containerd/containerd v1.4.2 on GitHub

Welcome to the v1.4.2 release of containerd!

The second patch release for containerd 1.4 includes multiple minor fixes
and updates.

Notable Updates

Fix bug limiting the number of layers by default containerd/cri#1602
Fix selinux shared memory issue by relabeling /dev/shm containerd/cri#1605
Fix unknown state preventing removal of containers containerd/containerd#4656
Fix nil pointer error when restoring checkpoint containerd/containerd#4754
Improve image pull performance when using HTTP 1.1 containerd/containerd#4653
Update default seccomp profile for pidfd containerd/containerd#4730
Update Go to 1.15

Windows

Fix integer overflow on Windows containerd/containerd#4589
Fix lcow snapshotter to read trailing tar data containerd/containerd#4628

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

Phil Estes
Mike Brown
Sebastiaan van Stijn
Wei Fu
Derek McGowan
Akihiro Suda
Amr Mahdi
Kevin Parsons
Maksym Pavlenko
Samuel Karp
Amit Barve
Antonio Ojea
Bowen Yan
Brian Goff
Davanum Srinivas
Giuseppe Capizzi
Jacob Blain Christen
Kohei Tokunaga
Michael Crosby
Samarth Shah
Tianon Gravi
Yohei Ueda
varsha teratipally
zhuangqh

Changes

49 commits

b321d358e Merge pull request #4768 from dmcgowan/prepare-1.4.2
f2e4291b6 Prepare 1.4.2 release
76f3d1955 Update mailmap for 1.4.2 release
ca9950755 Update cri version to pickup unknown state fix
21baf7109 Merge pull request #4767 from dmcgowan/update-1.4-cri
3458984bb Merge pull request #4766 from dmcgowan/backport-4765
0b97c6204 Update cri plugin
c0f1add3c Fix Windows service panic file to not be read-only
9c24574c9 Merge pull request #4763 from estesp/cp-tests-fix-1.4
fbe18caa1 Update btrfs vendor for chkptr fix for Go >= 1.14
cbbf257ab Add Go test runs to GitHub Actions CI
19776b75b Adjust overlay tests to expect "index=off"
7eb852214 Allow oom adj test to run in environments with a score
036ede698 Import crypto for all snapshotters during testsuite
8d839c4b3 Merge pull request #4751 from amrmahdi/amrh/cherry-pick-cc3785-1.4
31bbc1f7d Merge pull request #4754 from thaJeztah/1.4_restore_nil_pointer
5618423a0 Add comments clarifying copyWithBuffer implementation
a2ebee357 replicate io.Copy optimizations
9b2156aa8 Improve image pull performance from http 1.1 container registries
7fe3f1301 Merge pull request #4749 from thaJeztah/1.4_backport_windows_int_overflow
56291a221 bug fix:#3448
16e51fc31 Fix integer overflow on windows
957bcaa9f Merge pull request #4746 from estesp/cp-4745-1.4
6ebd9a94a Update other actions for env/path CVE fix
49889957e Merge pull request #4743 from estesp/fix-ci
0a3488c71 Fix GH Actions CI deprecations
882e39618 Merge pull request #4733 from thaJeztah/1.4_backport_update_seccomp_profile
da9705a64 Merge pull request #4736 from AkihiroSuda/go-1.15.5-containerd-1.4
cc3be9ae3 Bump Golang 1.15.5
ebffce3ad seccomp: add pidfd_getfd syscall (gated by CAP_SYS_PTRACE)
229f5ea4e seccomp: add pidfd_open and pidfd_send_signal
457dafa4c Merge pull request #4711 from AkihiroSuda/go115-1.4
e45f41e3a update to golang 1.15.2
f8c187fcf Merge pull request #4696 from estesp/cp-4692-1.4
695516287 Remove setuid gosu in favor of "sudo -E PATH=$PATH ..."
c562e8d2b Merge pull request #4690 from samuelkarp/backport1.4-critest
77931f801 ci: run critest target for all runtimes
e46c29945 Merge pull request #4689 from estesp/cp-4665
c745d237e Revendor CRI to get disabled annotation config default
ded2577d6 Merge pull request #4660 from kevpar/1.4-update-hcsshim
8b8494ec0 Merge pull request #4661 from kevpar/1.4-lcow-tar
88e7f23bc Read trailing data from tar reader
856a12fca Update github.com/Microsoft/hcsshim to v0.8.10
013411ac1 Merge pull request #4650 from estesp/cp-4645-1.4
cc6f72a00 Check if a process exists before returning it
e44e8ebea Merge pull request #4601 from estesp/cp-wincni-script
9a44af11d Windows CNI install script using lowercase "destdir"
a3a7b40be Merge pull request #4568 from thaJeztah/1.4_backport_bitset_1.1.11
ce7ba6691 vendor: github.com/willf/bitset v1.1.11

Changes from containerd/btrfs

5 commits

404b914 Merge pull request #28 from estesp/githubactions
48eb88e Merge pull request #27 from fuweid/fix-checkptr-issue
4248200 Use GitHub Actions for CI
84ed5ce Add vendor explicity in project
d44cb8e fix: checkptr issue

Changes from containerd/cri

34 commits

adc0b6a5 Merge pull request #1600 from zhuangqh/fix-unknown-state
9e81bf56 Merge pull request #1603 from samuelkarp/runtimes
d3c90697 Merge pull request #1605 from dweomer/backport/1.4/selinux-relabel-dev-shm
f7fce607 Merge pull request #1609 from shahzzzam/add-annotation2
1dc3b8a7 Add manifest digest annotation for snapshotters
ba8ad15a Limit value size of additional annotation for avoiding unpack failure
500b2422 Merge pull request #1606 from thaJeztah/1.4_update_k8s
08e545f0 [release/1.4] vendor: kubernetes v1.19.4
b1ebe1c3 Merge pull request #1607 from thaJeztah/1.4_fix_gha_setenv
bb8b690f gha: replace uses of deprecated "set-env", "add-path"
1ec7ede4 [release/1.4 backport] selinux: relabel /dev/shm
e7a06009 ci: run test-integration target for all runtimes
61363b3e Merge pull request #1602 from estesp/disable-annotations-config
99015cca Disable experimental feature in default config
7973126f fix: always set unknown to false when handling exit event
38a14dae Merge pull request #1599 from AkihiroSuda/update-readme-14
a9661c2a update README to clarify the current status of this repo
c8dba73e Merge pull request #1589 from thaJeztah/1.4_backport_containerd_v1.4.1
f58f7c33 Merge pull request #1588 from thaJeztah/1.4_backport_masked
f212f1ef Merge pull request #1586 from thaJeztah/1.4_backport_bump_kubernetes
1056dc91 vendor: containerd/containerd v1.4.1
1debf36e Set masked and readonly paths based on default Unix spec
c3756574 Update to latest kubernetes v1.19.2
26815e22 Merge pull request #1581 from thaJeztah/1.4_backport_python
e44db998 Make script work for both python2.7 and 3.6
4cb63f23 Merge pull request #1579 from thaJeztah/1.4_backport_bitset_1.1.11
535f55a2 vendor: github.com/willf/bitset v1.1.11
a462784d Merge pull request #1574 from mikebrow/cherrypick-#1573-release-1.4
fc99eac0 update cni config version
5736d0e6 Merge pull request #1560 from mikebrow/cherrypick-#1556-release-1.4
d716c78a bump cni dependencies
bb0ca842 Merge pull request #1559 from mikebrow/prepare-1.4
b0cc0799 vendor containerd 1.4 release
a40d6392 update support table for 1.4

Dependency Changes

github.com/Microsoft/hcsshim v0.8.9 -> v0.8.10
github.com/containerd/btrfs 153935315f4a -> 404b9149801e
github.com/containerd/cri 4e6644c -> adc0b6a578ed
github.com/willf/bitset d5bec3311243 -> v1.1.11
k8s.io/api v0.19.0-rc.4 -> v0.19.4
k8s.io/apimachinery v0.19.0-rc.4 -> v0.19.4
k8s.io/apiserver v0.19.0-rc.4 -> v0.19.4
k8s.io/client-go v0.19.0-rc.4 -> v0.19.4
k8s.io/utils 2df71ebbae66 -> d5654de09c73
sigs.k8s.io/structured-merge-diff/v4 v4.0.1 new

Previous release can be found at v1.4.1

containerd/containerd v1.4.2 containerd 1.4.2 on GitHub