opencontainers/runc v1.3.0-rc.2

runc v1.3.0-rc.2 -- "Eppur si muove."

on GitHub

This is the second release candidate of the runc 1.3.0 release. It
contains a few fixes for issues found in rc.1.

This is the first release series that will follow our new release
policy, meaning that users should expect runc 1.3.0 to be released at
the end of April 2025, at which point the support policy for the runc
1.2.z branch will change. Please see the new RELEASES.md document for
more information.

Users are strongly encouraged to test our release candidates so we can
fix issues before the general release.

Fixed

• Use the container's /etc/passwd to set the HOME env var. After a refactor
  for 1.3, we were setting it reading the host's /etc/passwd file instead.
  (#4693, #4688)
• Override HOME env var if it's set to the empty string. This fixes a
  regression after the same refactor for 1.3 and aligns the behavior with older
  versions of runc. (#4711)
• Add time namespace to container config after checkpoint/restore. CRIU since
  version 3.14 uses a time namespace for checkpoint/restore, however it was not
  joining the time namespace in runc. (#4705)

Static Linking Notices

The runc binary distributed with this release are statically linked with
the following GNU LGPL-2.1 licensed libraries, with runc acting
as a "work that uses the Library":

• libseccomp

The versions of these libraries were not modified from their upstream versions,
but in order to comply with the LGPL-2.1 (§6(a)), we have attached the
complete source code for those libraries which (when combined with the attached
runc source code) may be used to exercise your rights under the LGPL-2.1.

However we strongly suggest that you make use of your distribution's packages
or download them from the authoritative upstream sources, especially since
these libraries are related to the security of your containers.

Thanks to the following contributors for making this release possible:

• Rodrigo Campos rodrigoca@microsoft.com
• Rudi Heitbaum rudi@heitbaum.com
• Kir Kolyshkin kolyshkin@gmail.com
• lifubang lifubang@acmcoder.com
• Akihiro Suda akihiro.suda.cz@hco.ntt.co.jp
• Andrei Vagin avagin@gmail.com

Signed-off-by: Kir Kolyshkin kolyshkin@gmail.com