Welcome to the v1.6.0-beta.4 release of containerd!
The seventh major release of containerd includes many improvements and added
support to increase overall compatibility and stability.
Highlights
Runtime
- Add runtime label to metrics (#5744)
- Cleanup task delete logic in v2 shim (#5813)
- Add support for shim plugins (#5817)
- Split task manager into shim and task manager (#5918)
- Add runc shim support for core scheduling (#6011)
- Update shim client connect attempt to fail fast when shim errors (#6031)
- Add support for absolute path to shim binaries (#6206)
Windows
- Add support for Windows HostProcess containers (#5131)
- Add support for Windows resource limits (#5778)
CRI
- Add CNI configuration based on runtime class (#4695)
- Add support for CRI v1 and v1alpha in parallel (#5619)
- Add support for unified resources field for cgroups v2 (#5627)
- Add IP preference configuration for reporting pod IP (#5964)
- Implement new CRI pod sandbox stats API (#6113)
- Add sandbox and container latency metrics (#6111)
- Add namespace to ttrpc and grpc plugin connections (#6130)
- Add option to allow ping sockets and privileged ports with no capabilities (#6170)
Other
- Add a shared namespace label for cross-namespace content sharing (#5043)
- Add support for client TLS Auth for grpc (#5606)
- Add xfs support for devicemapper snapshotter (#5610)
- Add metric exposing build version and revision (#5965)
- Add OpenTelemetry trace injection to grpc client (#5992)
Client
- Allow WithServices to use custom implementations (#5709)
- Support custom compressor for walking differ (#5735)
See the changelog for complete list of changes
Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.
Contributors
- Phil Estes
- Derek McGowan
- Wei Fu
- Maksym Pavlenko
- Akihiro Suda
- Sebastiaan van Stijn
- Mike Brown
- Kazuyoshi Kato
- Claudiu Belu
- Michael Crosby
- haoyun
- zounengren
- AdamKorcz
- Adelina Tuvenie
- Brian Goff
- Daniel Canter
- Kohei Tokunaga
- Davanum Srinivas
- Gabriel Adrian Samfira
- Shiming Zhang
- Samuel Karp
- Enrico Weigelt, metux IT consult
- Hajime Tazaki
- Alakesh Haloi
- Iceber Gu
- Kevin Parsons
- Aditi Sharma
- Gijs Peskens
- Nashwan Azhari
- David Porter
- Jacob MacElroy
- wanglei
- Alexandre Peixoto Ferreira
- Cody Roseborough
- Furkan
- Jiaming Xu
- Kir Kolyshkin
- Miao Wang
- Neil Johnson
- Paul "TBBle" Hampson
- Priyanka Saggu
- Romain Aviolat
- Sunghoon Kang
- Tõnis Tiigi
- Zhiyu Li
- Alexander Minbaev
- Alexey Ivanov
- Artem Khramov
- Ben Hutchings
- Cory Bennett
- Da McGrady
- Dan Williams
- Eng Zer Jun
- Eric Ernst
- Ethan Chen
- Fabiano Fidêncio
- Fupan Li
- Gaurav Gahlot
- Gunju Kim
- Jacob Blain Christen
- James Sturtevant
- Jayme Howard
- Jintao Zhang
- Justin Terry
- Kaijie Chen
- Kern Walster
- Kitt Hsu
- Lantao Liu
- Ma Xinjian
- Manabu Sugimoto
- Mikko Ylinen
- Ng Yang
- Nicolas Chariglione
- Olli Janatuinen
- Peri Thompson
- Quan Tian
- Radostin Stoyanov
- Rui Lopes
- Sambhav Kothari
- Samuel Ortiz
- Sebastian Hasler
- Takumasa Sakao
- Yang Yang
- Yifan Yuan
- Zilong Wang
- Zufar Dhiyaulhaq
- botieking98
- chenxiaoyu
- jayonlau
- jerryzhuang
- kerthcet
- levinxo
- linrunlong
- scuzhanglei
- wangzhan
- Étienne Guesnet
Changes
850 commits
- Prepare release notes for v1.6.0-beta.4 (#6296)
569042e6d
Prepare release notes for v1.6.0-beta.4
- refactor: functions for error log and error return (#6358)
c0d07094b
feat: Errorf usage
- Split apart runc shim into plugin components (#6021)
- CRI update for sandbox sizing (#6155)
20419feaa
cri, sandbox: pass sandbox resource details if available, applicable
- medatada: make namespaces' deletion error less cryptic (#6354)
44b28b61f
medatada: make namespaces' deletion error less cryptic
- ListContainerStats to return stats response if ContainerStatsFilter is nil (#6373)
c8a009d18
add-list-stat: return container list if filter is nil
- integration: deflake TestContainerdRestart (#6369)
9e9ee66bf
integration: deflake TestContainerdRestart
- feat: add timeout for bolt open (#6225)
dd26d3d09
feat: support custom timeout for blot open
- Update Go to 1.17.5 (#6333)
0e472420b
Update Go to 1.17.5
- cri/server: use consistent alias for pkg/ioutil (#6332)
2d3009038
cri/server: use consistent alias for pkg/ioutil
- Disable restart monitor test in Windows (#6364)
552a27081
Disable restart monitor test in Windows
- Don't fail-fast on Windows integration tests (#6338)
4c1e26cd5
Don't fail-fast on Windows integration tests
- Update restart monitor test to output daemon logs on failure (#6355)
- go.mod: update image-spec to latest (v1.0.3-dev) (#6263)
- Skip WithAdditionalGIDs on Darwin (#6353)
441bcb56d
Skip WithAdditionalGIDs on Darwin
- Use RFC3339 format on Windows periodic resource group creation so cleanup works (#6303)
68dabdcc6
Use RFC3339 format so rg cleanup works
- update runc to v1.0.3 (#6330)
- Unblock native snapshotter on Darwin (#6329)
416899fc8
Allow native snapshotter on Darwin
- Do not use
go get
to install executables (#6328)6b0e2414c
Do not usego get
to install executables
- Include runtime v2 in default builtins (#6326)
d2f1dda0f
Include runtime v2 in default builtins
- Add Windows Server 2022 CI runs (#6314)
ff77dd112
Add Windows Server 2022 CI runs
- Set explicit ACL on test files (#6324)
- integration: align tags of test images (#6311)
f33d38c7c
integration: align tags of test images
- Set CONTAINERD_ROOT in Windows cri-integration (#6325)
4ccf287da
Set CONTAINERD_ROOT in Windows cri-integration
- export oci.DeviceFromPath() (#6312)
f3195b3b5
export oci.DeviceFromPath()
- Update volume test images (#6321)
- Update TestRestartMonitor expected time check (#6201)
- Move test volume images from gcr to ghcr (#6319)
665877a5b
Move volume images from gcr to ghcr
- Revert shim service plugin migration (#6301)
6bccd67e8
Revert shim plugin migration
- Authenticate against ghcr.io (#6317)
- oci/deviceFromPath(): correctly check device types (#6306)
94462d8f5
oci/deviceFromPath(): correctly check device types
- Skip TestExportAndImportMultiLayer on Windows (#6315)
2a6857d06
Skip TestExportAndImportMultiLayer on Windows
- Integration: Add image build workflow (#6290)
7ccd733d2
Add image build workflow
- Integration: Separate Windows Periodic Tests workflow trigger. (#6286)
0a25bc1aa
Integration: Separate Windows Periodic Tests workflow trigger.
- Build volume test images on Windows (#6274)
1698d061c
Build volume test images on Windows
- Add VMware TKG & TCE to Containerd adopters (#6297)
7a4415dd5
Add VMware TKG & TCE to Containerd adopters
- Vagrantfile: update to Fedora 35 (#6293)
46892d340
Vagrantfile: update to Fedora 35
- Update README.md repo->org (#6269)
5e4b033ec
Update README.md repo->org
- Fix executable file not found when restoring shims (#6278)
5015130f7
Fix executable file not found when restoring shims
- ctr/snapshots/diff: show media-type in stderr (#6271)
6681cc4b9
ctr/snapshots/diff: don't show the media-type in output
- ctr: Add Linux Capabilities control flags (#6289)
95b3ab2a4
ctr: Add Linux Capabilities control flags
- integration: add stats result in error message (#6270)
8de1117c9
integration: add stats result in error message
- releases: mark 1.4 as Extended (#6287)
- feat: skip ci for fork (#6284)
507bfc91b
feat: skip ci for fork
- content/local: Close the file if Seek fails (#6280)
9dfbcbbc4
content/local: Close the file if Seek fails
- Integration: Remove explicit version passing to
azure/CLI
. (#6268)cb1359fa8
Integration: Remove explicit version passing toazure/CLI
.
- Fix wrong make target on documentation (#6276)
2b28dd363
Fix wrong make target on documentation
- fix: server error return (#6272)
fa6759ae5
fix: server error return
- Prepare release notes for v1.6.0-beta.3 (#6267)
- feat:support custom callopts on client side (#6254)
- [CRI] Fix panic when registry.mirrors use localhost (#6258)
5f293d9ac
[CRI] Fix panic when registry.mirrors use localhost
- Add support for TMP override on toml (#6241)
63895de45
Add support for TMP override on toml
- CRI: Support enable_unprivileged_icmp and enable_unprivileged_ports options (#6170)
2a81c9f67
CRI: Support enable_unprivileged_icmp and enable_unprivileged_ports options
- Merge Github Security Advisory GHSA-5j5w-g665-5m35
- [cri] add sandbox and container latency metrics (#6111)
91bbaf679
[cri] add sandbox and container latency metrics
- Integration: Generalize Windows CI setup scripts for any username. (#6255)
- feat: use rwmutex instead (#6253)
bef792b96
feat: use rwmutex instead
- Allow absolute path to shim binaries (#6206)
- Close file if permission modification fails (#6246)
db124c560
Close file if permission modification fails
- release: change tar name to match prior releases (#6250)
2f31dcda7
release: change tar name to match prior releases
- Fix wrong error returned for image index lookup (#6237)
89eebc4c0
Fix wrong error returned for image index lookup
- Fix containerd fails to pull OCI image with non-
http(s)://
urls (#6221)526defb57
Fix containerd fails to pull OCI image with non-http(s)://
urls
- Prepare release notes for v1.6.0-beta.2 (#6223)
a3b756ce1
Prepare release notes for v1.6.0-beta.2
- Add arm64 to releases (#6196)
- use write lock when updating container stats (#6236)
6765524b7
use write lock when updating container stats
- go.mod: Bump hcsshim to v0.9.1 (#6230)
b103bee4c
go.mod: Bump hcsshim to v0.9.1
- go.mod: Bump ttrpc to 1.1.0 (#6228)
920b24793
go.mod: Bump ttrpc to 1.1.0
- go.mod: bump moby/sys/symlink v0.2.0, moby/sys/signal v0.6.0, moby/sys/mountinfo v0.5.0 (#6213)
- cleanup: add more description on comment (#6222)
574800633
cleanup: add more description on comment
- Update Go to 1.17.3 (#6211)
869ccc01c
Update Go to 1.17.3
- CI: bump up crun: 1.0 -> 1.3 (#6214)
a22346622
CI: bump up crun: 1.0 -> 1.3
- Pin az CLI version in windows-periodic workflow (#6205)
548579d0e
Pin az CLI version
- Decouple task manager (#5918)
d022fbe78
Address PR comments6fa1bb4a5
Fix build after rebase2cec3a34b
Migrate task directory8b788d9df
Expose shim process interface733519677
Fix after rebasedf8c206a9
Cleanup shim loadingb554b577b
Move shim restore to a separate filea3d298193
Fix backward compatibility with old task shims33786ee4d
Add plugin dependency between shim and shim servicesfb5f6ce3c
Rework task create and cleanup flow7c4ead285
Add task manager2d5d3541e
Rename task manager to shim manager
- [cri] Implement k8s 1.23 CRI Pod Sandbox and Container Stats (#6113)
- test: Add grace period for restart monitor test (#6200)
9bfec3980
test: Add grace period for restart monitor test
- integration: Enables TestRuntimeHandler for Windows (#6179)
0ba3532f5
integration: Enables TestRuntimeHandler for Windows
- Add mkdir on Dockerfile (#6171)
82cb0a63e
Add mkdir on Dockerfile
- sys/reaper: avoid leaky goroutine when exec timeout (#6189)
6ee8577e5
sys/reaper: avoid leaky goroutine when exec timeout
- adds additional debug out to timebox cni setup (#6184)
ea8978810
adds additional debug out to timebox cni setup
- converter: Allow hooks during image conversion (#6176)
f0d3ea96c
converter: Allow hooks during image conversion
- compression: support zstd with skippable frame (#6177)
6fa9f22fa
compression: support zstd with skippable frame
- integration: Enables TestVolumeCopyUp for Windows (#6182)
fb4432c24
integration: Enables TestVolumeCopyUp for Windows
- integration: Enable some tests for Windows (part 2) (#6121)
830b3c26e
integration: Enable some tests for Windows (part 2)- integration: Enable some tests for Windows (#6085)
602018900
integration: Enable some tests for Windows
- Update doc to version 2 syntax (#6125)
ebc5cf19a
feat(doc): update to version 2 syntax
- fix shim reaper wait command execute blocked (#6166)
3e51312a6
fix shim reaper wait command execute blocked
- content: close stream after commit request (#6145)
010a9e2bc
content: close stream after commit request
- Generating token options with each scope as a separate string. (#6165)
- vendor: Updates go-cni (#6167)
96018b7db
vendor: Updates go-cni
- commands: Enables task metrics for Windows (#6159)
5b222d54a
commands: Enables task metrics for Windows
- vendor: update moby/sys for darwin support (#6149)
b8f3ebb03
vendor: update moby/sys for darwin support
- Prepare v1.6.0-beta.1 (#6144)
- bump cni to spec v1.0.0 (#6136)
a217b5ac8
bump CNI to spec v1.0.0
- Inject otel traces to grpc client. (#5992)
294143bf3
Inject otel traces to grpc client.
- client: expose (*image).platform (#6142)
cd2f2b0af
client: expose (*image).platform
- Adding documentation for Core Scheduling (#6128)
3b73922fb
feat(doc): add Core Scheduling documentation
- Ensure namespace is proxied to grpc/ttrpc plugins (#6130)
130a9c7dd
Ensure namespace is proxied to grpc/ttrpc plugins
- fix #6054 MaxConcurrentDownloads is not effect when Unpack is true (#6109)
- Output a warning for label image labels instead of erroring (#6124)
2a8dac12a
Output a warning for label image labels instead of erroring
- Fix spelling mistake in Windows snapshotter (#6132)
c18c2e735
Fix spelling mistake in Windows snapshotter
- Windows: Cleanup rm- prefixed layers (#6126)
ca35f4e82
Windows: Cleanup rm- prefixed layers
- cleanup deprecated package
io/ioutil
(#6118)1f1cad391
io/ioutil package has been deprecated in Go 1.16 that replaces io/ioutil functions
- close Writer after use which may memory leak (#6115)
46be06937
close Writer after use which may leak mem
- Adds Windows resource limits support (#5778)
2bc77b8a2
Adds Windows resource limits support
- Prepare release notes for v1.6.0-beta.0 (#6098)
1abe50512
Prepare release notes for v1.6.0-beta.0
- Add error message to in TestContainerdRestart integration test (#6105)
c5947557d
Add error message to in TestContainerdRestart integration test
- Fix typo in the NewContainer function documentation (#6110)
072a7074b
Fix typo in the NewContainer function documentation
- Update cgroups to v1.0.2 (#6104)
18d483b23
Update cgroups to v1.0.2
- btrfs: verify file content after mount (#6100)
ac2df3ba9
test: check file content after mount
- Update test timeout based on recent cancellations (#6107)
4ed3c524c
Update test timeout based on recent cancellations
- Check the pid in cri test teardown (#6106)
- add runc shim support for sched core (#6011)
- integration: Enables Windows containerd restart test (#5579)
abf4de498
integration: Enables Windows containerd restart test
- vendor: Bump hcsshim to 0.9.0 (#6099)
46b152f81
vendor: Bump hcsshim to 0.9.0
- [cri] Add CNI conf based on runtime class (#4695)
55893b9be
Add CNI conf based on runtime class
- Update Go to 1.17.2 (#6102)
de1a39bf3
Update Go to 1.17.2
- integration: Adds test for multilayer image import (#5933)
7a7a9a282
integration: Adds test for multilayer image import
- runtime: should fail fast if dial error on shim (#6031)
f7658e37d
runtime: should fail fast if dial error on shim
- Fixes Windows containers with image volumes (#6034)
791e175c7
Windows: Fixes Windows containers with image volumes
- run
gofmt
with GO 1.17 (#6094)3a713811b
rungofmt
with Go 1.17
- pkg/cap: remove an outdated comment (#6088)
703b86533
pkg/cap: remove an outdated comment
- Update go otel 1.0.1 (#6066)
1ee2bff0e
Update go otel 1.0.1
- Update ADOPTERS.md with additional uses (#6086)
c528d2c39
Update ADOPTERS.md with additional uses
- modify the way for checking cos (#6082)
b9a0c5080
modify the way for checking cos
- Fuzzing: Add fuzzers + small modifications (#5915)
65f6a896c
Fuzzing: Add 4 fuzzers + small modifications
- Fixes for Windows CI (#6081)
- Merge Github Security Advisory GHSA-c2h3-6mxw-7mvq
- task service: return known error type (#6079)
02e77bcdc
task service: return known error type
- refactor: move from io/ioutil to io and os package (#5973)
50da67359
refactor: move from io/ioutil to io and os package
- fix: import from k8s.io/utils/clock instead (#6076)
- feat: enable integration cri remote client to call with grpc calloptions (#6069)
d16942cf1
feat: enable cri remote client to call with grpc calloptions
- cleanup k8s ansible yaml (carry for #5713) (#6074)
f6b7e07fd
cleanup k8s ansible yaml (carry for https://github.com/jayonlau jayonlau@gmail.com)
- feat: support import image for specific platform (#6070)
- Update mirror images to take target image name (#6065)
67b883146
Update mirror images to take target image name
- fix: make exec-id flag required in exec command (#6059)
e6ddffc2a
fix: make exec-id flag required in exec command
- images: enable converter to uncompress zstd (#6052)
09c9270fe
images: enable converter to uncompress zstd
- replace deprecated function with Domain and Path (#5922)
694a00754
replace deprecated function
- integration: Adds Windows HostProcess tests (#5853)
f42513112
integration: Adds Windows HostProcess tests
- Fix main branch build is broken (#6047)
224454062
Fix main branch build is broken
- Add open telemetry logging hook for logrus (#6003)
45c3453a7
Add open telemetry logging hook for logrus
- Change
oci.WithUser
behavior for LCOW (#6023)50a568595
Change oci.WithUser behavior for LCOW
- switch usage directly to errdefs.(ErrAlreadyExists and ErrNotFound) (#5946)
fcffe0c83
switch usage directly to errdefs.(ErrAlreadyExists and ErrNotFound)
- import: Raise error if the imported image is filtered out (#5926)
e087b47e9
import: Raise error if the imported image is filtered out
- Fix panic in metadata content writer on copy error (#6043)
b9cf0d75a
Fix panic in metadata content writer on copy error
- Move tracing to plugin (#6001)
084387e0b
Move tracing to plugin
- ctr: Fixes Windows image import (#5916)
6b0b64a51
ctr: Fixes Windows image import
- update open go.opentelemetry.io v1.0.0 to fix import path (#6017)
483d2e947
go.mod: update opentelemetry modules to v1.0.0
- fix error string format (#5979)
498e5b27f
fix error string format
- Add github action to mirror image (#6036)
407d60694
Add github action to mirror image
- add current process state to the error message (#6027)
16f3d67b5
add current process state to the error message
- FreeBSD: fix tar headers & the nil check on getxattr (#5991)
2bffb5f9b
FreeBSD: fix tar headers & the nil check on getxattr- gha: collect VMs' IP addresses (#6035)
97df73004
gha: collect Vagrant VMs' IP addresses
- bump continuity and console version that remove pkg/errors (#6033)
7854e0bff
bump continuity and console version that remove pkg/errors
- import: Add option to prevent duplicated digest image (#5997)
6875aa5d3
import: Add option to skip creating digest image
- ctr namespaces: improve usage string (#5998)
16d3f48a2
ctr namespaces: improve usage string
- bump console version to v1.0.3 that remove pkg/errors (#6028)
a68fb7add
bump console version to v1.0.3 that remove pkg/errors
- Use github images for integration tests (#6032)
3e72e335f
Use github images for integration tests
- Fix typo (#5995)
8596d1188
Fix typo
- Enable image config labels in ctr and CRI container creation (#6012)
f40df3d72
Enable image config labels in ctr and CRI container creation
- Make sure exit signals trigger an exit during init (#5970)
2fecf5b02
Make sure exit signals trigger an exit during init
- task delete: Closes task IO before waiting (#5974)
55faa5e93
task delete: Closes task IO before waiting
- CI: bump up crun to 1.0 (#5985)
f700ae873
CI: bump up crun to 1.0
- seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted) (#5982)
55923daa9
seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted)
- Update to Go 1.17.1 (#5990)
73dbbf5bf
Update to Go 1.17.1
- CI: Switch to available latest images (#5987)
6d961f967
CI: Switch to available latest images
- add xfs support to devicemapper snapshotter (#5610)
91b64c58b
add xfs support to devicemapper snapshotter
- Fixes task kill --force on Windows (#5956)
57e10439d
Fixes task kill --force on Windows
- Add support for shim plugins (#5817)
8d135d284
Add support for shim plugins
- vendor: update continuity for darwin support (#5976)
8ff8b1b82
vendor: update continuity for darwin support
- replace uses of os/exec with golang.org/x/sys/execabs (#5906)
2ac996840
replace uses of os/exec with golang.org/x/sys/execabs
- complete integration test for pulling image with labels (#5972)
16cd6ed13
Additional integration tests for pulling image with labels
- Fix content copy to not ignore unexpected EOF (#5966)
2458afeb1
Fix content copy to not ignore unexpected EOF
- add ip_pref CNI options for primary pod ip (#5964)
1efed4309
add ip_pref CNI options for primary pod ip
- cri: add devices for privileged container (#5939)
756f4a314
cri: add devices for privileged container
- sandbox: Allows the sandbox to be deleted in NotReady state (#5954)
24cec9be5
sandbox: Allows the sandbox to be deleted in NotReady state
- pin protobuild version to tag (#5969)
9954147c0
pin protobuild version to tag
- Add metric exposing build version&revision (#5965)
- Feature: containerd-cri support LinuxContainerResources.Unified (#5627)
- integration: investigate TestRestartMonitor's failure (#5861)
f7b1ceb9f
integration: investigate TestRestartMonitor's failure
- Use issue forms for bug reporting (#5917)
- cri: patch update image labels (#5945)
2bcd6a4e8
cri: patch update image labels
- darwin: runtime support (#5936)
- Update RELEASES.md (#5858)
7826a21ac
Update RELEASES.md
- archive: Add WriteDiff error logs (#5949)
ccc5ee303
archive: Add WriteDiff error logs
- replace deprecated Dialer with ContextDialer (#5958)
8e850bc0f
replace deprecated Dail with DailContext
- Add WS2022 support in Windows Periodic tests (#5951)
aeea697d8
Add WS2022 support in Windows Periodic tests
- Content fuzzer: Clean up temp store dir (#5943)
96ec0b6f3
content fuzzer: Clean up tempdir
- using Hosts replace deprecated field (#5944)
789abc936
using Hosts replace deprecated field
- fix document non-synchronous (#5947)
820bd9269
fix document non-synchronous in crictl.md
- go.mod: Update hcsshim to v0.8.21 (#5929)
1dd0d59b7
go.mod: Update hcsshim to v0.8.21
- Makefile.linux: build on RISC-V with PIE (#5937)
eb2530be8
Makefile.linux: build on riscv with PIE
- Fix cwd flag for
ctr tasks exec
(#5932)27046a9e0
Fix cwd flag forctr tasks exec
- Update Pause image in tests & config (#5927)
6d3d34b85
Update Pause image in tests & config
- cri: Devices ownership from SecurityContext (#5122)
e0f8c04da
cri: Devices ownership from SecurityContext
- Fix pull fails on unexpected EOF (#5921)
7bc5aa74c
Fix pull fails on unexpected EOF
- Fix dir support for devices (#5845)
- windows: The DefaultSpec platform should match the Default matcher (#5914)
e2c769d6f
windows: The DefaultSpec platform should match the Default matcher
- Add RunAsUserName functionality for the Windows pod sandbox container (#5865)
25644b461
Add RunAsUserName functionality for the Windows Pod Sandbox Container
- bump up runc v1.0.2 (#5899)
- Run
go fmt
with Go 1.17 (#5903)d3aa7ee9f
Rungo fmt
with Go 1.17
- go.mod: github.com/pelletier/go-toml v1.9.3 (#5905)
429296910
go.mod: github.com/pelletier/go-toml v1.9.3
- cri: filter selinux xattr for image volumes (#5902)
c3609ff4c
cri: filter selinux xattr for image volumes
- Add Windows HostProcess Support (#5131)
79b369a0b
Added windows hostProcess cni skip
- script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0 (#5897)
4dd5ca70f
script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0
- Update to Go 1.17 (#5889)
- integration: fix TestContainerPids (#5896)
acb81bbda
integration: fix TestContainerPids
- [ctr] add HOSTNAME env for host network (#5891)
6f60b3016
[ctr] add HOSTNAME env for host network
- Fuzzing: Add fuzzer (#5886)
c9b1b2fd5
Fuzzing: Add fuzzer
- Make Cgroup driver configurable in gce configure script (#5884)
9e1b57ca0
Add env for SystemdCgroup driver
- Allow expanded DNS configuration (#5878)
1224060f8
Allow expanded DNS configuration
- Fuzzing: Add 4 fuzzers (#5863)
538d93d2f
Fuzzing: Add 4 fuzzers
- Cleanup v2 shim (#5813)
d30d897ef
Cleanup v2 shim
- Fuzzing: Add experimental version of container fuzzer (#5840)
- add cpu-shares to ctr (#5846)
d2f3b7146
add cpu-shares to ctr
- docs: rename master to main (it was opposite on the actual commit) (#5847)
bc4cea4e4
docs: rename main to master
- content: return the error with its timestamp (#5849)
a3d6edc0e
content: return the error with its timestamp
- Fix bad
make protos
failure (#5857)82fe0db9a
Fix badmake protos
failure
- replace cri and point to new location (#5851)
30b832e49
archive docs and point to new location fix #containerd/cri#1624
- docs: remove FOSSA's badge (#5856)
1c47fb17f
docs: remove FOSSA's badge
- BUILDING.md: remove some bits about building runc (#5850)
- go.mod: update k8s deps to v1.22.0 (#5836)
e634f04d8
go.mod: update kubernetes to v1.22.0
- [Scripts] Add trap to cri-integration test script (#5852)
e6538b8bc
Add trap to cri-integration test script
- docs: list all snapshotter-related build flags (#5848)
a5468852f
docs: list all snapshotter-related build flags
- Move plugin context events into separate plugin (#5835)
0a0621bb4
Move plugin context events into separate plugin
- Fix Linux CI Linter using Go 1.15.14 (#5839)
534685f95
Fix Linux CI Linter using go 1.15.14
- Update Go to 1.16.7 (#5842)
42a28ad2c
Update Go to 1.16.7
- Cleanup CI (#5838)
10eab21a4
Cleanup CI
- Remove redundant build tags (#5834)
6f027e38a
Remove redundant build tags
- Change default directories on Darwin (#5830)
7917da764
Change default directories on Darwin
- [otel-tracing] Initial opentelemetry support (#5731)
- Fuzzing: Fix for OSS-fuzz issue 36825 (#5829)
c3c276ae1
Fuzzing: Fix for OSS-fuzz issue 36825
- Fuzzing: Add two fuzzers (#5825)
41a04246f
Fuzzing: Add two more fuzzers
- scripts: linting fixes, and remove support for Debian Jessie (as it's EOL) (#5760)
- platforms: Format(): use path.Join() instead of joinNotEmpty() (#5821)
f2c3122e9
platforms: Format(): use path.Join() instead of joinNotEmpty()
- Fuzzing: Remove panics of container_fuzzer (#5823)
2c699cc35
Fuzzing: Remove panics of container_fuzzer
- Fuzzing: Add container fuzzer (#5785)
- runtime: fix the issue of create new socket with abstract address (#5746)
4ab3e7a53
runtime: fix the issue of create new socket with abstract address
- mergo: Upgrade to 0.3.12 to fix panic (#5809)
ce437864b
mergo: Upgrade to 0.3.12 to fix panic
- ci: install criu from PPA (#5802)
d1e868c83
ci: install criu from PPA
- Update release workflow to upload binary without CNI (#5144)
- Enable critest on Windows Periodic Jobs (#5725)
23bc3db91
Enable critest on Windows
- Script to check if entries in go.mod files are in sync (#5792)
43117cf91
Script to check if entries in go.mod files are in sync
- Add a sharedNamespace label (#5043)
e692a0192
Add shared content label to namespaces
- platforms: add "ios" as known OS, "loong64" as known ARCH (#5784)
2405671d4
platforms: add "ios" as known OS, "loong64" as known ARCH
- Updates the location of protobuf downloads (#5804)
3a8622e30
Updates the location of protobuf downloads in docs
- Update protobuf install to use correct repository (#5803)
0d9393650
Update protobuf install to use correct repository
- overlay: expose upperdir location of each snapshot via an optional label (#5624)
67406b373
overlay: add an optional label of upperdir location of each snapshot
- Support SIGRTMIN+n signals (#5693)
1d3d08026
Support SIGRTMIN+n signals
- respect context timeout in shim binary call (#5800)
7a10fd4fc
respect context timeout in shim binary call
- Introduce a new go module - containerd/api for use in standalone clients (#5716)
494b940f1
Introduce a new go module - containerd/api for use in standalone clients
- grpc config add options tcp_client_ca_cert (#5606)
63fe34add
grpc config add options tcp_tls_ca
- integration: Windows volume-copy-up images (#5162)
16deba098
integration: Windows volume-copy-up images
- add CRI support matrix to RELEASES.md (#5795)
4fdb88464
add CRI support matrix to RELEASES.md
- adding a little more clarity (#5794)
b5fc7846c
adding a little more clarity
- update gotestsum to v1.7.0 (#5793)
18d6cc1b0
update gotestsum to v1.7.0
- Discard blocks when removing a thin device (#5756)
f1d79d33b
Discard blocks when removing a thin device
- Makefile: fix passing build tags (#5590)
- Add runtime label to metrics (#5744)
efa8ab715
Add runtime label to metrics
- interface about shim build check (#5745)
0d45ac14e
interface about shim build check
- integration: log all processes to investigate the test failure (#5775)
00d52bb15
integration: log all processes to investigate the test failure
- Fuzzing: Add archive fuzzer (#5779)
2556aac67
Fuzzing: Add archive fuzzer
- Add docker.Fetch fuzzer (#5687)
0789a0c02
Add docker fetch fuzzer
- Support custom compressor for walking differ (#5735)
b483177ee
Support custom compressor for walking differ
- remotes/docker/pusher.go: Fix missing Close() on push to docker remote (#5770)
53ec1abec
remotes/docker/pusher.go: Fix missing Close()
- remotes/docker/fetcher.go: Fix missing Close() on fetch from docker remote (#5769)
67d07fe5c
remotes/docker/fetcher.go: Fix missing Close()
- Update cpuguy83/go-md2man binary to v2.0.1 (#5771)
d2b6d192d
Update cpuguy83/go-md2man binary to v2.0.1
- Refactor / optimize contrib/Dockerfile.test (#5750)
9537bc265
Dockerfile.test: build containerd in separate stage36be5ef3a
Dockerfile.test: add GOLANG_IMAGE build arg to allow overriding8faacfca1
Dockerfile.test: clean up apt indexes after installing9f7e6335c
Dockerfile.test: build critools in a separate stage7ec8e2d36
Dockerfile.test: build cni in a separate stagef9f423c07
Dockerfile.test: standard directory to collect build aftifactse9f26eb87
Dockerfile.test: split dev stage, and optimize order25fada0cc
Dockerfile.test: skip curl, gcc, git and make install546538971
install-critools: make sure DESTDIR exists
- update gotestsum to current master (#5754)
603962bc8
update gotestsum to current master
- Merge Github Security Advisory GHSA-c72p-9xmj-rx3w
bc4e416c8
Add test for archive breakout test for lchmod
- Use systemd cgroup driver for Kubernetes e2e tests with cgroupsv2 (#5755)
150e07b64
Use systemd cgroup driver for cgroupv2 tests
- update runc to v1.0.1 (#5751)
- runtime: runc v2: remove redundant validation (#5737)
dbef1d56d
runtime: runc v2: remove redundant validation
- Add timestamp to flaky restart monitor test (#5727)
- Update Go to 1.16.6 (#5722)
- client: surface a connection error more clearly (#4447)
73d28ddeb
client: surface a connection error more clearly
- Fix missing Body.Close() calls on push to docker remote (#5712)
894b6ae39
Fix missing Body.Close() calls on push to docker remote
- remove pkg/cri/platforms package (#5710)
ac75071b4
remove pkg/cri/platforms package
- Allow WithServices to use custom implementations (#5709)
0a8802df6
Allow WithServices to use custom implementations
- [Vendor] Update hcsshim to 0.8.18 (#5673)
a81f05f36
[Vendor] Update hcsshim to 0.8.18
- test integration: Adds a test that restarts a failed container (#5578)
04ab4418f
test integration: Adds a test that restarts a failed container
- [CRI] move up to CRI v1 and support v1alpha in parallel (#5619)
- gha: make release workflow work in forks (#5682)
4c6e4a06f
gha: make release workflow work in forks
- Add unit test for plugin (#5666)
3a0b9ec6b
Add unit test for plugin
- Dockerfile.test: add "cri-in-userns" (aka rootless) test stage (#5700)
aefabe546
Dockerfile.test: add "cri-in-userns" (aka rootless) test stage
- Update for distribution spec 1.0 (#5676)
- archive: cleanup lchmod logic (#5702)
53835221f
Cleanup lchmod logic in archive
- Install specific golang version in Windows CI. (#5571)
419d616fe
Install specific golang version in Windows CI.
- Add ctr command label in NewContainerOpts (#5660)
bda7b5866
feat: Add snapshotter label to the new snapshot for container.
- snapshot/devmapper: log exported methods correctly (#5655)
03ee45006
snapshot/devmapper: log exported methods correctly
- Makefile: fix DESTDIR and PREFIX concatenation (#5662)
2019a1e68
Makefile: fix DESTDIR and PREFIX concatenation
- Cri integration cleanup (#5287)
- move sys.FMountat() into mount package and un-export (#5641)
- sandbox: send pod UID to CNI plugins as K8S_POD_UID (#5640)
dac2543a0
sandbox: send pod UID to CNI plugins as K8S_POD_UID
- sys: remove StatAtime(), StatCtime(), StatMtime() and StatATimeAsTime() utils (#5639)
5a0beaefb
sys: remove StatAtime(), StatCtime(), StatMtime() and StatATimeAsTime() utils
- content/local: inline sys.StatATimeAsTime() (#5633)
63c185da9
content/local: inline sys.StatATimeAsTime()
- allow multi gpu to be specified via ctr (#5636)
- fixing some doc links (#5629)
560e7d479
fixing some doc links
- Sync integration/go.mod with root go.mod (#5623)
d9694b297
Sync integration/go.mod with root go.mod
- archive: Expose ChangeWriter to allow customized diff computing (#5615)
4a46ea2f4
archive: Expose ChangeWriter to allow customized diff computing
- CI: Switch to the available latest images (#5625)
- Re-enable criu in main integration runs (#5614)
394f86475
Re-enable criu in main integration runs
- runtime,v2: Enable debug when containerd is on debug+ log level (#5617)
87a2e0b2a
runtime,v2: Enable debug when containerd is on debug+ log level1bbee573a
github.com/golang/protobuf/proto is deprecated91c8fa452
Update github.com/golang/protobuf from v1.3.5 to v1.4.3b7e79dc5a
Update google.golang.org/grpc from v1.27.1 to v1.38.08d2e156dd
Increase golangci-lint timeout
- ctr flags of container rootfs propagation (#5611)
- Update gotestsum to add timestamps to junit output (#5612)
bfbebf02b
Update gotestsum to add timestamps to junit output
- Allow to pass --no-cgroups option to nvidia-container-cli (#5604)
9c01fe20d
Allow to pass --no-cgroup option to nvidia-container-cli
- Makefile: FHS conformant manpage installation pathes (#5577)
77374e8b3
Makefile: FHS conformant manpage installation pathes
- Add proper Go version before project checks (#5594)
3ab974433
Add proper Go version before project checks
- Enable cri-integration in Windows Periodic Tests (#5580)
af5a130bc
Enable cri-integration in Windows Periodic Tests
- adds explanation for seccomp unset/unconfined default vs runtime default (#5573)
7a2b04758
adds explanation for seccomp unset/unconfined default vs runtime default
- Fix cleanup context of teardownPodNetwork (#5569)
728743eb2
Fix cleanup context of teardownPodNetwork
- update integration/client go.sum (#5572)
01585595a
update integration/client go.sum
- Revert diff/walking error change (#5566)
69f43d458
Revert diff/walking error change
- Update opencontainers/selinux to v1.8.2 (#5562)
9a451d103
Update opencontainers/selinux to v1.8.2
- fix invalid validation error checking (#5565)
014748bc0
fix invalid validation error checking
- diff/walking: fix defer cleanup (#5551)
558fdc680
diff/walking: fix defer cleanup
- Windows periodic job: Add creation timestamp to RG (#5559)
5f0fc4893
Add creation timestamp to RG
- Fix error case in Windows layer cleanup (#5328)
f8538b5e1
Fix error case in Windows layer cleanup
- Use DeactivateLayer to unlock layers that we cannot rename (#5422)
- tests: Symlink volume tests (#5284)
- Makefile: fix DESTDIR environment variable behaviour (#5535)
- Change Wrapf of non-error to an actual error (#5560)
- scrub the stale TODO (#5536)
- docs: explicitly mention containerd's Prometheus path (#5554)
- integration: Cleanup containerd on test teardown (#5553)
- docs/cri: update links (#5548)
- Update Windows periodic tests (#5544)
- Add CI periodic Windows Jobs. (#5165)
- Rename atomicWrite to writeToCompletion (#5273)
- Do not run btrfs tests if btrfs kernel module is not loaded (#5539)
- Fix incorrect UA used for registry authentication (#5533)
- ctr: parse mount options with embedded = character (#5531)
- Fix mounts for FreeBSD (#5472)
- ctr: make exec pty behavior consistent with run (#5527)
- Makefile: use $@ for target file names (#5534)
- Fix small typo (#5528)
- Don't check for apparmor_parser to be present (#5519)
- Remove useless lines (#5520)
- Fixed typos in docs (#5509)
- Try next mirror in case of non-404 errors, too (#5275)
- bump runc version to v1.0.0-rc95 (#5514)
- update runc binary to v1.0.0-rc95 (#5511)
- Bump github.com/Microsoft/go-winio from 0.4.15 to 0.5.0 (#5508)
- Bump github.com/opencontainers/selinux from 1.8.0 to 1.8.1 (#5507)
- Makefile: allow overriding install command via environment (#5493)
- tests: Adds support for Windows cri-integration tests (#5163)
- Update docker resolver to authorize redirects (#5504)
- bump hcsshim version to v0.8.17 (#5505)
- Release binary update for imgcrypt (#5498)
- cri-integration tests: Pull images once (#5313)
- plugin: optimize the check for the last registration (#5440)
- metadata: modify NewLeaseManager to return leases.Manager (#5465)
- Skip TLS verification for localhost (#5100)
- Makefile: make sure manpages are built before install-man (#5492)
- adds description for hosts.toml (#5309)
- Prepare default branch rename (#5459)
- Update runc to rc94 (#5473)
- Fix
content.ReaderAt
close (#5468) - Update releases doc with updated support timeline (#5466)
- tests: add test for adaptor (#5452)
- Makefile: allow overriding go command by environment (#5450)
- update to new cri-tools make install (#5462)
- Update Go to 1.16.4 (#5461)
- [release/1.5] go.mod: cut circular dependency on github.com/containerd/containerd (#5457)
- oci: fix WithDevShmSize (#5063)
- [release/1.5] cherry-pick: windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink (#5454)
- windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink (#5411)
- doc: add missing namespaces package (#5448)
- update seccomp version (#5445)
- Update golang.org/x/sys to add linux/ppc support (#5436)
- go.mod: cut circular dependency on github.com/containerd/containerd (#5441)
- Fix different registry hosts referencing the same auth config. (#5446)
Changes from containerd/cgroups
24 commits
- cgroup: Optionally add process and task to a subsystems subset (#203)
80a7821
cgroup: Optionally add process and task to a subsystems subset
- replace pkg/errors from vendor (#208)
0072297
replace pkg/errors from vendor
- cgroup.go: avoid panic on nil interface (#207)
d55de5d
cgroup.go: avoid panic on nil interface
- Improvements on cgroup v2 support (#204)
- v2: remove unimplemented errors and ErrorHandler, IgnoreNotExist (#201)
- v1: reduce duplicated code (#202)
4fe70f3
v1: reduce duplicated code
- cgroup v1: implement AddProc() (#200)
6659093
cgroup v1: implement AddProc()
- Rename branch from master to main (#199)
7254c12
Rename branch from master to main
- utils: export ParseCgroupFile() (#197)
23b5120
utils: export ParseCgroupFile()
- go.mod: coreos/go-systemd/v22 v22.3.2 to prepare for deprecations (#194)
f8918cf
go.mod: coreos/go-systemd/v22 v22.3.2 to prepare for deprecations
- Use /proc/partitions to get device names (#195)
1a4509d
Use /proc/partitions to get device names
Changes from containerd/console
Changes from containerd/continuity
20 commits
- Copy Windows file metadata (#188)
2cd7d24
Copy Windows file metadata
- fix fmt.Errorf("%w", err) on err == nil (#187)
23a11df
fix fmt.Errorf("%w", err) on err == nil
- Remove direct dependency on github.com/pkg/errors (#185)
- Fix darwin issues (#186)
- go.mod: bazil.org/fuse v0.0.0-20200407214033-5883e5a4b5125 (#161)
c7d2029
go.mod: bazil.org/fuse v0.0.0-20200407214033-5883e5a4b5125
- fs/stat: add FreeBSD, and cleanup some nolint-comments (#184)
- Rename branch from master to main (#182)
0175d70
Rename branch from master to main
- testutil/loopback: print more debug info (#180)
e10d519
testutil/loopback: print more debug info
Changes from containerd/go-cni
15 commits
- remove: Continue on "not found" errors (#74)
eff9f5b
remove: Continue on "not found" errors
- go.mod: github.com/containernetworking/cni v1.0.1 (#72)
9cfa666
go.mod: github.com/containernetworking/cni v1.0.1
- remove direct dependency on github.com/pkg/errors (#71)
b6c559f
remove direct dependency on github.com/pkg/errors
- update CNI to v1.0.0 (#70)
- Rename branch from master to main (#69)
591b0b6
Rename branch from master to main
- result: change Raw from a struct field to a method (#68)
6c993c3
result: change Raw from a struct field to a method
- result: expose raw result (#67)
bc7198b
result: expose raw result
Changes from containerd/ttrpc
34 commits
- Add protoc-gen-go-ttrpc (#96)
6eabacc
Add protoc-gen-go-ttrpc
- client: Handle sending/receiving in separate goroutines (#94)
4f0aeb5
client: Handle sending/receiving in separate goroutines
- Run Protobuild in GitHub Actions (#95)
- replace pkg/errors (#93)
81faa3e
replace pkg/errors from vendor
- Rename branch from master to main (#86)
a143311
Rename branch from master to main
- Make "go test" and "go build" work on macOS (#85)
- Return Unimplemented when services or methods are not implemented (#83)
fede9db
Return Unimplemented when services or methods are not implemented
- Remove "Very new" and checked TODO items (#84)
dcc7d39
Remove "Very new" and checked TODO items
- removing glide from ignore (#82)
2776d3f
removing glide from ignore
- go.mod: update dependencies (#79)
- remove travis, add codecov badge (#78)
- Use GitHub Actions for CI (#77)
5bab91b
Use GitHub Actions for CI
- go.mod: sirupsen/logrus v1.7.0 (#76)
Dependency Changes
- github.com/AdaLogics/go-fuzz-headers 6c3934b029d8 new
- github.com/Microsoft/go-winio v0.4.17 -> v0.5.1
- github.com/Microsoft/hcsshim v0.8.16 -> v0.9.1
- github.com/bits-and-blooms/bitset v1.2.0 new
- github.com/blang/semver v3.5.1 new
- github.com/cenkalti/backoff/v4 v4.1.1 new
- github.com/cilium/ebpf v0.4.0 -> v0.6.2
- github.com/containerd/cgroups v1.0.1 -> v1.0.2
- github.com/containerd/console v1.0.2 -> v1.0.3
- github.com/containerd/continuity v0.1.0 -> 8e53e7cac79d
- github.com/containerd/go-cni v1.0.2 -> aa8bf14323a5
- github.com/containerd/ttrpc v1.0.2 -> v1.1.0
- github.com/containernetworking/cni v0.8.1 -> v1.0.1
- github.com/containernetworking/plugins v0.9.1 -> v1.0.1
- github.com/go-logr/logr v0.2.0 -> v0.4.0
- github.com/golang/groupcache 8c9f03a8e57e -> 41bb18bfe9da
- github.com/golang/protobuf v1.3.5 -> v1.5.2
- github.com/google/go-cmp v0.5.4 -> v0.5.6
- github.com/grpc-ecosystem/go-grpc-middleware v1.3.0 new
- github.com/grpc-ecosystem/grpc-gateway v1.16.0 new
- github.com/imdario/mergo v0.3.11 -> v0.3.12
- github.com/json-iterator/go v1.1.10 -> v1.1.11
- github.com/moby/spdystream v0.2.0 new
- github.com/moby/sys/signal v0.6.0 new
- github.com/opencontainers/image-spec v1.0.1 -> 693428a734f5
- github.com/opencontainers/runc v1.0.0-rc93 -> v1.0.3
- github.com/opencontainers/runtime-spec e6143ca7d51d -> 1c3f411f0417
- github.com/opencontainers/selinux v1.8.0 -> v1.8.2
- github.com/pelletier/go-toml v1.8.1 -> v1.9.3
- github.com/prometheus/client_golang v1.7.1 -> v1.11.0
- github.com/prometheus/common v0.10.0 -> v0.26.0
- github.com/satori/go.uuid v1.2.0 new
- github.com/sirupsen/logrus v1.7.0 -> v1.8.1
- github.com/spf13/pflag v1.0.5 new
- github.com/stretchr/testify v1.6.1 -> v1.7.0
- github.com/vishvananda/netlink f5de75959ad5 new
- github.com/vishvananda/netns 2eb08e3e575f new
- go.etcd.io/bbolt v1.3.5 -> v1.3.6
- go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.24.0 new
- go.opentelemetry.io/otel v1.0.1 new
- go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.0.1 new
- go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.0.1 new
- go.opentelemetry.io/otel/sdk v1.0.1 new
- go.opentelemetry.io/otel/trace v1.0.1 new
- go.opentelemetry.io/proto/otlp v0.9.0 new
- golang.org/x/net e18ecbb05110 -> e898025ed96a
- golang.org/x/sync 09787c993a3a -> 036812b2e83c
- golang.org/x/sys 47abb6519492 -> 69cdffdb9359
- golang.org/x/term 7de9c90e9dd1 -> 6a3ed077a48d
- golang.org/x/text v0.3.4 -> v0.3.6
- golang.org/x/time 3af7569d3a1e -> 1f47c861a9ac
- google.golang.org/appengine v1.6.5 -> v1.6.6
- google.golang.org/grpc v1.27.1 -> v1.41.0
- google.golang.org/protobuf v1.27.1 new
- gopkg.in/yaml.v3 9f266ea9e77c -> 496545a6307b
- k8s.io/api v0.20.6 -> v0.22.0
- k8s.io/apimachinery v0.20.6 -> v0.22.0
- k8s.io/apiserver v0.20.6 -> v0.22.0
- k8s.io/client-go v0.20.6 -> v0.22.0
- k8s.io/component-base v0.20.6 -> v0.22.0
- k8s.io/cri-api v0.20.6 -> v0.23.0-alpha.4
- k8s.io/utils 67b214c5f920 -> cb0fa318a74b
Previous release can be found at v1.5.0