Release aligned with Docker-CE v20.10.18.

Relevant changes:
- 5fd4c4d1 Release 1.1.4
- 46a5a846 Merge pull request #3554 from kolyshkin/1.1-fix-dev-pts
- 204c673c [1.1] fix failed exec after systemctl daemon-reload
- 1c6dc765 Merge pull request #3562 from kolyshkin/1.1-ci-codespell-2.2
- ec2efc2c ci: fix for codespell 2.2
- 7c69bcc6 Merge pull request #3558 from kolyshkin/1.1-fix-cross-386
- c778598c [1.1] ci/gha: fix cross-386 job vs go 1.19
- b54084fb Merge pull request #3541 from kolyshkin/1.1-exec-noexec
- d83a861d Fix error from runc run on noexec fs
- 69734b99 merge branch 'pr-3536' into release-1.1
- d614445d [1.1] libct/nsenter: switch to sane_kill()
- f4aaf0d8 merge branch 'pr-3538' into release-1.1
- 3ca5673f CI: workaround CentOS Stream 9 criu issue
- c3986e53 tests/int: don't use --criu
- f46c0dad [1.1] ci: fix delete.bats for GHA
- 6b94849d tests/int: runc delete: fix flake, enable for rootless
- afda6b7c merge branch 'pr-3511' into release-1.1
- fa3354dc libct: fix mounting via wrong proc fd
- 1e7bb5b7 merge branch 'pr-3490' into release-1.1
- eb1552a0 VERSION: back to development
- 6724737f VERSION: release 1.1.3
- 91fa032d ci: add basic checks for CHANGELOG.md
- 5d74e0f0 Merge pull request #3504 from cyphar/1.1-systemd-devices-nonexistent-files
- 7219387e cgroups: systemd: skip adding device paths that don't exist
- da9b9d93 Merge pull request #3494 from eriksjolund/1.1-backport-3489
- 93d1807b libcontainer: relax getenv_int sanity check
- ff14258e merge branch 'pr-3481' into release-1.1
- 8242c05d script/seccomp.sh: check tarball sha256
- 017cb29b Dockerfile,scripts/release: bump libseccomp to v2.5.4
- 131222d6 Merge pull request #3493 from cyphar/1.1-ns_last_pid
- 51649a7d Allow mounting of /proc/sys/kernel/ns_last_pid
- 9d00472f merge branch 'pr-3479' into release-1.1
- 3a09da6b ci: drop docker layer caching from release job
- fa7cca98 Merge pull request #3478 from cyphar/1.1-seccomp-enosys-setup
- 8b93f9fb seccomp: enosys: always return -ENOSYS for setup(2) on s390(x)
- 1839c392 Merge pull request #3476 from kolyshkin/1.1-dbus-err
- fc2a8fe1 libct/cg/sd: check dbus.ErrClosed instead of isDbusError
- 13e164db merge branch 'pr-3477' into release-1.1
- d105e052 libct/seccomp/config: add missing KillThread, KillProcess
- e4474ef8 [1.1] vendor: bump seccomp/libseccomp-golang to f33da4d
- dc083b2b fix deprecated ActKill
- b507e2da Merge pull request #3472 from kolyshkin/1.1-fix-fedora-ci-git
- bf1cd884 ci: use golangci-lint-action v3, GO_VERSION
- 1feafc31 ci: bump golangci-lint to v1.44
- 89f79ff0 libct: StartInitialization: fix %w related warning
- 3b7f2605 Format sources using gofumpt 0.2.1
- eeac4e77 build(deps): bump actions/checkout from 2 to 3
- cd7fa00d Vagrantfile.fedora: fix build wrt new git
- 8acb6a07 Merge pull request from GHSA-f3fp-gc8g-vw66
- cdfdbe55 VERSION: back to development
- a916309f VERSION: release 1.1.2
- 364ec0f1 runc: do not set inheritable capabilities
- 58546650 merge branch 'pr-3439' into release-1.1
- 8959e372 VERSION: back to development
- 52de29d7 VERSION: release 1.1.1
- 2636e1cb CHANGELOG.md: add 1.1.1 release notes
- ae28db14 Merge pull request #3436 from kolyshkin/1.1-add-centos-stream-9
- 036cc348 CI/cirrus: add centos-stream-9
- c6536328 Merge pull request #3438 from kolyshkin/1.1-fix-badges
- db953158 README.md: add cirrus-ci badge
- ea19181e README,libct/README: fix pkg.go.dev badges
- 6bf0a568 Merge pull request #3435 from mrunalp/dont_panic_1.1
- 8290c4cf libct/cg: IsCgroup2HybridMode: don't panic
- 6f48ab3e Merge pull request #3406 from marquiz/backports/rdt
- ee7ba6cb configs/validate: looser validation for RDT
- a3765fb4 Merge pull request #3404 from kolyshkin/1.1-delegate-enoent
- 96193422 libct/cg/sd/v2: fix ENOENT on cgroup delegation
- 51feb428 Merge pull request #3403 from kolyshkin/1.1-exec-subcgroup
- 35784a3e ensure the path is a sub-cgroup path
- b9460f26 Merge pull request #3355 from kolyshkin/1.1-rodev
- 986e7c53 libct: fixStdioPermissions: ignore EROFS
- 5053a065 libct: fixStdioPermissions: skip chown if not needed
- d2939b6b libct: fixStdioPermissions: minor refactoring
- d7f7b22a VERSION: back to development
- 067aaf85 VERSION: release runc v1.1.0
- c83abc50 Merge pull request #3331 from kolyshkin/nsenter-unsup
- c0e300f1 Refuse to build runc without nsenter
- 00f56786 Merge pull request #3328 from opencontainers/dependabot/go_modules/github.com/checkpoint-restore/go-criu/v5-5.3.0
- e155b332 build(deps): bump github.com/checkpoint-restore/go-criu/v5
- 81044ad7 Merge pull request #3325 from kolyshkin/rm-go115
- 5c7e8981 libct/cg: rm go 1.15 compatibility
- 7113a408 merge branch 'pr-3323'
- 4773769c VERSION: back to development
- 55df1fc4 VERSION: release v1.1.0-rc.1
- 6c1e2ecc Merge pull request #3320 from cyphar/changelog
- a8f9d5de CHANGELOG: add an in-repo changelog file
- 7e792c92 merge branch 'pr-3301'
- 4e56a2b3 Merge pull request #3313 from kolyshkin/int-nits
- e7dfcc93 Merge pull request #3314 from kolyshkin/seccomp-2.5.3
- 6d2067a4 script/seccomp.sh: fix argc check
- 457ca62f script/release_*.sh: fix usage
- c729594c deps: update libseccomp to 2.5.3
- 1b747a43 merge branch 'pr-3309'
- 5d779620 tests/int: use update_config in hooks test
- 9e798e26 tests/int: ability to specify binary
- 13b0806f Merge pull request #3272 from AkihiroSuda/mount-rro
- 4b22d8e4 Merge branch 'pr-3310'
- cd07af28 Merge pull request #3304 from kolyshkin/lint-extra
- 97688ddf types/features: clarify MountOptions
- deb0a5f2 Mark `runc features` experimental
- 382eba43 Support recursive mount attrs ("rro", "rnosuid", "rnodev", ...)
- ba935a51 Support nosymfollow mount option (kernel 5.10)
- f8c48e46 go.mod: golang.org/x/sys v0.0.0-20211116061358-0a5406a5449c
- acd8f12f release: correctly handle binary signing for "make releaseall"
- cdce2496 merge branch 'pr-3057'
- 2b0ca195 merge branch 'pr-3296'
- f50369af Merge pull request from GHSA-v95c-p5hm-xq8f
- d72d057b runc init: avoid netlink message length overflows
- 45c31f9e Merge pull request #3305 from kolyshkin/rdt-4
- 25112dd1 libct/intelrdt: remove unused type
- c4a61aa9 ci: enable extra linters for new code
- 0c0ec3f5 Merge pull request #3302 from kolyshkin/ci-unparam
- 520702da Add `runc features` command
- 02475d9c .golangci.lint: add unparam linter
- 953e56c5 libct/int: runContainer: drop console arg
- 6c0bfcb1 libct/cg/fs/blkio_test: ignore unparam warning
- 06b3fd9d libct/cg/ebpf: drop finalize return value
- 86733013 notify_socket: setupSpec: drop ctx arg and return value
- 741568eb libct/cg/devices: addRule: ignore unparam warning
- fc44e3f6 tty: Close: rm return value
- 36483465 tty: ClosePostStart: rm return value
- f3f4b6d1 tty: recvtty: rm process arg
- e6318635 tty: rm inheritStdio return value
- d23b8109 checkpoint: rm getDefaultImagePath arg
- dd140401 libct: fixStdioPermissions: rm config arg
- b357bc13 libct/factory: rm id param from loadState
- b950b778 libct/utils: ResolveRootfs: remove
- 35d20c4e chown cgroup to process uid in container namespace
- 6ff04202 Merge pull request #3234 from kolyshkin/hugepage-v2
- 19d696ec merge branch 'pr-3276'
- 0e79754c Merge pull request #3294 from kolyshkin/xattr
- ec0f35bc libct/system/xattrs: remove
- 20feb5d3 Merge pull request #3290 from opencontainers/dependabot/go_modules/github.com/opencontainers/selinux-1.10.0
- e23602eb Merge pull request #3284 from kolyshkin/ci-fedora-revert-fix
- 02fe5f47 Merge pull request #3283 from kolyshkin/rootless-ro-bind-rw
- e9ed2000 build(deps): bump github.com/opencontainers/selinux from 1.9.1 to 1.10.0
- d1f316f3 Merge pull request #3286 from chendave/cleanup
- e3dd80fa Vagrantfile.fedora: revert excluding systemd
- 1da84d1a libct/cg: TestGetHugePageSizeImpl: use t.Run
- 1362291a Avoid non-op when the list of `Hooks` is empty
- eba6097a Merge pull request #3287 from cyphar/netlink-embedded-nulls
- f13a9325 libct/cg: HugePageSizes: simplify code and test
- 39d4c8d5 libct/cg: lazy init for HugePageSizes
- a4d4c4dd libct/cg: GetHugePageSize -> HugePageSizes
- 8b4a8f09 merge branch 'pr-3289'
- dde509df specconv: do not permit null bytes in mount fields
- 50105de1 Fix failure with rw bind mount of a ro fuse
- 982b9a1d libct/standard_init: fix linter warning
- 0d5ac132 Merge pull request #3285 from kolyshkin/3281-followups
- 643f8a2b libct/specconv: nits
- 20e92887 Merge pull request #3275 from kolyshkin/rm-prlimit
- e49007f3 Merge pull request #3281 from kolyshkin/specconv-maps
- b247cd39 runc run: fix ro /dev
- 7c219d81 Merge pull request #3270 from kolyshkin/wrap-err
- f247ad20 Merge pull request #3280 from kolyshkin/ci-revert-kludge
- 029b73c1 libct/spec: replace isValidName regex with a function
- 6907beca libct/specconv: remove isSecSuffix regex
- 37c5fd55 libct/specconv: make parseMountOptions return Mount
- 2c3792ba libct/specconv: make mountFlags and extensionFlags global
- 81586e19 libct/specconv: reuse mountPropagationMapping in parseMountOptions
- 8fe1e8bf libct/specconv: rm some init allocations
- 712157f6 Revert "ci: temporarily disable criu repo gpg check"
- f252eb54 test/int/mount.bats: refer to github issue
- 7563a8f0 libct: wrap more unix errors
- db4ad6a7 libcontainer/system: rm Prlimit
- c1103d98 merge branch 'pr-3273'
- 0880c001 .cirrus.yml: silence vagrant up
- b028ecb3 Vagrantfile.fedora: exclude systemd from upgrade
- cbd725e6 Merge pull request #3223 from kolyshkin/refuse-bad-cgroup
- 5948764a Merge pull request #3263 from thaJeztah/bump_mountinfo
- 86829836 Merge pull request #3264 from thaJeztah/cirrus_go_version
- 12a36265 ci/cirrus: update to Go 1.17.3
- 02d527d2 go.mod: github.com/moby/sys/mountinfo v0.5.0
- 0e21d56e go.mod: golang.org/x/sys v0.0.0-20211025201205-69cdffdb9359
- ecdc9664 Merge pull request #3262 from opencontainers/dependabot/go_modules/github.com/checkpoint-restore/go-criu/v5-5.2.0
- b2d64fed build(deps): bump github.com/checkpoint-restore/go-criu/v5
- b6475489 Merge pull request #3257 from mengjiao-liu/sysctl-allow-slash
- a9bb11ec Fix the conversion of sysctl variable dots and slashes
- 0f933d54 Rename package validate_test to package validate
- 68c2b6a7 runc run: refuse a frozen cgroup
- d08bc0c1 runc run: warn on non-empty cgroup
- dd696235 runc exec: reject paused container unless --ignore-paused
- 931eb942 Merge pull request #3261 from kolyshkin/test-f35
- 4b25a4e8 CI: update Fedora to 35
- 7324496f tests/int: fix userns for Fedora 35
- 05272718 tests/int/cgroups: fix for misc controller
- a7ccc02f Merge pull request #3251 from opencontainers/dependabot/go_modules/github.com/godbus/dbus/v5-5.0.6
- a9761c4b Merge pull request #3254 from kolyshkin/sysctl-slash
- fc658fb6 build(deps): bump github.com/godbus/dbus/v5 from 5.0.5 to 5.0.6
- 972aea3a libct/configs/validate: allow / in sysctl names
- fac268b4 Merge pull request #3252 from AkihiroSuda/fix-libcontainer-integration-compilation-failure
- 95f8ecdd fix `libcontainer/integration/exec_test.go:1859:8: undefined: ioutil`
- 4d176544 Merge pull request #2576 from kinvolk/alban/userns-2484-take2
- af16f56a Merge pull request #3242 from opencontainers/dependabot/go_modules/github.com/cilium/ebpf-0.7.0
- 0bbd7bd7 Merge pull request #3231 from najohnsn/no-linux-section
- d5c9905b Merge pull request #3235 from kolyshkin/rm-exc-lock
- dc473cad build(deps): bump github.com/cilium/ebpf from 0.6.2 to 0.7.0
- 6d35069b Merge pull request #3245 from kolyshkin/go116
- 8542322d libcontainer: Add unit tests with userns and mounts
- d8a3446a Merge pull request #3002 from iholder-redhat/feature/TestingSkipFinalCheckPublic
- 55162941 Remove io/ioutil use
- 6a4f4a6a libcontainer/ignoreTerminateErrors: simplify for Go 1.16+
- 12e99a0f Require Go >= 1.16
- 3d986766 ci/gha: install latest stable Go version
- 97875b0a Merge pull request #3246 from kolyshkin/fix-ci
- c5ca778f ci: temporarily disable criu repo gpg check
- 81fdc8ce New integration tests for user namespaces bind sources
- 9c444070 Open bind mount sources from the host userns
- 2357eab8 Merge pull request #3233 from kolyshkin/hugepage-fix
- a5a45c73 Merge pull request #3239 from kolyshkin/rdt-path
- b098f33c Merge pull request #3238 from kolyshkin/wrap-exec-err
- a80e1217 libct/intelrdt: add Root()
- 794cd66d libct/system: Exec: wrap the error
- 3a5223d0 merge branch 'pr-3236'
- 6eba68de build(deps): bump github.com/opencontainers/selinux from 1.8.5 to 1.9.1
- f594edee Merge pull request #3059 from kolyshkin/cgroup-clean
- e395d2dc libct: Init: remove LockOSThread
- 916c6a15 libct/cg/fs2: fix GetStats for unsupported hugetlb
- c670691e Merge pull request #3226 from chenk008/fix_delete_cgroupv2
- f9667e63 Make DevicesGroup's "TestingSkipFinalCheck" attribute public
- 8e7ab261 Merge pull request #3230 from kolyshkin/release-arch-followup
- 2e0ceaa9 fix createDevices when no Linux section
- fae5d8b5 release: add s390x
- f95063ed Dockerfile: fix for seccomp
- 7758d3fb libct/cg/sd/v2: Destroy: remove cgroups recursively
- d1c9b43e merge branch 'pr-3228'
- 580e43ec contrib: rm init from bash completion
- 0202c398 runc exec: implement --cgroup
- cc15b887 tests: add integration test for cgroups hybrid
- a8435007 cgroups: join cgroup v2 when using hybrid mode
- 39914db6 runc exec: don't skip non-existing cgroups
- 7d446c63 libct/cg.WriteCgroupProcs: improve errors
- cc1d7466 exec.go: nit
- e999e29a merge branch 'pr-3222'
- b1b0e7f8 Merge pull request #3216 from kolyshkin/manager-new
- 0d297b71 ci/gha: test criu-dev with latest go
- 16aedc31 ci/gha: remove debug info
- 3fd1851c CI/GHA: switch to OBS criu repo
- 81dc5599 Dockerfile: fix apt-key warning
- 2bf560fb Dockerfile: use Debian_11 repo for criu
- 99ddc1be libct/cg/fs: rm m.config == nil checks
- 57edce46 libct/cg: add Resources=nil unit test
- 1af4ed11 libct/cg/sd/v2: move fsMgr init to NewUnifiedManager
- 9a2146fa libct/cg/sd/v2: move path init to NewUnifiedManager
- 39be6e97 libct/cg/fs2: minor optimization
- b14a6cf9 libct/cg/sd/v1: move path init to NewLegacyManager
- fcc48168 libct/cg/fs: document path removal
- 6c5441e5 libct/cg/fs: move paths init to NewManager
- 097c6d74 libct/cg: simplify getting cgroup manager
- 147ad561 Merge pull request #3197 from kolyshkin/release-arm64
- 79185bc8 Merge pull request #3215 from kolyshkin/cgroupv1-opts
- 03244ef2 Merge pull request #3217 from kolyshkin/delete-paused
- 3c8db638 script/release.sh: update libseccomp to 2.5.2
- f30244ee make release: add cross-build
- 206c16a7 Merge pull request #3068 from adrianreber/2021-07-07-lsm-mount-context
- 23d79aae Makefile: only build runc for static target
- d2b6899e Makefile: fixes for seccompagent
- 43b36dc4 Support changing of lsm mount context on restore
- 412d68d1 Vendor in go-criu v5.1.0
- d362b7ac Merge pull request #3219 from zhsj/simple-bits
- 163e2523 libct/cg: replace bitset with std math/big library
- 6806b2c1 runc delete -f: fix for cg v1 + paused container
- dbc294fc merge branch 'pr-3214'
- e6928865 libct/cg/fs: refactor
- 7d1cb320 libct/cg/fs: rename join to apply
- 5c7cb837 libct/cg/fs: micro optimization
- 19b542a5 libct/cg/fs: move internal code out of fs.go
- eb09df74 libct/cg/sd/v1: initPaths: minor optimization
- 63c84917 libct/cg/sd/v1: optimize initPaths
- c7e0864d libct/cg/sd/v1: factor out initPaths
- dc907e8d libct/cg/sd/v*.go: nit
- d974b22a create, run: amend final errors
- 9ba2f65d startContainer: minor refactor
- 1545ea69 delete, start: remove newline from errors
- bcadc5bf Merge pull request #3206 from kinvolk/rata/notify
- cd7df39a Merge pull request #3201 from kolyshkin/nsexec-less-logs
- 2eaeea77 Merge pull request #3207 from kolyshkin/update-shfmt
- af641cd5 seccomp: Add test using the seccomp agent example
- 5906c673 merge branch 'pr-3208'
- 7e9fd994 Merge pull request #3211 from opencontainers/dependabot/go_modules/github.com/bits-and-blooms/bitset-1.2.1
- eedf585a Merge pull request #3210 from opencontainers/dependabot/go_modules/github.com/opencontainers/selinux-1.8.5
- 08659080 build(deps): bump github.com/bits-and-blooms/bitset from 1.2.0 to 1.2.1
- 622acd24 build(deps): bump github.com/opencontainers/selinux from 1.8.4 to 1.8.5
- 47abdcee ci/gha: update golangci-lint to 1.42.1
- 704a1878 contrib/cmd/seccompagent: fix build tags
- 49137c2a ci/gha: bump shfmt to 3.3.1
- f1b703fc libct/nsenter/nsexec.c: honor _LIBCONTAINER_LOGLEVEL
- d5ffe83f libct/nsenter/nsexec.c: factor out getenv_int
- d2f49d45 libct/nsenter/nsexec.c: improve bail
- 6c4a3b13 runc init: pass _LIBCONTAINER_LOGLEVEL as int
- 0a3577c6 utils_linux: simplify newProcess
- 9e22bca5 Merge pull request #3204 from cyphar/seccomp-kill-thread-process
- 51cd519e seccomp agent: Return non-zero on failures
- 8b790e4f seccomp agent: Use arch SCMP_ARCH_X86_64
- 4a4d4f10 Add support for seccomp actions ActKillThread and ActKillProcess
- 4a751b05 seccomp: drop unnecessary const SCMP_ACT_* defines
- 41936bf8 Merge pull request #3203 from opencontainers/dependabot/go_modules/github.com/godbus/dbus/v5-5.0.5
- 76c15834 merge branch 'pr-3186'
- 3eccbe99 merge branch 'pr-3157'
- 1e5fe26f merge branch 'pr-2696'
- 8bf03260 merge branch 'pr-3047'
- 72b5c3ca build(deps): bump github.com/godbus/dbus/v5 from 5.0.4 to 5.0.5
- 9a0419b9 merge branch 'pr-2682'
- 110bdb02 Merge pull request #3200 from kolyshkin/release-fix-for-opensuse
- 00772cae tests: add functional tests for seccomp notify
- 5ae831d9 tests: add functional tests for seccomp
- e21a9ee8 contrib: add sample seccomp agent
- c64aaf0e libcontainer/specconv: extend SetupSeccomp tests
- 2b025c01 Implement Seccomp Notify
- 4e7aeff6 libcontainer/utils: introduce SendFds
- c55530be vendoring: Use libseccomp with notify support
- a244d579 Merge pull request #3198 from Vanient/master
- 64358c4d optimize log: move WriteJSON defer as early as possible
- 39d0ee18 script/release.sh: fix for opensuse
- a20c8b29 runc --debug: shorter caller info
- b55b3081 libct/logs: do not show caller in nsexec logs
- c3910e73 libct/logs: parse log level implicitly
- c4826905 libct/logs: test: make more robust
- 963e0146 Merge pull request #3158 from kolyshkin/nsenter-tests
- 7fcfb3fa Merge pull request #3030 from kolyshkin/openat2-improve
- 33dcb994 libct/nsenter/nsenter_test.go: logging nits
- 78b27155 libct/nsenter: test: rm misleading comments
- 2c46455c libct/nsenter: test: improve TestNsenterChildLogging
- feb1fe11 libct/nsenter: test: fix TestNsenterValidPaths
- 3df6a02f libct/nsenter: test: improve newPipe
- bd75bc2d Merge pull request #3176 from kolyshkin/rm-config-error-alt
- bde65de7 Merge pull request #3192 from kinvolk/rata/cgo-warnings
- 5fb9b2a0 Merge pull request #3185 from kolyshkin/go117-build-tags
- 347c371b CI: Mark CGO warnings as errors
- b144f3d3 Merge pull request #2825 from lifubang/nodelete
- 0d193edb Merge pull request #3190 from presztak/nsexec_bail_message_typo_fix
- d8da0035  *: add go-1.17+ go:build tags
- 1b17ec95 libct/cg: rm "unsupported.go" files
- dbb9fc03 libct/*: remove linux build tag from some pkgs
- c5b0be78 Rm build tags from main pkg
- 9ff64c3d *: rm redundant linux build tag
- 3c7db382 Merge pull request #2883 from flouthoc/master
- 62ec6dc9 Merge pull request #2920 from marquiz/devel/rdt
- 895e0a5c nsenter: fix typo in bail message
- 11d141be Merge pull request #3090 from kolyshkin/cfq_quota_period
- 1f5798f7 improve error message when dbus-user-session is not installed
- 63944578 tests/int: add a "update cpu period with pod limit set" test
- 1b2adcfe libct/cg/v1: workaround CPU quota period set failure
- 654f3319 Merge pull request #3175 from kolyshkin/tests-int-cleanups
- 8b59b768 Merge pull request #3182 from cyphar/revert-3159
- b4b79720 Merge pull request #3136 from kolyshkin/cg-d-c
- 09b80811 Revert "libct/devices: change devices.Type to be a string"
- f67f1efc Merge pull request #3110 from kolyshkin/parse-devices
- 538ba846 libct/error.go: rm ConfigError
- 6145628f configs/validate: audit all returned errors
- bbcf96f9 libct/cg/devices: stop using regex
- 34df203d Merge pull request #3159 from thaJeztah/norunes
- fb629db6 tests/int/helpers: fix shellcheck warnings
- f65276db tests/int/helpers: rm $bundle handling
- b3d14488 Add support for rdma cgroup introduced in Linux Kernel 4.11
- 8d8415ee libct/logs: remove ConfigureLogging
- f77fb7a3 init.go, main.go: don't use logs.ConfigureLogging
- 93937000 libcontainer/intelrdt: update code comments
- a37a89f4 libct/system: add I and P process states
- f90008ae libct/system.Stat: fix/improve/speedup
- 412c6f06 libct/system/proc_test: fix, improve, add benchmark
- 3023e6c6 Merge pull request #3166 from kolyshkin/fix-freeze-before-set-alt-2
- 926a9a08 Merge pull request #3171 from kolyshkin/try-bullseye
- 74ae9e0f checkpoint: resolve symlink for external bind mount(fix ci broken)
- 8e6871a3 Merge pull request #3116 from kolyshkin/ci-add-criu-dev
- 24d318b8 Dockerfile: switch to bullseye
- 9835e9c6 Merge pull request #3021 from kolyshkin/go-1.17beta1
- 9a095e44 libct/cg/sd/v1: add SkipFreezeOnSet knob
- fec49f2a libct/cg/sd/v1: add freezeBeforeSet unit test
- 41043673 libct/cg/sd/v1: Fix unnecessary freeze/thaw
- 4d26c4a0 Merge pull request #3144 from kolyshkin/codespell
- ba7a8773 Merge pull request #3168 from kolyshkin/fix-cc-warn
- a5871801 ci: add go1.17
- 75761bcc Fix codespell warnings, add codespell to ci
- db8330c9 libct/nsenter: fix unused-result warning
- e53e97a8 Merge pull request #3164 from kinvolk/rata/make-no-buildtags
- dff41686 Merge pull request #3160 from kailun-qin/fix-check
- ca4433f6 Merge pull request #3153 from kolyshkin/cirrus-robust
- 10f179c8 Merge pull request #3162 from kailun-qin/null-on-error
- 844d6774 CI: Validate compilation without buildtags
- 55e93b89 Merge pull request #3150 from kolyshkin/maintainers
- 51508210 libct/nsenter: nullify pointer on asprintf error
- 2ab6484f libct/nsenter: no need to check size_t less than 0
- f0dbefac .cirrus.yum: retry yum if failed
- 814f3ae1 libct/devices: change devices.Type to be a string
- 74b5c34e .cirrus.yml: simplify
- bb34048f Merge pull request #3152 from opencontainers/dependabot/go_modules/github.com/containerd/console-1.0.3
- 77fb9aff build(deps): bump github.com/containerd/console from 1.0.2 to 1.0.3
- bd50e7c4 libct/cg/OpenFile: check cgroupFd on error
- b114862c Merge pull request #3120 from kolyshkin/nsexec-log-race
- ab577f6f MAINTAINERS: add Sebastiaan van Stijn
- 2bab4a56 libct/nsenter: fix logging race in nsexec
- 16027b81 Merge pull request #3140 from opencontainers/dependabot/go_modules/github.com/opencontainers/selinux-1.8.4
- bda1bd7a build(deps): bump github.com/opencontainers/selinux from 1.8.3 to 1.8.4
- 7d4bac68 merge branch 'pr-3133'
- c2d9668c libct/cg/OpenFile: fix openat2 vs top cgroup dir
- 1b4c30fd libcontainer/intelrdt: always run unit tests
- 79d292b9 libcontainer/intelrdt: verify ClosID existence
- 17e3b41d libcontainer/intelrdt: support ClosID parameter
- 7296dc17 libcontainer/intelrdt: refactor clos path handling
- 1cbfe234 libct/cg: rm dead code
- d0c3bc44 libct/cg: GetAllPids: optimize for go 1.16+
- 363468d0 libct/cg: improve GetAllPids and readProcsFile
- 504271a3 libct/cg: move GetAllPids out of utils.go
- 8772c4dd Merge pull request #3109 from kolyshkin/seccomp
- 64b3fe91 Merge pull request #3117 from kolyshkin/cirrus-nit
- c9b8b4f3 Merge pull request #3073 from kolyshkin/runc-exec-255
- 907c8def Merge pull request #3125 from opencontainers/dependabot/go_modules/github.com/opencontainers/selinux-1.8.3
- fc99ab7e build(deps): bump github.com/opencontainers/selinux from 1.8.2 to 1.8.3
- 0f94799e man/runc-run.8: document --keep option
- cb824629 proposal: add --keep to runc run
- 2aabb297 Merge pull request #3113 from kolyshkin/init-rm-code
- d962bb0c merge branch 'pr-3099'
- e06465ac ci/cirrus: remove unused code
- 120f7406 ci/gha: add latest criu-dev test run
- 60e02b4b runc exec: fail with exit code of 255
- 18f434e1 script/release.sh: make builds reproducible
- 61e201ab makefile: update ldflags and add strip for static builds
- 1f5f237b Merge pull request #3100 from kolyshkin/drop-go-1.13
- 5110bd2f nsenter: remove cgroupns sync mechanism
- 7a0302f0 runc init: simplify
- a91ce306 libct/*_test.go: use t.TempDir
- 3bc606e9 libct/int: adapt to Go 1.15
- 1eeaf113 libct/intelrdt/*_test.go: use t.TempDir
- f6a56f60 libct/cg/fs/*_test.go: use t.TempDir
- 2d1645d2 libct/cg/fscommon: drop go 1.13 compatibility
- 6215b2f3 ci/gha: drop Go 1.13
- a952b5aa README, go.mod: require go 1.15+
- 12a1dccb Revert "libcontainer: avoid using t.Cleanup"
- 015fa29a Revert "Revert "Makefile: rm go 1.13 workaround""
- 5dd92fd9 libct/seccomp: skip redundant rules
- e44bee10 libct/seccomp: warn about unknown syscalls
- 073e085c libct/seccomp: ConvertStringToAction: fix doc
- 4071c3cd Merge pull request #3104 from adrianreber/2021-07-20-vagrant
- 9f656dbb Do not use Vagrant for CentOS 7/8
- d4480164 tests/rootless.sh: fixup for "update rt" test
- 86af5248 tests/int: fix "update rt period and runtime" for rootless
- 713748d4 Merge pull request #3103 from AkihiroSuda/remove-abandoned-policy
- cc0b1644 README.md: remove abandoned versioning policy
- 6e210a1d Merge pull request #3088 from AkihiroSuda/cirrus
- 87bfd20f Evaluate Cirrus CI for Vagrant tests
- 2749f1f1 Merge pull request #3082 from kolyshkin/freeze-less
- a7110262 libct/cg/sd: add TestPodSkipDevicesUpdate
- 52dd96db libct/cg/sd: TestFreezePodCgroup: rm explicit freeze
- f2db8798 libct/cg/sd/v1: Set: avoid unnecessary freeze/thaw
- 5dc32604 libct/int/TestFreeze: test freeze/thaw via Set
- af1688a5 libct/int: allow subtests
- 67cfd3d4 libct/cg/sd/v1: Set: don't overwrite r.Freezer
- 8de0a5c8 merge branch 'pr-3089'
- d02b0061 ci/gha: run on release-* branches after a push
- fceadf23 Merge pull request #3055 from cyphar/cgroup-bpf-replace-selinux
- 57e3c541 cgroupv2: ebpf: ignore inaccessible existing programs
- fe518a06 vendor: update github.com/cilium/ebpf
- 2c01cec8 merge branch 'pr-3067'
- dc3236f9 Merge pull request #3070 from kolyshkin/unconvert
- 3a041e96 Merge pull request #3081 from kolyshkin/carry-3065
- 9493bb82 Merge pull request #3041 from kolyshkin/rtd-cleanups
- 4f3fab9b Merge pull request #3069 from odinuge/devices-caps
- 497e4032 Merge pull request #3058 from kinvolk/rata/nsexec-close-bug
- 3e5c1997 libct/cg/sd: Add freezer tests
- 294c4866 libct/cg/fs/freezer.GetState: report current cgroup state
- 262f294a merge branch 'pr-3062'
- ccf6a94f Merge pull request #3045 from anmaxvl/retry-unix-eintr
- f33be7cc libct/cg/sd: Don't freeze cgroup on cgroup v2 Set
- d41a273d Update device update tests
- be1d5f83 ci: enable unconvert linter, fix its warnings
- 6be088d6 tests/int/dev: add CAP_SYSLOG to /dev/kmsg tests
- 71a3756b Merge pull request #3063 from cyphar/filepath-securejoin-update
- 9f2a1f4d deps: update to github.com/cyphar/[email protected]
- 24d5daf5 libct/user: fix parsing long /etc/group lines
- 226dfab0 libct/user: ParseGroupFilter: use TrimSpace
- 120e3a77 libct/user: use []byte more, avoid allocations
- 83776dd8 libcontainer: Bail on close(2) failures
- 7d479e6b libcontainer: Don't close fds already closed
- e39ad650 retry unix.EINTR for container init process
- 5547b577 Merge pull request #3033 from kolyshkin/rm-own-errors
- 4e56bb44 Merge pull request #3053 from kailun-qin/consolidate-utils
- c508a7bc libct/rootfs: consolidate utils imports
- b12e6bca Merge pull request #3051 from kolyshkin/test-int-fix-unshare
- 1bbeadae tests/int/no_pivot: fix for new kernels
- 24aff17b Merge pull request #3048 from opencontainers/dependabot/go_modules/google.golang.org/protobuf-1.27.1
- 0229a77a libcontainer/intelrdt: privatize some ids
- 8f8dfc49 libcontainer/intelrdt: move NewLastCmdError down
- 00d15629 libct/intelrdt: simplify NewLastCmdError
- e0ce428b libct/intelrdt: remove NotFoundError type
- feff2c45 libct/intelrdt: fix potential nil dereference
- 82498e3d libct/specconf: remove unneeded checks
- bc96a59d build(deps): bump google.golang.org/protobuf from 1.26.0 to 1.27.1
- e5ccc4b9 merge branch 'pr-3043'
- 70fdc057 Revert "checkpoint: resolve symlink for external bind mount"
- 1079288b Merge pull request #2902 from liusdu/checkpoint
- 245fe2b6 Merge pull request #3029 from liusdu/work
- e618c02d libct/stacktrace: remove
- e918d021 libcontainer: rm own error system
- 60c647a7 libct/error: rm ConsoleExists
- 51beb5c4 merge branch 'pr-3011'
- a7cfb23b *: stop using pkg/errors
- b60e2edf libct/cg: stop using pkg/errors
- a6cc36a8 libct/cg/ebpf: stop using pkg/errors
- f137aaa2 libct/cg/devices: stop using pkg/errors
- ebb08128 .golangci.yml: enable errorlint
- 56e47804 *: ignore errorlint warnings about unix.* errors
- f6a0899b *: use errors.As and errors.Is
- 5d2a11ad tty.go: don't use pkg/errors, use errors.Is
- c6fed264 libct/keys: stop using pkg/errors
- adbac31d libct: fix errorlint warning about strconv.NumError
- 7be93a66 *: fmt.Errorf: use %w when appropriate
- d8ba4128 libct/rootfs: improve some errors
- 36aefad4 libct: wrap unix.Mount/Unmount errors
- 825335b2 libct/cg/fs2: fix/unify parsing errors
- 5a186d39 libct/cg/fs: fix/unify parsing errors
- f813174d libct/cg/fscommon: introduce and use ParseError
- adcd3b44 libct/cg/fs[2]: simplify getting pid stats
- 4e330942 libct/cg/fs/stats_util_test: fix errors
- 563225d5 libct/StartInitialization: fix errors
- 3fee59f9 libct/cg/fs/*_test: simplify errors
- fdf4e90e libct/cg/fscommon.ParseKeyValue: no need to wrap err
- 627a06ad Replace fmt.Errorf w/o %-style to errors.New
- 242b3283 libct/cg/fscommon: rm unused var
- 92e8d9b9 libct/intelrdt: error message nits
- 2fc269d7 merge branch 'pr-2971'
- 9f937782 merge branch 'pr-3032'
- 041caf10 VERSION: back to development
- dfc0f069 man/*: revamp
- 85aabe23 C/R: let criu use its default if --work-path is not set
- e8bd33ae runc --help: improve log options description
- cf4ecaed runc update: hide --kernel* options
- 4065c394 exec: rm --no-subreaper flag
- da22625f checkpoint: resolve symlink for external bind mount

Signed-off-by: Ricardo Salveti <[email protected]>

Release aligned with Docker-CE v20.10.21.

Changes also aligned with latest from meta-virtualization (1.6.8).

Relevant changes:
- 1c90a4424 Merge pull request #7573 from samuelkarp/release/1.6.9
- 96929a5d3 Merge pull request #7574 from swagatbora90/backport-cap-bpf-perfmon
- f1493f665 Prepare release notes for v1.6.9
- 346412f5a adding support of CAP_BPF and CAP_PERFMON
- 99578d1fc Update mailmap
- 8b9c35a19 Merge pull request #7571 from sophieliu15/release/1.6
- a956d8415 Add logging volume metrics to Containerd CRI plugin
- 8658d0b51 Merge pull request #7562 from dcantah/cp-concurrent-closech
- 29e2dea50 fix pusher concurrent close channel
- 9a194f78b Merge pull request #7557 from kzys/backport/1.6/stats-nil
- 9edb14386 Merge pull request #7551 from samuelkarp/ip-leakage-flake/1.6
- 8a9d69385 [release/1.6] Stats() shouldn't assume s.container is non-nil
- 74e9e4c43 Merge pull request #7549 from SergeyKanzhelev/switchToRegistry
- a9adc7938 cri: PodSandboxStatus should tolerate missing task
- b66eb726a migrate from k8s.gcr.io to registry.k8s.io
- 6afbeac96 Merge pull request #7518 from kzys/backport/1.6/continuity-fix
- 5b40993a5 [release/1.6] upgrade containerd/continuity from v0.2.2 to v0.3.0
- dccb15294 Merge pull request #7505 from qiutongs/backport-netns-1.6
- f2376e659 Update container with sandbox metadata after NetNS is created
- d9e2ba255 Merge pull request #7490 from samuelkarp/archive-dgst-validate/1.6
- 06f82efef archive: validate digests before use
- 1eb637f95 Merge pull request #7475 from thaJeztah/1.6_bump_go_1.18.7
- 6496ac61e Merge pull request #7461 from akhilerm/cherry-pick-6995-1.6
- 28324c529 [release/1.6] Update go 1.18.7, addresses CVE-2022-2879, CVE-2022-2880, CVE-2022-41715
- 0aeeb62cb [release/1.6] update golangci-lint to v1.19.0
- 7db9d1f76 Fix linter warnings
- 4dc932e62 [release/1.6] gofmt with go1.19
- 7b8d679ad [release/1.6] integration: remove use of deprecated io/ioutil
- a91dd679b Merge pull request #7456 from qiutongs/backport-ip-leakage-1.6
- 926b9c72f retry request on writer reset
- b9a35c6af Add integration tests with failpoint
- 1f29fac48 Persist container and sandbox if resource cleanup fails, like teardownPodNetwork
- 6338ef8d1 Merge pull request #7455 from qiutongs/backport-failpoint-1.6
- a85709c6c integration: simplify CNI-fp and add README.md
- d89a8d223 pkg/failpoint: add FreeBSD link and update pkg doc
- b0ce2965a integration: Add injected failpoint testing for RunPodSandbox
- a7f956d86 integration: CNI bridge wrapper with failpoint
- 07c479471 pkg/failpoint: add DelegatedEval API
- 4a5bc05aa runtime/v2/shim: return if error in load plugin
- 71ee7de24 bin/ctr,integration: new runc-shim with failpoint
- 3e2e77849 runtime/v2: manager supports server interceptor
- cb935bf49 pkg/failpoint: init failpoint package
- 2cbb524b9 Merge pull request #7447 from estesp/cp-7094-1.6
- 2fdfd564c make xattr EPERM non-fatal in createTarFile
- 7b93a228e Merge pull request #7438 from Iceber/skip_verify_1.6
- 89e49609d remotes/docker/config: Skipping TLS verification for localhost
- bf1b93eac Merge pull request #7427 from fuweid/16-cp-7369-7416
- b720be2ce remove stray .zuul.yaml
- 6b30bc4b4 .zuul: remove the zuul because it is offline
- 3228848c6 Merge pull request #7421 from ruiwen-zhao/release-1.6-grpc
- 0f7e258ee Set grpc code for unimplemented cri-api methods
- 462caf1eb Merge pull request #7410 from ruiwen-zhao/container_resource_1.6
- fb753e5cd update intergration
- 6ee5bb7ea bump cri-api
- ae8598615 ContainerStatus to return container resources
- d3c7e31c8 Update CRI-API
- 23d2278a2 Merge pull request #7340 from dcermak/backport-golang-x-crypto-vendor
- 5b44c5271 vendor: golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd
- de1a1905d Merge pull request #7333 from thaJeztah/1.6_backport_runc
- 3507d600b update runc binary to v1.1.4
- 579a6380e Merge pull request #7299 from samuelkarp/ci-workflow-goproxy/1.6
- 1be2cb348 Merge pull request #7298 from deckhouse/docker-compat-1.6
- 1efd8b947 ci: remove GOPROXY environment variable due to https://github.com/go-yaml/yaml/issues/887
- 0448673af Do not append []string{""} to command to preserve Docker compatibility
- 9ff72800f Merge pull request #7274 from mxpv/critest
- 5c230ece0 Fix cleanup in critest
- 026ac1c17 Merge pull request #7268 from thaJeztah/1.6_backport_no_tun
- 9cd3357b7 Merge pull request #7263 from dmcgowan/prepare-1.6.8
- ed9d3dc37 oci: WithDefaultUnixDevices(): remove tun/tap from the default devices
- 3364f411e Prepare release notes for v1.6.8
- a76f3c831 Merge pull request #7261 from samuelkarp/release-workflow/1.6
- 390920429 release workflow: remove Go setup action
- cf48ba6e8 release workflow: increase timeout to 30 minutes
- 76f5db42f Merge pull request #7260 from samuelkarp/fix-7255/1.6
- 57873e652 release: rollback Ubuntu to 18.04 (except for riscv64)
- 0197261a3 Merge pull request #7250 from dmcgowan/release-1.6-update-build-timeout
- eccb82f6d Update release build timeout to 20 minutes
- 5f242b5bf Merge pull request #7225 from dcantah/v1.6.7-rnotes
- 6a854d4b5 Update mailmap
- 61612e1a2 Prepare release notes for 1.6.7
- 78f438957 Merge pull request #7244 from dcantah/update-go-1.17.13
- d199ee462 Update golang to 1.17.13
- d97553c9a Merge pull request #7242 from dcantah/cp-windows-svc-osstderr
- 0578d20c5 Change os.Stderr reassign for Windows service
- 7438c0a7b Merge pull request #7230 from estesp/cp-7206
- 2e236d4fc Merge pull request #7227 from dcantah/cp-hpcstats-test
- 12cae4961 Update Vagrant CI to macos-12
- bc4091aae chore: bump macos runner version
- cb73bd050 Windows HostProcess container CRI stats test
- ac388525a Add validations for Windows HostProcess CRI configs
- d97257190 Merge pull request #7200 from dcantah/1.6-hcsshim-v0.9.4
- 0007f40fe [release/1.6] go.mod: Bump hcsshim to v0.9.4
- 6ae451b97 Merge pull request #7217 from estesp/update-fedora
- c9607e78c Update Fedora version to 36
- 1f5ca004e Merge pull request #7170 from AkihiroSuda/riscv64-1.6
- 2952b66c0 CI: add riscv64 builds
- 6b2dc9a37 release/Dockerfile: update Ubuntu to 22.04 for supporting riscv64
- 745dc07c4 seccomp: support riscv64
- c2f841f21 Create ppc64le release
- 73b85c0c5 Merge pull request #7171 from AkihiroSuda/cherrypick-6810-1.6
- 0a0a154d6 Merge pull request #7172 from AkihiroSuda/cherrypick-7149-1.6
- 86b55bd8d seccomp: allow clock_settime64 when CAP_SYS_TIME is added
- f3da3e51f allow ptrace(2) by default for kernel >= 4.8
- 604d0bdf5 Merge pull request #7160 from thaJeztah/1.6_update_go
- aa1101068 [release/1.6] update golang to 1.17.12
- 4e92d8e7e Merge pull request #7131 from kzys/backport/1.6/7126
- 37dfc5c9d [release/1.6] Fix WWW-Authenticate parsing
- 288440aad Merge pull request #7133 from kzys/backport/1.6/7106
- fa2016d58 [release/1.6] Downgrade MinGW to version 10.2.0
- 6309dc487 Merge pull request #7051 from Iceber/fix-run-controller-manager-1.6
- 99c56d217 ctr: fix label args used in NewContainer
- 3dce36e42 Merge pull request #7045 from kzys/backport/1.6/7022
- 51de785f8 [release/1.6] Make building static binaries simpler
- 9abd4b3f3 Merge pull request #7036 from thaJeztah/1.6_update_runc2
- 2ea4e6348 update runc binary to v1.1.3
- 10c129548 Merge pull request from GHSA-5ffw-gxpp-mxpf
- 61213742a Prepare release notes for v1.6.6
- f92068350 Implicitly discard the input to drain the reader
- 2eb67213b [release/1.6] Limit the response size of ExecSync
- 96df0994f Merge pull request #7021 from dmcgowan/prepare-1.6.5
- 185e87275 Prepare release notes for v1.6.5
- af315d4a4 Merge pull request #7013 from thaJeztah/1.6_bump_golang_1.17.11
- 3691a3b64 Merge pull request #7011 from fuweid/cherry-pick-7009
- 5c9c83d3e [release/1.6] update golang to 1.17.11
- fdcdc27bc update go-cni/for cni update fixing plugins that don't respond with version
- ae3c2ac47 Merge pull request #6985 from AkihiroSuda/cherrypick-6982-1.6
- e33b9e709 archive: add human-readable hint to Lchown error
- feb0d5b17 Merge pull request #6968 from dcantah/gomod-hcsshim-0.9.3
- 856815579 Merge pull request #6980 from AkihiroSuda/cherrypick-6972-1.6
- 3bb5a9d19 config: improve config v1 deprecation message
- 6eff5b6c0 [release/1.6] go.mod: Bump hcsshim to 0.9.3
- 6532af416 Merge pull request #6927 from thaJeztah/1.6_bump_golang_1.17.10
- f1d2d9260 [release/1.6] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad
- 9f99be51b [release/1.6] update golang to 1.17.10
- c6e009522 Merge pull request #6929 from ambarve/backport_path_fix
- 9f76550df Merge pull request #6942 from psschwei/release/1.6
- 1bb7d3909 Merge pull request #6936 from thaJeztah/1.6_bump_runc
- 246a1b42e vendor: github.com/opencontainers/runc v1.1.2
- 43717e03a update runc binary to v1.1.2
- 82a77be2d reverts removal of parallel run from critest
- 74c1e96aa Merge pull request #6941 from estesp/backport-vagrant-fix
- 06bdfeb67 Allow git commands in Vagrantfile
- 70839a344 Bug fix for mount path handling
- bee37b011 Merge pull request #6895 from psschwei/release/1.6
- 1520bae0f update critools to v1.24
- 212e8b6fa Merge pull request #6887 from dmcgowan/prepare-1.6.4
- 0d1d2953b Prepare release notes for 1.6.4
- db40e2128 Merge pull request #6878 from thaJeztah/1.6_backport_bump-opencontainers_selinux_to_v1.10.1
- 42d691fe6 Bump opencontainers/selinux from 1.10.0 to 1.10.1
- 6eeeaaddc Merge pull request #6877 from MikeZappa87/update-go-cni-v2
- e9f22e008 Update go-cni to v1.1.5
- 50e24461e Merge pull request #6859 from fuweid/cp-16-6842
- be4909e95 cri: close fifos when container is deleted
- f83086606 Merge pull request #6844 from dmcgowan/prepare-1.6.3
- baa386dc0 Prepare release notes for v1.6.3
- 595e77bba Merge pull request #6853 from kzys/16-backport-6789
- e8da82adc tracing: fix panic on startup when configured
- ec44f6b65 Merge pull request #6816 from dims/RFC-enhance-pull-performance-1.6
- 1764ea9a2 CRI: improve image pulling performance
- 64d2cf44d Merge pull request #6823 from thaJeztah/1.6_backport_bump_golang_1.17.9
- 9cd76d465 [release/1.6] update golang to 1.17.9
- b7bce90eb Merge pull request #6813 from mikebrow/cherrypick-#6806-release-1.6
- c09cc1242 check for duplicate nspath possibilities
- eed3a2a99 Merge pull request #6801 from fuweid/cherry-pick-6772
- fe6ba62ce metrics/cgroups: fix deadlock issue in Add during Collect
- 4f30ddacd Merge pull request #6766 from thaJeztah/1.6_fix_pseudo_version
- 8b81a7843 [release/1.6] go.mod: update image-spec to merge-commit of v1 into main
- 5ff8fce1f Merge pull request #6759 from thaJeztah/1.6_backport_runc_1.1.1
- cd89e29d2 Merge pull request #6752 from AkihiroSuda/rocky-ci-1.6
- f2ba2041b update runc binary to v1.1.1
- b736b4dab go.mod: github.com/opencontainers/runc v1.1.1
- 72f1e58c7 CI: add Rocky Linux 8
- bb8da7abc Merge pull request #6739 from thaJeztah/1.6_bump_imgcrypt
- 7ede40c5c [release/1.6] vendor: github.com/containerd/imgcrypt v1.1.4
- 264371e06 Merge pull request #6728 from thaJeztah/1.6_backport_update_go_cni_to_v1.1.4
- bee69923e Merge pull request #6732 from thaJeztah/1.6_backport_update_prom_dep
- 5a760443c Merge pull request #6731 from thaJeztah/1.6_backport_xfs
- de12f3717 Merge pull request #6730 from thaJeztah/1.6_backport_improve_container_mount
- ddbe66cac Merge pull request #6727 from thaJeztah/1.6_backport_snapshot_deadlocks
- fc14cfddd Merge pull request #6734 from AkihiroSuda/cherrypick-6323-1.6
- 5538be6cf cgroup2: monitor OOMKill instead of OOM to prevent missing container OOM events
- da35c19da Test turning off golang CI lint cache
- de8046a55 Merge pull request #6725 from dmcgowan/prepare-v1.6.2
- a0213573b Add nolint:staticcheck to platform-specific calls
- ad0036ed6 Update prometheus client vendor
- c7bbf316f Mount devmapper xfs file system with "nouuid" option.
- a1de89c3e Make the temp mount as ready only in container WithVolumes
- 82a12edf2 moving up to go-cni v1.1.4
- 28b44826b native: fix deadlock from leaving transactions open
- 8461dd6e5 Prepare release notes for v1.6.2
- 91800c4e9 Add static checks to shim for Windows
- 8a36855c6 Merge pull request #6724 from dmcgowan/1.6-update-go-mod
- ca51d7f85 Update go.mod go version
- 82c43268f Merge pull request #6717 from thaJeztah/1.6_remove_empty_mod
- 765df6609 [release/1.6] remove empty go mod to allow building for go 1.18
- 921cf570e Merge pull request from GHSA-c9cp-9c75-9v8c
- e9af80859 Fix the Inheritable capability defaults.
- 104824c3d Merge pull request #6673 from estesp/cp-6569
- 7c929318a Update TestNormalize to only test Windows
- 7c9082e97 Merge pull request #6675 from estesp/cp-6666
- 06985e7d0 Upgrade golangci-lint and its GitHub Action
- d12516713 Merge pull request #6623 from kzys/fix-6611
- b13d3e05c cri: relax test for system without hugetlb
- ff6a78445 Merge pull request #6620 from thaJeztah/1.6_backport_bump_go_1.17.8
- b325d5647 update to go 1.16.15, 1.17.8 to address CVE-2022-24921
- 10f428dac Merge pull request #6607 from dmcgowan/prepare-v1.6.1
- 787b4671d Prepare release notes for v1.6.1
- 075cfdff6 Merge pull request from GHSA-crp2-qrr5-8pq7
- 7078e50e2 Merge pull request #6572 from fuweid/cp-1.6-6452-6571
- 444eba43d containerd-shim-runc-v1: return init pid when clean dead shim
- 37bb915c6 containerd-shim-runc-v2: return init pid when clean dead shim
- 9f316fa4b Use fs.RootPath when mounting volumes
- 39259a8f3 Merge pull request #6531 from dmcgowan/prepare-v1.6.0
- 8713c0472 Prepare release notes for v1.6.0
- b73979f11 Merge pull request #6555 from thaJeztah/bump_go_1.17.7
- f261498e0 Update Go to 1.16.14, 1.17.7
- de8c9651b Merge pull request #6533 from a2ush/modify-cri-architecture-doc
- 7efd485b6 Merge pull request #6543 from dmcgowan/update-cni-v1.1.2
- fa19714db Update go-cni to v1.1.3
- e0fc9fe44 Merge pull request #6544 from bobbypage/cloudinit
- 6e3cc28a6 Wait for containerd installation in GCE scripts
- c0f818846 Update go-cni to v1.1.2
- a7f43c892 Merge pull request #6540 from gabriel-samfira/enable-tests-on-windows
- e2c5f8f93 Merge pull request #6500 from NickJackolson/nickjackolson/docupdate
- dea7ae27a Add instructions on using go with admin perms
- 4f0d5f0ee Enable TestContainerPTY and TestContainerUsername
- 0340e84cd Merge pull request #6537 from dmcgowan/prepare-v1.6.0-rc.4
- 732103271 Change the context to avoid misunderstandings
- 6827eec7a Prepare release notes for v1.6.0-rc.4
- eb011d127 Merge pull request #6536 from mxpv/runtime-name
- b0623a06e Change file name for shim binary path
- e8a5a5443 Merge pull request #6532 from egernst/image-param-for-ctr-stress
- a9f61ba2c Merge pull request #6524 from dmcgowan/prepare-1.6.0-rc.3
- 1a3efb5cd Merge pull request #6529 from Gorgonx7/dark-light-mode-logo
- daaf031e2 Use white logo in github dark mode
- efc6ca4c4 Prepare release notes for v1.6.0-rc.3
- 6a628b64a Merge pull request #6514 from marquiz/fixes/rdt
- 33b7f779a Merge pull request #6504 from jepio/jepio/pkg-oom-v2-quiet-shutdown
- d1c3b751c Merge pull request #6523 from fuweid/fix-6484
- 2a588a619 Merge pull request #6518 from egernst/ctr-stress-exec-fixup
- 7e821fb61 fix: .dockerignore makes git working tree dirty
- ac2692d30 containerd-stress: introduce option for specifying image
- 8b9571e34 containerd-stress: start task ctr before starting execs
- 9b1fb8258 cri: fix handling of ignore_rdt_not_enabled_errors config option
- 4f5ce5615 Merge pull request #6501 from henry118/issue6499
- a5d093991 Merge pull request #6510 from smira/adoption-talos
- dcbe3e471 docs: add Talos Linux to the list of adopters
- 943ca856a Merge pull request #6502 from dmcgowan/prepare-1.6.0-rc.2
- 821c961c8 pkg/oom/v2: handle EventChan routine shutdown quietly
- 2d9d5fddb Document fs_type and fs_options in snapshots/devmapper/README.md
- 604c462d7 Merge pull request #6497 from thaJeztah/platform_keep_osversion_osfeatures
- 9a08d6fcd Merge pull request #6457 from kzys/otel-http
- a31e28e2c Prepare release notes for v1.6.0-rc.2
- 8944c12f5 Update releases document
- 75d594834 Merge pull request #6498 from dmcgowan/update-cgroups-1_0_3
- d6a576ae6 Merge pull request #6494 from AkihiroSuda/seccomp-5.16
- 05177ab5c Merge pull request #6243 from ktock/pusher-abort
- 8d69c041c Update cgroups to v1.0.3
- bec6e4dd6 platforms.Normalize(): do not reset OSVersion and OSFeatures
- 34f717349 seccomp: kernel 5.16 (futex_waitv)
- 8632bdcb7 seccomp: kernel 5.15 (process_mrelease)
- c013db696 seccomp: kernel 5.14 (quotactl_fd, memfd_secret)
- 17a2831f7 seccomp: kernel 5.13 (landlock_{add_rule,create_ruleset,restrict_self})
- 1329ea371 seccomp: kernel 5.12 (mount_setattr)
- 52b8ca554 Merge pull request #6411 from nmeum/swapcontext
- c2cb58922 Merge pull request #6478 from fuweid/enhance-no-sync-during-create
- e178d831e Merge pull request #6475 from estesp/import-correct-media-type
- 82af36e59 Merge pull request #5828 from cpuguy83/shimv2_exit_on_signals
- cc59ae4d9 tracing: return (ctx, span) from StartSpan
- e751f1f44 tracing: support OTLP/HTTP in addition to gRPC
- 9c676e98d Merge pull request #6481 from Junnplus/acr-400
- 813a061fe oci: use readonly mount to read user/group info
- a43703fcb Merge pull request #6455 from tonistiigi/amd64-variants
- c0e00f19a fix acr fetch token 400
- 3f5d789df Merge pull request #6476 from gabriel-samfira/various-periodic-fixes
- 4cd9f37f5 Fix windows periodic workflow
- 4aff7431f Fix possibly incorrect media type default on import
- 3ffb6a611 shimv2: handle sigint/sigterm
- 2986d5b07 Merge pull request #6473 from kzys/gc-docs
- f048a2593 docs: add doc-comments on GC-related methods
- 731518417 Merge pull request #6465 from fuweid/fix-issue-6429
- 31a710c49 fix: should not send 137 code event if cmd is notfound
- ab8d99cf4 Merge pull request #6463 from Junnplus/empty-scope
- 936faf9c9 fix empty scopes return
- ad771115b Merge pull request #6462 from dmcgowan/prepare-1.6.0-rc.1
- 62f6c8175 Merge pull request #6424 from cpuguy83/nondist-blob-push
- c1e17d8ba Prepare release notes for v1.6.0-rc.1
- 60703af9f Merge pull request #6461 from dmcgowan/ci-compile-go-1.16
- a37209766 Merge pull request #6432 from dmcgowan/fix-introspection-service
- f2c2d0768 Merge pull request #6458 from dcantah/change-to-constant-win2022
- 4f552b077 Compile binaries for go1.16 and go1.17 in CI
- 762b01896 Merge pull request #6460 from dmcgowan/update-kubernetes-vendors-0.22
- 7d7064e6b Integration: Change to Windows Server 2022 build number constant
- 13b804c10 Merge pull request #6459 from dmcgowan/fix-rdt-build-tags
- 2898004a5 Update kubernetes vendor to 0.22.5
- 5089b1210 Merge pull request #6439 from dmcgowan/remove-submodule-go-mod
- 4e9e14c2b Fix rdt build tags for go 1.16
- 778da8bae Merge pull request #6453 from dcantah/bump-hcsshim-0.9.2
- f0afdea2a Merge pull request #6375 from AkihiroSuda/runc-1.1.0
- af83e9af1 platforms: add support for matching amd64 variants
- af39d2ad7 go.mod: Update hcsshim to v0.9.2
- fcb7bd699 Remove api go submodule
- 46312f4a1 Update makefile to remove API submodule
- fd35ca235 Merge pull request #6443 from kzys/otel-fix
- 2b8386e0d Merge pull request #6386 from kzys/codeql-pr
- 297115dd3 Merge pull request #6445 from cpuguy83/disable-client-trace
- 6eff8392c Merge pull request #6451 from ningmingxiao/dev7
- ed0828bb6 delete useless code
- 21a748e38 go.mod: github.com/opencontainers/runc v1.1.0
- dba897c35 update runc binary to v1.1.0
- d5e8edf2d Do not automatically inject client traces
- 140ecc924 Merge pull request #6440 from IRCody/revert_shared_namespace
- 69ae95531 tracing: fix OTLP tracer's initialization
- 8dd36423b Revert "Add shared content label to namespaces"
- c3177caf0 Merge pull request #6435 from alunsin/dev/build-image-for-ppc64le
- 2311f1e5f Merge pull request #6427 from lining2020x/main
- 6e211a774 Merge pull request #6431 from dmcgowan/prepare-1.6.0-rc.0
- a1ba38056 Update caching logic to avoid map access
- ce3871966 services/introspection: support to show introspection grpc service
- 30a60663f Merge pull request #6397 from aznashwan/windows-integration-gcloud-auth-action
- a018ae3f6 Prepare release notes for v1.6.0-rc.0
- 919797163 Integration: Switch to `upload-cloud-storage` Gcloud action.
- 8a2b61356 Integration: Switch to using `auth` Gcloud action in Windows workflow.
- bce18cb04 Merge pull request #6426 from ningmingxiao/dev6
- c0a31a7a4 Add ppc64 support for test images
- a303d552a ctr: Unify the delete subcommand alias
- b35fb7d44 remove io/ioutil
- d05194f0a ctr: flag to toggle non-distributable blob push
- f77989036 Add image handler to skip non-distributable blobs.
- 8c194d8f3 gha: run CodeQL scan on pull requests
- 62a4e7020 Merge pull request #6418 from bobbypage/cgroupv2-cos-fix
- 4cbd366f9 Merge pull request #6378 from aznashwan/windows-integration-enable-2022
- f99e92359 Enable critest tests on Windows Server 2022.
- 55b89eabf Parametrize CRITest test images in Windows Periodic workflow.
- 35b96f9b1 Merge pull request #6415 from dmcgowan/contrib-apparmor-cleanup
- e4bf68633 Merge pull request #6419 from sachaos/feature/fix-wrong-log-message
- 18592b2f5 Fix wrong log message
- bdc852190 test: e2e node COS cgroupv2 script
- ee326447e Merge pull request #6414 from dmcgowan/followup-errors-change
- 468513820 Merge pull request #6351 from adisky/update-k/k-1.23
- 9028832e4 Merge pull request #6416 from marosset/adopters-azure
- e38946d86 Updating adoption of containerd for AKS
- c124253e0 Merge pull request #6413 from SergeyKanzhelev/patch-1
- 647308bc4 Merge pull request #6410 from AkihiroSuda/update-go-mod-20220107
- 8aca314dd Update error message for apparmor parser
- 48c7529de Fix incorrect error wrapped when closing ingest file
- 0c2c289d4 Fix seek error used without nil check
- 8816006d1 Fix followup items from errors replacement
- 77d53d2d2 Merge pull request #6366 from jonyhy96/feat-errors-replace
- a94f32ce0 update the adoption status of containerd in GKE
- adee2c797 seccomp: add support for "swapcontext" syscall in default policy
- 72d2913c8 Merge pull request #6412 from jklippel/correct-link-in-documentation
- 4f0f36350 corrected link in cri architecture documentation
- d3724a6c1 go.mod: update github.com/containerd/{continuity,go-cni,imgcrypt}
- bbe46b8c4 feat: replace github.com/pkg/errors to errors
- 3ccd43c8f Merge pull request #6396 from AkihiroSuda/refresh-token
- 857b35de6 Merge pull request #6407 from dmcgowan/prepare-1.6.0-beta.5
- e43d4206a Update k/k to 1.23.0
- 8d5af6be8 Prepare release notes for v1.6.0-beta.5
- 1b8af3752 Merge pull request #6292 from aznashwan/windows-integration-conditional-artefact-upload
- 644a01e13 Merge pull request from GHSA-mvff-h3cj-wj9c
- 893701220 Merge pull request #5439 from marquiz/devel/rdt
- 9c2e3835f cri: add ignore_rdt_not_enabled_errors config option
- eba104816 Update dependencies
- f4a191917 cri: annotations for controlling RDT class
- eae14688c tasks: add Linux rdt support
- 9e755d12e cmd: add --rdt-class command line option
- 2946db890 oci: implement WithRdt
- 4045b7ce8 Merge pull request #6391 from jonyhy96/fix-placeholder
- fcf956a9e Merge pull request #6403 from tklauser/timespec-unix
- 07aa42f42 Merge pull request #6207 from marquiz/devel/docs
- bf60e2d17 Merge pull request #6304 from lippertmarkus/fix-ctr-cni-windows
- df21828d2 content/local: use syscall.Timespec.Unix
- ff7fd4eb2 Merge pull request #6394 from dcantah/fix-makefile
- 3ab676ce2 Merge pull request #6395 from jonyhy96/fix-abstract
- 85326d76f fix: only test abstract unix socket on linux
- 90426378e Integration: Check GCP secrets on Windows CI artifact upload.
- 97623ab0c remotes/docker: allow fetching "refresh token" (aka "identity token")
- 1a078e689 Merge pull request #6390 from gabriel-samfira/fix-restart-container-test
- 8094f50dd remotes/docker/config: allow setting custom AuthorizerOpts
- 8e6afaa20 Fix $(PWD) issue for Windows makefile
- 653b8b02a Expect ErrorNotFound on Windows after Kill()
- ac8129706 fix: use _ for consistency
- f39b3ac7e fix(ctr): enable networking for Windows containers
- 653f2f1ce Merge pull request #6291 from ningmingxiao/dev1
- 3ae95e78a Merge pull request #6384 from dcantah/fix-nodaemon
- 0ff87a892 Replace tskill with taskkill
- fd07b0368 Merge pull request #6122 from alakesh/ext4_lazy
- f41e5c7e1 Merge pull request #6385 from gabriel-samfira/fix-list-stats-flake
- e0a433abf Merge pull request #6347 from gabriel-samfira/fix-windows-test-setup
- aadae6d50 Fix flakiness on Windows for list stats
- d53c43133 Fix no-daemon flag for integration/client tests
- b93119501 Merge pull request #6383 from kzys/otel-upgrade
- 5c2edeffb Upgrade k8s.io/klog/v2 from 2.9.0 to 2.20.0
- 2ee3ce510 Use insecure.NewCredentials instead of grpc.WithInsecure
- 2fb739aa2 Upgrade OpenTelemetry dependencies
- 28ffedd06 Merge pull request #6322 from dcantah/fix-makefile-windows
- 34c4abc34 Fix default makefile target for windows
- e6dd97d9d Merge pull request #6379 from dcantah/disable-TestContainerHook-Windows
- 2c9d80aba Merge pull request #6372 from fidencio/wip/seutil-fix-container_kvm_t-type-detection
- 78ad7a2d3 cri-integration: Add Windows default paths
- abcf7c2f6 Disable TestContainerHook on Windows
- 3c3486f91 Merge pull request #6350 from aznashwan/windows-integration-disable-2004
- 89437597a Merge pull request #6308 from thaJeztah/rootless_devices
- 949db5721 Merge pull request #6320 from endocrimes/dani/cri-swap
- 0def0dbec Merge pull request #6275 from gabriel-samfira/enable-volume-ownership-test
- d0da25cf5 Merge pull request #6296 from dmcgowan/prepare-1.6.0-beta.4
- 330961c2d Merge pull request #6358 from jonyhy96/feat-error
- d47fa40d1 Merge pull request #6021 from dmcgowan/runc-shim-plugin
- ac531108a Merge pull request #6155 from egernst/cri-update-for-sandbox-sizing
- 7d268f712 Merge pull request #6354 from kzys/ns-snapshot
- f1c799331 seutil: Fix setting the "container_kvm_t" label
- 5bd38c6a1 Merge pull request #6373 from minbaev/add-list-stat
- c8a009d18 add-list-stat: return container list if filter is nil
- d977f77a5 Merge pull request #6369 from fuweid/fix_test_case
- f83ab813d Use task plugin for runc shim
- 04e57d71b Seperate shim manager and task service
- 44b28b61f medatada: make namespaces' deletion error less cryptic
- 20419feaa cri, sandbox: pass sandbox resource details if available, applicable
- 6e9e75955 Merge pull request #6225 from jonyhy96/feat-blot-open-timeout
- 9e9ee66bf integration: deflake TestContainerdRestart
- dd26d3d09 feat: support custom timeout for blot open
- c0d07094b feat: Errorf usage
- 7fa44fc98 Merge pull request #6333 from thaJeztah/bump_go_1.17.4
- 0e472420b Update Go to 1.17.5
- 569042e6d Prepare release notes for v1.6.0-beta.4
- 4236f6b22 Merge pull request #6332 from thaJeztah/consistent_import_alias
- 1057ed385 Merge pull request #6364 from dmcgowan/disable-restart-monitor-test-windows
- 552a27081 Disable restart monitor test in Windows
- a95a8b8ff Merge pull request #6338 from kzys/windows-fail-fast
- b7f673790 OCI: Mount (accessible) host devices in privileged rootless containers
- 7f70ff967 oci.getDevices(): move "non-dir, non '/dev/console'" case into switch
- 95b83fa54 Merge pull request #6355 from dmcgowan/integration-client-restart-daemon-output
- 2c96d5b06 Run windows parallel integration test as short
- 807213fd3 Update restart monitor test to output daemon logs on failure
- 26d356d09 Merge pull request #6263 from thaJeztah/bump_oci_specs
- 9b0303913 only relabel cri managed host mounts
- 90cdc6c9a images/converter: remove deprecated types
- fc8138468 go.mod: update image-spec to latest (v1.0.3-dev)
- 2d3009038 cri/server: use consistent alias for pkg/ioutil
- a04656c1d Merge pull request #6353 from mxpv/gids
- f9cfadcdd Merge pull request #6303 from jsturtevant/fix-rg-timestamp
- dc13bcd51 Enable lazy init for ext4 with devicemapper
- 68dabdcc6 Use RFC3339 format so rg cleanup works
- 6f9d80907 Remove Windows integration testing for 2004.
- 77a321a07 Replace find with native Go code
- 22dc60e05 Enable TestVolumeOwnership on Windows
- 441bcb56d Skip WithAdditionalGIDs on Darwin
- 4c1e26cd5 Don't fail-fast on Windows integration tests
- 753f95e23 Merge pull request #6330 from AkihiroSuda/runc-1.0.3
- 1c32c00fe Merge pull request #6329 from mxpv/mac
- c9d1e155c go.mod: github.com/opencontainers/runc v1.0.3
- 44995d483 update runc binary to v1.0.3
- 416899fc8 Allow native snapshotter on Darwin
- 292b0c156 Merge pull request #6328 from kzys/go-install
- 4af023480 Merge pull request #6326 from mxpv/builtins
- 6b0e2414c Do not use `go get` to install executables
- d2f1dda0f Include runtime v2 in default builtins
- d06bce4d3 Merge pull request #6314 from dcantah/ws2022-ci
- d74245308 Merge pull request #6324 from gabriel-samfira/set-explicit-acl
- 2c1f51781 Merge pull request #6311 from thaJeztah/update_test_image
- 072177796 Merge pull request #6325 from gabriel-samfira/set-containerd-root
- e0e605cf3 Merge pull request #6312 from thaJeztah/export_DeviceFromPath
- 392f604eb Use a single RUN command
- 533dd1c0e fixup: check for swap accounting
- f33d38c7c integration: align tags of test images
- c5b0a18b6 fixup: handle diff between cgroupsv1 and v2
- 9cc0d1f07 Set explicit ACL on test files
- 4ccf287da Set CONTAINERD_ROOT in Windows cri-integration
- 106086d65 Merge pull request #6321 from gabriel-samfira/update-volume-test-images
- ff77dd112 Add Windows Server 2022 CI runs
- fd0850e9e Update continuity dependency
- ff9d7aef3 Update volume test images
- 08812f3fb Merge pull request #6201 from dmcgowan/test-restart-monitor-check-timestamp
- 2fa4e9c0e cri: add support for configuring swap
- 8063fdab0 Merge pull request #6319 from dmcgowan/update-windows-integration-image-to-ghcr
- bae0d88ae Add error logging on cleanup
- d43a90b98 Merge pull request #6301 from mxpv/migration
- 6bccd67e8 Revert shim plugin migration
- 665877a5b Move volume images from gcr to ghcr
- 2190192b5 Merge pull request #6317 from gabriel-samfira/add-github-packages-login
- 323a62d7b Add permissions
- f3195b3b5 export oci.DeviceFromPath()
- 16c233b6d Merge pull request #6306 from thaJeztah/update_oci_getdevices
- c6d26f0d3 Authenticate against ghcr.io
- 30d8dccd3 Merge pull request #6315 from dcantah/skip-multilayertest-windows
- 2a6857d06 Skip TestExportAndImportMultiLayer on Windows
- 6ff1a5934 fix when kernel version < 4.13rc1 by using index=off cause overlay test error
- 94462d8f5 oci/deviceFromPath(): correctly check device types
- 591d7097e Merge pull request #6290 from gabriel-samfira/add-test-image-build-action
- f419d4a0a Merge pull request #6286 from aznashwan/windows-integration-separate-trigger
- 3d1c85d95 Merge pull request #6274 from gabriel-samfira/build-image-on-windows
- 2a36dcdda Merge pull request #6297 from adisky/patch-2
- 7a4415dd5 Add VMware TKG & TCE to Containerd adopters
- 8757b92c7 Merge pull request #6293 from AkihiroSuda/fedora35
- 1fe214c22 Merge pull request #6269 from estesp/test-ci-readme
- 46892d340 Vagrantfile: update to Fedora 35
- 2877865a9 Merge pull request #6278 from mxpv/resolve
- 9e7910ebd Merge pull request #6271 from fuweid/move_stdout_to_stderr
- 0d720ff9c Merge pull request #6289 from ManaSugi/add-ctr-caps
- 7cfccdbad Merge pull request #6270 from fuweid/enhance_test_case
- 8de1117c9 integration: add stats result in error message
- 6681cc4b9 ctr/snapshots/diff: don't show the media-type in output
- a97564411 remotes: fix dockerPusher to handle abort correctly
- 1698d061c Build volume test images on Windows
- 7ccd733d2 Add image build workflow
- 95b3ab2a4 ctr: Add Linux Capabilities control flags
- ff1a105d7 Merge pull request #6287 from samuelkarp/1.4-extended-docs
- 3d318b3bb docs: mark 1.4 as Extended
- 9a994877c docs: fix RELEASES.md gRPC API anchor
- 0a25bc1aa Integration: Separate Windows Periodic Tests workflow trigger.
- 0a284fcdb Merge pull request #6284 from jonyhy96/feat-ci-skip-fork
- 507bfc91b feat: skip ci for fork
- cf6f19cea Merge pull request #6280 from wzshiming/fix/close-with-seek-fail
- 72384a653 Merge pull request #6268 from aznashwan/windows-ci-autodetect-az-cli
- 9dfbcbbc4 content/local: Close the file if Seek fails
- 5015130f7 Fix executable file not found when restoring shims
- 51e60404a Merge pull request #6276 from sachaos/feature/fix-wrong-document-about-make-install-deps
- 2b28dd363 Fix wrong make target on documentation
- cb1359fa8 Integration: Remove explicit version passing to `azure/CLI`.
- b6b8facf1 Merge pull request #6272 from jonyhy96/fix-error-return
- fa6759ae5 fix: server error return
- 1a88cf524 Merge pull request #6267 from dmcgowan/prepare-v1.6.0-beta.3
- 5e4b033ec Update README.md repo->org
- db9c6fc72 Merge pull request #6254 from jonyhy96/feat-support-callopts
- 69822aa93 Merge pull request #6258 from wllenyj/fix-registry-panic
- 5f293d9ac [CRI] Fix panic when registry.mirrors use localhost
- af93ea7f1 Merge pull request #6241 from jterry75/main
- 674b94c42 Prepare release notes for v1.6.0-beta.3
- f5863e22f Update API version in go.mod
- 5df9ec366 Update release name to use consistent format
- aa2733c20 Merge pull request #6170 from olljanat/default-sysctls
- f8d734e40 fix: make max recv/send msg size setting default
- a776a27af Merge pull request from GHSA-5j5w-g665-5m35
- 9afc778b7 Merge pull request #6111 from crosbymichael/latency-metrics
- 63895de45 Add support for TMP override on toml
- 4aea5da85 Merge pull request #6255 from aznashwan/generalize-windows-ci-setup-user
- 7758cdc09 Merge pull request #6253 from jonyhy96/feat-rwmutex
- 444ef2f6d Generalize Windows CI setup script for any user.
- 3d6bfa3f5 Standardize cmdlet capitalization in Windows CI scripts.
- 6835a9470 Split runc shim into plugin components
- 6eea8f3f6 Add shutdown package
- 547040cd5 feat:support custom callopts on client side
- bef792b96 feat: use rwmutex instead
- d055487b0 Merge pull request #6206 from mxpv/path
- 77e76d7a5 Merge pull request #6246 from wzshiming/fix/close-file-with-modify-perm
- eee8c969d Merge pull request #6250 from cpuguy83/fix_release_tar_name
- 2f31dcda7 release: change tar name to match prior releases
- 70c88f507 schema1: reject ambiguous documents
- eb9ba7ed8 images: validate document type before unmarshal
- 2a81c9f67 CRI: Support enable_unprivileged_icmp and enable_unprivileged_ports options
- db124c560 Close file if permission modification fails
- 5b09dc5eb Merge pull request #6237 from cpuguy83/fix_wrong_restore_error
- aa1b07361 Merge pull request #6221 from ktock/urls-fallback
- 526defb57 Fix containerd fails to pull OCI image with non-`http(s)://` urls
- 89eebc4c0 Fix wrong error returned for image index lookup
- bd81f8a39 Merge pull request #6223 from dmcgowan/v1.6.0-beta.2
- bd30398f4 Merge pull request #6196 from cpuguy83/add_arm64_release
- be84932e1 Rename release dockerfile to omit distro name
- 28126fd60 release: improve dockerfile
- 27d7c5038 Add arm64 to releases
- 7ad570964 Merge pull request #6236 from crosbymichael/cri-panic
- 6765524b7 use write lock when updating container stats
- 9093c1c69 Merge pull request #6230 from dcantah/update-hcsshim-0.9.1
- b103bee4c go.mod: Bump hcsshim to v0.9.1
- e17fe37e0 Fix package alias
- 60c55c80f Merge pull request #6228 from dcantah/update-ttrpc-1.1.0
- 920b24793 go.mod: Bump ttrpc to 1.1.0
- 6870f3b1b Support custom runtime path when launching tasks
- 91bbaf679 [cri] add sandbox and container latency metrics
- 195def141 Merge pull request #6213 from thaJeztah/bump_moby_sys
- 4b7cc560b Merge pull request #6222 from jonyhy96/add-more-description
- a3b756ce1 Prepare release notes for v1.6.0-beta.2
- 574800633 cleanup: add more description on comment
- 432ddecaa Merge pull request #6211 from thaJeztah/bump_go_1.17.3
- 76a63427e Merge pull request #6214 from AkihiroSuda/crun-1.3
- a22346622 CI: bump up crun: 1.0 -> 1.3
- 97073c943 go.mod: github.com/moby/sys/mountinfo v0.5.0
- 19d9d0d2a go.mod: github.com/moby/sys/signal v0.6.0
- 9c455ded6 go.mod: github.com/moby/sys/symlink v0.2.0
- fa12f4e69 go.mod: golang.org/x/sys v0.0.0-20211025201205-69cdffdb9359
- 869ccc01c Update Go to 1.17.3
- d41866088 Merge pull request #6205 from gabriel-samfira/pin-azcli-version
- 3196e65f5 docs: document the runtime shim plugin config options
- 0d8e07681 docs: use proper markdown lists in containerd-config.toml.5.md
- 54c0cdae6 Update TestRestartMonitor expected time check
- d4f4c1380 Add runtime path in CreateTaskRequest
- b5b83e051 Merge pull request #5918 from mxpv/shim-manager
- 548579d0e Pin az CLI version
- bfc714d3a Merge pull request #6113 from bobbypage/cri-stats
- 2e6d5709e Implement CRI container and pods stats
- b69bbe25a Vendor latest k8s.io/cri-api and netlink
- 1e36eaf11 Merge pull request #6200 from bobbypage/restart_integration_test
- fd07d74d6 Merge pull request #6179 from claudiubelu/integration/enable-test-runtime-handler
- 9bfec3980 test: Add grace period for restart monitor test
- 0478e04ae Merge pull request #6171 from EGuesnet/Dockerfile_mkdir
- 702071964 Merge pull request #6189 from fuweid/followup-6166
- d022fbe78 Address PR comments
- 82cb0a63e Add mkdir on Dockerfile
- 11ed34067 Merge pull request #6184 from mikebrow/network-setup-logging
- 27e3dba36 Merge pull request #6176 from ktock/converter-hook
- cc5a4c829 Merge pull request #6177 from dkkb/feature/zstd_with_skippable_frame
- 6fa1bb4a5 Fix build after rebase
- 2cec3a34b Migrate task directory
- 8b788d9df Expose shim process interface
- 733519677 Fix after rebase
- df8c206a9 Cleanup shim loading
- b554b577b Move shim restore to a separate file
- a3d298193 Fix backward compatibility with old task shims
- 33786ee4d Add plugin dependency between shim and shim services
- fb5f6ce3c Rework task create and cleanup flow
- 7c4ead285 Add task manager
- 2d5d3541e Rename task manager to shim manager
- ea8978810 adds additional debug out to timebox cni setup
- c8e88447a Merge pull request #6182 from claudiubelu/integration/windows-test-volume-copy-up
- 6fa9f22fa compression: support zstd with skippable frame
- f0d3ea96c converter: Allow hooks during image conversion
- 6ee8577e5 sys/reaper: avoid leaky goroutine when exec timeout
- d0bdb0b65 Merge pull request #6121 from claudiubelu/integration/enables-windows-tests-part-2
- d97b40c30 Merge pull request #6085 from claudiubelu/integration/enables-windows-tests
- dc869b785 Merge pull request #6125 from xens/update_doc_to_v2
- 185c0fb94 Merge pull request #6166 from botieking98/fix-wait-block
- 0800b45dd Merge pull request #6145 from tonistiigi/content-close-fix
- 64f7abd69 Merge pull request #6165 from jmacelroy/main
- 88fc5cf2d Adding scope tests for ParseAuthHeader
- 720781830 Merge pull request #6167 from claudiubelu/update-go-cni
- 3e51312a6 fix shim reaper wait command execute blocked
- aa65faebd Merge pull request #6159 from claudiubelu/commands/tasks-metrics-windows
- 7438edc7e Adding tests for GenerateTokenOptions
- 9b4a6f129 Generate token options with each scope as a separate string.
- 0d0fb6858 Merge pull request #6149 from ukontainer/vendor-moby-sys
- b8f3ebb03 vendor: update moby/sys for darwin support
- 45c529870 Merge pull request #6144 from dmcgowan/prepare-v1.6.0-beta.1
- 0ccc386c8 Prepare release notes for v1.6.0-beta.1
- e5fc3b38e Update mailmap
- 37720fc6f Update api vendor
- fc5c51d5f Merge pull request #6136 from zouyee/cni100
- a217b5ac8 bump CNI to spec v1.0.0
- 010a9e2bc content: close stream after commit request
- 006b44181 Merge pull request #5992 from cpuguy83/client_otel_trace
- ebc5cf19a feat(doc): update to version 2 syntax
- 294143bf3 Inject otel traces to grpc client.
- 51de1d3a4 Merge pull request #6142 from AkihiroSuda/client-expose-image-platform
- cd2f2b0af client: expose (*image).platform
- ac5790c8e Merge pull request #6128 from xens/feat/doc_sched_core
- 3f26fd22e Merge pull request #6130 from cpuguy83/inject-ns-to-rpc
- f44d4cf8c Merge pull request #6109 from timchenxiaoyu/githubdev
- 9c488e5da Merge pull request #6124 from samj1912/large-labels
- 535191abf fix #6054  MaxConcurrentDownloads is not effect when Unpack is true
- 59ca4bfd7 Merge pull request #6132 from dcantah/wcow-snapshotter-spelling
- 3b73922fb feat(doc): add Core Scheduling documentation
- c18c2e735 Fix spelling mistake in Windows snapshotter
- 4da5d94da Merge pull request #6126 from claudiubelu/cleanup-wcow-layers
- 130a9c7dd Ensure namespace is proxied to grpc/ttrpc plugins
- 2a8dac12a Output a warning for label image labels instead of erroring
- 10d9d1a60 Merge pull request #6118 from zouyee/ioutil
- 602018900 integration: Enable some tests for Windows
- 1f1cad391 io/ioutil package has been deprecated in Go 1.16 that replaces io/ioutil functions
- 085572537 Merge pull request #6115 from zouyee/utest
- 3f417d61e Merge pull request #5778 from claudiubelu/windows/adds-resource-limits
- 46be06937 close Writer after use which may leak mem
- 5b29542cb Merge pull request #6098 from dmcgowan/prepare-1.6.0-beta.0
- 37e9efbe6 Merge pull request #6105 from dmcgowan/test-add-error-testcontainerdrestart
- 2e3c8d5e6 Merge pull request #6110 from rgl/rgl-new-container-doc-typo
- 1abe50512 Prepare release notes for v1.6.0-beta.0
- c5947557d Add error message to in TestContainerdRestart integration test
- 6927fc327 Merge pull request #6104 from dmcgowan/update-cgroups
- 072a7074b Fix typo in the NewContainer function documentation
- 193bafc42 Merge pull request #6100 from jonyhy96/cleanup-test
- ac2df3ba9 test: check file content after mount
- 18d483b23 Update cgroups to v1.0.2
- a4663097e Merge pull request #6107 from estesp/test-timeout
- 4ed3c524c Update test timeout based on recent cancellations
- 3f033aeff Merge pull request #6106 from dmcgowan/test-cri-teardown-check-pid
- d252a293d Remove extra test_teardown
- 4a569c889 Check the pid in cri test teardown
- cb6fb93af Merge pull request #6011 from crosbymichael/schedcore
- 60ffa3ff7 Merge pull request #5579 from claudiubelu/integration/restart-containerd
- c01ebe7cf Merge pull request #6099 from dcantah/update-hcsshim-0.9
- 26ee1b1ee Merge pull request #4695 from crosbymichael/cri-class
- f1054dbbd fix integration client vendor
- e48bbe839 add runc shim support for sched core
- 88e1cf5fb Merge pull request #6102 from thaJeztah/bump_go_1.17.2
- de1a39bf3 Update Go to 1.17.2
- 46b152f81 vendor: Bump hcsshim to 0.9.0
- fb4432c24 integration: Enables TestVolumeCopyUp for Windows
- 0ba3532f5 integration: Enables TestRuntimeHandler for Windows
- e648fa2e8 Merge pull request #5933 from claudiubelu/integration/import-multilayer
- 2d48b6a86 Merge pull request #6031 from fuweid/carry-5648
- 7b8a697f2 Merge pull request #6034 from claudiubelu/windows/fixes-image-volume
- 830b3c26e integration: Enable some tests for Windows (part 2)
- 228265688 Merge pull request #6094 from zouyee/go117
- 3a713811b run `gofmt` with Go 1.17
- 7b2a5f1c0 Merge pull request #6088 from AkihiroSuda/pkg-cap-fix-comment
- 6e5ce1486 Merge pull request #6066 from cpuguy83/fix_tracing_attrs_usage
- 96018b7db vendor: Updates go-cni
- 703b86533 pkg/cap: remove an outdated comment
- 1ee2bff0e Update go otel 1.0.1
- 79e35892c Merge pull request #6086 from estesp/add-adopters
- 97e201640 Merge pull request #6082 from Dragoncell/cgroupv2_fix
- b9a0c5080 modify the way for checking cos
- c528d2c39 Update ADOPTERS.md with additional uses
- 5b222d54a commands: Enables task metrics for Windows
- d193dc2b8 Merge pull request #5915 from AdamKorcz/fuzz12
- 4acb18c95 Merge pull request #6081 from adelina-t/fix_tests
- 3f00006f7 Merge pull request from GHSA-c2h3-6mxw-7mvq
- 9734b4039 Pin mingw to version 10.2.0
- d19af5afb Update to golang 1.17.1
- 3cb0ec01e Install nssm
- 64291df71 Merge pull request #6079 from cpuguy83/correct_task_error
- 63b7e5771 Merge pull request #5973 from Juneezee/deprecate-ioutil
- 02e77bcdc task service: return known error type
- 791e175c7 Windows: Fixes Windows containers with image volumes
- fbdcddedc Merge pull request #6076 from jonyhy96/cleanup-import
- c76c9f2cc Merge pull request #6069 from jonyhy96/feat-grpc-options
- 049042382 fix: update vendor
- 5c2426a7b cleanup: import from k8s.io/utils/clock/testing instead
- 6484fab1e cleanup: import from k8s.io/utils/clock instead
- d16942cf1 feat: enable cri remote client to call with grpc calloptions
- a06a0990e Merge pull request #6074 from mikebrow/cleanup
- ca35f4e82 Windows: Cleanup rm- prefixed layers
- f6b7e07fd cleanup k8s ansible yaml (carry for https://github.com/jayonlau <[email protected]>)
- f90ebaf1c Merge pull request #6070 from jonyhy96/feat-import-platform
- 96fda588b Merge pull request #6065 from dmcgowan/mirror-action-custom-tag
- 933ddaa6f fix: wrong flag type
- da16d492c feat: support import image for specific platform
- d132691f1 Merge pull request #6059 from jonyhy96/feat-cmd-flag
- 67b883146 Update mirror images to take target image name
- e6ddffc2a fix: make exec-id flag required in exec command
- 0f27a423e Merge pull request #6052 from ktock/uncompress-compression-pkg
- 6416cc35c Merge pull request #5922 from zouyee/replace
- 09c9270fe images: enable converter to uncompress zstd
- 5162238c7 Merge pull request #5853 from claudiubelu/integration/windows-hostprocess
- 694a00754 replace deprecated function
- f40df655c Merge pull request #6047 from ktock/fix-build-main
- 2bc77b8a2 Adds Windows resource limits support
- 224454062 Fix main branch build is broken
- 22beecb7d Merge pull request #6003 from cpuguy83/add_otel_log_hook
- efc90baf5 Merge pull request #6023 from dcantah/fix-lcow-withusername
- 7c621e1fc btrfs: reduce permissions on plugin directories
- 4921fb6b6 Merge pull request #5946 from zouyee/errors
- fcffe0c83 switch usage directly to errdefs.(ErrAlreadyExists and ErrNotFound)
- 45e0e5a77 Merge pull request #5926 from claudiubelu/import-add-platform-check
- c5e23649d Merge pull request #6043 from dmcgowan/fix-metadata-content-panic
- c23f52af3 Merge pull request #6001 from cpuguy83/trace_exporter_plugin
- b23ec233a Merge pull request #5916 from claudiubelu/windows/image-import
- a4fa3a716 Merge pull request #6017 from thaJeztah/fix_main_nomodules
- b9cf0d75a Fix panic in metadata content writer on copy error
- 6886c6a2e v1 runtime: reduce permissions for bundle dir
- 7d56b24f1 v2 runtime: reduce permissions for bundle dir
- d0bedc5bd Merge pull request #5979 from TianTianBigWang/fix/err-string-fmt
- 7a7a9a282 integration: Adds test for multilayer image import
- f7658e37d runtime: should fail fast if dial error on shim
- 483d2e947 go.mod: update opentelemetry modules to v1.0.0
- 483e23bdc Merge pull request #6036 from dmcgowan/add-mirror-action
- f6c1e7ed8 Merge pull request #6027 from alakesh/log-fix
- 084387e0b Move tracing to plugin
- 45c3453a7 Add open telemetry logging hook for logrus
- 6fd80dea3 Merge pull request #5991 from akhramov/freebsd/fix-tar-headers
- 16f3d67b5 add current process state to the error message
- 407d60694 Add github action to mirror image
- 03d1a0fa7 Merge pull request #6035 from kzys/virt-ip
- 97df73004 gha: collect Vagrant VMs' IP addresses
- 2bffb5f9b FreeBSD: fix tar headers & the nil check on getxattr
- 3393970dd Merge pull request #6033 from zouyee/continuity
- 90c6ff97a Merge pull request #5997 from ktock/deduped-ref
- 7854e0bff bump continuity and console version that remove pkg/errors
- 2e2956ba2 Merge pull request #5998 from kaijchen/patch-1
- 16d3f48a2 ctr namespaces: improve usage string
- ecbd7c653 Merge pull request #6028 from zouyee/bump
- 50da67359 refactor: move from io/ioutil to io and os package
- a68fb7add bump console version to v1.0.3 that remove pkg/errors
- c16be1a5e Merge pull request #6032 from dmcgowan/update-integration-test-images
- 3e72e335f Use github images for integration tests
- d72d2794d Merge pull request #5995 from wssccc/wssccc-patch-2
- 55893b9be Add CNI conf based on runtime class
- 50a568595 Change oci.WithUser behavior for LCOW
- 65f6a896c Fuzzing: Add 4 fuzzers + small modifications
- 7ddf5e52b Merge pull request #6012 from estesp/set-image-labels
- 7d6e9773a Merge pull request #5970 from cpuguy83/cancel_on_signal
- 2fecf5b02 Make sure exit signals trigger an exit during init
- f40df3d72 Enable image config labels in ctr and CRI container creation
- d081457ba Merge pull request #5974 from claudiubelu/hanging-task-delete-fix
- 40c7d1d16 Merge pull request #5985 from AkihiroSuda/crun-1.0
- 6875aa5d3 import: Add option to skip creating digest image
- da6b0efcc Merge pull request #5982 from AkihiroSuda/clone3
- f700ae873 CI: bump up crun to 1.0
- 55923daa9 seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted)
- 8596d1188 Fix typo
- 493220b71 Merge pull request #5990 from estesp/update-go-1.17.1
- 73dbbf5bf Update to Go 1.17.1
- cbf9d88c9 Merge pull request #5987 from wllenyj/ci
- 498e5b27f fix error string format
- 6d961f967 CI: Switch to available latest images
- 8493cd1a5 Merge pull request #5610 from alakesh/xfs-support-devmapper
- e087b47e9 import: Raise error if the imported image is filtered out
- 8cf06feac Merge pull request #5956 from claudiubelu/windows/fixes-task-delete-force
- e1ad77910 Merge pull request #5817 from dmcgowan/shim-plugins
- 91b64c58b add xfs support to devicemapper snapshotter
- 3d734d034 Merge pull request #5976 from ukontainer/pr-continuity
- d9f921e4f Merge pull request #5906 from thaJeztah/replace_os_exec
- 8766f2118 Merge pull request #5972 from zouyee/labels
- 94b86a6b9 Merge pull request #5966 from dmcgowan/fix-unexpected-eof-handling
- 8ff8b1b82 vendor: update continuity for darwin support
- 6589876d2 Merge pull request #5964 from crosbymichael/cni-pref
- 689a863ef Merge pull request #5939 from scuzhanglei/privileged-device
- 1ddc54c00 Merge pull request #5954 from claudiubelu/fix-sandbox-remove
- 1efed4309 add ip_pref CNI options for primary pod ip
- 16cd6ed13 Additional integration tests for pulling image with labels
- 756f4a314 cri: add devices for privileged container
- a4d64e5e0 Merge pull request #5969 from crosbymichael/pin-pbuild
- 55c55b071 Merge pull request #5965 from crosbymichael/ctd-metric
- 9954147c0 pin protobuild version to tag
- 2458afeb1 Fix content copy to not ignore unexpected EOF
- 6bec0d39b use a const metric for build_info
- ae27a6b05 Add metric exposing build version&revision
- d58542a9d Merge pull request #5627 from payall4u/payall4u/cri-support-cgroup-v2
- d040ca384 Merge pull request #5861 from kzys/restart-monitor
- 5e32e9d85 Merge pull request #5917 from mxpv/issue_forms
- b01cad3b5 Merge pull request #5945 from fuweid/fix_5900
- 99987f2a5 Merge pull request #5936 from ukontainer/feature-darwin-runtime-shim
- bdb41f607 Merge pull request #5858 from levinxo/patch-1
- 5540fc428 Merge pull request #5949 from wzshiming/fix/write-diff
- bef14adfd Merge pull request #5958 from zouyee/dail
- b06d0a3e0 Merge pull request #5951 from adelina-t/ws_2022_job
- 8e850bc0f replace deprecated Dail with DailContext
- ff75f7d48 Merge pull request #5943 from AdamKorcz/fuzz13
- 0ae5c41f1 Merge pull request #5944 from zouyee/deprecated
- 132aa56ee Merge pull request #5947 from kerthcet/feature/upgrade-pause-image-to-3.6
- aeea697d8 Add WS2022 support in Windows Periodic tests
- 55faa5e93 task delete: Closes task IO before waiting
- f42513112 integration: Adds Windows HostProcess tests
- ccc5ee303 archive: Add WriteDiff error logs
- 820bd9269 fix document non-synchronous in crictl.md
- 2bcd6a4e8 cri: patch update image labels
- 789abc936 using Hosts replace deprecated field
- 57e10439d Fixes task kill --force on Windows
- abf4de498 integration: Enables Windows containerd restart test
- 96ec0b6f3 content fuzzer: Clean up tempdir
- 61a46e9fd Merge pull request #5929 from dcantah/update-hcsshim-0.8.21
- dd8b6ee3f Merge pull request #5937 from kolyshkin/riscv-pie
- eb2530be8 Makefile.linux: build on riscv with PIE
- 6b0b64a51 ctr: Fixes Windows image import
- a43fa9f28 darwin: runtime support
- 5dd38792a darwin: use the default values for socketRoot variable
- 1dfd8a279 Merge pull request #5932 from dcantah/ctr-exec-add-cwd
- 27046a9e0 Fix cwd flag for `ctr tasks exec`
- 24cec9be5 sandbox: Allows the sandbox to be deleted in NotReady state
- 1dd0d59b7 go.mod: Update hcsshim to v0.8.21
- e00f87f1d Merge pull request #5927 from adelina-t/ws_2022_image_update
- 4bc5ca76e Merge pull request #5122 from mythi/non-root-containers-and-devices-v2
- 6d3d34b85 Update Pause image in tests & config
- 278176db1 Address issue forms feedback
- 44d5a7e26 Merge pull request #5921 from ktock/fix-failed-precondition
- 0d5223d70 Merge pull request #5845 from alexandref75/fix-dir-device-support
- 838afd211 Adding testing of two devices
- ebcf876bf Merge pull request #5914 from claudiubelu/windows/platform-default-match
- e0f8c04da cri: Devices ownership from SecurityContext
- 7bc5aa74c Fix pull fails on unexpected EOF
- 11ab3cba0 Use issue forms for bug reporting
- e2c769d6f windows: The DefaultSpec platform should match the Default matcher
- 7826a21ac Update RELEASES.md
- af1a0908d Merge pull request #5865 from dcantah/windows-pod-runasusername
- 2ac996840 replace uses of os/exec with golang.org/x/sys/execabs
- ebe8f8c6b Merge pull request #5899 from AkihiroSuda/runc-v1.0.2
- 6fa958853 Merge pull request #5903 from AkihiroSuda/gofmt117
- 81317350c Merge pull request #5905 from thaJeztah/update_toml
- 25644b461 Add RunAsUserName functionality for the Windows Pod Sandbox Container
- e18516767 go.mod: update runc to v1.0.2
- 3f8ea1b6a update runc binary to v1.0.2
- f43f22966 Merge pull request #5902 from dweomer/rke2-690-on-main
- 429296910 go.mod: github.com/pelletier/go-toml v1.9.3
- f8dfbee17 add cri test case
- 9a8bf1315 feature: add field LinuxContainerResources.Unified on cri
- d3aa7ee9f Run `go fmt` with Go 1.17
- c3609ff4c cri: filter selinux xattr for image volumes
- ff2e58d11 Merge pull request #5131 from perithompson/windows-hostnetwork
- 736222dd8 Merge pull request #5897 from kzys/upgrade-golangci-lint
- 70d122b29 Merge pull request #5889 from estesp/update-go-1.17
- a6034d021 Merge pull request #5896 from kzys/pid-order
- 4dd5ca70f script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0
- f7b1ceb9f integration: investigate TestRestartMonitor's failure
- acb81bbda integration: fix TestContainerPids
- 9fe7bc938 Bump integration timeout to 35 min
- 7fba86264 Fix dir support for devices V3 (#4847)
- a5eccab27 Merge pull request #5891 from crosbymichael/net-host-env
- 6f60b3016 [ctr] add HOSTNAME env for host network
- 8d135d284 Add support for shim plugins
- fda782a7b Merge pull request #5886 from AdamKorcz/fuzz11
- c076ede40 Merge pull request #5884 from adisky/add-systemd-env
- f8602c372 Update to Go 1.17
- c9b1b2fd5 Fuzzing: Add fuzzer
- 9e1b57ca0 Add env for SystemdCgroup driver
- 024804b1b Merge pull request #5878 from gjkim42/allow-expanded-dns-config
- 1224060f8 Allow expanded DNS configuration
- d0be7b90f Merge pull request #5863 from AdamKorcz/fuzz10
- 538d93d2f Fuzzing: Add 4 fuzzers
- 79b369a0b Added windows hostProcess cni skip
- 7d4c95ff0 Merge pull request #5813 from mxpv/shim_cleanup
- 159c0f04e Merge pull request #5840 from AdamKorcz/fuzz9
- 1c4e9d048 Merge pull request #5846 from crosbymichael/ctr-cpu.shares
- 0fbcf9b97 Merge pull request #5847 from kzys/master-to-main
- 4c7338aa6 Merge pull request #5849 from kzys/lock-error-2
- 0ae2d3987 Merge pull request #5857 from dims/fix-bad-make-protos-failure
- 82fe0db9a Fix bad `make protos` failure
- ed564061e Merge pull request #5851 from zouyee/location
- 56c5daa52 Merge pull request #5856 from kzys/remove-fossa
- 37f2c7ca8 Merge pull request #5850 from thaJeztah/runc_build_docs
- 284c29dde Merge pull request #5836 from dcantah/k8s122
- 1c47fb17f docs: remove FOSSA's badge
- bc4cea4e4 docs: rename main to master
- 9d07f8d9a Merge pull request #5852 from adelina-t/add_trap_cri_integration_script
- 5e49ec27d Use http.Get to download binaries instead of exec.Command
- e6538b8bc Add trap to cri-integration test script
- d2f3b7146 add cpu-shares to ctr
- 30b832e49 archive docs and point to new location fix #https://github.com/containerd/cri/issues/1624
- 9cc179aa7 BUILDING.md: remove some bits about building runc
- 42b57cc73 BUILDING.md: markdown fixes
- 0bcd45d3a Merge pull request #5848 from kzys/build-flags
- a3d6edc0e content: return the error with its timestamp
- a5468852f docs: list all snapshotter-related build flags
- e634f04d8 go.mod: update kubernetes to v1.22.0
- 11a90c7ff Fuzzing: Add experimental version of container fuzzer
- 218db0f9a Merge pull request #5835 from dmcgowan/plugin-events-cleanup
- 7f0be5edd Merge pull request #5839 from dcantah/ci-weirdness
- 1373bc519 Merge pull request #5842 from thaJeztah/update_go_116
- 42a28ad2c Update Go to 1.16.7
- fedd657ea Merge pull request #5838 from mxpv/ci
- 534685f95 Fix Linux CI Linter using go 1.15.14
- 10eab21a4 Cleanup CI
- 587fc0925 Merge pull request #5834 from dmcgowan/remove-redundant-build-tags
- 0a0621bb4 Move plugin context events into separate plugin
- 6f027e38a Remove redundant build tags
- b43d9502c Merge pull request #5830 from mxpv/darwin
- 5b76d08f4 Merge pull request #5731 from alakesh/opentelemetry-basic
- 3c5424454 [otel-tracing] vendor and go modules changes
- 3597ac859 [otel-tracing] Initial opentelemetry support
- 7917da764 Change default directories on Darwin
- 10824eaf2 remove go 1.13 from containerd
- d30d897ef Cleanup v2 shim
- b97a56b71 Merge pull request #5829 from AdamKorcz/fuzz8
- c3c276ae1 Fuzzing: Fix for OSS-fuzz issue 36825
- dd08c7a49 Merge pull request #5825 from AdamKorcz/fuzz7
- 424d7e47b Merge pull request #5760 from thaJeztah/cleanup_test_scripts
- 6c257552a scripts: declare ROOT closer to where it's used, and some DRY changes
- dba0ef4eb scripts: add missing quotes, and minor linting issues
- 0cb656860 test/build-utils.sh: remove support for Debian Jessie
- 41a04246f Fuzzing: Add two more fuzzers
- 7d4891783 Merge pull request #5821 from thaJeztah/simplify_platforms_format
- 58dbe9685 Merge pull request #5823 from AdamKorcz/fuzz6
- 2c699cc35 Fuzzing: Remove panics of container_fuzzer
- f2c3122e9 platforms: Format(): use path.Join() instead of joinNotEmpty()
- f12040b6b Merge pull request #5785 from AdamKorcz/fuzz5
- acecd6603 Change protoc link
- fcd9c4199 Merge pull request #5746 from lifupan/main
- ee1dfc0cd Merge pull request #5809 from isugimpy/main
- ce437864b mergo: Upgrade to 0.3.12 to fix panic
- 4282ec12c Merge pull request #5802 from rst0git/ci-criu-ppa
- d1e868c83 ci: install criu from PPA
- 5d3e8fd2c Merge pull request #5144 from devholic/release-non-cni-version
- a3e431ad4 Merge pull request #5725 from adelina-t/enable_critest
- 2b9f8334c Merge pull request #5792 from dims/script-to-check-if-entries-in-go.mod-files-are-in-sync
- fb589a713 Merge pull request #5043 from IRCody/shared_namespace
- 9eb08bf8e Merge pull request #5784 from thaJeztah/update_goos_list
- 1dadd6a1d Merge pull request #5804 from IRCody/proto-download
- e692a0192 Add shared content label to namespaces
- 3a8622e30 Updates the location of protobuf downloads in docs
- c4664bdac Merge pull request #5803 from dmcgowan/fix-protobuf-install
- 0d9393650 Update protobuf install to use correct repository
- d62d6c11d Split release steps into multiple tasks
- b4807122d Update release workflow to upload binary without CNI
- 5280530a0 Merge pull request #5624 from ktock/overlayupper
- 67406b373 overlay: add an optional label of upperdir location of each snapshot
- 43117cf91 Script to check if entries in go.mod files are in sync
- caf9e256b Merge pull request #5693 from kzys/sigrtmin
- 742ffadfb Merge pull request #5800 from zhuangqh/binarycall-timeout
- 6d31cdda5 Merge pull request #5716 from dims/add-new-go-module-for-api-directory
- 4ab3e7a53 runtime: fix the issue of create new socket with abstract address
- cc88f8e0a Split fuzzer to two fuzzers
- 7a10fd4fc respect context timeout in shim binary call
- 23bc3db91 Enable critest on Windows
- 494b940f1 Introduce a new go module - containerd/api for use in standalone clients
- 158901756 Merge pull request #5606 from zwtop/master
- b5b5dcc27 Merge pull request #5162 from claudiubelu/integration-test-images
- ce3d6e9bf Merge pull request #5795 from mikebrow/cri-support-metrics
- 0def98e46 Merge pull request #5794 from mikebrow/clarify-host-docs
- 4fdb88464 add CRI support matrix to RELEASES.md
- b5fc7846c adding a little more clarity
- 3a503acd5 Merge pull request #5793 from thaJeztah/gotestsum_1.7
- 1d3d08026 Support SIGRTMIN+n signals
- 18d6cc1b0 update gotestsum to v1.7.0
- 3b7a3d599 Merge pull request #5756 from Kern--/discard-blocks
- f6fa3fdd7 Merge pull request #5590 from oss-qm/submit/makefile-tags
- 559f9a5b9 Merge pull request #5744 from mxpv/metrics
- ee3272e9c Merge pull request #5745 from yylt/check
- c3f1f0e5e Merge pull request #5775 from kzys/pid-order
- efa8ab715 Add runtime label to metrics
- 6294235d8 Fuzzing: Add container fuzzer
- 2405671d4 platforms: add "ios" as known OS, "loong64" as known ARCH
- a963242f7 Merge pull request #5779 from AdamKorcz/fuzz4
- 2556aac67 Fuzzing: Add archive fuzzer
- 0d45ac14e interface about shim build check
- 00d52bb15 integration: log all processes to investigate the test failure
- a137b64f5 Merge pull request #5687 from AdamKorcz/fuzz3
- ee27cde73 Merge pull request #5735 from ktock/diffcompression
- f1d79d33b Discard blocks when removing a thin device
- 6389fc79f Merge pull request #5770 from wzshiming/fix/push-docker-remote-close
- 5a874e081 Merge pull request #5769 from wzshiming/fix/fetch-docker-remote-close
- e325184c8 Merge pull request #5771 from thaJeztah/update_md2man
- d2b6d192d Update cpuguy83/go-md2man binary to v2.0.1
- 53ec1abec remotes/docker/pusher.go: Fix missing Close()
- 67d07fe5c remotes/docker/fetcher.go: Fix missing Close()
- 0789a0c02 Add docker fetch fuzzer
- b809212b1 Merge pull request #5750 from thaJeztah/cleanup_test_dockerfile
- b483177ee Support custom compressor for walking differ
- 1292c50fe Merge pull request #5754 from thaJeztah/update_gotestsum
- 51a8f969b Merge pull request from GHSA-c72p-9xmj-rx3w
- b88bf1eca Merge pull request #5755 from adisky/gce-configure-use-systemd
- 29b86c547 Merge pull request #5751 from AkihiroSuda/runc-v1.0.1
- 150e07b64 Use systemd cgroup driver for cgroupv2 tests
- 603962bc8 update gotestsum to current master
- a12c7bd1c go.mod: runc v1.0.1
- 43e0594ae update runc binary to v1.0.1
- 9537bc265 Dockerfile.test: build containerd in separate stage
- 36be5ef3a Dockerfile.test: add GOLANG_IMAGE build arg to allow overriding
- 8faacfca1 Dockerfile.test: clean up apt indexes after installing
- 9f7e6335c Dockerfile.test: build critools in a separate stage
- 7ec8e2d36 Dockerfile.test: build cni in a separate stage
- f9f423c07 Dockerfile.test: standard directory to collect build aftifacts
- e9f26eb87 Dockerfile.test: split dev stage, and optimize order
- 25fada0cc Dockerfile.test: skip curl, gcc, git and make install
- 546538971 install-critools: make sure DESTDIR exists
- e830c5364 Merge pull request #5737 from thaJeztah/remove_redundant_check
- dbef1d56d runtime: runc v2: remove redundant validation
- 34fb8d896 Merge pull request #5727 from dmcgowan/test-monitor-restart-grace
- 18321f539 Move loop check to before sleep
- 2e8a572df Add timestamp to flaky restart monitor test
- d527926cd Merge pull request #5722 from AkihiroSuda/go1.16.6
- 55fd2ab5d integration/client: go mod tidy
- e72046f86 Update Go to 1.16.6
- cbdebd18e Merge pull request #4447 from kzys/grpc-error
- b6aa5a48b Merge pull request #5712 from coryb/docker-push-close-body
- bc4e416c8 Add test for archive breakout test for lchmod
- a8ef1fc48 Merge pull request #5710 from fuweid/cri-cleanup
- 894b6ae39 Fix missing Body.Close() calls on push to docker remote
- ac75071b4 remove pkg/cri/platforms package
- 51f2ce92f Merge pull request #5709 from cpuguy83/custom_client
- 0a8802df6 Allow WithServices to use custom implementations
- 0dcffc3ee Merge pull request #5673 from dcantah/hcsshim-0.8.18
- d38c186d9 Merge pull request #5578 from claudiubelu/integration/failed-container
- cf600abec Merge pull request #5619 from mikebrow/cri-add-v1-proxy-alpha
- 9fa7d1507 Merge pull request #5682 from kzys/gha-fork
- 31d78444e Merge pull request #5666 from wllenyj/plugin_test
- aefbe7c1c Merge pull request #5700 from AkihiroSuda/test-cri-in-userns
- 71c1dc661 Merge pull request #5676 from dmcgowan/update-for-distribution-spec-1.0
- aefabe546 Dockerfile.test: add "cri-in-userns" (aka rootless) test stage
- 0573e22e3 Merge pull request #5702 from dmcgowan/archive-cleanup-lchmod
- 53835221f Cleanup lchmod logic in archive
- d1c105192 use fu wei's suggeted interface pick for marshaling
- 14962dcbd add alpha version
- 4c6e4a06f gha: make release workflow work in forks
- 73d28ddeb client: surface a connection error more clearly
- 7eceeb950 Merge pull request #5571 from adelina-t/win_set_specific_go_version
- a7ad6b3be Add support for registry host path override
- 3a0b9ec6b Add unit test for plugin
- 95c708572 Update documenation for OCI distribution 1.0
- a81f05f36 [Vendor] Update hcsshim to 0.8.18
- 16deba098 integration: Windows volume-copy-up images
- 63fe34add grpc config add options tcp_tls_ca
- 25d7f907c Merge pull request #5660 from BigVan/main
- a5c417ac0 move up to CRI v1 and support v1alpha in parallel
- bda7b5866 feat: Add snapshotter label to the new snapshot for container.
- 0bd2a86b1 Merge pull request #5655 from kzys/dm-log
- e72a56a1e Merge pull request #5662 from thaJeztah/fix_destdir
- 2019a1e68 Makefile: fix DESTDIR and PREFIX concatenation
- 04ab4418f test integration: Adds a test that restarts a failed container
- e1f28659b Merge pull request #5287 from claudiubelu/cri-integration-cleanup
- 03ee45006 snapshot/devmapper: log exported methods correctly
- c8c6e…

Update Docker-CE to the 20.10.21 stable release, aligned with the
respective runc and containerd versions as done upstream.

Upstream release notes available at
https://docs.docker.com/engine/release-notes/#201021.

archive/tar changes reverted as those are only compatible with golang
1.18, and we are still based on 1.17 in kirkstone.

Signed-off-by: Ricardo Salveti <[email protected]>

Update docker-compose to the latest version that is still compatible
with golang 1.17.

Release notes for 2.10.x:
* https://github.com/docker/compose/releases/tag/v2.10.0
* https://github.com/docker/compose/releases/tag/v2.10.1
* https://github.com/docker/compose/releases/tag/v2.10.2

Signed-off-by: Ricardo Salveti <[email protected]>