cloudposse/geodesic 0.152.0

v0.152.0 Major tool version updates

on GitHub

what

• Update Debian 10.11 -> 11.2
• Update Python3 on Debian 3.8.12 -> 3.9.10
• Update Alpine 3.13.7 -> 3.15.0 (Updates Python3 3.8.10 -> 3.9.7, dictated by Alpine package repo)
• Update helm-diff 3.1.3 -> 3.32
• Update helm-git 0.8.1 -> 0.11.1
• Update helm-2to3 0.8.1 -> 0.9.0

why

• Update to newer versions while considering risks of updating to latest versions

refererences

• Alpine: https://alpinelinux.org/posts/Alpine-3.15.0-released.html
• Debian: https://www.debian.org/releases/bullseye/
• Python: https://www.python.org/doc/versions/
• helm-diff: https://github.com/databus23/helm-diff/releases
• helm-git: https://github.com/aslafy-z/helm-git/releases
• helm-2to3: https://github.com/helm/helm-2to3/releases

what && why

• Install wrapper script in $HOME/.local/bin (per XDG recommendation) if /usr/local/bin is not writable. Supports preferred solution for #594, which is to have users run Docker in "rootless" mode.
• Provide option to use BindFS to map file owners on the host. Fixes #594 for users running docker daemon as root.
• Resolves #766
• Resolves #767
• Downgrade the warning for Apple M1 Emulating Intel from seriously unsupported to a notice that there may be issues. Progress on #719 in that it appears the emulator is getting better, but still insufficient progress on native M1 support.
• Minor cleanups.

notes

This release introduces a new customization:

export GEODESIC_HOST_BINDFS_ENABLED=true

When Geodesic is launched by a shell where $GEODESIC_HOST_BINDFS_ENABLED == true it will configure /localhost so that files created by root inside Geodesic will have their ownership mapped to the same user ID and group ID as on the host. This a solution for people experiencing #594 and ONLY them. If your present solution is not creating files on the host owned by root then option will likely cause new problems.

Note further that this is a workaround and not the desired solution. Our recommendation is that you resolve the underlying issue by running Docker in "rootless" mode. This is much more secure and avoids the issue causing problems in the first place.

what && why

• Install wrapper script in $HOME/.local/bin (per XDG recommendation) if /usr/local/bin is not writable. Supports preferred solution for #594, which is to have users run Docker in "rootless" mode.
• Provide option to use BindFS to map file owners on the host. Fixes #594 for users running docker daemon as root.
• Resolves #766
• Resolves #767
• Downgrade the warning for Apple M1 Emulating Intel from seriously unsupported to a notice that there may be issues. Progress on #719 in that it appears the emulator is getting better, but still insufficient progress on native M1 support.
• Minor cleanups.

notes

This release introduces a new customization:

export GEODESIC_HOST_BINDFS_ENABLED=true

When Geodesic is launched by a shell where $GEODESIC_HOST_BINDFS_ENABLED == true it will configure /localhost so that files created by root inside Geodesic will have their ownership mapped to the same user ID and group ID as on the host. This a solution for people experiencing #594 and ONLY them. If your present solution is not creating files on the host owned by root then option will likely cause new problems.

Note further that this is a workaround and not the desired solution. Our recommendation is that you resolve the underlying issue by running Docker in "rootless" mode. This is much more secure and avoids the issue causing problems in the first place.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
awscli (source, changelog)	==1.22.46 -> ==1.22.56
boto3	==1.20.46 -> ==1.21.1

Release Notes