containerd 1.2.5
Welcome to the v1.2.5 release of containerd!
The fifth patch release for containerd 1.2 contains fixes
for image management, cgroup management and the
CRI plugin.
It also updates runc to include an improved fix for CVE-2019-5736
to reduce the increased memory-consumption introduced by the original
patch.
All these changes are noted below.
Notable Updates
- Fix an issue that non-existent parent directory in image layers is created with permission
0700. #3017 - Fix an issue that snapshots of the base image can be deleted by mistake, when images
built on top of it are deleted. #3087 - Support for GC references to content from snapshot and container objects. #3080
- cri: Fix a bug that pod can't get started when the same volume is defined
differently in the image and the pod spec. cri#1059 - cri: Fix a bug that causes container start failure after in-place upgrade containerd
to 1.2.4+ or 1.1.6+. cri#1082 - cgroups updated to dbea6f2 to fix issues for systemd 420 and
non-existent cgroups. #3079 - runc updated to 2b18fe1d885ee5083ef9f0838fee39b62d653e30 to include the improved
fix for CVE-2019-5736. #3082 - cri updated to a92c40017473cbe0239ce180125f12669757e44f. #3084
Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.
Contributors
- Michael Crosby
- Phil Estes
- Lantao Liu
- Gábor Lipták
- Derek McGowan
- Cedric Clerget
- Daniel, Dao Quang Minh
- Sebastiaan van Stijn
- Ashley Sykes
- Brent Baude
- Chris Mark
- Georgia Panoutsakopoulou
- Grant Seltzer Richman
- JoeWrightss
- MichaelKatsoulis
- Wei Fu
- Wei Zhang
Changes
bb71b10fd8Merge pull request #3086 from Random-Liu/prepare-release-1-2-56878e2b3faPrepare v1.2.5 release.075e1ed4e0Merge pull request #3092 from Random-Liu/update-cri-release-1.212f76332e6Update cri to a92c40017473cbe0239ce180125f12669757e44f.8f312e3586Merge pull request #3091 from dmcgowan/release-1.2-update-mailmap68f0866dfcUpdate mailmap for cgroup authors96a0d28390Merge pull request #3082 from thaJeztah/1.2_backport_bump_runc9ead3ca72aMerge pull request #3087 from fuweid/me-cherry-pick-287688401ba68abugfix: unpack should always set the snapshot gc labelc1f49fa74cMerge pull request #3084 from Random-Liu/update-cri-release-1.2a5e6b940eaUpdate cri to 8e7ca12f411d65de58ca672e8e4a0c1464b4fe34.0b7e80e347Merge pull request #3080 from dmcgowan/backport-1.2-gc-content-referencesb7e7f1140fupdate runc to 2b18fe1d885ee5083ef9f0838fee39b62d653e3017a4289deeAdd content gc ref labels from containers, images, and snapshotsf3ab47dd2bMerge pull request #3079 from crosbymichael/cherry-picks1.2e8091eb546Bump cgroups to dbea6f296a8180618Merge pull request #3077 from thaJeztah/1.2_bump_golangaed4a5e96cBump to Go 1.11.x782dd8988aMerge pull request #3038 from Random-Liu/cherrypick-#3018-release-1.29899aca83fUnpack should set 0755 when the parent directory doesn't exist.
Changes from containerd/cgroups
dbea6f2Merge pull request #77 from crosbymichael/non-active4a9f0f7Add SkipOpts for handling how subsystems are registered4dacf2bCheck for non-active/supported cgroups39b18afMerge pull request #72 from gliptak/pids12fd912cAdd tests for pids1152b96Merge pull request #73 from gliptak/gofmt1afd5981Gofmt cgroup_test65ce98bMerge pull request #69 from cclerget/master-weight-pointer0f372c6Merge pull request #71 from JoeWrightss/patch-1f48bd85Fixs return error message10cd53eMerge pull request #70 from gliptak/patch-164bade4Take value instead of pointer valueb49c471Correct ineffassign warning3bc6ddeMerge pull request #68 from cclerget/master-net_prio-typo6b552a8Fix net_prio typoc0437c3Merge pull request #67 from gpanouts/get-all-cgroup-tasksa31a0ffAdd functionality for retrieving all tasks of a cgroup82cb49fMerge pull request #63 from ChrsMark/lenient-subsystems-checking7d825b2Add test for cgroups load when missing hierarchy in one subsystemf6cbfb4Change Load function in order to be more lenient on subsystems' checking965bb1dMerge pull request #66 from crosbymichael/systemdciab9ec0eAdd go-systemd dep for CI testing0e94a83Merge pull request #59 from gliptak/patch-14479d11Merge pull request #62 from estesp/fix-gofmt9beb998Merge pull request #61 from gliptak/patch-39a09e58Fix gofmt of systemd.go84e6e6eMerge pull request #60 from gliptak/patch-2e13f6ccAdd GoReportCard badge to READMEd124595Add Go 1.11 to Travisd961ab9Correct typod240072Merge pull request #57 from estesp/project-updatee4cf832Add project references and use common project travis8baeff6Merge pull request #56 from grantseltzer/patch-19de57ffAdd godoc badge to README.md5017d4eMerge pull request #54 from WeiZhang555/bugfix13aaafdBugfix: can't write to cpuset cgroup58556f5Merge pull request #53 from baude/systemdslicedelegate15ed73csystemd-239+ no longer allows delegate slice3024bc7Merge pull request #52 from Sykomaniac/bugfix/slice-name2596f33Remove call to unitName2e2922eMerge pull request #51 from containerd/type0f3de2fFix empty device type
Changes from containerd/cri
a92c4001Merge pull request #1086 from Random-Liu/cherrypick-#1085-release-1.2616d154eFix /etc/hostname backward compatibility issue for in-place upgrade.8e7ca12fMerge pull request #1081 from Random-Liu/cherrypick-#1056-release-1.2989fb1abAdd an OCI annotation for sandbox log directory.0eee55a2Merge pull request #1074 from Random-Liu/cherrypick-#1072-release-1.24d4f610eUse clean path for map and comparison.9c25ab5bMerge pull request #1067 from Random-Liu/cherrypick-#1055-release-1.2eaf8efc5Use the correct sandbox config.afbdeaccMerge pull request #1050 from Random-Liu/update-containerd-release-1.272fab7c8Update containerd to 583472f.
Dependency Changes
Previous release can be found at v1.2.4