Welcome to the v1.2.0-rc.2 release of containerd!
This is a pre-release of containerd

The third major release of containerd brings both a mix of boring and
exciting changes. While fixing many bugs and continuing support for the
containerd 1.0 API, new APIs and interfaces have been added to allow
containerd to be more extensible and cover more use cases.

New V2 Runtime

A new v2 runtime has been added with a stable gRPC interface for managing
containers through external shims.

This allows runtime authors to easily integrate with containerd over a stable
API.

Various runtimes can be selected on a per container basis using the WithRuntime opt
or to test via ctr ctr run --runtime io.containerd.runc.v1.

Documentation

Updated CRI Plugin

Containerd 1.2 is validated against Kubernetes v1.11 and v1.12, but it is also compatible with Kubernetes v1.10.

To use containerd 1.2 with Kubernetes v1.10, be sure to run the stream server on an address accessible to the apiserver. A simple way is to set stream_server_address="" in the [plugins.cri] section of containerd.toml, so that cri plugin will automatically select a routable node address.

Kubernetes Runtime Class

Kubernetes Runtime Class introduced in Kubernetes 1.12 is supported.

Users can:

• Configure alternative runtime handlers with the config option plugins.cri.containerd.runtimes.runtime_handler_name, e.g. plugins.cri.containerd.runtimes.kata. (config.md)
• Use the alternative runtime handler in Kubernetes by creating RuntimeClass for the runtime handler, and specifying RuntimeClassName in the pod spec. (doc)

The plugins.cri.containerd.untrusted_workload_runtime config option and io.kubernetes.cri.untrusted-workload pod annotation are still functional, but start being deprecated. It is recommended to migrate to the RuntimeClass api.

Other Features

• Supported ProcMount option introduced in Kubernetes 1.12.
• Added a new config option plugins.cri.registry.auths for user to config default credentials for specific registries. (doc)
• Added a new config option plugins.cri.x509_key_pair_streaming for user to config a valid certificate for the stream server. (config.md)

Notable Changes

• cri plugin can see images pulled/imported into containerd by ctr images pull and ctr images import.
• CNI config is now dynamically reloaded when changed.
• IPv4 address is guaranteed to be selected, when there are both IPv4 and IPv6 addresses for a pod.
• Privileged untrusted workload is allowed, the workload will get privilege inside the sandbox.
• cri plugin stream server serves on http://localhost:0 by default. This is to work with the kubelet streaming proxy introduced in Kubernetes 1.11.
• Fixed an issue that a container can't be stopped when container processes are accidentally moved out of the container cgroups.
• cluster/health-monitor.sh in the release tarball will be deprecated next release. Please use Kubernetes health-monitor.sh instead.

New Proxy Plugins

A new proxy plugin configuration has been added to allow external snapshotters
be connected to containerd using gRPC.

Documentation

Managed /opt directory

A new Install method on the containerd client allows users to publish host level
binaries using standard container build tooling and container distribution tooling
to download containerd related binaries on their systems.

This can be used for v2 runtime authors to get their runtime shims on an existing
containerd system. It can also be used to install runc and other related tools.

> ctr content fetch docker.io/crosbymichael/runc:latest
> ctr install docker.io/crosbymichael/runc:latest

Documentation

Garbage Collection

Add support for cleaning up leases and content ingests to garbage collections.

Add expiration label to clean up temporary resources.

API Changes

Minor API additions

Other Improvements

Improved multi-arch image support using more precise matching and ranking

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

• Michael Crosby
• Lantao Liu
• Derek McGowan
• Phil Estes
• Justin Terry
• Akihiro Suda
• Kir Kolyshkin
• Stephen J Day
• Abhinandan Prativadi
• Kenfe-Mickaël Laventure
• Evan Hazlett
• Sebastiaan van Stijn
• Andrei Vagin
• Brian Goff
• Lifubang
• John Howard
• Samuel Karp
• Darren Stahl
• Ian Campbell
• Michael Wan
• Wei Fu
• Claudia Beresford
• JulienBalestra
• Maksym Pavlenko
• Wei Fu
• Xuean Yan
• Ace-Tang
• Felix Abecassis
• Ivan Markin
• Jian Liao
• Jie Zhang
• Luc Perkins
• Mathieu Champlon
• Mike Brown
• Tim Allclair
• Tom Godkin
• Tõnis Tiigi
• Vincent Demeester
• Xiaodong Zhang
• Yanqiang Miao
• Yongxin Li
• Yu-Ju Hong
• Alban Crequy
• Aleksa Sarai
• Alexander Gerasiov
• Andrew Osheroff
• Arnaud Rebillout
• Bin Du
• Bingshen Wang
• Danail Branekov
• Daniel, Dao Quang Minh
• Dave Henderson
• Eric Ernst
• Filipe Brandenburger
• Frank Yang
• Harshal Patil
• Jiri Appl
• Justin Cormack
• Kevin Xu
• Lihua Tang
• Lu Jingxiao
• Madhan Raj Mookkandy
• Michael Fraenkel
• Nikos Anastopoulos
• Oliver Stenbom
• Parav Pandit
• Ricardo Aravena
• Rolf Neugebauer
• Rui Cao
• Starnop
• Sudeesh John
• Tobias Klauser
• Xiaoxi He

Changes

• d6de12e2f3 Merge pull request #2723 from dmcgowan/update-version-rc.2
• 5e810c3e3d Update version to 1.2.0-rc.2
• f1dfe86ef4 Merge pull request #2688 from crosbymichael/ctrdecodespec
• 9fe52f66d6 Merge pull request #2721 from Ace-Tang/master
• 7ea75ef4a9 ctr: add some metric item
• acc3b839d3 Merge pull request #2714 from dmcgowan/fix-content-deadlock-after-error
• fdc4e1f426 Merge pull request #2720 from crosbymichael/stress-root
• 0f756495a9 Fix writer deadlock in local store
• e86a0689fb Fix stress test for image config opt requirements
• d725ebe446 Merge pull request #2718 from jterry75/update_runhcs
• 3f1d9b2c4f Revendor github.com/Microsoft/hcsshim
• 5993d096ff Merge pull request #2691 from fuweid/bugfix_cache_empty_label
• 3f5e6cdeaa Merge pull request #2717 from dmcgowan/diff-set-uncompressed-label
• 26506e9e23 Update empty layer label
• bb197ddc47 Set uncompressed label on diff when already exists
• 50c020f4d5 Merge pull request #2716 from estesp/reference-common-project-repo
• bd93a66fc2 Use common project repo copies of travis scripts
• 6f3288333c Move common repository details to project references
• 0146a48cb8 Merge pull request #2712 from nogoegst/mount-openbsd
• 61f4ecb1e1 Merge pull request #2713 from nogoegst/archive-openbsd
• a20603090f archive: add support for OpenBSD
• 0828b7aa96 mount: add support for OpenBSD
• 1a5f9a3434 Merge pull request #2710 from fuweid/enhance_support_duration_for_cpu_profile_collection
• 09aa58bee5 Merge pull request #2705 from jterry75/detachvhd
• f67459929e Merge pull request #2700 from jiria/jiria/add-windows-arm-support
• e6529f4ebc Add support to detect ARM variant on Windows
• 00242e1668 Dismount sandbox VHD on snapshot remove
• 31aa418f84 Merge pull request #2704 from jterry75/remove_tar2vhd
• cce78d4b5d Remove dependency on tar2vhd for LCOW differ
• a2a23d91ca enhance: support specific duration for profile collection
• 15f19d7a67 Merge pull request #2702 from Random-Liu/update-cri-release-1.2
• 88bfc17d14 Update cri to 8506fe836677cc3bb23a16b68145128243d843b5.
• 0c5f8f63c3 Merge pull request #2699 from dmcgowan/update-1.2-rc.1
• 7b750c7b83 Update version to 1.2-rc.1
• 0e6a562b1d Merge pull request #2698 from jterry75/lcow_spec_opt
• 223acbca2a Skip AdditionalGID's for LCOW oci spec
• de4bb2ddfb Merge pull request #2692 from jterry75/shim_reconnect
• 43acab8100 Merge pull request #2690 from dmcgowan/resolver-updates
• 90b7b88e10 Merge pull request #2696 from dmcgowan/import-docker-tar-test
• 29dab3bb24 Merge pull request #2694 from AkihiroSuda/continuity-testutil
• 440c7ed249 Fix commit already exists not leasing
• ab2031236a Add blocking buffered writes to shim
• beb1f432be Review fixes
• 2ddbb2db05 Handle shim delete workdir on Windows
• b8945d35f5 Decrease shim timeout on pipe not found
• ddbeb3f7c7 Adds Windows shim reconnect logs support
• 5349fa31df remove pkg/testutil/loopback_linux.go and use continuity/testutil/loopback
• b6107dca86 Add import integration test
• a6198b7692 Update resolver code
• ac01f20a8e Merge pull request #2577 from samuelkarp/stop-signal
• 655ba65875 Merge pull request #2686 from jterry75/runhcs_improvements
• 57d79e1b49 bugfix: cache empty layer for docker schema1 image
• 607888ce29 ctr: make kill use stop-signal by default
• b392a3a8e4 signals: move ParseSignal to containerd package
• df60d3272a Merge pull request #2687 from dmcgowan/fix-pigz-panic
• 81eb40fabf Adds containerd-shim-runhcs verbose logging support
• 772644e978 Fixes containerd-shim-runhcs State on exec id
• 83437ef646 Fixes containerd-shim-runhcs Delete on exec id
• 84aa0bfde6 Forward containerd debug to shim invocation
• cb0eed833d decode Spec value in command 'ctr c info '
• 75d7d6e7a8 Merge pull request #2684 from dmcgowan/manifest-resolution
• db358a9fd2 Fix panic when bufio Reader called in 2 goroutines
• f88d3e5d6d Merge pull request #2685 from Random-Liu/expose-labels
• 3d5a408bfa Add Labels to client.Image.
• ef8498bf79 Update manifest resolution for non-index manifests
• 4b1d56e240 Merge pull request #2682 from jterry75/lcow_snapshot_lock
• e373126bfb Fix race in lcow snapshot scratch.vhdx creation
• 3bc4ba271e Merge pull request #2681 from Starnop/typo-contianers
• a121b2fb56 typo: fix misspells in comments of containers/contaienrs.go
• 87d1118a0f Merge pull request #2605 from lifubang/runafterstart
• 6496078ef8 Merge pull request #2669 from estesp/fix-withuser-comment
• 54447c6bfb Merge pull request #2676 from dmcgowan/update-continuity
• 697ec5d914 Update continuity
• b01ebaf849 Merge pull request #2674 from crosbymichael/runc
• 92d58bf8f0 Merge pull request #2670 from jterry75/runhcs_stop_success
• 806a8f98bb Update runc to 00dc70017d222b178a002ed30e9321b126
• 557e8e0b0d fix delete running bundle dir when run t start cmd again
• 547bb94e4b Fix ctr run for Windows containers
• 2623241d50 Merge pull request #2671 from crosbymichael/ttrpc
• 99fc40fd60 Merge pull request #2666 from dmcgowan/update-version-1.2-rc.0
• d16cc3a02e Update ttrpc for client timeout support
• 65e0214895 Update version for v1.2.0-rc.0
• 7dc7c5e9ed Update mailmap
• 7768ab1b5e Update runhcs-shim to use go-bindings
• 16b42fce94 Merge pull request #2653 from liyongxin/master
• 15861305e5 Merge pull request #2616 from Lihua93/master
• 41615e8ded Remove a TODO from the code comments that is complete
• 03b1dae195 typo fix
• af23a4c1f2 fix: typo omitted -> ommitted
• 308d3cb60e Merge pull request #2665 from dmcgowan/update-mailmap
• 9faeea1e5e Merge pull request #2649 from estesp/nonewpriv-flag
• b38b4427f6 Merge pull request #2640 from mxpv/pgzip
• 7141ea3c0e Merge pull request #2664 from crosbymichael/proc
• 5600adc86d Merge pull request #2663 from crosbymichael/publish
• 4d0e744d17 Update mailmap
• 94c33d4f94 Add nosuid,noexec,nodev to proc
• 1ad49689d3 Reduce publish connection timeout
• 1ac5ac652b Merge pull request #2633 from dmcgowan/import-docker
• e8fac24e7b Remove decompression benchmark, use sync.Once for initialization
• 3c2668dce4 Merge pull request #2661 from Random-Liu/update-release-note
• 2da1358f86 Update v1.2.0-rc release note.
• d97a907f7f Merge pull request #2658 from dmcgowan/release-notes-1.2-rc
• bd902372de typo fix oci/typo_spec_opts_test
• 47583aad28 Add release notes for containerd 1.2.0
• ef39bba476 Merge pull request #2656 from Random-Liu/update-cri-release-1.2
• 59087b7dc0 Merge pull request #2650 from estesp/supplemental-gids-by-default
• da6d29033c Clean up error messages
• a62be324b7 Unify docker and oci importer
• 003b27eff4 Move compression benchmark test data to gist
• 4d7d63f390 Improve layer decompression speed by using pigz
• ab9942cbf9 Update cri to 9f39e32.
• d09a1c6a95 Merge pull request #2655 from crosbymichael/slack
• 0f99d24d3d Update slack invite link for direct signup
• 0dc7636c0b Merge pull request #2644 from madhanrm/vendor_win
• 074459cb51 Merge pull request #2651 from estesp/travis-darwin-cleanup
• bce20b75da Simplify docker importer
• 9e6db71954 Add docker importer
• f57c5cdefb Refactor image importer
• 85e8221f10 Tests should set up snapshot prior to any use of fs
• 13931e41d6 Add additional GIDs by default if they exist in /etc/group
• b215a65f7d Remove setup steps unecessary when travis runs on darwin
• c28ce39cea Add flag to ctr for running with NoNewPrivileges: false
• 05984a966d Merge pull request #2642 from dmcgowan/fix-commit-already-exists
• 6875d3df3a Always check exists on commit error
• 744d93e960 Vendor in runtime spec referencing windows namespace
• c95bb88fa3 Merge pull request #2634 from jhowardmsft/boltdb
• c0cb2f2568 Add testcase for commit already exist
• 1950f791d9 Merge pull request #2641 from Random-Liu/support-uid-in-additional-group
• 49af788996 Merge pull request #2621 from jianliao82/patch-2
• 178db322b3 Support uid in WithAdditionalGIDs.
• 0120dec799 fix typo
• 8e44270723 Adds a no-op migration for metadata v3
• f1cc4feea6 Vendor go.etcd.io/bbolt @ v1.3.1-etcd.8
• 2586f3fbb9 boltdb/bolt --> go.etcd.io/bbolt
• 66b984ee33 Merge pull request #2638 from crosbymichael/daemon-root
• 700d8d3aa8 Don't start top container in test
• bb0f83ab6e Merge pull request #2636 from justincormack/update-yaml
• 18ae712942 Merge pull request #2627 from estesp/supplemental-groups
• 5271d93086 Update Go yaml library
• 78e61af47a Add With-helper for supplemental gid support
• 83668f424f Merge pull request #2630 from crosbymichael/install-path
• 60d13d63c4 Add optional install path
• ed2bf6dd8a Merge pull request #2624 from Ace-Tang/fix_delete_lock
• 079292e3fc fix: modify lock location of exec delete
• 1597270d04 Merge pull request #2579 from lifubang/ctrrun
• 12c877f57a Merge pull request #2618 from crosbymichael/no-stdin
• 18d9e43bd1 Merge pull request #2623 from yanxuean/move-task-opts
• c48cafea40 Merge pull request #2619 from nashasha1/fix/typo-in-runtime
• 804bf73a07 Merge pull request #2625 from kadisi/import_export
• c11e2b8d44 move Exports method to export.go files
• 3c8692a1a9 move WithXXXX to task_opts.go
• e6d787172c Fix some typo in runtime and snapshots
• 906acb18b6 Don't provide IO when it's not set
• 6ca8355a4e Merge pull request #2615 from tossmilestone/fix-forward-typo
• b5274fe48a Merge pull request #2610 from jterry75/fixup_oci_default_lcow
• 55952ad087 Merge pull request #2612 from nashasha1/fix/contrib-typo
• dcb4d72f98 Merge pull request #2614 from mirake/fix-typos-outputing
• eb6257bb69 Merge pull request #2617 from jianliao82/patch-1
• 7f03ad6579 Fix typos
• 9f817000cc Fix 'forward' typos
• 67849c4714 fix typo
• 1f5ab28216 Typo fix: outputing -> outputting
• ef910311e8 Add a Windows section for Linux oci on LCOW
• 901b2ea2a7 Merge pull request #2595 from fuweid/bugfix_avoid_re_calculate_blob_state
• 9db21deb5d bugfix: avoid to re-calculate blob state for schema1
• 48fe63511a code optimization after review
• 96986c04db Merge pull request #2609 from Callisto13/pr-fix-typos
• 32e6aa742b Fix teeny tiny typos
• 87a9d6e22a Merge pull request #2607 from yanxuean/useless-para
• 517930187e remove useless parameter from newTask
• acced5d58f Merge pull request #2603 from crosbymichael/test-wait
• a3d3055d75 Wait before start with runtime root test
• d5aebde04c Merge pull request #2580 from HusterWan/zr/fix-read-empty-timestamp
• a09bad557f Merge pull request #2598 from Random-Liu/fix-state-error-handling
• 399dba5e63 Merge pull request #2599 from jterry75/windows_task_opt
• ccebed214c Merge pull request #2601 from crosbymichael/unit
• 4972e3fae6 Update unit file for resources and task max
• c48f8dec1f Merge WithResources for Linux/Windows TaskOpts
• 777cc50c72 Merge pull request #2592 from jterry75/specs_with_platform
• 7a4e0806c2 Fix runc state error handling.
• c818a6b13d Merges the oci package for Linux and Windows
• 7e66292555 Merge pull request #2597 from masters-of-cats/kill-all-on-host-ns
• b5ccc66c2c Do not kill all on task delete by default
• 0649e38c57 Merge pull request #2589 from crosbymichael/shim-robo
• 92243ff72a bugfix: updatedAt timestamp file may be empty
• 7cb847b870 Merge pull request #2593 from jterry75/add_win_build
• 85eb2c3c83 Add Windows build status
• 2205e8d67a Improve shim locking
• d50e25360c Add context cancel for epoll
• d89ba5ee08 Merge pull request #2591 from dmcgowan/update-release-script
• 93d3f065ac vendor: update vendor containerd/aufs to commit ffa3997
• 55842b1713 vendor: update github.com/containerd/continuity commit to f44b615
• 69e7c77e6a Add option to add links to changelog
• f76a5ec83a Update template
• ac88082399 Update mailmap file
• 29eab28b8e Merge pull request #2583 from jterry75/snapshotter_lcow
• 0110b3c0bc Introduce the Windows lcow diff/snaphotter
• ce243288e2 Merge pull request #2587 from dmcgowan/release-1.2.0-beta.2
• b30d032a6a Add 1.2.0 beta 2 release notes
• ce1161f806 Merge pull request #2551 from crosbymichael/stdin-block
• 68979c923a Merge pull request #2586 from dmcgowan/platform-filter-limit
• 3d1082e06d Add a manifest filter limiting the number of matches
• be42d777ff Merge pull request #2575 from crosbymichael/workdir
• 8a58195aae Merge pull request #2585 from crosbymichael/low-ports
• ac78a5b615 Remove and create workdir if state dir does not exist
• 4b9b3e8fc9 Add WithAmbientCapabilities opt
• 0a3f87ec2e Merge pull request #2584 from jterry75/windows_r2_exec_fix
• e88ec1f1a6 Fix incorrect ID usage in Windows runtime v2
• bc1ff51411 Don't block on STDIN open
• 6b00aaaf20 Merge pull request #2573 from lifubang/relativepathforrootfs
• 68a5db67ad Merge pull request #2582 from lifubang/startd
• 838c1e2acd Merge pull request #2581 from dmcgowan/platform-matching
• 66f6dd8b3b add -detach flag for 'ctr t start'
• 9edcfcc1cb Add platform match comparer interface
• 1d9b96988f fix when --config provided, don't need Image/RootFS
• d7dc384a99 Merge pull request #2574 from fuweid/add_missing_icon
• 56a51ac945 README.md: add missing banner
• dc6ed04ff5 support relative rootfs path in ctr
• 37a6a91bdf Merge pull request #2572 from estesp/move-website
• ac18e60087 Merge pull request #2571 from dmcgowan/prepare-1.2.0-beta.1
• da1fba0050 Website no longer managed from this repo
• 129dab31ba Add v1.2.0 beta 1 release notes
• ef237f574a Merge pull request #2570 from jterry75/revendor_go-runc
• 57979e1ed2 revendor go-runc to acb7c88c
• 830363acac Merge pull request #2544 from kadisi/process_args
• 248ff06850 Merge pull request #2562 from crosbymichael/console
• 4f644dbfd5 Copy io into and out of console
• 07e2b63d69 Send stderr on windows Terminal
• d6cd1e5379 Update console dep to c12b1e7919c14469339a5d38f2f8
• 53a8c946f5 Merge pull request #2538 from jterry75/runtime_v2_windows
• 019b0c34de Introduce containerd-shim-runhcs-v1 on Windows
• 1a96db4a2c Merge pull request #2559 from crosbymichael/exp-content
• e5115c3919 Export content service New
• 7dae56671d set args value of process if args is nil
• 3f42445e38 Merge pull request #2557 from jhowardmsft/jjh/revendor
• 2c4b7f6bd1 Fixup archive/tar_windows.go type
• 8fe92ea5f3 Revendor Microsoft/hcsshim and go-winio
• 5d8ed81e60 Merge pull request #2555 from dmcgowan/update-runc-vendor
• 4ac20b5b9f Merge pull request #2553 from crosbymichael/release-notes
• ddc53c9cd2 Update runc vendor
• a1affdb4ff Merge pull request #2554 from crosbymichael/timeout
• 97e73c9348 Add WithTime as client Opt
• 7ec974458e Add release notes for v2 runtime and opts
• 6f13ff3ea4 Merge pull request #2550 from dmcgowan/release-1.2.0-beta.0
• 5ab50846c0 Add v1.2.0 beta 0 release notes
• 0ffb948270 Merge pull request #2549 from crosbymichael/default-devices
• b67ea850af Add opt for default unix device permissions
• a69a0b0192 Merge pull request #2548 from ijc/platforms-must-parse
• c83f9773bc platforms: Add MustParse
• 037fc5ed86 Merge pull request #2542 from crosbymichael/fetch-config
• 0aedde55f1 Merge pull request #2543 from Random-Liu/update-cri-v1.11.1
• e9ad2d0481 Update cri to v1.11.1.
• 65839a47a8 Merge pull request #2537 from crosbymichael/mutable
• 9a4c61ccb5 Merge pull request #2502 from fuweid/bugfix_support_more_overlayfs_layers
• 3be457d7d6 Move content.Fetch configuration to struct
• b9eeaa1ce8 Merge pull request #2536 from jterry75/fix_log_pipe_windows
• 8362d9aa48 switch shim log Windows client/server direction
• cc6d261e1a Image and snapshot key are mutable
• 2c85ae2828 Merge pull request #2535 from ijc/WithUserID-docs
• e8c80f37e2 Merge pull request #2530 from dmcgowan/update-release-tool
• 4a74731cd0 oci: Update docs for oci.WithUserID
• 97473edb99 Merge pull request #2534 from cyphar/manpage-rename
• 7aa132ffc7 docs: man: rename config.toml(5) to be more descriptive
• 1ba4aa04b4 Merge pull request #2528 from crosbymichael/shim-debug
• 6ba4ddfdda Add shim log pipe for log forwarding to the daemon
• 67b54c6670 Support >= 128 layers in overlayfs snapshots
• aeb322d87d Update release tool
• 4fb92300fe Merge pull request #2526 from crosbymichael/managed-opt
• 6bf15fa867 Merge pull request #2529 from crosbymichael/missing-gids
• 99df1a9e11 Set gid 0 when no group is specified
• dd97a11b6f Merge pull request #2523 from jterry75/windows_v2_tasks_service
• 2742238909 Add docs for managed opts dir
• 2783a19b10 Merge pull request #2518 from crosbymichael/install
• 74b036491a Merge pull request #2524 from samuelkarp/time.Hour
• 5a47c5ec1d Add lib support as an option
• 1537f31381 Add install support for binary images
• 9ca687be63 Merge pull request #2522 from jterry75/runc_typo
• 9665a2650a *: replace 3600 seconds with 1 hour
• 9936370fef Refactors the TasksService requires per platform
• 9ff702b9a1 Fix a typo in runc-v1 shim
• b8f4c7a9bd Merge pull request #2520 from dmcgowan/use-pause-multiplatform-test
• d3887f6764 Merge pull request #2519 from jterry75/various_win_fixes
• dcb905701c Adds retry support to Windows AnonDialer
• 790c3a3663 Remove extra allocation in NewTask
• 123de20b59 Merge pull request #2517 from estesp/fix-travis-script
• 438b3cb694 Update multi-arch image tests
• 9622369f0e Fix loss of CRI test failure status in CI
• 6a252a7141 IO Windows remove unused wait group
• efb04a3361 Merge pull request #2513 from dmcgowan/set-default-platform-withplatform
• 9dc55ea1d2 Merge pull request #2514 from jterry75/runtime_v2_shim_command
• d64d8a06d5 Use image constructor in client
• 3629344e6e Ensure specifying an empty platform is treated as default
• 9f13b74f4a Runtime v2 absolute shim path to executable
• 875b92c507 Merge pull request #2512 from crosbymichael/gpupath
• ed0e73422d Merge pull request #2468 from dmcgowan/set-platform-on-unpack
• 4249f44d81 Merge pull request #2493 from dmcgowan/sync-lease-removal
• d0ab8c8510 Merge pull request #2496 from dmcgowan/lease-content-uploads
• e4f33dcfb5 Add nvidia Opts to lookup containerd binary or hook path
• c55b9636f7 Merge pull request #2263 from alibaba/fix_no_gzip
• 6647e75651 Merge pull request #2509 from crosbymichael/bundle-cleanup
• 45d0df8fe3 Merge pull request #2510 from crosbymichael/gpucaps2
• 920dc79b4d Merge pull request #2504 from samuelkarp/ctr-t-metrics
• 81e2859e8b Change gpu Capability type to string
• ca71484793 Merge pull request #2480 from dmcgowan/proxy-plugin-doc
• 578a236f30 Merge pull request #2506 from crosbymichael/gpucaps
• 23fbdbaf13 Cleanup workdirs on manager load
• e8f7c2af26 Merge pull request #2507 from flx42/fix-readme-runtime-v2
• 2ebfba575c Merge pull request #2479 from stevvooe/with-file-combinator
• 9a34bb046a metrics: add optional json output
• e22f19618c Remove reference to WithExit in README
• 2a1bd7414b oci: introduce WithSpecFromFile combinator
• 985920c513 Merge pull request #2505 from crosbymichael/cmdargs
• dd0c04970d nvidia GPU support for caps and multiple uuids
• 362405f7b5 Merge pull request #2495 from jterry75/runtime_v2_windows
• af1b6a026e Review feedback.
• 4b5403f9c9 Merge pull request #2 from crosbymichael/runtime-v2-windows
• 13549f7a07 Abstract to SocketAddress
• 2c87d120df ctr: add new metrics subcommand
• e956441fe0 Add WithImageConfigArgs to replace CMD on image
• c8017d0275 Merge pull request #2500 from crosbymichael/12deps
• 5a0b040ab4 Update containerd dependencies for 1.2
• c09932fcb0 Merge pull request #2347 from crosbymichael/streamingapis
• 400f16fc46 Add containers streaming API
• 965cca6f75 Merge pull request #1 from crosbymichael/runtime-v2-windows
• 9d72b4543b Handle windows signals
• f15a1170d3 Add windows publisher
• 1580ec59a5 Remove outdated plugin design doc
• 3e657de3af Document plugins
• dfc9991135 Add content ingests to lease and gc
• d02728ff4a Merge pull request #2499 from crosbymichael/fast
• b760cee65a Update lease service errors
• d3e0c163f8 Adds runtime v2 support for Windows shim's
• 710df57854 Fast path bundle cleanup on load
• 26e2dd6754 Merge pull request #2425 from avagin/docker-fixes
• 3289dc63e9 Merge pull request #2465 from fraenkel/lock_conn
• d47bda91e9 Merge pull request #2490 from thaJeztah/logging_nanosecond_precision
• 9a4d1c5f8d Use connection lock when creating services
• da73b98b63 Set default log formatting to use RFC3339Nano with fixed width
• a88b631961 Merge pull request #2471 from crosbymichael/fatal
• 88ec4559b6 Merge pull request #2487 from thaJeztah/fix_compilation_issues_on_go1.11
• 65ef8310d9 Fix compilation failures on Go 1.11
• 92d147ebde Merge pull request #2485 from AkihiroSuda/fix-native-root-permission
• 7461739b58 native: set '/' permission to 0755
• 0d52c71c80 Merge pull request #2474 from dmcgowan/lease-expiration
• fc2fcf6b2a task: WithExit() doesn't have to overwrite existing options
• 394784b3aa Merge pull request #2482 from crosbymichael/v2cr
• 17ab11a236 Fixes for runtimev2 and checkpoint restore
• 94e132fd07 Add sync option on lease removal
• 49fb363811 Merge pull request #2458 from fuweid/bugfix_apply_hardlink_to_softlink
• 77ffa366af Merge pull request #2476 from kolyshkin/osusergo
• 2a8e28ae29 Merge pull request #2477 from crosbymichael/stress-runtime
• 17ae673b5c Set runtime for stress tests
• 48570b39c5 BUILDING.md: add osusergo for static build
• 3b1534c47a bugfix: allow hardlink to softlink file
• 9743ff21c9 Don't fatal on epoll wait
• 94cfce62ba Merge pull request #2434 from crosbymichael/shimv2
• d53a96fbe4 Add comments for oci protos
• 29b72d4ff0 Support lease filters
• 00a99c0472 Add leases subcommand in ctr
• 4c2ad9cefb Update CRI vendor
• 8cf3fad8d4 Add leases manager interface
• 026b7d922f Add README.md to runtime v2
• c77c89b3d1 Add lease expiration to garbage collection
• 02579c8c3f Merge pull request #2415 from dmcgowan/proxy-plugins
• 3a916a0f67 Update client Image to have configurable platform
• fd31052d9c Add oom events to shim
• dfde5ec316 Merge pull request #2418 from crosbymichael/hook-root
• 9ca23811c3 Merge pull request #2424 from kinvolk/alban/systemd-run
• e17969caad Merge pull request #2436 from thaJeztah/fix_gofmt
• fb1084d9cc Merge pull request #2464 from tonistiigi/oci-export-platform
• ed697290da Merge pull request #2463 from crosbymichael/temp-clean
• 7e49c601a8 Add shim start for shim creation
• da1b5470cd Runtime v2
• 6de11ab973 Merge pull request #2470 from dmcgowan/fix-checkprotos
• d3cd5f1d01 Fix options ordering in proto api txt files
• 82e7204a3c oci-exporter: do not filter current platform on export
• cef05f19a7 Merge pull request #2461 from dmcgowan/seed_rand
• 0105959c3d Don't prevent boot on temp cleanup
• 8baeaff54b Merge pull request #2460 from stevvooe/runc-build-instructions
• 1c6929cbd4 Remove use of crypto rand in tests
• cce0a46c8a Seed random on ctr and containerd startup
• a5e0916aa9 build: include instructions for runc build
• 0c0c271b54 Update golang.org/x/sys
• cb4bf2003f Merge pull request #2454 from hairyhenderson/use-math-rand-instead-of-crypto-rand
• 9a97ab34ce Switching from crypto/rand to math/rand to avoid blocking
• b382b6fe0b Merge pull request #2450 from Random-Liu/support-host-in-resolver
• c8a8a49584 Support specifying host in resolver.
• 01d309e8f2 Merge pull request #2448 from rn/btrfs
• 651920405e test: Increase btrfs loopback device size to 128MB
• b41633746e Merge pull request #2443 from thaJeztah/mask_acpi
• fe64b06a6d Add /proc/keys to masked paths
• 8b42adeddc Add /proc/acpi to masked paths
• e01779a0da Merge pull request #2442 from thaJeztah/bump_containerd_console
• 77a26427c3 update containerd/console to fix race: lock Cond before Signal
• 5900361791 Merge pull request #2420 from sudeeshjohn/master
• 5a4f007e48 Fix the formatting directives error during compilation
• 0b0b41298a Merge pull request #2437 from thaJeztah/remove_go_version_check
• 383d750d4f Workaround for gofmt change in Go 1.11
• 108c9cd4cf Remove Go version check in travis
• 39b6ba826a Merge pull request #2431 from masters-of-cats/plugins-list-subcommand
• 4e64dcce85 Merge pull request #2432 from crosbymichael/ttrpc2
• 6a83168157 Update ttrpc to 94dde388801693c54f88a6596f713b51a8
• 3cf3881fa4 Introduce plugins/list subcommand
• a044b047e8 Merge pull request #2430 from Random-Liu/update-cri-to-v1.11.0
• f530a3c267 Update cri to v1.11.0.
• e51ddf43e9 Merge pull request #2428 from crosbymichael/ttrpc
• 8c709ac43a update typeurl
• 08150bfe76 Update ttrpc for containerd repo
• 6ef65b74e1 Document how to use systemd-run
• ca204317ed Merge pull request #2422 from crosbymichael/ctr-delete
• 08f7ee9828 Merge pull request #2423 from crosbymichael/shim-procs
• fdceb13b14 Add cio.Load for loading io set
• 68e144c637 Set shim max procs via env var
• 1ac546b3c4 Merge pull request #2411 from flx42/move-containerflags
• e239f65590 Handle abs path for rootfs in oci hook
• f15c3be348 Merge pull request #2417 from dmcgowan/update-arm64-normalize
• db3c5afc6d Normalize arm64 to an empty variant
• 47a128d455 Merge pull request #2414 from dmcgowan/platform-arm-normalization
• 995310cda9 Merge pull request #2408 from estesp/carry-2363
• 7049671465 Add support for proxy plugins in configuration
• 37ab93e2c8 Fix arm platform matching
• 7ff2748f9c Merge pull request #2410 from tonistiigi/mlist-error
• 5dd22a20af Move ContainerFlags to "commands" package
• 53fe31d6de images: provide better error for manifest list match error
• 3c5b0dcf27 Update architecture.md
• c1e1f3d6d9 Merge pull request #2397 from harche/doc_fix
• ef449aa38e Docs: Fix incomplete instructions for building using docker
• 0158a6fb34 Merge pull request #2393 from vdemeester/gotestyourself-with-tools
• 832b05ae67 Update tests to use gotest.tools angel
• 3830180ce5 Replace gotestyourself by gotest.tools
• 35887db096 Merge pull request #2370 from dmcgowan/update-maintainers-rules
• 046536cfb1 fixbug: blob for schemav1 could be uncompressed
• 7ba62b147d Update adding maintainer section
• 63522d9eaa Merge pull request #2390 from AkihiroSuda/fix-schema1
• 356b0d5964 Merge pull request #2388 from ehazlett/proc-interface
• df34eefa12 Merge pull request #2330 from crosbymichael/hpc
• a435f2886c separate proc interfaces into standalone package
• 703c25e452 fix schema1 fetchBlob()
• 00d4910633 Merge pull request #2387 from ehazlett/runtime-shim
• 821c8eaa91 runtime/linux/shim -> runtime/shim
• 437e90aa5e Merge pull request #2386 from northtyphoon/bindu/acr-push-location
• 9b865d86a9 docker/pusher: handle location string containing path and query
• 081b2d6330 Merge pull request #2384 from crosbymichael/bump-console
• 0cfca1e633 Bump console for windows tty handling
• 0d7fd3f7ad Merge pull request #2383 from AkihiroSuda/vendor-cri-20180605
• 135a4d9104 update cri vendor
• 84bebdd91d Merge pull request #2379 from dmcgowan/fix-direct-io-terminal-setting
• b867977c01 Merge pull request #2380 from dmcgowan/ignore-zero-msg-size-configs
• 993d4b8fc5 Ignore zero max message size in grpc config
• 6b9be1bfc3 Fix creation of DirectIO overwriting fifo config
• 5b1f69be8a Merge pull request #2135 from AkihiroSuda/oci-content-store
• e1428ef054 Merge pull request #2378 from thaJeztah/update_microsoft_vendors
• 55118c5469 Update go-winio and hcsshim
• d88de4a34f content: change Writer/ReaderAt to take OCI
• e4ad710ce8 Merge pull request #2375 from AkihiroSuda/update-cri-20180531
• 17a54d02c4 update cri vendor
• 1e8b09cfc6 Merge pull request #2353 from ehazlett/process-runtime
• c7083eed5d Merge pull request #2369 from dmcgowan/update-grpc
• 6653917ef9 vendor update
• cae94b930d linux -> runtime/linux
• 8d768689fa cri vendor bump
• 55afe3359a Update grpc timeout and logger
• 80bbaff07a Merge pull request #2361 from masters-of-cats/no-new-keyring
• 7f800e0a7b Merge pull request #2364 from dmcgowan/fix-http-seeker-unsupported-range
• 7132ca2775 Implements WithNoNewKeyring
• 59740d8985 Fix invalid length bug with some registries
• cecf576819 Merge pull request #2362 from crosbymichael/cont-bump
• d2fc059229 Update grpc to 1.12
• 024a4210c7 Update continuity to d3c23511c1bf5851696cba83143d9
• e9434a10bc Merge pull request #2341 from dmcgowan/move-client-content-snapshot
• 195aec232e Merge pull request #2357 from dmcgowan/add-evan-reviewer
• 05406125be Merge pull request #2354 from cpuguy83/bump_continuity
• c9ea816cda Merge pull request #2351 from crosbymichael/pkg
• 7e5a91fa51 Bump continuity to fix copy files > 2^32 bytes
• a4e4af1959 Add Evan Hazlett as a reviewer
• 8e97da0958 Move server to services pkg
• c87ed12da5 Move restart pkg to runtime
• d8ad141851 Remove debug package
• 009ba4d797 Move testutils to pkg
• 927517de36 Move dialer to pkg
• ae4b78d1cc Move progress into pkg
• d1435e6e4d Merge pull request #2350 from crosbymichael/reaper
• 8ea01cc56a Merge pull request #2336 from crosbymichael/spec-alias
• 0bafe236b4 Move reaper under shim package
• cff5e75df8 Merge pull request #2343 from crosbymichael/platform
• 62e22a9fe7 Type alias spec in oci package
• 80272bb691 Merge pull request #2345 from estesp/banner-moved
• 34c032d98f Reference new location for images
• 3f0fe90410 Merge pull request #2344 from lucperkins/lperkins/revert-markdown-file-paths
• e5e63539a6 Return Markdown files to /docs directory
• dc2e115f8b Merge pull request #2318 from crosbymichael/restart
• 2b565da7ec Add restart monitor
• e63768ea09 Merge pull request #2331 from dmcgowan/fix-image-remove-race
• ceae112f7d Rename Runtime to PlatformRuntime
• 257d74f837 Merge pull request #2342 from lucperkins/lperkins/hugo-migration
• d1503dc9ce Migrate website to Hugo
• b511c397c3 Merge pull request #2317 from cmingxu/master
• fcc66f5685 Merge pull request #2337 from AkihiroSuda/fix-vendorconf-runcmd-mismatch
• b1e202c327 fix RUNC.md vs vendor.conf mismatch
• 7c80d0ae11 Rename remote content to proxy content
• b949697a9c Add nvidia gpu support via libnvidia-container
• d791232cd3 Fix typo, should be register instead of regster
• 6e64091322 Move client content store to proxy package
• 48b0a022ef Rename remote snapshotter to proxy
• 0d1807a43d Move client snapshotter to separate package
• 544557289a Add oci-hook command to containerd
• a15e7a0be0 Merge pull request #2332 from dmcgowan/fix-missing-return-in-client-pull
• f0b3d5a2c5 Move image creation after unpack
• 2bc9f49ffd Retry image creation after update not found
• 28caf9027e Add recursive apply layer function
• 70d629fc1d Add missing return statement on pull unpack
• 6eee2a0785 Merge pull request #2324 from kolyshkin/mountinfo
• 8eec9259e6 mount/mountinfo_linux: parser speed up
• f701b3b960 Fix race in ctr pull
• e017143dde Merge pull request #2328 from crosbymichael/client-clean
• 8ee52bfca9 Move import/export code to separate client file
• e22c827cf5 Merge pull request #2323 from stevvooe/ping-snapshots-from-cli
• fc1d936f2c Merge pull request #2326 from cloudfoundry-incubator/pr-oom-score
• 544b985ff2 Don't fail on setting -ve oom score when rootless
• 08b43d9200 Merge pull request #2325 from cloudfoundry-incubator/pr-tempdir
• fc8bce59b9 Use user-specific temp directory if set
• 40c3acd36c Merge pull request #2322 from darrenstahlmsft/revendorHcsshim
• ed72059fac cmd/snapshots: add gc.root to created snapshots
• 07d8716004 Update hcsshim to v0.6.10
• cfba048bec Merge pull request #2319 from ijc/update-go-digest
• 623407a399 Re-vndr with newest vndr
• 388c73052a Bump to latest go-digest.
• 4219f7ba3a Merge pull request #2307 from avagin/tty
• 29c76b13d6 travis: update criu to 3.7
• 566389ade4 test: Check C/R for containers with TTYs
• 60daa414db Allow to checkpoint and restore a container with console
• 0846d6f8e9 vendor: update go-runc
• cddd791c1c Merge pull request #2315 from crosbymichael/logio
• 1c263a7d5e Add LogFile as a cio IO option
• c73794f8dc Merge pull request #2314 from ehazlett/runc-shim-debug
• 530849fed4 enable runc debug in shim
• a70e26c64f Merge pull request #2310 from ehazlett/directio-with-terminal
• 6b4355d242 add NewDirectIOWithTerminal; add test for pty
• 1a5e0df98f Merge pull request #2305 from kolyshkin/context
• e073a48c7b Merge pull request #2309 from crosbymichael/events-closed
• 090687916d Correctly handle reading from events channel
• bbe14f0a2e Switch from x/net/context to context
• 9d0d4b806c context pkg: untangle
• f337075620 Bump golang.org/x/net

Changes from containerd/aufs

• ffa3997 update containerd

Changes from containerd/cgroups

• 5e61083 Merge pull request #50 from jingxiaolu/master
• 0d1587c Add interface AddTask to control groups. So that we can set tasks when we need.
• 07683a6 Merge pull request #45 from anastop/master
• 15ef4c3 Add Update method for the cpuset controller
• c755602 Merge pull request #41 from estesp/update-travis-go
• 0a357bb Update Go versions for travis
• 5539584 Fix incorrect use of OCI runtime specs-go cgroup dev types
• bf7d89f Merge pull request #40 from containerd/license
• f1d9380 Add license to files
• 78a98a6 Merge pull request #39 from paravmellanox/master
• ccd26c4 Add support for rdma cgroup

Changes from containerd/console

• c12b1e7 Merge pull request #29 from crosbymichael/win
• 7a61819 Update read write on windows console
• 8894ab3 Revert "Fix reading from and writing to console on windows"
• b3d113c Use stdout for windows console
• 4d8a41f Merge pull request #27 from gerasiov/master
• 5d1b48d console_linux: Fix race: lock Cond before Signal.
• 9a57d21 Merge pull request #28 from crosbymichael/travis
• 058dd74 Update travis file for 1.10
• 9290d21 Merge pull request #25 from mat007/support-read-write-windows
• a7ba593 Fix reading from and writing to console on windows
• 6fe6f36 Fix some typos in comments

Changes from containerd/continuity

• bd77b46 Merge pull request #136 from AkihiroSuda/sync-testutil-2
• 4fd7ce4 split testutil/loopback_linux.go to another pkg
• 98c57b8 Merge pull request #130 from estesp/travis-project
• 7f53d41 Merge pull request #134 from dmcgowan/remove-unnecessary-fs-root-check
• 18a1c09 Remove unreachable block in fs path cleanup
• 508d86a Merge pull request #123 from kolyshkin/path-error
• f192d1b Add common project validation scripts
• aae7d98 Merge pull request #127 from AkihiroSuda/sync-testutil
• f04dbc0 Merge pull request #133 from kolyshkin/context
• 508ef95 travis CI: rm go 1.8
• 3448067 Switch from x/net/context to context
• c2ac4ec Merge pull request #129 from estesp/fileheaders
• cc3f87e Merge pull request #131 from estesp/fixup-vendor
• d1610d5 Fixup vendor/ with latest run of vndr
• f9cc5ee Add fileheaders with ltag tool
• f768f56 testutil: sync with containerd
• f44b615 Merge pull request #124 from HusterWan/zr/expose-func
• 4469d34 feature: expose atomicWriterFile function as AtomicWriteFile
• f5b895a driver/{Mknod,Mkfifo,Lchmod}: return PathError
• c7c5070 Merge pull request #121 from kolyshkin/xattr
• a408b7b sysx/xattr: unify implementation
• 363bb7e vendor: bump golang.org/x/sys to 77b0e4315053
• 0e47603 sysx: add README
• 0377f7d Merge pull request #120 from kolyshkin/lchmod-linux-go111
• 6d0b394 context.Apply: no need to skip chmod on symlinks
• 94af800 Lchmod(): fix for Linux/Go 1.11
• 9ab0ec6 Lchmod(): simplify and optimize
• 2b69c16 sysx.Fchmodat(): remove
• d2ce1bc sysx/xattr_darwin.go: rm duplicate Fchmodat def
• 246e490 Merge pull request #111 from cpuguy83/disk_usage_cancellation
• ab18c4f Merge pull request #115 from cpuguy83/update_travis
• d3c2351 Merge pull request #113 from darstahl/ResolveRoot
• a60600a Merge pull request #117 from dmcgowan/fix-create-file-reader-creation
• 7d784df Fix bug in multiple calls to file applier
• 2d3749b Merge pull request #116 from dmcgowan/random-file-test
• a3fa14c Update TestCopyWithLargeFile
• 7333bda Merge pull request #114 from cpuguy83/fix_copy_file_range_usage
• afba265 Fix copy_file_range usage for files > 2GB
• 7f1a8b2 Make sure travis tests on latest go version.
• 5633c24 Stop resolving symlink in containWithRoot
• 7a71e24 Fix vet failure
• 8100e75 Resolve context root to follow symlinks as root directories
• c6cef34 Merge pull request #106 from cpuguy83/export_copy_file
• a88ec15 Merge pull request #108 from tklauser/xattr-sys-unix
• 6cde904 Support cancellation via context in DiskUsage.
• d59f454 Export copyFile
• 6268e28 sysx: use xattr functions from x/sys/unix

Changes from containerd/cri

• 8506fe83 Merge pull request #939 from Random-Liu/cherrypick-#938-release-1.2
• f6db6132 Update test based on new CRI.
• 97fcaf90 Update kubernetes to v1.12.0.
• 33624c19 Merge pull request #933 from Random-Liu/cherrypick-#926-release-1.2
• 84a720ee Add integration test
• 18ecffc9 Manage unmanaged images in k8s.io namespace
• e5b175d6 Merge pull request #931 from Random-Liu/cherrypick-#924-release-1.2
• dd67e74e Update containerd to f88d3e5.
• bf62320e Add timeout for container/sandbox recover and event monitor.
• 79645ed3 Merge pull request #929 from Random-Liu/cherrypick-#928-release-1.2
• f888b2f4 Update critools version.
• 9f39e328 Merge pull request #919 from Random-Liu/update-cri-tools
• 3de8c8bf Update cri-tools to 98eea54af789ae13edce79cba101fb9ac8e7b241.
• 31a960fb Merge pull request #918 from Random-Liu/show-runtime-handler-in-sandbox-info
• 46b8f429 Merge pull request #912 from Random-Liu/add-hostname-env-integration-test
• 4b45e16a Show runtime handler in sandbox debug info.
• c7c68993 Add hostname env integration test.
• e402ae2f Merge pull request #914 from Random-Liu/fix-addition-gids
• 51ee6ea6 Add integration test
• ca3b806b Fix addition group ids.
• f267f217 Update containerd to 66b984e
• 3e5eb0c7 Merge pull request #911 from Random-Liu/sctp-support
• f540c2a7 Skip sctp protocol hostport mapping.
• 04703092 Merge pull request #908 from Random-Liu/update-kubernetes
• a2655acd Update kubernetes to v1.12.0-beta.1.
• fe0cd367 Merge pull request #865 from Random-Liu/cache-image-reference
• ed68cfd5 Merge pull request #901 from Random-Liu/fix-hostname-env
• 953d67d2 Create image reference cache.
• f08a90ff Fix hostname env.
• cfdf8724 Merge pull request #891 from tallclair/runtimehandler
• 9cd964f6 Merge pull request #898 from Random-Liu/revert-#895
• eb3d3cfc Revert "Add HOSTNAME to env by default for pod containers"
• db8500d1 Merge pull request #892 from Random-Liu/fix-volume-mount-order
• e7189a25 Add RuntimeHandler support
• 67c0b3e5 Merge pull request #894 from Random-Liu/support-masked-readonly-paths
• 1e471b1a Merge pull request #895 from estesp/add-hostname-env
• 4c3e195d Add HOSTNAME to env by default for pod containers
• 3e4cec87 Add MaskedPaths and ReadonlyPaths support.
• 4a65865e Update kubernetes to 6b7c39a4f8d4c38e8724550cc3e6e41b7ac7a276
• 063f8158 Sort volume mount.
• 89b5b3cc Vendor latest CRI API
• 49877571 Merge pull request #886 from DataDog/JulienBalestra/tls-stream
• dffd0dfa streaming: tls conf validation to func with tests
• 9acd9531 Merge pull request #890 from Random-Liu/update-go-cni
• 3da8bedb Update go-cni to 6d7b509a054a3cb1c35ed1865d4fde2f0cb547cd.
• 859003a9 stream: struct for x509 key pair, update the docs, error management
• b82b5242 stream: can use user certificates
• df67dfff Merge pull request #885 from Random-Liu/enhance-container-stop
• bca304ff Fix an issue that container/sandbox can't be stopped.
• a3af7393 Merge pull request #880 from thaJeztah/align_dependencies_to_tags
• 1d7f5f43 Use tagged versions for dependencies where possible
• 58eb0455 Merge pull request #873 from miaoyq/verify-selinux-level
• a87bda08 update selinux to b6fa367
• 415727cd verify selinux level format
• 7d483b2f Merge pull request #874 from Random-Liu/update-containerd
• 6379fd03 Update containerd to b9eeaa1.
• c9d61515 Merge pull request #869 from Random-Liu/support-netd
• d1dcacf9 Support netd in GCE bootstrap.
• 1263024a Merge pull request #864 from Random-Liu/unpack-during-import
• e1a37e87 Unpack image during import.
• [a0cfc8c1](https://github.com/containerd/cri/co...