containerd 1.2.7
Welcome to the v1.2.7 release of containerd!
The seventh patch release for containerd 1.2 introduces OCI
image descriptor annotation support and contains fixes for
containerd shim logs, container stop/deletion, cri plugin
and selinux.
It also contains several important bug fixes for goroutine and
file descriptor leakage in containerd and containerd shims.
Notable Updates
- Support annotations in the OCI image descriptor, and filtering image by annotations. #3254
- Support context timeout in ttrpc which can help avoid containerd hangs when a shim is unresponsive. ttrpc#31
- Fix a bug that containerd shim leaks goroutine and file descriptor after containerd restarts. ttrpc#37
- Fix a bug that a container can't be deleted if first deletion attempt is canceled or timeout. #3264
- Fix a bug that containerd leaks file descriptor when using v2 containerd shims, e.g.
containerd-shim-runc-v1. #3273 - Fix a bug that a container with lingering processes can't terminate when it shares pid namespace with another container. moby/moby#38978
- Fix a bug that containerd can't read shim logs after restart. #3282
- Fix a bug that
shim_debugoption is not honored for existing containerd shims after containerd restarts. #3283 - cri: Fix a bug that a container can't be stopped when the exit event is not successfully published by the containerd shim. #3125, #3177
- cri: Fix a bug that exec process is not cleaned up if grpc context is canceled or timeout. cri#1159
- Fix a selinux keyring labeling issue by updating runc to v1.0.0-rc.8 and selinux library to v1.2.2. opencontainers/selinux#50
- Update ttrpc to f82148331ad2181edea8f3f649a1f7add6c3f9c2. #3316
- Update cri to 49ca74043390bc2eeea7a45a46005fbec58a3f88. #3330
Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.
Contributors
- Phil Estes
- Lantao Liu
- Michael Crosby
- Stefan Berger
- Derek McGowan
- Brian Goff
- Georgi Sabev
- Sebastiaan van Stijn
- Li Yuxuan
- Wei Fu
- Jared Cordasco
- Julia Nedialkova
- Justin Terry
- Lifubang
- Mike Brown
- Stephen J Day
- Tõnis Tiigi
- zhoulin xie
Changes
85f6aa5Merge pull request #3331 from Random-Liu/1.2.7-release-notebad4fddPrepare release note for v1.2.7.1bda2edMerge pull request #3338 from dmcgowan/backport-user-agent-fix1af8e6eAdd user agent header to all requests71f5018Merge pull request #3332 from crosbymichael/cherryea70cd6Merge pull request #3330 from Random-Liu/update-cri-release-1.2e4e631adiffer: fix deadlock on commit errordbd25c8Update cri to 49ca74043390bc2eeea7a45a46005fbec58a3f887c69912Merge pull request #3316 from estesp/update-ttrpcd2d36e5Bump ttrpc367c672Merge pull request #3283 from fuweid/cp-v1_respect_shim_debug845990fMerge pull request #3282 from fuweid/cp-redirect-shim-v1-output57f79a1v1: Respect theshim_debugflag when load tasks5508046containerd-shim: redirect output into stdout fifo5a62161Merge pull request #3273 from fuweid/cp-fifo-fd-leakd0319ecMerge pull request #3274 from thaJeztah/1.2_backport_pidnamespace1014235fix shouldKillAllOnExit check5cd83f3Fix fd leak of shim log0717fe6Use named pipes for shim logsea75cfcMerge pull request #3264 from Random-Liu/cherry-pick-#3244-#3263-release-1.23d276b4Fix error handling for task deletion.247de3fReturn NotFound error for kill and delete in deleted state.3923c02Merge pull request #3254 from jcordasc/cherrypick-annotation-fix-1.29196892Merge pull request #3250 from thaJeztah/1.2_backport_bump_ttrpc9ad688aExtend adaptImage function with annotations case5538d71Extend metadata images test with fieldpaths for Annotations309e1dbWrite the Annotations map into the bolt dba456958Prepare boltutil for reading and writing another map4bb9151Add test for ocispec.Descriptor Annotations2364b03Copy annotations around where necessary9844ce4Add missing annotations map to Descriptor for gRPC transfer502ed64Merge pull request #3257 from jcordasc/jcordasc/vndr-go-mod-onlyf7b8ac5Merge pull request #3247 from thaJeztah/1.2_bump_runc_1.0.0rc8d37c5e0Add go.mod file for gopkg.in/yaml.v279f6941bump containerd/ttrpc 699c4e40d1e7416e08bf7019c7ce2e9beced46365f1c66fUpdate ttrpc to support context timeout.05c3be6bump opencontainers/selinux v1.2.2abd5f7cbump runc v1.0.0-rc8af407fbMerge pull request #3235 from estesp/update-to-ms-image6bfa149Convert Windows CI to use Microsoft MCR image urls6cdfa49Merge pull request #3219 from jcordasc/cherrypick-#3213-release-1.2b9da989Merge pull request #3213 from jcordasc/small-fixes56a6552Merge pull request #3229 from estesp/fix-appveyor0b2d89cFix error on pull hang in CI0b58491Move to sha-specified test image for nanoserver
Changes from containerd/cri
49ca740Merge pull request #1159 from Random-Liu/cherrypick-#1156-release-1.27a5e210Make sure exec process is killed when context is canceled.cdbb238Merge pull request #1136 from Random-Liu/cherrypick-#1133-release-1.227b70dbUse wait instead ofTaskExit.cb0eb47Merge pull request #1123 from Random-Liu/update-containerd-release-1.234c9699Update containerd to v1.2.6.1ee63baMerge pull request #1120 from Random-Liu/cherrypick-#1118-release-1.235f1216Support comment in vendor.
Changes from containerd/ttrpc
f821483Merge pull request #38 from masters-of-cats/pr-client-eof-improvement911c9cdImprove connection error handling69eadd1Merge pull request #37 from masters-of-cats/pr-handle-client-eof96dcf73Handle EOF to prevent file descriptor leak699c4e4Merge pull request #35 from Random-Liu/make-on-close-an-optionsba15956Make onclose an option.6914432Merge pull request #33 from JoeWrightss/patch-1ce5c1c4Fix returns error messagef02858bMerge pull request #31 from cpuguy83/support_context_deadlinesa364f44Add support for request timeout propgation.f51df44Merge pull request #30 from estesp/add-common-project-content6c96b39Add common check scripts and project references
Dependency Changes
Previous release can be found at v1.2.6
- github.com/containerd/cri eb926cd79d3bac188dcc4ed7694fc9298f8831be -> 49ca74043390bc2eeea7a45a46005fbec58a3f88
- github.com/containerd/ttrpc 2a805f71863501300ae1976d29f0454ae003e85a -> f82148331ad2181edea8f3f649a1f7add6c3f9c2
- github.com/opencontainers/runc 029124da7af7360afa781a0234d1b083550f797c -> v1.0.0-rc8
- github.com/opencontainers/selinux v1.2.1 -> v1.2.2