS-Fuzz infra changes ac4af4df8 integration: enable CNI slow test for sbserver a74f7e902 sbserver: save netns in sandbox metadata on create 085d8e633 integration: enable tests for sbserver 1deaedd38 sbserver: persist sandbox during partial teardown 5a7c108ba Resolve Scorecards GitHub Actions workflow warnings b7b185c92 update github.com/cpuguy83/go-md2man/v2 to v2.0.2 6142a2a24 sys: remove unused GetOpenFds() f0ce2f6d3 remotes/docker: remove deprecated NewAuthorizer alias c71a31156 sys: remove aliases for deprecated EpollCreate1, EpollCtl, EpollWait 3e5b444ac pkg/cri/util/: remove deprecated NormalizeImageRef alias 3a7cfaebb sys: remove alias for deprecated sys.RunningInUserNS() bd912bbee go.mod: github.com/matttproud/golang_protobuf_extensions v1.0.2 5f23daeb2 go.mod: github.com/moby/sys/sequential v0.5.0 763ec7c86 go.mod: github.com/cpuguy83/go-md2man/v2 v2.0.2 0f616e354 go.mod: github.com/AdaLogics/go-fuzz-headers v0.0.0-20221118232415-3345c89a7c72 df4d07352 go.mod: golang.org/x/sys v0.2.0 4e68634ef go.mod: github.com/sirupsen/logrus v1.9.0 579c7f43d Change fsnotify event status condition. 2cea525ee Bump fsnotify to v1.6.0 73c6db881 Bump urfave-cli to v1.22.10 bf777a70b remove duplicated tx rollback 70b65062c Missed out `platform interface` when reused the conn for Client. 0c4d32c13 cri: add pod uid annotation 438db09b0 Fix building.md for btrfs 792294ce0 Update to cri-api v0.26.0-beta.0 234bf990d Copy cri-api v1alpha2 from v0.25.4 to containerd internal directory e224f77eb Add process_vm read and write calls to default seccomp profile e4130b2a0 overlay: Remove unused method param 661aaae3b introspection: expose the daemon's PID and PIDNS f6232793b can set up the network serially by CNI plugins 2f5dd7c66 CI: update Fedora to 37 3fc5802d1 gotestsum match go version 1.19 aaf59efd2 Expose Done and Err in Shutdown service 5d0457df9 Refactored ctr to allow for tty allocation when container has {terminal:true} within Spec c245347e9 tx rollback when GetInfo return error 14a08721c Remove OpenTelementry imports from remotes/docker package 405024db0 complement sub-command note for containerd-main e38e2c8a4 make status more readable and update easy. 3abcfb5c0 keep the lower case letter for flag info 69af001b3 Replace broken and redirection link for CRI and kubelet in docs b0133882f bump critools into ca1571e6edd116b2c95f52e3dfa0b4779b74223a 8bb599973 Remove the outdated comment dd86128e0 Convert hcsshim's stats to cgroups' stats 6596a7086 Use github.com/containerd/cgroups/v3 to remove gogo 38ad785ce Bump k8s.io deps to v0.25.4 bd66f588b Bump OpenTelemetry contrib to v0.36.4 3fca677c1 Release: add static binaries 0c63c42f8 Fix slice append error b829e6f2d Bump OpenTelemetry to v1.11.1 7def13dde Add a thin wrapper around otel Span object ab194e65f Bump grpc to v1.50.1 b742aa2e7 fuzzing: bump go-fuzz-headers 91e295d76 Add `--debug` args 0f54c4740 feat add sandbox api status func c953eecb7 Sandbox API: Add a new mode config for sandbox controller impls 99ac7a771 add oci.WithCPURT 717aa5929 Remove uses of deprecated go-digest.NewDigestFromHex, go-digest.Digest.Hex 3a9044f24 Rename darwin-kubelet to containerd 5f48e00af Extra documentation for content interfaces. 202abf8fc Bump k8s.io deps to v0.25.3 eaedadbed replace strings.Split(N) for strings.Cut() or alternatives f90219d47 services/server/config: TestMergeConfigs(): use correctly formatted values 4866d8ba4 registry: support ipv6 addresses 8bec2b652 Replace references to `re` with `regexp.MustCompile` 5c510e47a Improve how reference regexps are built 98ff27265 Clarify repo name regex intention 2a8a53178 go.mod: change imports to github.com/distribution/distribution/v3 a97eb6955 Update repo normalize error message to include the name of the repo. b979f0069 Fix bug in parsing domain from repository reference f96660286 reference/docker: add unit-tests from upstream distribution/distribution 7de88c5ba reference/docker: align files with original code f32595a0c Fix "getCPUInfo for OS freebsd: not implemented" on FreeBSD/arm64 11a06c1a3 ctr: add `ctr content fetch-blob` dfd6a3aa6 remotes: add FetcherByDigest for fetching blobs without foreknown descriptors c607f83c3 Fix missing closed fifo a24ef0993 Replace mount fork hack with CLONE_FS 8b1b81eef Update hosts doc f0bf9e7f8 Support default hosts.toml configuration 81bbd9dac add option to resolve symlinks to linux device ee64926a7 add SpanAttribute 2d9f0f2fb add additional info in backport process 3b87d46ce Add tracing spans in CRI image service and pull.go 902b96cf2 fix comments 30c3078ae go.mod: golang.org/x/*: use tagged versions 422a24066 Bump go version to 1.19.3 9c2a63440 Fix ctr crash when pulling with http-trace and http-dump 78ac0046a ctr export strictly match default platform a270d6e8a Harden GITHUB_TOKEN permissions 98269c061 s390x: initial enabler 4b2a23e7e overlayutils: Add fastpath for userxattr check 2da782468 Add sequence diagram for shim runtime v2 0be981595 Sandbox API: Move remote impls to /sandbox/proxy 2e83d885d fuzzing: improve archive fuzzer 7c77b3540 Add Workflow for running critest with Hyper-V Containers on Windows. 9494f0b80 Add HyperV config in tests 53f67705c Add release notes for v1.7.0-beta.0 c776a3631 Update mailmap b7d0d1271 Cleanup sandbox interfaces be3987a92 Migrate away from GitHub actions set-output 9a0331c47 maintenance: Remove WithWindowsNetworkNamespace from pkg/cri 3f3e2b3cc Fix LogURI generation-related tests on Windows. ddb8a65be update codeql-action to v2 727b33c71 Retry client connection in waitForStart 3e4449862 Add logging volume metrics to Containerd CRI plugin 3ddcbf5f1 Update 1.5 release support timeframe 9a8611d63 bump go-fuzz-headers fc86be501 not init a tracing processor when not loaded 47fa603e1 Update required Go version in BUILDING.md 8e7ef890a Use logtest if possible to clean up logs a76d68ee4 Separate containerd logs in GitHub Actions' console e47bdbd16 Upgrade critools from 1.24.1 to 1.25.0 878dbc7af Upgrade actions/upload-artifact from v2 to v3 198277202 Use `go env` to determine GOPATH in Makefile. 6a07a1c07 go.mod: matttproud/golang_protobuf_extensions v1.0.2 (use tag) 972399538 sys: synchronize mkdirall() with latest os.MkDirAll() 063c5f980 sys: create SecurityAttribute only once (Windows) a983599e2 sys: update volumePath regex to allow returning earlier d422c87e4 sys: compile volume-path regex once, and update GoDoc f8f052482 Vagrantfile: explicitly specify rsync as the shared folder driver 4839f1bdf Add timeouts to all CI jobs 890398677 cri: PodSandboxStatus should tolerate missing task fb6a40dc9 Don't unmount on Darwin when deleting bundle c7e6a889b sys: remove unused IsAbs() (windows) 48daccb4d fix the --no-pivot flag being ignored by `ctr tasks start` ea53e52fc CI: update GHA instances from Ubuntu 18.04 to 20.04 49a54e23c Stats() shouldn't assume s.container is non-nil e7c8a5ab0 Move up actions versions to prep for deprecation 752bff981 cmd/containerd: use golang.org/x/sys/windows.SetStdHandle() 8b5df7d34 update golangci-lint to v1.49.0 f9c80be1b remove unneeded nolint-comments (nolintlint), disable deprecated linters 29c7fc952 clean-up "nolint" comments, remove unused ones d21572513 pkg/cri/(server|sbserver): criService.getTLSConfig() add TODO to verify nolint 0eaace306 golangci-lint: sort linters in config file 3ebeb6d79 linting: address gosec G112/G114 347397cf2 update go.mod and go.sum 643dc1656 improve CDI logging 8ed910c46 CDI: configure registry on start eec7a76ec move WithCDI to pkg/cri/opts 634bf0dd3 cmd/containerd: use golang.org/x/sys Service.SetRecoveryActions() 17a932403 Update the default seccomp to block socket calls to AF_VSOCK d4b9dade1 Updates oci image config to support upstream ArgsEscaped 047e684bb fix install cni script b7f6a6804 runtime/v2/shim: clean up the use of containerdBinary b41d6f40b Update container with sandbox metadata after NetNS is created 8fc68db0c cmd/containerd: replace deprecated windows.IsAnInteractiveSession() 63a7d8a7f fix pusher concurrent close channel 260af5e1d TestTaskResize must use a terminal 39158629f diff/apply.readCounter: check negative size 70fbedc21 archive: add WithSourceDateEpoch() for whiteouts 0aefb5280 archive: windows: chtimes(): remove redundant conversion f9c9121e5 archive: validate digests before use 8162e044b Add long term stable release branches e2d8f3859 vendor: github.com/opencontainers/selinux v1.10.2 011fca6ed fuzzing: create structured tar bytes in archive fuzzer 54f2b5121 Update to go 1.19.2 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 f330ffd83 cri doc: Update kata containers reference 0119d43a4 use raw link to containerd.servic config a59ecc50e CRI: implement Controller.Delete for SandboxAPI 9d18b5746 Modify WithDiscardUnpackedLayers 4333e6a6d Swap to net.ErrClosed checks for services acb2964d6 go.mod: Bump go-winio to v0.6.0 4196fad02 Add integration tests with failpoint 4f4aad057 Persist container and sandbox if resource cleanup fails, like teardownPodNetwork 396b6d670 fix missing close 7a66f70b5 cri-integration: pass ENABLE_CRI_SANDBOXES to test 2432b54a5 Add new ctr option for discarding unpacked layers b4558bedc Add test flag for skipping shim cgroup test c6f571fc7 Set grpc code for unimplemented cri-api methods 82890dd29 CRI: implement Controller.Stop for SandboxAPI 927906992 CRI: implement Controller.Wait for SandboxAPI dcb0d8f9e remove stray .zuul.yaml e22a7a383 reference CDI configuration details bc01f8fc0 Add reader option to local content reader at c8010b9cb sbserver: return resources in ContainerStatus b92f3160a cri-integration: propagate ENABLE_CRI_SANDBOXES b79dcabd6 chore: enable Scorecard Github Action 8f4c23b69 retry request on writer reset a37c64b20 Refactor CRI fuzzers bf26140d9 Fix LogURIGenerator on Windows adfbda464 Add ext2 fs support to devmapper snapshotter f0fbc8dfd Upgrade fuzzing-related packages to reduce dependencies e7c593edd Fuzzing: Instrument with new sanitizers 9cdf9f6c6 Use jq and only show failed tests on summary 34ad96bab CI: Output a summary using GITHUB_SUMMARY 524d3aca8 github.com/emicklei/go-restful CWE-285: Improper Authorization 3cfde732e remotes/docker/config: Skipping TLS verification for localhost 0f51aa874 Add NoSameOwner option when unpacking tars b2a7183a8 matching the casing of other flags for ctr's pull command. 829dd2145 update cdi version to v0.5.1 0f743ce4f vendor: golang.org/x/net v0.0.0-20220906165146-f3363e06e74c 8f2bbd5e8 Update to go 1.19.1, 1.18.6 to address CVE-2022-27664, CVE-2022-32190 6ce0f6a26 Fix missing close 8575a0d6f Remove unused variable from images action 5e57d463d feature: use client default namespace 3c0e6c40a feat: upgrade registry.k8s.io/pause version f9166aa53 .zuul: remove the zuul because it is offline e041d1a2c integration: TestUpdateContainerResources_MemoryLimit: remove TODO comment 3a2197f5f metrics/cgroups/v1: Remove unused event parameter bfb280fb3 Update golangci-lint timeout to match config 407703f09 Make checkContainerTimestamps less strict on Windows 344b25995 delete redundent import alias and and type conversion 17e436c20 Pin github.com/AdamKorcz/go-118-fuzz-build a3bfa58b0 Make oss-fuzz mandatory 2e677c932 sys: move ForceRemoveAll to integration/client 19db697a5 archive: replace tarName() with filepath.ToSlash() 3cc3d8a56 mount: use ioctl helpers from x/sys/unix 0c6553bfd go.mod, vendor: bump golang.org/x/sys to latest version 93342d637 replace sys Sequential funcs with moby/sys/sequential 9ae2cc3a8 mount: remove unused ErrNotImplementOnWindows dcfaa30ba chore: remove duplicate word in comments b170eb3ca Add Kubernetes v1.25 supported version as v1.24 fdff11def ctr: add privileged-without-host-devices for run command d063597e8 Upgrade github.com/klauspost/compress from v1.11.13 to v1.15.9 eb664aed0 go.mod: github.com/opencontainers/runc v1.1.4 ad597015c update runc binary to v1.1.4 962841fc7 Clarify containerd 1.5.0+ for k8s 1.20,1.21 90f6bd21c script/setup: handle cnidir with SUDO 331066f87 update intergration 49e2fe2ab bump cri-api b7b1200dd ContainerStatus to return container resources 9525b3148 migrate from k8s.gcr.io to registry.k8s.io f0036cb9d windows: Add runhcs-wcow-hypervisor runtimeclass to the default config f318947b0 Do not rename test files on-the-fly to share functions 912d43b2b Revert "Downgrade MinGW to version 10.2.0" 850f667f5 contrib/fuzz/daemon.go: reformat the fileheader 460b0533b pkg/cri/streaming: increase ReadHeaderTimeout 9d286baed crypto/sha256 must be imported adc7d5b2e Don't patch github.com/cilium/ebpf 470d3ee05 Upgrade containerd/cgroups to remove github.com/cilium/ebpf's fuzzer 43907515b adding support of CAP_BPF and CAP_PERFMON 13b14736a Don't fail test when GOOGLE_APPLICATION_CREDENTIALS is unset 095044710 Remove Windows special case in TestContainerdRestart 1f8db2467 go.mod: Bump hcsshim to v0.10.0-rc.1 396d2a7e4 ci: remove GOPROXY environment variable due to go-yaml/yaml#887 1d8b1bc75 Cleanup shim manager ff65fc2d0 Make TaskList generic 6e4b6830f Update CRI-API 782fd3c8e Vagrantfile: dump containerd log after critest 74c09b756 Fix contrib/ header 8add7e5d3 Rework permission handling in scripts 6ba91de84 release workflow: remove Go setup action f8add9263 release workflow: increase timeout to 30 minutes 2dbff1dbc oci: skip checking gid for WithAppendAdditionalGroups 481861020 release: rollback Ubuntu to 18.04 (except for riscv64) 68bae258a Update protobuf definitions ca3b9b50f Run gofmt 1.19 4a11a4018 Update golangci-lint to 1.48 with Go 1.19 support ea6613029 Switch to Go 1.19 7787168cc Use global env variable to specify Go version on CI 5cf77fc43 Add TODOs for the remaining work e1c5d71c0 Update golang to 1.18.5, 1.17.13 ee0f2e906 Change os.Stderr reassign for Windows service 426fcfbc5 fix protobuf aarch64 aa3303b69 Update sandbox protobuf to match CRI 882322417 Update controller's start response to incldue pid and labels 3d028308e Cleanup CRI files c085fac1e Move sandbox start behind controller f51014f8d Add sandbox to in memory services 6c14ca25d Fix cleanup in critest e47c433d5 Add sandbox store helpers f5fb2c32d Regenerate protos with updated protoc-gen-go b16c3e9ad Windows HostProcess container CRI stats test 106433b79 Use httputil.DumpRequestOut for dumping client req 2fa84b1b8 Add extra context to error when push unauthorized f4d05f207 chore: bump macos runner version 276a6f133 test: error strings should not be capitalized 2b92c70fa Fix command line parsing for image list 14003683f go.mod: Bump hcsshim to v0.9.4 1e0698e8e Fix CRI image pull timeout test for ppc64le c15d8e156 go.mod: Bump hcsshim to 0.9.3 a9514da75 Update image references for Windows tests 2ae5f405d Use image lists instead of hardcoded images 552d76344 Use image lists in client tests d121efc6d replace with selinux label e6a2c0790 integration: simplify CNI-fp and add README.md 344431cdd fix: support simultaneous create diff for same parent snapshot 050cd58ce Drop deprecated `ioutil` 500ff95f0 Make getServicesOpts a helper ee6fc5c2e adds an env var commented out for sandboxed mode cbebeb944 pkg/failpoint: add FreeBSD link and update pkg doc 3c5e80b63 integration: Add injected failpoint testing for RunPodSandbox be91a219c integration: CNI bridge wrapper with failpoint 1ae6e8b07 pkg/failpoint: add DelegatedEval API b297775ea runtime/v2/shim: return if error in load plugin 5f9b318e5 bin/ctr,integration: new runc-shim with failpoint 822cc51d8 runtime/v2: manager supports server interceptor ffd59ba60 pkg/failpoint: init failpoint package 3125f7e1a cri_stats: handle missing cpu stats 7eeec8987 adds support for using env file for systemd boot 7dc66eee6 using ContextDialer instead 6639b2b02 test: Add ability to switch between cgroupv1 or cgroupv2 0d6881898 Refactor usageNanoCores be to used for all OSes f6bc986dc go.mod: github.com/stretchr/testify v1.8.0 628f6ac68 code cleanup cc30880e8 ci: workaround Cirrus CI's INVALID_ARGUMENT d8d63a7aa docs: Fix sample config.toml syntax 88bcbb036 adds a comment explaining how to disable experimental sbserver 3a3f43f72 Fix linter warnings 60f51c1aa Update and align golangci-lint version 98a1b7ff1 Add log messages when choosing CRI server bbb8d3470 seccomp: add get_mempolicy, mbind, set_mempolicy, with CAP_SYS_NICE 19e847983 seccomp: seccomp: add syscalls related to PKU in default policy 2ba635331 Change metrics namespace for sandboxed CRI to prevent panic b8e93774c Enable integration tests against sandboxed CRI cf5df7e4a Fork CRI server package 4ffef752d update golang to 1.18.4, 1.17.12 c733119db cri doc: fix formatting for CDI options f77d45e3b ctr: support --user for run/create 22dfc68ad Fix protobuf script to install protobuf on darwin bcdc8468f Fix out of date comments for CRI store packages 174b01344 update some devmapper docs 575095fcd seccomp: allow clock_settime64 when CAP_SYS_TIME is added e9e33f847 Copy fuzzers from github.com/cncf/cncf-fuzzing b31631859 Upgrade github.com/AdaLogics/go-fuzz-headers 6d4b61007 integration/client: fix typo in export_test.go b8bb33b92 fix can't edit object by using ctr content edit command 548c9c317 Fix WWW-Authenticate parsing b8403d2e1 Update k8s.io/cri-api to v0.25.0-alpha2 a44cabf51 Update go-restful/v3 to latest release c2703c08c pkg/cri: use marshal wrapper for version convertor d2588b3fa LCOW differ return ErrNotImplemented for wrong mount type 0a240ff81 Fix missing closed HTTP Body f7de1c8f9 Do not hardcode fuzzers 2b60770c4 Move container_fuzzer.go under integration/client/ 66cc0fc87 Copy FuzzCRI from cncf/cncf-fuzzing ca5637104 Remove mainfuzz package and StartDaemonForFuzzing 17f9c3a0e Move builtins_*.go to cmd/containerd/builtins to make the files reusable d97b754a5 Cleanup metadata tests 1ef4bda43 Downgrade MinGW to version 10.2.0 1ab42be15 refactor: reduce duplicate code 47ad5f70e Fix Doc: fb5b6612a ctr: Fix `ctr c create` fails to parse arguments 68a55fe8b make xattr EPERM non-fatal in createTarFile 99e210c50 Move metadata plugin registration to seperate package 4f0ea7831 fix: missing sudo for devmapper doc 72b87ad00 add WithAdditionalGIDs test 5bf705255 add WithAppendAdditionalGroups helper 5cde04bc7 Forward ctr snapshotter flags on Windows 4ac1031e0 Add snapshotter key to snapshot events b27a229df Move contrib/fuzz/docker_fuzzer.go to remotes/docker f91616e45 Copy FuzzConvertManifest from cncf/cncf-fuzzing c9c5fee37 Do not hardcode fuzzing targets 50f1a4e42 Don't log "ignored xattr ..." warnings 112497bc3 Make oss_fuzz_build.sh quiet 6e53ffb10 ctr: add --hostname flag to create, run 7002fc2c4 Ensure Windows Periodic workflow errors out while still uploading results. 2e288f5b1 improve content-flow d4ab64988 Revert MinGW to oldest known working version in Windows setup script. 55dd56e52 Make CI Fuzz optional 82adbc849 Run fuzzing tests with go test -fuzz a1eb2d8a6 Use testing.F on FuzzPlatformsParse 57200edf2 Use testing.F on FuzzParseProcPIDStatus 0b3c31dd7 Downgrade MinGW in Windows setup scripts. 42a386c81 CRI: change the /dev/shm mount options in Sandbox. a62a95789 CRI: remove default /dev/shm mount in Sandbox. 8245e35eb Make test path a constant ee14f9316 Run fuzzers in CI 52593cfc8 containerd-stress: add support for running through CRI 5560b622d archive: Explicitly specify stdio for tar(1) 95f1d7971 platforms: Run goimports for FreeBSD 42e019e63 cri/server: Disable tests on FreeBSD ad8e59806 oci: Remove empty mount option slice for FreeBSD c15f0cdaf oci: FreeBSD devices may have major number 0 2ab8c12fc archive: use Linkat on FreeBSD for hardlinks 61690d76d Improve naming consistencies in comments in snapshotter.go c101f7999 Allow CRI on Darwin 0167e55ab update runc binary to v1.1.3 c3fb7dfa7 go.mod: github.com/moby/sys/mountinfo v0.6.2 fa4720fa1 fix add ro mount for userattr-unmount unexpected timeout 92d360b58 fix minor spelling mistake: lablel -> label 6190b0f04 Correct spelling mistake ("sanbdox" to "sandbox") 5a6e4144a go.mod: github.com/containerd/cgroups v1.0.4 088c8df3a go.mod: github.com/containerd/continuity v0.3.0 012d68ff9 add gc scheduler metrics: collection count 44e12dc5d Windows snapshotter touch ups and new functionality 40aa4f3f1 Implicitly discard the input to drain the reader 00eb74a4c Make building static binaries simpler d25b4e6f3 Bump Golang and MinGW versions in Windows setup script. 7b9f1d405 Added support for runtime level snapshotter, issue 6657 8bc6ccc07 Bump k8s.io deps to v0.24.1 5fcde823d Bump grpc to v1.47.0 1b3c3860d update golang to 1.18.3, 1.17.11 e3b4d750d update go-cni/for cni update fixing plugins that don't respond with version 8ed54849a Move docker reference logic to reference/docker package f7aa90d27 Fix containerd-stress duration flag ae22854e2 Linux containers on FreeBSD 49ca87d72 Limit the response size of ExecSync 1cf6f2032 promote pause image to 3.7 b5e1b8f61 Use t.Run for /pkg/cri tests b572a82ad CRI: Remove deprecated error types and update error msg 978ff393d Add validations for Windows HostProcess CRI configs 1a8024b46 Makefile: use urfave_cli_no_docs for binaries that don't need it 5bb47fb95 vendor: github.com/urfave/cli v1.22.9 a3a2d14ec fix verify-vendor if go.mod does not contain replace rules 688b30cf5 CRI: Move truncindex to pkg e44335800 CRI: Move reference sorting to reference package b5366f8d7 CRI: Retrieve image spec on client 4ba5415fb build: Fix references to check-protos target in Makefile 8a3114b37 Fix broken oss-fuzz build d2f30150b archive: add human-readable hint to Lchown error 9f9ebbd99 Fix tx closed error when upperdirlabel specified 739cb4c99 config: improve config v1 deprecation message b5107a898 Fix Windows install powershell script b69182c71 add note that a namespace cannot be named "version" 8d95f2b59 fix comments on metadata schema 900019b30 ctr sandbox: handle sandbox config 8ec1fc70d adjust format a42688639 Restore decompression benchmarks 8494f7f11 adjust format in comment 92b7bc9ed ctr: fix label args used in NewContainer 4da4a8879 update doc url eaec6530d fix some confusing typos 65150600d Separate windows-2019 and windows-2022 test results 7300296cb reverts removal of parallel run from critest 523d069a2 sandbox: replace github.com/pkg/errors with native errors c4ce13a28 vendor: github.com/opencontainers/runc v1.1.2 25858d621 update runc binary to v1.1.2 c1140aef6 Bump OpenTelemetry dependencies f710505f4 shim: fix debug flag not working 72cd3b476 update golang to 1.18.2, 1.17.10 f5b7a4b3d CI: update Fedora to 36 a3ac15600 oci: WithDefaultUnixDevices(): remove tun/tap from the default devices ad8b87ba2 Add `Wait` to `binaryProcessor` d9fc5f4b0 Enable git commands due to git CVE fix 09c2c2a75 Pass explicit JUnit outfile to critest.exe in Windows workflow. 2c98a7b09 ctr import: strictly match platform d1c49781e go.mod: Bump k8s deps to v0.24.0 c721c8e27 devmapper docs: small fixes bb11c9d24 update critools to v1.24 8a2e8cd8d move report dir option to eol af24e3871 Update Kubernetes version matrix in release docs 7a834516f Share images between TestRestartMonitor and TestRestartMonitorWithOnFailurePolicy cedb7d3bd containerd 1.6.4 k8s 1.24 readme announce 57d2bce74 docs: minor fixes in snapshots.Snapshotter comments 42584167b Officially deprecate Schema 1 55401ac9c Update k8 docurl in file d4127a9f2 CI: add riscv64 builds 0e56e4f9f release/Dockerfile: update Ubuntu to 22.04 for supporting riscv64 4b412b800 seccomp: support riscv64 8160a3efc Reduce the number of the concurrent HTTP requests in TestUserNamespaces 7183fc81d Skip TestImagePullWithConcurrencyLimit on Cirrus CI 10576c298 cri: support blockio class in pod and container annotations 9b04d2fae docs: Adding windows installation steps to getting-started.md 227156dac Add ctr support for CPUMax and CPUShares b5370b040 Fix comment for metadata/db.go 5d0730370 Update go-cni to v1.1.5 180c7535d Upgrade protoc, protoc-gen-go and protoc-gen-go-grpc 2c6760005 go mod tidy & go mod vendor 29b937956 make protos fcba48636 Remove gogo from .proto files ae29594d0 Bump opencontainers/selinux from 1.10.0 to 1.10.1 46773c341 Cleanup leaked shim process 7f23296b9 Upgrade google.golang.org/grpc and google.golang.org/protobuf 7353006f6 Remove kzys/typeurl 7215f85ac Don't use "uname -a" as Cirrus CI's cache key 45c0cbec5 Create ppc64le release 5f43118ce Move Vagrant-based tests from GitHub Actions to Cirrus CI 00d102da9 feature: support image pull progress timeout fceab7f4c remove duplicate 0e6c7bf93 Fix undefined error in use of errors package a9f5190fb images/image.go: typo da3e2f985 fix incorrect syntax in comments 7a4f81d8b Fix tests aefd1849b go mod tidy and go mod vendor f616dd471 Upgrade containerd/typeurl 9dbe000a3 make protos 1a095e18b Rename Size_ to Size e3db7de8f Remove gogo/protobuf and adjust types fd37cc75b Use protoc-gen-go instead of protoc-gen-gogoctrd e044759eb Upgrade containerd/ttrpc 8710d4d01 cri: close fifos when container is deleted 7331b2af4 Add Container-Optimized OS into Adopters dfa6e8763 diff: hide types.Any from clients 01dfb110c Add go_package on all proto files aa1526def Use proto.Marshal instead of calling Marshal() on objects 95dde4959 Embed "Unimplemented" structs as proto recommended 35994a475 fix monitor restart 237ef0de9 Remove all gogoproto extensions 22cd13b37 fix nil pointer panic for monitor bd90ce043 Keep shim API backward compatible 39692e767 unpack: return error when no platforms defined 8017daa12 Add unpack interface to be used by client e2fd25f3d Move runtime v2 proto Move runtime v2 protos to api/runtime package. 3742c756e Don't generate a Go file, if that would be empty 5f3b72432 Fix protoc-gen-go-fieldpath 3b82f9e33 metadata: use resource max and end on registration 88c0c7201 Consolidate gogo/protobuf dependencies under our own protobuf package 80b825ca2 Remove gogoproto.stdtime dbdf50cc0 update golang to 1.18.1, 1.17.9 fd704d334 Build bin/gen-manpages instead of using "go run" b497e6414 Fuzz filter package with Go 1.18's fuzzer 94faa70df allow ptrace(2) by default for kernel >= 4.8 fe8da6dca Move lease manager plugin to separate package 147f0a7e0 check for duplicate nspath possibilities 942af1203 fix pool_device_test.go 5f3ce9512 Do not append []string{""} to command to preserve Docker compatibility 8367f69fb Add collectible resources to metadata gc c525aa5f8 Set timeout when collecting metrics from shim's Stat 49235ccba Change architecture path in README.md 8a1280b2b metrics/cgroups: fix deadlock issue in Add during Collect a5dfbfcf5 cri: load sandboxes/containers/images in parallel 6d69aca56 make consistent for checkpoint path 6341e0696 ADOPTERS: Update AKS Info b446c7647 [Sandbox] Remove outdated documentation d0b32c053 [sandbox] Migrate from gogo to Any 85a49e4ee [sandbox] Cleanup interfaces de4974572 [sandbox] Fix CI b7a36950f [Sandbox] Add Wait and PID 0d165e654 Restore sandboxes on daemon restart 0c5e5c357 Fix protobuf after rebase fa02477ca [sandbox] Add sandbox shim skeleton 35195737e [sandbox] Register shim plugin after #6301 17a2aaded [sandbox] Add ctr support 982de8a5d Launch sandboxed containers from task service 00f7a6bf2 [sandbox] Address PR review comments 6343fe3ea [sandbox] Implement sandbox controller eaccbf1d0 [sandbox] Add clients df234edeb [sandbox] Add controller service a433beb79 [sandbox] Update vendor 0e77f758a [sandbox] Implement store service 13eb1a4bb [sandbox] Revendor API changes d7ece8724 [sandbox] Save sandbox ID to container's store cab7d5b3d [sandbox] Implement metadata store 87d4c8923 [sandbox] Add basic sandbox structures and interfaces 4445d0a8d [sandbox] Add protobuf definitions 3df767405 add restart policy for enhanced restart manager 7e70ad9fb Pin upload-cloud-storage action to 0.8.0 in Windows workflow. 927b34e41 tracing: fix panic on startup when configured 1a45c2c5f docs: add Deckhouse to the list of adopters 825c1c58a CDI: update go.mod and vendor deps ff5c55847 move CDI calls to the linux-only code c9b4ccf83 add configuration for CDI aed0538da cri: implement CDI device injection 35383fb42 docs/cri: simplify 493baa6e7 Add docs/snapshots 811375856 CRI: improve image pulling performance 16fbbaeee Skip flaky test on Windows 44d7cd152 mv design docs/historical/design 195fc7424 docs: migrate config v1 to v2 84cebafe8 docs: remove deprecated `io.containerd.runtime.v1.linux` 83665bf8d docs/getting-started.md: typo ccea927d9 Move historical docs to `docs/historical` 50921e71b Run go mod tidy in integration tests 99c194e03 go.mod: move indirects, and update integration go.mod to 1.18 6ccec53d3 Remove gotest.tools 871b6b6a9 Use testify 6da318310 Disable writing freelist to make the file robust against data corruptions 62c846b17 Update linters to use t.Setenv 2d59a3944 Use t.Setenv instead of os.Setenv 4bdac2b43 Adding multi-arch support for the configure.sh script 6f269ccb3 docs/getting-started.md: massive update c7bdcdfbe Address some timeout issues in the Windows CI a2d22ac05 BUILDING.md: update supported Go versions d0bd65d3c Remove unmaintained contrib/linuxkit f2d5f71a7 update runc binary to v1.1.1 11a31320b go.mod: github.com/opencontainers/runc v1.1.1 0b2a95e10 Add no_tracing tag b42e936c5 CI: add Rocky Linux 8 b1030e7b6 CI: bump up crun to 1.4.4 b737cb10e Update README.md cf571fa96 added make help for cri integration 44a8ac7b0 Turn paths from cmdline into absolute paths 2689432bf Fix error message in TestNewBinaryIO 96b16b447 Use typeurl.Any instead of github.com/gogo/protobuf/types.Any fe426227d native: fix deadlock from leaving transactions open a51da91c1 moving up to go-cni v1.1.4 36612d692 go.mod: remove replace and update github.com/gogo/googleapis v1.4.1 df93940fb fix: ctr images mount with snapshotter option can't get snapshotter c091d48cb Use cgroups.AddProc() for cgroups v1 d2013d2c9 runtime: deprecate runc --criu / -criu-path option 388ee880d Upgrade containerd/imgcrypt and opencontainers/image-spec 70a06d0c8 Upgrade to Go 1.18 067611fde Remove enumvalue_customname, goproto_enum_prefix and enum_customname bfde58e3c Bug fix for mount path handling e9bb9c3bc Skip tty critest testcase on Windows Server 2022 3eeeb9429 Remove gogoproto.customtype 040babe00 Vendor dependencies with module graph pruning a19ad9bb6 Use Go 1.18 to build and test containerd 56f95e3d8 Test turning off golang CI lint cache ee49c4d55 Add nolint:staticcheck to platform-specific calls c56875233 Update prometheus client vendor 9aadef1be vendor: golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd fdb746442 document log level and format 52d307ac1 test: remove redundant `mountPoint` 2a0b2ee9e fix: ctr run --cni get failed 18ec2761c test: use `T.TempDir` to create temporary test directory b8bf504e9 Enable gosec linter for golangci-lint 2ddcb2019 Make OpenLab's CI jobs blocking cc526a98a Make mkfs.xfs available on OpenLab's CI environment ba1674389 typo fixes under cmd. 2e080bf49 Add shared content label to namespaces 2a425990c Implement `--device idType://id` for `ctr run` on Windows 39d52118f Plumb CRI Devices through to OCI WindowsDevices 6a25be94e CRI integration test for Windows Device mounts 622a35a4f Upgrade golangci-lint and its GitHub Action 59b1871b3 Fix link in getting-started.md 88de65112 Don't build a second copy of containerd-shim-runhcs-v1.exe 807ded41f Update TestNormalize to only test Windows 80bc32f06 Use temp file for export/import test 0d0b2bd4f Mount devmapper xfs file system with "nouuid" option. 14901335c Increase wait timeout for TestDaemonRestart 718adfe06 Use the latest image for Windows test workers 894e78001 Improve ErrUnexpectedStatus default string 48b478381 Skip most of script/setup/prepare_env_windows.ps1 768bf73dd Enable cri-tools critest on Windows 59b978847 Enable CRI Integration tests on Windows 5b78a9a8f Remove hardcoded /tmp in tempfile paths 03a5e648b Use version 2 config and mention containerd config command e0a6f9c7d update to go 1.16.15, 1.17.8 to address CVE-2022-24921 b90c466c3 Add ErrUnexpectedStatus to resolver fdaf859aa Update status of 1.4 release 7b045ea5f ctr: improve error relative shim path error msg e5efc260d Update latest release versions 63dd929af Update release process to include Kubernetes test infrastructure 0c79257f5 Add --user support for ctr run Windows de3d9993f Adds support for Windows ArgsEscaped images 775facd57 cri: fix integration test on cgroupsv2 system f1f69d4ee integration: remove duplicated util pkg 352a8f49f cri: relax test for system without hugetlb ec90efbe9 Make the temp mount as ready only in container WithVolumes ea3d2e643 go.mod: update to github.com/tchap/go-patricia/v2 v2.3.1 2b68c03a6 Update Go version recommendation in getting started 77c0539e9 Use containerd/protobuild instead of stevvooe/protobuild d28981d48 Fix build with gccgo f4f41296c Replace golang.org/x/net/context with std library 296f75bd0 Do not use weak import 3febabffe Add protoc-gen-go-fieldpath 7901f4b33 containerd-shim-runc-v1: return init pid when clean dead shim a3303e721 Update TestContainerSymlinkVolumes to use windows path 481fb923c go.mod: update to github.com/emicklei/go-restful/v3 v3.7.3 fb0b8d617 Use fs.RootPath when mounting volumes 1a31772a7 go.mod: github.com/moby/sys/signal v0.7.0 b1881bdc0 go.mod: github.com/moby/sys/mountinfo v0.6.0 b6a6757c1 go.mod: github.com/fsnotify/fsnotify v1.5.1 83c80388b Initialize platform matchers for current platform b63000c65 [Windows][Integration] Enable TestRestartMonitor 7275411ec cgroup2: monitor OOMKill instead of OOM to prevent missing container OOM events 6906b57c7 Fix the Inheritable capability defaults. fdbfde5d8 cmd/containerd-shim: add -v (version) flag e79aba10d integration/images/volume-ownership: strip path information from usage output b8cadf753 runtime/v2/shim: strip path information from version output 356ca7575 containerd-shim-runc-v2: return init pid when clean dead shim 86d52fc26 Fuzzing: refactor metadata fuzzers 894af07e3 integration: Adds Windows equivalent for TestSandboxRemoveWithoutIPLeakage 54e95e6b8 fix Implicit memory aliasing in for loop 5d4dc5780 remotes/docker: log registry URLs as info instead of debug afe39bebf add oci.WithAllDevicesAllowed flag for privileged_without_host_devices Signed-off-by: Bruce Ashfield <[email protected]>

…n 1.6.14 Akhil Mohan (5): retry request on writer reset update codeql-action to v2 support fetching containerd from non public GCS buckets disable tracing while handling token Revert "[release/1.6] support fetching containerd from non public GCS buckets" Akihiro Suda (3): update runc binary to v1.1.4 CI: update GHA instances from Ubuntu 18.04 to 20.04 cri: fix `memory.memsw.limit_in_bytes: no such file or directory` Andrey Klimentyev (1): Do not append []string{""} to command to preserve Docker compatibility Austin Vazquez (2): Migrate away from GitHub actions set-output Fix order of operations when setting lease labels Benjamin Elder (1): remove stray .zuul.yaml Danny Canter (3): overlayutils: Add fastpath for userxattr check Prepare release notes for v1.6.10 CRI stream server: Fix goroutine leak in Exec Derek McGowan (4): Prepare release notes for v1.6.11 Prepare release notes for v1.6.12 Prepare release notes for v1.6.13 Prepare release notes for v1.6.14 Gavin Inglis (2): ctr import: strictly match platform allow client to remove created tasks with PID 0 Henry Wang (1): adding support of CAP_BPF and CAP_PERFMON Iceber Gu (1): remotes/docker/config: Skipping TLS verification for localhost Kathryn Baldauf (1): [release/1.6] go.mod: Bump hcsshim to v0.9.5 Kazuyoshi Kato (3): [release/1.6] upgrade containerd/continuity from v0.2.2 to v0.3.0 [release/1.6] Stats() shouldn't assume s.container is non-nil Upgrade actions/upload-artifact from v2 to v3 Kirtana Ashok (2): Added nullptr checks to pkg/cri/server and sbserver Bump hcsshim to v0.9.6 Maksym Pavlenko (4): Fix cleanup in critest Fix linter warnings Rework permission handling in scripts Use global env variable to specify Go version on CI Mathis Michel (1): fix: check for tmpfs when evaluating if userxattr should be used Mike Brown (1): nil check to avoid panic on upgrade Paco Xu (1): migrate from k8s.gcr.io to registry.k8s.io Phil Estes (1): Move up actions versions to prep for deprecation Qasim Sarfraz (2): cri: add pod uid annotation cri: make swapping disabled with memory limit Qiutong Song (3): Persist container and sandbox if resource cleanup fails, like teardownPodNetwork Add integration tests with failpoint Update container with sandbox metadata after NetNS is created Samuel Karp (5): ci: remove GOPROXY environment variable due to go-yaml/yaml#887 archive: validate digests before use cri: PodSandboxStatus should tolerate missing task Update mailmap Prepare release notes for v1.6.9 Sebastiaan van Stijn (9): oci: WithDefaultUnixDevices(): remove tun/tap from the default devices vendor: golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd [release/1.6] integration: remove use of deprecated io/ioutil [release/1.6] gofmt with go1.19 [release/1.6] update golangci-lint to v1.19.0 [release/1.6] Update go 1.18.7, addresses CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 [release/1.6] update to Go 1.18.8 to address CVE-2022-41716 [release/1.6] go.mod: use golang_protobuf_extensions v1.0.4 [release/1.6] update to go1.18.9 Shinichi Morimoto (1): fix pool_device_test.go Sophie Liu (1): Add logging volume metrics to Containerd CRI plugin Wei Fu (10): .zuul: remove the zuul because it is offline pkg/failpoint: init failpoint package runtime/v2: manager supports server interceptor bin/ctr,integration: new runc-shim with failpoint runtime/v2/shim: return if error in load plugin pkg/failpoint: add DelegatedEval API integration: CNI bridge wrapper with failpoint integration: Add injected failpoint testing for RunPodSandbox pkg/failpoint: add FreeBSD link and update pkg doc integration: simplify CNI-fp and add README.md Yasin Turan (1): ctr export strictly match default platform Ye Sijun (1): make xattr EPERM non-fatal in createTarFile chaunceyjiang (1): fatal error: concurrent map iteration and map write cosmoer (1): fix: support simultaneous create diff for same parent snapshot lengrongfu (1): fix pusher concurrent close channel ruiwen-zhao (3): Update CRI-API ContainerStatus to return container resources Set grpc code for unimplemented cri-api methods zounengren (2): bump cri-api update intergration

Source: meta-virtualization MR: 123707 Type: Integration Disposition: Merged from meta-virtualization ChangeID: 9c1fb8f Description: Bumping containerd to version v1.6.8-8-g579a6380e, which comprises the following commits: 1efd8b947 ci: remove GOPROXY environment variable due to go-yaml/yaml#887 0448673af Do not append []string{""} to command to preserve Docker compatibility 5c230ece0 Fix cleanup in critest ed9d3dc37 oci: WithDefaultUnixDevices(): remove tun/tap from the default devices 3364f411e Prepare release notes for v1.6.8 390920429 release workflow: remove Go setup action cf48ba6e8 release workflow: increase timeout to 30 minutes 57873e652 release: rollback Ubuntu to 18.04 (except for riscv64) eccb82f6d Update release build timeout to 20 minutes 6a854d4b5 Update mailmap 61612e1a2 Prepare release notes for 1.6.7 d199ee462 Update golang to 1.17.13 0578d20c5 Change os.Stderr reassign for Windows service 12cae4961 Update Vagrant CI to macos-12 bc4091aae chore: bump macos runner version cb73bd050 Windows HostProcess container CRI stats test ac388525a Add validations for Windows HostProcess CRI configs 0007f40fe [release/1.6] go.mod: Bump hcsshim to v0.9.4 c9607e78c Update Fedora version to 36 2952b66c0 CI: add riscv64 builds 6b2dc9a37 release/Dockerfile: update Ubuntu to 22.04 for supporting riscv64 745dc07c4 seccomp: support riscv64 c2f841f21 Create ppc64le release 86b55bd8d seccomp: allow clock_settime64 when CAP_SYS_TIME is added f3da3e51f allow ptrace(2) by default for kernel >= 4.8 aa1101068 [release/1.6] update golang to 1.17.12 37dfc5c9d [release/1.6] Fix WWW-Authenticate parsing Signed-off-by: Bruce Ashfield <[email protected]> Signed-off-by: Jeremy A. Puhlman <[email protected]>

Source: meta-virtualization MR: 123079, 123060, 123245, 123707 Type: Security Fix Disposition: Merged from meta-virtualization ChangeID: 181a754 Description: Bumping containerd to version v1.6.9-12-g6c41694da, which comprises the following commits: 5af8d89ce overlayutils: Add fastpath for userxattr check 303f608dd [release/1.6] update to Go 1.18.8 to address CVE-2022-41716 3f9f9508d ctr export strictly match default platform df73acad5 [release/1.6] go.mod: Bump hcsshim to v0.9.5 658490b78 ctr import: strictly match platform 4907b4d72 Migrate away from GitHub actions set-output f1493f665 Prepare release notes for v1.6.9 346412f5a adding support of CAP_BPF and CAP_PERFMON 99578d1fc Update mailmap a956d8415 Add logging volume metrics to Containerd CRI plugin 29e2dea50 fix pusher concurrent close channel 8a9d69385 [release/1.6] Stats() shouldn't assume s.container is non-nil a9adc7938 cri: PodSandboxStatus should tolerate missing task b66eb726a migrate from k8s.gcr.io to registry.k8s.io 5b40993a5 [release/1.6] upgrade containerd/continuity from v0.2.2 to v0.3.0 f2376e659 Update container with sandbox metadata after NetNS is created 06f82efef archive: validate digests before use 28324c529 [release/1.6] Update go 1.18.7, addresses CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 0aeeb62cb [release/1.6] update golangci-lint to v1.19.0 7db9d1f76 Fix linter warnings 4dc932e62 [release/1.6] gofmt with go1.19 7b8d679ad [release/1.6] integration: remove use of deprecated io/ioutil 926b9c72f retry request on writer reset b9a35c6af Add integration tests with failpoint 1f29fac48 Persist container and sandbox if resource cleanup fails, like teardownPodNetwork a85709c6c integration: simplify CNI-fp and add README.md d89a8d223 pkg/failpoint: add FreeBSD link and update pkg doc b0ce2965a integration: Add injected failpoint testing for RunPodSandbox a7f956d86 integration: CNI bridge wrapper with failpoint 07c479471 pkg/failpoint: add DelegatedEval API 4a5bc05aa runtime/v2/shim: return if error in load plugin 71ee7de24 bin/ctr,integration: new runc-shim with failpoint 3e2e77849 runtime/v2: manager supports server interceptor cb935bf49 pkg/failpoint: init failpoint package 2fdfd564c make xattr EPERM non-fatal in createTarFile 89e49609d remotes/docker/config: Skipping TLS verification for localhost b720be2ce remove stray .zuul.yaml 6b30bc4b4 .zuul: remove the zuul because it is offline 0f7e258ee Set grpc code for unimplemented cri-api methods fb753e5cd update intergration 6ee5bb7ea bump cri-api ae8598615 ContainerStatus to return container resources d3c7e31c8 Update CRI-API 5b44c5271 vendor: golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd 3507d600b update runc binary to v1.1.4 1efd8b947 ci: remove GOPROXY environment variable due to go-yaml/yaml#887 Signed-off-by: Bruce Ashfield <[email protected]> Signed-off-by: Jeremy A. Puhlman <[email protected]>

Bumping containerd to version v1.7.0-beta.0-284-gf2cf411b7, which comprises the following commits: d5010a12d docs: Authorizer.Authorize could return ErrUnexpectedStatus 2eabcf702 fix: check for tmpfs when evaluating if userxattr should be used a6929f9f6 Add Evented PLEG support to sandbox server a338abc90 Add container event support to containerd e14753fc5 Respect no_cri constraint 3bc8fc4d3 Cleanup build constraints c040f8382 Fix default config for Darwin 0b349428e CI: Vagrant: pin rockylinux/8 to v5.0.0 662d8a085 vendor: golang.org/x/net v0.4.0 f9295aa49 Fix context when waiting sandbox 8ab1d4496 Pass runtime configuration as TOML blob 3e92dedc2 Update runtime options to include bytes blob a113737cc sbserver bug fixing 85776d2c6 update to go1.19.4, go1.18.9 840a657eb Change PushContent to require only Provider 847294679 Adding unit tests to opentelemetry tracing 8a25fa584 Unwrap proto errors in streaming client b0dd50655 fix panic when containerd-stress density --count 0 39cc684c6 docs: Add extra security instructions afa19a0a7 Fix process_vm_* syscall names in seccomp 740e90177 go.mod: re-vendor NRI from the official repo. 345332175 upgrade the ops.md output for current 1.7 version . f88162587 Rename transferer to transferrer fc2754204 Cleanup code comments and lint fixes f1598cf5e Update transfer docs 01bd314b1 Rename local transfer plugin c387a5205 Add variables names to transfer interface 8304a61b5 Combine stream fuzz tests 0762a3a75 Add media type to export stream 52341a234 Update export API types 42eedc0bc Update ctr to make local the default for distribution ef61e13a6 Update import cli to use transfer service 11c1c8e6f Update import logic 66dc4d106 Update API for import types b991c71e9 Update pull command to use filter arguments 40d3fa3af Add filter fields to image store types 9ae92f16e Improve push handler ordering 737257bb4 Add push progress e88baa087 Fixup pull authorization and labeling 478f1c934 Lint fixes 28ea75456 Regenerated protobuf files with updated version b0f519703 Add transfer docs cd67a98ec Add transfer integration test 0aca4bb1f Update ctr commands to use transfer interface 6b5df1ee1 Update transfer packages 2a8d7a744 Update transfer API 7318a2def Add transfer plugin registration d1627e3c7 Add basic import and export handlers adfaeeff0 Add binary stream functionality and helpers e506cd103 Implement client interface for transfer service 81afd9c36 Add progress 0e4e96544 Add transfer proxy client 6f64cb859 Transfer interface and plugin work in progress f61ed7e94 Transfer API types a24ea31c2 Add transfer API dcf5687ca Add streaming service 08d5879f3 Added nullptr checks to pkg/cri/server and sbserver 8e0a3c51a Add ctr image prune ceab73007 use MaxConcurrentDownloads instead of MaxConcurrentUploadedLayers f012617ed CRI stream server: Fix goroutine leak in Exec 9f4ba4883 [sandbox] Fix panic when waiting for sandbox controller dbc6d33ac [sandbox] Specify sandbox ID when using sandboxed shims 9a53a6c34 [sandbox] Don't access pause container when creating pod container cc111eef6 [sandbox] Move sandbox info to podsandbox controller a0daf1c28 docs: add NRI-related documentation. 02f0a8b50 pkg/cri/server: nuke old v0.1.0 NRI hooks. ca84aba6c integration: add first NRI integration tests. b27ef6f16 pkg/cri/server: experimental NRI integration for CRI. 43704ca88 nri: add experimental NRI plugin. a6d1d53cc [sandbox] Update Controller.Status protos 2136736f5 go.mod: golang_protobuf_extensions v1.0.4 - prevent incompatible versions 63c6c55ab go.mod: roll back github.com/containerd/cgroups to v1.0.4 release 3c1c0878e integration/client: update containerd version to v1.7.0-beta.0 ebd63adac integration/client: fix go.mod grouping 8d868dadb Add ptrace readby and tracedby to default AppArmor profile 8c035d387 Resolve warnings in Windows GitHub Actions periodic workflows ae0da7dc5 Use sandbox store to retrieve runtime info for sandboxed containers 3ddaa3444 Retrieve sandbox creation time from store. 4b3281982 Remove duplicated helpers 3f331e7d1 Specify runtime configuration for sandbox shims c4dee237f Fix order of operations when setting lease labels a22f0a4c3 archive: set WithModTimeUpperBound when WithSourceDateEpoch is set ed3a49c0e fix for OSS-Fuzz infra changes ac4af4df8 integration: enable CNI slow test for sbserver a74f7e902 sbserver: save netns in sandbox metadata on create 085d8e633 integration: enable tests for sbserver 1deaedd38 sbserver: persist sandbox during partial teardown 5a7c108ba Resolve Scorecards GitHub Actions workflow warnings b7b185c92 update github.com/cpuguy83/go-md2man/v2 to v2.0.2 6142a2a24 sys: remove unused GetOpenFds() f0ce2f6d3 remotes/docker: remove deprecated NewAuthorizer alias c71a31156 sys: remove aliases for deprecated EpollCreate1, EpollCtl, EpollWait 3e5b444ac pkg/cri/util/: remove deprecated NormalizeImageRef alias 3a7cfaebb sys: remove alias for deprecated sys.RunningInUserNS() bd912bbee go.mod: github.com/matttproud/golang_protobuf_extensions v1.0.2 5f23daeb2 go.mod: github.com/moby/sys/sequential v0.5.0 763ec7c86 go.mod: github.com/cpuguy83/go-md2man/v2 v2.0.2 0f616e354 go.mod: github.com/AdaLogics/go-fuzz-headers v0.0.0-20221118232415-3345c89a7c72 df4d07352 go.mod: golang.org/x/sys v0.2.0 4e68634ef go.mod: github.com/sirupsen/logrus v1.9.0 579c7f43d Change fsnotify event status condition. 2cea525ee Bump fsnotify to v1.6.0 73c6db881 Bump urfave-cli to v1.22.10 bf777a70b remove duplicated tx rollback 70b65062c Missed out `platform interface` when reused the conn for Client. 0c4d32c13 cri: add pod uid annotation 438db09b0 Fix building.md for btrfs 792294ce0 Update to cri-api v0.26.0-beta.0 234bf990d Copy cri-api v1alpha2 from v0.25.4 to containerd internal directory e224f77eb Add process_vm read and write calls to default seccomp profile e4130b2a0 overlay: Remove unused method param 661aaae3b introspection: expose the daemon's PID and PIDNS f6232793b can set up the network serially by CNI plugins 2f5dd7c66 CI: update Fedora to 37 3fc5802d1 gotestsum match go version 1.19 aaf59efd2 Expose Done and Err in Shutdown service 5d0457df9 Refactored ctr to allow for tty allocation when container has {terminal:true} within Spec c245347e9 tx rollback when GetInfo return error 14a08721c Remove OpenTelementry imports from remotes/docker package 405024db0 complement sub-command note for containerd-main e38e2c8a4 make status more readable and update easy. 3abcfb5c0 keep the lower case letter for flag info 69af001b3 Replace broken and redirection link for CRI and kubelet in docs b0133882f bump critools into ca1571e6edd116b2c95f52e3dfa0b4779b74223a 8bb599973 Remove the outdated comment dd86128e0 Convert hcsshim's stats to cgroups' stats 6596a7086 Use github.com/containerd/cgroups/v3 to remove gogo 38ad785ce Bump k8s.io deps to v0.25.4 bd66f588b Bump OpenTelemetry contrib to v0.36.4 3fca677c1 Release: add static binaries 0c63c42f8 Fix slice append error b829e6f2d Bump OpenTelemetry to v1.11.1 7def13dde Add a thin wrapper around otel Span object ab194e65f Bump grpc to v1.50.1 b742aa2e7 fuzzing: bump go-fuzz-headers 91e295d76 Add `--debug` args 0f54c4740 feat add sandbox api status func c953eecb7 Sandbox API: Add a new mode config for sandbox controller impls 99ac7a771 add oci.WithCPURT 717aa5929 Remove uses of deprecated go-digest.NewDigestFromHex, go-digest.Digest.Hex 3a9044f24 Rename darwin-kubelet to containerd 5f48e00af Extra documentation for content interfaces. 202abf8fc Bump k8s.io deps to v0.25.3 eaedadbed replace strings.Split(N) for strings.Cut() or alternatives f90219d47 services/server/config: TestMergeConfigs(): use correctly formatted values 4866d8ba4 registry: support ipv6 addresses 8bec2b652 Replace references to `re` with `regexp.MustCompile` 5c510e47a Improve how reference regexps are built 98ff27265 Clarify repo name regex intention 2a8a53178 go.mod: change imports to github.com/distribution/distribution/v3 a97eb6955 Update repo normalize error message to include the name of the repo. b979f0069 Fix bug in parsing domain from repository reference f96660286 reference/docker: add unit-tests from upstream distribution/distribution 7de88c5ba reference/docker: align files with original code f32595a0c Fix "getCPUInfo for OS freebsd: not implemented" on FreeBSD/arm64 11a06c1a3 ctr: add `ctr content fetch-blob` dfd6a3aa6 remotes: add FetcherByDigest for fetching blobs without foreknown descriptors c607f83c3 Fix missing closed fifo a24ef0993 Replace mount fork hack with CLONE_FS 8b1b81eef Update hosts doc f0bf9e7f8 Support default hosts.toml configuration 81bbd9dac add option to resolve symlinks to linux device ee64926a7 add SpanAttribute 2d9f0f2fb add additional info in backport process 3b87d46ce Add tracing spans in CRI image service and pull.go 902b96cf2 fix comments 30c3078ae go.mod: golang.org/x/*: use tagged versions 422a24066 Bump go version to 1.19.3 9c2a63440 Fix ctr crash when pulling with http-trace and http-dump 78ac0046a ctr export strictly match default platform a270d6e8a Harden GITHUB_TOKEN permissions 98269c061 s390x: initial enabler 4b2a23e7e overlayutils: Add fastpath for userxattr check 2da782468 Add sequence diagram for shim runtime v2 0be981595 Sandbox API: Move remote impls to /sandbox/proxy 2e83d885d fuzzing: improve archive fuzzer 7c77b3540 Add Workflow for running critest with Hyper-V Containers on Windows. 9494f0b80 Add HyperV config in tests 53f67705c Add release notes for v1.7.0-beta.0 c776a3631 Update mailmap b7d0d1271 Cleanup sandbox interfaces be3987a92 Migrate away from GitHub actions set-output 9a0331c47 maintenance: Remove WithWindowsNetworkNamespace from pkg/cri 3f3e2b3cc Fix LogURI generation-related tests on Windows. ddb8a65be update codeql-action to v2 727b33c71 Retry client connection in waitForStart 3e4449862 Add logging volume metrics to Containerd CRI plugin 3ddcbf5f1 Update 1.5 release support timeframe 9a8611d63 bump go-fuzz-headers fc86be501 not init a tracing processor when not loaded 47fa603e1 Update required Go version in BUILDING.md 8e7ef890a Use logtest if possible to clean up logs a76d68ee4 Separate containerd logs in GitHub Actions' console e47bdbd16 Upgrade critools from 1.24.1 to 1.25.0 878dbc7af Upgrade actions/upload-artifact from v2 to v3 198277202 Use `go env` to determine GOPATH in Makefile. 6a07a1c07 go.mod: matttproud/golang_protobuf_extensions v1.0.2 (use tag) 972399538 sys: synchronize mkdirall() with latest os.MkDirAll() 063c5f980 sys: create SecurityAttribute only once (Windows) a983599e2 sys: update volumePath regex to allow returning earlier d422c87e4 sys: compile volume-path regex once, and update GoDoc f8f052482 Vagrantfile: explicitly specify rsync as the shared folder driver 4839f1bdf Add timeouts to all CI jobs 890398677 cri: PodSandboxStatus should tolerate missing task fb6a40dc9 Don't unmount on Darwin when deleting bundle c7e6a889b sys: remove unused IsAbs() (windows) 48daccb4d fix the --no-pivot flag being ignored by `ctr tasks start` ea53e52fc CI: update GHA instances from Ubuntu 18.04 to 20.04 49a54e23c Stats() shouldn't assume s.container is non-nil e7c8a5ab0 Move up actions versions to prep for deprecation 752bff981 cmd/containerd: use golang.org/x/sys/windows.SetStdHandle() 8b5df7d34 update golangci-lint to v1.49.0 f9c80be1b remove unneeded nolint-comments (nolintlint), disable deprecated linters 29c7fc952 clean-up "nolint" comments, remove unused ones d21572513 pkg/cri/(server|sbserver): criService.getTLSConfig() add TODO to verify nolint 0eaace306 golangci-lint: sort linters in config file 3ebeb6d79 linting: address gosec G112/G114 347397cf2 update go.mod and go.sum 643dc1656 improve CDI logging 8ed910c46 CDI: configure registry on start eec7a76ec move WithCDI to pkg/cri/opts 634bf0dd3 cmd/containerd: use golang.org/x/sys Service.SetRecoveryActions() 17a932403 Update the default seccomp to block socket calls to AF_VSOCK d4b9dade1 Updates oci image config to support upstream ArgsEscaped 047e684bb fix install cni script b7f6a6804 runtime/v2/shim: clean up the use of containerdBinary b41d6f40b Update container with sandbox metadata after NetNS is created 8fc68db0c cmd/containerd: replace deprecated windows.IsAnInteractiveSession() 63a7d8a7f fix pusher concurrent close channel 260af5e1d TestTaskResize must use a terminal 39158629f diff/apply.readCounter: check negative size 70fbedc21 archive: add WithSourceDateEpoch() for whiteouts 0aefb5280 archive: windows: chtimes(): remove redundant conversion f9c9121e5 archive: validate digests before use 8162e044b Add long term stable release branches e2d8f3859 vendor: github.com/opencontainers/selinux v1.10.2 011fca6ed fuzzing: create structured tar bytes in archive fuzzer 54f2b5121 Update to go 1.19.2 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 f330ffd83 cri doc: Update kata containers reference 0119d43a4 use raw link to containerd.servic config a59ecc50e CRI: implement Controller.Delete for SandboxAPI 9d18b5746 Modify WithDiscardUnpackedLayers 4333e6a6d Swap to net.ErrClosed checks for services acb2964d6 go.mod: Bump go-winio to v0.6.0 4196fad02 Add integration tests with failpoint 4f4aad057 Persist container and sandbox if resource cleanup fails, like teardownPodNetwork 396b6d670 fix missing close 7a66f70b5 cri-integration: pass ENABLE_CRI_SANDBOXES to test 2432b54a5 Add new ctr option for discarding unpacked layers b4558bedc Add test flag for skipping shim cgroup test c6f571fc7 Set grpc code for unimplemented cri-api methods 82890dd29 CRI: implement Controller.Stop for SandboxAPI 927906992 CRI: implement Controller.Wait for SandboxAPI dcb0d8f9e remove stray .zuul.yaml e22a7a383 reference CDI configuration details bc01f8fc0 Add reader option to local content reader at c8010b9cb sbserver: return resources in ContainerStatus b92f3160a cri-integration: propagate ENABLE_CRI_SANDBOXES b79dcabd6 chore: enable Scorecard Github Action 8f4c23b69 retry request on writer reset a37c64b20 Refactor CRI fuzzers bf26140d9 Fix LogURIGenerator on Windows adfbda464 Add ext2 fs support to devmapper snapshotter f0fbc8dfd Upgrade fuzzing-related packages to reduce dependencies e7c593edd Fuzzing: Instrument with new sanitizers 9cdf9f6c6 Use jq and only show failed tests on summary 34ad96bab CI: Output a summary using GITHUB_SUMMARY 524d3aca8 github.com/emicklei/go-restful CWE-285: Improper Authorization 3cfde732e remotes/docker/config: Skipping TLS verification for localhost 0f51aa874 Add NoSameOwner option when unpacking tars b2a7183a8 matching the casing of other flags for ctr's pull command. 829dd2145 update cdi version to v0.5.1 0f743ce4f vendor: golang.org/x/net v0.0.0-20220906165146-f3363e06e74c 8f2bbd5e8 Update to go 1.19.1, 1.18.6 to address CVE-2022-27664, CVE-2022-32190 6ce0f6a26 Fix missing close 8575a0d6f Remove unused variable from images action 5e57d463d feature: use client default namespace 3c0e6c40a feat: upgrade registry.k8s.io/pause version f9166aa53 .zuul: remove the zuul because it is offline e041d1a2c integration: TestUpdateContainerResources_MemoryLimit: remove TODO comment 3a2197f5f metrics/cgroups/v1: Remove unused event parameter bfb280fb3 Update golangci-lint timeout to match config 407703f09 Make checkContainerTimestamps less strict on Windows 344b25995 delete redundent import alias and and type conversion 17e436c20 Pin github.com/AdamKorcz/go-118-fuzz-build a3bfa58b0 Make oss-fuzz mandatory 2e677c932 sys: move ForceRemoveAll to integration/client 19db697a5 archive: replace tarName() with filepath.ToSlash() 3cc3d8a56 mount: use ioctl helpers from x/sys/unix 0c6553bfd go.mod, vendor: bump golang.org/x/sys to latest version 93342d637 replace sys Sequential funcs with moby/sys/sequential 9ae2cc3a8 mount: remove unused ErrNotImplementOnWindows dcfaa30ba chore: remove duplicate word in comments b170eb3ca Add Kubernetes v1.25 supported version as v1.24 fdff11def ctr: add privileged-without-host-devices for run command d063597e8 Upgrade github.com/klauspost/compress from v1.11.13 to v1.15.9 eb664aed0 go.mod: github.com/opencontainers/runc v1.1.4 ad597015c update runc binary to v1.1.4 962841fc7 Clarify containerd 1.5.0+ for k8s 1.20,1.21 90f6bd21c script/setup: handle cnidir with SUDO 331066f87 update intergration 49e2fe2ab bump cri-api b7b1200dd ContainerStatus to return container resources 9525b3148 migrate from k8s.gcr.io to registry.k8s.io f0036cb9d windows: Add runhcs-wcow-hypervisor runtimeclass to the default config f318947b0 Do not rename test files on-the-fly to share functions 912d43b2b Revert "Downgrade MinGW to version 10.2.0" 850f667f5 contrib/fuzz/daemon.go: reformat the fileheader 460b0533b pkg/cri/streaming: increase ReadHeaderTimeout 9d286baed crypto/sha256 must be imported adc7d5b2e Don't patch github.com/cilium/ebpf 470d3ee05 Upgrade containerd/cgroups to remove github.com/cilium/ebpf's fuzzer 43907515b adding support of CAP_BPF and CAP_PERFMON 13b14736a Don't fail test when GOOGLE_APPLICATION_CREDENTIALS is unset 095044710 Remove Windows special case in TestContainerdRestart 1f8db2467 go.mod: Bump hcsshim to v0.10.0-rc.1 396d2a7e4 ci: remove GOPROXY environment variable due to go-yaml/yaml#887 1d8b1bc75 Cleanup shim manager ff65fc2d0 Make TaskList generic 6e4b6830f Update CRI-API 782fd3c8e Vagrantfile: dump containerd log after critest 74c09b756 Fix contrib/ header 8add7e5d3 Rework permission handling in scripts 6ba91de84 release workflow: remove Go setup action f8add9263 release workflow: increase timeout to 30 minutes 2dbff1dbc oci: skip checking gid for WithAppendAdditionalGroups 481861020 release: rollback Ubuntu to 18.04 (except for riscv64) 68bae258a Update protobuf definitions ca3b9b50f Run gofmt 1.19 4a11a4018 Update golangci-lint to 1.48 with Go 1.19 support ea6613029 Switch to Go 1.19 7787168cc Use global env variable to specify Go version on CI 5cf77fc43 Add TODOs for the remaining work e1c5d71c0 Update golang to 1.18.5, 1.17.13 ee0f2e906 Change os.Stderr reassign for Windows service 426fcfbc5 fix protobuf aarch64 aa3303b69 Update sandbox protobuf to match CRI 882322417 Update controller's start response to incldue pid and labels 3d028308e Cleanup CRI files c085fac1e Move sandbox start behind controller f51014f8d Add sandbox to in memory services 6c14ca25d Fix cleanup in critest e47c433d5 Add sandbox store helpers f5fb2c32d Regenerate protos with updated protoc-gen-go b16c3e9ad Windows HostProcess container CRI stats test 106433b79 Use httputil.DumpRequestOut for dumping client req 2fa84b1b8 Add extra context to error when push unauthorized f4d05f207 chore: bump macos runner version 276a6f133 test: error strings should not be capitalized 2b92c70fa Fix command line parsing for image list 14003683f go.mod: Bump hcsshim to v0.9.4 1e0698e8e Fix CRI image pull timeout test for ppc64le c15d8e156 go.mod: Bump hcsshim to 0.9.3 a9514da75 Update image references for Windows tests 2ae5f405d Use image lists instead of hardcoded images 552d76344 Use image lists in client tests d121efc6d replace with selinux label e6a2c0790 integration: simplify CNI-fp and add README.md 344431cdd fix: support simultaneous create diff for same parent snapshot 050cd58ce Drop deprecated `ioutil` 500ff95f0 Make getServicesOpts a helper ee6fc5c2e adds an env var commented out for sandboxed mode cbebeb944 pkg/failpoint: add FreeBSD link and update pkg doc 3c5e80b63 integration: Add injected failpoint testing for RunPodSandbox be91a219c integration: CNI bridge wrapper with failpoint 1ae6e8b07 pkg/failpoint: add DelegatedEval API b297775ea runtime/v2/shim: return if error in load plugin 5f9b318e5 bin/ctr,integration: new runc-shim with failpoint 822cc51d8 runtime/v2: manager supports server interceptor ffd59ba60 pkg/failpoint: init failpoint package 3125f7e1a cri_stats: handle missing cpu stats 7eeec8987 adds support for using env file for systemd boot 7dc66eee6 using ContextDialer instead 6639b2b02 test: Add ability to switch between cgroupv1 or cgroupv2 0d6881898 Refactor usageNanoCores be to used for all OSes f6bc986dc go.mod: github.com/stretchr/testify v1.8.0 628f6ac68 code cleanup cc30880e8 ci: workaround Cirrus CI's INVALID_ARGUMENT d8d63a7aa docs: Fix sample config.toml syntax 88bcbb036 adds a comment explaining how to disable experimental sbserver 3a3f43f72 Fix linter warnings 60f51c1aa Update and align golangci-lint version 98a1b7ff1 Add log messages when choosing CRI server bbb8d3470 seccomp: add get_mempolicy, mbind, set_mempolicy, with CAP_SYS_NICE 19e847983 seccomp: seccomp: add syscalls related to PKU in default policy 2ba635331 Change metrics namespace for sandboxed CRI to prevent panic b8e93774c Enable integration tests against sandboxed CRI cf5df7e4a Fork CRI server package 4ffef752d update golang to 1.18.4, 1.17.12 c733119db cri doc: fix formatting for CDI options f77d45e3b ctr: support --user for run/create 22dfc68ad Fix protobuf script to install protobuf on darwin bcdc8468f Fix out of date comments for CRI store packages 174b01344 update some devmapper docs 575095fcd seccomp: allow clock_settime64 when CAP_SYS_TIME is added e9e33f847 Copy fuzzers from github.com/cncf/cncf-fuzzing b31631859 Upgrade github.com/AdaLogics/go-fuzz-headers 6d4b61007 integration/client: fix typo in export_test.go b8bb33b92 fix can't edit object by using ctr content edit command 548c9c317 Fix WWW-Authenticate parsing b8403d2e1 Update k8s.io/cri-api to v0.25.0-alpha2 a44cabf51 Update go-restful/v3 to latest release c2703c08c pkg/cri: use marshal wrapper for version convertor d2588b3fa LCOW differ return ErrNotImplemented for wrong mount type 0a240ff81 Fix missing closed HTTP Body f7de1c8f9 Do not hardcode fuzzers 2b60770c4 Move container_fuzzer.go under integration/client/ 66cc0fc87 Copy FuzzCRI from cncf/cncf-fuzzing ca5637104 Remove mainfuzz package and StartDaemonForFuzzing 17f9c3a0e Move builtins_*.go to cmd/containerd/builtins to make the files reusable d97b754a5 Cleanup metadata tests 1ef4bda43 Downgrade MinGW to version 10.2.0 1ab42be15 refactor: reduce duplicate code 47ad5f70e Fix Doc: fb5b6612a ctr: Fix `ctr c create` fails to parse arguments 68a55fe8b make xattr EPERM non-fatal in createTarFile 99e210c50 Move metadata plugin registration to seperate package 4f0ea7831 fix: missing sudo for devmapper doc 72b87ad00 add WithAdditionalGIDs test 5bf705255 add WithAppendAdditionalGroups helper 5cde04bc7 Forward ctr snapshotter flags on Windows 4ac1031e0 Add snapshotter key to snapshot events b27a229df Move contrib/fuzz/docker_fuzzer.go to remotes/docker f91616e45 Copy FuzzConvertManifest from cncf/cncf-fuzzing c9c5fee37 Do not hardcode fuzzing targets 50f1a4e42 Don't log "ignored xattr ..." warnings 112497bc3 Make oss_fuzz_build.sh quiet 6e53ffb10 ctr: add --hostname flag to create, run 7002fc2c4 Ensure Windows Periodic workflow errors out while still uploading results. 2e288f5b1 improve content-flow d4ab64988 Revert MinGW to oldest known working version in Windows setup script. 55dd56e52 Make CI Fuzz optional 82adbc849 Run fuzzing tests with go test -fuzz a1eb2d8a6 Use testing.F on FuzzPlatformsParse 57200edf2 Use testing.F on FuzzParseProcPIDStatus 0b3c31dd7 Downgrade MinGW in Windows setup scripts. 42a386c81 CRI: change the /dev/shm mount options in Sandbox. a62a95789 CRI: remove default /dev/shm mount in Sandbox. 8245e35eb Make test path a constant ee14f9316 Run fuzzers in CI 52593cfc8 containerd-stress: add support for running through CRI 5560b622d archive: Explicitly specify stdio for tar(1) 95f1d7971 platforms: Run goimports for FreeBSD 42e019e63 cri/server: Disable tests on FreeBSD ad8e59806 oci: Remove empty mount option slice for FreeBSD c15f0cdaf oci: FreeBSD devices may have major number 0 2ab8c12fc archive: use Linkat on FreeBSD for hardlinks 61690d76d Improve naming consistencies in comments in snapshotter.go c101f7999 Allow CRI on Darwin 0167e55ab update runc binary to v1.1.3 c3fb7dfa7 go.mod: github.com/moby/sys/mountinfo v0.6.2 fa4720fa1 fix add ro mount for userattr-unmount unexpected timeout 92d360b58 fix minor spelling mistake: lablel -> label 6190b0f04 Correct spelling mistake ("sanbdox" to "sandbox") 5a6e4144a go.mod: github.com/containerd/cgroups v1.0.4 088c8df3a go.mod: github.com/containerd/continuity v0.3.0 012d68ff9 add gc scheduler metrics: collection count 44e12dc5d Windows snapshotter touch ups and new functionality 40aa4f3f1 Implicitly discard the input to drain the reader 00eb74a4c Make building static binaries simpler d25b4e6f3 Bump Golang and MinGW versions in Windows setup script. 7b9f1d405 Added support for runtime level snapshotter, issue 6657 8bc6ccc07 Bump k8s.io deps to v0.24.1 5fcde823d Bump grpc to v1.47.0 1b3c3860d update golang to 1.18.3, 1.17.11 e3b4d750d update go-cni/for cni update fixing plugins that don't respond with version 8ed54849a Move docker reference logic to reference/docker package f7aa90d27 Fix containerd-stress duration flag ae22854e2 Linux containers on FreeBSD 49ca87d72 Limit the response size of ExecSync 1cf6f2032 promote pause image to 3.7 b5e1b8f61 Use t.Run for /pkg/cri tests b572a82ad CRI: Remove deprecated error types and update error msg 978ff393d Add validations for Windows HostProcess CRI configs 1a8024b46 Makefile: use urfave_cli_no_docs for binaries that don't need it 5bb47fb95 vendor: github.com/urfave/cli v1.22.9 a3a2d14ec fix verify-vendor if go.mod does not contain replace rules 688b30cf5 CRI: Move truncindex to pkg e44335800 CRI: Move reference sorting to reference package b5366f8d7 CRI: Retrieve image spec on client 4ba5415fb build: Fix references to check-protos target in Makefile 8a3114b37 Fix broken oss-fuzz build d2f30150b archive: add human-readable hint to Lchown error 9f9ebbd99 Fix tx closed error when upperdirlabel specified 739cb4c99 config: improve config v1 deprecation message b5107a898 Fix Windows install powershell script b69182c71 add note that a namespace cannot be named "version" 8d95f2b59 fix comments on metadata schema 900019b30 ctr sandbox: handle sandbox config 8ec1fc70d adjust format a42688639 Restore decompression benchmarks 8494f7f11 adjust format in comment 92b7bc9ed ctr: fix label args used in NewContainer 4da4a8879 update doc url eaec6530d fix some confusing typos 65150600d Separate windows-2019 and windows-2022 test results 7300296cb reverts removal of parallel run from critest 523d069a2 sandbox: replace github.com/pkg/errors with native errors c4ce13a28 vendor: github.com/opencontainers/runc v1.1.2 25858d621 update runc binary to v1.1.2 c1140aef6 Bump OpenTelemetry dependencies f710505f4 shim: fix debug flag not working 72cd3b476 update golang to 1.18.2, 1.17.10 f5b7a4b3d CI: update Fedora to 36 a3ac15600 oci: WithDefaultUnixDevices(): remove tun/tap from the default devices ad8b87ba2 Add `Wait` to `binaryProcessor` d9fc5f4b0 Enable git commands due to git CVE fix 09c2c2a75 Pass explicit JUnit outfile to critest.exe in Windows workflow. 2c98a7b09 ctr import: strictly match platform d1c49781e go.mod: Bump k8s deps to v0.24.0 c721c8e27 devmapper docs: small fixes bb11c9d24 update critools to v1.24 8a2e8cd8d move report dir option to eol af24e3871 Update Kubernetes version matrix in release docs 7a834516f Share images between TestRestartMonitor and TestRestartMonitorWithOnFailurePolicy cedb7d3bd containerd 1.6.4 k8s 1.24 readme announce 57d2bce74 docs: minor fixes in snapshots.Snapshotter comments 42584167b Officially deprecate Schema 1 55401ac9c Update k8 docurl in file d4127a9f2 CI: add riscv64 builds 0e56e4f9f release/Dockerfile: update Ubuntu to 22.04 for supporting riscv64 4b412b800 seccomp: support riscv64 8160a3efc Reduce the number of the concurrent HTTP requests in TestUserNamespaces 7183fc81d Skip TestImagePullWithConcurrencyLimit on Cirrus CI 10576c298 cri: support blockio class in pod and container annotations 9b04d2fae docs: Adding windows installation steps to getting-started.md 227156dac Add ctr support for CPUMax and CPUShares b5370b040 Fix comment for metadata/db.go 5d0730370 Update go-cni to v1.1.5 180c7535d Upgrade protoc, protoc-gen-go and protoc-gen-go-grpc 2c6760005 go mod tidy & go mod vendor 29b937956 make protos fcba48636 Remove gogo from .proto files ae29594d0 Bump opencontainers/selinux from 1.10.0 to 1.10.1 46773c341 Cleanup leaked shim process 7f23296b9 Upgrade google.golang.org/grpc and google.golang.org/protobuf 7353006f6 Remove kzys/typeurl 7215f85ac Don't use "uname -a" as Cirrus CI's cache key 45c0cbec5 Create ppc64le release 5f43118ce Move Vagrant-based tests from GitHub Actions to Cirrus CI 00d102da9 feature: support image pull progress timeout fceab7f4c remove duplicate 0e6c7bf93 Fix undefined error in use of errors package a9f5190fb images/image.go: typo da3e2f985 fix incorrect syntax in comments 7a4f81d8b Fix tests aefd1849b go mod tidy and go mod vendor f616dd471 Upgrade containerd/typeurl 9dbe000a3 make protos 1a095e18b Rename Size_ to Size e3db7de8f Remove gogo/protobuf and adjust types fd37cc75b Use protoc-gen-go instead of protoc-gen-gogoctrd e044759eb Upgrade containerd/ttrpc 8710d4d01 cri: close fifos when container is deleted 7331b2af4 Add Container-Optimized OS into Adopters dfa6e8763 diff: hide types.Any from clients 01dfb110c Add go_package on all proto files aa1526def Use proto.Marshal instead of calling Marshal() on objects 95dde4959 Embed "Unimplemented" structs as proto recommended 35994a475 fix monitor restart 237ef0de9 Remove all gogoproto extensions 22cd13b37 fix nil pointer panic for monitor bd90ce043 Keep shim API backward compatible 39692e767 unpack: return error when no platforms defined 8017daa12 Add unpack interface to be used by client e2fd25f3d Move runtime v2 proto Move runtime v2 protos to api/runtime package. 3742c756e Don't generate a Go file, if that would be empty 5f3b72432 Fix protoc-gen-go-fieldpath 3b82f9e33 metadata: use resource max and end on registration 88c0c7201 Consolidate gogo/protobuf dependencies under our own protobuf package 80b825ca2 Remove gogoproto.stdtime dbdf50cc0 update golang to 1.18.1, 1.17.9 fd704d334 Build bin/gen-manpages instead of using "go run" b497e6414 Fuzz filter package with Go 1.18's fuzzer 94faa70df allow ptrace(2) by default for kernel >= 4.8 fe8da6dca Move lease manager plugin to separate package 147f0a7e0 check for duplicate nspath possibilities 942af1203 fix pool_device_test.go 5f3ce9512 Do not append []string{""} to command to preserve Docker compatibility 8367f69fb Add collectible resources to metadata gc c525aa5f8 Set timeout when collecting metrics from shim's Stat 49235ccba Change architecture path in README.md 8a1280b2b metrics/cgroups: fix deadlock issue in Add during Collect a5dfbfcf5 cri: load sandboxes/containers/images in parallel 6d69aca56 make consistent for checkpoint path 6341e0696 ADOPTERS: Update AKS Info b446c7647 [Sandbox] Remove outdated documentation d0b32c053 [sandbox] Migrate from gogo to Any 85a49e4ee [sandbox] Cleanup interfaces de4974572 [sandbox] Fix CI b7a36950f [Sandbox] Add Wait and PID 0d165e654 Restore sandboxes on daemon restart 0c5e5c357 Fix protobuf after rebase fa02477ca [sandbox] Add sandbox shim skeleton 35195737e [sandbox] Register shim plugin after #6301 17a2aaded [sandbox] Add ctr support 982de8a5d Launch sandboxed containers from task service 00f7a6bf2 [sandbox] Address PR review comments 6343fe3ea [sandbox] Implement sandbox controller eaccbf1d0 [sandbox] Add clients df234edeb [sandbox] Add controller service a433beb79 [sandbox] Update vendor 0e77f758a [sandbox] Implement store service 13eb1a4bb [sandbox] Revendor API changes d7ece8724 [sandbox] Save sandbox ID to container's store cab7d5b3d [sandbox] Implement metadata store 87d4c8923 [sandbox] Add basic sandbox structures and interfaces 4445d0a8d [sandbox] Add protobuf definitions 3df767405 add restart policy for enhanced restart manager 7e70ad9fb Pin upload-cloud-storage action to 0.8.0 in Windows workflow. 927b34e41 tracing: fix panic on startup when configured 1a45c2c5f docs: add Deckhouse to the list of adopters 825c1c58a CDI: update go.mod and vendor deps ff5c55847 move CDI calls to the linux-only code c9b4ccf83 add configuration for CDI aed0538da cri: implement CDI device injection 35383fb42 docs/cri: simplify 493baa6e7 Add docs/snapshots 811375856 CRI: improve image pulling performance 16fbbaeee Skip flaky test on Windows 44d7cd152 mv design docs/historical/design 195fc7424 docs: migrate config v1 to v2 84cebafe8 docs: remove deprecated `io.containerd.runtime.v1.linux` 83665bf8d docs/getting-started.md: typo ccea927d9 Move historical docs to `docs/historical` 50921e71b Run go mod tidy in integration tests 99c194e03 go.mod: move indirects, and update integration go.mod to 1.18 6ccec53d3 Remove gotest.tools 871b6b6a9 Use testify 6da318310 Disable writing freelist to make the file robust against data corruptions 62c846b17 Update linters to use t.Setenv 2d59a3944 Use t.Setenv instead of os.Setenv 4bdac2b43 Adding multi-arch support for the configure.sh script 6f269ccb3 docs/getting-started.md: massive update c7bdcdfbe Address some timeout issues in the Windows CI a2d22ac05 BUILDING.md: update supported Go versions d0bd65d3c Remove unmaintained contrib/linuxkit f2d5f71a7 update runc binary to v1.1.1 11a31320b go.mod: github.com/opencontainers/runc v1.1.1 0b2a95e10 Add no_tracing tag b42e936c5 CI: add Rocky Linux 8 b1030e7b6 CI: bump up crun to 1.4.4 b737cb10e Update README.md cf571fa96 added make help for cri integration 44a8ac7b0 Turn paths from cmdline into absolute paths 2689432bf Fix error message in TestNewBinaryIO 96b16b447 Use typeurl.Any instead of github.com/gogo/protobuf/types.Any fe426227d native: fix deadlock from leaving transactions open a51da91c1 moving up to go-cni v1.1.4 36612d692 go.mod: remove replace and update github.com/gogo/googleapis v1.4.1 df93940fb fix: ctr images mount with snapshotter option can't get snapshotter c091d48cb Use cgroups.AddProc() for cgroups v1 d2013d2c9 runtime: deprecate runc --criu / -criu-path option 388ee880d Upgrade containerd/imgcrypt and opencontainers/image-spec 70a06d0c8 Upgrade to Go 1.18 067611fde Remove enumvalue_customname, goproto_enum_prefix and enum_customname bfde58e3c Bug fix for mount path handling e9bb9c3bc Skip tty critest testcase on Windows Server 2022 3eeeb9429 Remove gogoproto.customtype 040babe00 Vendor dependencies with module graph pruning a19ad9bb6 Use Go 1.18 to build and test containerd 56f95e3d8 Test turning off golang CI lint cache ee49c4d55 Add nolint:staticcheck to platform-specific calls c56875233 Update prometheus client vendor 9aadef1be vendor: golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd fdb746442 document log level and format 52d307ac1 test: remove redundant `mountPoint` 2a0b2ee9e fix: ctr run --cni get failed 18ec2761c test: use `T.TempDir` to create temporary test directory b8bf504e9 Enable gosec linter for golangci-lint 2ddcb2019 Make OpenLab's CI jobs blocking cc526a98a Make mkfs.xfs available on OpenLab's CI environment ba1674389 typo fixes under cmd. 2e080bf49 Add shared content label to namespaces 2a425990c Implement `--device idType://id` for `ctr run` on Windows 39d52118f Plumb CRI Devices through to OCI WindowsDevices 6a25be94e CRI integration test for Windows Device mounts 622a35a4f Upgrade golangci-lint and its GitHub Action 59b1871b3 Fix link in getting-started.md 88de65112 Don't build a second copy of containerd-shim-runhcs-v1.exe 807ded41f Update TestNormalize to only test Windows 80bc32f06 Use temp file for export/import test 0d0b2bd4f Mount devmapper xfs file system with "nouuid" option. 14901335c Increase wait timeout for TestDaemonRestart 718adfe06 Use the latest image for Windows test workers 894e78001 Improve ErrUnexpectedStatus default string 48b478381 Skip most of script/setup/prepare_env_windows.ps1 768bf73dd Enable cri-tools critest on Windows 59b978847 Enable CRI Integration tests on Windows 5b78a9a8f Remove hardcoded /tmp in tempfile paths 03a5e648b Use version 2 config and mention containerd config command e0a6f9c7d update to go 1.16.15, 1.17.8 to address CVE-2022-24921 b90c466c3 Add ErrUnexpectedStatus to resolver fdaf859aa Update status of 1.4 release 7b045ea5f ctr: improve error relative shim path error msg e5efc260d Update latest release versions 63dd929af Update release process to include Kubernetes test infrastructure 0c79257f5 Add --user support for ctr run Windows de3d9993f Adds support for Windows ArgsEscaped images 775facd57 cri: fix integration test on cgroupsv2 system f1f69d4ee integration: remove duplicated util pkg 352a8f49f cri: relax test for system without hugetlb ec90efbe9 Make the temp mount as ready only in container WithVolumes ea3d2e643 go.mod: update to github.com/tchap/go-patricia/v2 v2.3.1 2b68c03a6 Update Go version recommendation in getting started 77c0539e9 Use containerd/protobuild instead of stevvooe/protobuild d28981d48 Fix build with gccgo f4f41296c Replace golang.org/x/net/context with std library 296f75bd0 Do not use weak import 3febabffe Add protoc-gen-go-fieldpath 7901f4b33 containerd-shim-runc-v1: return init pid when clean dead shim a3303e721 Update TestContainerSymlinkVolumes to use windows path 481fb923c go.mod: update to github.com/emicklei/go-restful/v3 v3.7.3 fb0b8d617 Use fs.RootPath when mounting volumes 1a31772a7 go.mod: github.com/moby/sys/signal v0.7.0 b1881bdc0 go.mod: github.com/moby/sys/mountinfo v0.6.0 b6a6757c1 go.mod: github.com/fsnotify/fsnotify v1.5.1 83c80388b Initialize platform matchers for current platform b63000c65 [Windows][Integration] Enable TestRestartMonitor 7275411ec cgroup2: monitor OOMKill instead of OOM to prevent missing container OOM events 6906b57c7 Fix the Inheritable capability defaults. fdbfde5d8 cmd/containerd-shim: add -v (version) flag e79aba10d integration/images/volume-ownership: strip path information from usage output b8cadf753 runtime/v2/shim: strip path information from version output 356ca7575 containerd-shim-runc-v2: return init pid when clean dead shim 86d52fc26 Fuzzing: refactor metadata fuzzers 894af07e3 integration: Adds Windows equivalent for TestSandboxRemoveWithoutIPLeakage 54e95e6b8 fix Implicit memory aliasing in for loop 5d4dc5780 remotes/docker: log registry URLs as info instead of debug afe39bebf add oci.WithAllDevicesAllowed flag for privileged_without_host_devices Signed-off-by: Bruce Ashfield <[email protected]>

…on 1.7.0 Abirdcfly (1): chore: remove duplicate word in comments Adam Korcz (11): Fuzzing: refactor metadata fuzzers Fix broken oss-fuzz build Run fuzzers in CI Fuzzing: Instrument with new sanitizers fuzzing: create structured tar bytes in archive fuzzer bump go-fuzz-headers fuzzing: improve archive fuzzer fuzzing: bump go-fuzz-headers fix for OSS-Fuzz infra changes fuzzing: improve archive fuzzer fuzzing: improve archive fuzzer Aditi Sharma (1): Update CNI to 1.2.0 Akhil Mohan (5): retry request on writer reset update codeql-action to v2 add additional info in backport process support fetching containerd from non public GCS buckets disable tracing while handling token Akihiro Suda (95): CI: bump up crun to 1.4.4 CI: add Rocky Linux 8 go.mod: github.com/opencontainers/runc v1.1.1 update runc binary to v1.1.1 Remove unmaintained contrib/linuxkit BUILDING.md: update supported Go versions docs/getting-started.md: massive update Move historical docs to `docs/historical` docs/getting-started.md: typo docs: remove deprecated `io.containerd.runtime.v1.linux` docs: migrate config v1 to v2 mv design docs/historical/design Add docs/snapshots docs/cri: simplify seccomp: support riscv64 release/Dockerfile: update Ubuntu to 22.04 for supporting riscv64 CI: add riscv64 builds Officially deprecate Schema 1 CI: update Fedora to 36 config: improve config v1 deprecation message archive: add human-readable hint to Lchown error go.mod: github.com/containerd/continuity v0.3.0 go.mod: github.com/containerd/cgroups v1.0.4 go.mod: github.com/moby/sys/mountinfo v0.6.2 seccomp: allow clock_settime64 when CAP_SYS_TIME is added go.mod: github.com/stretchr/testify v1.8.0 release: rollback Ubuntu to 18.04 (except for riscv64) update runc binary to v1.1.4 go.mod: github.com/opencontainers/runc v1.1.4 archive: add WithSourceDateEpoch() for whiteouts diff/apply.readCounter: check negative size CI: update GHA instances from Ubuntu 18.04 to 20.04 Vagrantfile: explicitly specify rsync as the shared folder driver go.mod: golang.org/x/*: use tagged versions remotes: add FetcherByDigest for fetching blobs without foreknown descriptors ctr: add `ctr content fetch-blob` Release: add static binaries CI: update Fedora to 37 introspection: expose the daemon's PID and PIDNS archive: set WithModTimeUpperBound when WithSourceDateEpoch is set CI: Vagrant: pin rockylinux/8 to v5.0.0 digest: use github.com/minio/sha256-simd epoch: propagate SOURCE_DATE_EPOCH via ctx images: support specifying SourceDateEpoch via ctx cri: fix `memory.memsw.limit_in_bytes: no such file or directory` Vagrantfile: install-rootless-podman: remove `setenforce 0` integration/images: switch away from Docker Hub to avoid rate limit Fix TestUpdateContainerResources_Memory* on cgroup v2 hosts Vagrantfile: fix disk resize error with VirtualBox contrib/Dockerfile.test: add "integration", "cri-integration", "critest" stages Vagrantfile: fix comments about SELinux container_stats_test.go: avoid checking snapshot size TestVolumeOwnership: compare GID, not group name cri-integration: set SelinuxRelabel nri_test.go: skip if SELinux is enabled Cirrus CI (Fedora 37, Rocky 8): enable cri-integration archive: improve TestSourceDateEpoch CI: test release.yml on every PR CI: remove redundant archs from ci.yml release/Dockerfile: set DEBIAN_FRONTEND=noninteractive release: Add "cri-containerd.DEPRECATED.txt" in the deprecated cri-containerd-* bundles release: Ubuntu 18.04 -> 20.04 (glibc 2.27 -> 2.31) cri: mkdir /etc/cni with 0755, not 0700 go.mod: go.opentelemetry.io/otel v1.12.0 go.mod: github.com/containerd/cgroups/v3 v3.0.0 pkg/epoch: drop timezone btrfs: depend on kernel UAPI instead of libbtrfs oci: fix loop iterator aliasing oci: fix additional GIDs CI: skip some jobs when `repo != containerd/containerd` go.mod: github.com/containerd/typeurl/v2 v2.1.0 release: xx v1.2.1 Go 1.19.6 golangci-lint v1.51.1 lint: silence "type `HostFileConfig` is unused (unused)" lint: silence "SA1019: tar.TypeRegA has been deprecated... (staticheck)" lint: remove `//nolint:dupword` that are no longer needed Stop using math/rand.Read and rand.Seed (deprecated in Go 1.20) go.mod: go 1.19 Go 1.20.1 go.mod: github.com/Microsoft/hcsshim v0.10.0-rc.7 go.mod: github.com/containerd/cgroups/v3 v3.0.1 go.mod: github.com/containerd/fifo v1.1.0 go.mod: github.com/containerd/ttrpc v1.2.0 go.mod: github.com/emicklei/go-restful/v3 v3.10.1 go.mod: github.com/imdario/mergo v0.3.13 go.mod: github.com/klauspost/compress v1.16.0 go.mod: github.com/opencontainers/runtime-spec v1.1.0-rc.1 go.mod: github.com/opencontainers/selinux v1.11.0 go.mod: github.com/stretchr/testify v1.8.2 archive: disable looking up usernames and groupnames on the host go.mod: go.opentelemetry.io/otel/* v1.14.0 metadata: add comments about Image.CreatedAt Go 1.20.2 RELEASES.md: describe the deprecated config properties Aman Sharma (1): Replace broken and redirection link for CRI and kubelet in docs Amit Barve (2): Bug fix for mount path handling Cleanup leaked shim process Anastassios Nanos (1): Add ext2 fs support to devmapper snapshotter Andrew G. Morgan (1): Fix the Inheritable capability defaults. Andrey Klimentyev (1): Do not append []string{""} to command to preserve Docker compatibility Aniruddha Basak (1): Migrate from k8s.gcr.io to registry.k8s.io Anthony Nandaa (1): fix(docs): minor fix on the windows installation steps Antonio Ojea (2): registry: support ipv6 addresses add network plugin metrics Antti Kervinen (1): cri: support blockio class in pod and container annotations Austin Vazquez (6): Migrate away from GitHub actions set-output Resolve Scorecards GitHub Actions workflow warnings Fix order of operations when setting lease labels Resolve warnings in Windows GitHub Actions periodic workflows Upgrade GitHub actions packages in release workflow Enable GitHub Actions local Linux CI runs Aviral Takkar (1): Fix bug in parsing domain from repository reference Baoshuo (1): chore: bump macos runner version Benjamin Elder (1): remove stray .zuul.yaml Benjamin Wang (1): dependency: bump go.etcd.io/bbolt to v1.3.7 Bennett-White (2): Add macOS build notes Update CRI guide link Bjorn Neergaard (2): Revert "Don't check for apparmor_parser to be present" pkg/apparmor: clarify Godoc Brian Goff (9): Regenerate protos with updated protoc-gen-go CI: Output a summary using GITHUB_SUMMARY Use jq and only show failed tests on summary Add test flag for skipping shim cgroup test Bump go version to 1.19.3 Replace mount fork hack with CLONE_FS Change PushContent to require only Provider fetch: Use data from descriptor when available. Add fallback for windows platforms without osversion Casey Callendrello (2): go.mod: bump to go-cni main cni: pass in the cgroupPath capability argument Changwei Ge (3): image/label: print more characters of label keys docs: fix a typo in tracing documentation CRI: remove duplicated snapshotters code Chao Dai (1): Don't fail test when GOOGLE_APPLICATION_CREDENTIALS is unset Chuanying Du (1): Update repo normalize error message to include the name of the repo. Claudiu Belu (1): integration: Adds Windows equivalent for TestSandboxRemoveWithoutIPLeakage Cory Snider (1): tracing: fix panic on startup when configured Craig Ingram (2): Harden GITHUB_TOKEN permissions Fix process_vm_* syscall names in seccomp Daniel Canter (20): Skip tty critest testcase on Windows Server 2022 ADOPTERS: Update AKS Info go.mod: Bump k8s deps to v0.24.0 Add validations for Windows HostProcess CRI configs Use t.Run for /pkg/cri tests Windows snapshotter touch ups and new functionality LCOW differ return ErrNotImplemented for wrong mount type Fix out of date comments for CRI store packages go.mod: Bump hcsshim to 0.9.3 go.mod: Bump hcsshim to v0.9.4 Windows HostProcess container CRI stats test Change os.Stderr reassign for Windows service Update golang to 1.18.5, 1.17.13 go.mod: Bump hcsshim to v0.10.0-rc.1 Remove Windows special case in TestContainerdRestart Revert "Downgrade MinGW to version 10.2.0" windows: Add runhcs-wcow-hypervisor runtimeclass to the default config metrics/cgroups/v1: Remove unused event parameter go.mod: Bump go-winio to v0.6.0 Swap to net.ErrClosed checks for services Daniel Lenar (1): Fix concurrent writes for UpdateContainerStats Danielle Lancashire (1): cri_stats: handle missing cpu stats Danny Canter (23): maintenance: Remove WithWindowsNetworkNamespace from pkg/cri Sandbox API: Move remote impls to /sandbox/proxy overlayutils: Add fastpath for userxattr check overlay: Remove unused method param CRI stream server: Fix goroutine leak in Exec docs: Add extra security instructions metastore: Add WithTransaction convenience method CRI: Add host networking helper overlay snapshotter: Make use of WithTransaction CRI: Fix no CNI info for pod sandbox on restart oci: Add WithDomainname CRI: Comment cleanup/misc fixes ctr: Add platform flag to 'oci spec' command runtime docs: Clarify delete cwd behavior CRI: Mirror generic toml runtime config under server CRI: Pass sandbox annotations to _other platforms CRI: Create DefaultCRIAnnotations helper runtime/v2: Log BootstrapParams docs: Show how to select GRPC for shims runtime/v2: Call onCloseWithShimLog for grpc shims runtime/v2: Get rid of last logrus.Fields usage Sandbox: Fix/enhance error messages for Create Sandbox: Delete shim+shutdown sandbox on create failure Dat Nguyen (1): add oci.WithAllDevicesAllowed flag for privileged_without_host_devices Dave (1): Clarify repo name regex intention David Leadbeater (1): Add capability for snapshotters to declare support for UID remapping David Porter (1): test: Add ability to switch between cgroupv1 or cgroupv2 Derek McGowan (84): Update release process to include Kubernetes test infrastructure Update latest release versions Update status of 1.4 release Add collectible resources to metadata gc Move lease manager plugin to separate package metadata: use resource max and end on registration Add unpack interface to be used by client unpack: return error when no platforms defined Fix undefined error in use of errors package Update Kubernetes version matrix in release docs Move docker reference logic to reference/docker package Add snapshotter key to snapshot events Move metadata plugin registration to seperate package Add reader option to local content reader at Add long term stable release branches Update 1.5 release support timeframe Update mailmap Add release notes for v1.7.0-beta.0 Add streaming service Add transfer API Transfer API types Transfer interface and plugin work in progress Add transfer proxy client Add progress Implement client interface for transfer service Add binary stream functionality and helpers Add basic import and export handlers Add transfer plugin registration Update transfer API Update transfer packages Update ctr commands to use transfer interface Add transfer integration test Add transfer docs Regenerated protobuf files with updated version Lint fixes Fixup pull authorization and labeling Add push progress Improve push handler ordering Add filter fields to image store types Update pull command to use filter arguments Update API for import types Update import logic Update import cli to use transfer service Update ctr to make local the default for distribution Update export API types Add media type to export stream Combine stream fuzz tests Add variables names to transfer interface Rename local transfer plugin Update transfer docs Cleanup code comments and lint fixes Rename transferer to transferrer Unwrap proto errors in streaming client Prepare release notes for v1.7.0-beta.1 Move snapshot event publishing into metadata store Add sandbox store plugin type Avoid using canceled context in unpacker cleanup [streaming] move response packet after registration Add lease to transfer to preserve streams during transfer Add cleanup package for context management during cleanup Prepare release notes for v1.7.0-beta.2 Use cleanup.Background instead of context.Background for cleanup Prepare release notes for v1.7.0-beta.3 Update the EOL date for 1.5 release Refactor sandbox controller interface Move local sandbox controller under plugins package Remove sandox store and controller service type Use multierror for cleanup error Update imagestore interface to support multiple references Prepare release notes for v1.7.0-beta.4 Prepare release notes for v1.7.0-rc.0 Add version to shim protocol Fix streaming manager deadlock on collection Add max shim version environment variable Update mailmap Prepare release notes for v1.7.0-rc.1 Add experimental section to RELEASES.md [transfer] update export API types [transfer] update export to use image store references Add release notes for v1.7.0-rc.2 Update imgcrypt to v1.1.7 Prepare release notes for v1.7.0-rc.3 Update ttrpc to v1.2.1 Prepare release notes for v1.7.0 Dmitry Shurupov (1): docs: add Deckhouse to the list of adopters Ed Bartosh (12): cri: implement CDI device injection add configuration for CDI move CDI calls to the linux-only code CDI: update go.mod and vendor deps cri doc: fix formatting for CDI options reference CDI configuration details move WithCDI to pkg/cri/opts CDI: configure registry on start improve CDI logging update go.mod and go.sum update CDI version to v0.5.4 fix failing TestCDIInjections Edgar Lee (1): Use mount.Target to specify subdirectory of rootfs mount Eng Zer Jun (2): test: use `T.TempDir` to create temporary test directory test: remove redundant `mountPoint` Eric Ernst (1): containerd-stress: add support for running through CRI Eric Lin (2): Turn paths from cmdline into absolute paths cri: load sandboxes/containers/images in parallel Ethan Lowman (1): build: Fix references to check-protos target in Makefile Fabian Hoffmann (2): Add ErrUnexpectedStatus to resolver Improve ErrUnexpectedStatus default string Fahed Dorgaa (1): fix protobuf aarch64 Gabriel Adrian Samfira (9): [Windows][Integration] Enable TestRestartMonitor Use the latest image for Windows test workers Increase wait timeout for TestDaemonRestart Use temp file for export/import test Address some timeout issues in the Windows CI Run go mod tidy in integration tests Skip flaky test on Windows Downgrade MinGW to version 10.2.0 Add HyperV config in tests Gabriela Cervantes (1): cri doc: Update kata containers reference Gavin Inglis (6): ctr: improve error relative shim path error msg devmapper docs: small fixes ctr import: strictly match platform update some devmapper docs add option to resolve symlinks to linux device allow client to remove created tasks with PID 0 Gijs Peskens (1): Linux containers on FreeBSD Hamza El-Saawy (1): Add `Wait` to `binaryProcessor` Henry Wang (8): Mount devmapper xfs file system with "nouuid" option. Add shared content label to namespaces Enable gosec linter for golangci-lint allow ptrace(2) by default for kernel >= 4.8 cri: close fifos when container is deleted adding support of CAP_BPF and CAP_PERFMON use local variable for rt when iterating collectors Treat sandboxes as root gc resources and scan referenced objects Hsing-Yu (David) Chen (5): docs: Authorizer.Authorize could return ErrUnexpectedStatus docs: add more comment to logging.LoggerFunc docs: fix typos in historical/design/data-flow.md docs: fix typo of shim.RunManager's function comment docs: link docs/managed-opt.md to client.Install Iceber Gu (13): ctr: fix label args used in NewContainer fix comments on metadata schema add note that a namespace cannot be named "version" remotes/docker/config: Skipping TLS verification for localhost runtime/v2/shim: clean up the use of containerdBinary fix the --no-pivot flag being ignored by `ctr tasks start` fix `ctr tasks kill` does not remove cni network under windows `ctr contents ls` sorts the labels of the content Use the const labels.LabelUncompressed docs/content-flow: update the digests of the redis:5.0.9 docs/content-flow: update the description of the content labels ctr/run: flags --detach and --rm cannot be specified together ctr/tasks: support remapped UID/GID Ikko Ashimine (1): integration/client: fix typo in export_test.go James Jenkins (4): Fix CRI image pull timeout test for ppc64le Add new ctr option for discarding unpacked layers Modify WithDiscardUnpackedLayers Fix Memory Limit test James Sturtevant (4): Initialize platform matchers for current platform Refactor usageNanoCores be to used for all OSes Add Windows Sandbox Stats Add Windows Sandbox Stats (sbserver) Jeff Widman (1): Drop deprecated `ioutil` Jeff Zvier (1): containerd-shim-runc-v2: return init pid when clean dead shim Jeremi Piotrowski (1): cgroup2: monitor OOMKill instead of OOM to prevent missing container OOM events Jess (2): Support default hosts.toml configuration Update hosts doc Jian Zeng (3): feat(api): add fields to ImageExportStream feat: export images using Transfer api feat: tag image using Transfer api Jin Dong (1): Add ctr image prune Jiongchi Yu (2): docs: fix function names in fuzzing test documentation update fuzz function names in docs with golang naming convention Jonny Stoten (2): Add extra context to error when push unauthorized Use httputil.DumpRequestOut for dumping client req Jordan Karaze (1): added make help for cri integration Joseph Sheng (1): not init a tracing processor when not loaded Joyce Brum (1): chore: enable Scorecard Github Action Juan Hoyos (2): Add process_vm read and write calls to default seccomp profile Add ptrace readby and tracedby to default AppArmor profile Junyu Liu (3): Fix incorrect defer usage and refactor judgement Refactor metastore transaction snapshots: refactor metastore transaction Justin Chadwell (1): pushWriter: correctly propagate errors Justin Terry (6): Adds support for Windows ArgsEscaped images Add --user support for ctr run Windows Add ctr support for CPUMax and CPUShares Forward ctr snapshotter flags on Windows Clarify containerd 1.5.0+ for k8s 1.20,1.21 Updates oci image config to support upstream ArgsEscaped Kang.Zhang (2): images/image.go: typo remove duplicate Kate (1): Fix "getCPUInfo for OS freebsd: not implemented" on FreeBSD/arm64 Kathryn Baldauf (1): Update TestContainerSymlinkVolumes to use windows path Kay Yan (2): cleanup useless IntToInt32Array func cri: fix Mirrors deprecation comment Kazuyoshi Kato (92): remotes/docker: log registry URLs as info instead of debug Add protoc-gen-go-fieldpath Do not use weak import Use containerd/protobuild instead of stevvooe/protobuild Upgrade golangci-lint and its GitHub Action Make mkfs.xfs available on OpenLab's CI environment Make OpenLab's CI jobs blocking Use Go 1.18 to build and test containerd Vendor dependencies with module graph pruning Remove gogoproto.customtype Remove enumvalue_customname, goproto_enum_prefix and enum_customname Upgrade containerd/imgcrypt and opencontainers/image-spec Use typeurl.Any instead of github.com/gogo/protobuf/types.Any Disable writing freelist to make the file robust against data corruptions Fuzz filter package with Go 1.18's fuzzer Build bin/gen-manpages instead of using "go run" Remove gogoproto.stdtime Consolidate gogo/protobuf dependencies under our own protobuf package Fix protoc-gen-go-fieldpath Don't generate a Go file, if that would be empty Remove all gogoproto extensions Embed "Unimplemented" structs as proto recommended Use proto.Marshal instead of calling Marshal() on objects Add go_package on all proto files diff: hide types.Any from clients Upgrade containerd/ttrpc Use protoc-gen-go instead of protoc-gen-gogoctrd Remove gogo/protobuf and adjust types Rename Size_ to Size make protos Upgrade containerd/typeurl go mod tidy and go mod vendor Fix tests Move Vagrant-based tests from GitHub Actions to Cirrus CI Don't use "uname -a" as Cirrus CI's cache key Remove kzys/typeurl Upgrade google.golang.org/grpc and google.golang.org/protobuf Remove gogo from .proto files make protos go mod tidy & go mod vendor Upgrade protoc, protoc-gen-go and protoc-gen-go-grpc Skip TestImagePullWithConcurrencyLimit on Cirrus CI Reduce the number of the concurrent HTTP requests in TestUserNamespaces Share images between TestRestartMonitor and TestRestartMonitorWithOnFailurePolicy Restore decompression benchmarks Limit the response size of ExecSync Make building static binaries simpler Implicitly discard the input to drain the reader Use testing.F on FuzzParseProcPIDStatus Use testing.F on FuzzPlatformsParse Run fuzzing tests with go test -fuzz Make CI Fuzz optional Make oss_fuzz_build.sh quiet Don't log "ignored xattr ..." warnings Do not hardcode fuzzing targets Copy FuzzConvertManifest from cncf/cncf-fuzzing Move contrib/fuzz/docker_fuzzer.go to remotes/docker Move builtins_*.go to cmd/containerd/builtins to make the files reusable Remove mainfuzz package and StartDaemonForFuzzing Copy FuzzCRI from cncf/cncf-fuzzing Move container_fuzzer.go under integration/client/ Do not hardcode fuzzers Fix WWW-Authenticate parsing Upgrade github.com/AdaLogics/go-fuzz-headers Copy fuzzers from github.com/cncf/cncf-fuzzing ci: workaround Cirrus CI's INVALID_ARGUMENT Upgrade containerd/cgroups to remove github.com/cilium/ebpf's fuzzer Don't patch github.com/cilium/ebpf crypto/sha256 must be imported Do not rename test files on-the-fly to share functions Upgrade github.com/klauspost/compress from v1.11.13 to v1.15.9 Make oss-fuzz mandatory Pin github.com/AdamKorcz/go-118-fuzz-build Make checkContainerTimestamps less strict on Windows Upgrade fuzzing-related packages to reduce dependencies Fix LogURIGenerator on Windows Refactor CRI fuzzers TestTaskResize must use a terminal Stats() shouldn't assume s.container is non-nil Upgrade actions/upload-artifact from v2 to v3 Upgrade critools from 1.24.1 to 1.25.0 Separate containerd logs in GitHub Actions' console Use logtest if possible to clean up logs Use github.com/containerd/cgroups/v3 to remove gogo Convert hcsshim's stats to cgroups' stats Remove the outdated comment Remove github.com/gogo/protobuf again "make proto-fmt" doesn't like spaces Prevent a race condition in testHook Enable checkRename test Check containerd's readiness before calling critest Add critest.exe in $PATH Kevin Parsons (1): CI: Pass GITHUB_TOKEN to containerd/project-checks Kirtana Ashok (4): Added nullptr checks to pkg/cri/server and sbserver Update hcsshim tag to v0.10.0-rc.4 update hcsshim tag to v0.10.0-rc.5 and revendor Add ArgsEscaped support for CRI Kohei Tokunaga (3): ctr: Fix `ctr c create` fails to parse arguments Make `mount.UnmountRecursive` compatible to `mount.UnmountAll` Export remote snapshotter label handler Krisztian Litkey (11): nri: add experimental NRI plugin. pkg/cri/server: experimental NRI integration for CRI. integration: add first NRI integration tests. pkg/cri/server: nuke old v0.1.0 NRI hooks. docs: add NRI-related documentation. go.mod: re-vendor NRI from the official repo. go.mod: update github.com/containerd/nri. pkg/cri: split out NRI API from pkg/cri/server. pkg/cri/sbserver: experimental NRI integration for CRI. pkg/nri: update NRI configuration. docs: update instructions for enabling NRI. Kyle L Frisbie (1): use raw link to containerd.servic config Luca Comellini (12): Bump OpenTelemetry dependencies Bump grpc to v1.47.0 Bump k8s.io deps to v0.24.1 Bump k8s.io deps to v0.25.3 Bump grpc to v1.50.1 Bump OpenTelemetry to v1.11.1 Bump OpenTelemetry contrib to v0.36.4 Bump k8s.io deps to v0.25.4 Bump grpc to v1.51.0 Bump golangci-lint to v1.50.1 Bump k8s.io deps Fix linting error `sets.String is deprecated` Maksym Pavlenko (127): Add no_tracing tag Use t.Setenv instead of os.Setenv Update linters to use t.Setenv Use testify Remove gotest.tools [sandbox] Add protobuf definitions [sandbox] Add basic sandbox structures and interfaces [sandbox] Implement metadata store [sandbox] Save sandbox ID to container's store [sandbox] Revendor API changes [sandbox] Implement store service [sandbox] Update vendor [sandbox] Add controller service [sandbox] Add clients [sandbox] Implement sandbox controller [sandbox] Address PR review comments Launch sandboxed containers from task service [sandbox] Add ctr support [sandbox] Register shim plugin after #6301 [sandbox] Add sandbox shim skeleton Fix protobuf after rebase Restore sandboxes on daemon restart [Sandbox] Add Wait and PID [sandbox] Fix CI [sandbox] Cleanup interfaces [sandbox] Migrate from gogo to Any [Sandbox] Remove outdated documentation Move runtime v2 proto Keep shim API backward compatible CRI: Retrieve image spec on client CRI: Move reference sorting to reference package CRI: Move truncindex to pkg CRI: Remove deprecated error types and update error msg Allow CRI on Darwin Cleanup metadata tests Fix protobuf script to install protobuf on darwin Fork CRI server package Enable integration tests against sandboxed CRI Change metrics namespace for sandboxed CRI to prevent panic Add log messages when choosing CRI server Update and align golangci-lint version Fix linter warnings Make getServicesOpts a helper Use image lists in client tests Use image lists instead of hardcoded images Update image references for Windows tests Fix command line parsing for image list Add sandbox store helpers Fix cleanup in critest Add sandbox to in memory services Move sandbox start behind controller Cleanup CRI files Update controller's start response to incldue pid and labels Update sandbox protobuf to match CRI Add TODOs for the remaining work Use global env variable to specify Go version on CI Switch to Go 1.19 Update golangci-lint to 1.48 with Go 1.19 support Run gofmt 1.19 Update protobuf definitions Rework permission handling in scripts Fix contrib/ header Make TaskList generic Cleanup shim manager Add NoSameOwner option when unpacking tars Don't unmount on Darwin when deleting bundle Add timeouts to all CI jobs Cleanup sandbox interfaces Add sequence diagram for shim runtime v2 Fix ctr crash when pulling with http-trace and http-dump Rename darwin-kubelet to containerd Remove OpenTelementry imports from remotes/docker package Expose Done and Err in Shutdown service Specify runtime configuration for sandbox shims Remove duplicated helpers Retrieve sandbox creation time from store. Use sandbox store to retrieve runtime info for sandboxed containers [sandbox] Update Controller.Status protos [sandbox] Move sandbox info to podsandbox controller [sandbox] Don't access pause container when creating pod container [sandbox] Specify sandbox ID when using sandboxed shims [sandbox] Fix panic when waiting for sandbox controller sbserver bug fixing Update runtime options to include bytes blob Pass runtime configuration as TOML blob Fix context when waiting sandbox Fix default config for Darwin Cleanup build constraints Respect no_cri constraint Add sandbox shutdown API [sb] Fix status Support sandboxed shims shutdown Enable dupword linter Make OCI spec opts available on all platforms Move WithMounts to specs Update sandbox API to return target platform Add stub to build common OCI spec Move most of OCI spec options to common builder Update OCI spec tests for generic platform Remove unused params from platformSpec Have separate spec builder for each platform Use Platform instead of generated API Add basic spec and mounts for Darwin Backport unit test from #7882 to sbserver Backport #7685 to sbserver Backport #7661 to sbserver Backport #7393 to sbserver Move PLEG events for pause container to podsandbox Update TTRPC and Protobuild dependencies Generate GRPC for runtime sandbox API Generate GRPC for runtime task service Fix sandbox exit monitor Clean CI file Rename release CI job Add Task Service GRPC bridge Add Sandbox service GRPC bridge Wire up client bridges Initial GRPC client support Add shim bootstrap params Use switch when creating TTRPC/GRPC client Add transport credentials GRPC opt Extract CRI instrument package Use options to pass PodSandboxConfig to shims Add Fields type alias to log package Rewrite install-protobuf script Rewrite install-protobuf script Add Linux arm64 arch to install-protobuf script Mark Rossetti (1): docs: Adding windows installation steps to getting-started.md Mark Zhang (1): Fix grammar and spelling mistakes in README Markus Lehtonen (2): go.mod: update goresctrl to v0.3.0 Update vendored files Marvin Giessing (1): Create ppc64le release Mathis Michel (1): fix: check for tmpfs when evaluating if userxattr should be used Merlin Ran (1): add oci.WithCPURT Michael Zappa (1): Update go-cni to v1.1.5 Mike Brown (10): moving up to go-cni v1.1.4 check for duplicate nspath possibilities containerd 1.6.4 k8s 1.24 readme announce move report dir option to eol update go-cni/for cni update fixing plugins that don't respond with version adds a comment explaining how to disable experimental sbserver adds support for using env file for systemd boot adds an env var commented out for sandboxed mode nil check to avoid panic on upgrade move up to CRI-TOOLS v1.26.0 Mikko Ylinen (2): sandbox: replace github.com/pkg/errors with native errors ctr sandbox: handle sandbox config Mohit Sharma (2): Adding support to run hcsshim from local clone Removing end of line for last line Nabeel Rana (1): Bump opencontainers/selinux from 1.10.0 to 1.10.1 Nashwan Azhari (10): Pin upload-cloud-storage action to 0.8.0 in Windows workflow. Pass explicit JUnit outfile to critest.exe in Windows workflow. Bump Golang and MinGW versions in Windows setup script. Downgrade MinGW in Windows setup scripts. Revert MinGW to oldest known working version in Windows setup script. Ensure Windows Periodic workflow errors out while still uploading results. Use `go env` to determine GOPATH in Makefile. Fix LogURI generation-related tests on Windows. Add Workflow for running critest with Hyper-V Containers on Windows. Increase CI workflow timeout on Windows. Nathan (1): test: add hostNetwork tests for both windows and linux Nguyen Phan Huy (1): Set timeout when collecting metrics from shim's Stat Nikita Rybak (1): Extra documentation for content interfaces. Nobel Barakat (1): Adding multi-arch support for the configure.sh script Oleg Atamanenko (1): document log level and format Oleg Zhurakivskyy (1): Make test path a constant Oliver Radwell (1): docs: Fix sample config.toml syntax Paco Xu (6): promote pause image to 3.7 add gc scheduler metrics: collection count migrate from k8s.gcr.io to registry.k8s.io Add Kubernetes v1.25 supported version as v1.24 add metrics for image pulling: success/failure count; in progress count; thoughput add kube v1.26: remove v1alpha2 cri support Paul "TBBle" Hampson (9): Remove hardcoded /tmp in tempfile paths Enable CRI Integration tests on Windows Enable cri-tools critest on Windows Skip most of script/setup/prepare_env_windows.ps1 Don't build a second copy of containerd-shim-runhcs-v1.exe CRI integration test for Windows Device mounts Plumb CRI Devices through to OCI WindowsDevices Implement `--device idType://id` for `ctr run` on Windows Separate windows-2019 and windows-2022 test results Paul Cacheux (2): Improve how reference regexps are built Replace references to `re` with `regexp.MustCompile` Paul S. Schweigert (2): update critools to v1.24 reverts removal of parallel run from critest Paweł Gronowski (1): labels: Add LabelDistributionSource Phil Estes (12): Update Go version recommendation in getting started Update TestNormalize to only test Windows Update prometheus client vendor Add nolint:staticcheck to platform-specific calls Test turning off golang CI lint cache Enable git commands due to git CVE fix Update go-restful/v3 to latest release Update golangci-lint timeout to match config Remove unused variable from images action Move up actions versions to prep for deprecation Update required Go version in BUILDING.md Update README with location of security audits Qasim Sarfraz (3): cri: add pod uid annotation cri: make swapping disabled with memory limit cri: Fix TestUpdateOCILinuxResource for host w/o swap controller Qian Zhang (2): fix: ctr images mount with snapshotter option can't get snapshotter fix: support simultaneous create diff for same parent snapshot Qiutong Song (4): Make the temp mount as ready only in container WithVolumes Persist container and sandbox if resource cleanup fails, like teardownPodNetwork Add integration tests with failpoint Update container with sandbox metadata after NetNS is created Quan Tian (1): Fix link in getting-started.md Rodrigo Campos (8): Update k8s.io/cri-api to v0.25.0-alpha2 Let OCI runtime create netns when userns is used cri: Support pods with user namespaces Add integration tests for CRI userns cri: Shadow variables to avoid t.Parallel() issues cri: Fix assert vs require in tests cri: Verify userns container config is consisten with sandbox cri: Simplify parseUsernsIDs() Roy Yang (1): Add Container-Optimized OS into Adopters Samuel Karp (25): archive: use Linkat on FreeBSD for hardlinks oci: FreeBSD devices may have major number 0 oci: Remove empty mount option slice for FreeBSD cri/server: Disable tests on FreeBSD platforms: Run goimports for FreeBSD archive: Explicitly specify stdio for tar(1) ctr: add --hostname flag to create, run release workflow: increase timeout to 30 minutes release workflow: remove Go setup action ci: remove GOPROXY environment variable due to https://github.com/go-yaml/yaml/issues/887 cri-integration: propagate ENABLE_CRI_SANDBOXES sbserver: return resources in ContainerStatus cri-integration: pass ENABLE_CRI_SANDBOXES to test archive: validate digests before use cri: PodSandboxStatus should tolerate missing task sbserver: persist sandbox during partial teardown integration: enable tests for sbserver sbserver: save netns in sandbox metadata on create integration: enable CNI slow test for sbserver mod: update github.com/pelletier/[email protected] shim: enable debug logging for delete shim: move reap log line to debug importer: stream oci-layout and manifest.json releases: mark 1.5 as EOL epoch: fix unit test when SOURCE_DATE_EPOCH is set Sebastiaan van Stijn (81): runtime/v2/shim: strip path information from version output integration/images/volume-ownership: strip path information from usage output cmd/containerd-shim: add -v (version) flag go.mod: github.com/fsnotify/fsnotify v1.5.1 go.mod: github.com/moby/sys/mountinfo v0.6.0 go.mod: github.com/moby/sys/signal v0.7.0 go.mod: update to github.com/emicklei/go-restful/v3 v3.7.3 update to go 1.16.15, 1.17.8 to address CVE-2022-24921 vendor: golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd runtime: deprecate runc --criu / -criu-path option Use cgroups.AddProc() for cgroups v1 go.mod: remove replace and update github.com/gogo/googleapis v1.4.1 go.mod: move indirects, and update integration go.mod to 1.18 update golang to 1.18.1, 1.17.9 oci: WithDefaultUnixDevices(): remove tun/tap from the default devices update golang to 1.18.2, 1.17.10 update runc binary to v1.1.2 vendor: github.com/opencontainers/runc v1.1.2 fix verify-vendor if go.mod does not contain replace rules vendor: github.com/urfave/cli v1.22.9 Makefile: use urfave_cli_no_docs for binaries that don't need it update golang to 1.18.3, 1.17.11 update runc binary to v1.1.3 update golang to 1.18.4, 1.17.12 seccomp: seccomp: add syscalls related to PKU in default policy seccomp: add get_mempolicy, mbind, set_mempolicy, with CAP_SYS_NICE mount: remove unused ErrNotImplementOnWindows replace sys Sequential funcs with moby/sys/sequential archive: replace tarName() with filepath.ToSlash() sys: move ForceRemoveAll to integration/client integration: TestUpdateContainerResources_MemoryLimit: remove TODO comment Update to go 1.19.1, 1.18.6 to address CVE-2022-27664, CVE-2022-32190 vendor: golang.org/x/net v0.0.0-20220906165146-f3363e06e74c Update to go 1.19.2 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 vendor: github.com/opencontainers/selinux v1.10.2 archive: windows: chtimes(): remove redundant conversion cmd/containerd: replace deprecated windows.IsAnInteractiveSession() cmd/containerd: use golang.org/x/sys Service.SetRecoveryActions() linting: address gosec G112/G114 golangci-lint: sort linters in config file pkg/cri/(server|sbserver): criService.getTLSConfig() add TODO to verify nolint clean-up "nolint" comments, remove unused ones remove unneeded nolint-comments (nolintlint), disable deprecated linters update golangci-lint to v1.49.0 cmd/containerd: use golang.org/x/sys/windows.SetStdHandle() sys: remove unused IsAbs() (windows) sys: compile volume-path regex once, and update GoDoc sys: update volumePath regex to allow returning earlier sys: create SecurityAttribute only once (Windows) sys: synchronize mkdirall() with latest os.MkDirAll() go.mod: matttproud/golang_protobuf_extensions v1.0.2 (use tag) reference/docker: align files with original code reference/docker: add unit-tests from upstream distribution/distribution go.mod: change imports to github.com/distribution/distribution/v3 services/server/config: TestMergeConfigs(): use correctly formatted values replace strings.Split(N) for strings.Cut() or alternatives Remove uses of deprecated go-digest.NewDigestFromHex, go-digest.Digest.Hex go.mod: github.com/sirupsen/logrus v1.9.0 go.mod: golang.org/x/sys v0.2.0 go.mod: github.com/AdaLogics/go-fuzz-headers v0.0.0-20221118232415-3345c89a7c72 go.mod: github.com/cpuguy83/go-md2man/v2 v2.0.2 go.mod: github.com/moby/sys/sequential v0.5.0 go.mod: github.com/matttproud/golang_protobuf_extensions v1.0.2 sys: remove alias for deprecated sys.RunningInUserNS() pkg/cri/util/: remove deprecated NormalizeImageRef alias sys: remove aliases for deprecated EpollCreate1, EpollCtl, EpollWait remotes/docker: remove deprecated NewAuthorizer alias sys: remove unused GetOpenFds() update github.com/cpuguy83/go-md2man/v2 to v2.0.2 integration/client: fix go.mod grouping integration/client: update containerd version to v1.7.0-beta.0 go.mod: roll back github.com/containerd/cgroups to v1.0.4 release go.mod: golang_protobuf_extensions v1.0.4 - prevent incompatible versions update to go1.19.4, go1.18.9 vendor: golang.org/x/net v0.4.0 go.mod: update fuzz-headers and fuzz-build oci: appendOSMounts(): remove unused error, and move pkg/cri: optimize slice initialization go.mod: github.com/urfave/cli v1.22.12 contrib/apparmor: remove version-dependent rules contrib/apparmor: remove code related to apparmor_parser version Shane Jennings (1): Correct spelling mistake ("sanbdox" to "sandbox") Shaun Lawrie (1): Fix Windows install powershell script Shengjing Zhu (7): Replace golang.org/x/net/context with std library Fix build with gccgo go.mod: update to github.com/tchap/go-patricia/v2 v2.3.1 cri: relax test for system without hugetlb integration: remove duplicated util pkg cri: fix integration test on cgroupsv2 system Fix error message in TestNewBinaryIO Shiming Zhang (4): Fix missing closed HTTP Body Fix missing close Fix missing closed fifo Add `--debug` args Shinichi Morimoto (1): fix pool_device_test.go SilverSoldier (1): Fix containerd-stress duration flag Sophie Liu (1): Add logging volume metrics to Containerd CRI plugin Su Fei (1): can set up the network serially by CNI plugins Swagat Bora (7): fix minor spelling mistake: lablel -> label Improve naming consistencies in comments in snapshotter.go Retry client connection in waitForStart Add tracing spans in CRI image service and pull.go add SpanAttribute Add a thin wrapper around otel Span object Fix retry logic within devmapper device deactivation Taeho Nam (1): Fix comment for metadata/db.go Takumasa Sakao (1): Use version 2 config and mention containerd config command Tiger Kaovilai (1): github.com/emicklei/go-restful CWE-285: Improper Authorization Tobias Klauser (2): go.mod, vendor: bump golang.org/x/sys to latest version mount: use ioctl helpers from x/sys/unix Tom Godkin (1): Upgrade to Go 1.18 Tomoya.Fujita (1): typo fixes under cmd. Tony Fang (10): Adding unit tests to opentelemetry tracing Use uname machine field to get CPU variant if fails at /proc/cpuinfo Add unit test to function GetCPUVariantFromArch Add tracing plugin test Revert container_stats_test.go change which caused Windows CRI integration test failure Add integration test for tracing on image pull Add configuration options to local transfer service Add unit test to getSupportedPlatform Add a leading space after the comment sign Create config struct to take user input Tõnis Tiigi (1): native: fix deadlock from leaving transactions open Wei Fu (40): containerd-shim-runc-v1: return init pid when clean dead shim CRI: improve image pulling performance metrics/cgroups: fix deadlock issue in Add during Collect feature: support image pull progress timeout pkg/cri: use marshal wrapper for version convertor pkg/failpoint: init failpoint package runtime/v2: manager supports server interceptor bin/ctr,integration: new runc-shim with failpoint runtime/v2/shim: return if error in load plugin pkg/failpoint: add DelegatedEval API integration: CNI bridge wrapper with failpoint integration: Add injected failpoint testing for RunPodSandbox pkg/failpoint: add FreeBSD link and update pkg doc integration: simplify CNI-fp and add README.md Vagrantfile: dump containerd log after critest pkg/cri/streaming: increase ReadHeaderTimeout contrib/fuzz/daemon.go: reformat the fileheader script/setup: handle cnidir with SUDO .zuul: remove the zuul because it is offline bump critools into ca1571e6edd116b2c95f52e3dfa0b4779b74223a integration: increase timeout in container_event_test.go chore: use `go fix` to cleanup old +build buildtag RELEASES.md: update release status log/logtest: add `testcase` as debug field deflake: TestContainerPids integration: use sleep inf with busybox:1.36 *: introduce wrapper pkgs for blockio and rdt pkg: rename {blockio,rdt}_default.go -> nonlinux.go cmd/ctr/commands/images: support usage subcommand bump go-cni to v1.1.9 pkg/cri/server: add timeout to drain exec io pkg/cri/sbserver: add timeout to drain exec io *: fix typo and skip exec-io-drain-testcase in win *: add DrainExecSyncIOTimeout config and disable as by default *: update drainExecSyncIO docs and validate the timeout cri: disable drain-exec-IO if it is empty timeout integration: add testcase to drain exec IO in time cri: add config ut for invalid drain io timeout value cri/sbserver: ignore the NOT_FOUND error in exec cleanup *: fix code style issue Xinlin Ma (1): fix add ro mount for userattr-unmount unexpected timeout Yakul Garg (1): Fix Doc: Yasin Turan (2): ctr export strictly match default platform Refactored ctr to allow for tty allocation when container has {terminal:true} within Spec Ye Sijun (12): add restart policy for enhanced restart manager make consistent for checkpoint path fix nil pointer panic for monitor fix monitor restart add WithAppendAdditionalGroups helper add WithAdditionalGIDs test fix: missing sudo for devmapper doc make xattr EPERM non-fatal in createTarFile refactor: reduce duplicate code fix incorrect namespace of event when create/update namespace ctr: support --user for run/create oci: skip checking gid for WithAppendAdditionalGroups Zechun Chen (5): Fix syntax errors in the document Use http constants instead of string Clean up repeated package import error strings should not be capitalized Clean up repeated package import Zhang Tianyang (3): Sandbox API: Add a new mode config for sandbox controller impls sandbox: start sandbox with options sandbox: create sandbox with network namespace path Zhongming Chang (1): fix some confusing typos Zhuchen Wang (1): Update the default seccomp to block socket calls to AF_VSOCK austinvazquez (1): docs: minor fixes in snapshots.Snapshotter comments bin liu (2): ctr: add privileged-without-host-devices for run command Fix slice append error cardy.tang (1): Fix tx closed error when upperdirlabel specified chaunceyjiang (1): fatal error: concurrent map iteration and map write dabaooline (1): Update README.md guiyong.ou (1): code cleanup guodong (3): tx rollback when GetInfo return error remove duplicated tx rollback use MaxConcurrentDownloads instead of MaxConcurrentUploadedLayers helen (2): ctr version: add args check, prohibit incoming args loadConfig pre-inspection in advance huoqifeng (1): s390x: initial enabler jianfei.zhang (1): test: error strings should not be capitalized lengrongfu (5): feat: upgrade registry.k8s.io/pause version feature: use client default namespace fix pusher concurrent close channel fix install cni script feat add sandbox api status func ningmingxiao (1): fix Implicit memory aliasing in for loop panguicai008 (1): use uppercase letters for flag usage ruiwen-zhao (10): Use fs.RootPath when mounting volumes Update CRI-API ContainerStatus to return container resources Set grpc code for unimplemented cri-api methods Copy cri-api v1alpha2 from v0.25.4 to containerd internal directory Update to cri-api v0.26.0-beta.0 Add container event support to containerd Add Evented PLEG support to sandbox server Move PLEG event generation back to sbserver to avoid missing pod sandbox status Send container events with nil PodSandboxStatus shuaichang (1): Added support for runtime level snapshotter, issue 6657 songjiang han (1): fix: ctr run --cni get failed wanglei (6): shim: fix debug flag not working CRI: remove default /dev/shm mount in Sandbox. CRI: change the /dev/shm mount options in Sandbox. CRI: implement Controller.Wait for SandboxAPI CRI: implement Controller.Stop for SandboxAPI CRI: implement Controller.Delete for SandboxAPI wen chen (1): fix sdNotify func when debug level xiaoyang zhu (1): update cdi version to v0.5.1 xin.li (10): fix incorrect syntax in comments Update k8 docurl in file update doc url adjust format in comment adjust format improve content-flow matching the casing of other flags for ctr's pull command. fix missing close Reused errdefs for error reused package errdefs for not supported err yanggang (15): keep the lower case letter for flag info make status more readable and update easy. complement sub-command note for containerd-main gotestsum match go version 1.19 Fix building.md for btrfs Missed out `platform interface` when reused the conn for Client. Bump urfave-cli to v1.22.10 Bump fsnotify to v1.6.0 Change fsnotify event status condition. upgrade the ops.md output for current 1.7 version . fix panic when containerd-stress density --count 0 Reused errdefs define error CRI sbserver: Prevent server reuse after Shutdown. make runc 1.1 for oss_fuzz_build.sh update to go1.19.5, go1.18.10 yanghesong (1): Change architecture path in README.md yaozhenxiu (1): fix comments yulng (2): keep the uppercase letter for flag info 'go routine' should be 'goroutine' zhang he (1): fix can't edit object by using ctr content edit command zounengren (6): using ContextDialer instead prevent Server reuse after a Shutdown replace with selinux label bump cri-api update intergration delete redundent import alias and and type conversion

curtismenmuir · 2023-06-01T11:25:18Z

+1 seeing this issue today:

remote: Cannot obtain refs from GitHub: cannot talk to GitHub: Get https://github.com/go-yaml/yaml.git/info/refs?service=git-upload-pack: write tcp 10.131.9.188:60820->140.82.121.3:443: write: broken pipe
fatal: unable to access 'https://gopkg.in/yaml.v2/': The requested URL returned error: 502

Also seen this error on some builds:

gopkg.in/[email protected]: reading gopkg.in/yaml.v2/go.mod at revision v2.4.0: unknown revision v2.4.0

Any help would be greatly appreciated <3

niemeyer · 2023-06-01T15:14:48Z

Sorry about that. There was a data-center wide issue today/yesterday:

https://status.canonical.com/

raeballz · 2023-06-01T16:17:01Z

Hi @niemeyer we've still been suffering the same build issue despite it being marked as fixed by canonical, I was just wondering if there is any process we need to follow to fix this issue, or is there an additional fix in the works?

jalilalchy · 2023-06-01T18:27:35Z

Still ongoing @niemeyer, last failure of this type just occurred for us minutes ago.

jalilalchy · 2023-06-02T00:03:26Z

Just providing an update, still ongoing it seems.

curtismenmuir · 2023-06-02T07:41:20Z

Still seeing these issues today also

yisier · 2023-06-02T08:34:26Z

Still seeing these issues today also

JanOgr · 2023-06-02T08:35:41Z

Still seeing this

curtismenmuir · 2023-06-02T09:19:00Z

Work around for this: https://github.com/orgs/community/discussions/56932#discussioncomment-6069091

We got this working by setting the GOPROXY Env Var to https://proxy.golang.org,direct :)

EG add GOPROXY=https://proxy.golang.org,direct to Jenkinsfile env vars

niemeyer · 2023-06-02T10:25:58Z

The team confirmed they're observing issues still. They are on it. Sorry again for the trouble.

…tp randomly uses YDBGo Background ---------- * We recently started seeing failures like the following in the YDBGo pipelines. ``` # cd .; git clone -- https://gopkg.in/yaml.v3 /go/src/gopkg.in/yaml.v3 Cloning into '/go/src/gopkg.in/yaml.v3'... remote: Cannot obtain refs from GitHub: cannot talk to GitHub: Get https://github.com/go-yaml/yaml.git/info/refs?service=git-upload-pack: write tcp 10.131.9.188:60820->140.82.121.3:443: write: broken pipe fatal: unable to access 'https://gopkg.in/yaml.v3/': The requested URL returned error: 502 package gopkg.in/yaml.v3: exit status 128 ``` * Additionally, if I run a D_ALL in-house (where all systems share the testing workload in running a set of 24 E_ALLs), I used to see dozens of failures with the above symptom. Interestingly, rerunning those specific failing tests many times on all the systems at the same time did not reproduce the problem. So some transient network connection issue with the upstream github repository. Issue ----- * Found the following [solution](go-yaml/yaml#887 (comment)) while searching online. _As mentioned in the [linked issue](niemeyer/gopkg#63 (comment)) the workaround is to set environment variable GOPROXY=https://proxy.golang.org._ _)I'm guessing this approach works as the proxy has copies of go-yaml packages cached. Once that cache expires however the problem will return (assuming Github continues to block gopkg.in)._ * Additionally, found the following in the [golang website](https://proxy.golang.org/). _proxy.golang.org - a module mirror which implements the module proxy protocol. For users downloading large numbers of modules (e.g. for bulk static analysis), the mirror supports a separate endpoint /cached-only that instructs the proxy to return only cached content. This will avoid slow downloads, at the cost of possibly missing some rarely-used modules._ _GOPROXY=https://proxy.golang.org/cached-only go mod download golang.org/x/[email protected]_ Fix --- * Therefore changed the test framework to set the `GOPROXY` env var to `https://proxy.golang.org/cached-only` in `com/setupgoenv.csh` at the same time `GOPATH` env var is being set. This way all tests that use go in the test system (all of which will go through `setupgoenv.csh`) will use the go proxy and hopefully not encounter these random test failures due to github connection issues.

niemeyer · 2023-06-05T10:16:05Z

That should have been handled by now. Please drop a note if you see further issues.

@nars1 Looking at that commit message, please note that GitHub is not actually blocking goppkg.in. The issue was on the data center on gopkg.in's side itself.

nars1 · 2023-06-20T12:27:07Z

That should have been handled by now. Please drop a note if you see further issues.

@nars1 Looking at that commit message, please note that GitHub is not actually blocking goppkg.in. The issue was on the data center on gopkg.in's side itself.

@niemeyer : Thank you for the clarification.

Bumping containerd to version v1.6.8-8-g579a6380e, which comprises the following commits: 1efd8b947 ci: remove GOPROXY environment variable due to go-yaml/yaml#887 0448673af Do not append []string{""} to command to preserve Docker compatibility 5c230ece0 Fix cleanup in critest ed9d3dc37 oci: WithDefaultUnixDevices(): remove tun/tap from the default devices 3364f411e Prepare release notes for v1.6.8 390920429 release workflow: remove Go setup action cf48ba6e8 release workflow: increase timeout to 30 minutes 57873e652 release: rollback Ubuntu to 18.04 (except for riscv64) eccb82f6d Update release build timeout to 20 minutes 6a854d4b5 Update mailmap 61612e1a2 Prepare release notes for 1.6.7 d199ee462 Update golang to 1.17.13 0578d20c5 Change os.Stderr reassign for Windows service 12cae4961 Update Vagrant CI to macos-12 bc4091aae chore: bump macos runner version cb73bd050 Windows HostProcess container CRI stats test ac388525a Add validations for Windows HostProcess CRI configs 0007f40fe [release/1.6] go.mod: Bump hcsshim to v0.9.4 c9607e78c Update Fedora version to 36 2952b66c0 CI: add riscv64 builds 6b2dc9a37 release/Dockerfile: update Ubuntu to 22.04 for supporting riscv64 745dc07c4 seccomp: support riscv64 c2f841f21 Create ppc64le release 86b55bd8d seccomp: allow clock_settime64 when CAP_SYS_TIME is added f3da3e51f allow ptrace(2) by default for kernel >= 4.8 aa1101068 [release/1.6] update golang to 1.17.12 37dfc5c9d [release/1.6] Fix WWW-Authenticate parsing Signed-off-by: Bruce Ashfield <[email protected]>

Bumping moby to version v20.10.21-4-g4ed81ac0e2, which comprises the following commits: f292bf0f4f distribution: Error when pulling OCI artifacts 0211f9e44d [20.10] update to Go 1.18.8 to address CVE-2022-41716 f99cb8297b integration: download busybox-w32 from GitHub Release 3f9dc25f5c update containerd binary to v1.6.9 87ccd38cea vendor: moby/term, Azure/go-ansiterm for golang.org/x/sys/windows compatibility e83e465ae2 [20.10] vendor: github.com/moby/buildkit eeb7b65ab7d651770a5ec52a06ea7c96eb97a249 (v0.8 branch) 9c84417c1b skip TestImagePullStoredfDigestForOtherRepo() on Windows and rootless 5b5b5c6f13 builder: add missing doc comment 05e25f7892 builder: fix running git commands on Windows 2f3bf18014 [20.10] vendor moby/buildkit v0.8.3-31-gc0149372 6699afa549 registry: allow "allow-nondistributable-artifacts" for Docker Hub 4b9902bad4 Validate digest in repo for pull by digest c0d1188c14 builder: make git config isolation opt-in 9f5f3abcee builder: isolate git from local system 10db4c2db7 builder: explicitly set CWD for all git commands 8816c3c2aa builder: modernize TestCheckoutGit 11bdbf40b9 [20.10] Update to go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 66ddb7f91c Fix live-restore w/ restart policies + volume refs c003392582 contrib: make dockerd-rootless-setuptool.sh more robust 53313be0f3 docker-rootless-setuptools.sh: use context after install 9c486bd267 swagger: update links to logo fa17fab895 vendor: github.com/containerd/console v1.0.2 481bee51b5 vendor: github.com/armon/go-metrics v0.4.1 39ba2873e8 vendor: github.com/google/btree v1.1.2 c2755f40cd vendor: github.com/hasicorp/memberlist v0.4.0 5ba3208ec7 Dockerfile: Update Dockerfile syntax, switch to bullseye, add missing libseccomp-dev, remove build pack 6d6a236286 [20.10] Update uses of Image platform fields in OCI image-spec 2570784169 [20.10] vendor: github.com/moby/buildkit 3a1eeca59a9263613d996ead67d53a4b7d45723d (v0.8 branch) fcd4df906b Update some tests for supplementary group permissions 6a0186b357 Wrap local calls to the content and lease service 3d4616f943 Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190 23c7d84b84 docs: api: adjust ContainerWaitResponse error as optional 3e9e79d134 docs: api: document ImageSummary fields (api v1.39-v1.41) fdd438ae03 api: docs: improve documentation of ContainerConfig type (API v1.30-v1.41) 97014a8db5 namesgenerator: remove Valentina Tereshkova e44d7f735e AdditionalGids must include effective group ID 9e7662e4a7 [20.10] vendor: update containerd to latest of docker-20.10 branch 7dac25a3a9 vendor: update tar-split to v0.11.2 8bd86a0699 update containerd binary to v1.6.8 6c8dd6a6f2 update runc to v1.1.4 418c141e64 [20.10 backport] daemon: kill exec process on ctx cancel d127287d92 Allow different syscalls from kernels 5.12 -> 5.16 57db169641 seccomp: add support for Landlock syscalls in default policy 7ba8ca042c Update golang to 1.18.5 f2a3c3bcef update golang to 1.18.4 a99c9cd852 update golang to 1.18.3 82939f536b update golang to 1.18.2 ecd1aa081f update golang to 1.18.1 7ba67d05a8 [20.10] vendor: update archive/tar for go 1.18 0bc432241e update golang to 1.18.0 bb95d09f9a staticcheck: ignore "SA1019: strings.Title is deprecated" a7299ae72c Dockerfile: update golangci-lint v1.44.0 d97fd533cf integration-cli: SA5011: possible nil pointer dereference (staticcheck) e6aee04a88 client.NewClientWithOpts(): remove redundant type assertion (gosimple) 0523323c28 daemon/logger/awslogs: suppress false positive on hardcoded creds (gosec) adeb29c64c client/request.go:157:8: SA1019: err.Temporary is deprecated (staticcheck) 50361d91a6 registry: trimV1Address(): simplify trimming trailing slash ae3a9337dd golangci.yml: do not limit max reported issues 9820255a1c golangci.yml: skip some tests d223f37300 golangci.yml: update regex for ignoring SA1019 ec3bfba89d graphdriver: temporarily ignore unsafeptr: possible misuse of reflect.SliceHeader f2f387b131 daemon: var-declaration: should omit type bool (revive) 2fb7c9fea7 daemon/config: error strings should not be capitalized fa6954cb98 reformat "nolint" comments 45fa675a35 if-return: redundant if ...; err != nil check (revive) 9e88f8435a daemon/splunk: ignore G402: TLS MinVersion too low for now 2de90ebbe4 pkg/archive: RebaseArchiveEntries(): ignore G110 14b475d091 daemon/stats: fix notRunningErr / notFoundErr detected as unused (false positive) db7b3f4737 unused: ignore false positives b6de0ca7c5 G601: Implicit memory aliasing in for loop e8b838e99f gosec: G601: Implicit memory aliasing in for loop 2ddf6e598a gosimple: S1039: unnecessary use of fmt.Sprintf fadf8bbdff staticcheck: SA4001: &*x will be simplified to x. It will not copy x 7573e32577 client: S1031: unnecessary nil check around range (gosimple) e738a57a6d daemon/logger/journald: fix linting errors 34f6b94255 gosec: G404: Use of weak random number generator a6d7b61c8b update containerd binary to v1.6.7 b4ba1ee22f update runc binary to v1.1.3 da8828c4b3 api: swagger: fix invalid example value (API v1.39-v1.41) 9501d91e19 api: swagger: document BuildCache fields (API v1.39-v1.41) 61fdea902b api: swagger: document BuildCache fields. c77432c889 [20.10] Update golang to 1.17.13 2833aa1e4b docs: api: add missing "platform" query-arg on create (v1.41) a8c28260ad api: swagger: add missing "platform" query-arg on create cfdc075b1c Fix file capabilities droping in Dockerfile 2daa6bb6b3 Windows: Re-create custom NAT networks after restart if missing from HNS 903cd53ce4 vendor: libnetwork 0dde5c895075df6e3630e76f750a447cf63f4789 eccaf6d368 [20.10] update golang to 1.17.12 ff7feeac37 vendor: github.com/containerd/continuity v0.3.0 Bumping libnetwork to version v0.7.0-dev.3-1841-gdcdf8f17, which comprises the following commits: 5e08bdb1 Revert: Added API to set ephemeral port allocator range 563fe8e2 README.md: repo was moved to https://github.com/moby/moby/tree/master/libnetwork bea0bcf5 libnetwork: skip firewalld management for rootless af0c46d8 Apply peformance tuning to new sandboxes also Bumping docker-cli to version v20.10.21, which comprises the following commits: 3e3677e47d docs: fix links to BuildKit backend 20e3951aeb Remove "experimental" gates around "--platform" in bash completion 75d7ce92a2 fixed the plugin command docker-runc a12c535f6e [20.10] vendor docker 03df974ae9e6c219862907efdd76ec2e77ec930b (v20.10.20) d18a3e9004 [20.10] vendor moby/buildkit v0.8.3-31-gc0149372 932ca73874 [20.10] vendor: github.com/docker/docker v20.10.19 7d51e65e72 [20.10] vendor: github.com/moby/buildkit 3a1eeca59a9263613d996ead67d53a4b7d45723d (v0.8 branch) 1ea8d69d6f feat(docker): add context argument completion e82aa85741 [20.10] vendor: github.com/docker/docker v20.10.18 e9176b36cc [20.10] vendor: github.com/containerd/continuity v0.3.0 bc6ff39e42 docs/reference: run.md update confusing example name 3fa7a8654f docs: update deprecation status for "overlay2.override_kernel_check" 3e06ce8bfa [20.10] Update go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 93eead45ee Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190 45075ea08c [20.10] vendor: github.com/docker/docker v20.10.17 c2dcaecf19 make compose plugin detection in bash completion work on Mac OS 613b9362d0 Detect compose plugin b30d250320 Add completion for docker-compose plugin 6b25bc3003 fix race condition in TestRemoveForce bdac0b38d9 Update golang to 1.18.5 c70b01ec1f update golang to 1.18.4 0389090aeb update golang to 1.18.3 c904936d69 update golang to 1.18.2 386d50c2e9 update golang to 1.18.1 990186f2f6 update go to 1.18.0 86bf1966e2 staticcheck: ignore SA1019: strings.Title is deprecated b3022b91d1 [20.10] Dockerfile.lint: use go install f14ba9f5d7 [20.10] Dockerfile: use syntax=docker/dockerfile:1 c189c4dbea [20.10] vendor: github.com/json-iterator/go v1.1.12 for Go 1.18 compatibility 0c46ffc1f9 [20.10] vendor: github.com/modern-go/reflect2 v1.0.2 for Go 1.18 compatibility 6be9ce798e [20.10] vendor: github.com/google/gofuzz v1.0.0 779ed309a8 lint: update golangci-lint to v1.45.2 2f7e84be65 linting: fix incorrectly formatted errors (revive) e628209d9b linting: ignore some "G101: Potential hardcoded credentials" warnings 80a3add604 cli/command/container: unnecessary use of fmt.Sprintf (gosimple) 80fb0d575e [20.10] Update golang to 1.17.13 d72bef2088 [20.10] update golang to 1.17.12 7502d7e560 Fix dead external link 308624c3b1 fix: remove asterisk from docker command suggestions de7d866b6a [20.10] update golang to 1.17.11 240e4b5501 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 5d4776bd90 [20.10] update golang to 1.17.10 49e9c2ae3d vendor: golang.org/x/sys 63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17) 87a3ce2699 vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456 1d8abed17d vendor: update x/sys to 134d130e 31dad66f9a [20.10] update golang to 1.17.9 80f673bf9e gofmt with go1.17 3d4cc8e699 [20.10] update remaining files to go1.17.8 30277a8f80 update go to 1.17.8 cfef3a7dc1 docs: deprecated: add entry for "fluent-async-connect" log-opt 53426025c3 [20.10] docs: reformat table for compatibility 573a664639 Describe privileged mode in terms of capabilities cf0ab7ac4c [20.10] vendor: github.com/docker/distribution v2.8.1 d05fd4ffc8 [20.10] vendor: github.com/opencontainers/image-spec v1.0.2 870f138250 [20.10] vendor: github.com/docker/docker v20.10.14 198d6b8724 [20.10] circleci: update buildx to v0.8.2 55a14ec851 [20.10] update remaining Dockerfiles to go 1.16.15 1f9a0df05a e2e: update docker-compose to 1.29.2 4ae338b33a docs: reference: remove trailing space to fix yaml formatting 6380142dd4 docs: fix (table) formatting, fix some broken links 82f422fcf3 docs: build: fix minor markdown and syntax issues 80fd77903b Update the list of log drivers c3d4d623c8 Fix CMD --ignored-param1 example 2e82d11def docs: dockerd: fix broken link in blockquote area 738a6ee1cc improve cp documentation with some illustration examples 246d96bb6c docs: unify "docker create" and "docker run" reference 2fd0f17057 docs: add missing documentation for --pull flag 5fa500000a Fix incorrect pointer inputs to `json.Unmarshal` 1e6a8ce2b7 Dockerfile: update xx to 1.1 6f7a931a2d [20.10] use GO_LDFLAGS instead of LDFLAGS to prevent inheriting unrelated options 91bab605f7 [20.10] vendor.conf: don't use git:// protocol a282e0c5d2 [20.10] update to go 1.16.15 to address CVE-2022-24921 700364e304 Fix mistake with env var example in docker run docs 62d27c32ff Update WORKDIR command information c0e952cf04 Fix the (dead) link for docs for Dockerfile syntax reference 04104a04d3 Update dockerd.md b721998b7b Fixing typo (his --> its) 4065e1246e format create.md table f1002eb9fb Fix typo e97c7b240e added missing closing parenthese aa78937634 Update stats.md add example json output 40fe0573aa Update Ubuntu version number references in push.md c9737e1c37 docs/daemon: replace deprecated '-g' option for '--data-root' 5c6723d080 Correct device syntax to --gpus fd5fc61ecd [20.10] Update Go to 1.16.14 3624019d83 [20.10] update Go to 1.16.13 f3ff8e6ad6 [20.10] vendor: compose-on-kubernetes v0.5.0 to remove github.com/golang/glog ee1ac1b319 fix innocuous data-race when config.Load called in parallel 38dd744a11 [20.10] Update Go to 1.16.12 4de40a825e Update Go to 1.16.11 03fa8f92c8 Update Go to 1.16.10 9989fdbc40 Update most links in docs to use https by default 0e20c1fd21 Update Go to 1.16.9 1c0927a041 Dockerfile: update tonistiigi/xx to 1.0.0-rc.2, add XX_VERSION arg 82f9d5921b info: skip client-side warning about seccomp profile on API >= 1.42 adb01ca79d docs: some minor touch-ups in checkpoint reference 8260476a06 docs: remove trailing space to fix generated YAML format bce2e1f953 docs: create.md: typo fix 44064f51c8 Fix typo in documentation - build.md 292779add5 Add doc for BUILDKIT_PROGRESS env var f2e79b826c docs: use "console" code-hint for shell examples fa46b92361 docs: rewrite reference docs for --stop-signal and --stop-timeout 400f81089a experimental: fix broken link to "checkpoint and restore" page c72057c8db docs: move checkpoint/restore doc from experimental into reference 77db97d595 Use private network address for default-address-pools setting in daemon.json example cbf0d2b7b7 docs: fix some broken anchors d0014a86bc docs: fix description of restart-delay to mention max (1 minute) 6c1c8b55aa docs: fix search results by filterd is-official 44fdac11f5 Update Go to 1.16.8 061051c24d docs: add missing redirect, and remove /go/experimental redirect 2012fbf111 Update Go to 1.16.7 42d1c02750 registry: ensure default auth config has address 0b924e51fc Update to go1.16.6 6288e8b1ac change TestNewAPIClientFromFlagsWithHttpProxyEnv to an e2e test 1e9575e81a cli/config/configfile: various test cleanups c98e9c47ca Use designated test domains (RFC2606) in tests 8437cfefae context: deprecate support for encrypted TLS private keys 68a5ca859f cli/context: ignore linting warnings about RFC 1423 encryption 8a64739631 Update Dockerfiles to latest syntax, remove "experimental" 1d37fb3027 Deprecate Kubernetes context support 0793f96394 Deprecate Kubernetes stack support b639ea8b89 Deprecate Kubernetes stack support Signed-off-by: Bruce Ashfield <[email protected]> docker-ce: update to v20.10.21 Bumping docker to version v20.10.21-4-g4ed81ac0e2, which comprises the following commits: f292bf0f4f distribution: Error when pulling OCI artifacts 0211f9e44d [20.10] update to Go 1.18.8 to address CVE-2022-41716 f99cb8297b integration: download busybox-w32 from GitHub Release 3f9dc25f5c update containerd binary to v1.6.9 87ccd38cea vendor: moby/term, Azure/go-ansiterm for golang.org/x/sys/windows compatibility e83e465ae2 [20.10] vendor: github.com/moby/buildkit eeb7b65ab7d651770a5ec52a06ea7c96eb97a249 (v0.8 branch) 9c84417c1b skip TestImagePullStoredfDigestForOtherRepo() on Windows and rootless 5b5b5c6f13 builder: add missing doc comment 05e25f7892 builder: fix running git commands on Windows 2f3bf18014 [20.10] vendor moby/buildkit v0.8.3-31-gc0149372 6699afa549 registry: allow "allow-nondistributable-artifacts" for Docker Hub 4b9902bad4 Validate digest in repo for pull by digest c0d1188c14 builder: make git config isolation opt-in 9f5f3abcee builder: isolate git from local system 10db4c2db7 builder: explicitly set CWD for all git commands 8816c3c2aa builder: modernize TestCheckoutGit 11bdbf40b9 [20.10] Update to go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 66ddb7f91c Fix live-restore w/ restart policies + volume refs c003392582 contrib: make dockerd-rootless-setuptool.sh more robust 53313be0f3 docker-rootless-setuptools.sh: use context after install 9c486bd267 swagger: update links to logo fa17fab895 vendor: github.com/containerd/console v1.0.2 481bee51b5 vendor: github.com/armon/go-metrics v0.4.1 39ba2873e8 vendor: github.com/google/btree v1.1.2 c2755f40cd vendor: github.com/hasicorp/memberlist v0.4.0 5ba3208ec7 Dockerfile: Update Dockerfile syntax, switch to bullseye, add missing libseccomp-dev, remove build pack 6d6a236286 [20.10] Update uses of Image platform fields in OCI image-spec 2570784169 [20.10] vendor: github.com/moby/buildkit 3a1eeca59a9263613d996ead67d53a4b7d45723d (v0.8 branch) fcd4df906b Update some tests for supplementary group permissions 6a0186b357 Wrap local calls to the content and lease service 3d4616f943 Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190 23c7d84b84 docs: api: adjust ContainerWaitResponse error as optional 3e9e79d134 docs: api: document ImageSummary fields (api v1.39-v1.41) fdd438ae03 api: docs: improve documentation of ContainerConfig type (API v1.30-v1.41) 97014a8db5 namesgenerator: remove Valentina Tereshkova e44d7f735e AdditionalGids must include effective group ID 9e7662e4a7 [20.10] vendor: update containerd to latest of docker-20.10 branch 7dac25a3a9 vendor: update tar-split to v0.11.2 8bd86a0699 update containerd binary to v1.6.8 6c8dd6a6f2 update runc to v1.1.4 418c141e64 [20.10 backport] daemon: kill exec process on ctx cancel d127287d92 Allow different syscalls from kernels 5.12 -> 5.16 57db169641 seccomp: add support for Landlock syscalls in default policy 7ba8ca042c Update golang to 1.18.5 f2a3c3bcef update golang to 1.18.4 a99c9cd852 update golang to 1.18.3 82939f536b update golang to 1.18.2 ecd1aa081f update golang to 1.18.1 7ba67d05a8 [20.10] vendor: update archive/tar for go 1.18 0bc432241e update golang to 1.18.0 bb95d09f9a staticcheck: ignore "SA1019: strings.Title is deprecated" a7299ae72c Dockerfile: update golangci-lint v1.44.0 d97fd533cf integration-cli: SA5011: possible nil pointer dereference (staticcheck) e6aee04a88 client.NewClientWithOpts(): remove redundant type assertion (gosimple) 0523323c28 daemon/logger/awslogs: suppress false positive on hardcoded creds (gosec) adeb29c64c client/request.go:157:8: SA1019: err.Temporary is deprecated (staticcheck) 50361d91a6 registry: trimV1Address(): simplify trimming trailing slash ae3a9337dd golangci.yml: do not limit max reported issues 9820255a1c golangci.yml: skip some tests d223f37300 golangci.yml: update regex for ignoring SA1019 ec3bfba89d graphdriver: temporarily ignore unsafeptr: possible misuse of reflect.SliceHeader f2f387b131 daemon: var-declaration: should omit type bool (revive) 2fb7c9fea7 daemon/config: error strings should not be capitalized fa6954cb98 reformat "nolint" comments 45fa675a35 if-return: redundant if ...; err != nil check (revive) 9e88f8435a daemon/splunk: ignore G402: TLS MinVersion too low for now 2de90ebbe4 pkg/archive: RebaseArchiveEntries(): ignore G110 14b475d091 daemon/stats: fix notRunningErr / notFoundErr detected as unused (false positive) db7b3f4737 unused: ignore false positives b6de0ca7c5 G601: Implicit memory aliasing in for loop e8b838e99f gosec: G601: Implicit memory aliasing in for loop 2ddf6e598a gosimple: S1039: unnecessary use of fmt.Sprintf fadf8bbdff staticcheck: SA4001: &*x will be simplified to x. It will not copy x 7573e32577 client: S1031: unnecessary nil check around range (gosimple) e738a57a6d daemon/logger/journald: fix linting errors 34f6b94255 gosec: G404: Use of weak random number generator a6d7b61c8b update containerd binary to v1.6.7 b4ba1ee22f update runc binary to v1.1.3 da8828c4b3 api: swagger: fix invalid example value (API v1.39-v1.41) 9501d91e19 api: swagger: document BuildCache fields (API v1.39-v1.41) 61fdea902b api: swagger: document BuildCache fields. c77432c889 [20.10] Update golang to 1.17.13 2833aa1e4b docs: api: add missing "platform" query-arg on create (v1.41) a8c28260ad api: swagger: add missing "platform" query-arg on create cfdc075b1c Fix file capabilities droping in Dockerfile 2daa6bb6b3 Windows: Re-create custom NAT networks after restart if missing from HNS 903cd53ce4 vendor: libnetwork 0dde5c895075df6e3630e76f750a447cf63f4789 eccaf6d368 [20.10] update golang to 1.17.12 ff7feeac37 vendor: github.com/containerd/continuity v0.3.0 Bumping libnetwork to version v0.7.0-dev.3-1841-gdcdf8f17, which comprises the following commits: 5e08bdb1 Revert: Added API to set ephemeral port allocator range 563fe8e2 README.md: repo was moved to https://github.com/moby/moby/tree/master/libnetwork bea0bcf5 libnetwork: skip firewalld management for rootless af0c46d8 Apply peformance tuning to new sandboxes also Bumping docker-cli to version v20.10.21, which comprises the following commits: 3e3677e47d docs: fix links to BuildKit backend 20e3951aeb Remove "experimental" gates around "--platform" in bash completion 75d7ce92a2 fixed the plugin command docker-runc a12c535f6e [20.10] vendor docker 03df974ae9e6c219862907efdd76ec2e77ec930b (v20.10.20) d18a3e9004 [20.10] vendor moby/buildkit v0.8.3-31-gc0149372 932ca73874 [20.10] vendor: github.com/docker/docker v20.10.19 7d51e65e72 [20.10] vendor: github.com/moby/buildkit 3a1eeca59a9263613d996ead67d53a4b7d45723d (v0.8 branch) 1ea8d69d6f feat(docker): add context argument completion e82aa85741 [20.10] vendor: github.com/docker/docker v20.10.18 e9176b36cc [20.10] vendor: github.com/containerd/continuity v0.3.0 bc6ff39e42 docs/reference: run.md update confusing example name 3fa7a8654f docs: update deprecation status for "overlay2.override_kernel_check" 3e06ce8bfa [20.10] Update go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 93eead45ee Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190 45075ea08c [20.10] vendor: github.com/docker/docker v20.10.17 c2dcaecf19 make compose plugin detection in bash completion work on Mac OS 613b9362d0 Detect compose plugin b30d250320 Add completion for docker-compose plugin 6b25bc3003 fix race condition in TestRemoveForce bdac0b38d9 Update golang to 1.18.5 c70b01ec1f update golang to 1.18.4 0389090aeb update golang to 1.18.3 c904936d69 update golang to 1.18.2 386d50c2e9 update golang to 1.18.1 990186f2f6 update go to 1.18.0 86bf1966e2 staticcheck: ignore SA1019: strings.Title is deprecated b3022b91d1 [20.10] Dockerfile.lint: use go install f14ba9f5d7 [20.10] Dockerfile: use syntax=docker/dockerfile:1 c189c4dbea [20.10] vendor: github.com/json-iterator/go v1.1.12 for Go 1.18 compatibility 0c46ffc1f9 [20.10] vendor: github.com/modern-go/reflect2 v1.0.2 for Go 1.18 compatibility 6be9ce798e [20.10] vendor: github.com/google/gofuzz v1.0.0 779ed309a8 lint: update golangci-lint to v1.45.2 2f7e84be65 linting: fix incorrectly formatted errors (revive) e628209d9b linting: ignore some "G101: Potential hardcoded credentials" warnings 80a3add604 cli/command/container: unnecessary use of fmt.Sprintf (gosimple) 80fb0d575e [20.10] Update golang to 1.17.13 d72bef2088 [20.10] update golang to 1.17.12 7502d7e560 Fix dead external link Signed-off-by: Bruce Ashfield <[email protected]> containerd: update to v1.6.9 Bumping containerd to version v1.6.9-12-g6c41694da, which comprises the following commits: 5af8d89ce overlayutils: Add fastpath for userxattr check 303f608dd [release/1.6] update to Go 1.18.8 to address CVE-2022-41716 3f9f9508d ctr export strictly match default platform df73acad5 [release/1.6] go.mod: Bump hcsshim to v0.9.5 658490b78 ctr import: strictly match platform 4907b4d72 Migrate away from GitHub actions set-output f1493f665 Prepare release notes for v1.6.9 346412f5a adding support of CAP_BPF and CAP_PERFMON 99578d1fc Update mailmap a956d8415 Add logging volume metrics to Containerd CRI plugin 29e2dea50 fix pusher concurrent close channel 8a9d69385 [release/1.6] Stats() shouldn't assume s.container is non-nil a9adc7938 cri: PodSandboxStatus should tolerate missing task b66eb726a migrate from k8s.gcr.io to registry.k8s.io 5b40993a5 [release/1.6] upgrade containerd/continuity from v0.2.2 to v0.3.0 f2376e659 Update container with sandbox metadata after NetNS is created 06f82efef archive: validate digests before use 28324c529 [release/1.6] Update go 1.18.7, addresses CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 0aeeb62cb [release/1.6] update golangci-lint to v1.19.0 7db9d1f76 Fix linter warnings 4dc932e62 [release/1.6] gofmt with go1.19 7b8d679ad [release/1.6] integration: remove use of deprecated io/ioutil 926b9c72f retry request on writer reset b9a35c6af Add integration tests with failpoint 1f29fac48 Persist container and sandbox if resource cleanup fails, like teardownPodNetwork a85709c6c integration: simplify CNI-fp and add README.md d89a8d223 pkg/failpoint: add FreeBSD link and update pkg doc b0ce2965a integration: Add injected failpoint testing for RunPodSandbox a7f956d86 integration: CNI bridge wrapper with failpoint 07c479471 pkg/failpoint: add DelegatedEval API 4a5bc05aa runtime/v2/shim: return if error in load plugin 71ee7de24 bin/ctr,integration: new runc-shim with failpoint 3e2e77849 runtime/v2: manager supports server interceptor cb935bf49 pkg/failpoint: init failpoint package 2fdfd564c make xattr EPERM non-fatal in createTarFile 89e49609d remotes/docker/config: Skipping TLS verification for localhost b720be2ce remove stray .zuul.yaml 6b30bc4b4 .zuul: remove the zuul because it is offline 0f7e258ee Set grpc code for unimplemented cri-api methods fb753e5cd update intergration 6ee5bb7ea bump cri-api ae8598615 ContainerStatus to return container resources d3c7e31c8 Update CRI-API 5b44c5271 vendor: golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd 3507d600b update runc binary to v1.1.4 1efd8b947 ci: remove GOPROXY environment variable due to go-yaml/yaml#887 Signed-off-by: Bruce Ashfield <[email protected]>

Bumping containerd to version v1.6.9-12-g6c41694da, which comprises the following commits: 5af8d89ce overlayutils: Add fastpath for userxattr check 303f608dd [release/1.6] update to Go 1.18.8 to address CVE-2022-41716 3f9f9508d ctr export strictly match default platform df73acad5 [release/1.6] go.mod: Bump hcsshim to v0.9.5 658490b78 ctr import: strictly match platform 4907b4d72 Migrate away from GitHub actions set-output f1493f665 Prepare release notes for v1.6.9 346412f5a adding support of CAP_BPF and CAP_PERFMON 99578d1fc Update mailmap a956d8415 Add logging volume metrics to Containerd CRI plugin 29e2dea50 fix pusher concurrent close channel 8a9d69385 [release/1.6] Stats() shouldn't assume s.container is non-nil a9adc7938 cri: PodSandboxStatus should tolerate missing task b66eb726a migrate from k8s.gcr.io to registry.k8s.io 5b40993a5 [release/1.6] upgrade containerd/continuity from v0.2.2 to v0.3.0 f2376e659 Update container with sandbox metadata after NetNS is created 06f82efef archive: validate digests before use 28324c529 [release/1.6] Update go 1.18.7, addresses CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 0aeeb62cb [release/1.6] update golangci-lint to v1.19.0 7db9d1f76 Fix linter warnings 4dc932e62 [release/1.6] gofmt with go1.19 7b8d679ad [release/1.6] integration: remove use of deprecated io/ioutil 926b9c72f retry request on writer reset b9a35c6af Add integration tests with failpoint 1f29fac48 Persist container and sandbox if resource cleanup fails, like teardownPodNetwork a85709c6c integration: simplify CNI-fp and add README.md d89a8d223 pkg/failpoint: add FreeBSD link and update pkg doc b0ce2965a integration: Add injected failpoint testing for RunPodSandbox a7f956d86 integration: CNI bridge wrapper with failpoint 07c479471 pkg/failpoint: add DelegatedEval API 4a5bc05aa runtime/v2/shim: return if error in load plugin 71ee7de24 bin/ctr,integration: new runc-shim with failpoint 3e2e77849 runtime/v2: manager supports server interceptor cb935bf49 pkg/failpoint: init failpoint package 2fdfd564c make xattr EPERM non-fatal in createTarFile 89e49609d remotes/docker/config: Skipping TLS verification for localhost b720be2ce remove stray .zuul.yaml 6b30bc4b4 .zuul: remove the zuul because it is offline 0f7e258ee Set grpc code for unimplemented cri-api methods fb753e5cd update intergration 6ee5bb7ea bump cri-api ae8598615 ContainerStatus to return container resources d3c7e31c8 Update CRI-API 5b44c5271 vendor: golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd 3507d600b update runc binary to v1.1.4 1efd8b947 ci: remove GOPROXY environment variable due to go-yaml/yaml#887 Signed-off-by: Bruce Ashfield <[email protected]>

Bumping containerd to version v1.7.0-beta.0-284-gf2cf411b7, which comprises the following commits: d5010a12d docs: Authorizer.Authorize could return ErrUnexpectedStatus 2eabcf702 fix: check for tmpfs when evaluating if userxattr should be used a6929f9f6 Add Evented PLEG support to sandbox server a338abc90 Add container event support to containerd e14753fc5 Respect no_cri constraint 3bc8fc4d3 Cleanup build constraints c040f8382 Fix default config for Darwin 0b349428e CI: Vagrant: pin rockylinux/8 to v5.0.0 662d8a085 vendor: golang.org/x/net v0.4.0 f9295aa49 Fix context when waiting sandbox 8ab1d4496 Pass runtime configuration as TOML blob 3e92dedc2 Update runtime options to include bytes blob a113737cc sbserver bug fixing 85776d2c6 update to go1.19.4, go1.18.9 840a657eb Change PushContent to require only Provider 847294679 Adding unit tests to opentelemetry tracing 8a25fa584 Unwrap proto errors in streaming client b0dd50655 fix panic when containerd-stress density --count 0 39cc684c6 docs: Add extra security instructions afa19a0a7 Fix process_vm_* syscall names in seccomp 740e90177 go.mod: re-vendor NRI from the official repo. 345332175 upgrade the ops.md output for current 1.7 version . f88162587 Rename transferer to transferrer fc2754204 Cleanup code comments and lint fixes f1598cf5e Update transfer docs 01bd314b1 Rename local transfer plugin c387a5205 Add variables names to transfer interface 8304a61b5 Combine stream fuzz tests 0762a3a75 Add media type to export stream 52341a234 Update export API types 42eedc0bc Update ctr to make local the default for distribution ef61e13a6 Update import cli to use transfer service 11c1c8e6f Update import logic 66dc4d106 Update API for import types b991c71e9 Update pull command to use filter arguments 40d3fa3af Add filter fields to image store types 9ae92f16e Improve push handler ordering 737257bb4 Add push progress e88baa087 Fixup pull authorization and labeling 478f1c934 Lint fixes 28ea75456 Regenerated protobuf files with updated version b0f519703 Add transfer docs cd67a98ec Add transfer integration test 0aca4bb1f Update ctr commands to use transfer interface 6b5df1ee1 Update transfer packages 2a8d7a744 Update transfer API 7318a2def Add transfer plugin registration d1627e3c7 Add basic import and export handlers adfaeeff0 Add binary stream functionality and helpers e506cd103 Implement client interface for transfer service 81afd9c36 Add progress 0e4e96544 Add transfer proxy client 6f64cb859 Transfer interface and plugin work in progress f61ed7e94 Transfer API types a24ea31c2 Add transfer API dcf5687ca Add streaming service 08d5879f3 Added nullptr checks to pkg/cri/server and sbserver 8e0a3c51a Add ctr image prune ceab73007 use MaxConcurrentDownloads instead of MaxConcurrentUploadedLayers f012617ed CRI stream server: Fix goroutine leak in Exec 9f4ba4883 [sandbox] Fix panic when waiting for sandbox controller dbc6d33ac [sandbox] Specify sandbox ID when using sandboxed shims 9a53a6c34 [sandbox] Don't access pause container when creating pod container cc111eef6 [sandbox] Move sandbox info to podsandbox controller a0daf1c28 docs: add NRI-related documentation. 02f0a8b50 pkg/cri/server: nuke old v0.1.0 NRI hooks. ca84aba6c integration: add first NRI integration tests. b27ef6f16 pkg/cri/server: experimental NRI integration for CRI. 43704ca88 nri: add experimental NRI plugin. a6d1d53cc [sandbox] Update Controller.Status protos 2136736f5 go.mod: golang_protobuf_extensions v1.0.4 - prevent incompatible versions 63c6c55ab go.mod: roll back github.com/containerd/cgroups to v1.0.4 release 3c1c0878e integration/client: update containerd version to v1.7.0-beta.0 ebd63adac integration/client: fix go.mod grouping 8d868dadb Add ptrace readby and tracedby to default AppArmor profile 8c035d387 Resolve warnings in Windows GitHub Actions periodic workflows ae0da7dc5 Use sandbox store to retrieve runtime info for sandboxed containers 3ddaa3444 Retrieve sandbox creation time from store. 4b3281982 Remove duplicated helpers 3f331e7d1 Specify runtime configuration for sandbox shims c4dee237f Fix order of operations when setting lease labels a22f0a4c3 archive: set WithModTimeUpperBound when WithSourceDateEpoch is set ed3a49c0e fix for OSS-Fuzz infra changes ac4af4df8 integration: enable CNI slow test for sbserver a74f7e902 sbserver: save netns in sandbox metadata on create 085d8e633 integration: enable tests for sbserver 1deaedd38 sbserver: persist sandbox during partial teardown 5a7c108ba Resolve Scorecards GitHub Actions workflow warnings b7b185c92 update github.com/cpuguy83/go-md2man/v2 to v2.0.2 6142a2a24 sys: remove unused GetOpenFds() f0ce2f6d3 remotes/docker: remove deprecated NewAuthorizer alias c71a31156 sys: remove aliases for deprecated EpollCreate1, EpollCtl, EpollWait 3e5b444ac pkg/cri/util/: remove deprecated NormalizeImageRef alias 3a7cfaebb sys: remove alias for deprecated sys.RunningInUserNS() bd912bbee go.mod: github.com/matttproud/golang_protobuf_extensions v1.0.2 5f23daeb2 go.mod: github.com/moby/sys/sequential v0.5.0 763ec7c86 go.mod: github.com/cpuguy83/go-md2man/v2 v2.0.2 0f616e354 go.mod: github.com/AdaLogics/go-fuzz-headers v0.0.0-20221118232415-3345c89a7c72 df4d07352 go.mod: golang.org/x/sys v0.2.0 4e68634ef go.mod: github.com/sirupsen/logrus v1.9.0 579c7f43d Change fsnotify event status condition. 2cea525ee Bump fsnotify to v1.6.0 73c6db881 Bump urfave-cli to v1.22.10 bf777a70b remove duplicated tx rollback 70b65062c Missed out `platform interface` when reused the conn for Client. 0c4d32c13 cri: add pod uid annotation 438db09b0 Fix building.md for btrfs 792294ce0 Update to cri-api v0.26.0-beta.0 234bf990d Copy cri-api v1alpha2 from v0.25.4 to containerd internal directory e224f77eb Add process_vm read and write calls to default seccomp profile e4130b2a0 overlay: Remove unused method param 661aaae3b introspection: expose the daemon's PID and PIDNS f6232793b can set up the network serially by CNI plugins 2f5dd7c66 CI: update Fedora to 37 3fc5802d1 gotestsum match go version 1.19 aaf59efd2 Expose Done and Err in Shutdown service 5d0457df9 Refactored ctr to allow for tty allocation when container has {terminal:true} within Spec c245347e9 tx rollback when GetInfo return error 14a08721c Remove OpenTelementry imports from remotes/docker package 405024db0 complement sub-command note for containerd-main e38e2c8a4 make status more readable and update easy. 3abcfb5c0 keep the lower case letter for flag info 69af001b3 Replace broken and redirection link for CRI and kubelet in docs b0133882f bump critools into ca1571e6edd116b2c95f52e3dfa0b4779b74223a 8bb599973 Remove the outdated comment dd86128e0 Convert hcsshim's stats to cgroups' stats 6596a7086 Use github.com/containerd/cgroups/v3 to remove gogo 38ad785ce Bump k8s.io deps to v0.25.4 bd66f588b Bump OpenTelemetry contrib to v0.36.4 3fca677c1 Release: add static binaries 0c63c42f8 Fix slice append error b829e6f2d Bump OpenTelemetry to v1.11.1 7def13dde Add a thin wrapper around otel Span object ab194e65f Bump grpc to v1.50.1 b742aa2e7 fuzzing: bump go-fuzz-headers 91e295d76 Add `--debug` args 0f54c4740 feat add sandbox api status func c953eecb7 Sandbox API: Add a new mode config for sandbox controller impls 99ac7a771 add oci.WithCPURT 717aa5929 Remove uses of deprecated go-digest.NewDigestFromHex, go-digest.Digest.Hex 3a9044f24 Rename darwin-kubelet to containerd 5f48e00af Extra documentation for content interfaces. 202abf8fc Bump k8s.io deps to v0.25.3 eaedadbed replace strings.Split(N) for strings.Cut() or alternatives f90219d47 services/server/config: TestMergeConfigs(): use correctly formatted values 4866d8ba4 registry: support ipv6 addresses 8bec2b652 Replace references to `re` with `regexp.MustCompile` 5c510e47a Improve how reference regexps are built 98ff27265 Clarify repo name regex intention 2a8a53178 go.mod: change imports to github.com/distribution/distribution/v3 a97eb6955 Update repo normalize error message to include the name of the repo. b979f0069 Fix bug in parsing domain from repository reference f96660286 reference/docker: add unit-tests from upstream distribution/distribution 7de88c5ba reference/docker: align files with original code f32595a0c Fix "getCPUInfo for OS freebsd: not implemented" on FreeBSD/arm64 11a06c1a3 ctr: add `ctr content fetch-blob` dfd6a3aa6 remotes: add FetcherByDigest for fetching blobs without foreknown descriptors c607f83c3 Fix missing closed fifo a24ef0993 Replace mount fork hack with CLONE_FS 8b1b81eef Update hosts doc f0bf9e7f8 Support default hosts.toml configuration 81bbd9dac add option to resolve symlinks to linux device ee64926a7 add SpanAttribute 2d9f0f2fb add additional info in backport process 3b87d46ce Add tracing spans in CRI image service and pull.go 902b96cf2 fix comments 30c3078ae go.mod: golang.org/x/*: use tagged versions 422a24066 Bump go version to 1.19.3 9c2a63440 Fix ctr crash when pulling with http-trace and http-dump 78ac0046a ctr export strictly match default platform a270d6e8a Harden GITHUB_TOKEN permissions 98269c061 s390x: initial enabler 4b2a23e7e overlayutils: Add fastpath for userxattr check 2da782468 Add sequence diagram for shim runtime v2 0be981595 Sandbox API: Move remote impls to /sandbox/proxy 2e83d885d fuzzing: improve archive fuzzer 7c77b3540 Add Workflow for running critest with Hyper-V Containers on Windows. 9494f0b80 Add HyperV config in tests 53f67705c Add release notes for v1.7.0-beta.0 c776a3631 Update mailmap b7d0d1271 Cleanup sandbox interfaces be3987a92 Migrate away from GitHub actions set-output 9a0331c47 maintenance: Remove WithWindowsNetworkNamespace from pkg/cri 3f3e2b3cc Fix LogURI generation-related tests on Windows. ddb8a65be update codeql-action to v2 727b33c71 Retry client connection in waitForStart 3e4449862 Add logging volume metrics to Containerd CRI plugin 3ddcbf5f1 Update 1.5 release support timeframe 9a8611d63 bump go-fuzz-headers fc86be501 not init a tracing processor when not loaded 47fa603e1 Update required Go version in BUILDING.md 8e7ef890a Use logtest if possible to clean up logs a76d68ee4 Separate containerd logs in GitHub Actions' console e47bdbd16 Upgrade critools from 1.24.1 to 1.25.0 878dbc7af Upgrade actions/upload-artifact from v2 to v3 198277202 Use `go env` to determine GOPATH in Makefile. 6a07a1c07 go.mod: matttproud/golang_protobuf_extensions v1.0.2 (use tag) 972399538 sys: synchronize mkdirall() with latest os.MkDirAll() 063c5f980 sys: create SecurityAttribute only once (Windows) a983599e2 sys: update volumePath regex to allow returning earlier d422c87e4 sys: compile volume-path regex once, and update GoDoc f8f052482 Vagrantfile: explicitly specify rsync as the shared folder driver 4839f1bdf Add timeouts to all CI jobs 890398677 cri: PodSandboxStatus should tolerate missing task fb6a40dc9 Don't unmount on Darwin when deleting bundle c7e6a889b sys: remove unused IsAbs() (windows) 48daccb4d fix the --no-pivot flag being ignored by `ctr tasks start` ea53e52fc CI: update GHA instances from Ubuntu 18.04 to 20.04 49a54e23c Stats() shouldn't assume s.container is non-nil e7c8a5ab0 Move up actions versions to prep for deprecation 752bff981 cmd/containerd: use golang.org/x/sys/windows.SetStdHandle() 8b5df7d34 update golangci-lint to v1.49.0 f9c80be1b remove unneeded nolint-comments (nolintlint), disable deprecated linters 29c7fc952 clean-up "nolint" comments, remove unused ones d21572513 pkg/cri/(server|sbserver): criService.getTLSConfig() add TODO to verify nolint 0eaace306 golangci-lint: sort linters in config file 3ebeb6d79 linting: address gosec G112/G114 347397cf2 update go.mod and go.sum 643dc1656 improve CDI logging 8ed910c46 CDI: configure registry on start eec7a76ec move WithCDI to pkg/cri/opts 634bf0dd3 cmd/containerd: use golang.org/x/sys Service.SetRecoveryActions() 17a932403 Update the default seccomp to block socket calls to AF_VSOCK d4b9dade1 Updates oci image config to support upstream ArgsEscaped 047e684bb fix install cni script b7f6a6804 runtime/v2/shim: clean up the use of containerdBinary b41d6f40b Update container with sandbox metadata after NetNS is created 8fc68db0c cmd/containerd: replace deprecated windows.IsAnInteractiveSession() 63a7d8a7f fix pusher concurrent close channel 260af5e1d TestTaskResize must use a terminal 39158629f diff/apply.readCounter: check negative size 70fbedc21 archive: add WithSourceDateEpoch() for whiteouts 0aefb5280 archive: windows: chtimes(): remove redundant conversion f9c9121e5 archive: validate digests before use 8162e044b Add long term stable release branches e2d8f3859 vendor: github.com/opencontainers/selinux v1.10.2 011fca6ed fuzzing: create structured tar bytes in archive fuzzer 54f2b5121 Update to go 1.19.2 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 f330ffd83 cri doc: Update kata containers reference 0119d43a4 use raw link to containerd.servic config a59ecc50e CRI: implement Controller.Delete for SandboxAPI 9d18b5746 Modify WithDiscardUnpackedLayers 4333e6a6d Swap to net.ErrClosed checks for services acb2964d6 go.mod: Bump go-winio to v0.6.0 4196fad02 Add integration tests with failpoint 4f4aad057 Persist container and sandbox if resource cleanup fails, like teardownPodNetwork 396b6d670 fix missing close 7a66f70b5 cri-integration: pass ENABLE_CRI_SANDBOXES to test 2432b54a5 Add new ctr option for discarding unpacked layers b4558bedc Add test flag for skipping shim cgroup test c6f571fc7 Set grpc code for unimplemented cri-api methods 82890dd29 CRI: implement Controller.Stop for SandboxAPI 927906992 CRI: implement Controller.Wait for SandboxAPI dcb0d8f9e remove stray .zuul.yaml e22a7a383 reference CDI configuration details bc01f8fc0 Add reader option to local content reader at c8010b9cb sbserver: return resources in ContainerStatus b92f3160a cri-integration: propagate ENABLE_CRI_SANDBOXES b79dcabd6 chore: enable Scorecard Github Action 8f4c23b69 retry request on writer reset a37c64b20 Refactor CRI fuzzers bf26140d9 Fix LogURIGenerator on Windows adfbda464 Add ext2 fs support to devmapper snapshotter f0fbc8dfd Upgrade fuzzing-related packages to reduce dependencies e7c593edd Fuzzing: Instrument with new sanitizers 9cdf9f6c6 Use jq and only show failed tests on summary 34ad96bab CI: Output a summary using GITHUB_SUMMARY 524d3aca8 github.com/emicklei/go-restful CWE-285: Improper Authorization 3cfde732e remotes/docker/config: Skipping TLS verification for localhost 0f51aa874 Add NoSameOwner option when unpacking tars b2a7183a8 matching the casing of other flags for ctr's pull command. 829dd2145 update cdi version to v0.5.1 0f743ce4f vendor: golang.org/x/net v0.0.0-20220906165146-f3363e06e74c 8f2bbd5e8 Update to go 1.19.1, 1.18.6 to address CVE-2022-27664, CVE-2022-32190 6ce0f6a26 Fix missing close 8575a0d6f Remove unused variable from images action 5e57d463d feature: use client default namespace 3c0e6c40a feat: upgrade registry.k8s.io/pause version f9166aa53 .zuul: remove the zuul because it is offline e041d1a2c integration: TestUpdateContainerResources_MemoryLimit: remove TODO comment 3a2197f5f metrics/cgroups/v1: Remove unused event parameter bfb280fb3 Update golangci-lint timeout to match config 407703f09 Make checkContainerTimestamps less strict on Windows 344b25995 delete redundent import alias and and type conversion 17e436c20 Pin github.com/AdamKorcz/go-118-fuzz-build a3bfa58b0 Make oss-fuzz mandatory 2e677c932 sys: move ForceRemoveAll to integration/client 19db697a5 archive: replace tarName() with filepath.ToSlash() 3cc3d8a56 mount: use ioctl helpers from x/sys/unix 0c6553bfd go.mod, vendor: bump golang.org/x/sys to latest version 93342d637 replace sys Sequential funcs with moby/sys/sequential 9ae2cc3a8 mount: remove unused ErrNotImplementOnWindows dcfaa30ba chore: remove duplicate word in comments b170eb3ca Add Kubernetes v1.25 supported version as v1.24 fdff11def ctr: add privileged-without-host-devices for run command d063597e8 Upgrade github.com/klauspost/compress from v1.11.13 to v1.15.9 eb664aed0 go.mod: github.com/opencontainers/runc v1.1.4 ad597015c update runc binary to v1.1.4 962841fc7 Clarify containerd 1.5.0+ for k8s 1.20,1.21 90f6bd21c script/setup: handle cnidir with SUDO 331066f87 update intergration 49e2fe2ab bump cri-api b7b1200dd ContainerStatus to return container resources 9525b3148 migrate from k8s.gcr.io to registry.k8s.io f0036cb9d windows: Add runhcs-wcow-hypervisor runtimeclass to the default config f318947b0 Do not rename test files on-the-fly to share functions 912d43b2b Revert "Downgrade MinGW to version 10.2.0" 850f667f5 contrib/fuzz/daemon.go: reformat the fileheader 460b0533b pkg/cri/streaming: increase ReadHeaderTimeout 9d286baed crypto/sha256 must be imported adc7d5b2e Don't patch github.com/cilium/ebpf 470d3ee05 Upgrade containerd/cgroups to remove github.com/cilium/ebpf's fuzzer 43907515b adding support of CAP_BPF and CAP_PERFMON 13b14736a Don't fail test when GOOGLE_APPLICATION_CREDENTIALS is unset 095044710 Remove Windows special case in TestContainerdRestart 1f8db2467 go.mod: Bump hcsshim to v0.10.0-rc.1 396d2a7e4 ci: remove GOPROXY environment variable due to go-yaml/yaml#887 1d8b1bc75 Cleanup shim manager ff65fc2d0 Make TaskList generic 6e4b6830f Update CRI-API 782fd3c8e Vagrantfile: dump containerd log after critest 74c09b756 Fix contrib/ header 8add7e5d3 Rework permission handling in scripts 6ba91de84 release workflow: remove Go setup action f8add9263 release workflow: increase timeout to 30 minutes 2dbff1dbc oci: skip checking gid for WithAppendAdditionalGroups 481861020 release: rollback Ubuntu to 18.04 (except for riscv64) 68bae258a Update protobuf definitions ca3b9b50f Run gofmt 1.19 4a11a4018 Update golangci-lint to 1.48 with Go 1.19 support ea6613029 Switch to Go 1.19 7787168cc Use global env variable to specify Go version on CI 5cf77fc43 Add TODOs for the remaining work e1c5d71c0 Update golang to 1.18.5, 1.17.13 ee0f2e906 Change os.Stderr reassign for Windows service 426fcfbc5 fix protobuf aarch64 aa3303b69 Update sandbox protobuf to match CRI 882322417 Update controller's start response to incldue pid and labels 3d028308e Cleanup CRI files c085fac1e Move sandbox start behind controller f51014f8d Add sandbox to in memory services 6c14ca25d Fix cleanup in critest e47c433d5 Add sandbox store helpers f5fb2c32d Regenerate protos with updated protoc-gen-go b16c3e9ad Windows HostProcess container CRI stats test 106433b79 Use httputil.DumpRequestOut for dumping client req 2fa84b1b8 Add extra context to error when push unauthorized f4d05f207 chore: bump macos runner version 276a6f133 test: error strings should not be capitalized 2b92c70fa Fix command line parsing for image list 14003683f go.mod: Bump hcsshim to v0.9.4 1e0698e8e Fix CRI image pull timeout test for ppc64le c15d8e156 go.mod: Bump hcsshim to 0.9.3 a9514da75 Update image references for Windows tests 2ae5f405d Use image lists instead of hardcoded images 552d76344 Use image lists in client tests d121efc6d replace with selinux label e6a2c0790 integration: simplify CNI-fp and add README.md 344431cdd fix: support simultaneous create diff for same parent snapshot 050cd58ce Drop deprecated `ioutil` 500ff95f0 Make getServicesOpts a helper ee6fc5c2e adds an env var commented out for sandboxed mode cbebeb944 pkg/failpoint: add FreeBSD link and update pkg doc 3c5e80b63 integration: Add injected failpoint testing for RunPodSandbox be91a219c integration: CNI bridge wrapper with failpoint 1ae6e8b07 pkg/failpoint: add DelegatedEval API b297775ea runtime/v2/shim: return if error in load plugin 5f9b318e5 bin/ctr,integration: new runc-shim with failpoint 822cc51d8 runtime/v2: manager supports server interceptor ffd59ba60 pkg/failpoint: init failpoint package 3125f7e1a cri_stats: handle missing cpu stats 7eeec8987 adds support for using env file for systemd boot 7dc66eee6 using ContextDialer instead 6639b2b02 test: Add ability to switch between cgroupv1 or cgroupv2 0d6881898 Refactor usageNanoCores be to used for all OSes f6bc986dc go.mod: github.com/stretchr/testify v1.8.0 628f6ac68 code cleanup cc30880e8 ci: workaround Cirrus CI's INVALID_ARGUMENT d8d63a7aa docs: Fix sample config.toml syntax 88bcbb036 adds a comment explaining how to disable experimental sbserver 3a3f43f72 Fix linter warnings 60f51c1aa Update and align golangci-lint version 98a1b7ff1 Add log messages when choosing CRI server bbb8d3470 seccomp: add get_mempolicy, mbind, set_mempolicy, with CAP_SYS_NICE 19e847983 seccomp: seccomp: add syscalls related to PKU in default policy 2ba635331 Change metrics namespace for sandboxed CRI to prevent panic b8e93774c Enable integration tests against sandboxed CRI cf5df7e4a Fork CRI server package 4ffef752d update golang to 1.18.4, 1.17.12 c733119db cri doc: fix formatting for CDI options f77d45e3b ctr: support --user for run/create 22dfc68ad Fix protobuf script to install protobuf on darwin bcdc8468f Fix out of date comments for CRI store packages 174b01344 update some devmapper docs 575095fcd seccomp: allow clock_settime64 when CAP_SYS_TIME is added e9e33f847 Copy fuzzers from github.com/cncf/cncf-fuzzing b31631859 Upgrade github.com/AdaLogics/go-fuzz-headers 6d4b61007 integration/client: fix typo in export_test.go b8bb33b92 fix can't edit object by using ctr content edit command 548c9c317 Fix WWW-Authenticate parsing b8403d2e1 Update k8s.io/cri-api to v0.25.0-alpha2 a44cabf51 Update go-restful/v3 to latest release c2703c08c pkg/cri: use marshal wrapper for version convertor d2588b3fa LCOW differ return ErrNotImplemented for wrong mount type 0a240ff81 Fix missing closed HTTP Body f7de1c8f9 Do not hardcode fuzzers 2b60770c4 Move container_fuzzer.go under integration/client/ 66cc0fc87 Copy FuzzCRI from cncf/cncf-fuzzing ca5637104 Remove mainfuzz package and StartDaemonForFuzzing 17f9c3a0e Move builtins_*.go to cmd/containerd/builtins to make the files reusable d97b754a5 Cleanup metadata tests 1ef4bda43 Downgrade MinGW to version 10.2.0 1ab42be15 refactor: reduce duplicate code 47ad5f70e Fix Doc: fb5b6612a ctr: Fix `ctr c create` fails to parse arguments 68a55fe8b make xattr EPERM non-fatal in createTarFile 99e210c50 Move metadata plugin registration to seperate package 4f0ea7831 fix: missing sudo for devmapper doc 72b87ad00 add WithAdditionalGIDs test 5bf705255 add WithAppendAdditionalGroups helper 5cde04bc7 Forward ctr snapshotter flags on Windows 4ac1031e0 Add snapshotter key to snapshot events b27a229df Move contrib/fuzz/docker_fuzzer.go to remotes/docker f91616e45 Copy FuzzConvertManifest from cncf/cncf-fuzzing c9c5fee37 Do not hardcode fuzzing targets 50f1a4e42 Don't log "ignored xattr ..." warnings 112497bc3 Make oss_fuzz_build.sh quiet 6e53ffb10 ctr: add --hostname flag to create, run 7002fc2c4 Ensure Windows Periodic workflow errors out while still uploading results. 2e288f5b1 improve content-flow d4ab64988 Revert MinGW to oldest known working version in Windows setup script. 55dd56e52 Make CI Fuzz optional 82adbc849 Run fuzzing tests with go test -fuzz a1eb2d8a6 Use testing.F on FuzzPlatformsParse 57200edf2 Use testing.F on FuzzParseProcPIDStatus 0b3c31dd7 Downgrade MinGW in Windows setup scripts. 42a386c81 CRI: change the /dev/shm mount options in Sandbox. a62a95789 CRI: remove default /dev/shm mount in Sandbox. 8245e35eb Make test path a constant ee14f9316 Run fuzzers in CI 52593cfc8 containerd-stress: add support for running through CRI 5560b622d archive: Explicitly specify stdio for tar(1) 95f1d7971 platforms: Run goimports for FreeBSD 42e019e63 cri/server: Disable tests on FreeBSD ad8e59806 oci: Remove empty mount option slice for FreeBSD c15f0cdaf oci: FreeBSD devices may have major number 0 2ab8c12fc archive: use Linkat on FreeBSD for hardlinks 61690d76d Improve naming consistencies in comments in snapshotter.go c101f7999 Allow CRI on Darwin 0167e55ab update runc binary to v1.1.3 c3fb7dfa7 go.mod: github.com/moby/sys/mountinfo v0.6.2 fa4720fa1 fix add ro mount for userattr-unmount unexpected timeout 92d360b58 fix minor spelling mistake: lablel -> label 6190b0f04 Correct spelling mistake ("sanbdox" to "sandbox") 5a6e4144a go.mod: github.com/containerd/cgroups v1.0.4 088c8df3a go.mod: github.com/containerd/continuity v0.3.0 012d68ff9 add gc scheduler metrics: collection count 44e12dc5d Windows snapshotter touch ups and new functionality 40aa4f3f1 Implicitly discard the input to drain the reader 00eb74a4c Make building static binaries simpler d25b4e6f3 Bump Golang and MinGW versions in Windows setup script. 7b9f1d405 Added support for runtime level snapshotter, issue 6657 8bc6ccc07 Bump k8s.io deps to v0.24.1 5fcde823d Bump grpc to v1.47.0 1b3c3860d update golang to 1.18.3, 1.17.11 e3b4d750d update go-cni/for cni update fixing plugins that don't respond with version 8ed54849a Move docker reference logic to reference/docker package f7aa90d27 Fix containerd-stress duration flag ae22854e2 Linux containers on FreeBSD 49ca87d72 Limit the response size of ExecSync 1cf6f2032 promote pause image to 3.7 b5e1b8f61 Use t.Run for /pkg/cri tests b572a82ad CRI: Remove deprecated error types and update error msg 978ff393d Add validations for Windows HostProcess CRI configs 1a8024b46 Makefile: use urfave_cli_no_docs for binaries that don't need it 5bb47fb95 vendor: github.com/urfave/cli v1.22.9 a3a2d14ec fix verify-vendor if go.mod does not contain replace rules 688b30cf5 CRI: Move truncindex to pkg e44335800 CRI: Move reference sorting to reference package b5366f8d7 CRI: Retrieve image spec on client 4ba5415fb build: Fix references to check-protos target in Makefile 8a3114b37 Fix broken oss-fuzz build d2f30150b archive: add human-readable hint to Lchown error 9f9ebbd99 Fix tx closed error when upperdirlabel specified 739cb4c99 config: improve config v1 deprecation message b5107a898 Fix Windows install powershell script b69182c71 add note that a namespace cannot be named "version" 8d95f2b59 fix comments on metadata schema 900019b30 ctr sandbox: handle sandbox config 8ec1fc70d adjust format a42688639 Restore decompression benchmarks 8494f7f11 adjust format in comment 92b7bc9ed ctr: fix label args used in NewContainer 4da4a8879 update doc url eaec6530d fix some confusing typos 65150600d Separate windows-2019 and windows-2022 test results 7300296cb reverts removal of parallel run from critest 523d069a2 sandbox: replace github.com/pkg/errors with native errors c4ce13a28 vendor: github.com/opencontainers/runc v1.1.2 25858d621 update runc binary to v1.1.2 c1140aef6 Bump OpenTelemetry dependencies f710505f4 shim: fix debug flag not working 72cd3b476 update golang to 1.18.2, 1.17.10 f5b7a4b3d CI: update Fedora to 36 a3ac15600 oci: WithDefaultUnixDevices(): remove tun/tap from the default devices ad8b87ba2 Add `Wait` to `binaryProcessor` d9fc5f4b0 Enable git commands due to git CVE fix 09c2c2a75 Pass explicit JUnit outfile to critest.exe in Windows workflow. 2c98a7b09 ctr import: strictly match platform d1c49781e go.mod: Bump k8s deps to v0.24.0 c721c8e27 devmapper docs: small fixes bb11c9d24 update critools to v1.24 8a2e8cd8d move report dir option to eol af24e3871 Update Kubernetes version matrix in release docs 7a834516f Share images between TestRestartMonitor and TestRestartMonitorWithOnFailurePolicy cedb7d3bd containerd 1.6.4 k8s 1.24 readme announce 57d2bce74 docs: minor fixes in snapshots.Snapshotter comments 42584167b Officially deprecate Schema 1 55401ac9c Update k8 docurl in file d4127a9f2 CI: add riscv64 builds 0e56e4f9f release/Dockerfile: update Ubuntu to 22.04 for supporting riscv64 4b412b800 seccomp: support riscv64 8160a3efc Reduce the number of the concurrent HTTP requests in TestUserNamespaces 7183fc81d Skip TestImagePullWithConcurrencyLimit on Cirrus CI 10576c298 cri: support blockio class in pod and container annotations 9b04d2fae docs: Adding windows installation steps to getting-started.md 227156dac Add ctr support for CPUMax and CPUShares b5370b040 Fix comment for metadata/db.go 5d0730370 Update go-cni to v1.1.5 180c7535d Upgrade protoc, protoc-gen-go and protoc-gen-go-grpc 2c6760005 go mod tidy & go mod vendor 29b937956 make protos fcba48636 Remove gogo from .proto files ae29594d0 Bump opencontainers/selinux from 1.10.0 to 1.10.1 46773c341 Cleanup leaked shim process 7f23296b9 Upgrade google.golang.org/grpc and google.golang.org/protobuf 7353006f6 Remove kzys/typeurl 7215f85ac Don't use "uname -a" as Cirrus CI's cache key 45c0cbec5 Create ppc64le release 5f43118ce Move Vagrant-based tests from GitHub Actions to Cirrus CI 00d102da9 feature: support image pull progress timeout fceab7f4c remove duplicate 0e6c7bf93 Fix undefined error in use of errors package a9f5190fb images/image.go: typo da3e2f985 fix incorrect syntax in comments 7a4f81d8b Fix tests aefd1849b go mod tidy and go mod vendor f616dd471 Upgrade containerd/typeurl 9dbe000a3 make protos 1a095e18b Rename Size_ to Size e3db7de8f Remove gogo/protobuf and adjust types fd37cc75b Use protoc-gen-go instead of protoc-gen-gogoctrd e044759eb Upgrade containerd/ttrpc 8710d4d01 cri: close fifos when container is deleted 7331b2af4 Add Container-Optimized OS into Adopters dfa6e8763 diff: hide types.Any from clients 01dfb110c Add go_package on all proto files aa1526def Use proto.Marshal instead of calling Marshal() on objects 95dde4959 Embed "Unimplemented" structs as proto recommended 35994a475 fix monitor restart 237ef0de9 Remove all gogoproto extensions 22cd13b37 fix nil pointer panic for monitor bd90ce043 Keep shim API backward compatible 39692e767 unpack: return error when no platforms defined 8017daa12 Add unpack interface to be used by client e2fd25f3d Move runtime v2 proto Move runtime v2 protos to api/runtime package. 3742c756e Don't generate a Go file, if that would be empty 5f3b72432 Fix protoc-gen-go-fieldpath 3b82f9e33 metadata: use resource max and end on registration 88c0c7201 Consolidate gogo/protobuf dependencies under our own protobuf package 80b825ca2 Remove gogoproto.stdtime dbdf50cc0 update golang to 1.18.1, 1.17.9 fd704d334 Build bin/gen-manpages instead of using "go run" b497e6414 Fuzz filter package with Go 1.18's fuzzer 94faa70df allow ptrace(2) by default for kernel >= 4.8 fe8da6dca Move lease manager plugin to separate package 147f0a7e0 check for duplicate nspath possibilities 942af1203 fix pool_device_test.go 5f3ce9512 Do not append []string{""} to command to preserve Docker compatibility 8367f69fb Add collectible resources to metadata gc c525aa5f8 Set timeout when collecting metrics from shim's Stat 49235ccba Change architecture path in README.md 8a1280b2b metrics/cgroups: fix deadlock issue in Add during Collect a5dfbfcf5 cri: load sandboxes/containers/images in parallel 6d69aca56 make consistent for checkpoint path 6341e0696 ADOPTERS: Update AKS Info b446c7647 [Sandbox] Remove outdated documentation d0b32c053 [sandbox] Migrate from gogo to Any 85a49e4ee [sandbox] Cleanup interfaces de4974572 [sandbox] Fix CI b7a36950f [Sandbox] Add Wait and PID 0d165e654 Restore sandboxes on daemon restart 0c5e5c357 Fix protobuf after rebase fa02477ca [sandbox] Add sandbox shim skeleton 35195737e [sandbox] Register shim plugin after #6301 17a2aaded [sandbox] Add ctr support 982de8a5d Launch sandboxed containers from task service 00f7a6bf2 [sandbox] Address PR review comments 6343fe3ea [sandbox] Implement sandbox controller eaccbf1d0 [sandbox] Add clients df234edeb [sandbox] Add controller service a433beb79 [sandbox] Update vendor 0e77f758a [sandbox] Implement store service 13eb1a4bb [sandbox] Revendor API changes d7ece8724 [sandbox] Save sandbox ID to container's store cab7d5b3d [sandbox] Implement metadata store 87d4c8923 [sandbox] Add basic sandbox structures and interfaces 4445d0a8d [sandbox] Add protobuf definitions 3df767405 add restart policy for enhanced restart manager 7e70ad9fb Pin upload-cloud-storage action to 0.8.0 in Windows workflow. 927b34e41 tracing: fix panic on startup when configured 1a45c2c5f docs: add Deckhouse to the list of adopters 825c1c58a CDI: update go.mod and vendor deps ff5c55847 move CDI calls to the linux-only code c9b4ccf83 add configuration for CDI aed0538da cri: implement CDI device injection 35383fb42 docs/cri: simplify 493baa6e7 Add docs/snapshots 811375856 CRI: improve image pulling performance 16fbbaeee Skip flaky test on Windows 44d7cd152 mv design docs/historical/design 195fc7424 docs: migrate config v1 to v2 84cebafe8 docs: remove deprecated `io.containerd.runtime.v1.linux` 83665bf8d docs/getting-started.md: typo ccea927d9 Move historical docs to `docs/historical` 50921e71b Run go mod tidy in integration tests 99c194e03 go.mod: move indirects, and update integration go.mod to 1.18 6ccec53d3 Remove gotest.tools 871b6b6a9 Use testify 6da318310 Disable writing freelist to make the file robust against data corruptions 62c846b17 Update linters to use t.Setenv 2d59a3944 Use t.Setenv instead of os.Setenv 4bdac2b43 Adding multi-arch support for the configure.sh script 6f269ccb3 docs/getting-started.md: massive update c7bdcdfbe Address some timeout issues in the Windows CI a2d22ac05 BUILDING.md: update supported Go versions d0bd65d3c Remove unmaintained contrib/linuxkit f2d5f71a7 update runc binary to v1.1.1 11a31320b go.mod: github.com/opencontainers/runc v1.1.1 0b2a95e10 Add no_tracing tag b42e936c5 CI: add Rocky Linux 8 b1030e7b6 CI: bump up crun to 1.4.4 b737cb10e Update README.md cf571fa96 added make help for cri integration 44a8ac7b0 Turn paths from cmdline into absolute paths 2689432bf Fix error message in TestNewBinaryIO 96b16b447 Use typeurl.Any instead of github.com/gogo/protobuf/types.Any fe426227d native: fix deadlock from leaving transactions open a51da91c1 moving up to go-cni v1.1.4 36612d692 go.mod: remove replace and update github.com/gogo/googleapis v1.4.1 df93940fb fix: ctr images mount with snapshotter option can't get snapshotter c091d48cb Use cgroups.AddProc() for cgroups v1 d2013d2c9 runtime: deprecate runc --criu / -criu-path option 388ee880d Upgrade containerd/imgcrypt and opencontainers/image-spec 70a06d0c8 Upgrade to Go 1.18 067611fde Remove enumvalue_customname, goproto_enum_prefix and enum_customname bfde58e3c Bug fix for mount path handling e9bb9c3bc Skip tty critest testcase on Windows Server 2022 3eeeb9429 Remove gogoproto.customtype 040babe00 Vendor dependencies with module graph pruning a19ad9bb6 Use Go 1.18 to build and test containerd 56f95e3d8 Test turning off golang CI lint cache ee49c4d55 Add nolint:staticcheck to platform-specific calls c56875233 Update prometheus client vendor 9aadef1be vendor: golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd fdb746442 document log level and format 52d307ac1 test: remove redundant `mountPoint` 2a0b2ee9e fix: ctr run --cni get failed 18ec2761c test: use `T.TempDir` to create temporary test directory b8bf504e9 Enable gosec linter for golangci-lint 2ddcb2019 Make OpenLab's CI jobs blocking cc526a98a Make mkfs.xfs available on OpenLab's CI environment ba1674389 typo fixes under cmd. 2e080bf49 Add shared content label to namespaces 2a425990c Implement `--device idType://id` for `ctr run` on Windows 39d52118f Plumb CRI Devices through to OCI WindowsDevices 6a25be94e CRI integration test for Windows Device mounts 622a35a4f Upgrade golangci-lint and its GitHub Action 59b1871b3 Fix link in getting-started.md 88de65112 Don't build a second copy of containerd-shim-runhcs-v1.exe 807ded41f Update TestNormalize to only test Windows 80bc32f06 Use temp file for export/import test 0d0b2bd4f Mount devmapper xfs file system with "nouuid" option. 14901335c Increase wait timeout for TestDaemonRestart 718adfe06 Use the latest image for Windows test workers 894e78001 Improve ErrUnexpectedStatus default string 48b478381 Skip most of script/setup/prepare_env_windows.ps1 768bf73dd Enable cri-tools critest on Windows 59b978847 Enable CRI Integration tests on Windows 5b78a9a8f Remove hardcoded /tmp in tempfile paths 03a5e648b Use version 2 config and mention containerd config command e0a6f9c7d update to go 1.16.15, 1.17.8 to address CVE-2022-24921 b90c466c3 Add ErrUnexpectedStatus to resolver fdaf859aa Update status of 1.4 release 7b045ea5f ctr: improve error relative shim path error msg e5efc260d Update latest release versions 63dd929af Update release process to include Kubernetes test infrastructure 0c79257f5 Add --user support for ctr run Windows de3d9993f Adds support for Windows ArgsEscaped images 775facd57 cri: fix integration test on cgroupsv2 system f1f69d4ee integration: remove duplicated util pkg 352a8f49f cri: relax test for system without hugetlb ec90efbe9 Make the temp mount as ready only in container WithVolumes ea3d2e643 go.mod: update to github.com/tchap/go-patricia/v2 v2.3.1 2b68c03a6 Update Go version recommendation in getting started 77c0539e9 Use containerd/protobuild instead of stevvooe/protobuild d28981d48 Fix build with gccgo f4f41296c Replace golang.org/x/net/context with std library 296f75bd0 Do not use weak import 3febabffe Add protoc-gen-go-fieldpath 7901f4b33 containerd-shim-runc-v1: return init pid when clean dead shim a3303e721 Update TestContainerSymlinkVolumes to use windows path 481fb923c go.mod: update to github.com/emicklei/go-restful/v3 v3.7.3 fb0b8d617 Use fs.RootPath when mounting volumes 1a31772a7 go.mod: github.com/moby/sys/signal v0.7.0 b1881bdc0 go.mod: github.com/moby/sys/mountinfo v0.6.0 b6a6757c1 go.mod: github.com/fsnotify/fsnotify v1.5.1 83c80388b Initialize platform matchers for current platform b63000c65 [Windows][Integration] Enable TestRestartMonitor 7275411ec cgroup2: monitor OOMKill instead of OOM to prevent missing container OOM events 6906b57c7 Fix the Inheritable capability defaults. fdbfde5d8 cmd/containerd-shim: add -v (version) flag e79aba10d integration/images/volume-ownership: strip path information from usage output b8cadf753 runtime/v2/shim: strip path information from version output 356ca7575 containerd-shim-runc-v2: return init pid when clean dead shim 86d52fc26 Fuzzing: refactor metadata fuzzers 894af07e3 integration: Adds Windows equivalent for TestSandboxRemoveWithoutIPLeakage 54e95e6b8 fix Implicit memory aliasing in for loop 5d4dc5780 remotes/docker: log registry URLs as info instead of debug afe39bebf add oci.WithAllDevicesAllowed flag for privileged_without_host_devices Signed-off-by: Bruce Ashfield <[email protected]>

nlohmann mentioned this issue Aug 13, 2022

Dockerbuild is failing when running the action srvaroa/labeler#43

Closed

bhushan-mdn mentioned this issue Aug 13, 2022

"cannot talk to GitHub" niemeyer/gopkg#63

Closed

vinayak-kukreja mentioned this issue Aug 13, 2022

Cannot talk to GitHub niemeyer/gopkg#78

Closed

nlohmann added a commit to nlohmann/labeler that referenced this issue Aug 14, 2022

Add GOPROXY

2149f1d

Closes srvaroa#43 See go-yaml/yaml#887 (comment) for more information.

nlohmann mentioned this issue Aug 14, 2022

Add GOPROXY srvaroa/labeler#49

Merged

srvaroa pushed a commit to srvaroa/labeler that referenced this issue Aug 14, 2022

Add GOPROXY (#49)

3f57a6d

Closes #43 See go-yaml/yaml#887 (comment) for more information.

samuelkarp added a commit to samuelkarp/containerd that referenced this issue Aug 15, 2022

ci: remove GOPROXY environment variable due to go-yaml/yaml#887

396d2a7

Signed-off-by: Samuel Karp <[email protected]>

samuelkarp mentioned this issue Aug 15, 2022

ci: remove GOPROXY environment variable due to https://github.com/go-yaml/yaml/issues/887 containerd/containerd#7293

Merged

vvejell1 pushed a commit to vvejell1/containerd that referenced this issue Nov 4, 2022

ci: remove GOPROXY environment variable due to go-yaml/yaml#887

376bd89

Signed-off-by: Samuel Karp <[email protected]>

niemeyer closed this as completed Jun 5, 2023

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Cannot talk to GitHub #887

Cannot talk to GitHub #887

vinayak-kukreja commented Aug 13, 2022

porjo commented Aug 13, 2022 •

edited

Loading

bhushan-mdn commented Aug 13, 2022 •

edited

Loading

yairlempert commented Aug 13, 2022

SVilgelm commented Aug 13, 2022 •

edited

Loading

porjo commented Aug 14, 2022 •

edited

Loading

brycahta commented Aug 18, 2022

johnpekcan commented Nov 4, 2022 •

edited

Loading

metal3d commented Nov 4, 2022

gnovack commented Nov 4, 2022

johnpekcan commented Nov 10, 2022

curtismenmuir commented Jun 1, 2023

niemeyer commented Jun 1, 2023

raeballz commented Jun 1, 2023

jalilalchy commented Jun 1, 2023

jalilalchy commented Jun 2, 2023

curtismenmuir commented Jun 2, 2023

yisier commented Jun 2, 2023

JanOgr commented Jun 2, 2023

curtismenmuir commented Jun 2, 2023

niemeyer commented Jun 2, 2023

niemeyer commented Jun 5, 2023

nars1 commented Jun 20, 2023

Cannot talk to GitHub #887

Cannot talk to GitHub #887

Comments

vinayak-kukreja commented Aug 13, 2022

porjo commented Aug 13, 2022 • edited Loading

bhushan-mdn commented Aug 13, 2022 • edited Loading

yairlempert commented Aug 13, 2022

SVilgelm commented Aug 13, 2022 • edited Loading

porjo commented Aug 14, 2022 • edited Loading

brycahta commented Aug 18, 2022

johnpekcan commented Nov 4, 2022 • edited Loading

metal3d commented Nov 4, 2022

gnovack commented Nov 4, 2022

johnpekcan commented Nov 10, 2022

curtismenmuir commented Jun 1, 2023

niemeyer commented Jun 1, 2023

raeballz commented Jun 1, 2023

jalilalchy commented Jun 1, 2023

jalilalchy commented Jun 2, 2023

curtismenmuir commented Jun 2, 2023

yisier commented Jun 2, 2023

JanOgr commented Jun 2, 2023

curtismenmuir commented Jun 2, 2023

niemeyer commented Jun 2, 2023

niemeyer commented Jun 5, 2023

nars1 commented Jun 20, 2023

porjo commented Aug 13, 2022 •

edited

Loading

bhushan-mdn commented Aug 13, 2022 •

edited

Loading

SVilgelm commented Aug 13, 2022 •

edited

Loading

porjo commented Aug 14, 2022 •

edited

Loading

johnpekcan commented Nov 4, 2022 •

edited

Loading