containerd 1.5.0-beta.1
Pre-release
Pre-release
v1.5.0-beta.1
dmcgowan
Derek McGowan
This tag was signed with the committer’s verified signature.
dmcgowan
Derek McGowan
Welcome to the v1.5.0-beta.1 release of containerd!
This is a pre-release of containerd
The sixth major release of containerd includes many stability improvements
and code organization changes to make contribution easier and make future
features cleaner to develop. This includes bringing CRI development into the
main containerd repository and switching to Go modules. This release also
brings support for the Node Resource Interface (NRI).
Project Organization
- Merge containerd/cri codebased into containerd/containerd #4593
- Move to Go modules #4760
- Remove
selinuxbuild tag #4849 - Add json log format output option for daemon log #4803
Snapshots
- Add configurable overlayfs path #4505
- Separate overlay implementation from plugin #4506
- Native snapshotter configuration and plugin separation #4517
- Devmapper snapshotter configuration and plugin separation #4573
- AUFS snapshotter configuration and plugin separation #4533
- ZFS snapshotter configuration and plugin separation #4534
- Pass custom snapshot labels when creating snapshot #4630 #4635
- Add platform check for snapshotter support when unpacking #3927
- Handle loopback mounts #4902
Distribution
- Improve registry response errors #4523
- Improve image pull performance over HTTP 1.1 #4653
- Registry configuration package #4138
- Add support for layers compressed with zstd #4809
- Allow arm64 to fallback to arm (v8, v7, v6, v5) 4932
Runtime
- Add annotations to containerd task update API #4647
- Add logging binary support when terminal is true #4502
Windows
- Optimize LCOW snapshotter use of scratch layers #4643
And many more improvements and bug fixes in the complete changelog
Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.
Contributors
- Lantao Liu
- Mike Brown
- Phil Estes
- Sebastiaan van Stijn
- Derek McGowan
- Akihiro Suda
- Michael Crosby
- Maksym Pavlenko
- Wei Fu
- Abhinandan Prativadi
- Xuean Yan
- Shengjing Zhu
- Davanum Srinivas
- Yanqiang Miao
- Justin Terry
- Kazuyoshi Kato
- Ian Campbell
- Brandon Lum
- Samuel Karp
- Brian Goff
- Kohei Tokunaga
- Phil Estes
- Daniel Canter
- Tianon Gravi
- Jose Carlos Venegas Munoz
- Li Yuxuan
- Siddharth Yadav
- Tõnis Tiigi
- heartlock
- Antonio Ojea
- Jian Zeng
- Johannes M. Scheuermann
- Julien Balestra
- Kathryn Baldauf
- Kevin Parsons
- Paul "TBBle" Hampson
- Rui Chen
- Tobias Klauser
- Xianglin Gao
- Zhoulin Xie
- Akshat Kumar
- Aldo Culquicondor
- Amr Mahdi
- Christopher M. Luciano
- Crazykev
- Haiyan Meng
- Jacob Blain Christen
- Kir Kolyshkin
- Martin Hickey
- Samuel Karp
- Stephen J Day
- Tim Allclair
- Wade Lee
- Yu-Ju Hong
- Aaron Crickenberger
- Aditi Sharma
- Avi Deitcher
- Benjamin Elder
- Boris Popovschi
- Byonggon Chun
- Daniel Nephin
- Ed Bartosh
- Evan Hazlett
- George Goh
- Hui Zhu
- James Jackson
- Jintao Zhang
- Junior Santos
- Leonardo Taccari
- Mohammad Asif Siddiqui
- Peng Tao
- Vlad Ungureanu
- sedflix
- Abhishek Kulkarni
- AdamKorcz
- Alban Crequy
- Alex Price
- Amit Barve
- Angela Li
- Antoine Huret
- Antonio Ojea
- Archana Shinde
- Ashray Jain
- Bingshen Wang
- Bowen Yan
- Brian Pursley
- Chethan Suresh
- Cong Liu
- Darren Shepherd
- Dave Syer
- Didier Durand
- Eric Ernst
- Erik Wilson
- Evan
- Fabricio Voznika
- Filipe Brandenburger
- Fupan Li
- Gaurav Singh
- Georgi Sabev
- Giuseppe Capizzi
- Giuseppe Scrivano
- Guangwen Feng
- Guanjun Gong
- Hajime Tazaki
- Harshal Patil
- Hector Fernandez
- Henrik Schmidt
- HsuanChi (Austin) Kuo
- IceberGu
- Ilya Dmitrichenko
- Jakob
- James Sturtevant
- Jamie Zhuang
- Jason Hall
- Jess Frazelle
- Jian Qiu
- Joe Borg
- Joris De Winne
- Jun Lin Chen
- Justin Cormack
- Laszlo Janosi
- Li Ning
- Liu Hua
- Lorenz Brun
- Madhan Raj Mookkandy
- Maksim An
- Maksym Pavlenko
- Malepati Bala Siva Sai Akhil
- Mauricio Vásquez
- Michael Hamrah
- Morgan Bauer
- Moritz Johner
- Muhammad Kaisar Arkhan
- Nikhita Raghunath
- Nishchay Kumar
- Nitesh Konkar
- Odin Ugedal
- Pavel Tikhomirov
- Philip Marin
- Prashant Bhutani
- Qian Xiao
- Ricardo Aravena
- Robin Winkelewski
- Roy Yang
- Samarth Shah
- Sascha Grunert
- Shishir Mahajan
- Simon Kaegi
- Stefan Berger
- Su Xiaolin
- Takumasa Sakao
- Teemu Kallio
- Thibaut Collet
- Tobias Bradtke
- Tyler Kellen
- Vishal Verma
- Wei Wei
- Yecheng Fu
- Yohei Ueda
- Yongkun Anfernee Gui
- Yue Zhang
- Yuxing Liu
- Zhenhao Zhang
- Zhiyu Li
- blade
- jiazhiguang
- kwgchi
- maodou
- sarahnovotny
- shouhei
- songjiayang
- varsha teratipally
- yang yang
- zhangjianming
- zhangzhenhao
- zhuangqh
Changes
2600 commits
cfa842c27Merge pull request #5003 from dmcgowan/prepare-1.5.0-beta.1a2973c70aPrepare release notes for 1.5.0-beta.1b3f240206Merge pull request #5002 from crosbymichael/anno-image-namee908be5b5Merge pull request #5001 from kzys/no-lint-upgraded05f7bdf0Merge pull request #5011 from thaJeztah/setup_go_v225e42e702Merge pull request #5004 from thaJeztah/bump_golang129c67dc8GHA: use setup-go@v2ec7d905f4Update to go 1.15.85f2d02adcMerge pull request #4717 from thaJeztah/reduce_libcontainer_useccbeb550bMerge pull request #4991 from kzys/no-auto-cleare9e3b1d6fMerge pull request #5000 from kzys/fix-assert-check07db46ee2lint: update nolint syntax for golangci-lintb14ccd205ci/gha: upgrade golangci-lint from v1.29.0 to v1.36.0aa5e55ad9Merge pull request #4980 from thaJeztah/prevent_cio_npee178af2d3Merge pull request #4999 from thaJeztah/retry_fedora05a2e280amount: make setupLoop() work with with Autoclear2ac33d79ftest: fix assert.Check's argumets to show its parameters correctlyf101c8ac6ci/gha/fedora: retry vagrant up04d061fa6update runc to v1.0.0-rc9354cc3483fpkg/cri/server: don't import libcontainer/configs99cb62f23[cri] add image-name annotationccde82da2Merge pull request #4987 from Random-Liu/fix-auth-config-conversionb5bf1fd5dFix deprecated registry auth conversion.40542305bMerge pull request #4994 from kzys/kill-before-buf310e59073test: stop containerd before accessing the stdoutf07e1811eMerge pull request #4988 from Iceber/fix-runc-v2-serviceb458583b7runtime: fix shutdown runc v2 servicea39478ab9Merge pull request #4986 from kzys/devmapper-logdb6075fc2snapshot/devmapper: log actual values to investigate #496549c5c1487Merge pull request #4906 from payall4u/bugfix/fix-open-shim-fifo7a468a3f3cio.copyIO: refactor to use cio.Close() (windows)219fa3d0acio.copyIO: fix pipes potentially not being closed (Windows)baf6c1d5ecio: openFifos() use named return variables to use in defer()6a2d3990dcio: FIFOSet.Close() check if FIFOSet is nill to prevent NPE957fa3379change flag from RDONLY to RDWR and close the fifo correct19ee068f9Merge pull request #4974 from adisky/update-protobuf1423e9199Update gogo/protobuf to v1.3.2cb6f66504Merge pull request #4975 from thaJeztah/mod_tidy6c69cd55fMakefile: run "go mod tidy" when vendoringc28533c7aMerge pull request #4972 from crosbymichael/exec-sync591d7e2fbremove exec sync debug contents from logsc28e42441Merge pull request #4922 from kinvolk/alban_pod_annotations28e4fb25fcri: add annotations for pod name and namespace20346607bMerge pull request #4701 from kzys/content-store-filterf615c58dcMerge pull request #4682 from fuweid/cri-handle-exit-event-separate3299c5560Merge pull request #4967 from dmcgowan/cleanup-root9108373cbMerge pull request #4968 from dmcgowan/add-prune-referencese56de6309cri: handle sandbox/container exit event separately9aca94c5bAdd prune command to remove layer references643bb9b66Merge pull request #4958 from AkihiroSuda/crun-017aae24ecbcMerge pull request #4963 from zhsj/move-runtimeopt9e78a001bMerge pull request #4964 from zhsj/cgo074873c68Add cgo tag to btrfs plugin5142c3842Merge pull request #4960 from AkihiroSuda/eol-120cd8309c8Merge pull request #4959 from AkihiroSuda/go1.15.72818fdebaMove runtimeoptions out of cri packaged49e1d239RELEASES.md: v1.2 reached EOL on October 15, 202045265febdBump Golang 1.15.780243b866CI: update crun to 0.170bbbc59b9Merge pull request #4957 from thaJeztah/update_seccomp_profile809635b60Merge pull request #4759 from anmaxvl/anmaxvl/windows-logging-driver5a66c2ae5Merge pull request #4881 from AkihiroSuda/converter5ca3ac65cadd Image content converter9b9de47ebMerge pull request #4824 from dcantah/dcantah/reuse-scratch392b2857aMerge pull request #4848 from katiewasnothere/ctr_image_chainide1445dff1profiles: seccomp: update to Linux 5.11 syscall listddb5e1651Enhance logging driver and ctr tasks to support windows83f8d6126Merge pull request #4925 from dmcgowan/prepare-1.5.0-beta.0c4bff3d17Merge pull request #4943 from AkihiroSuda/platforms-literallyonly7d6d52646Add release notes for v1.5.0-beta.0c35b4cfedMerge pull request #4955 from adisky/fix-docd09bf1886Clean Up Doc and fix some broken links1230bd630Merge pull request #4952 from crosbymichael/label-etc-files9c3f17139Merge pull request #4953 from ImJasonH/cpuinfo363f2c392Derive cpuinfo as needed, instead of at init-timea73103923[cri] label etc files for selinux containerse22ce0fa0platforms: add subarchless version of Only()66fec3bbbMerge pull request #4932 from tianon/arm64-fallbackcb76f534fMerge pull request #4865 from yukiisbored/yuki_is_bored/openbsd-support3e5acb9d9Add scratch space re-use functionality to LCOW snapshotter4073aaa7aAllow arm64 to fallback to arm (v8, v7, v6, v5)124fc14a4Merge pull request #4926 from dims/update-k8s-to-latest-v1.20.x14df541a4Add a new flag to images pull for printing out the pulled image's chainID32506bd45Merge pull request #4934 from dims/bump-golang-1.15.6b72534967Bump Golang 1.15.6378c11924Bump k8s deps to v1.20.1abc0041a0Merge pull request #4918 from liusdu/sig_bus38604a76cMerge pull request #4933 from TBBle/fix-resolver-header-map-panic7dffdfa56Move documentation and helper directories out of root785ac3ab7Ensure request.header is never nil550b4949cMerge pull request #4700 from mikebrow/cri-security-profile-update3b6a38680Merge pull request #4528 from tianon/platforms-comparee62d03b61Merge pull request #4578 from thaJeztah/use_moby_sys9db6aa625Merge pull request #4302 from songjiayang/update-docker-resolver86277395csignal: do not print message when dealing with SIG_PIPEa4f4a4311Merge pull request #4916 from stefanberger/streamproc_env_vars5fa5f15deAdd amd64->386 fallback6bf565045Merge pull request #4923 from fuweid/fix-wrong-context1917ca5f7Allow passing environent variables to StreamProcessors04df60d10Merge pull request #4858 from samuelkarp/freebsd-native-snapshotter846cb963cruntime/v2: should use defer ctx to cleanup75c264622Merge pull request #4902 from mxpv/losetupd7ec6e9e8Merge pull request #4917 from AkihiroSuda/demote-introspection-log-level2374178c9pkg/cri/server: optimizations in unmountRecursive()757291920mount: remove remaining uses of mount.Self()474abe572mount: remove unused mount.PID()f6a0ec7c0mount.CleanupTempMounts() use github.com/moby/sys/mountinfo43578a9d6mount: mount.PID(), mount.Self(): change signature to return pointersfb464b94dmount: replace mountinfo handling with moby/sys/mountinfoa9cc2a772introspection: demote log level7c6d710bcMerge pull request #4911 from dims/reduce-clutter-of-log-entries-during-process-exec092f9e607Merge pull request #4909 from fenggw-fnst/work1f5b84f27[CRI] Reduce clutter of log entries during process execution3e7bb721dFix typo in comment18ad79d32Merge pull request #4907 from mxpv/headersb236a9337Merge pull request #4896 from AkihiroSuda/export-skip-non-distributablec1b01eabcAdd copyright header to proto fileseb1649225Refactor loseup test5d1955ac2Merge pull request #4899 from zhsj/cri-install-docc5fa0298cAddress loop dev PR comments #4178b7026236fsnapshot/devmapper: use losetup in mount package9e4207016mount: handle loopback mount380b52652Bring OpenBSD support91dc69ee4docs: point cri release tarball to github release page602af6f67Merge pull request #4895 from AkihiroSuda/remove-redundant-secreporte2e2c5737export: add --skip-non-distributabled50de11ceISSUE_TEMPLATE: remove redundant "report a security issue" button9067796ceMerge pull request #4891 from tianon/generic-arm-vector9072b0914Refactor platforms.Only with a "platformVector" helper7a2720f5eMerge pull request #4879 from tianon/platforms-only-test9d98f882bMerge pull request #4859 from dcantah/update-hcsshim-winiocf62a557aMerge pull request #4882 from AkihiroSuda/issue-question-guide9a7bb7e40add guidance about GitHub Discussions66a3f2cbcAdd platforms.Only test178e9a101Merge pull request #4866 from zhsj/doc-fixac5ca3a41Merge pull request #4841 from AdamKorcz/fuzz1b624486c8native: support for FreeBSDd6baafa75mount: basic support for FreeBSD5988bfc1edocs: Various typo found by codespellb4c604692docs: Move autocomplete distribution section next to install section1cc3c7f4adocs: Remove appveyor badge454e54033docs: Tweak installing btrfs dependency on Debian/Ubuntu13917b03ddocs: Update command in BUILDING after moving to go modulesdc207b654Merge pull request #4860 from masters-of-cats/pr-process-not-found-err3698bc4ffAdded 2 fuzzersa551492e9Update hcsshim and go-winio vendoring7451dd1edReturn GRPC not found error instead of plain onece7024558Merge pull request #4863 from crosbymichael/log-dir070b69844Merge pull request #4845 from skaegi/oom_score-max2e442ea48[cri] ensure log dir is created3cd1c832eMerge pull request #4796 from jsj/jsj/4572a5f9613b8Merge pull request #3927 from katiewasnothere/snapshotter_check318e34b98Merge pull request #4855 from tonistiigi/push-concurrent-access7fa02f3afMerge pull request #4854 from tonistiigi/fix-push-auth4dfec7fa0pusher: add missing authentication support for requestsbf323c5bddocker: avoid concurrent map access panice922d5553Merge pull request #4849 from AkihiroSuda/remove-selinux-tag0c0ff6efcMerge pull request #4850 from wangmaodou/update-runc-docb197a66f4docs: update RUNC.md7e6e4c466remove "selinux" build tagda2fd657aAdd bounds on max oom_score_adj value for AdjustOOMScore23315f864Merge pull request #4840 from AkihiroSuda/with-container-labels-2a9cc80192Merge pull request #4821 from mxpv/testsd1ced4f8aMerge pull request #4833 from AkihiroSuda/restart-with-log-uri5d147bdc4Merge pull request #4842 from AkihiroSuda/expose-fs-user-util8a57d70a5oci: expose getUserFromPath and getGIDFromPath041eb3ac3container_opts.go: add WithAdditionalContainerLabelsca292da14Requested Changes09241fd21Mention built-in CRI support in README0356d5d4brestart: allow passing existing log URI object004214808Merge pull request #4831 from AkihiroSuda/expose-contents-showprogressc9c1f5cc5Merge pull request #4832 from AkihiroSuda/expose-apparmor-loaddefaultfad0ca261Merge pull request #4822 from samuelkarp/freebsd7b04b3cbbcontrib/apparmor: expose LoadDefaultProfile419ad7372ctr/commands/contents: expose ShowProgress4bcfbfe66ci: add cross-compile for FreeBSDf8992f451add optional check that snapshotter supports the image platform when unpackingda6860986Fix devmapper test5a26a0369Enable devmapper tests on CI2b87d4554Add retries when deleting a devmapper device7b0149ac4Merge pull request #4820 from AkihiroSuda/additional-pull-optsb45920918Compile for FreeBSD51f9eafd1vendor: update continuity for FreeBSD support1febce4cactr: FetchConfig: allow setting additional []containerd.RemoteOpt1e624fa3dMerge pull request #4815 from AkihiroSuda/remove-apparmor-tag0a9147f3aremove "apparmor" build tag6467c3374refactor based on comments46e1dc5a9Merge pull request #4809 from giuseppe/zstd-support73a301c7aMerge pull request #4772 from gaurav1086/ValidatePluginConfig_fix_range_iterator_issueefad13faaMerge pull request #4811 from AkihiroSuda/expose-apparmor9f97514f9Merge pull request #4803 from ungureanuvladvictor/vladu/json-logging55eda46b2expose hostSupportsAppArmor()30802fac7compression: add support for the zstd algorithm9c398e1cbMerge pull request #4395 from TBBle/use_gowinio_for_reading_tarballs071a18550cri/config: fix range iterator issue in ValidatePluginConfigb4727eafbadding code to support seccomp apparmor securityprofilef1295043evendor commit for cri api changese98d7f8eaMerge pull request #4808 from dmcgowan/update-continuity41da96d67Update continuityb6bb48180Merge pull request #4794 from kzys/lock-sincef12b68cc8Allow configuration of different log formats: text, jsoncb8253eeaMerge pull request #4791 from crosbymichael/base-runtime-opts59a0667cfMerge pull request #4799 from jiazhiguang/master0f041dc1bADOPTERS.md: Add the Inclavare-Containers container runtimec95d71cf6content: include the staleness of the lock when tryLock() fails9561d9389Merge pull request #4776 from didier-durand/README_typo78f31afb4Reorder to separate generic from windows-specific code3e47cdf70Use go-winio tar-application code instead of our own05647251aUpdate microsoft/go-winio to v0.4.153d358c9df[cri] don't clear base security settings7126310a0Merge pull request #4784 from fuweid/fix-4769774cb16a4Merge pull request #4739 from kzys/handle-schemefbf1a72deMerge pull request #4760 from zhsj/gomodb9092fae1Merge pull request #4643 from dcantah/feedback-lcow-snapshotterfaec5d4ffruntime: should not send duplicate task exit eventa91c298d1Optimize Windows and LCOW snapshotters to only create scratch layer on the final snapshot4a4bb851fMerge pull request from GHSA-36xw-fx78-c5r47e46676e7Go mod vendorfc946ca82Revert urfave/cli version bumpc129310ecDon't fail fast in integration matrix test56eca84aeRemove reference of GO111MODULE=off56672b961Change to GOPATH before go get819ac05f3Fix hcsshim commit detection553a36915Fix reference to vendor.conf in scripts089d2183bReplace vndr in Makefile6a2df5fceRevert gogo/googleapis version bumpde059b11bRevert protobuf and grpc version bump89a1fea39Go mod tidy9aafdbdb4Convert vendor.conf to go.mod withgo mod init7ccd0646eMerge pull request #4781 from ekrecker/patch-2aa2c930a3Merge pull request #4778 from AkihiroSuda/remove-unused-hack-utils.sh3b54a06eeMerge pull request #4779 from AkihiroSuda/fedora33e58adfd71Merge pull request #4777 from AkihiroSuda/crun-016b69f36aa1Fix some typos and grammars602b2c666remove unused hack/utils.shefc4d9909Vagrantfile: update to Fedora 33a67dbdee7CI: update crun to 0.1675a03e4ceFixing 1 typo in READMEddb47a39fMerge pull request #4764 from zhsj/cleanup-systemdcb2dcb04fMerge pull request #4765 from kevpar/panic-file834499052Remove duplicate systemd units fileb2420ebcdFix Windows service panic file to not be read-onlyebc0ddb28Merge pull request #4761 from zhsj/fix-cri-proto625da6b3eMerge pull request #4719 from estesp/fix-shm-relabel-testfe767f95cFix package name in cri runtimeoptions protobufaf963cc2cMerge pull request #4757 from kevpar/backport-doc7d135f4daUpdate backports documentationfd01744a0Handle an image ref with scheme85d9fe3e8Adjust overlay tests to expect "index=off"027ee569aImport crypto for all snapshotters during testsuiteaf2fb4eb7Allow oom adj test to run in environments with a scorec11472d31Add Go test runs to GitHub Actions CI0d4734655Merge pull request #4647 from katiewasnothere/task_update_annotations_upstream2837fb35aMerge pull request #4715 from thaJeztah/remove_libcontainer_apparmor25e4774adMerge pull request #4589 from cpuguy83/windows_int_overflow618c8bd77Merge pull request #4745 from estesp/fix-actions-cve159fb2e7eUpdate other actions for env/path CVE fix340ab572dMerge pull request #4707 from kzys/lcow-arm0edc41256Merge pull request #4742 from thaJeztah/bump_kubernetes_1.19.485b1cf128vendor: kubernetes v1.19.48efb17cc9Merge pull request #4705 from dweomer/selinx-relabel-dev-shm-but-not-with-hostipcbd7c6ca6fFix integer overflow on windowscc3785c81Merge pull request #4653 from amrmahdi/amrh/optimize-content-transfer1c98aa532Merge pull request #4735 from AkihiroSuda/go-1.15.5af0a20a4dBump Golang 1.15.50ec47b334Merge pull request #4730 from thaJeztah/update_seccomp_profile0a1104bcfseccomp: add pidfd_getfd syscall (gated by CAP_SYS_PTRACE)2dbbd10fdseccomp: add pidfd_open and pidfd_send_signaleba94a15cpkg/cri/server: remove dependency on libcontainer/apparmor, libcontainer/utilsa1e7dd939cri: selinuxrelabel=false for /dev/shm w/ host ipcfca788718Merge pull request #4726 from estesp/update-btrfs126b35ca4containerd-shim: use path-based unix socketbd908acabUse path based unix socket for shimse74ace9adcontent: support filters on local.store#Walk()6fb56aa58Update btrfs vendor for chkptr fix for Go >= 1.1478ac7bac8Merge pull request #4725 from kzys/fix-links-in-docsf1ea895fbMerge pull request #4713 from AkihiroSuda/remove-hack-unused03cc4cedcdocs: fix broken links4dc698d09Merge pull request #4723 from lining2020/ctr-error-hint1309384afMerge pull request #4724 from tonistiigi/pusher-error97cee75dactr: fix the incorrect image unmount error hintf601887a3docker: don’t hide pusher response error687fcd73eMerge pull request #4722 from kzys/cri-docsa05fa4214Move CRI plugin's docs from docs/ to docs/cri/521263ce2Merge pull request #4721 from thaJeztah/longer_timeout0299fca49ga: Linux Integration: extend timeout to 20 minutes1e7a6906bMerge pull request #4698 from dweomer/test-selinux-enforcing5f74840a9Merge pull request #4709 from AkihiroSuda/ctr-apparmor677aaad83Merge pull request #4718 from thaJeztah/remove_sudo_remnants6dc35dfdaMerge pull request #4716 from thaJeztah/faster_golang_ci1edeea766install-runc: remove unused USESUDO variable72dd30febgha: specify full version for golang-ci-lint to speedup selection0585213d0remove unused hack/* files9d54648bectr: add AppArmor flags95ba6e9f7Add annotations to task update request apibb8aac38aDo not hardcode "amd64" on LCOW and Windows-related files293b08dd1Merge pull request #4699 from dweomer/selinx-relabel-dev-shma7f24b29ctest: run tests with selinux enforcinge8d8ae3b9cri: selinux relabel /dev/shmac61e58cdMerge pull request #4692 from tianon/nosu17688a733Remove setuid gosu in favor of "sudo -E PATH=$PATH ..."ef79c9957Merge pull request #4677 from thaJeztah/moby_sys_symlink8d42f86cfMerge pull request #4687 from samuelkarp/critest8db2fe385Merge pull request #4686 from samuelkarp/cri-tests-runtimescb8c09290Merge pull request #4688 from YLonely/master019148ef4bug fix:#3448b81917ee7Add comments clarifying copyWithBuffer implementatione3f28eecdci: run critest target for all runtimesa2581d345ci: run cri-integration target for all runtimes394be74fdMerge pull request #4681 from fuweid/update-godoc-badge81cf375ecMerge pull request #4679 from mikebrow/update-util-versions63f673a22updates cri-tools to latest versionea56dd3fbMerge pull request #4680 from mikebrow/cri-doc-update-testing975615317README.md: Use go.dev instead of godoc1ab8bdc27refresh cri testing guide after move3662dc4c0Merge pull request #4673 from ehazlett/ctr-runtime-options9a672cca9Merge pull request #4675 from mikebrow/update-default-config-doc-for-annotations114609842replace pkg/symlink with moby/sys/symlinkabe1807a1Merge pull request #4676 from thaJeztah/typo_fixb086062cfhttpReadSeeker: fix typo in error-messageb6053fb7cchange default for disablesnapshotannotations5184bcceaMerge pull request #4631 from dims/copy-a-few-packages-from-moby/mobyef48ef1e4add config path option to ctr for runtimef2e8fda82Merge pull request #4665 from dmcgowan/update-default-snapshot-annotationsf6834d4c0replicate io.Copy optimizationsb2642458fUpdate make snapshot annotations disabled by default8ff2707a3Merge pull request #4610 from shahzzzam/samashah/add-annotations619f96c75Merge pull request #4664 from deitch/ctr-client-optimize839b13699Merge pull request #4656 from zhuangqh/fix-unknown-state57baf9221use proper buffer size for content get30c9addd6fix: always set unknown to false when handling exit event65e39897bMerge pull request #4662 from BenTheElder/fifo-dup2-unix502d6adc2Revender latest containerd/fifof51d5f773Merge pull request #4657 from mxpv/master4da306e1eFix panic in shim not logged5afc4b4d8Revendor latest containerd/fifo289130b8aImprove image pull performance from http 1.1 container registries656b487d3Merge pull request #4645 from masters-of-cats/master8eda32e10Check if a process exists before returning itba8377590Merge pull request #4642 from hectorj2f/hectorj2f/add_d2iq_adopterb201de01badd d2iq as an adopter31a6d1113Merge pull request #4640 from mxpv/checksf3f8a1d30Use project checksb8ed26b66Merge pull request #4639 from mikebrow/enable-cri-integrationc876b15b5getting cri integration up and runningf36f31344Merge pull request #4627 from dmcgowan/test-add-tarball-check04a3f7c49Update DEPLOY_DIR and VERSION to match installation scriptf8e3c8f18Merge pull request #4637 from mxpv/cie8fe4b6dcCleanup CI scripts7a0f91de6Merge pull request #4636 from crosbymichael/ctr-cni88f089354Merge pull request #4635 from dcantah/fixup-snapshotteroptsfebf14d40Merge pull request #4633 from eexe1/patch-1a9cb22309Copy pkg/symlink and pkg/truncindex from moby/moby6d088549cSupport AppArmor beta version formatcdb2f9c66Filter snapshotter labels passed to WithNewSnapshot21b6f6876Add CNI support to ctr run22aea1e9aMerge pull request #4629 from deitch/cancel-read-context9b70de01dMerge pull request #4630 from dcantah/pass-snapshotter-opt9a1f6ea4dCri - Pass snapshotter labels into customopts.WithNewSnapshotbe47c2dacMerge pull request #4628 from ambarve/lcow_fix_apply_trailing_datab6d7ca7c4Merge pull request #4626 from dims/bump-to-newer-docker-tagde082e562ensure we cancel child context when reading grpcd3b817b95Read trailing data from tar readeredc671d6adisable staticcheck for IsAnInteractiveSession4044ca9a5trying docker v19.03.13e4e05c6c0Merge pull request #4625 from dcantah/fix-removesandbox-comment9e5ee68a5Merge pull request #4623 from dims/update-to-latest-1.19.x-seriesd74225b58Fix comment in RemovePodSandboxcaad53dbaMerge pull request #4624 from dmcgowan/update-github-cif12e90937Enable project checks48fb7bf55Update to k8s 1.19.2cd2d3519dMerge pull request #4621 from Zhang-Jianming/no-pivot-not-working116902cd2fix no-pivot not working in io.containerd.runtime.v1.linux98a735550Merge pull request #4620 from shouhei/masterf1a3235e8Fix typo in examples of registry config14277c6dfMerge pull request #4613 from dmcgowan/update-test-scripts71ed61eefMerge pull request #4614 from mxpv/refactor3d02441a7Refactor pkg packages3a6009c00Update test build script to push containerd variantcb9572ee5Merge pull request #4612 from mxpv/nightly04c4401acMerge pull request #4611 from dmcgowan/move-proto-fmt-ci1f50416cdUpdate nightly CI8b20ca9d9Move proto format ci check to proto job915263f26Merge pull request #4502 from akshat-kmr/master515133671Merge pull request #4609 from mxpv/linter45d8a7e4aMerge pull request #4588 from thaJeztah/remove_redundant_error822ce4e56Merge pull request #4608 from mxpv/refactor5fc721370Add manifest digest annotation for snapshottersc59d1cd5bFix linter issues8b046647eUse golangci-lint Github Action8b03df2daEnable linter on windows3508ddd3dRefactor CRI packages944e9b70eMerge pull request #4607 from dmcgowan/cleanup-cri-packagesb22b62730Move cri server packages under pkg/crif44b07278Merge pull request #4593 from dmcgowan/merge-cri1c60ae7f8Use local version of cri packagese7a350176Merge containerd/cri into containerd/containerd082001531Prepare cri for merge to containerdde546a154Merge pull request #4605 from mxpv/nri-fixd0f6895d8Revendor NRIa0b3b4e4dMerge pull request #1593 from moolen/fix/add-nri-labelsc408aa908Merge pull request #4600 from ktock/repositoryscopebc08a19f3Merge pull request #1595 from dmcgowan/fix-unix-lint4b882eb93Export repository scope helper functions6f98abc2aAdd macos target for lint07c98d0bfFix lint in Unix environmentsf87302ab2Add missing sandbox labels when invoking nri pluginsd85278670Merge pull request #4599 from estesp/fix-script-var615af428aWindows CNI install script using lowercase "destdir"d620c30d7Merge pull request #1592 from dmcgowan/stricter-linte3aa6a39cMerge pull request #4597 from mc256/patch-177cf03219Enable golangci on Windows07cc1af22Merge pull request #1591 from hickeyma/impr-img-reg-doc48f64a18bmount: extract FUSE unmounting to a function60d24c4a9Update BUILDING.md - add dependency libseccomp-deva3c0e8859Align lint checks with containerd83e6efc6fUse tabs in protofile indentationfe5fdccdaUpdate after review70a56ae32Updates to the image registry doc803c5f467Merge pull request #4595 from thaJeztah/update_logrus0714e4be9vendor: sirupsen/logrus v1.7.0edfeb4686Merge pull request #4591 from AkihiroSuda/crun-015c385d1102CI: update crun to v0.155b13dcc73mount.isFUSE(): remove unused error return2e3bebb29Merge pull request #1583 from thaJeztah/simplify_ensure_removeall_windows4a6b47d47Merge pull request #4586 from dmcgowan/update-cri-push84aacd583Merge pull request #4585 from kevpar/update-hcsshim-vendor91a49b6a2Merge pull request #4583 from thaJeztah/bump_console_v1.0.165df8db28Remove sudo from installation and cri release4e0b13544Update CRI tests to build and push to gcsa043c0dc3Update github.com/Microsoft/hcsshim to v0.8.106d2731834Merge pull request #1587 from thaJeztah/bump_containerd_v1.4.18b5cc2e1dvendor: containerd/console v1.0.19f61affa0vendor: containerd/containerd v1.4.1c988d797bMerge pull request #1372 from cofyc/update-config-syntax2c2dd59f3Merge branch 'master' into update-config-syntaxb3678ddadMerge pull request #1562 from dims/update-to-latest-k8s-1.19.0-releaseb1ee4c0d7Merge pull request #1570 from yoheiueda/maskedce4439a81Merge pull request #4582 from dmcgowan/set-1.2-EOL-date281069cbbSet 1.2.x end of life date in RELEASES.mdefc67b192Merge pull request #4580 from dmcgowan/move-release-build-makefile241be7025Move github releases to use Makefile for cri releasef35f21dd0Add CRI release functionality to makefile4e5ce76eeMerge pull request #4579 from iamleot/netbsd-support38f799d00Merge pull request #4577 from dmcgowan/remove-travis4c47fe0a2Add support for NetBSDc178043f6Merge pull request #1584 from containerd/revert-1530-fix-doc-for-runtime-options0762fdd9eRevert "Fix doc for runtime specific options"e2928124dpkg/server: make ensureRemoveAll() an alias for os.RemoveAll() on Windows3216a1695Remove unused Travis configuration534be84c5Merge pull request #4529 from gongguan/creator68d97331bMerge pull request #4538 from fuweid/update-shim-cleanup0dea724fcNewTask avoid unnecessary cio.NewCreator calls4b05d0390runtime/v2: cleanup dead shim before delete bundle438c87b8eMerge pull request #4534 from sedflix/zfs-root-pathfc2240915Merge pull request #4527 from mikebrow/prow-test-pr1484593eeMerge pull request #4533 from sedflix/aufs-seperate-plugin96f4ce4a5zfs: seperate implementation pkg from plugin pkg and revendor2354e187caufs: seperate implementation pkg from plugin pkg and revendor2575a7330Merge pull request #4573 from teemuteemu/separate-devmapper-plugin71fd68a92devicemapper: seperate implementation pkg from plugin pkg30615c6fetesting out k8s prow test moveda4a8aea1Update to latest kubernetes v1.19.2d6774b639Merge pull request #4570 from ktock/vendor-cri309b5e623vendor: update containerd/cri 210a86c2991bc3deMerge pull request #4569 from dmcgowan/update-containerd-latest331678c1eUpdate latest release in RELEASES.md373cbc2a7Merge pull request #4544 from schrej/patch-1585a19a76Merge pull request #4566 from thaJeztah/bitset_1.1.11210a86ca5Merge pull request #1578 from thaJeztah/bitset_1.1.11ffe79709eMerge pull request #1572 from ktock/layers407c3eba2vendor: github.com/willf/bitset v1.1.11e571fd864Limit value size of additional annotation for avoiding unpack failurea6fc9ca49vendor: github.com/willf/bitset v1.1.11109853aceMerge pull request #1577 from vteratipally/masterbf3dcfe3aMake script work for both python2.7 and 3.65b3ac0c86Merge pull request #4050 from thaJeztah/bump_golang_1.145867c8883Refactor dockerResolver to make code simplea536d06cbMerge pull request #1573 from mikebrow/update-cni-configbb6590da8Merge pull request #4559 from bsdnet/master9efd73818Merge pull request #4546 from cpuguy83/consume_shim_log9e094abd0Refractor the script to work in both python2 and python353cdd2e0cupdate cni config versiond1c8d9865update to golang 1.15.261da6986cCleanup open pipes if logging binary fails to start14c861cf3Merge pull request #1571 from kinvolk/mauricio/update-slack-linkdab7bd0c4Always consume shim logsbc4c38139Merge pull request #4550 from thaJeztah/bump_cgroups5d7aa0cb6Merge pull request #4549 from ukontainer/fix-missing-sha256c862000abMerge pull request #4548 from darfux/ret_error_if_metric_failsd44673eb2vendor: containerd/cgroups 0b889c0f4741fb8cfixmake testfailure of missing sha256 packagebdb5b2ce4ctr: Return error if task.Metrics failsa07a37558README: Update slack reference to CNCFb582da443Set masked and readonly paths based on default Unix specab5d93187cr: fix checkpoint from image getting skippedd43d546a8Merge pull request #4540 from pbxqdown/master469b63735Fix ctr command typo.fabebe5d5Merge pull request #4530 from tianon/rpi-armv67ce23867eMerge pull request #4532 from cpuguy83/forward_signal_not_found899b4e3cbIgnore SIGURG signals in signal forwarder665051083Exit signal forward if process not found2055e1295Add RPi1/RPi0 workaroundd4e78200dMerge pull request #4518 from knight42/feat/btrfs-config-root-path445e26fffMerge pull request #4517 from knight42/feat/native-config-root-patha5c638155Merge pull request #4523 from errordeveloper/master2de55060eLog unexpected responses43394312cMerge pull request #4525 from shishir-a412ed/seccompc50ff694frefactor(native): separate init from implementation98b0b2a7cfeat: make native root_path configurablea52daa26arefactor(btrfs): separate init from implementation415423573feat: make btrfs root_path configurable1eae524dfctr: CLI Flag (seccomp-profile) for setting custom seccomp profile.cbb4e4376Merge pull request #4524 from crosbymichael/cri-kataa2b4745f7update cri to 35e623ed2f2733e0Merge pull request #4508 from mikebrow/readme-update-slackdedf423b9Merge pull request #4519 from cpuguy83/shim_exec_p_debug35e623e6bMerge pull request #1561 from crosbymichael/kata-se5f9d15eaashimv1: downgrade poroccess missing log to debug6f4fe8245add help wanted, update slackefa0e8091Merge pull request #4506 from dmcgowan/refactor-overlay-plugin70ffb12c1Separate overlay implementation from plugind715d0090Handle KVM based runtimes with selinux1a89feb5dMerge pull request #4505 from ashrayjain/aj/configurable-root4cc99e57aRemove unnecessary logging binary helpers and add godoc5ed177a2dAdd configurable overlayfs path7a9fbec5fAdd logging binary support when terminal is true27402021aMerge pull request #4501 from crosbymichael/runtimeroota7b2304f6Merge pull request #4445 from tonistiigi/auth-refactorbacf07f4aMerge pull request #4308 from aojea/bumpcnif9d231f66Merge pull request #4493 from thaJeztah/seccomp_uring7e84abe99Merge pull request #4468 from prashantbhutani90/master396b86313Merge pull request #4491 from thaJeztah/seccomp_syslog40ce36fd2Merge pull request #4492 from thaJeztah/seccomp_updates058658965Merge pull request #4486 from darfux/monitor_v2_tasks_as_well8fe6cf567Merge pull request #4497 from dmcgowan/update-cri-nriac95f27b8Update CRI56a89cda3Merge pull request #1552 from crosbymichael/nrid09e26b0aMerge pull request #1556 from aojea/cni805c73fe06aMerge pull request #4472 from fuweid/ignore-error325bac7c7seccomp: allow io-uring related system calls0a5ee7e6fseccomp: allow clock_settime when CAP_SYS_TIME is added5cdb6e81dseccomp: allow quotactl with CAP_SYS_ADMIN5862285faseccomp: allow sync_file_range2 on supported architectures.117d67874seccomp: allow personality with UNAME26 bit setfc9e5d161seccomp: allow syscall membarrier1746a195eseccomp: allow adjtimex get time operation7e7545e55seccomp: allow add preadv2 and pwritev2 syscalls267a0cf68seccomp: move the syslog syscall to be gated by CAP_SYS_ADMIN or CAP_SYSLOGc8523cc5bMerge pull request #4470 from AkihiroSuda/fix-static-plugin35d320c7aMerge pull request #4490 from dmcgowan/makefile-test-tags09cab88daMerge pull request #4481 from tao12345666333/add-openat2-syscalle3d27f9edbump cni version to v0.8.03275a216fUpdate go list to respect build tags1403a391cbump cni dependenciesdb687ff48Add --runtime-root to ctrbb0ca842eMerge pull request #1559 from mikebrow/prepare-1.4412378ff0Merge pull request #4437 from kzys/fix-rollback63f89eb95Update server with nri injection pointsb77798292Update vendor for new containerd and nrib0cc07999vendor containerd 1.4 releasea40d63928update support table for 1.44422ae363tasks: Monitor v2 tasks in initFunc as wella1f6c9dd8snapshots/devmapper: fix rollback6c74c391fMerge pull request #4475 from thaJeztah/minor_systemd_updates6a915a145seccomp: addfaccessat2syscall.e28e55f45seccomp: addopenat2syscall.c691c3661systemd: use LimitNOFILE=infinity instead of hard-coded max value73b144927runtime: ignore ErrNotExist when remove rootfs43cbdf89eBUILDING.md: fix description about static builds35b63c064Report correct stats for windows containers4e6644c8cMerge pull request #1551 from thaJeztah/bump_kubernetes_1.19.0-rc.40619de413Merge pull request #1555 from thaJeztah/bump_golang_1.13.1534596c9c9Bump Golang 1.13.155c6c6b2acMerge pull request #1550 from thaJeztah/bump_containerd_v1.4.0-rc.0a8b6b6b06Merge pull request #1549 from thaJeztah/bump_golang_1.13.14ecbdffc9cvendor: update kubernetes v1.19.0-rc.4968d44d1bvendor: golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9e018d6fa4vendor: golang.org/x/sys v0.0.0-20200622214017-ed371f2e16b4bee6ab5a1vendor: golang.org/x/net v0.0.0-20200707034311-ab3426394381117c16999vendor: containerd v1.4.0-rc.0fd030873avendor: opencontainers/runc v1.0.0-rc91-48-g67169a9d78e527741vendor: containerd/continuity efbc4488d8fe1bdc16bde3b2d2990d9b3a89916593a03cc81vendor: json-iterator/go v1.1.10bfba0f284Bump Golang 1.13.14b5185eae6auth: return token structs from fetcher functions957bcb3dfdocker: split private token helper functions to reusable pkg8871d5cdfMerge pull request #1548 from AkihiroSuda/remove-libseccomp-dependency7332e2ad2remove libseccomp cgo dependency858a76626Merge pull request #1547 from mikebrow/containerd-list-podid-should-search8a2d1cc80adds support for pod id lookup for filterc209d013cMerge pull request #1545 from ktock/ssdocfe9bb8da6Merge branch 'master' into ssdoc63400c769Merge pull request #1543 from ktock/discard-content0f99e0f53Merge pull request #1542 from sachaos/master4c8164bccSpecify version = 2 & fix wrong key in registry.md (GCR example)375dd7625Add description aboutdisable_snapshot_annotationsto configuration docc80660b82Allow GC to discard content after successful pull and unpackb51177bfcVendor containerd d184a0a8448b92d2Merge pull request #1534 from crosbymichael/selinux-range0443a13daMerge pull request #1535 from lumjjb/updatecri-doce080f8453Merge pull request #1539 from mikebrow/windows-ci-force-bashfad87288fswitching to windows-2016 latest is breaking due to wsl conflict with bashf93b72530Update doc cri plugin convention5f5d954b6add selinux category range to config9b06da477update selinux to 1.6.0 releasefcda0cf4aMerge pull request #1529 from AkihiroSuda/allow-disabling-hugepages707d2c49dallow disabling hugepages1d3b9c5b8Merge pull request #1532 from jsturtevant/update-pause-image-ref2bb0b19c4Update to latest pause image for windows5df93a038Merge pull request #1531 from mikebrow/nit-for-default-config4b3974c4eshow runc options taga01750d89Merge pull request #1530 from hckuo/fix-doc-for-runtime-options904ab30f9Fix doc for runtime specifc options0fa3cfd69Merge pull request #1440 from jr-santos98/masterc69a2dc74Checking if a variable already existsecf335ad6added multi-architectures support8fb244a65Merge pull request #1525 from containerd/forcibly-remove-sandbox-container0c45d1329move up to latest cri-tools5f50692d3Merge pull request #1524 from mikebrow/verbose-dco-check4549b94ecgofmt cleanup287c52d1cForcibly stop running containers before removalf427791c6set dco check to verboseaa0f4fd37Merge pull request #1521 from AkihiroSuda/revendor-libcontainerfb208d015vendor runc v1.0.0-rc911bc5ba3f4Merge pull request #1519 from AkihiroSuda/config-fix-toml-tagfe6833a9aconfig: TolerateMissingHugePagesCgroupController -> TolerateMissingHugetlbControllerb69d7bdc5config: fix TOML tag for TolerateMissingHugePagesCgroupController8e0b789c9Merge pull request #1520 from AkihiroSuda/fix-ci-apt-get-update4049a912fCI: run apt-get update befor apt-get installc2191fdddMerge pull request #1513 from brianpursley/state-nameaa04fc9d5Change "failed to stop sandbox" error message to use state name instead of numeric value09d6426f3Merge pull request #1511 from kevpar/named-pipe-mounts210561a8eSupport named pipe mounts for Windows containers682d15839Merge pull request #1517 from mikebrow/fix-e2e-bucketf5c7ac927fix for image pull linter change05cd94287hard set kubernetes version not in vendor.conf anymore98aadbbe5Merge pull request #1463 from dims/remove-dependencies-on-k8s.io/kubernetes3ee62de2bremove unused methodcbb7c28f1Add copyright headers0d18d1ee3Drop k8s.io/kubernetes6007c354aCopy kubernetes/pkg/kubelet/utile2072b71cCopy kubernetes/pkg/util/bandwidthbb828a9f8Make copy of pkg/kubelet/cri/remote2909022a6Make local copy of kubelet/cri/streamingb8f7b9f69Merge pull request #1515 from AkihiroSuda/golang-1.13.1222b55461bMerge pull request #1514 from dims/update-kubernetes-to-1.19.0-beta.2c4205721eUpdate vendor/ directory41f184f15Update vendor.conf to kubernetes 1.19.0-beta.2548d987fcBump Golang 1.13.124f8a58079Merge pull request #1510 from crosbymichael/selinux-bump713205b36bump selinux dep616482271Merge pull request #1508 from janosi/sctp-hostportb661ad711Merge pull request #1504 from lorenz/ignore-image-defined-volumes26dc5b977Merge pull request #1505 from dcantah/windows-cred-spec479dfbac4Remove the protocol filter from the portMappings constructor.9620b2e1dAdd GMSA Credential Spec passingae8200bf9Merge pull request #1499 from webwurst/patch-13290b86a8Merge pull request #1506 from cpuguy83/registry_headers5a1d49b06Add option for ignoring volumes defined in imagesc694c6317Add config for registry http headers098e04001Fix typobc96548c7Merge pull request #1502 from mikebrow/nginx-timing-probleme56347aabmove up to latest critools pick up nginx fix62c91260dMerge pull request #1501 from dims/tolerate-missing-hugetlb-cgroups-controllerd7ce093d6Tolerate missing HugeTLB cgroups controller8898550e3Merge pull request #1498 from mxpv/base17c61e36cFix cgroups path for base OCI specdf8d6c5b7Update documentation for base OCI spec files8d54f3975Allow specify base OCI runtime spec- [
c7f25cb3a](c7f25cb...