youki-dev/youki v0.7.0 on GitHub

What's Changed

💪 Improvements

feat(checkpoint): add CRIU version validation as prerequisite for checkpoint/restore by @nayuta723 in #3438
Support manage-cgroup-mode option for checkpoint by @donkomura in #3452
fix(3207, 3209) Difference between the exec command in runc and youki by @tommady in #3210
fix(checkpoint): delete container state after checkpoint without --leave-running by @nayuta723 in #3501
feat: add with_bundle() builder for init containers by @JosiahParry in #3502
[ID-Mapped Mount] Impl Channel & Message by @YamasouA in #3409
[ID-Mapped Mount] add idmapped mount spec validation by @YamasouA in #3572
fix(libcgroups): add /run/systemd/private fallback for dbus system connection by @nayuta723 in #3557
feat(libcgroups): rootless cgroup v2 support by @JosiahParry in #3609
Support --link-remap checkpoint option by @donkomura in #3618
feat(checkpoint): register external namespaces with CRIU by @nayuta723 in #3495
Update LinuxIntelRdt to align with runtime-spec by @tommady in #3523
fix(libcgroups): pids-limit is set to 0, change it to 1 by @moz-sec in #3634
feat(youki-deploy): add DaemonSet-based installer for installing youki on Kubernetes by @saku3 in #3526
support time namespace by @saku3 in #3550

🐛 Bug Fixes

fix duplicate mount entries on exec by @saku3 in #3432
fix: inherit config.json env vars in exec processes by @KevinKickass in #3439
Checking source file type with is_dir() in bind mount implementation by @logica0419 in #3484
fix(libcgroups): Set MemorySwapMax to 0 when memory::limit == memory::swap by @souk4711 in #3488
seccomp: fix multi-condition rule handling and follow runc for duplicate arg comparators by @saku3 in #3489
fix: validate process.terminal field against --console-socket option by @nayuta723 in #3528
fix: preserve mount flags for readonly remount of rootfs in init by @YawKar in #3536
fix: ratime and rnostrictatime mount options failing with EINVAL by @kechigon in #3467
fix(channel): split intermediate and init readiness channels by @uran0sH in #3504
fix: respect bundle option in youki spec command by @YawKar in #3543
fix(libcgroups): return typed error when systemd is not available by @SAY-5 in #3546
fix youki spec command overwrites the existing config.json by @tommady in #3555
fix: drop bounding caps by default if unset by @YawKar in #3554
Use process env for StartContainer hooks when without explicit hook env by @bells17 in #3470
fix: validation differences between youki and runc by @tommady in #3556
fix(libcontainer): consider gid_mappings when looking up id-map binaries by @tkshsbcue in #3624
fix(libcontainer): Bind mount detection should be based on bind/rbind options, not type == "bind" by @tommady in #3611
fix(libcontainer): scope pivot_root rslave to the old root only by @saku3 in #3621
fix: youki spec state vs runc spec state generated config differences by @tommady in #3645

📖 Documentation improvements

docs: add adopters and use cases page by @utam0k in #3458
fix(checkpoint): remove unimplemented options from help output by @nayuta723 in #3455
docs: update SECURITY.md with dedicated security contact email by @utam0k in #3492
docs: update logging guidance to reflect tracing usage by @saku3 in #3498
docs: add LF Projects copyright disclaimer by @saku3 in #3521
docs: promote @nayuta723 from Reviewer to Committer by @nayuta723 in #3642

🧪 Test improvements and Misc Fixes

Disable colors in logs by @stepancheg in #3433
[Bug]: Duplicate error and chain printing by @CarloQuick in #3419
test: remove runc skip for seccomp_notify and memory_policy by @nayuta723 in #3445
chore(deps): upgrade rust-criu to 0.5.0 and protobuf to 3.7.2 by @donkomura in #3446
docs(liboci-cli): add missing help descriptions to arguments and options by @xvchris in #3456
Fix logging for dropping capabilities by @stepancheg in #3436
contest: add checkpoint/restore integration tests by @nayuta723 in #3448
ci: install CRIU in containerd integration tests and skip checkpoint tests by @nayuta723 in #3475
Deduplicate e2e test hook helpers by @fspv in #3412
fix(cross): replace external apk-anywhere image with inlined Alpine apk in Dockerfile.musl by @saku3 in #3491
Add poststop_fail hook test by @fspv in #3407
fix: use correct fedora version number and deprecate riskv64 from lima-setup.sh by @gat786 in #3497
refactor: Use cargo autoinherit to factorize the dependencies by @lu-zero in #3477
chore: bump containerd to v2.2.3 and go to 1.24.3 by @tommady in #3509
ci: group wasmtime-related Dependabot updates by @saku3 in #3511
ci: remove unused cgroups v1 dind workflow steps by @saku3 in #3512
refactor: replace deprecated clap derive attributes with command and arg by @yan-ace62 in #3466
ci: build CRIU from source by @saku3 in #3520
docs: fix several typos in code, error messages, and docs by @Shion1305 in #3535
[Refactor] Use && operator in if-let conditions by @logica0419 in #3531
Add checkpoint/restore integration tests to contest by @tommady in #3493
test(dind): pin docker:dind to 29.4 until youki supports time namespace by @saku3 in #3539
fix: parse info parameters exactly by @immanuwell in #3541
add aarch64 bundle for integration test by @saku3 in #3530
bump oci-spec 0.10.0 by @saku3 in #3569
Skip namespaces that are not specified for the init process by @saku3 in #3551
fix(wasmedge): replace unwrap with proper error propagation in exec by @immanuwell in #3570
chore: update rust to v1.96.0 by @YJDoc2 in #3587
feat(contest): add reason for TestResult::Skipped by @donkomura in #3588
test(contest): add update cgroup v2 common limits integration test by @hayama17 in #3580
test(config): Implement libcontainer config methods failure test cases by @Scanf-s in #3602
fix(utils): reject network device names exceeding the kernel limit according to the kernel reference by @Scanf-s in #3608
test: convert mount_into_container and cgroup_v2 tests to fd-based mock by @saku3 in #3606
test(contest): add cpu update integration tests for cgroup v2 by @hayama17 in #3592
test(contest): add update pids limit integration test by @moz-sec in #3595
test(contest): add cgroup v2 CPU update tests by @hayama17 in #3614
fix(contest): avoid flaky MAC race in checkpoint netdevice test by @donkomura in #3640
test(libcontainer): Implemented mount_console, verify_inode unit tests by @Scanf-s in #3631
add killsig test by @YamasouA in #3612
prepare v0.7.0 by @nayuta723 in #3655
bump version to 0.7.0 and fix version-up regex in justfile by @nayuta723 in #3665

Other Changes

(auto merged) chore(deps): bump the patch group with 2 updates by @dependabot[bot] in #3425
chore(deps): bump uuid from 1.16.0 to 1.21.0 by @dependabot[bot] in #3427
chore(deps): bump tempfile from 3.24.0 to 3.25.0 by @dependabot[bot] in #3426
(auto merged) chore(deps): bump time from 0.3.45 to 0.3.47 by @dependabot[bot] in #3449
(auto merged) chore(deps): bump which from 8.0.0 to 8.0.2 in the patch group by @dependabot[bot] in #3450
(auto merged) chore(deps): bump quinn-proto from 0.11.13 to 0.11.14 by @dependabot[bot] in #3451
chore(deps): bump uuid from 1.21.0 to 1.22.0 by @dependabot[bot] in #3443
(auto merged) chore(deps): bump the patch group with 3 updates by @dependabot[bot] in #3457
(auto merged) chore(deps): bump lz4_flex from 0.12.0 to 0.12.1 by @dependabot[bot] in #3459
(auto merged) chore(deps): bump pathrs from 0.2.3 to 0.2.4 in the patch group by @dependabot[bot] in #3460
chore(deps): bump tempfile from 3.25.0 to 3.27.0 by @dependabot[bot] in #3462
(auto merged) chore(deps): bump tar from 0.4.44 to 0.4.45 in the patch group by @dependabot[bot] in #3465
(auto merged) chore(deps): bump env_logger from 0.11.9 to 0.11.10 in the patch group by @dependabot[bot] in #3471
chore(deps): bump uuid from 1.22.0 to 1.23.0 by @dependabot[bot] in #3474
chore(deps): bump wasmtime from 42.0.1 to 43.0.0 by @dependabot[bot] in #3468
chore(deps): bump wasi-common from 42.0.1 to 43.0.0 by @dependabot[bot] in #3469
(auto merged) chore(deps): bump libc from 0.2.183 to 0.2.184 in the patch group by @dependabot[bot] in #3480
Extend experiment seccomp program by @sat0ken in #3464
chore(deps): bump bytes from 1.6.0 to 1.11.1 in /experiment/seccomp by @dependabot[bot] in #3487
(auto merged) chore(deps): bump wasi-common from 43.0.0 to 43.0.1 in the patch group by @dependabot[bot] in #3490
(auto merged) chore(deps): bump the patch group with 2 updates by @dependabot[bot] in #3494
(auto merged) chore(deps): bump libc from 0.2.184 to 0.2.185 in the patch group by @dependabot[bot] in #3496
chore(deps): bump fastrand from 2.3.0 to 2.4.1 by @dependabot[bot] in #3486
(auto merged) chore(deps): bump uuid from 1.23.0 to 1.23.1 in the patch group by @dependabot[bot] in #3505
(auto merged) chore(deps): bump openssl from 0.10.75 to 0.10.78 by @dependabot[bot] in #3513
chore(deps): bump the wasmtime group with 2 updates by @dependabot[bot] in #3514
chore(deps): bump procfs from 0.17.0 to 0.18.0 by @dependabot[bot] in #3290
chore(deps): bump libc from 0.2.185 to 0.2.186 in the patch group across 1 directory by @dependabot[bot] in #3516
chore(deps): bump the wasmtime group across 1 directory with 2 updates by @dependabot[bot] in #3519
(auto merged) chore(deps): bump openssl from 0.10.78 to 0.10.79 by @dependabot[bot] in #3532
(auto merged) chore(deps): bump rkyv from 0.8.15 to 0.8.16 by @dependabot[bot] in #3537
(auto merged) chore(deps): bump tar from 0.4.45 to 0.4.46 in the patch group by @dependabot[bot] in #3544
(auto merged) chore(deps): bump serde_json from 1.0.149 to 1.0.150 in the patch group by @dependabot[bot] in #3548
(auto merged) chore(deps): bump openssl from 0.10.79 to 0.10.80 by @dependabot[bot] in #3549
(auto merged) chore(deps): bump uuid from 1.23.1 to 1.23.2 in the patch group by @dependabot[bot] in #3574
(auto merged) chore(deps): bump nc from 0.9.7 to 0.9.8 in the patch group by @dependabot[bot] in #3579
(auto merged) chore(deps): bump chrono from 0.4.44 to 0.4.45 in the patch group by @dependabot[bot] in #3581
(auto merged) chore(deps): bump which from 8.0.2 to 8.0.3 in the patch group by @dependabot[bot] in #3582
(auto merged) chore(deps): bump the patch group with 2 updates by @dependabot[bot] in #3584
chore(deps): bump serial_test from 3.4.0 to 3.5.0 by @dependabot[bot] in #3575
chore(deps): bump the wasmtime group across 1 directory with 2 updates by @dependabot[bot] in #3583
chore(deps): bump netlink-packet-route from 0.26.0 to 0.31.0 by @dependabot[bot] in #3586
(auto merged) chore(deps): bump the wasmtime group with 2 updates by @dependabot[bot] in #3593
(auto merged) chore(deps): bump which from 8.0.3 to 8.0.4 in the patch group by @dependabot[bot] in #3598
(auto merged) chore(deps): bump pathrs from 0.2.4 to 0.2.5 in the patch group by @dependabot[bot] in #3601
chore(deps): bump rust-criu from 0.5.0 to 0.6.1 by @dependabot[bot] in #3610
chore(deps): bump the wasmtime group with 2 updates by @dependabot[bot] in #3613
(auto merged) chore(deps): bump the wasmtime group with 2 updates by @dependabot[bot] in #3615
(auto merged) chore(deps): bump uuid from 1.23.3 to 1.23.4 in the patch group by @dependabot[bot] in #3616
(auto merged) chore(deps): bump the patch group with 2 updates by @dependabot[bot] in #3617
chore(deps): bump mockall from 0.14.0 to 0.15.0 by @dependabot[bot] in #3625
(auto merged) chore(deps): bump rand from 0.10.1 to 0.10.2 in the patch group by @dependabot[bot] in #3635
(auto merged) chore(deps): bump uuid from 1.23.4 to 1.23.5 in the patch group by @dependabot[bot] in #3648
chore(deps): bump regex from 1.12.4 to 1.13.0 by @dependabot[bot] in #3647
(auto merged) chore(deps): bump the patch group with 2 updates by @dependabot[bot] in #3651
chore(deps): bump uuid from 1.23.5 to 1.24.0 by @dependabot[bot] in #3652
(auto merged) chore(deps): bump the patch group across 1 directory with 5 updates by @dependabot[bot] in #3660
(auto merged) chore(deps): bump libc from 0.2.187 to 0.2.189 in the patch group by @dependabot[bot] in #3663
Release for v0.7.0 by @github-actions[bot] in #3440
(auto merged) chore(deps): bump quinn-proto from 0.11.14 to 0.11.16 by @dependabot[bot] in #3667

New Contributors

@stepancheg made their first contribution in #3433
@KevinKickass made their first contribution in #3439
@xvchris made their first contribution in #3456
@souk4711 made their first contribution in #3488
@gat786 made their first contribution in #3497
@lu-zero made their first contribution in #3477
@JosiahParry made their first contribution in #3502
@Shion1305 made their first contribution in #3535
@YawKar made their first contribution in #3536
@kechigon made their first contribution in #3467
@immanuwell made their first contribution in #3541
@uran0sH made their first contribution in #3504
@SAY-5 made their first contribution in #3546
@hayama17 made their first contribution in #3580
@Scanf-s made their first contribution in #3602
@tkshsbcue made their first contribution in #3624

Full Changelog: v0.6.0...v0.7.0