- This release added support for systemd-delegated "cgroupfs" driver (v2 only). A pod is executed in a cgroup like
/user.slice/user-1001.slice/user@1001.service/u7s-rootlesskit.service/kubepods/burstable/podb2d6a0c9-95d3-4372-80e0-bce249a26f95/7bb48caa579ee164fee4e0c072aaf430c2ec7b5dc13d512a5f19ce037de010ab
on cgroup v2 hosts. - The installation script (
install.sh
) no longer needs--cgroup-manager
flag. - cgroupsPerQos is now supported.
- The patch for supporting "systemd" driver was removed.
- RootlessKit now unshares PIDNS, IPCNS, and UTSNS as well as UserNS, MountNS, and NetNS. All namespaces except TimeNS are now unshared.
Note: still no cgroup support for CRI-O yet
Build log: https://github.com/rootless-containers/usernetes/runs/1413643596