Tags: avisa/containerd
Tags
containerd 1.2.7 Welcome to the v1.2.7 release of containerd! The seventh patch release for `containerd` 1.2 introduces OCI image descriptor annotation support and contains fixes for containerd shim logs, container stop/deletion, cri plugin and selinux. It also contains several important bug fixes for goroutine and file descriptor leakage in containerd and containerd shims. ### Notable Updates * Support annotations in the OCI image descriptor, and filtering image by annotations. [containerd#3254](containerd#3254) * Support context timeout in ttrpc which can help avoid containerd hangs when a shim is unresponsive. [ttrpc#31](containerd/ttrpc#31) * Fix a bug that containerd shim leaks goroutine and file descriptor after containerd restarts. [ttrpc#37](containerd/ttrpc#37) * Fix a bug that a container can't be deleted if first deletion attempt is canceled or timeout. [containerd#3264](containerd#3264) * Fix a bug that containerd leaks file descriptor when using v2 containerd shims, e.g. `containerd-shim-runc-v1`. [containerd#3273](containerd#3273) * Fix a bug that a container with lingering processes can't terminate when it shares pid namespace with another container. [moby/moby#38978)(moby/moby#38978) * Fix a bug that containerd can't read shim logs after restart. [containerd#3282](containerd#3282) * Fix a bug that `shim_debug` option is not honored for existing containerd shims after containerd restarts. [containerd#3283](containerd#3283) * cri: Fix a bug that a container can't be stopped when the exit event is not successfully published by the containerd shim. [containerd#3125](containerd#3125), [containerd#3177](containerd#3177) * cri: Fix a bug that exec process is not cleaned up if grpc context is canceled or timeout. [cri#1159](containerd/cri#1159) * Fix a selinux keyring labeling issue by updating runc to v1.0.0-rc.8 and selinux library to v1.2.2. [opencontainers/selinux#50](opencontainers/selinux#50) * Update ttrpc to f82148331ad2181edea8f3f649a1f7add6c3f9c2. [containerd#3316](containerd#3316) * Update cri to 49ca74043390bc2eeea7a45a46005fbec58a3f88. [containerd#3330](containerd#3330) Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Phil Estes * Lantao Liu * Michael Crosby * Stefan Berger * Derek McGowan * Brian Goff * Georgi Sabev * Sebastiaan van Stijn * Li Yuxuan * Wei Fu * Jared Cordasco * Julia Nedialkova * Justin Terry * Lifubang * Mike Brown * Stephen J Day * Tõnis Tiigi * zhoulin xie ### Changes * [`85f6aa5`](containerd@85f6aa5) Merge pull request [containerd#3331](containerd#3331) from Random-Liu/1.2.7-release-note * [`bad4fdd`](containerd@bad4fdd) Prepare release note for v1.2.7. * [`1bda2ed`](containerd@1bda2ed) Merge pull request [containerd#3338](containerd#3338) from dmcgowan/backport-user-agent-fix * [`1af8e6e`](containerd@1af8e6e) Add user agent header to all requests * [`71f5018`](containerd@71f5018) Merge pull request [containerd#3332](containerd#3332) from crosbymichael/cherry * [`ea70cd6`](containerd@ea70cd6) Merge pull request [containerd#3330](containerd#3330) from Random-Liu/update-cri-release-1.2 * [`e4e631a`](containerd@e4e631a) differ: fix deadlock on commit error * [`dbd25c8`](containerd@dbd25c8) Update cri to 49ca74043390bc2eeea7a45a46005fbec58a3f88 * [`7c69912`](containerd@7c69912) Merge pull request [containerd#3316](containerd#3316) from estesp/update-ttrpc * [`d2d36e5`](containerd@d2d36e5) Bump ttrpc * [`367c672`](containerd@367c672) Merge pull request [containerd#3283](containerd#3283) from fuweid/cp-v1_respect_shim_debug * [`845990f`](containerd@845990f) Merge pull request [containerd#3282](containerd#3282) from fuweid/cp-redirect-shim-v1-output * [`57f79a1`](containerd@57f79a1) v1: Respect the `shim_debug` flag when load tasks * [`5508046`](containerd@5508046) containerd-shim: redirect output into stdout fifo * [`5a62161`](containerd@5a62161) Merge pull request [containerd#3273](containerd#3273) from fuweid/cp-fifo-fd-leak * [`d0319ec`](containerd@d0319ec) Merge pull request [containerd#3274](containerd#3274) from thaJeztah/1.2_backport_pidnamespace * [`1014235`](containerd@1014235) fix shouldKillAllOnExit check * [`5cd83f3`](containerd@5cd83f3) Fix fd leak of shim log * [`0717fe6`](containerd@0717fe6) Use named pipes for shim logs * [`ea75cfc`](containerd@ea75cfc) Merge pull request [containerd#3264](containerd#3264) from Random-Liu/cherry-pick-#3244-containerd#3263-release-1.2 * [`3d276b4`](containerd@3d276b4) Fix error handling for task deletion. * [`247de3f`](containerd@247de3f) Return NotFound error for kill and delete in deleted state. * [`3923c02`](containerd@3923c02) Merge pull request [containerd#3254](containerd#3254) from jcordasc/cherrypick-annotation-fix-1.2 * [`9196892`](containerd@9196892) Merge pull request [containerd#3250](containerd#3250) from thaJeztah/1.2_backport_bump_ttrpc * [`9ad688a`](containerd@9ad688a) Extend adaptImage function with annotations case * [`5538d71`](containerd@5538d71) Extend metadata images test with fieldpaths for Annotations * [`309e1db`](containerd@309e1db) Write the Annotations map into the bolt db * [`a456958`](containerd@a456958) Prepare boltutil for reading and writing another map * [`4bb9151`](containerd@4bb9151) Add test for ocispec.Descriptor Annotations * [`2364b03`](containerd@2364b03) Copy annotations around where necessary * [`9844ce4`](containerd@9844ce4) Add missing annotations map to Descriptor for gRPC transfer * [`502ed64`](containerd@502ed64) Merge pull request [containerd#3257](containerd#3257) from jcordasc/jcordasc/vndr-go-mod-only * [`f7b8ac5`](containerd@f7b8ac5) Merge pull request [containerd#3247](containerd#3247) from thaJeztah/1.2_bump_runc_1.0.0rc8 * [`d37c5e0`](containerd@d37c5e0) Add go.mod file for gopkg.in/yaml.v2 * [`79f6941`](containerd@79f6941) bump containerd/ttrpc 699c4e40d1e7416e08bf7019c7ce2e9beced4636 * [`5f1c66f`](containerd@5f1c66f) Update ttrpc to support context timeout. * [`05c3be6`](containerd@05c3be6) bump opencontainers/selinux v1.2.2 * [`abd5f7c`](containerd@abd5f7c) bump runc v1.0.0-rc8 * [`af407fb`](containerd@af407fb) Merge pull request [containerd#3235](containerd#3235) from estesp/update-to-ms-image * [`6bfa149`](containerd@6bfa149) Convert Windows CI to use Microsoft MCR image urls * [`6cdfa49`](containerd@6cdfa49) Merge pull request [containerd#3219](containerd#3219) from jcordasc/cherrypick-#3213-release-1.2 * [`b9da989`](containerd@b9da989) Merge pull request [containerd#3213](containerd#3213) from jcordasc/small-fixes * [`56a6552`](containerd@56a6552) Merge pull request [containerd#3229](containerd#3229) from estesp/fix-appveyor * [`0b2d89c`](containerd@0b2d89c) Fix error on pull hang in CI * [`0b58491`](containerd@0b58491) Move to sha-specified test image for nanoserver ### Changes from containerd/cri * [`49ca740`](containerd/cri@49ca740) Merge pull request [containerd#1159](containerd/cri#1159) from Random-Liu/cherrypick-#1156-release-1.2 * [`7a5e210`](containerd/cri@7a5e210) Make sure exec process is killed when context is canceled. * [`cdbb238`](containerd/cri@cdbb238) Merge pull request [containerd#1136](containerd/cri#1136) from Random-Liu/cherrypick-#1133-release-1.2 * [`27b70db`](containerd/cri@27b70db) Use wait instead of `TaskExit`. * [`cb0eb47`](containerd/cri@cb0eb47) Merge pull request [containerd#1123](containerd/cri#1123) from Random-Liu/update-containerd-release-1.2 * [`34c9699`](containerd/cri@34c9699) Update containerd to v1.2.6. * [`1ee63ba`](containerd/cri@1ee63ba) Merge pull request [containerd#1120](containerd/cri#1120) from Random-Liu/cherrypick-#1118-release-1.2 * [`35f1216`](containerd/cri@35f1216) Support comment in vendor. ### Changes from containerd/ttrpc * [`f821483`](containerd/ttrpc@f821483) Merge pull request [containerd#38](containerd/ttrpc#38) from masters-of-cats/pr-client-eof-improvement * [`911c9cd`](containerd/ttrpc@911c9cd) Improve connection error handling * [`69eadd1`](containerd/ttrpc@69eadd1) Merge pull request [containerd#37](containerd/ttrpc#37) from masters-of-cats/pr-handle-client-eof * [`96dcf73`](containerd/ttrpc@96dcf73) Handle EOF to prevent file descriptor leak * [`699c4e4`](containerd/ttrpc@699c4e4) Merge pull request [containerd#35](containerd/ttrpc#35) from Random-Liu/make-on-close-an-options * [`ba15956`](containerd/ttrpc@ba15956) Make onclose an option. * [`6914432`](containerd/ttrpc@6914432) Merge pull request [containerd#33](containerd/ttrpc#33) from JoeWrightss/patch-1 * [`ce5c1c4`](containerd/ttrpc@ce5c1c4) Fix returns error message * [`f02858b`](containerd/ttrpc@f02858b) Merge pull request [containerd#31](containerd/ttrpc#31) from cpuguy83/support_context_deadlines * [`a364f44`](containerd/ttrpc@a364f44) Add support for request timeout propgation. * [`f51df44`](containerd/ttrpc@f51df44) Merge pull request [containerd#30](containerd/ttrpc#30) from estesp/add-common-project-content * [`6c96b39`](containerd/ttrpc@6c96b39) Add common check scripts and project references ### Dependency Changes Previous release can be found at [v1.2.6](https://github.com/containerd/containerd/releases/tag/v1.2.6) * **github.com/containerd/cri** eb926cd79d3bac188dcc4ed7694fc9298f8831be -> 49ca74043390bc2eeea7a45a46005fbec58a3f88 * **github.com/containerd/ttrpc** 2a805f71863501300ae1976d29f0454ae003e85a -> f82148331ad2181edea8f3f649a1f7add6c3f9c2 * **github.com/opencontainers/runc** 029124da7af7360afa781a0234d1b083550f797c -> v1.0.0-rc8 * **github.com/opencontainers/selinux** v1.2.1 -> v1.2.2
containerd 1.2.6 Welcome to the v1.2.6 release of containerd! The sixth patch release for `containerd` 1.2 contains fixes for the containerd client, the CRI plugin and containerd io and mount handling. It whitelists 2 new syscalls in the default seccomp profile, and also updates CNI to v0.7.5 to include the fix for [CVE-2019-9946](https://nvd.nist.gov/vuln/detail/CVE-2019-9946). All these changes are noted below. ### Notable Updates * Allow overriding package name in `containerd --version` output. [containerd#3098](containerd#3098) * Add 2 new syscalls `io_pgetevents` and `statx` in the default seccomp whitelist. [containerd#3113](containerd#3113) [containerd#3115](containerd#3115) * Fix a bug that custom containerd cgroup path does not work in containerd 1.2.5. [containerd#3143](containerd#3143) * Fix a bug in the containerd client that `WithAllCapabilities` applies incomplete capability list. [containerd#3147](containerd#3147) * Fix a bug that container output can be incomplete when stdout and stderr are pointed to the same file. [containerd#3118](containerd#3118) * Fix a bug that containerd can't properly handle space in mount point path. [3161](containerd#3161) * cri: fix a bug that containers being gracefully stopped are SIGKILLed when kubelet is restarted. [cri#1098](containerd/cri#1098) * cri: Fix a bug that pod UTS namespace is used for host network. [cri#1111](containerd/cri#1111) * cri: Update CNI plugins to v0.7.5 for [CVE-2019-9946](https://nvd.nist.gov/vuln/detail/CVE-2019-9946). * Update cri to eb926cd79d3bac188dcc4ed7694fc9298f8831be. [containerd#3174](containerd#3174) * Update runc to v1.0.0-rc7-6-g029124da [containerd#3183](containerd#3183) to fix potential container start failure on non-SELinux system. [runc#2030](opencontainers/runc#2030) Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Lantao Liu * Sebastiaan van Stijn * Michael Crosby * Phil Estes * Derek McGowan * Peter Wagner * Akihiro Suda * Avi Kivity ### Changes * [`894b81a4b8`](containerd@894b81a) Merge pull request [containerd#3180](containerd#3180) from Random-Liu/1.2.6-release-note * [`4be9af65b9`](containerd@4be9af6) Prepare 1.2.6 containerd release. * [`9d87dddaec`](containerd@9d87ddd) Merge pull request [containerd#3183](containerd#3183) from thaJeztah/1.2_bump_runc * [`e01177391d`](containerd@e011773) bump runc to 029124da (v1.0.0-rc7-6-g029124da) * [`7f8cf855a0`](containerd@7f8cf85) Merge pull request [containerd#3174](containerd#3174) from Random-Liu/update-cri-release-1.2 * [`7c1ca26e2d`](containerd@7c1ca26) Update cri to eb926cd79d3bac188dcc4ed7694fc9298f8831be * [`02fd892d59`](containerd@02fd892) Merge pull request [containerd#3164](containerd#3164) from Random-Liu/update-cri-release-1.2 * [`67def02025`](containerd@67def02) Update cri to ffd9a66034aee582db04cf4c59e9b2262fd4fc59. * [`f2702c52a9`](containerd@f2702c5) Merge pull request [containerd#3161](containerd#3161) from thaJeztah/1.2_backport_fix_parseinfofile_parsing * [`f8d644ddc0`](containerd@f8d644d) Use pkg/errors for all errors * [`50cb294d08`](containerd@50cb294) fix parseInfoFile does not handle spaces in filenames * [`0d58ce1a2b`](containerd@0d58ce1) Merge pull request [containerd#3154](containerd#3154) from thaJeztah/1.2_backport_issue_3118 * [`76d1f3e692`](containerd@76d1f3e) runtime: guard Close() until both streams are complete * [`5236247ada`](containerd@5236247) runtime: log IO error when copying output streams * [`5066e517ff`](containerd@5066e51) Merge pull request [containerd#3147](containerd#3147) from Random-Liu/cherrypick-#3137-release-1.2 * [`de1b991122`](containerd@de1b991) Fix race and panic. * [`667ff6a451`](containerd@667ff6a) Merge pull request [containerd#3143](containerd#3143) from thaJeztah/1.2_backport_bump_cgroups * [`7f8deb37ed`](containerd@7f8deb3) Merge pull request [containerd#3141](containerd#3141) from thaJeztah/1.2_backport_bump_runc_v1.0.0-rc7 * [`1e75661aed`](containerd@1e75661) bump containerd/cgroups 4994991 * [`16a56020e6`](containerd@16a5602) update opencontainers/runc v1.0.0-rc7 * [`6d14516877`](containerd@6d14516) Merge pull request [containerd#3113](containerd#3113) from thaJeztah/1.2_backport_whitelist_statx * [`c9042ae5b5`](containerd@c9042ae) Merge pull request [containerd#3115](containerd#3115) from thaJeztah/1.2_backport_whitelist_io_pgetevents * [`2c2a86b019`](containerd@2c2a86b) seccomp: whitelist io_pgetevents * [`b0a8b6dd0b`](containerd@b0a8b6d) seccomp: whitelist statx syscall * [`5296db1b90`](containerd@5296db1) Merge pull request [containerd#3098](containerd#3098) from thaJeztah/1.2_backport_override_package_name * [`7700a82a47`](containerd@7700a82) Makefile: allow overriding package name ### Changes from containerd/cgroups * [`4994991`](containerd/cgroups@4994991) Merge pull request [containerd#79](containerd/cgroups#79) from crosbymichael/load-none * [`453efe3`](containerd/cgroups@453efe3) Return ErrCgroupDeleted when no subsystems ### Changes from containerd/cri * [`eb926cd7`](containerd/cri@eb926cd) Merge pull request [containerd#1115](containerd/cri#1115) from thaJeztah/1.2_backport_bump_selinux * [`c04ec48d`](containerd/cri@c04ec48) bump opencontainers/selinux v1.2.1 * [`24a507b3`](containerd/cri@24a507b) bump opencontainers/selinux to v1.2 * [`ffd9a660`](containerd/cri@ffd9a66) Merge pull request [containerd#1111](containerd/cri#1111) from Random-Liu/cherrypick-#1102-release-1.2 * [`83d24561`](containerd/cri@83d2456) No UTS namespace for hostnetwork. * [`b2937694`](containerd/cri@b293769) Merge pull request [containerd#1109](containerd/cri#1109) from Random-Liu/cherrypick-#1108-release-1.2 * [`8ec2da6d`](containerd/cri@8ec2da6) Update CNI to v0.7.5. * [`267a8caf`](containerd/cri@267a8ca) Merge pull request [containerd#1104](containerd/cri#1104) from Random-Liu/cherrypick-#1099-release-1.2 * [`03eae981`](containerd/cri@03eae98) Do not SIGKILL container if container stop is cancelled. * [`4bfcd93a`](containerd/cri@4bfcd93) Merge pull request [containerd#1097](containerd/cri#1097) from Random-Liu/cherrypick-#1083-release-1.2 * [`b3eab098`](containerd/cri@b3eab09) Support docker 18.09 in the test script. * [`087738ab`](containerd/cri@087738a) Merge pull request [containerd#1091](containerd/cri#1091) from Random-Liu/update-containerd-release-1.2 * [`befeac30`](containerd/cri@befeac3) Update containerd to v1.2.5. ### Dependency Changes Previous release can be found at [v1.2.5](https://github.com/containerd/containerd/releases/tag/v1.2.5) * **github.com/containerd/cgroups** dbea6f2 -> 4994991 * **github.com/containerd/cri** a92c40017473cbe0239ce180125f12669757e44f -> eb926cd79d3bac188dcc4ed7694fc9298f8831be * **github.com/containernetworking/plugins** v0.7.0 -> v0.7.5 * **github.com/opencontainers/runc** 2b18fe1d885ee5083ef9f0838fee39b62d653e30 -> 029124da7af7360afa781a0234d1b083550f797c * **github.com/opencontainers/selinux** b6fa367ed7f534f9ba25391cc2d467085dbb445a -> v1.2.1
containerd 1.1.7 Welcome to the v1.1.7 release of containerd! This is the seventh patch release for the `containerd` 1.1 release. This release contains fixes for image management, containerd client, CRI plugin and containerd io handling. It also updates runc to include an improved fix for [CVE-2019-5736](https://nvd.nist.gov/vuln/detail/CVE-2019-5736) to reduce the increased memory-consumption introduced by the original patch, updates CNI to v0.7.5 to include the fix for [CVE-2019-9946](https://nvd.nist.gov/vuln/detail/CVE-2019-9946), adds 2 new syscalls in the default seccomp profile. All these changes are noted below. ## Notable Updates * Fix an issue that non-existent parent directory in image layers is created with permission `0700`. [containerd#3017](containerd#3017) * Fix an issue that snapshots of the base image can be deleted by mistake, when images built on top of it are deleted. [containerd#3088](containerd#3088) * Allow overriding package name in `containerd --version` output. [containerd#3097](containerd#3097) * Add 2 new syscalls `io_pgetevents` and `statx` in the default seccomp whitelist. [containerd#3112](containerd#3112) [containerd#3114](containerd#3114) * Fix a bug that container output can be incomplete when stdout and stderr are pointed to the same file. [containerd#3156](containerd#3156) * cri: fix a bug that pod can't get started when the same volume is defined differently in the image and the pod spec. [cri#1059](containerd/cri#1059) * cri: fix a bug that causes container start failure after in-place upgrade containerd to 1.2.4+ or 1.1.6+. [cri#1082](containerd/cri#1082) * cri: fix a bug that containers being gracefully stopped are SIGKILLed when kubelet is restarted. [cri#1098](containerd/cri#1098) * cri: Fix a bug that pod UTS namespace is used for host network. [cri#1111](containerd/cri#1111) * cri: Update CNI plugins to v0.7.5 for [CVE-2019-9946](https://nvd.nist.gov/vuln/detail/CVE-2019-9946) * Update cri to f8171b4530bed8992973cc4a2f24efe53b821d53. [3175](containerd#3175) * Update runc to v1.0.0-rc7-6-g029124da [containerd#3184](containerd#3184) to include the improved fix for CVE-2019-5736, and fix a potential container start failure on non-SELinux system [runc#2030](opencontainers/runc#2030). Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Lantao Liu * Michael Crosby * Phil Estes * Sebastiaan van Stijn * Akihiro Suda * Derek McGowan * Peter Wagner * Andrei Vagin * Avi Kivity * Claudia Beresford * Daniel, Dao Quang Minh * John Howard * Kenfe-Mickaël Laventure * Lu Jingxiao * Madhan Raj Mookkandy * Nikos Anastopoulos * Parav Pandit * Sudeesh John * Wei Fu ### Changes * [`4278fbc243`](containerd@4278fbc) Merge pull request [containerd#3181](containerd#3181) from Random-Liu/prepare-1.1.7 * [`f8e22625c6`](containerd@f8e2262) Prepare v1.1.7 release. * [`af0bc2e035`](containerd@af0bc2e) Merge pull request [containerd#3184](containerd#3184) from thaJeztah/1.1_bump_runc * [`c186fd8d8c`](containerd@c186fd8) bump runc to 029124da (v1.0.0-rc7-6-g029124da) * [`82ebb90280`](containerd@82ebb90) Merge pull request [containerd#3175](containerd#3175) from Random-Liu/update-cri-release-1.1 * [`125c9a0046`](containerd@125c9a0) Update cri to f8171b4530bed8992973cc4a2f24efe53b821d53. * [`41b3a316f7`](containerd@41b3a31) Merge pull request [containerd#3165](containerd#3165) from Random-Liu/update-cri-release-1.1 * [`3afed24a4e`](containerd@3afed24) Update cri to b9c06fd1410f1e6699a83277887af399a1342736. * [`01cd85f6e8`](containerd@01cd85f) Merge pull request [containerd#3156](containerd#3156) from thaJeztah/1.1_backport_issue_3118 * [`de85314d4f`](containerd@de85314) runtime: guard Close() until both streams are complete * [`255da2a7b0`](containerd@255da2a) runtime: log IO error when copying output streams * [`2bf4d3a650`](containerd@2bf4d3a) Merge pull request [containerd#3140](containerd#3140) from thaJeztah/1.1_backport_bump_runc_v1.0.0-rc7 * [`25b40629d4`](containerd@25b4062) update opencontainers/runc v1.0.0-rc7 * [`cdc2fe6d81`](containerd@cdc2fe6) Merge pull request [containerd#3112](containerd#3112) from thaJeztah/1.1_backport_whitelist_statx * [`8f6bcb2bba`](containerd@8f6bcb2) Merge pull request [containerd#3114](containerd#3114) from thaJeztah/1.1_backport_whitelist_io_pgetevents * [`58bee8125b`](containerd@58bee81) seccomp: whitelist io_pgetevents * [`03d129bdb2`](containerd@03d129b) seccomp: whitelist statx syscall * [`9a0a5fd1e7`](containerd@9a0a5fd) Merge pull request [containerd#3097](containerd#3097) from thaJeztah/1.1_backport_override_package_name * [`d28f4aa242`](containerd@d28f4aa) Makefile: allow overriding package name * [`8ecb055c07`](containerd@8ecb055) Merge pull request [containerd#3083](containerd#3083) from thaJeztah/1.1_backport_bump_runc * [`21abff907c`](containerd@21abff9) Vendor opencontainers/runtime-spec 29686dbc * [`49b7692b16`](containerd@49b7692) Vendor in runtime spec referencing windows namespace * [`62e4a2c8e7`](containerd@62e4a2c) Update containerd dependencies for 1.2 * [`95a8d1d933`](containerd@95a8d1d) Merge pull request [containerd#3088](containerd#3088) from fuweid/me-cp-2876-release-1.1 * [`4e69228971`](containerd@4e69228) bugfix: unpack should always set the snapshot gc label * [`f86b114ac5`](containerd@f86b114) update runc to 2b18fe1d885ee5083ef9f0838fee39b62d653e30 * [`52bfc9f530`](containerd@52bfc9f) Merge pull request [containerd#3078](containerd#3078) from thaJeztah/1.1_bump_golang * [`8f044b8320`](containerd@8f044b8) Bump to Go 1.11.x * [`0fc64b682c`](containerd@0fc64b6) Workaround for gofmt change in Go 1.11 * [`45b8d86585`](containerd@45b8d86) Fix the formatting directives error during compilation * [`9d16e2e660`](containerd@9d16e2e) Merge pull request [containerd#3039](containerd#3039) from Random-Liu/cherrypick-#3018-release-1.1 * [`ee4754550a`](containerd@ee47545) Unpack should set 0755 when the parent directory doesn't exist. ### Changes from containerd/cgroups * [`5e61083`](containerd/cgroups@5e61083) Merge pull request [containerd#50](containerd/cgroups#50) from jingxiaolu/master * [`0d1587c`](containerd/cgroups@0d1587c) Add interface AddTask to control groups. So that we can set tasks when we need. * [`07683a6`](containerd/cgroups@07683a6) Merge pull request [containerd#45](containerd/cgroups#45) from anastop/master * [`15ef4c3`](containerd/cgroups@15ef4c3) Add Update method for the cpuset controller * [`c755602`](containerd/cgroups@c755602) Merge pull request [containerd#41](containerd/cgroups#41) from estesp/update-travis-go * [`0a357bb`](containerd/cgroups@0a357bb) Update Go versions for travis * [`5539584`](containerd/cgroups@5539584) Fix incorrect use of OCI runtime specs-go cgroup dev types * [`bf7d89f`](containerd/cgroups@bf7d89f) Merge pull request [containerd#40](containerd/cgroups#40) from containerd/license * [`f1d9380`](containerd/cgroups@f1d9380) Add license to files * [`78a98a6`](containerd/cgroups@78a98a6) Merge pull request [containerd#39](containerd/cgroups#39) from paravmellanox/master * [`ccd26c4`](containerd/cgroups@ccd26c4) Add support for rdma cgroup ### Changes from containerd/cri * [`f8171b45`](containerd/cri@f8171b4) Merge pull request [containerd#1117](containerd/cri#1117) from thaJeztah/1.0_backport_bump_selinux * [`961bbf32`](containerd/cri@961bbf3) bump opencontainers/selinux v1.2.1 * [`c7ec47f5`](containerd/cri@c7ec47f) bump opencontainers/selinux to v1.2 * [`b9c06fd1`](containerd/cri@b9c06fd) Merge pull request [containerd#1112](containerd/cri#1112) from Random-Liu/cherrypick-#1102-release-1.0 * [`c29999cc`](containerd/cri@c29999c) No UTS namespace for hostnetwork. * [`15a38626`](containerd/cri@15a3862) Merge pull request [containerd#1110](containerd/cri#1110) from Random-Liu/cherrypick-#1108-release-1.0 * [`5ca7e895`](containerd/cri@5ca7e89) Update CNI to v0.7.5. * [`04ccb9ca`](containerd/cri@04ccb9c) Merge pull request [containerd#1105](containerd/cri#1105) from Random-Liu/cherrypick-#1099-release-1.0 * [`b2568d2e`](containerd/cri@b2568d2) Do not SIGKILL container if container stop is cancelled. * [`3c81b301`](containerd/cri@3c81b30) Merge pull request [containerd#1087](containerd/cri#1087) from Random-Liu/cherrypick-#1085-release-1.0 * [`134c2f35`](containerd/cri@134c2f3) Fix /etc/hostname backward compatibility issue for in-place upgrade. * [`5b8046c2`](containerd/cri@5b8046c) Merge pull request [containerd#1073](containerd/cri#1073) from Random-Liu/cherrypick-#1072-release-1.0 * [`b01bbde7`](containerd/cri@b01bbde) Use clean path for map and comparison. * [`d35c6741`](containerd/cri@d35c674) Merge pull request [containerd#1068](containerd/cri#1068) from Random-Liu/cherrypick-#1055-release-1.0 * [`90bc4a66`](containerd/cri@90bc4a6) Use the correct sandbox config. * [`64e3e2d0`](containerd/cri@64e3e2d) Merge pull request [containerd#1051](containerd/cri#1051) from Random-Liu/update-containerd-release-1.0 * [`5f8a6b6b`](containerd/cri@5f8a6b6) Update containerd to 878924b. ### Changes from containerd/go-runc * [`14606eb`](containerd/go-runc@14606eb) Merge pull request [containerd#43](containerd/go-runc#43) from AkihiroSuda/rootless * [`0194529`](containerd/go-runc@0194529) add support for --rootless * [`74719bd`](containerd/go-runc@74719bd) Merge pull request [containerd#42](containerd/go-runc#42) from Random-Liu/expose-parsePSOutput * [`fdf39b3`](containerd/go-runc@fdf39b3) Expose parsePSOutput. * [`301f7c1`](containerd/go-runc@301f7c1) Merge pull request [containerd#41](containerd/go-runc#41) from masters-of-cats/master * [`07e192d`](containerd/go-runc@07e192d) Use user-specific temp directory if set * [`f271fa2`](containerd/go-runc@f271fa2) Merge pull request [containerd#40](containerd/go-runc#40) from avagin/tty * [`400dfa3`](containerd/go-runc@400dfa3) Add ConsoleSocket to RestoreOpts ### Dependency Changes Previous release can be found at [v1.1.6](https://github.com/containerd/containerd/releases/tag/v1.1.6) * **github.com/containerd/cgroups** fe281dd265766145e943a034aa41086474ea6130 -> 5e61083 * **github.com/containerd/cri** f0b5665a959119b6a6234001e6d55206d9200e95 -> f8171b4530bed8992973cc4a2f24efe53b821d53 * **github.com/containerd/go-runc** bcb223a061a3dd7de1a89c0b402a60f4dd9bd307 -> 14606eb66abd9e834e3bd22a4f5f46a3aad54c54 * **github.com/containernetworking/plugins** v0.7.0 -> v0.7.5 * **github.com/opencontainers/runc** 6635b4f0c6af3810594d2770f662f34ddc15b40d -> 029124da7af7360afa781a0234d1b083550f797c * **github.com/opencontainers/runtime-spec** v1.0.1 -> 29686dbc5559d93fb1ef402eeda3e35c38d75af4 * **github.com/opencontainers/selinux** b6fa367ed7f534f9ba25391cc2d467085dbb445a -> v1.2.1
containerd 1.2.5 Welcome to the v1.2.5 release of containerd! The fifth patch release for `containerd` 1.2 contains fixes for image management, cgroup management and the CRI plugin. It also updates runc to include an improved fix for CVE-2019-5736 to reduce the increased memory-consumption introduced by the original patch. All these changes are noted below. ### Notable Updates * Fix an issue that non-existent parent directory in image layers is created with permission `0700`. [containerd#3017](containerd#3017) * Fix an issue that snapshots of the base image can be deleted by mistake, when images built on top of it are deleted. [containerd#3087](containerd#3087) * Support for GC references to content from snapshot and container objects. [containerd#3080](containerd#3080) * cri: Fix a bug that pod can't get started when the same volume is defined differently in the image and the pod spec. [cri#1059](containerd/cri#1059) * cri: Fix a bug that causes container start failure after in-place upgrade containerd to 1.2.4+ or 1.1.6+. [cri#1082](containerd/cri#1082) * cgroups updated to dbea6f2 to fix issues for systemd 420 and non-existent cgroups. [containerd#3079](containerd#3079) * runc updated to 2b18fe1d885ee5083ef9f0838fee39b62d653e30 to include the improved fix for CVE-2019-5736. [containerd#3082](containerd#3082) * cri updated to a92c40017473cbe0239ce180125f12669757e44f. [containerd#3084](containerd#3084) Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Michael Crosby * Phil Estes * Lantao Liu * Gábor Lipták * Derek McGowan * Cedric Clerget * Daniel, Dao Quang Minh * Sebastiaan van Stijn * Ashley Sykes * Brent Baude * Chris Mark * Georgia Panoutsakopoulou * Grant Seltzer Richman * JoeWrightss * MichaelKatsoulis * Wei Fu * Wei Zhang ### Changes * [`bb71b10fd8`](containerd@bb71b10) Merge pull request [containerd#3086](containerd#3086) from Random-Liu/prepare-release-1-2-5 * [`6878e2b3fa`](containerd@6878e2b) Prepare v1.2.5 release. * [`075e1ed4e0`](containerd@075e1ed) Merge pull request [containerd#3092](containerd#3092) from Random-Liu/update-cri-release-1.2 * [`12f76332e6`](containerd@12f7633) Update cri to a92c40017473cbe0239ce180125f12669757e44f. * [`8f312e3586`](containerd@8f312e3) Merge pull request [containerd#3091](containerd#3091) from dmcgowan/release-1.2-update-mailmap * [`68f0866dfc`](containerd@68f0866) Update mailmap for cgroup authors * [`96a0d28390`](containerd@96a0d28) Merge pull request [containerd#3082](containerd#3082) from thaJeztah/1.2_backport_bump_runc * [`9ead3ca72a`](containerd@9ead3ca) Merge pull request [containerd#3087](containerd#3087) from fuweid/me-cherry-pick-2876 * [`88401ba68a`](containerd@88401ba) bugfix: unpack should always set the snapshot gc label * [`c1f49fa74c`](containerd@c1f49fa) Merge pull request [containerd#3084](containerd#3084) from Random-Liu/update-cri-release-1.2 * [`a5e6b940ea`](containerd@a5e6b94) Update cri to 8e7ca12f411d65de58ca672e8e4a0c1464b4fe34. * [`0b7e80e347`](containerd@0b7e80e) Merge pull request [containerd#3080](containerd#3080) from dmcgowan/backport-1.2-gc-content-references * [`b7e7f1140f`](containerd@b7e7f11) update runc to 2b18fe1d885ee5083ef9f0838fee39b62d653e30 * [`17a4289dee`](containerd@17a4289) Add content gc ref labels from containers, images, and snapshots * [`f3ab47dd2b`](containerd@f3ab47d) Merge pull request [containerd#3079](containerd#3079) from crosbymichael/cherry-picks1.2 * [`e8091eb546`](containerd@e8091eb) Bump cgroups to dbea6f2 * [`96a8180618`](containerd@96a8180) Merge pull request [containerd#3077](containerd#3077) from thaJeztah/1.2_bump_golang * [`aed4a5e96c`](containerd@aed4a5e) Bump to Go 1.11.x * [`782dd8988a`](containerd@782dd89) Merge pull request [containerd#3038](containerd#3038) from Random-Liu/cherrypick-#3018-release-1.2 * [`9899aca83f`](containerd@9899aca) Unpack should set 0755 when the parent directory doesn't exist. ### Changes from containerd/cgroups * [`dbea6f2`](containerd/cgroups@dbea6f2) Merge pull request [containerd#77](containerd/cgroups#77) from crosbymichael/non-active * [`4a9f0f7`](containerd/cgroups@4a9f0f7) Add SkipOpts for handling how subsystems are registered * [`4dacf2b`](containerd/cgroups@4dacf2b) Check for non-active/supported cgroups * [`39b18af`](containerd/cgroups@39b18af) Merge pull request [containerd#72](containerd/cgroups#72) from gliptak/pids1 * [`2fd912c`](containerd/cgroups@2fd912c) Add tests for pids * [`1152b96`](containerd/cgroups@1152b96) Merge pull request [containerd#73](containerd/cgroups#73) from gliptak/gofmt1 * [`afd5981`](containerd/cgroups@afd5981) Gofmt cgroup_test * [`65ce98b`](containerd/cgroups@65ce98b) Merge pull request [containerd#69](containerd/cgroups#69) from cclerget/master-weight-pointer * [`0f372c6`](containerd/cgroups@0f372c6) Merge pull request [containerd#71](containerd/cgroups#71) from JoeWrightss/patch-1 * [`f48bd85`](containerd/cgroups@f48bd85) Fixs return error message * [`10cd53e`](containerd/cgroups@10cd53e) Merge pull request [containerd#70](containerd/cgroups#70) from gliptak/patch-1 * [`64bade4`](containerd/cgroups@64bade4) Take value instead of pointer value * [`b49c471`](containerd/cgroups@b49c471) Correct ineffassign warning * [`3bc6dde`](containerd/cgroups@3bc6dde) Merge pull request [containerd#68](containerd/cgroups#68) from cclerget/master-net_prio-typo * [`6b552a8`](containerd/cgroups@6b552a8) Fix net_prio typo * [`c0437c3`](containerd/cgroups@c0437c3) Merge pull request [containerd#67](containerd/cgroups#67) from gpanouts/get-all-cgroup-tasks * [`a31a0ff`](containerd/cgroups@a31a0ff) Add functionality for retrieving all tasks of a cgroup * [`82cb49f`](containerd/cgroups@82cb49f) Merge pull request [containerd#63](containerd/cgroups#63) from ChrsMark/lenient-subsystems-checking * [`7d825b2`](containerd/cgroups@7d825b2) Add test for cgroups load when missing hierarchy in one subsystem * [`f6cbfb4`](containerd/cgroups@f6cbfb4) Change Load function in order to be more lenient on subsystems' checking * [`965bb1d`](containerd/cgroups@965bb1d) Merge pull request [containerd#66](containerd/cgroups#66) from crosbymichael/systemdci * [`ab9ec0e`](containerd/cgroups@ab9ec0e) Add go-systemd dep for CI testing * [`0e94a83`](containerd/cgroups@0e94a83) Merge pull request [containerd#59](containerd/cgroups#59) from gliptak/patch-1 * [`4479d11`](containerd/cgroups@4479d11) Merge pull request [containerd#62](containerd/cgroups#62) from estesp/fix-gofmt * [`9beb998`](containerd/cgroups@9beb998) Merge pull request [containerd#61](containerd/cgroups#61) from gliptak/patch-3 * [`9a09e58`](containerd/cgroups@9a09e58) Fix gofmt of systemd.go * [`84e6e6e`](containerd/cgroups@84e6e6e) Merge pull request [containerd#60](containerd/cgroups#60) from gliptak/patch-2 * [`e13f6cc`](containerd/cgroups@e13f6cc) Add GoReportCard badge to README * [`d124595`](containerd/cgroups@d124595) Add Go 1.11 to Travis * [`d961ab9`](containerd/cgroups@d961ab9) Correct typo * [`d240072`](containerd/cgroups@d240072) Merge pull request [containerd#57](containerd/cgroups#57) from estesp/project-update * [`e4cf832`](containerd/cgroups@e4cf832) Add project references and use common project travis * [`8baeff6`](containerd/cgroups@8baeff6) Merge pull request [containerd#56](containerd/cgroups#56) from grantseltzer/patch-1 * [`9de57ff`](containerd/cgroups@9de57ff) Add godoc badge to README.md * [`5017d4e`](containerd/cgroups@5017d4e) Merge pull request [containerd#54](containerd/cgroups#54) from WeiZhang555/bugfix * [`13aaafd`](containerd/cgroups@13aaafd) Bugfix: can't write to cpuset cgroup * [`58556f5`](containerd/cgroups@58556f5) Merge pull request [containerd#53](containerd/cgroups#53) from baude/systemdslicedelegate * [`15ed73c`](containerd/cgroups@15ed73c) systemd-239+ no longer allows delegate slice * [`3024bc7`](containerd/cgroups@3024bc7) Merge pull request [containerd#52](containerd/cgroups#52) from Sykomaniac/bugfix/slice-name * [`2596f33`](containerd/cgroups@2596f33) Remove call to unitName * [`2e2922e`](containerd/cgroups@2e2922e) Merge pull request [containerd#51](containerd/cgroups#51) from containerd/type * [`0f3de2f`](containerd/cgroups@0f3de2f) Fix empty device type ### Changes from containerd/cri * [`a92c4001`](containerd/cri@a92c400) Merge pull request [containerd#1086](containerd/cri#1086) from Random-Liu/cherrypick-#1085-release-1.2 * [`616d154e`](containerd/cri@616d154) Fix /etc/hostname backward compatibility issue for in-place upgrade. * [`8e7ca12f`](containerd/cri@8e7ca12) Merge pull request [containerd#1081](containerd/cri#1081) from Random-Liu/cherrypick-#1056-release-1.2 * [`989fb1ab`](containerd/cri@989fb1a) Add an OCI annotation for sandbox log directory. * [`0eee55a2`](containerd/cri@0eee55a) Merge pull request [containerd#1074](containerd/cri#1074) from Random-Liu/cherrypick-#1072-release-1.2 * [`4d4f610e`](containerd/cri@4d4f610) Use clean path for map and comparison. * [`9c25ab5b`](containerd/cri@9c25ab5) Merge pull request [containerd#1067](containerd/cri#1067) from Random-Liu/cherrypick-#1055-release-1.2 * [`eaf8efc5`](containerd/cri@eaf8efc) Use the correct sandbox config. * [`afbdeacc`](containerd/cri@afbdeac) Merge pull request [containerd#1050](containerd/cri#1050) from Random-Liu/update-containerd-release-1.2 * [`72fab7c8`](containerd/cri@72fab7c) Update containerd to 583472f. ### Dependency Changes Previous release can be found at [v1.2.4](https://github.com/containerd/containerd/releases/tag/v1.2.4) * **github.com/containerd/cgroups** 5e61083 -> dbea6f2 * **github.com/containerd/cri** da0c016c830b2ea97fd1d737c49a568a816bf964 -> a92c40017473cbe0239ce180125f12669757e44f * **github.com/opencontainers/runc** 6635b4f0c6af3810594d2770f662f34ddc15b40d -> 2b18fe1d885ee5083ef9f0838fee39b62d653e30
containerd 1.2.4 Welcome to the v1.2.4 release of containerd! The fourth patch release for `containerd` 1.2 re-vendors `runc` which includes the patch for the critical CVE-2019-5736 escape vulnerability. This release also includes a few fixes for the CRI plugin as well as a change for Windows; all these changes are noted below. ### Notable Updates * cri: Set /etc/hostname [containerd#1042](containerd/cri#1042) * cri: Fix env performance issue [containerd#1045](containerd/cri#1045) * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve CVE-2019-5736 * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964 * Windows: NewDirectIOFromFIFOSet [containerd#2934](containerd#2934) Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Lantao Liu * Justin Terry * Sebastiaan van Stijn * Derek McGowan * Michael Crosby * Phil Estes * John Howard ### Changes * [`e6b3f5632f`](containerd@e6b3f56) Merge pull request [containerd#3002](containerd#3002) from estesp/prepare-1.2.4-release * [`5d1443dca7`](containerd@5d1443d) Prepare v1.2.4 release * [`2095626cff`](containerd@2095626) Merge pull request [containerd#3014](containerd#3014) from thaJeztah/1.2_bump_cri * [`78286104d0`](containerd@7828610) Merge pull request [containerd#3013](containerd#3013) from thaJeztah/1.2_backport_windows_changes * [`3cbdf9e488`](containerd@3cbdf9e) [release/1.2] update containerd/cri to da0c016c830b2ea97fd1d737c49a568a816bf964 * [`dfa19e5969`](containerd@dfa19e5) Windows:NewDirectIOFromFIFOSet * [`84a14ae000`](containerd@84a14ae) Update runhcs options to include CRI Sandbox support * [`6a8198b07d`](containerd@6a8198b) Forward ctr.exe --debug as io.containerd.runhcs.v1 options * [`d40cc95fcf`](containerd@d40cc95) Implement io.containerd.runhcs.v1 shim log opts * [`30ca1c5544`](containerd@30ca1c5) Add io.containerd.runhcs.v1 shim proto options * [`7908802cb5`](containerd@7908802) Fix Makefile to run protobuild on paths with spaces * [`583472f67a`](containerd@583472f) Merge pull request [containerd#2998](containerd#2998) from thaJeztah/1.2_backport_bump_runc_cve_2019-5736 * [`b4bf3e340c`](containerd@b4bf3e3) Update runc to 6635b4f0c6af3810594d2770f662f34ddc15b40d (CVE-2019-5736) * [`74133fa4ea`](containerd@74133fa) Merge pull request [containerd#2995](containerd#2995) from thaJeztah/1.2_backport_remove_normalize_image_ref * [`ed756ffdd4`](containerd@ed756ff) Use distribution's reference.ParseDockerRef * [`2fb3823635`](containerd@2fb3823) Bump github.com/docker/distribution to 0d3efadf0154c2b8a4e7b6621fff9809655cc580 ### Changes from containerd/cri * [`da0c016c`](containerd/cri@da0c016) Merge pull request [containerd#1049](containerd/cri#1049) from Random-Liu/cherrypick-#1045-release-1.2 * [`fd12e919`](containerd/cri@fd12e91) Merge pull request [containerd#1046](containerd/cri#1046) from Random-Liu/cherrypick-#1042-release-1.2 * [`ca6506b4`](containerd/cri@ca6506b) Include default envs from containerd. * [`2add88c1`](containerd/cri@2add88c) Add env cache. * [`50fbeb6f`](containerd/cri@50fbeb6) Don't log config at info level. * [`1a51d430`](containerd/cri@1a51d43) Set /etc/hostname. ### Dependency Changes Previous release can be found at [v1.2.3](https://github.com/containerd/containerd/releases/tag/v1.2.3) * **github.com/containerd/cri** c3cf754321fc38c6af5dfd2552fdde0ad192b31d -> da0c016c830b2ea97fd1d737c49a568a816bf964 * **github.com/docker/distribution** b38e5838b7b2f2ad48e06ec4b500011976080621 -> 0d3efadf0154c2b8a4e7b6621fff9809655cc580 * **github.com/opencontainers/runc** 12f6a991201fdb8f82579582d5e00e28fba06d0a -> 6635b4f0c6af3810594d2770f662f34ddc15b40d * **golang.org/x/sys** 1b2967e3c290b7c545b3db0deeda16e9be4f98a2 -> 41f3e6584952bb034a481797859f6ab34b6803bd
containerd 1.1.6 Welcome to the v1.1.6 release of containerd! This is the sixth patch release for the `containerd` 1.1 release. This release specifically re-vendors `runc` to capture the fix for the critical CVE-2019-5736 container escape. Several CRI fixes were also included in this release and are listed below. ## Runtime * Update runc to 6635b4f0c6af3810594d2770f662f34ddc15b40d to fix CVE-2019-5736 ## CRI * containerd/cri#984 filter events for non k8s.io namespaces (resolves firecracker-microvm/firecracker-containerd#35) * containerd/cri#991 Remove container lifecycle image dependency (fixes containerd/cri#990) * containerd/cri#1016 Specify platform for image pull (fixes containerd/cri#1015) * containerd/cri#1027 Fix the log ending newline handling (fixes containerd/cri#1026) * containerd/cri#1042 Set /etc/hostname (fixes containerd/cri#1041) * containerd/cri#1045 Fix env performance issue (fixes containerd/cri#1044) * Update cri to f0b5665a959119b6a6234001e6d55206d9200e95 Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Lantao Liu * Phil Estes * Michael Crosby * Sebastiaan van Stijn * Akihiro Suda * Derek McGowan * Lifubang * Mike Brown * Wei Fu * Ace-Tang * Mike Brown ### Changes * [`0ad902c05b`](containerd@0ad902c) Merge pull request [containerd#3003](containerd#3003) from estesp/prepare-v1.1.6-release * [`ed854e3ca1`](containerd@ed854e3) Prepare v1.1.6 release * [`a79c691e0f`](containerd@a79c691) Merge pull request [containerd#3015](containerd#3015) from thaJeztah/1.1_bump_cri * [`38bf6c598a`](containerd@38bf6c5) [release/1.1] update containerd/cri to f0b5665a959119b6a6234001e6d55206d9200e95 * [`878924b9b5`](containerd@878924b) Merge pull request [containerd#2999](containerd#2999) from thaJeztah/1.1_backport_bump_runc_cve_2019-5736 * [`3177b4b96e`](containerd@3177b4b) Update runc to 6635b4f0c6af3810594d2770f662f34ddc15b40d (CVE-2019-5736) * [`80c3f1a3e4`](containerd@80c3f1a) Merge pull request [containerd#2966](containerd#2966) from fuweid/remove-noop-1-1 * [`3e6d7f678d`](containerd@3e6d7f6) metadata/gc: remove the noop-loop for snapshot reference * [`813e5f6765`](containerd@813e5f6) Merge pull request [containerd#2954](containerd#2954) from thaJeztah/1.1_backport_fix_xattr * [`b48afb426e`](containerd@b48afb4) fix: SCHILY.xattrs should be SCHILY.xattr * [`9979a1a936`](containerd@9979a1a) Merge pull request [containerd#2951](containerd#2951) from crosbymichael/lint-relase11 * [`ff8a80e4c1`](containerd@ff8a80e) [release/1.1] fix: linter issue * [`6b15143e8d`](containerd@6b15143) Merge pull request [containerd#2933](containerd#2933) from AkihiroSuda/runc20190115-1.1 * [`acd495de00`](containerd@acd495d) bump up runc * [`b55cf2cc05`](containerd@b55cf2c) Merge pull request [containerd#2892](containerd#2892) from thaJeztah/1.1_revert_temp_golang_fix * [`0e93a1e41f`](containerd@0e93a1e) Revert "Fix CI due to Golang 1.10.6 / 1.11.3 regressions (workaround)" * [`02e398d93e`](containerd@02e398d) Merge pull request [containerd#2880](containerd#2880) from thaJeztah/1.1_backport_fix_ci_golang_1.11 * [`66a3eeb5b7`](containerd@66a3eeb) Fix CI due to Golang 1.10.6 / 1.11.3 regressions (workaround) * [`3c89a5e3f1`](containerd@3c89a5e) Merge pull request [containerd#2833](containerd#2833) from acmcodercom/pidreuseattack * [`0bb672dc2b`](containerd@0bb672d) Merge pull request [containerd#2864](containerd#2864) from thaJeztah/1.1_backport_runc-kill-paused * [`a1bfd3a2ed`](containerd@a1bfd3a) Update runc to 96ec2177ae841256168fcf76954f7177af * [`dbf186d970`](containerd@dbf186d) Merge pull request [containerd#2848](containerd#2848) from thaJeztah/1.1_backport_mask_asound * [`3d313382ca`](containerd@3d31338) Add /proc/asound to masked paths * [`6bb83f2195`](containerd@6bb83f2) Merge pull request [containerd#2834](containerd#2834) from acmcodercom/execrace * [`190c910435`](containerd@190c910) fix pid reuse attack when kill a exec process * [`33c860f31d`](containerd@33c860f) fix race in exec delete and start ### Changes from containerd/cri * [`f0b5665a`](containerd/cri@f0b5665) Merge pull request [containerd#1048](containerd/cri#1048) from Random-Liu/cherrypick-#1045-release-1.0 * [`5edec1d8`](containerd/cri@5edec1d) Include default envs from containerd. * [`03cd5a31`](containerd/cri@03cd5a3) Add env cache. * [`eedb9f81`](containerd/cri@eedb9f8) Merge pull request [containerd#1047](containerd/cri#1047) from Random-Liu/cherrypick-#1042-release-1.0 * [`b33f16e1`](containerd/cri@b33f16e) Don't log config at info level. * [`3c7c404d`](containerd/cri@3c7c404) Set /etc/hostname. * [`71909a1a`](containerd/cri@71909a1) Merge pull request [containerd#1031](containerd/cri#1031) from Random-Liu/cherrypick-#1027-release-1.0 * [`dd55db0a`](containerd/cri@dd55db0) Add integration test. * [`b9cb0b21`](containerd/cri@b9cb0b2) Fix lint error. * [`0e24a83a`](containerd/cri@0e24a83) Fix the log ending newline handling. * [`562eefa9`](containerd/cri@562eefa) Merge pull request [containerd#1016](containerd/cri#1016) from Random-Liu/specify-platform-release-1.0 * [`3a10f4e6`](containerd/cri@3a10f4e) Specify platform for image pull. * [`12b411e8`](containerd/cri@12b411e) Merge pull request [containerd#1008](containerd/cri#1008) from Random-Liu/revert-#998-release-1.0 * [`1347be5a`](containerd/cri@1347be5) Revert "Temporary fix for golang regression #29241." * [`685bd043`](containerd/cri@685bd04) Merge pull request [containerd#1006](containerd/cri#1006) from Random-Liu/cherrypick-#1004-release-1.0 * [`9d3f7085`](containerd/cri@9d3f708) Install libseccomp2 package based on debian version. * [`5766ef2d`](containerd/cri@5766ef2) Merge pull request [containerd#995](containerd/cri#995) from Random-Liu/cherrypick-#991-release-1.0 * [`a8b85255`](containerd/cri@a8b8525) Merge pull request [containerd#998](containerd/cri#998) from Random-Liu/cherrypick-#997-release-1.0 * [`2b2ca4c4`](containerd/cri@2b2ca4c) Temporary fix for golang regression #29241. * [`0ac83633`](containerd/cri@0ac8363) Add integration test. * [`5e759f5c`](containerd/cri@5e759f5) Remove container lifecycle image ref dependency. * [`89aaac88`](containerd/cri@89aaac8) Merge pull request [containerd#988](containerd/cri#988) from mikebrow/cherrypick-#984-release-1.0 * [`2f5d677a`](containerd/cri@2f5d677) filter namespace ### Dependency Changes Previous release can be found at [v1.1.5](https://github.com/containerd/containerd/releases/tag/v1.1.5) * **github.com/containerd/cri** bad0ae1102e1bf9e53876f75eacc42bc97cfb557 -> f0b5665a959119b6a6234001e6d55206d9200e95 * **github.com/opencontainers/runc** 10d38b660a77168360df3522881e2dc2be5056bd -> 6635b4f0c6af3810594d2770f662f34ddc15b40d * **golang.org/x/sys** 1b2967e3c290b7c545b3db0deeda16e9be4f98a2 -> 41f3e6584952bb034a481797859f6ab34b6 F438 803bd
containerd 1.2.3 Welcome to the v1.2.3 release of containerd! The third patch release for `containerd` 1.2 contains important fixes for container image backwards compatibility as well as some runtime and CRI issues. ### Notable Updates * fix in Tar xattrs to restore compatibility with older container images [containerd#2953](containerd#2953) * background `O_NONBLOCK` in OpenFifo to fix uncancelled context timeout issue * updated `PlatformRuntime` interface to include Add/Delete methods * runtime: exec race condition fixed [containerd#2970](containerd#2970) * cri: fixed issues with extra newline character in log without an extra newline [containerd#2984](containerd#2984) * cri: fixed an issue with pods being ignored after load failures [containerd#2984](containerd#2984) * runc updated to 12f6a991201fdb8f82579582d5e00e28fba06d0a * cri updated to c3cf754321fc38c6af5dfd2552fdde0ad192b31d Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Lantao Liu * Michael Crosby * Wei Fu * Derek McGowan * Akihiro Suda * Phil Estes * Ace-Tang * Evan Hazlett ### Changes * [`7f5f1176`](containerd@7f5f117) Merge pull request [containerd#2974](containerd#2974) from ehazlett/release-v1.2.3 * [`7216861d`](containerd@7216861) Update for 1.2.3 release * [`5de147d9`](containerd@5de147d) Merge pull request [containerd#2984](containerd#2984) from Random-Liu/update-cri-release-1.2 * [`f7ac34e3`](containerd@f7ac34e) Update cri plugin to c3cf754321fc38c6af5dfd2552fdde0ad192b31d. * [`0137339c`](containerd@0137339) Merge pull request [containerd#2977](containerd#2977) from crosbymichael/io-panic * [`7daf0804`](containerd@7daf080) Fix potential containerd panic. * [`2fd20f11`](containerd@2fd20f1) Merge pull request [containerd#2972](containerd#2972) from crosbymichael/exec-lock * [`5730c500`](containerd@5730c50) Add a separate lock for pid. * [`b9b7ef32`](containerd@b9b7ef3) Revert "use state machine management for exec.Pid()" * [`dba2e5e5`](containerd@dba2e5e) Merge pull request [containerd#2965](containerd#2965) from fuweid/remove-noop * [`9b6a318a`](containerd@9b6a318) metadata/gc: remove the noop-loop for snapshot reference * [`d86a73a4`](containerd@d86a73a) Merge pull request [containerd#2946](containerd#2946) from fuweid/platformruntime * [`dd29d5c3`](containerd@dd29d5c) Merge pull request [containerd#2947](containerd#2947) from fuweid/pull-oct * [`a0b4da71`](containerd@a0b4da7) bugfix: support application/octet-stream during pull * [`b4d38c0f`](containerd@b4d38c0) runtime: add Add/Delete method in PlatformRuntime interface * [`af900154`](containerd@af90015) Merge pull request [containerd#2955](containerd#2955) from Random-Liu/cherrypick-#2944-release-1.2 * [`ab2cf013`](containerd@ab2cf01) Use context.Background for `O_NONBLOCK` `OpenFifo`. * [`fa60b5be`](containerd@fa60b5b) Merge pull request [containerd#2953](containerd#2953) from thaJeztah/1.2_backport_fix_xattr * [`2244a20c`](containerd@2244a20) fix: SCHILY.xattrs should be SCHILY.xattr * [`8c9ede4f`](containerd@8c9ede4) Merge pull request [containerd#2950](containerd#2950) from crosbymichael/lint-release * [`bf3c932a`](containerd@bf3c932) [release 1.2] fix: linter issue * [`5c38d942`](containerd@5c38d94) Merge pull request [containerd#2932](containerd#2932) from AkihiroSuda/runc20190115-1.2 * [`32f10c77`](containerd@32f10c7) bump up runc ### Changes from containerd/cri * [`c3cf7543`](containerd/cri@c3cf754) Merge pull request [containerd#1038](containerd/cri#1038) from Random-Liu/cherrypick-#1037-release-1.2 * [`89672cc6`](containerd/cri@89672cc) Update containerd to 0137339. * [`bba954f1`](containerd/cri@bba954f) Add integration test for unknown state * [`36d523d1`](containerd/cri@36d523d) Support unknown state for sandbox and container * [`ad9a8533`](containerd/cri@ad9a853) Add state machine for sandbox and container * [`c2ea49fa`](containerd/cri@c2ea49f) Change StateUnknown to StateInit * [`df07fdd2`](containerd/cri@df07fdd) Merge pull request [containerd#1030](containerd/cri#1030) from Random-Liu/cherrypick-#1027-release-1.2 * [`da7e1948`](containerd/cri@da7e194) Add integration test. * [`10073e49`](containerd/cri@10073e4) Fix lint error. * [`283aac3d`](containerd/cri@283aac3) Fix the log ending newline handling. ### Dependency Changes Previous release can be found at [v1.2.2](https://github.com/containerd/containerd/releases/tag/v1.2.2) * **github.com/containerd/cri** 0d5cabd006cb5319dc965046067b8432d9fa5ef8 -> c3cf754321fc38c6af5dfd2552fdde0ad192b31d * **github.com/opencontainers/runc** 96ec2177ae841256168fcf76954f7177af9446eb -> 12f6a991201fdb8f82579582d5e00e28fba06d0a
containerd 1.2.2 Welcome to the v1.2.2 release of containerd! The second patch release for `containerd` 1.2 includes important runtime and CRI fixes. ## Runtime * Fix rare deadlock on FIFO creation with timeout ## CRI **ACTION REQUIRED:** For Kubernetes support, when upgrading containerd from 1.2.0 (including rc releases) to 1.2.1+, a node reboot is recommended to avoid a known deadlock in 1.2.0. See [containerd/cri#1018](containerd/cri#1018) * Fix a bug that a container can't be stopped or inspected when its corresponding image is deleted * Fix a bug that the cri plugin handles containerd events outside of `k8s.io` namespace Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Lantao Liu * Derek McGowan * Michael Crosby * Mike Brown * Sebastiaan van Stijn * Akihiro Suda ### Changes * [`9754871865`](containerd@9754871) Merge pull request [containerd#2917](containerd#2917) from dmcgowan/release-1.2.2 * [`ef637041ed`](containerd@ef63704) Update for 1.2.2 release * [`4bb2b0c366`](containerd@4bb2b0c) Merge pull request [containerd#2912](containerd#2912) from Random-Liu/update-cri-release-1.2 * [`f30fd02372`](containerd@f30fd02) Update cri to 0d5cabd006cb5319dc965046067b8432d9fa5ef8 (branch release/1.2). * [`46e633389b`](containerd@46e6333) Merge pull request [containerd#2893](containerd#2893) from thaJeztah/1.2_revert_temp_golang_fix * [`e71a191f6d`](containerd@e71a191) Revert "Fix CI due to Golang 1.10.6 / 1.11.3 regressions (workaround)" * [`aa5e000c96`](containerd@aa5e000) Merge pull request [containerd#2878](containerd#2878) from andrewhsu/backport-1.2-fifo-timeout * [`31be8649fd`](containerd@31be864) Merge pull request [containerd#2881](containerd#2881) from thaJeztah/1.2_backport_fix_ci_golang_1.11 * [`27c6449c2c`](containerd@27c6449) Fix CI due to Golang 1.10.6 / 1.11.3 regressions (workaround) * [`18f57e20b0`](containerd@18f57e2) Add timeout and cancel to shim fifo open ### Changes from containerd/cri * [`0d5cabd0`](containerd/cri@0d5cabd) Merge pull request [containerd#1007](containerd/cri#1007) from Random-Liu/revert-#999-release-1.2 * [`6ca182a8`](containerd/cri@6ca182a) Revert "Temporary fix for golang regression #29241." * [`d0f8c33c`](containerd/cri@d0f8c33) Merge pull request [containerd#1005](containerd/cri#1005) from Random-Liu/cherrypick-#1004-release-1.2 * [`5e6b3386`](containerd/cri@5e6b338) Install libseccomp2 package based on debian version. * [`763bf278`](containerd/cri@763bf27) Merge pull request [containerd#996](containerd/cri#996) from Random-Liu/cherrypick-#995-release-1.2 * [`23e907d9`](containerd/cri@23e907d) Merge pull request [containerd#999](containerd/cri#999) from Random-Liu/cherrypick-#997-release-1.2 * [`298c7fd9`](containerd/cri@298c7fd) Temporary fix for golang regression #29241. * [`e38e269a`](containerd/cri@e38e269) Add integration test. * [`dcc9d279`](containerd/cri@dcc9d27) Remove container lifecycle image ref dependency. * [`47f62352`](containerd/cri@47f6235) Merge pull request [containerd#987](containerd/cri#987) from mikebrow/cherrypick-#984-release-1.2 * [`2216805e`](containerd/cri@2216805) filter namespace ### Dependency Changes Previous release can be found at [v1.2.1](https://github.com/containerd/containerd/releases/tag/v1.2.1) * **github.com/containerd/cri** 0ca1e3c2b73b5c38e72f29bb76338d0078b23d6c -> 0d5cabd006cb5319dc965046067b8432d9fa5ef8
containerd 1.2.1 Welcome to the v1.2.1 release of containerd! The first patch release for `containerd` 1.2 includes several runtime and CRI fixes. ## Runtime * Fix race in process state when pausing containers * Optimize runtime v1 shim locking * Fix hang processing events * Increase event buffer size * Fix broken pipe causing shim hang * Update runc ## CRI * Remove auth config logs * Fix NetNS cache state * Fix a bug that containers sharing pod pid namespace can't be stopped * Remove host pid usage to work better with katacontainer ## Service * Ignore modprobe failures in systemd ExecStartPre Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Lantao Liu * Derek McGowan * Michael Crosby * Phil Estes * Lifubang * Sebastiaan van Stijn * Ace-Tang * Akihiro Suda * Justin Terry * Mike Brown * Wei Fu ### Changes * [`9b32062dc1`](containerd@9b32062) Merge pull request [containerd#2852](containerd#2852) from dmcgowan/prepare-1.2.1 * [`51134077d1`](containerd@5113407) Update version to 1.2.1 * [`dcc47dddd1`](containerd@dcc47dd) Merge pull request [containerd#2861](containerd#2861) from dmcgowan/cherrypick-1.2-2857 * [`4c327b8e56`](containerd@4c327b8) Update runc to 96ec2177ae841256168fcf76954f7177af * [`b65a1137f4`](containerd@b65a113) Merge pull request [containerd#2860](containerd#2860) from Random-Liu/update-cri-release-1.2 * [`18e453e4fd`](containerd@18e453e) Update release note. * [`586807a80c`](containerd@586807a) Update cri plugin to 0ca1e3c2b73b5c38e72f29bb76338d0078b23d6c. * [`4b284fa3ab`](containerd@4b284fa) Merge pull request [containerd#2856](containerd#2856) from Random-Liu/cherrypick-#2854-release-1.2 * [`b413e843ad`](containerd@b413e84) Kill should still work in stopped state. * [`a06cddc2ed`](containerd@a06cddc) Merge pull request [containerd#2845](containerd#2845) from nnttmm/backport_2826 * [`176a56216c`](containerd@176a562) Merge pull request [containerd#2842](containerd#2842) from thaJeztah/1.2_backport_update_runc_1.0-rc6 * [`8dc87dd8d9`](containerd@8dc87dd) Merge pull request [containerd#2847](containerd#2847) from thaJeztah/1.2_backport_mask_asound * [`703786c5c9`](containerd@703786c) Add /proc/asound to masked paths * [`c42c8952b7`](containerd@c42c895) use state machine management for exec.Pid() * [`93d5b4b018`](containerd@93d5b4b) Update runc to v1.0.0-rc6 * [`de1f167ab9`](containerd@de1f167) Merge pull request [containerd#2819](containerd#2819) from dmcgowan/prepare-1.2.1-rc * [`27d72ba795`](containerd@27d72ba) Update version * [`e3840cce17`](containerd@e3840cc) Add 1.2.1 release notes * [`940c0c06d2`](containerd@940c0c0) Merge pull request [containerd#2817](containerd#2817) from Random-Liu/cherrypick-2811-release-1.2 * [`4598ec2111`](containerd@4598ec2) Lock `KillAll`. * [`e429785ca0`](containerd@e429785) Merge pull request [containerd#2815](containerd#2815) from thaJeztah/1.2_backport_shimlockwhenstdinclose * [`9be591e4a6`](containerd@9be591e) Merge pull request [containerd#2803](containerd#2803) from crosbymichael/cherry-proc-lock * [`309973edd9`](containerd@309973e) Merge pull request [containerd#2801](containerd#2801) from crosbymichael/cherry-runc * [`e4c49d7053`](containerd@e4c49d7) Update runc to 10d38b660a77168360df3522881e2dc2be * [`cd83a4e0ba`](containerd@cd83a4e) fix pipe in broken may cause shim lock forever for runtime v1 * [`275f99feb9`](containerd@275f99f) fix pipe in broken may cause shim lock forever for runtime v2 * [`39cd86348c`](containerd@39cd863) Merge pull request [containerd#2795](containerd#2795) from estesp/cherrypick-optimize-shim-lock * [`3afc3f149c`](containerd@3afc3f1) Merge pull request [containerd#2796](containerd#2796) from estesp/cherrypick-exit-ch-buffers * [`f9323ca957`](containerd@f9323ca) Revert v2 dropped events * [`4c72befe09`](containerd@4c72bef) Fix process locking and state management * [`14dc3078b9`](containerd@14dc307) Partially revert the event discard change in containerd#2748. * [`417d694148`](containerd@417d694) Increase reaper buffer size and non-blocking send * [`7ef5285b56`](containerd@7ef5285) optimize shim lock in runtime v1 * [`040e73fde1`](containerd@040e73f) Merge pull request [containerd#2792](containerd#2792) from estesp/cherrypick-update-hcsshim-vendor * [`c4a256d342`](containerd@c4a256d) Merge pull request [containerd#2790](containerd#2790) from estesp/cherrypick-v1v2-runtime-fix * [`737587653d`](containerd@7375876) Temp: add appveyor enablement for release/1.2 branch * [`090e3e98a2`](containerd@090e3e9) Revendor github.com/Microsoft/hcsshim * [`046b6c6d00`](containerd@046b6c6) enhance: update v1/v2 runtime * [`7ff9f6815a`](containerd@7ff9f68) Merge pull request [containerd#2784](containerd#2784) from Random-Liu/update-cri-release-1.2 * [`54895c0b98`](containerd@54895c0) Update cri to 2bb57d27203d82fc79c496aea724aec593b2705a. * [`cd0ecb78c7`](containerd@cd0ecb7) Merge pull request [containerd#2779](containerd#2779) from thaJeztah/1.2_backport_ignore_modprobe_failures * [`c4acd17e70`](containerd@c4acd17) Ignore modprobe failures in ExecStartPre (systemd unit) ### Changes from containerd/cri * [`0ca1e3c2`](containerd/cri@0ca1e3c) Merge pull request [containerd#985](containerd/cri#985) from Random-Liu/cherrypick-#983-release-1.2 * [`88dbb6d6`](containerd/cri@88dbb6d) Update containerd to 4b284fa. * [`d58c1893`](containerd/cri@d58c189) Fix kill when shared pid namespace. * [`8671a278`](containerd/cri@8671a27) Merge pull request [containerd#975](containerd/cri#975) from Random-Liu/cherrypick-#973-release-1.2 * [`e2d2a5de`](containerd/cri@e2d2a5d) Use the `ID` field of `TaskExit` event. * [`2bb57d27`](containerd/cri@2bb57d2) Merge pull request [containerd#966](containerd/cri#966) from Random-Liu/cherrypick-#959-release-1.2 * [`c4773dd5`](containerd/cri@c4773dd) Use commit as version. * [`9b67975b`](containerd/cri@9b67975) Merge pull request [containerd#962](containerd/cri#962) from mikebrow/cherry-pick-remove-authconfig-from-log * [`c064d480`](containerd/cri@c064d48) removes authconfig from info log * [`a72707ca`](containerd/cri@a72707c) Merge pull request [containerd#958](containerd/cri#958) from Random-Liu/cherrypick-#950-release-1.2 * [`6881f449`](containerd/cri@6881f44) Update integration test. * [`6681eb15`](containerd/cri@6681eb1) Manage mount lifecycle and remove cached state ### Dependency Changes Previous release can be found at [v1.2.0](https://github.com/containerd/containerd/releases/tag/v1.2.0) * **github.com/Microsoft/hcsshim** v0.7.12 -> v0.8.1 * **github.com/containerd/cri** f913714917d2456d7e65a0be84962b1ce8acb487 -> 0ca1e3c2b73b5c38e72f29bb76338d0078b23d6c * **github.com/opencontainers/runc** 58592df56734acf62e574865fe40b9e53e967910 -> 96ec2177ae841256168fcf76954f7177af9446eb
containerd 1.2.1-rc.0 Welcome to the v1.2.1-rc.0 release of containerd! *This is a pre-release of containerd* The first patch release for `containerd` 1.2 includes several runtime and CRI fixes. ## Runtime * Fix race in process state when pausing containers * Optimize runtime v1 shim locking * Fix hang processing events * Increase event buffer size * Fix broken pipe causing shim hang * Update runc ## CRI * Remove auth config logs * Fix NetNS cache state ## Service * Ignore modprobe failures in systemd ExecStartPre Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Lantao Liu * Michael Crosby * Derek McGowan * Lifubang * Phil Estes * Ace-Tang * Akihiro Suda * Justin Terry * Mike Brown * Sebastiaan van Stijn * Wei Fu ### Changes * [`de1f167ab9`](containerd@de1f167) Merge pull request [containerd#2819](containerd#2819) from dmcgowan/prepare-1.2.1-rc * [`27d72ba795`](containerd@27d72ba) Update version * [`e3840cce17`](containerd@e3840cc) Add 1.2.1 release notes * [`940c0c06d2`](containerd@940c0c0) Merge pull request [containerd#2817](containerd#2817) from Random-Liu/cherrypick-2811-release-1.2 * [`4598ec2111`](containerd@4598ec2) Lock `KillAll`. * [`e429785ca0`](containerd@e429785) Merge pull request [containerd#2815](containerd#2815) from thaJeztah/1.2_backport_shimlockwhenstdinclose * [`9be591e4a6`](containerd@9be591e) Merge pull request [containerd#2803](containerd#2803) from crosbymichael/cherry-proc-lock * [`309973edd9`](containerd@309973e) Merge pull request [containerd#2801](containerd#2801) from crosbymichael/cherry-runc * [`e4c49d7053`](containerd@e4c49d7) Update runc to 10d38b660a77168360df3522881e2dc2be * [`cd83a4e0ba`](containerd@cd83a4e) fix pipe in broken may cause shim lock forever for runtime v1 * [`275f99feb9`](containerd@275f99f) fix pipe in broken may cause shim lock forever for runtime v2 * [`39cd86348c`](containerd@39cd863) Merge pull request [containerd#2795](containerd#2795) from estesp/cherrypick-optimize-shim-lock * [`3afc3f149c`](containerd@3afc3f1) Merge pull request [containerd#2796](containerd#2796) from estesp/cherrypick-exit-ch-buffers * [`f9323ca957`](containerd@f9323ca) Revert v2 dropped events * [`4c72befe09`](containerd@4c72bef) Fix process locking and state management * [`14dc3078b9`](containerd@14dc307) Partially revert the event discard change in containerd#2748. * [`417d694148`](containerd@417d694) Increase reaper buffer size and non-blocking send * [`7ef5285b56`](containerd@7ef5285) optimize shim lock in runtime v1 * [`040e73fde1`](containerd@040e73f) Merge pull request [containerd#2792](containerd#2792) from estesp/cherrypick-update-hcsshim-vendor * [`c4a256d342`](containerd@c4a256d) Merge pull request [containerd#2790](containerd#2790) from estesp/cherrypick-v1v2-runtime-fix * [`737587653d`](containerd@7375876) Temp: add appveyor enablement for release/1.2 branch * [`090e3e98a2`](containerd@090e3e9) Revendor github.com/Microsoft/hcsshim * [`046b6c6d00`](containerd@046b6c6) enhance: update v1/v2 runtime * [`7ff9f6815a`](containerd@7ff9f68) Merge pull request [containerd#2784](containerd#2784) from Random-Liu/update-cri-release-1.2 * [`54895c0b98`](containerd@54895c0) Update cri to 2bb57d27203d82fc79c496aea724aec593b2705a. * [`cd0ecb78c7`](containerd@cd0ecb7) Merge pull request [containerd#2779](containerd#2779) from thaJeztah/1.2_backport_ignore_modprobe_failures * [`c4acd17e70`](containerd@c4acd17) Ignore modprobe failures in ExecStartPre (systemd unit) ### Changes from containerd/cri * [`2bb57d27`](containerd/cri@2bb57d2) Merge pull request [containerd#966](containerd/cri#966) from Random-Liu/cherrypick-#959-release-1.2 * [`c4773dd5`](containerd/cri@c4773dd) Use commit as version. * [`9b67975b`](containerd/cri@9b67975) Merge pull request [containerd#962](containerd/cri#962) from mikebrow/cherry-pick-remove-authconfig-from-log * [`c064d480`](containerd/cri@c064d48) removes authconfig from info log * [`a72707ca`](containerd/cri@a72707c) Merge pull request [containerd#958](containerd/cri#958) from Random-Liu/cherrypick-#950-release-1.2 * [`6881f449`](containerd/cri@6881f44) Update integration test. * [`6681eb15`](containerd/cri@6681eb1) Manage mount lifecycle and remove cached state ### Dependency Changes Previous release can be found at [v1.2.0](https://github.com/containerd/containerd/releases/tag/v1.2.0) * **github.com/Microsoft/hcsshim** v0.7.12 -> v0.8.1 * **github.com/containerd/cri** f913714917d2456d7e65a0be84962b1ce8acb487 -> 2bb57d27203d82fc79c496aea724aec593b2705a * **github.com/opencontainers/runc** 58592df56734acf62e574865fe40b9e53e967910 -> 10d38b660a77168360df3522881e2dc2be5056bd
PreviousNext