github containerd/containerd v1.5.12
containerd 1.5.12

latest releases: v2.0.0-rc.2, v1.7.17, api/v1.8.0-rc.0...
23 months ago

Welcome to the v1.5.12 release of containerd!

The twelfth patch release for containerd 1.5 includes various fixes and updates
along with an updated version of runc.

Notable Updates

  • Fix inotify fd leak when cgroup is deleted (#6961)
  • Close fifos when container is deleted in CRI plugin (#6857)
  • Update unpack to to respect MaxConcurrentDownloads (#6774)
  • Monitor OOMKill instead of OOM in cgroupv2 (#6735)
  • Make the temp mount as ready only in container WithVolumes (#6729)
  • Fix deadlock from abandoned transactions in native snapshotter (#6726)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

  • Sebastiaan van Stijn
  • Phil Estes
  • Akihiro Suda
  • Derek McGowan
  • Wei Fu
  • Jeremi Piotrowski
  • Kazuyoshi Kato
  • Maksym Pavlenko
  • Miao Wang
  • Mike Brown
  • Alexey Ivanov
  • Brian Goff
  • Henry Wang
  • Michael Crosby
  • Qiutong Song
  • Samuel Ortiz
  • Tõnis Tiigi
  • chenxiaoyu
  • linrunlong
  • ningmingxiao
  • zounengren

Changes

34 commits

  • Prepare release notes for v1.5.12 (#7019)
    • 5a55f1efc Prepare release notes for v1.5.12
  • [release/1.5] update golang to 1.17.11 (#7014)
    • 3f61d5ed4 [release/1.5] update golang to 1.17.11
  • [release/1.5] archive: add human-readable hint to Lchown error (#6986)
    • f67de000d archive: add human-readable hint to Lchown error
  • [release/1.5] config: improve config v1 deprecation message (#6981)
    • 4c98768bd config: improve config v1 deprecation message
  • [release/1.5] upgrade containerd/cgroups to v1.0.3 (#6961)
    • f890c79fd [release/1.5] upgrade containerd/cgroups to v1.0.3
  • [release/1.5] update golang to 1.17.10, golang.org/x/sys v0.0.0-20220412211240-33da011f77ad (#6928)
    • 9f6e1864c [release/1.5] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad
    • c00476595 [release/1.5] update golang to 1.17.10
  • [release/1.5 backport] update runc binary to v1.1.2 (#6935)
  • [release/1.5] cherry-pick: Allow git commands in Vagrantfile (#6943)
    • 1f9900830 Allow git commands in Vagrantfile
  • [release/1.5] cri: close fifos when container is deleted (#6857)
    • 689b342c1 cri: close fifos when container is deleted
  • [release/1.5] update golang to 1.17.9 (#6824)
    • 65aad9d93 [release/1.5] update golang to 1.17.9
  • [release/1.5] check for duplicate nspath possibilities (#6814)
    • 283058cd6 check for duplicate nspath possibilities
  • [release/1.5] fix #6054 MaxConcurrentDownloads is not effect when Unpack is true (#6774)
    • 4dbd0c851 fix #6054 MaxConcurrentDownloads is not effect when Unpack is true
  • [release/1.5 backport] update runc binary to v1.1.1 (#6770)
  • [release/1.5 backport] Make the temp mount as ready only in container WithVolumes (#6729)
    • 05b04a1a3 Make the temp mount as ready only in container WithVolumes
  • [release/1.5 backport] native: fix deadlock from leaving transactions open (#6726)
    • 603ef55e0 native: fix deadlock from leaving transactions open
  • [release/1.5 backport] cgroup2: monitor OOMKill instead of OOM to prevent missing container events (#6735)
    • 1c68f5037 cgroup2: monitor OOMKill instead of OOM to prevent missing container OOM events

Changes from containerd/cgroups

33 commits

  • v2: Fix inotify fd leak when cgroup is deleted (#212)
    • a7d6888 v2: add test case for Manager.EventChan() behavior
    • cf1f978 v2: flip error handling for readKVStat("memory.events") to reduce indentation
    • 6a46df2 v2: manager: factor out memory.events parsing
    • 35b5b55 v2: Fix inotify leak when cgroup is deleted
  • fix Implicit memory aliasing in for loop (#214)
    • 182c3af fix Implicit memory aliasing in for loop
  • Fix potential dirfd leak. (#210)
    • 17fece8 Fix potential dirfd leak.
  • cgroup: Optionally add process and task to a subsystems subset (#203)
    • 80a7821 cgroup: Optionally add process and task to a subsystems subset
  • replace pkg/errors from vendor (#208)
    • 0072297 replace pkg/errors from vendor
  • cgroup.go: avoid panic on nil interface (#207)
    • d55de5d cgroup.go: avoid panic on nil interface
  • Improvements on cgroup v2 support (#204)
    • 73a8516 cgroupv2: reset lastErr to nil when subtree control is successfully written
    • 2ca92c5 cgroupv2: enable controllers before setting resources in NewChild()
  • v2: remove unimplemented errors and ErrorHandler, IgnoreNotExist (#201)
    • db173a8 v2: remove ErrorHandler and IgnoreNotExist as they are not implemented
    • b19a60d v2: remove errors that are never returned
  • v1: reduce duplicated code (#202)
    • 4fe70f3 v1: reduce duplicated code
  • cgroup v1: implement AddProc() (#200)
    • 6659093 cgroup v1: implement AddProc()
  • Rename branch from master to main (#199)
    • 7254c12 Rename branch from master to main
  • utils: export ParseCgroupFile() (#197)
    • 23b5120 utils: export ParseCgroupFile()
  • go.mod: coreos/go-systemd/v22 v22.3.2 to prepare for deprecations (#194)
    • f8918cf go.mod: coreos/go-systemd/v22 v22.3.2 to prepare for deprecations
  • Use /proc/partitions to get device names (#195)
    • 1a4509d Use /proc/partitions to get device names

Dependency Changes

  • github.com/containerd/cgroups v1.0.1 -> v1.0.3
  • github.com/stretchr/testify v1.6.1 -> v1.7.0
  • golang.org/x/net e18ecbb05110 -> a5a99cb37ef4
  • golang.org/x/sync 09787c993a3a -> 036812b2e83c
  • golang.org/x/sys d19ff857e887 -> 33da011f77ad

Previous release can be found at v1.5.11

Don't miss a new containerd release

NewReleases is sending notifications on new releases.