containerd/containerd v1.6.0-beta.1 on GitHub

Welcome to the v1.6.0-beta.1 release of containerd!

The seventh major release of containerd includes many improvements and added
support to increase overall compatibility and stability.

Highlights

Runtime

Add runtime label to metrics (#5744)
Cleanup task delete logic in v2 shim (#5813)
Add support for shim plugins (#5817)
Add runc shim support for core scheduling (#6011)
Update shim client connect attempt to fail fast when shim errors (#6031)

Windows

Add support for Windows HostProcess containers (#5131)
Add support for Windows resource limits (#5778)

CRI

Add CNI configuration based on runtime class (#4695)
Add support for CRI v1 and v1alpha in parallel (#5619)
Add support for unified resources field for cgroups v2 (#5627)
Add IP preference configuration for reporting pod IP (#5964)
Add namespace to ttrpc and grpc plugin connections (#6130)

Other

Add a shared namespace label for cross-namespace content sharing (#5043)
Add support for client TLS Auth for grpc (#5606)
Add xfs support for devicemapper snapshotter (#5610)
Add metric exposing build version and revision (#5965)
Add OpenTelemetry trace injection to grpc client (#5992)

Client

Allow WithServices to use custom implementations (#5709)
Support custom compressor for walking differ (#5735)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

Phil Estes
Derek McGowan
Wei Fu
Akihiro Suda
Sebastiaan van Stijn
Maksym Pavlenko
Mike Brown
Michael Crosby
Claudiu Belu
Kazuyoshi Kato
AdamKorcz
zounengren
Adelina Tuvenie
Davanum Srinivas
Kohei Tokunaga
Brian Goff
Daniel Canter
Enrico Weigelt, metux IT consult
Shiming Zhang
haoyun
Alakesh Haloi
Hajime Tazaki
Iceber Gu
Samuel Karp
Gijs Peskens
Kevin Parsons
Aditi Sharma
Alexandre Peixoto Ferreira
Cody Roseborough
Furkan
Jiaming Xu
Kir Kolyshkin
Miao Wang
Neil Johnson
Paul "TBBle" Hampson
Priyanka Saggu
Sunghoon Kang
Zhiyu Li
wanglei
Alexey Ivanov
Artem Khramov
Ben Hutchings
Cory Bennett
Dan Williams
Eng Zer Jun
Ethan Chen
Fabiano Fidêncio
Fupan Li
Gaurav Gahlot
Gunju Kim
Jacob Blain Christen
Jayme Howard
Jintao Zhang
Kaijie Chen
Kern Walster
Kitt Hsu
Lantao Liu
Ma Xinjian
Mikko Ylinen
Ng Yang
Nicolas Chariglione
Peri Thompson
Quan Tian
Radostin Stoyanov
Romain Aviolat
Rui Lopes
Sambhav Kothari
Samuel Ortiz
Sebastian Hasler
Yang Yang
Yifan Yuan
Zilong Wang
Zufar Dhiyaulhaq
chenxiaoyu
jayonlau
jerryzhuang
kerthcet
levinxo
linrunlong
scuzhanglei
wangzhan

Changes

631 commits

Prepare v1.6.0-beta.1 (#6144)
- 0ccc386c8 Prepare release notes for v1.6.0-beta.1
- e5fc3b38e Update mailmap
- 37720fc6f Update api vendor
bump cni to spec v1.0.0 (#6136)
- a217b5ac8 bump CNI to spec v1.0.0
Inject otel traces to grpc client. (#5992)
- 294143bf3 Inject otel traces to grpc client.
client: expose (*image).platform (#6142)
- cd2f2b0af client: expose (*image).platform
Adding documentation for Core Scheduling (#6128)
- 3b73922fb feat(doc): add Core Scheduling documentation
Ensure namespace is proxied to grpc/ttrpc plugins (#6130)
- 130a9c7dd Ensure namespace is proxied to grpc/ttrpc plugins
fix #6054 MaxConcurrentDownloads is not effect when Unpack is true (#6109)
- 535191abf fix #6054 MaxConcurrentDownloads is not effect when Unpack is true
Output a warning for label image labels instead of erroring (#6124)
- 2a8dac12a Output a warning for label image labels instead of erroring
Fix spelling mistake in Windows snapshotter (#6132)
- c18c2e735 Fix spelling mistake in Windows snapshotter
Windows: Cleanup rm- prefixed layers (#6126)
- ca35f4e82 Windows: Cleanup rm- prefixed layers
cleanup deprecated package io/ioutil (#6118)
- 1f1cad391 io/ioutil package has been deprecated in Go 1.16 that replaces io/ioutil functions
close Writer after use which may memory leak (#6115)
- 46be06937 close Writer after use which may leak mem
Adds Windows resource limits support (#5778)
- 2bc77b8a2 Adds Windows resource limits support
Prepare release notes for v1.6.0-beta.0 (#6098)
- 1abe50512 Prepare release notes for v1.6.0-beta.0
Add error message to in TestContainerdRestart integration test (#6105)
- c5947557d Add error message to in TestContainerdRestart integration test
Fix typo in the NewContainer function documentation (#6110)
- 072a7074b Fix typo in the NewContainer function documentation
Update cgroups to v1.0.2 (#6104)
- 18d483b23 Update cgroups to v1.0.2
btrfs: verify file content after mount (#6100)
- ac2df3ba9 test: check file content after mount
Update test timeout based on recent cancellations (#6107)
- 4ed3c524c Update test timeout based on recent cancellations
Check the pid in cri test teardown (#6106)
- d252a293d Remove extra test_teardown
- 4a569c889 Check the pid in cri test teardown
add runc shim support for sched core (#6011)
- f1054dbbd fix integration client vendor
- e48bbe839 add runc shim support for sched core
integration: Enables Windows containerd restart test (#5579)
- abf4de498 integration: Enables Windows containerd restart test
vendor: Bump hcsshim to 0.9.0 (#6099)
- 46b152f81 vendor: Bump hcsshim to 0.9.0
[cri] Add CNI conf based on runtime class (#4695)
- 55893b9be Add CNI conf based on runtime class
Update Go to 1.17.2 (#6102)
- de1a39bf3 Update Go to 1.17.2
integration: Adds test for multilayer image import (#5933)
- 7a7a9a282 integration: Adds test for multilayer image import
runtime: should fail fast if dial error on shim (#6031)
- f7658e37d runtime: should fail fast if dial error on shim
Fixes Windows containers with image volumes (#6034)
- 791e175c7 Windows: Fixes Windows containers with image volumes
run gofmt with GO 1.17 (#6094)
- 3a713811b run gofmt with Go 1.17
pkg/cap: remove an outdated comment (#6088)
- 703b86533 pkg/cap: remove an outdated comment
Update go otel 1.0.1 (#6066)
- 1ee2bff0e Update go otel 1.0.1
Update ADOPTERS.md with additional uses (#6086)
- c528d2c39 Update ADOPTERS.md with additional uses
modify the way for checking cos (#6082)
- b9a0c5080 modify the way for checking cos
Fuzzing: Add fuzzers + small modifications (#5915)
- 65f6a896c Fuzzing: Add 4 fuzzers + small modifications
Fixes for Windows CI (#6081)
- 9734b4039 Pin mingw to version 10.2.0
- d19af5afb Update to golang 1.17.1
- 3cb0ec01e Install nssm
- 3f00006f7 Merge pull request from GHSA-c2h3-6mxw-7mvq
- 7c621e1fc btrfs: reduce permissions on plugin directories
- 6886c6a2e v1 runtime: reduce permissions for bundle dir
- 7d56b24f1 v2 runtime: reduce permissions for bundle dir
task service: return known error type (#6079)
- 02e77bcdc task service: return known error type
refactor: move from io/ioutil to io and os package (#5973)
- 50da67359 refactor: move from io/ioutil to io and os package
fix: import from k8s.io/utils/clock instead (#6076)
- 049042382 fix: update vendor
- 5c2426a7b cleanup: import from k8s.io/utils/clock/testing instead
- 6484fab1e cleanup: import from k8s.io/utils/clock instead
feat: enable integration cri remote client to call with grpc calloptions (#6069)
- d16942cf1 feat: enable cri remote client to call with grpc calloptions
cleanup k8s ansible yaml (carry for #5713) (#6074)
- f6b7e07fd cleanup k8s ansible yaml (carry for https://github.com/jayonlau jayonlau@gmail.com)
feat: support import image for specific platform (#6070)
- 933ddaa6f fix: wrong flag type
- da16d492c feat: support import image for specific platform
Update mirror images to take target image name (#6065)
- 67b883146 Update mirror images to take target image name
fix: make exec-id flag required in exec command (#6059)
- e6ddffc2a fix: make exec-id flag required in exec command
images: enable converter to uncompress zstd (#6052)
- 09c9270fe images: enable converter to uncompress zstd
replace deprecated function with Domain and Path (#5922)
- 694a00754 replace deprecated function
integration: Adds Windows HostProcess tests (#5853)
- f42513112 integration: Adds Windows HostProcess tests
Fix main branch build is broken (#6047)
- 224454062 Fix main branch build is broken
Add open telemetry logging hook for logrus (#6003)
- 45c3453a7 Add open telemetry logging hook for logrus
Change oci.WithUser behavior for LCOW (#6023)
- 50a568595 Change oci.WithUser behavior for LCOW
switch usage directly to errdefs.(ErrAlreadyExists and ErrNotFound) (#5946)
- fcffe0c83 switch usage directly to errdefs.(ErrAlreadyExists and ErrNotFound)
import: Raise error if the imported image is filtered out (#5926)
- e087b47e9 import: Raise error if the imported image is filtered out
Fix panic in metadata content writer on copy error (#6043)
- b9cf0d75a Fix panic in metadata content writer on copy error
Move tracing to plugin (#6001)
- 084387e0b Move tracing to plugin
ctr: Fixes Windows image import (#5916)
- 6b0b64a51 ctr: Fixes Windows image import
update open go.opentelemetry.io v1.0.0 to fix import path (#6017)
- 483d2e947 go.mod: update opentelemetry modules to v1.0.0
fix error string format (#5979)
- 498e5b27f fix error string format
Add github action to mirror image (#6036)
- 407d60694 Add github action to mirror image
add current process state to the error message (#6027)
- 16f3d67b5 add current process state to the error message
FreeBSD: fix tar headers & the nil check on getxattr (#5991)
2bffb5f9b FreeBSD: fix tar headers & the nil check on getxattr
gha: collect VMs' IP addresses (#6035)
- 97df73004 gha: collect Vagrant VMs' IP addresses
bump continuity and console version that remove pkg/errors (#6033)
- 7854e0bff bump continuity and console version that remove pkg/errors
import: Add option to prevent duplicated digest image (#5997)
- 6875aa5d3 import: Add option to skip creating digest image
ctr namespaces: improve usage string (#5998)
- 16d3f48a2 ctr namespaces: improve usage string
bump console version to v1.0.3 that remove pkg/errors (#6028)
- a68fb7add bump console version to v1.0.3 that remove pkg/errors
Use github images for integration tests (#6032)
- 3e72e335f Use github images for integration tests
Fix typo (#5995)
- 8596d1188 Fix typo
Enable image config labels in ctr and CRI container creation (#6012)
- f40df3d72 Enable image config labels in ctr and CRI container creation
Make sure exit signals trigger an exit during init (#5970)
- 2fecf5b02 Make sure exit signals trigger an exit during init
task delete: Closes task IO before waiting (#5974)
- 55faa5e93 task delete: Closes task IO before waiting
CI: bump up crun to 1.0 (#5985)
- f700ae873 CI: bump up crun to 1.0
seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted) (#5982)
- 55923daa9 seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted)
Update to Go 1.17.1 (#5990)
- 73dbbf5bf Update to Go 1.17.1
CI: Switch to available latest images (#5987)
- 6d961f967 CI: Switch to available latest images
add xfs support to devicemapper snapshotter (#5610)
- 91b64c58b add xfs support to devicemapper snapshotter
Fixes task kill --force on Windows (#5956)
- 57e10439d Fixes task kill --force on Windows
Add support for shim plugins (#5817)
- 8d135d284 Add support for shim plugins
vendor: update continuity for darwin support (#5976)
- 8ff8b1b82 vendor: update continuity for darwin support
replace uses of os/exec with golang.org/x/sys/execabs (#5906)
- 2ac996840 replace uses of os/exec with golang.org/x/sys/execabs
complete integration test for pulling image with labels (#5972)
- 16cd6ed13 Additional integration tests for pulling image with labels
Fix content copy to not ignore unexpected EOF (#5966)
- 2458afeb1 Fix content copy to not ignore unexpected EOF
add ip_pref CNI options for primary pod ip (#5964)
- 1efed4309 add ip_pref CNI options for primary pod ip
cri: add devices for privileged container (#5939)
- 756f4a314 cri: add devices for privileged container
sandbox: Allows the sandbox to be deleted in NotReady state (#5954)
- 24cec9be5 sandbox: Allows the sandbox to be deleted in NotReady state
pin protobuild version to tag (#5969)
- 9954147c0 pin protobuild version to tag
Add metric exposing build version&revision (#5965)
- 6bec0d39b use a const metric for build_info
- ae27a6b05 Add metric exposing build version&revision
Feature: containerd-cri support LinuxContainerResources.Unified (#5627)
- f8dfbee17 add cri test case
- 9a8bf1315 feature: add field LinuxContainerResources.Unified on cri
integration: investigate TestRestartMonitor's failure (#5861)
- f7b1ceb9f integration: investigate TestRestartMonitor's failure
Use issue forms for bug reporting (#5917)
- 278176db1 Address issue forms feedback
- 11ab3cba0 Use issue forms for bug reporting
cri: patch update image labels (#5945)
- 2bcd6a4e8 cri: patch update image labels
darwin: runtime support (#5936)
- a43fa9f28 darwin: runtime support
- 5dd38792a darwin: use the default values for socketRoot variable
Update RELEASES.md (#5858)
- 7826a21ac Update RELEASES.md
archive: Add WriteDiff error logs (#5949)
- ccc5ee303 archive: Add WriteDiff error logs
replace deprecated Dialer with ContextDialer (#5958)
- 8e850bc0f replace deprecated Dail with DailContext
Add WS2022 support in Windows Periodic tests (#5951)
- aeea697d8 Add WS2022 support in Windows Periodic tests
Content fuzzer: Clean up temp store dir (#5943)
- 96ec0b6f3 content fuzzer: Clean up tempdir
using Hosts replace deprecated field (#5944)
- 789abc936 using Hosts replace deprecated field
fix document non-synchronous (#5947)
- 820bd9269 fix document non-synchronous in crictl.md
go.mod: Update hcsshim to v0.8.21 (#5929)
- 1dd0d59b7 go.mod: Update hcsshim to v0.8.21
Makefile.linux: build on RISC-V with PIE (#5937)
- eb2530be8 Makefile.linux: build on riscv with PIE
Fix cwd flag for ctr tasks exec (#5932)
- 27046a9e0 Fix cwd flag for ctr tasks exec
Update Pause image in tests & config (#5927)
- 6d3d34b85 Update Pause image in tests & config
cri: Devices ownership from SecurityContext (#5122)
- e0f8c04da cri: Devices ownership from SecurityContext
Fix pull fails on unexpected EOF (#5921)
- 7bc5aa74c Fix pull fails on unexpected EOF
Fix dir support for devices (#5845)
- 838afd211 Adding testing of two devices
- 7fba86264 Fix dir support for devices V3 (#4847)
windows: The DefaultSpec platform should match the Default matcher (#5914)
- e2c769d6f windows: The DefaultSpec platform should match the Default matcher
Add RunAsUserName functionality for the Windows pod sandbox container (#5865)
- 25644b461 Add RunAsUserName functionality for the Windows Pod Sandbox Container
bump up runc v1.0.2 (#5899)
- e18516767 go.mod: update runc to v1.0.2
- 3f8ea1b6a update runc binary to v1.0.2
Run go fmt with Go 1.17 (#5903)
- d3aa7ee9f Run go fmt with Go 1.17
go.mod: github.com/pelletier/go-toml v1.9.3 (#5905)
- 429296910 go.mod: github.com/pelletier/go-toml v1.9.3
cri: filter selinux xattr for image volumes (#5902)
- c3609ff4c cri: filter selinux xattr for image volumes
Add Windows HostProcess Support (#5131)
- 79b369a0b Added windows hostProcess cni skip
script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0 (#5897)
- 4dd5ca70f script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0
Update to Go 1.17 (#5889)
- 9fe7bc938 Bump integration timeout to 35 min
- f8602c372 Update to Go 1.17
integration: fix TestContainerPids (#5896)
- acb81bbda integration: fix TestContainerPids
[ctr] add HOSTNAME env for host network (#5891)
- 6f60b3016 [ctr] add HOSTNAME env for host network
Fuzzing: Add fuzzer (#5886)
- c9b1b2fd5 Fuzzing: Add fuzzer
Make Cgroup driver configurable in gce configure script (#5884)
- 9e1b57ca0 Add env for SystemdCgroup driver
Allow expanded DNS configuration (#5878)
- 1224060f8 Allow expanded DNS configuration
Fuzzing: Add 4 fuzzers (#5863)
- 538d93d2f Fuzzing: Add 4 fuzzers
Cleanup v2 shim (#5813)
- d30d897ef Cleanup v2 shim
Fuzzing: Add experimental version of container fuzzer (#5840)
- 5e49ec27d Use http.Get to download binaries instead of exec.Command
- 11a90c7ff Fuzzing: Add experimental version of container fuzzer
add cpu-shares to ctr (#5846)
- d2f3b7146 add cpu-shares to ctr
docs: rename master to main (it was opposite on the actual commit) (#5847)
- bc4cea4e4 docs: rename main to master
content: return the error with its timestamp (#5849)
- a3d6edc0e content: return the error with its timestamp
Fix bad make protos failure (#5857)
- 82fe0db9a Fix bad make protos failure
replace cri and point to new location (#5851)
- 30b832e49 archive docs and point to new location fix #containerd/cri#1624
docs: remove FOSSA's badge (#5856)
- 1c47fb17f docs: remove FOSSA's badge
BUILDING.md: remove some bits about building runc (#5850)
- 9cc179aa7 BUILDING.md: remove some bits about building runc
- 42b57cc73 BUILDING.md: markdown fixes
go.mod: update k8s deps to v1.22.0 (#5836)
- e634f04d8 go.mod: update kubernetes to v1.22.0
[Scripts] Add trap to cri-integration test script (#5852)
- e6538b8bc Add trap to cri-integration test script
docs: list all snapshotter-related build flags (#5848)
- a5468852f docs: list all snapshotter-related build flags
Move plugin context events into separate plugin (#5835)
- 0a0621bb4 Move plugin context events into separate plugin
Fix Linux CI Linter using Go 1.15.14 (#5839)
- 534685f95 Fix Linux CI Linter using go 1.15.14
Update Go to 1.16.7 (#5842)
- 42a28ad2c Update Go to 1.16.7
Cleanup CI (#5838)
- 10eab21a4 Cleanup CI
Remove redundant build tags (#5834)
- 6f027e38a Remove redundant build tags
Change default directories on Darwin (#5830)
- 7917da764 Change default directories on Darwin
[otel-tracing] Initial opentelemetry support (#5731)
- 3c5424454 [otel-tracing] vendor and go modules changes
- 3597ac859 [otel-tracing] Initial opentelemetry support
- 10824eaf2 remove go 1.13 from containerd
Fuzzing: Fix for OSS-fuzz issue 36825 (#5829)
- c3c276ae1 Fuzzing: Fix for OSS-fuzz issue 36825
Fuzzing: Add two fuzzers (#5825)
- 41a04246f Fuzzing: Add two more fuzzers
scripts: linting fixes, and remove support for Debian Jessie (as it's EOL) (#5760)
- 6c257552a scripts: declare ROOT closer to where it's used, and some DRY changes
- dba0ef4eb scripts: add missing quotes, and minor linting issues
- 0cb656860 test/build-utils.sh: remove support for Debian Jessie
platforms: Format(): use path.Join() instead of joinNotEmpty() (#5821)
- f2c3122e9 platforms: Format(): use path.Join() instead of joinNotEmpty()
Fuzzing: Remove panics of container_fuzzer (#5823)
- 2c699cc35 Fuzzing: Remove panics of container_fuzzer
Fuzzing: Add container fuzzer (#5785)
- acecd6603 Change protoc link
- cc88f8e0a Split fuzzer to two fuzzers
- 6294235d8 Fuzzing: Add container fuzzer
runtime: fix the issue of create new socket with abstract address (#5746)
- 4ab3e7a53 runtime: fix the issue of create new socket with abstract address
mergo: Upgrade to 0.3.12 to fix panic (#5809)
- ce437864b mergo: Upgrade to 0.3.12 to fix panic
ci: install criu from PPA (#5802)
- d1e868c83 ci: install criu from PPA
Update release workflow to upload binary without CNI (#5144)
- d62d6c11d Split release steps into multiple tasks
- b4807122d Update release workflow to upload binary without CNI
Enable critest on Windows Periodic Jobs (#5725)
- 23bc3db91 Enable critest on Windows
Script to check if entries in go.mod files are in sync (#5792)
- 43117cf91 Script to check if entries in go.mod files are in sync
Add a sharedNamespace label (#5043)
- e692a0192 Add shared content label to namespaces
platforms: add "ios" as known OS, "loong64" as known ARCH (#5784)
- 2405671d4 platforms: add "ios" as known OS, "loong64" as known ARCH
Updates the location of protobuf downloads (#5804)
- 3a8622e30 Updates the location of protobuf downloads in docs
Update protobuf install to use correct repository (#5803)
- 0d9393650 Update protobuf install to use correct repository
overlay: expose upperdir location of each snapshot via an optional label (#5624)
- 67406b373 overlay: add an optional label of upperdir location of each snapshot
Support SIGRTMIN+n signals (#5693)
- 1d3d08026 Support SIGRTMIN+n signals
respect context timeout in shim binary call (#5800)
- 7a10fd4fc respect context timeout in shim binary call
Introduce a new go module - containerd/api for use in standalone clients (#5716)
- 494b940f1 Introduce a new go module - containerd/api for use in standalone clients
grpc config add options tcp_client_ca_cert (#5606)
- 63fe34add grpc config add options tcp_tls_ca
integration: Windows volume-copy-up images (#5162)
- 16deba098 integration: Windows volume-copy-up images
add CRI support matrix to RELEASES.md (#5795)
- 4fdb88464 add CRI support matrix to RELEASES.md
adding a little more clarity (#5794)
- b5fc7846c adding a little more clarity
update gotestsum to v1.7.0 (#5793)
- 18d6cc1b0 update gotestsum to v1.7.0
Discard blocks when removing a thin device (#5756)
- f1d79d33b Discard blocks when removing a thin device
Makefile: fix passing build tags (#5590)
- 2bb8ad7c9 Makefile: pass build tags to manpage build process
- f60d447c1 Makefile: fix tags parameter computation
Add runtime label to metrics (#5744)
- efa8ab715 Add runtime label to metrics
interface about shim build check (#5745)
- 0d45ac14e interface about shim build check
integration: log all processes to investigate the test failure (#5775)
- 00d52bb15 integration: log all processes to investigate the test failure
Fuzzing: Add archive fuzzer (#5779)
- 2556aac67 Fuzzing: Add archive fuzzer
Add docker.Fetch fuzzer (#5687)
- 0789a0c02 Add docker fetch fuzzer
Support custom compressor for walking differ (#5735)
- b483177ee Support custom compressor for walking differ
remotes/docker/pusher.go: Fix missing Close() on push to docker remote (#5770)
- 53ec1abec remotes/docker/pusher.go: Fix missing Close()
remotes/docker/fetcher.go: Fix missing Close() on fetch from docker remote (#5769)
- 67d07fe5c remotes/docker/fetcher.go: Fix missing Close()
Update cpuguy83/go-md2man binary to v2.0.1 (#5771)
- d2b6d192d Update cpuguy83/go-md2man binary to v2.0.1
Refactor / optimize contrib/Dockerfile.test (#5750)
- 9537bc265 Dockerfile.test: build containerd in separate stage
- 36be5ef3a Dockerfile.test: add GOLANG_IMAGE build arg to allow overriding
- 8faacfca1 Dockerfile.test: clean up apt indexes after installing
- 9f7e6335c Dockerfile.test: build critools in a separate stage
- 7ec8e2d36 Dockerfile.test: build cni in a separate stage
- f9f423c07 Dockerfile.test: standard directory to collect build aftifacts
- e9f26eb87 Dockerfile.test: split dev stage, and optimize order
- 25fada0cc Dockerfile.test: skip curl, gcc, git and make install
- 546538971 install-critools: make sure DESTDIR exists
update gotestsum to current master (#5754)
- 603962bc8 update gotestsum to current master
- 51a8f969b Merge pull request from GHSA-c72p-9xmj-rx3w
- bc4e416c8 Add test for archive breakout test for lchmod
Use systemd cgroup driver for Kubernetes e2e tests with cgroupsv2 (#5755)
- 150e07b64 Use systemd cgroup driver for cgroupv2 tests
update runc to v1.0.1 (#5751)
- a12c7bd1c go.mod: runc v1.0.1
- 43e0594ae update runc binary to v1.0.1
runtime: runc v2: remove redundant validation (#5737)
- dbef1d56d runtime: runc v2: remove redundant validation
Add timestamp to flaky restart monitor test (#5727)
- 18321f539 Move loop check to before sleep
- 2e8a572df Add timestamp to flaky restart monitor test
Update Go to 1.16.6 (#5722)
- 55fd2ab5d integration/client: go mod tidy
- e72046f86 Update Go to 1.16.6
client: surface a connection error more clearly (#4447)
- 73d28ddeb client: surface a connection error more clearly
Fix missing Body.Close() calls on push to docker remote (#5712)
- 894b6ae39 Fix missing Body.Close() calls on push to docker remote
remove pkg/cri/platforms package (#5710)
- ac75071b4 remove pkg/cri/platforms package
Allow WithServices to use custom implementations (#5709)
- 0a8802df6 Allow WithServices to use custom implementations
[Vendor] Update hcsshim to 0.8.18 (#5673)
- a81f05f36 [Vendor] Update hcsshim to 0.8.18
test integration: Adds a test that restarts a failed container (#5578)
- 04ab4418f test integration: Adds a test that restarts a failed container
[CRI] move up to CRI v1 and support v1alpha in parallel (#5619)
- d1c105192 use fu wei's suggeted interface pick for marshaling
- 14962dcbd add alpha version
- a5c417ac0 move up to CRI v1 and support v1alpha in parallel
gha: make release workflow work in forks (#5682)
- 4c6e4a06f gha: make release workflow work in forks
Add unit test for plugin (#5666)
- 3a0b9ec6b Add unit test for plugin
Dockerfile.test: add "cri-in-userns" (aka rootless) test stage (#5700)
- aefabe546 Dockerfile.test: add "cri-in-userns" (aka rootless) test stage
Update for distribution spec 1.0 (#5676)
- a7ad6b3be Add support for registry host path override
- 95c708572 Update documenation for OCI distribution 1.0
archive: cleanup lchmod logic (#5702)
- 53835221f Cleanup lchmod logic in archive
Install specific golang version in Windows CI. (#5571)
- 419d616fe Install specific golang version in Windows CI.
Add ctr command label in NewContainerOpts (#5660)
- bda7b5866 feat: Add snapshotter label to the new snapshot for container.
snapshot/devmapper: log exported methods correctly (#5655)
- 03ee45006 snapshot/devmapper: log exported methods correctly
Makefile: fix DESTDIR and PREFIX concatenation (#5662)
- 2019a1e68 Makefile: fix DESTDIR and PREFIX concatenation
Cri integration cleanup (#5287)
- cabe67736 tests: Use EnsureImageExists for image pulling
- a78bdf22d tests: Refactors PodSandbox creation
move sys.FMountat() into mount package and un-export (#5641)
- a964cf0cc un-export mount.FMountat
- 21f532d51 move sys.FMountat() into mount package
sandbox: send pod UID to CNI plugins as K8S_POD_UID (#5640)
- dac2543a0 sandbox: send pod UID to CNI plugins as K8S_POD_UID
sys: remove StatAtime(), StatCtime(), StatMtime() and StatATimeAsTime() utils (#5639)
- 5a0beaefb sys: remove StatAtime(), StatCtime(), StatMtime() and StatATimeAsTime() utils
content/local: inline sys.StatATimeAsTime() (#5633)
- 63c185da9 content/local: inline sys.StatATimeAsTime()
allow multi gpu to be specified via ctr (#5636)
- 09d78bb6b allow multi gpu to be specified via ctr
- f913a4275 go.mod: runc v1.0.0
- 28bb59c08 update runc binary to v1.0.0 GA
fixing some doc links (#5629)
- 560e7d479 fixing some doc links
Sync integration/go.mod with root go.mod (#5623)
- d9694b297 Sync integration/go.mod with root go.mod
archive: Expose ChangeWriter to allow customized diff computing (#5615)
- 4a46ea2f4 archive: Expose ChangeWriter to allow customized diff computing
CI: Switch to the available latest images (#5625)
- cd33c007c CI: Switch to available latest images
- 75b4c83f0 fix deprecation config for default runtime
Re-enable criu in main integration runs (#5614)
- 394f86475 Re-enable criu in main integration runs
runtime,v2: Enable debug when containerd is on debug+ log level (#5617)
- 87a2e0b2a runtime,v2: Enable debug when containerd is on debug+ log level
- 1bbee573a github.com/golang/protobuf/proto is deprecated
- 91c8fa452 Update github.com/golang/protobuf from v1.3.5 to v1.4.3
- b7e79dc5a Update google.golang.org/grpc from v1.27.1 to v1.38.0
- 8d2e156dd Increase golangci-lint timeout
ctr flags of container rootfs propagation (#5611)
- 05e51539a command line flags of setting container rootfs propagation
- 1dada3fc2 add cgroupv2 setup for cos with a flag
Update gotestsum to add timestamps to junit output (#5612)
- bfbebf02b Update gotestsum to add timestamps to junit output
Allow to pass --no-cgroups option to nvidia-container-cli (#5604)
- 9c01fe20d Allow to pass --no-cgroup option to nvidia-container-cli
Makefile: FHS conformant manpage installation pathes (#5577)
- 77374e8b3 Makefile: FHS conformant manpage installation pathes
Add proper Go version before project checks (#5594)
- 3ab974433 Add proper Go version before project checks
Enable cri-integration in Windows Periodic Tests (#5580)
- af5a130bc Enable cri-integration in Windows Periodic Tests
adds explanation for seccomp unset/unconfined default vs runtime default (#5573)
- 7a2b04758 adds explanation for seccomp unset/unconfined default vs runtime default
Fix cleanup context of teardownPodNetwork (#5569)
- 728743eb2 Fix cleanup context of teardownPodNetwork
update integration/client go.sum (#5572)
- 01585595a update integration/client go.sum
Revert diff/walking error change (#5566)
- 69f43d458 Revert diff/walking error change
Update opencontainers/selinux to v1.8.2 (#5562)
- 9a451d103 Update opencontainers/selinux to v1.8.2
fix invalid validation error checking (#5565)
- 014748bc0 fix invalid validation error checking
diff/walking: fix defer cleanup (#5551)
- 558fdc680 diff/walking: fix defer cleanup
Windows periodic job: Add creation timestamp to RG (#5559)
- 5f0fc4893 Add creation timestamp to RG
Fix error case in Windows layer cleanup (#5328)
- f8538b5e1 Fix error case in Windows layer cleanup
Use DeactivateLayer to unlock layers that we cannot rename (#5422)
- 402acd7c1 Small typo fix "reimporst"
- f21627059 Use DeactivateLayer to recover layers that we cannot rename
tests: Symlink volume tests (#5284)
- 93e268f62 tests: Symlink volume tests
Makefile: fix DESTDIR environment variable behaviour (#5535)
- b5f530a15 Makefile: fix DESTDIR environment variable behaviour
Change Wrapf of non-error to an actual error (#5560)
- edfd8d599 Change Wrapf of non-error to an actual error
- a93b5cbc2 Install apparmor parser for arm64 environment
scrub the stale TODO (#5536)
- 498bb36f6 scrub the stale TODO
docs: explicitly mention containerd's Prometheus path (#5554)
- 75daf45be docs: explicitly mention containerd's Prometheus path
integration: Cleanup containerd on test teardown (#5553)
- 2f870aa89 integration: Cleanup containerd on test teardown
docs/cri: update links (#5548)
- 93d4541a2 docs/cri: update ocicrypt link
- 792466495 docs/cri: fix broken links
Update Windows periodic tests (#5544)
- 05c03de94 Update Windows periodic tests
Add CI periodic Windows Jobs. (#5165)
- 77285e311 Schedule Windows job daily after midnight.
- 2b58782df Update windows-periodic.yml
- 421fc6ea7 Add CI periodic Windows Jobs.
Rename atomicWrite to writeToCompletion (#5273)
- 9fcea1d3f Rename atomicWrite to writeToCompletion
Do not run btrfs tests if btrfs kernel module is not loaded (#5539)
- b996e49c5 Do not run btrfs tests if btrfs kernel module is not loaded
Fix incorrect UA used for registry authentication (#5533)
- 50ad4b96c Fix incorrect UA used for registry authentication
ctr: parse mount options with embedded = character (#5531)
- 535d9cc59 ctr: parse mount options with embedded = character
Fix mounts for FreeBSD (#5472)
- a4f97d45d Add ruleset=4 option
- 1442fee22 Remove mountpoints not commonly mounted on FreeBSD
- de04b3243 Add copyright header & make sure compilation succeeds on all platforms
- e1fd6be7e Fix mounts for FreeBSD
ctr: make exec pty behavior consistent with run (#5527)
- 5dec27b6f ctr: exec handle pty resize after Start
- b9378b452 ctr: exec setup IO with console
Makefile: use $@ for target file names (#5534)
- 923ab5b7c Makefile: use $@ for target file names
Fix small typo (#5528)
- e1c845df5 Fix small typo
Don't check for apparmor_parser to be present (#5519)
- 79e345221 update the link
- 1acca8bba Don't check for apparmor_parser to be present
Remove useless lines (#5520)
- 869375a41 Remove useless lines
Fixed typos in docs (#5509)
- a5b1740bb fixed typos
Try next mirror in case of non-404 errors, too (#5275)
- c0e2f4b5d Try next mirror in case of non-404 errors, too
bump runc version to v1.0.0-rc95 (#5514)
- ec28288f4 bump runc version to v1.0.0-rc95
update runc binary to v1.0.0-rc95 (#5511)
- 599127f4d update runc binary to v1.0.0-rc95
Bump github.com/Microsoft/go-winio from 0.4.15 to 0.5.0 (#5508)
- 5dbae87c5 Bump github.com/Microsoft/go-winio from 0.4.15 to 0.5.0
Bump github.com/opencontainers/selinux from 1.8.0 to 1.8.1 (#5507)
- 1093f05ab Bump github.com/opencontainers/selinux from 1.8.0 to 1.8.1
Makefile: allow overriding install command via environment (#5493)
- 9643c9965 Makefile: allow overriding install command via environment
tests: Adds support for Windows cri-integration tests (#5163)
- 09a0c9471 tests: Adds support for Windows cri-integration tests
Update docker resolver to authorize redirects (#5504)
- b1d4140a2 Update docker resolver to authorize redirects
bump hcsshim version to v0.8.17 (#5505)
- b6a251749 bump hcsshim version to v0.8.17
Release binary update for imgcrypt (#5498)
- 315739251 just release ctd-decoder not ctr-enc
- b9c403e79 Merge remote-tracking branch 'upstream/master'
- fc4da9728 Pin integration test image for alpine
cri-integration tests: Pull images once (#5313)
- 273c2bb16 tests: Prepull images used in tests
plugin: optimize the check for the last registration (#5440)
- 98f5922b5 plugin: optimize the check for the last registration
metadata: modify NewLeaseManager to return leases.Manager (#5465)
- e37ddafab metadata: modify NewLeaseManager to return leases.Manager
Skip TLS verification for localhost (#5100)
- 8014d9fee Skip TLS verification for localhost
- 74c7d66df Merge remote-tracking branch 'upstream/master'
Makefile: make sure manpages are built before install-man (#5492)
- 4b1b8346b Makefile: make sure manpages are built before install-man
adds description for hosts.toml (#5309)
- 6e249b1ae adds credentials description
- b59e29773 adds description for hosts.toml
Prepare default branch rename (#5459)
- 0ba7303ee Prepare default branch rename
- d02413330 Merge remote-tracking branch 'upstream/master'
Update runc to rc94 (#5473)
- de6db4038 Update vendored runc to v1.0.0.0-rc94
- 5c99f150a Update the runc binary used with containerd to runc v1.0.0-rc94
Fix content.ReaderAt close (#5468)
- b890f056e Fix content.ReaderAt close
Update releases doc with updated support timeline (#5466)
- c5797c8fc Update releases doc with updated support timeline
tests: add test for adaptor (#5452)
- 7d70992d3 tests: add test for adaptor
Makefile: allow overriding go command by environment (#5450)
- 9ea25634b Makefile: allow overriding go command by environment
update to new cri-tools make install (#5462)
- c74a6c419 update to new cri-tools make install
Update Go to 1.16.4 (#5461)
- 79d800b9b Update Go to 1.16.4
- d559b00fe Merge remote-tracking branch 'upstream/release/1.5'
[release/1.5] go.mod: cut circular dependency on github.com/containerd/containerd (#5457)
- b35aa7250 go.mod: cut circular dependency on github.com/containerd/containerd
- b68405639 integration/client: go mod tidy
oci: fix WithDevShmSize (#5063)
- b592a4c1e oci: fix WithDevShmSize
[release/1.5] cherry-pick: windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink (#5454)
- e120261ee windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink
windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink (#5411)
- b0d3b35b2 windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink
doc: add missing namespaces package (#5448)
- 0b786908c doc: add missing namespaces package
update seccomp version (#5445)
- b56527cb7 update seccomp version
Update golang.org/x/sys to add linux/ppc support (#5436)
- b538d8f1a Update golang.org/x/sys to add linux/ppc support
go.mod: cut circular dependency on github.com/containerd/containerd (#5441)
- e26fc8472 go.mod: cut circular dependency on github.com/containerd/containerd
- 15e0bd513 integration/client: go mod tidy
Fix different registry hosts referencing the same auth config. (#5446)
- 81402e475 Fix different registry hosts referencing the same auth config.

Changes from containerd/cgroups

24 commits

cgroup: Optionally add process and task to a subsystems subset (#203)
- 80a7821 cgroup: Optionally add process and task to a subsystems subset
replace pkg/errors from vendor (#208)
- 0072297 replace pkg/errors from vendor
cgroup.go: avoid panic on nil interface (#207)
- d55de5d cgroup.go: avoid panic on nil interface
Improvements on cgroup v2 support (#204)
- 73a8516 cgroupv2: reset lastErr to nil when subtree control is successfully written
- 2ca92c5 cgroupv2: enable controllers before setting resources in NewChild()
v2: remove unimplemented errors and ErrorHandler, IgnoreNotExist (#201)
- db173a8 v2: remove ErrorHandler and IgnoreNotExist as they are not implemented
- b19a60d v2: remove errors that are never returned
v1: reduce duplicated code (#202)
- 4fe70f3 v1: reduce duplicated code
cgroup v1: implement AddProc() (#200)
- 6659093 cgroup v1: implement AddProc()
Rename branch from master to main (#199)
- 7254c12 Rename branch from master to main
utils: export ParseCgroupFile() (#197)
- 23b5120 utils: export ParseCgroupFile()
go.mod: coreos/go-systemd/v22 v22.3.2 to prepare for deprecations (#194)
- f8918cf go.mod: coreos/go-systemd/v22 v22.3.2 to prepare for deprecations
Use /proc/partitions to get device names (#195)
- 1a4509d Use /proc/partitions to get device names

Changes from containerd/console

6 commits

Fix CI (#55)
- e700792 Fix CI
- 05dadd9 Stop using pkg/errors
Add support for z/OS (#46)
- 7097449 Console test on z/OS
- c4672c3 Add support for z/OS

Changes from containerd/continuity

16 commits

Remove direct dependency on github.com/pkg/errors (#185)
- 849cf06 run gofmt with Go 1.17
- 7b4650c remove direct dependency on github.com/pkg/errors
Fix darwin issues (#186)
- 16556d0 update AUTHORS
- b80f086 darwin: use utimensat syscall instead of utimes
- c666a35 fix darwin usage of du command
go.mod: bazil.org/fuse v0.0.0-20200407214033-5883e5a4b5125 (#161)
- c7d2029 go.mod: bazil.org/fuse v0.0.0-20200407214033-5883e5a4b5125
fs/stat: add FreeBSD, and cleanup some nolint-comments (#184)
- fa7d162 reformat nolint comments
- a780d6d fs/stat: add FreeBSD
Rename branch from master to main (#182)
- 0175d70 Rename branch from master to main
testutil/loopback: print more debug info (#180)
- e10d519 testutil/loopback: print more debug info

Changes from containerd/go-cni

13 commits

go.mod: github.com/containernetworking/cni v1.0.1 (#72)
- 9cfa666 go.mod: github.com/containernetworking/cni v1.0.1
remove direct dependency on github.com/pkg/errors (#71)
- b6c559f remove direct dependency on github.com/pkg/errors
update CNI to v1.0.0 (#70)
- 786c2bc test: add TestLibCNIType100
- e3fccc2 update CNI to v1.0.0
Rename branch from master to main (#69)
- 591b0b6 Rename branch from master to main
result: change Raw from a struct field to a method (#68)
- 6c993c3 result: change Raw from a struct field to a method
result: expose raw result (#67)
- bc7198b result: expose raw result

Dependency Changes

github.com/AdaLogics/go-fuzz-headers 6c3934b029d8 new
github.com/Microsoft/go-winio v0.4.17 -> v0.5.0
github.com/Microsoft/hcsshim v0.8.16 -> v0.9.0
github.com/bits-and-blooms/bitset v1.2.0 new
github.com/blang/semver v3.5.1 new
github.com/cenkalti/backoff/v4 v4.1.1 new
github.com/cilium/ebpf v0.4.0 -> v0.6.2
github.com/containerd/cgroups v1.0.1 -> v1.0.2
github.com/containerd/console v1.0.2 -> v1.0.3
github.com/containerd/continuity v0.1.0 -> v0.2.0
github.com/containerd/go-cni v1.0.2 -> v1.1.0
github.com/containernetworking/cni v0.8.1 -> v1.0.1
github.com/containernetworking/plugins v0.9.1 -> v1.0.1
github.com/go-logr/logr v0.2.0 -> v0.4.0
github.com/golang/groupcache 8c9f03a8e57e -> 41bb18bfe9da
github.com/golang/protobuf v1.3.5 -> v1.5.2
github.com/google/go-cmp v0.5.4 -> v0.5.6
github.com/grpc-ecosystem/go-grpc-middleware v1.3.0 new
github.com/grpc-ecosystem/grpc-gateway v1.16.0 new
github.com/imdario/mergo v0.3.11 -> v0.3.12
github.com/json-iterator/go v1.1.10 -> v1.1.11
github.com/moby/spdystream v0.2.0 new
github.com/moby/sys/signal 8a51b5cc8879 new
github.com/opencontainers/image-spec v1.0.1 -> 5ad6f50d6283
github.com/opencontainers/runc v1.0.0-rc93 -> v1.0.2
github.com/opencontainers/runtime-spec e6143ca7d51d -> 1c3f411f0417
github.com/opencontainers/selinux v1.8.0 -> v1.8.2
github.com/pelletier/go-toml v1.8.1 -> v1.9.3
github.com/prometheus/client_golang v1.7.1 -> v1.11.0
github.com/prometheus/common v0.10.0 -> v0.26.0
github.com/satori/go.uuid v1.2.0 new
github.com/sirupsen/logrus v1.7.0 -> v1.8.1
github.com/spf13/pflag v1.0.5 new
github.com/stretchr/testify v1.6.1 -> v1.7.0
go.etcd.io/bbolt v1.3.5 -> v1.3.6
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.24.0 new
go.opentelemetry.io/otel v1.0.1 new
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.0.1 new
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.0.1 new
go.opentelemetry.io/otel/sdk v1.0.1 new
go.opentelemetry.io/otel/trace v1.0.1 new
go.opentelemetry.io/proto/otlp v0.9.0 new
golang.org/x/net e18ecbb05110 -> e898025ed96a
golang.org/x/sync 09787c993a3a -> 036812b2e83c
golang.org/x/sys 47abb6519492 -> ed5796bab164
golang.org/x/term 7de9c90e9dd1 -> 6a3ed077a48d
golang.org/x/text v0.3.4 -> v0.3.6
golang.org/x/time 3af7569d3a1e -> 1f47c861a9ac
google.golang.org/appengine v1.6.5 -> v1.6.6
google.golang.org/grpc v1.27.1 -> v1.41.0
google.golang.org/protobuf v1.27.1 new
gopkg.in/yaml.v3 9f266ea9e77c -> 496545a6307b
k8s.io/api v0.20.6 -> v0.22.0
k8s.io/apimachinery v0.20.6 -> v0.22.0
k8s.io/apiserver v0.20.6 -> v0.22.0
k8s.io/client-go v0.20.6 -> v0.22.0
k8s.io/component-base v0.20.6 -> v0.22.0
k8s.io/cri-api v0.20.6 -> v0.22.0
k8s.io/utils 67b214c5f920 -> cb0fa318a74b

Previous release can be found at v1.5.0

containerd/containerd v1.6.0-beta.1 containerd 1.6.0-beta.1 on GitHub