kinvolk/manifest v2705.1.1

on GitHub

Security fixes

• Linux
  • CVE-2020-27835
  • CVE-2020-29661
  • CVE-2020-29660
  • CVE-2020-27830
  • CVE-2020-28588

Bug fixes

• The sysctl net.ipv4.conf.*.rp_filter is set to 0 for the Cilium CNI plugin to work (kinvolk/Flatcar#181)
• Package downloads in the developer container now use the correct URL again (kinvolk/Flatcar#298)
• networkd: avoid managing MAC addresses for veth devices (kinvolk/init#33)

Changes

• The sysctl default config file is now applied under the prefix 60 which allows for custom sysctl config files to take effect when they start with a prefix of 70, 80, or 90 (kinvolk/baselayout#13)
• Containerd CRI plugin got enabled by default, only the containerd socket path needs to be specified as kubelet parameter for Kubernetes 1.20 to use containerd instead of Docker (kinvolk/Flatcar#283)
• For users with a custom update server a machine alias setting in update-engine allows to give human-friendly names to client instances (kinvolk/update-engine#8)

Updates

• Linux (5.9.16)
• containerd (1.4.3)
• Docker (19.03.14)