linux/meta-virtualization.git/recipes-containers/containerd/containerd-opencontainers_git.bb, branch master-next

containerd: consolidate to "containerd"

2024-05-14T02:32:38+00:00

We no longer need the split between container-docker and containerd-opencontainers and dependent layers have been given over a year to adapt. We do keep the provides and rprovides around for a bit longer, but those will also be removed in the future. Signed-off-by: Bruce Ashfield

containerd-opencontainers: fix wrong version display

2024-05-02T18:22:42+00:00

* Update containerd to v2 to fix following containerd version: containerd github.com/containerd/containerd/v2 2.0.0-beta.0+unknown it should be like: containerd github.com/containerd/containerd/v2 v2.0.0-beta.2-204-gb1624c362.m b1624c3628954e769dd50783b63823040b2db38c.m * Remove CONTAINERD_PKG, it is not used * Update default PACKAGE in Makefile to v2 Signed-off-by: Changqing Li Signed-off-by: Bruce Ashfield

containerd: update to v2.0.0-beta-tip

2024-03-15T17:17:19+00:00

Bumping containerd to version v2.0.0-beta.2-204-gb1624c362, which comprises the following commits: 5351ad6b4 .github: windows should use fix critool version a2768f19d plugins/sandbox: move local plugin into services 464319b3a Remove pause package from runc shim 2cd08156e cri: Expose runtimeHandler support for userns 358aef4bc go.mod: Update cri-api to include userns changes 105f2d727 build(deps): bump google.golang.org/grpc from 1.61.0 to 1.62.0 02db6beb8 build(deps): bump github.com/prometheus/client_golang 75f58579c build(deps): bump github.com/opencontainers/runtime-spec 522130a66 sandbox: support vsock connection to task api f0e874941 Add ttrpc generated services 65031eade Update protobuild to build ttrpc services 04c37d565 build(deps): bump the k8s group with 5 updates bd4810415 ci: update crun version to 1.14.3 50d0de96a Update 1.7 support timeline 4fbc9842d Changes to configuring otel from env only 753a525b3 Deprecate otel configs 0693b936d replace deprecated Prestart to CreateRuntime hook 6a21c96b5 Replace go-grpc-prometheus with go-grpc-middleware/providers/prometheus 567e56a20 build(deps): bump github.com/opencontainers/image-spec 6a759713a Update golangci-lint to v1.56.1 f44d90be4 Rename variables and snapshotter option to resolve lint warnings 5611db530 cri: Make sure host sandbox files exist before adding them to mounts 9077d1372 KEP-3857: Recursive Read-only (RRO) mounts 83ad4367d script/test/utils.sh: readiness_check: print daemon log f8f1e5f7a Add container monitor plugin type for restart c86c8a16f integration: add case related to ContainerStats in upgrade suite acec60f55 integration: update recover case for upgrade e659cd275 integration: connect to shim by bridge client 51689b661 integration: introduce hook for upgrade test suite a95c8ed59 integration: check data dir after delete container or pod ec759f5be integration/*: extend Runtime.Status response 401d4b491 integration: add some helper function to release upgrade cases 7cf8a00c7 Run failpoints tests only for runc a890c8e53 Add job to report statuses from matrix jobs 132485adb Convert CLI to urfave v2 c8766123d Prevent GC from schedule itself with 0 period. a086125ae Move config version to version package 99721c27e Disable the support for Schema 1 images b9dfba5b8 Add CRIImageService.RemoveImage() 4c775fcfb Pass runtimehandler from CRI pull image request 4dcf089fa Move high volume event logs to Trace level 1b3a96da6 cri: propagate deprecation list to runtime status ac7febc93 moving up for new CRI changes ccec1e6e4 Remove internal LoopConfig struct 3d8da2ebf build(deps): bump the golang-x group with 1 update a274439f2 build(deps): bump golangci/golangci-lint-action from 3 to 4 468bee9a7 ctr: print deprecation warnings on every invocation c2dfae8d0 go.mod: Bump golang.org/x/sys to v0.17.0 41bb8b816 Revert "Fix for k8s nfs related tests" 48c8c5f50 Remove ParseSignal from client 281eb22cc Remove deprecated dialer 1ce7b9951 Remove deprecated filesys funcs 5ca56ddbb Remove deprecated funcs from restart package 653b80899 Remove deprecated docker package 413fbe82c Fix unpacker link in remote snapshotter docs 23ebfd030 Fix for k8s nfs related tests 25ab90219 Update to v0.29.1 cri-api 5e3e12d2a build(deps): bump the otel group with 8 updates c4bb72ae4 Remove CRI plugin path note 87aa9e800 Drop go 1.20 and build against 1.22 276384695 Update codeql-action/upload-sarif dependency in scorecards workflow 634ac2f8f Update migration script for transfer packages f46aea618 Move transfer and unpack packages d9b95ab68 Update gce configure.sh to use registry config_path 360fbf197 Fix windows integration tests 2820343d4 Update workflow files to install Go via composite action 488b56361 Extract a composite action to install Go 5aa05481d Add OSVersion to platform protobuf d9cae66d8 Extend string match in make protos c58b1fb40 Update github.com/containerd/console to v1.0.4 06ed897b2 cri/server: Add userns tests in PodSandboxStatus 6c356a5c7 cri: Expose userns in PodSandboxStatus rpc 1eaf0c1f0 bug fix: make sure cri image is pinned when it is pulled outside cri 9eb9038a9 Avoid publishing data events during transaction 86530c0af Move image event publishing to metadata store 32bd8eff9 Move inline PS scripts into files 4e8e21a7d go.{mod,sum}: update NRI dependency, re-vendor. 5cbe92e88 Clean up repeated package import 72950c00b Treat PRs that require rebase > 90 days as stale db437580b build(deps): bump github.com/opencontainers/image-spec 2c7d69530 build(deps): bump github.com/klauspost/compress from 1.17.5 to 1.17.6 da1673f55 Update vendor 047d42e90 Update ttrpc to v1.2.3 64e96c7d4 Update hcsshim to v0.12.0-rc.3 a9060cda4 Support inject delay running with the old version (4.x) of strace for test case. 9ef94fe52 fix(docs): fix cp and add step to include binaries in the $env:Path fe24b918f pkg/nri, docs: enable NRI by default. e230ed939 sandbox: add sandbox recover ut and e2e test 312496474 sandbox: fix recover status set issue 256637249 Fix config import relative path glob 667069583 Revert "cri: make read-only mounts recursively read-only" a9152ebf8 copy: prevent potential deadlock if close before fully written b48e1141e copy: setError should imply Close e4f91c2df copy: remove max number of ErrResets 651cfa2a2 pushWriter: refactor reset pipe logic into separate function 9d7641ff3 copy: improve error detection from closed pipes 91a50f70b copy: check if writer was closed before setting a pipe 4660f6303 copy: remove wrapping io.NopCloser from push writer pipe 0facc8592 Fix proto formatting 7f2d2c4f4 Move Message proto to types 287524733 Fix formatting after moving CRI bbac058cf Move CRI from pkg/ to internal/ 6e365e925 CRI: An empty DNSConfig != unspecified 9340be717 Remove duplicated TOML duration parsers b2f254fff cri: make read-only mounts recursively read-only f74e5ce7e Move differ default to its own file 82fb589ff Update runc binary to v1.1.12 87a9835f1 docs: fix typo 81409e937 Add a default differ that matches the snapshotter 2369185aa CI: update Rocky Linux to 8.9 d8460a702 CI: bump up crun to 1.14 ebbce7423 rm docs/cri/installation.md 49d5cc7f9 build(deps): bump github.com/klauspost/compress from 1.17.4 to 1.17.5 4d33170ea build(deps): bump github.com/google/uuid from 1.5.0 to 1.6.0 3a5b47d73 build(deps): bump google.golang.org/grpc from 1.60.1 to 1.61.0 9a983caad build(deps): bump github.com/containerd/plugin 495afb0c0 build(deps): bump lycheeverse/lychee-action from 1.9.1 to 1.9.3 5365a1089 build(deps): bump google-github-actions/upload-cloud-storage 64b4778fc Add deprecation warnings to CRI image server configuration 65b3922df Split streaming config from runtime config 58ff9d368 Move cri plugin to plugins subpackage d29a1bc6a Move sandbox info to cri types packages 9795677fe Move cri base plugin to CRI runtime service 966d51801 The `Links` workflow should be disabled in forks. e15f191a2 Fix func (m manager) Info in containerd-shim-runc-v2 4f570db1a refactor: remove containerd/containerd/log 010857d33 Add errdefs and platforms to migration script 7cf54b437 Remove unused pkg/errdefs package fb9b59a84 Switch to new errdefs package 6b906a22d Prepare release notes for v2.0.0-beta.2 b608c6f73 doc: fix package import path in sample code b16e3572a refactor: move plugin/fieldpath to api/types/ 22d586e51 api/services/instrospection: add PluginInfo ad869e905 Use tags.cncf.io CDI url in config.md eb8981f35 mv contrib/seccomp/kernelversion pkg/kernelversion a6e52c74f seccomp: kernel 6.7 ed4710241 Code clean for nri_api. ade80789b Remove walker diff plugin for Windows af6a90bf5 remotes/docker/authorizer.go: invalidate auth tokens when they expire. e79ec7a09 Remove deprecated platforms package 3f620143f Use github.com/containerd/platforms package 9dd29b3cf Update container-device-interface to v0.6.2 7eccde5d0 Clean plugin indent in containerd-config.toml.5.md b16d46740 pod: CreatedAt time will be 269 years ago while creating cri network failed. 378e9f443 build(deps): bump actions/cache from 3 to 4 748fe2035 integration: add test for recovering images 2e8e03389 Add multi-subscriber support to GetContainerEvents CRI API e7eb08eb5 Add support for multiple subscribers to CRI container events cfe8321b4 strip-volatile-option-tmp-mounts d34725f85 CI: use standard GHA runners 9d2c22123 Prepare release notes for v2.0.0-beta.1 e9f2bba1f remotes: FetchByDigest: propagate media type from config to desc d7689ae8b Remove CRI plugin config after migrating f48f61fd8 Add migration integration test eb9925d88 Update config migrations to decode using the plugin type 15713014d Update server config slice merge strategy cf6f439eb Fix transfer plugin unpack configuration eb123db5f ctr: use transfer service by default 94d1b2098 Add migration script to contrib 9ee1f4716 Rebuild protos with updated runtime location dbc74db6a Move runtime to core/runtime df9b0a067 Move metrics to core/metrics 19e763553 Move pkg/truncindex to internal/truncindex 764c90700 Move pkg/tomlext to internal/tomlext 1c4be2d88 Move pkg/testutil to internal/testutil 114df368f Move pkg/registrar to internal/registrar 4ee6419fa Move pkg/randutil to internal/randutil 696cf2565 Move pkg/kmutex to internal/kmutex 5e1d9543b Move pkg/hasher to internal/hasher 23914a01b Move pkg/failpoint to internal/failpoint c79ecfe24 Move pkg/cleanup to internal/cleanup 8f0eb2631 Move tracing to pkg/tracing 6be90158c Move sys to pkg/sys de606680b Move rootfs to pkg/rootfs fdb8a527c Move reference to pkg/reference e59f64792 Move oci to pkg/oci fa8cae99d Move namespaces to pkg/namespaces b76236bb4 Move labels to pkg/labels bb71c2835 Move identifiers to pkg/identifiers 5e00f63ce Move gc to pkg/gc 11114b0a9 Move gc/scheduler to plugins/gc c38f2ab72 Move filters to pkg/filters 44a836c9b Move errdefs to pkg/errdefs 70ed2696f Move events to pkg/events b0c3d00e9 Move cio to pkg/cio 8e14c39e8 Move archive to pkg/archive fcd39ccc5 Move snapshots to core/snapshots e0fe656da Move snapshots/windows to plugins/snapshots/windows 57bdbfba6 Move snapshots/overlay to plugins/snapshots/overlay 9b8c558f9 Move snapshots/native to plugins/snapshots/native 5c07d5d36 Move snapshots/lcow to plugins/snapshots/lcow 8473322f0 Move snapshots/devmapper to plugins/snapshots/devmapper 7dd96fe34 Move snapshots/btrfs to plugins/snapshots/btrfs 2909f07f8 Move snapshots/blockfile to plugins/snapshots/blockfile 92d2a5fc0 Move services to plugins/services ce41d1c90 Move services/server to cmd/containerd/server 228ad5a5c Move sandbox to core/sandbox d133019c9 Move runtime/restart/monitor to plugins/restart 0dabf6f15 Move remotes to core/remotes 6e5408dce Move mount to core/mount 1a1e0e8c8 Move metadata to core/metadata 18b3cbe4f Move metadata/plugin to plugins/metadata f80760f9f Move leases to core/leases cc6a5c9c6 Move leases/plugin to plugins/leases 57ea8aef3 Move images to core/images 913edcd48 Move diff to core/diff d14350376 Move diff/windows to plugins/diff/windows 2d861b6ea Move diff/walking to plugins/diff/walking aaf6ac04c Move diff/lcow to plugins/diff/lcow 9456048f4 Move containers to core/containers 21b4f3f0a Move content to core/content 846f7d4e6 Move content/local to plugins/content/local 725c92e7c include image name in error message 18b0d236c build(deps): bump actions/upload-artifact from 3 to 4 f45b46b67 runtime/v2: reduce shim plugin log 20619a7c9 ci: make artifact name unique in linux integration 2053d9157 build(deps): bump lycheeverse/lychee-action from 1.9.0 to 1.9.1 d4396c96b mount: UnmountRecursive return nil if path doesn't exist 8aa2551ce Move DefaultSnapshotter constants c8e8a093c config: enable CDI by default 5a3d3f613 Update load image test to use local import 6041d4e60 Update fuzz contrib for updated image service 2a476d421 Move ParseImageReferences to cri util 3baf5edb8 Separate the CRI image config from the main plugin config ad4c9f8a9 Update CRI runtime platform and pinned image configuration 11f311fdd Add minimal interface to CRI image store 02a9a456e Split image config from CRI plugin d23ac1122 Split CRI image service from GRPC handler a2472c0b5 transfer: add OCI descriptors to Progress structure f26196950 Move certain debug logs to trace logs a5d958706 update to go1.21.6, go1.20.13 21640c57a Uninstall mingw before attempting upgrade 174efb1e0 update imgcrypt binary to v1.1.9 dfb175380 build(deps): bump the golang-x group with 2 updates 2b415c911 build(deps): bump lycheeverse/lychee-action from 1.8.0 to 1.9.0 7dadd5f1b sandbox: remove sandboxStore from podsandbox a3c62e698 add label flags to ctr import, add integration tests d01056555 Handle failure when stopping a sandbox 8235665e7 content: Add InfoReaderProvider fa83bc8de integration: remove use of golang.org/x/sys/execabs dffeea471 add get cgroupdriver from RuntimeConfig to integration 46b2f1d16 Use latest VM image to get Windows updates regularly a8d39666d Move cimfs OS build compat check to the operation functions instead of init() 0d3c3efe3 integration/import-export: Add WithSkipMissing tests b9af453f0 export: Copy distribution source labels to manifest annotations 61a7c4999 import/export: Support references to missing content 1ab4fac94 update runc binary to v1.1.11 5387747e9 build(deps): bump github.com/containerd/cgroups/v3 from 3.0.2 to 3.0.3 a1e0601e0 fix: Update go.opentelemetry.io/otel/sdk/trace to satisfy traceProvider interface 78421616e deps: Update otelgrpc bd4c281c5 build(deps): bump github.com/fsnotify/fsnotify from 1.6.0 to 1.7.0 62a824a4b build(deps): bump github.com/intel/goresctrl from 0.5.0 to 0.6.0 7fe038e4a build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.32.0 81bb66942 build(deps): bump github.com/google/uuid from 1.3.1 to 1.5.0 9d328410a shim: Create pid-file with 0644 permissions daa1ea522 Add cimfs differ and snapshotter c19193574 fix: return gRPC code "unavailable" if server is not initialized yet 1f9151af6 build(deps): bump google.golang.org/grpc from 1.58.3 to 1.60.1 0b48b5659 build(deps): bump google-github-actions/upload-cloud-storage 97ec26a5e build(deps): bump actions/download-artifact from 3 to 4 22138541a tracing/plugin: newTracer: ignore context.Canceled errors on Close() 7c651e183 docs: fix CI badge in README e10c82e4c build(deps): bump github.com/google/uuid from 1.3.1 to 1.5.0 25dc823bf integration: fix format string for klog.Infof fc4b78c05 build(deps): bump github.com/intel/goresctrl from 0.3.0 to 0.5.0 1c96087ce build(deps): bump github.com/Microsoft/hcsshim 7e3c8af52 build(deps): bump github.com/prometheus/client_golang f9303d04d build(deps): bump github/codeql-action from 2 to 3 4c1ebe33b build(deps): bump docker/setup-buildx-action from 2 to 3 51fd1d47e dependabot: enable groups 4a71a9360 build(deps): bump github.com/moby/sys/mountinfo from 0.6.2 to 0.7.1 344fe957f build(deps): bump golang.org/x/mod from 0.13.0 to 0.14.0 6726a2aeb build(deps): bump k8s.io/component-base from 0.28.2 to 0.28.4 0c98f1063 build(deps): bump github.com/klauspost/compress from 1.17.2 to 1.17.4 39ba0347e build(deps): bump go.etcd.io/bbolt from 1.3.7 to 1.3.8 db43e3d1f build(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 4660090ba build(deps): bump actions/stale from 8 to 9 ace8ab1bd build(deps): bump docker/login-action from 2 to 3 0b94716e8 build(deps): bump actions/github-script from 6 to 7 9133ad811 build(deps): bump actions/upload-artifact from 1 to 3 c1823a7c6 build(deps): bump ossf/scorecard-action from 2.0.3 to 2.3.1 36b12cbcb build(deps): bump crazy-max/ghaction-github-runtime from 2 to 3 dc5a6cfae build(deps): bump google-github-actions/auth from 0 to 2 f6a9c6966 build(deps): bump actions/setup-go from 3 to 5 e27ea7d1a build(deps): bump google-github-actions/upload-cloud-storage 3ca95282e build(deps): bump actions/checkout from 3 to 4 1398186ca WithAppendAdditionalGroups: better /etc/group handling 5a140dca5 CI: enable dependabot c1197995b go.mod: Bump up github.com/pelletier/go-toml to v2.1.1 23278c81f *: introduce image_pull_with_sync_fs in CRI bd5c602c4 api: introduce sync_fs to diff.ApplyRequest 6bb81ee57 Document `ns` query string added to mirror requests 98526c9d3 Exclude releases directory from links checker f67c1632f Add ignore list for links e740dd3d6 Add links status badge bfa651c69 Fix broken links c9fa5b980 Add nighly job to verify doc links 25b052cbc Move GenerateRuntimeOptions() to pkg/cri/config cb5a48e64 *: enable ARM64 runner 596ada3ac release: add .dockerignore to fix repeated builds cf4b57989 Remove deprecated tracing function 8203bb997 Add HTTP client update function to tracing library ad3b806a4 fix(tracing): use latest version of semconv 22db60b6b upgrade crun version from 1.9 to 1.12 993790969 go.mod: Bump up github.com/containernetworking/plugins to v1.4.0 734219a21 update to go1.21.5, go1.20.12 212200452 update to go1.21.4, go1.20.11 ad96fded4 Don't block snapshot garbage collection on Remove failures 8bbce8d37 pkg/process: Check using idmap mount options too 96aaf5a3b Add core and internal root packages 6c6dfcbce contrib/apparmor: deny /sys/devices/virtual/powercap 106a9b776 oci/spec: deny /sys/devices/virtual/powercap Signed-off-by: Bruce Ashfield

containerd-opencontainers: Use RDEPENDS:${PN} instead of RDEPENDS:${BPN}

2024-01-19T14:43:37+00:00

The original purpose of using BPN vs PN in the RDEPENDS was due to 32bit multilib issues. Those problems are no longer present, so we can adjust this recipe to use the standard PN in rdepends. This change avoids the following warning: WARNING: .../containerd-opencontainers_git.bb: Variable key RDEPENDS:${PN} (...) replaces original key RDEPENDS:containerd-opencontainers ( ${VIRTUAL-RUNTIME_container_runtime}). if, e.g., RDEPENDS:${PN}:append = " ..." is used in a bbappend or bbclass. Signed-off-by: Peter Kjellerstedt Signed-off-by: Bruce Ashfield

containerd: update to 2.0-beta

2024-01-04T02:52:53+00:00

We refresh our GO_FLAGS patch for new context, and drop the install of v1 or unversioned shims as the runtime-v1 has been dropped Bumping containerd to version v2.0.0-beta.0-88-g87bf39a7f, which comprises the following commits: 96aaf5a3b Add core and internal root packages c0363754f sandbox: get runtime info from sandbox or container 95d2a3b7c upgrade: add cri upgrade test case 0bc963341 runtime/v2: net.Dial gRPC shim sockets before trying grpc e1b495866 sandbox: keep rootDir and stateDir compatible b0fef6738 sandbox: migrate sandbox_mode to sandboxer c8012b6d7 sandbox: make a clear dependency of cri plugins 2ead89509 Support gzip and zstd HTTP transport compression to fetch remote resources 8e567aa58 mv pkg/process cmd/containerd-shim-runc-v2/process a813097dc Bump up github.com/fsnotify/fsnotify to v1.7.0 c384e3717 containerd-stress: use config address for CRI test d4c828c2c integration: add new binary upgrade case 8e91edb71 fix(pkg/dialer): minor fix on dialer function for windows ad3f8c563 tomlext.Duration add MarshalText method 6da015284 go.mod: github.com/containerd/continuity v0.4.3 cd348e6ef .golangci.yml: remove directories that don't exist 4b556a6e0 Bump up golangci-lint to v1.55.2 c51d4f9b6 push: always inherit distribution sources from parent e15c24655 Move CRI image service into a separate plugin 80dd779de remotes/docker: close connection if no more data 7f410ae05 integration: reproduce #9347 2e9686c05 fix: deflake TestCRIImagePullTimeout/HoldingContentOpenWriter 4aa932337 CI: update Fedora to 39 f6c4de6b5 fix: podsandbox depends on Lease plugin 1b65fe264 fix ticker leak 1af0cba1a Update documentation for containerd v2.0 packages 4f42da416 adopters.md: remove Eliot project 01c442147 Enhance container image unpack client logs e7390d4ed vendor: upgrade OpenTelemetry to v1.19.0 / v0.45.0 1a1bd6d0a runtime/v2/shim: use structured log for plugin ID 71fd85f5e runtime/v2/shim: run(): remove unused "name" argument 0a59c33be runtime/v2/shim: rename var that shadowed package var be22e12d5 services/server: use structured log for plugin ID 09de4f1fc services/server: rename var that collided with import 14e621cf9 services/server: gofumpt 32bf805e5 sandbox: add a sandboxService interface to criService 25a4c3d23 sandbox: remove SandboxersServicePlugin 0cf48bab2 sandbox: podsandbox init its own client 7d65a4563 Move runc shim implementation to cmd e682da76c fix labels in pod sandbox 64c41162c update tests to use labels from cri/labels 7e79225ce refactor labels used in cri server 274a16282 update runc binary to v1.1.10 2e014fa2a cri: fix update of pinned label for images cb555fa16 golangci-lint: enable depguard to prevent re-introducing libcontainer dac056fe7 integration: deflake TestIssue9103 7b9fcfd7c add default enable unprivileged icmp/ports a7cd49c68 expected and actual field position adjustment e099717f9 validate kernel version for unprivileged icmp/port 76049170b document runtime and shim configuration and selection 2fab240f2 integration: init release upgrade test 2af6db672 switch back from golang.org/x/sys/execabs to os/exec (go1.19) a596d09ec cri: add deprecation warning for configs 35924bccc cri: add deprecation warning for auths d7cb25d77 cri: add deprecation warning for mirrors 58cc275eb cri: add ability to emit deprecation warnings 68cac3f62 client: remove obsolete ErrCheckpointRWUnsupported df19888f8 add warning use inheritable Capabilities 411e2bce4 Remove plugins package 9db21401c Switch to github.com/containerd/plugin a48ddf4a2 Don't allow io_uring related syscalls in the RuntimeDefault seccomp profile. 2dfae4c4b Prepare release notes for v2.0.0-beta.0 6ca4b5260 Update mailmap a67efe88d Add tests cases f1d659dc5 Update package name in Makefile 0ffc3e987 Handle ArgsEscaped for new Sb Server b85df264e Rename opt to avoid stutter 261e01c2a Move client to subpackage b6adf43d4 test: use 'Autoclear: ture' in TestRwLoop and add Autoclear test 124d3a20a Sync ops.md, update CLI --help output to be consistent in descriptions 5fdf55e49 Update go module to github.com/containerd/containerd/v2 abfc8be53 Fix lint in integration/client ddd73ad30 Move protofiles generated into v2 directory 638b474c8 Temporarily remove imgcrypt in CRI to fix circular dependency 192168038 Temporarily remove integration/client submodule 4e3fbd36e vendor: github.com/klauspost/compress v1.17.2 856d1053f vendor: google.golang.org/grpc v1.58.3 466ee870d Check scheme and host of request on push redirect 3fff8b4f6 ctr: new deprecations command 079383dbe dynamic: record deprecation for dynamic plugins 260e71abc server: add ability to record config deprecations bc861b66f pull: record deprecation warning for schema 1 9aab44673 introspection: add support for deprecations 57c897f10 api/introspection: deprecation warnings in server 240733ce2 warning: new service for deprecations aff5b809c deprecation: new package for deprecations d48ceb606 Avoid TLS fallback when protocol is not ambiguous ed759bae3 Update go fuzz to directly instantiate server 09e40511a fix bug that using invalid token to retry fetching layer 2fea521d0 Disable windows-2019 integration test temporarily 9fc407d8c ci: bump up golangci-lint to v1.55.0 8b4f9656d sandbox: remove ValidateMode as it is not used 337cc2171 pkg/cri: should ignore no sandbox bucket f515cd5c5 Reorder fields when writing bootstrap params 3d53fbe85 Fix CRI integration tests f76eaf5a6 Fix 'not a directory' error when restoring bootstrap.json cf75cfa32 Add more logs around shim restore 8061cb023 Save bootstrap.json instead of address file e03bf32b8 Switch runc to v3 7a2d801d6 Expose shim instance version f66c46806 Bridge task service v2 daaf67662 Switch runc shim to task v3 bb64e6a8e Initialize sandbox controller list on CRI server creation 03d81f595 Use cri streaming pkg from k8s staging b006f1c15 integration/client: replace hardcoded strings for OCI-spec consts d3f5e0c90 images/archive: replace hardcoded strings for OCI-spec consts 8e7c10c6d CRI: enhance ImageFsInfo() to support multiple snapshotters e4639ad18 Add exports to proxy plugin config 3986f80c3 go.mod: bump up github.com/opencontainers/image-spec to v1.1.0-rc5 f7c9e9942 vendor: golang.org/x/net v0.17.0 c3652540c vendor: golang.org/x/text v0.13.0 ff602c213 vendor: golang.org/x/sys v0.13.0 39b168cdb vendor: google.golang.org/grpc v1.57.1 930ee552e Fix typos 3ef300ca7 sandbox: remove global variable of podsandbox controller 7bca70c0c sandbox: do not call Connect when loadShim d2d434b7d sandbox: add all sandbox information to Create method 0707f6869 sandbox: ignore not found error when remove sandbox 2951fb6dc sandbox: support more sandbox controllers 8b3597685 sandbox: add Sandboxer field to sandbox metadata 69e501e7c sandbox: change SandboxMode to Sandboxer f372b3501 sandbox: add sandboxer field of sandbox requests a782fd6da Use LOOP_CONFIGURE when creating loop devices 771237563 Add a new image label if it is docker schema 1 5ad6f3432 CRI: use (snapshotter_id, snapshot_key) to uniquely identify snapshots 41b2b2a7b go.mod: bump up github.com/klauspost/compress from v1.17.0 to v1.17.1 4febb0852 deprecated: go-plugin library as runtime plugin 51c9ffe46 remotes: add handling for missing basic auth credentials 4f339b5b5 RELEASES.md: mark legacy CRI as removed status 0a4f79211 Remove use of v1 runtime plugin type for Unix 71f8b4357 Move dynamic plugins to a subpackage 7b2a91821 Generalize the plugin package a80606bc2 Move plugin type definitions to containerd plugins package cb969085f Temporarily remove zfs as built in plugin 2486c1298 Exit shim when shutdown manager is done 1b3199324 Rename sbserver to server 4edc6c2d9 Add note about configuration versions in releases c5c94dc86 Fix CRI tests panic on CI a3c2c1e4d Clean shell scripts fa1d3a9cc Fix dependencies after remove 3742f7f0d idmapped: use pidfd to avoid pid reuse issue 2332b9ba1 Remove legacy CRI from CI 536abf1b3 Remove legacy CRI 33b1a833c Move CRI testing package out 016114ff6 Move bandwidth package out of CRI server 3c1e7ffb8 Integration: Alter TestContainerPids for Windows 8f013bb71 Add migration for older configuration versions 313f514fd update to go1.21.3. gp1.20.10 6b752b536 update to go1.21.2, go1.20.9 8f3d1c9d9 add cpu-burst param to ctr command 3ddcd6120 add Duration type to compatible toml v1 version 535916d1d Skip exec.LookPath if a specific gzip implementation is disabled 4b59d67dd add a new flag "skip-reference-check" to skip reference name check 34378ec9b Use Intel ISA-L's igzip if available 7d6369087 Fix windows default path overwrite issue 13dcf558e Fix windows default path overwrite issue 39478eeec go.mod: Bump up github.com/klauspost/compress v1.16.7 to v1.17.0 859c2651e remotes/docker: Fix MountedFrom prefixed with target repository c85b1d1e4 Bump up golangci-lint to v1.54.2 6169433b6 Fix linter issues for golangci-lint 1.54.2 e3cb7471a CRI: Snapshotter per runtime handler adjustments 42dc8faba Bump x/net to 0.13 79772a0dd remotes: always try to establish tls connection when tls configured 11a7751af *: add runc-fp as runc wrapper to inject failpoint 68dd47ef7 containerd-shim-runc-v2: avoid potential deadlock in create handler 6604ff6c5 containerd-shim-runc-v2: remove unnecessary `s.getContainer()` 0d76fe5c1 Fix some assertions for integ tests 1dced31c3 ci-fix: pin the mingw version 12.2.0.3042023 aae71aa8e update gitignore to indicate that where contributors can use global gitignore 8ffb03d68 cri: stop recommending disable_cgroup 5365f4b29 cri: call RegisterReadiness after NewCRIService 46645b393 Call migrations per version 5518a5026 remotes: simplify mediatype logic 8b105984b pkg/transfer/local: simplify mediatype logic 79acce462 integration: use mediatype helpers 0ba5b4b62 oci: use mediatype helpers cdba61603 remotes: use mediatype helpers 69034f755 pkg/display: use mediatype helpers 5ab04ac5a pkg/unpack: use mediatype helpers da1196979 pkg/snapshotters: use mediatype helpers f1cbc5f90 containerd: use mediatype helpers 4b1bb1293 remove github.com/opencontainers/runc dependency 62f621a34 images: simplify mediatype logic 377c5ca9c images/archive: use mediatype helpers bb8a472f2 images: use mediatype helpers e7254406c Require plugins to succeed after registering readiness 62f273d50 Add migrate subcommand to config command 0320ad184 Add config migration to plugin package f58158e2d Add config migration and bump config version bf4fbe4e8 docs: Update `transfer` service docs to reflect completed implementations for 1.7 b40e95e0e images: Config: explicitly return nil-error 36c2222d3 Add usage calculation test 3b60e9366 Create new imagetest package 4c344f2fa Add warning for plugin configs with unknown fields a9ba33f8f Allow for images with artifacts to pull 650148313 Add warning log for unknown config fields b5615caf1 Update go-toml to v2 8b413daff Remove log package except for exported const used by hcsshim 2f1b92710 Update zfs library to use new log repository 508aa3a1e Move to use github.com/containerd/log f1070c4e1 docs/userns: Clarify requirements for k8s 1.25/1.26 42eee8bf0 fix: Add `containerd` to the message type reference 9e819fb4a Update CRI image store to not use containerd client dcb2e7447 Improve doc of func NewNetNS 2ce971d89 Add delete target to image remove f8fb2dad3 api: update image service to support target in delete request 8e3722c7d CI: Set slow_chown for overlayfs snapshotter 46d3094aa docs/userns: Fix small typo d008d64a8 docs/userns: Clarify containerd 1.7 limitations e37908200 docs/userns: Document the need to opt-in for a slow chown 8bf8e2b97 snapshotter: Use capa prefix consistently for capabilities ec9e0dca9 overlay: Require opt-in if idmap mounts are not supported. 03b9ce56b deprecate logs package, but disable linter (for transitioning) d69ae811d alias log package to github.com/containerd/log v0.1.0 729c97cf3 Handle unexpected shim kill events ed5f7e7c8 Update image in client to use new usage package 96a23ccc1 Create new usage package 79f781d00 Refactor: Removing inherently flaky and unused SourceDateEpochOrNow function. 8cbb4ea5d vendor: github.com/containerd/nri v0.5.0 3ca39ef01 fix: Remove `LimitNOFILE` from `containerd.service` 83240a4f7 Bump crun to 1.9 967313049 doc: Add documentation about CRI user namespaces 2e13d3954 pkg/process: Only use idmap mounts if runc supports it fce1b9507 go.mod: Update runtime spec to include features.MountExtensions a81f80884 Revert "cri: Throw an error if idmap mounts is requested" e832605a8 integration: Simplify WithVolumeMount() 24aa808fe integration: Add userns test with volumes ab5b43fe8 cri/sbserver: Pass down UID/GID mappings to OCI runtime e916d77c8 platforms: move ToProto, FromProto to api/types 381442945 platforms: remove errdefs dependency e0b2b17de cri/server: Add tests for the linux-specific parts of VolumeMounts() 10cb112e4 cri/server: Add tests for ContainerMounts() 97dfa7f55 cri/server: Pass down uidMappings to OCI runtime b42bdd125 release: remove `cri-containerd-*.tar.gz` release bundles 9656b8c0d nri: update mock plugin handlers 6f9de91ef vendor: update github.com/containerd/nri@v0.4.0 f7089ba22 leases: add WithLabel 1480e3bd4 leases: cleanup TestWithLabels d94a789d1 Fix usages of `mountinfo.PrefixFilter` 45e303eea task: expose criu work path opt f77185f9e Fix "even if IPv4 comes first" test to have IPv4 first 88a849626 Don't use `To16() != nil` to detect IPv6 addresses eaf607101 update to go1.21.1, go1.20.8 1a7490c5a Add link to CONTRIBUTING from README 0413f1272 Add contributors guide 05093d7c0 vendor: github.com/cncf-tags/container-device-interface v0.6.1 ac1d556b9 Add image verifier transfer service plugin system based on a binary directory 55b2df560 go.mod: github.com/grpc-ecosystem/grpc-gateway/v2 v2.16.2 a00888db8 fix reference to canonical fieldmask type 0041996ca CI: bump up crun to 1.8.7 4bc0b2660 Revert the removal of the parameter Container 6ec0d4a3a prevent ctr from creating tags with forbidden characters a4bdbf784 content: reduce the contention between ref lock and boltdb lock abfabb6d8 contrib/fuzz: fix redeclared issue 295bcec07 snapshotter: implement unit tests for idmapped mounts for overlay 9d01ed1c3 integration: add test for idmapped mounts e49e6d6fd snapshotter: implement slow path for idmapped mounts check for overlay 1555a31bf mount: support idmapped mount points 723c88ce3 snapshotter: add "--remap-labels" support to overlayfs e8ddf669f snapshotter: support "remap-ids" capability for overlayfs ef6b91947 fix(docs): fix on the windows installation script 5d31e9378 pkg/systemd: use sync.Once for systemd detection 7d0ab4fc2 remove uses of github.com/runc/libcontainer/cgroups 9bc6441c2 vendor: github.com/google/uuid v1.3.1 13ff185ba Blockfile: Enlighten blockfile copy on Darwin a3e8503ed .github: enable fuzz build cd705af89 metadata: add image delete events during garbage collection 3f9756c18 gc: add support for image expiration b32638e21 ctr: pull or fetch image metadata by default 20f79300c push: inherit distribution sources from parent 24aca53fa Update use of content.Infoprovider f8c789f31 content: add InfoProvider interface 02d519ad6 Update hcsshim tag in runhcs-version script a2817ca16 CRI: Include sandbox ID in failed to load error 492347090 replace reference/docker for github.com/distribution/reference v0.5.0 26dcae2f6 fix ossfuzz building error 19d6c37a3 Revert "log: define G() as a function instead of a variable" fd5d92a7f Update hcsshim tag versioning to v0.12.0-rc.0 779875a05 Add missing unpacker.Wait for image import 4f5db2bc0 metadata: format unit test output 15b13fb3e Windows: Supply windows shim version via file 7a0ad09a0 make repositories of install dependencies configurable 34def8b33 Remove redundant nil check fc45365fa Remove most logrus f9c35feb3 Makefile: allow overriding GO_BUILD_FLAGS via environment 490905be6 go.mod: github.com/containerd/continuity v0.4.2 03abceac5 Update LTS description 34f32043b Blockfile: Expose RecreateScratch option b4f487ce9 Apply suggestions from code review 1e3540e11 Add stale bot 4e236962f Update critools to 1.28.0 c92f4a160 Update RELEASES c3f3cad28 Use sandboxed CRI by default b76cd4d9f replace some fmt.Sprintfs with strconv bbdbf7ab6 Add inspect image commands 78308b4a4 Add manifest printer library 11a5dd826 snapshots: replace some fmt.Sprintfs with strconv 06765c9ef oci: replace some fmt.Sprintfs with strconv 710d22366 removes/docker: replace some fmt.Sprintfs with strconv d7bc8694b pkg/cri: replace some fmt.Sprintfs with strconv 73e9cfd1c append k8s 1.28 to releases 6d8329d7f Remove unnecessary joinError unwrap 8399a4ee7 Remove temporary replace 7ad0a6ccf Update to latest releases in RELEASES.md cd8c8ae4b Remove hashicorp/go-multierror 1571a5aa0 ctr: metrics: drop unused retval from printWindowsStats() 7063ae1f6 Makefile: add rule for installing documentation de4c338ab Docs: Document proxy plugin diff support d09f7cbe0 cri: Fix sandbox_mode "shim" 60b2cb143 cmd: containerd: allow building w/o systemd notify 23c95359a Add WithMetaStore to overlay snapshotter to allow bringing your own 0c1ad52ea cri: spec_linux: drop unused retvals eacd74c2b Go 1.21.0 5756cb00e CI: increase timeout for Binaries c883410c9 CI: Explicitly upgrade MinGW on Windows 2019 GitHub runners. 0f043ae43 seccomp, apparmor: add go:noinline 5d9bf7d13 CI: temporarily disable ci_fuzz due to incompatibility with recent Go e2ce4f58f Populate commit memory for windows memory usage stats 823e0420e Fix transfer service dependencies: cfb30a31a Invoke Stable ABI compatibility function in windows platform matcher 0cea317a5 FreeBSD: set default runtime def5ff3c4 Sandbox: Add annotations to controller CreateOptions 939ccbed4 Sandbox: Add annotations to CreateSandbox surface 1fd3a4652 archive/tarheader: fix FreeBSD hdr for regular files f8edd5555 update runc binary to v1.1.9 f35d1f08e go.mod: github.com/opencontainers/runc v1.1.9 00ef8ba99 Vagrantfile: add strace tool 601699a18 integration: add ShouldRetryShutdown case based on #7496 8dcb2a6e6 pkg/cri/sbserver: fix leaked shim issue for podsandbox mode 72bc63d83 pkg/cri/server: fix leaked shim issue 5bdd9ca93 integration: add case to reproduce #7496 b451fa96a bump client-go v0.26.4 a645ff2e6 Update dependencies after protobuf update in hcsshim e7e5619fe Update hcsshim tag to v0.10.0 54baf766e add metrics for discarding events 189a1599c archive/compression: update out of date RFC draft link cac8b6f4b Makefile: allow overriding the binary executable target dir 90443f038 CI: update Rocky Linux to 8.8 0a57dc2a0 CI: update Fedora to 38 30dd0a17f CI: install Vagrant from Hashicorp 965641dbc Makefile: allow REVISION be overwritten by environment fc32197d4 Makefile: fix overriding go command 2d3360ec7 CI: move Vagrant tests to GitHub Actions (larger runners) 4f3c8c468 replace mcr.microsoft.com registry to ghcr.io/containerd registry d41c62a55 .github/workflows: add dmesg step for integration-linux fd8778fba delete checkout branch in doc c62abcb14 docs: document CRI cgroup driver auto detection c80a3ecaf cri/sbserver: Use platform instead of GOOS for userns detection 157dff281 update to go1.20.7, go1.19.12 687a5f51a fix: allow attaching to any combination of stdin/stdout/stderr aa8b094ab platforms: clarify docs for amd64/arm64 variant normalization 710d987d2 Fix default platform matcher when ctr import 2d64ab8d7 cri: Don't use rel path for image volumes 85a2c9a01 log: swap logrus functions with their equivalent on default logger 6baff1694 log: add package documentation and summary of package's purpose 238da2c52 log: make Fields type a generic map[string]any 634a4a1bb log: add log.Entry type dd67240f1 log: define OutputFormat type 778ac302b log: define G() as a function instead of a variable 81ac648d9 log: add all log-levels that are accepted 0b6333a41 log: group "enum" consts and touch-up docs 4a36022e2 log: WithLogger: remove redundant intermediate var 40ee5fb11 log: SetFormat: include returns in switch 6fe7e03b8 log: remove testify dependency e2ad5a985 removes/docker: remove unnecessary conversion (unconvert) ed47d6ba7 cri: implement RuntimeConfig rpc a1cdf60cb docker: add test to ensure not found error is returned by resolve b4814a29d docker: return most relevant error from docker resolution 7f7ba31b6 cri: fix using the pinned label to pin image 480757135 pkg/epoch: fix Y2038 on 32-bit hosts 98974117b migrate to community owned bucket a3404ac42 docker: add missing info log for 4XX/5XX responses 850b2e1bf go.mod: update cri-api to v1.28.0-beta.0 480bc8a2b .github/workflows/ci.yml: upgrade Ubuntu from 20.04 to 22.04 bc96b9039 go.mod: github.com/AdamKorcz/go-118-fuzz-build v0.0.0-20230306123547-8075edf89bb0 da2740885 go.mod: google.golang.org/genproto v0.0.0-20230720185612-659f7aaaa771 73dc13ad6 go.mod: github.com/urfave/cli/compare v1.22.14 1c4fc568b go.mod: github.com/prometheus/client_golang/compare v1.16.0 68abb525a go.mod: github.com/minio/sha256-simd v1.0.1 1f2216cc7 go.mod: github.com/klauspost/compress v1.16.7 3c6ab0420 go.mod: dario.cat/mergo v1.0.0 4bda0a69e go.mod: github.com/grpc-ecosystem/go-grpc-middleware v1.4.0 0f033b612 go.mod: github.com/emicklei/go-restful/v3 v3.10.2 90e050298 go.mod: github.com/containernetworking/plugin v1.3.0 0498acefb go.mod: github.com/.../container-device-interface v0.6.0 74b8cb850 go.mod: github.com/opencontainers/runc v1.1.8 895dd2e93 go.mod: github.com/opencontainers/image-spec v1.1.0-rc4 235a4452d go.mod: github.com/opencontainers/runtime-spec v1.1.0 06f18c69d cri: memory.memsw.limit_in_bytes: no such file or directory f3daf32c7 Fix ro mount option being passed b2967a8d6 update runc binary to v1.1.8 90ecb8104 fix: `ctr images check` outputs not unpacked images in quite mode 98f27e1d9 Revert "Add support for mounts on Darwin" e939d1319 Revert "Revert 416899fc8e81a80a4b09b59c801f98d36ddc0e74" 6c9c71112 Revert 416899fc8e81a80a4b09b59c801f98d36ddc0e74 2799b28e6 Add support for mounts on Darwin 56d80f81a Update hcsshim tag to v0.10.0-rc.9 9c673f967 pkg/cri/server: TestImageGetLabels: use registry.k8s.io f914edf4f [cri] Handle Windows pod transitions gracefully 52ef3468b Update Go to 1.20.6,1.19.11 48cdf1fe2 integration: Enable userns tests for sbserver 9160386ec cri/sbserver: Test net.ipv4.ping_group_range works with userns 1c6e26844 cri/sbserver: Fix net.ipv4.ping_group_range with userns 36a96d7f3 cri/sbserver: Remap snapshots for sbserver too 508e6f6e0 cri/sbserver: Add userns tests to TestLinuxSandboxContainerSpec() fb9ce5d48 cri/sbserver: Support pods with user namespaces c99cb95f0 cri/sbserver: Let OCI runtime create netns when userns is used 73c75e2c7 cri/sbserver: Copy userns helpers to podsandbox 0b6a0fe77 cri/sbserver: Move runtimeStart to match position with cri/server 90087ac44 WithRemapperLabels: Update doc to mention overlay supports it 9d9903565 cri: Fix comment typos 9e34b8b44 Uncopypaste parsing of OCI Bundle spec file 232538b76 bugfix(port-forward): Correctly handle known errors 5c480d9c8 Modify loopback size 7ef133ad4 Fix mount pkg typo 83ff030e4 Change http.Header copy to builtin Clone cdb153ec9 Resolve docker.NewResolver race condition 01a6e1c73 Dedup WithNewSnapshotView 6a913ac82 Cirrus CI: configure apt-get to wait for locks 38f9bc3e0 fix ci Linux Integration test fail c17d3bdb5 pkg/cri/server: Test net.ipv4.ping_group_range works with userns 9bf5aeca7 pkg/cri/server: Fix net.ipv4.ping_group_range with userns 05fef52b6 vendor: github.com/containerd/zfs v1.1.0 073de9308 Fix the auto restart fail when using LogURI and TTY together 00e5ae211 shim: change ttrpcService and ttrpcServerOptioner to exported interfaces e9f63f64f update go to go1.20.5, go1.19.10 22a7c63c0 Sandbox: Change to mount.Mount for CreateOptions 51a1e7f0b Fix example shim to actually use its task service a9cb6090e ci: remove libseccomp-dev installation for nightly 0607e7326 Move GetTopic function out of runc shim 5dedb6d0d archive: use 1970-01-01 as the whiteout timestamp d6dbc4040 go.mod: Update cgroups to 3.0.2 f3b7436b6 Platforms: Add From/ToProto helpers for types b3ab1f26c Snapshots: Add From/ToProto helpers for types 0a6b8f0ee OCI: Add From/ToProto helpers for Descriptor 4df27fd77 Update ginkgo to match cri-tools' version 9a202e342 seccomp: always allow name_to_handle_at 55a8102ec mount: Add From/ToProto helpers e85352183 integration/client: Rework withBytesBuffers 54a93c6c5 Make ptypes.Empty a var in contentserver cdc90c838 Remove duplicated code in content Copy 50376ec9f remotes: allow FetchByDigest client to pass mediatype as header 0a92661e6 Add a platform.ParseAll helper e89d7204e MergeStringSlices use sets 8760b8717 pkg/epoch: extract parsing SOURCE_DATE_EPOCH to a function 9924e56f4 pkg/epoch: fix tests on macOS dfd7ad8b3 Reword Windows file related TODO 44e2b26a8 pkg/epoch: replace some fmt.Sprintfs with strconv f82d9b799 Integration: Align empty IO func on Windows f3124d569 Makefile: Remove hcsshim related TODO 2aeac9a8f Remove duplicated writeIndex func 7601dd9a9 Dedup manifest config platform helper f3df7f739 log when a lease expires a01118bbe Minor changes to sandbox metadata f60a4a271 cri: drop unused arg from generateRuntimeOptions 1fb835f04 Remove unnecessary label bucket loop a207b430e snapshots/blockfile: fix lint issue 59b0b39af vendor: update github.com/containerd/continuity d358f1680 fix unbound variable f4ad68d5f fix-push-image-rate 7de95cbc4 snapshots/blockfile: deflaky the testsuite 6dfb16f99 snapshots|pkg: umount without DETACH and nosync after umount 72b7d1650 mount: support direct-io for loopback device 437f13410 Don't run CI on push e26c97cb8 Save marshalled empty response in streaming service 9e09bfb59 Use RWMutex in NSMap and reduce lock area 38b0f970f No more nondistributable layers in MS registry d278d37ca Sandbox: Add Metrics rpc for controller d115129d1 Add configurable mount options to overlay d56722ef2 Sandbox: Add SandboxMetrics rpc 4bb709c01 avoid "any" as variable name 577696f60 replace some basic uses of fmt.Sprintf() 5cd6210ad runtime/v2/runc: handle early exits w/o big locks df280942a integration/client: add timeout to `TestShimOOMScore` 6dd529e40 Pass in imagespec.Platform to WithVolumes() d18026592 release ticker correctly 28a5199ff Add a check to skip stats for containers that are not running 34a93a0c2 task: don't `close()` io before `cancel()` 007c5b6e3 Setup otlp from env 104b9ef9e Update x/sys to 0.8.0 69b451af5 RELEASES.md: de-deprecation of CNI conf_template will be v1.7.3 ab5365222 ctr: update WritePidFile to use atomicfile c409c631c shim: WritePidFile & WriteAddress use atomicfile 3c4a1ab1c cri: write generated CNI config atomically on Unix f3ba7c8a3 atomicfile: new package for atomic file writes 28d8c79de Replace atomicBool with the standard library atomic.Bool fe4f8bd88 Pinned image support a85b12d4d docs: cherry-pick individual commits instead of merge commit 738c4c6fa Fix issue for HPC pod metrics 52997ea98 remotes/docker: ResolverOptions: fix deprecation comments a35ead5b9 bugfix: add nil pointer check for cgroup v1 mem usage 2a60fe5a6 Remove events from init context d3887b2e6 Support CDI devices in ctr --device flag 3ca5b4437 Remove cni conf_template deprecation 94f0af3ec Image.IsUnpacked(): make error-handling more iodiomatic 54658a115 Image: rename variable that shadowed import d2b7a1e29 cleanup DEPRECATED TLS config f857626d6 Move PLEG event back to CRI fc50334ca Generate sandbox exit events from CRI d2605de73 add handling of a '.' commondir and bounds checking to mount_linux cf5605459 Move pod sandbox recovery to podsandbox/ package 45dbb4e54 Publish sandbox events 65906335b Add sandbox events protos 21b3318eb Fix several conversions of "ocispec.Image" to "ocispec.Platform" f2bc73782 Add cpuset-mems flag to 'ctr run' command f642c0a5f ctr: add cpuset-cpus flag to 'ctr run' command 314d758fa update auths code comment 9702d4aee snapshots/blockfile: use passed in dst in scratchGenerator bb82f3683 snapshots/blockfile: use loop if options is empty 9287711b7 upgrade registry.k8s.io/pause version fbb38ab6b Fix the spelling of repository within the NRI plugin documentation. 752e13d9a fix(docs): minor fix on the windows installation steps c1b926800 Windows Integration: Switch Azure-based CI to vanilla 2019 image. b9dfd29b7 Update tests to use volume-copy-up:2.2 4bfcac85f notify readiness when registered plugins are ready 7819da843 Document Protocol Buffer Setup 579b5596c Update volume-ownership image with latest hashes 88a3e25b3 Add targetOS to WithVolumes() c7ec95caf Reword comment and make slight change to code ec2bec648 Fix non C volumes on Windows 3d7522b7f ctr: allow run to override mounts 7beaa5e85 Add mount options to blockfile snapshotter 261d45efe docs/remote-snapshotter.md: update links and description 7274e33e3 CRI: Make stats respect sandbox's platform 82deabf9d Optimize metadata Schema notes to correctly match metadata structures a6cd5e3f4 bugfix: resolve symlink when looking up mountpoint b9f2e48e3 feat: make overlay sync removal configurable becf04a59 Update to docker/login-action V2 79709a205 disable provenance 1be571b14 Add sync before unmount on snapshotter layer test b729962e3 Add blockfile snapshotter to snapshotters doc 798dba9fa Add blockfile as a builtin 0c386e2eb Add blockfile snapshotter d280cb83b chore: update comment for NetworkPluginSetupSerially f8907ab87 Update volume-copy-up 811456b31 go.mod: github.com/containerd/continuity v0.4.0 6f715ab10 go.mod: github.com/containerd/go-runc v1.1.0 85cf9a09e Bump seccomp version to be the same as one in runc repo cdaa4025e Fix some typos 3d9dd2022 ctr: fix the cleanup of task 66307d0b4 CRI: Support Linux usernames for !linux platforms 5dbae3819 snapshots/testsuite: Rename: fix fuse-overlayfs incompatibility df65e321e Simplify closing bundle dir fd 718250b6b Update ttrpc to v1.2.2 7e42dc34d improve container Task comment 4347fc8bc go.mod: github.com/opencontainers/image-spec v1.1.0-rc3 5e054ee63 go.mod: github.com/opencontainers/runtime-spec v1.1.0-rc.2 bb61a6d4b cache diffIDs 6e2c915a4 Bump up golangci-lint to v1.52.2 ecb693ec7 bump typeurl to v2.1.1 f5211ee3f Change to Readdirnames for some cases e60a17925 .github: disable cache for actions/setup-go@v4 52afa34f5 cri: update WithoutDefaultSecuritySettings comment 6f34da5f8 Cleanup logrus imports 717169bb8 plugin: remove go < 1.8 stub, enable on windows and arm64 28d749c9e move to CRI-TOOLS v1.27.0 27f56e607 Fix umarshal metrics for CRI server b947a6f52 update go to go1.20.4, go1.19.9 c54b706c0 Add faasd and actuated into the ADOPTERS file d56466cf3 [transfer] avoid setting limiters when max is 0 2e53c0ec8 Windows integration: fix critest binary path in Azure-based workflow. 9e7f8fe30 Update CRI registry configuration docs 0d975230e Fix panic when remote differ returns empty result c58a229e5 Run CI when adding to the merge queue 0ba066474 vendor: github.com/opencontainers/runc v1.1.7 cbd10e41a vendor: github.com/opencontainers/runc v1.1.6 27c0fe3eb update runc binary to v1.1.7 4891bba83 Update tar tests to run on Darwin d9f3e387c Remove entry for container from container store on error 8ba285f6b fix unable to checkpoint the container more than once 370be0c18 Move logrus setup code to log package 92b93e376 cri: Vendor v0.27.1 8c80ccc7f Update external repo links that changed default branch to main 519457e3e ctr: Add sandbox flag to ctr run c786994ea Update transfer configuration 4e5693938 Add platform config to proxy plugins 4192ca8f8 pkg/cri/server: sub-test uses array and capture range var 8bcfdda39 pkg/cri/sbserver: sub-test uses array and capture range var 745ec84e5 Add diffservice to contrib 3784c1c91 Add proxy differ cb2c3ec8f oci: partially restore comment on read-only mounts for uid/gid uses f23816740 go.mod: add comment explaining go-fuzz-headers replace rule ec9e74ed9 go.mod: remove replace for github.com/opencontainers/runtime-tools 6c40cf305 go.mod: integration: use non-pre-release of containerd 92d1e9bee go.mod: integration: move indirect dependencies to the right group 18d7e84f9 runtime/shim: fix the nil checkpoint options cd16b31cd Get CDI devices from CRI Config.CDIDevices field da4de96e2 containerd support k8s 1.27 4b35c3829 update shim example 71ababe30 runtime/shim: remove runc/v2/services b71f4b751 runtime/shim: rename RunManager to Run 49111b115 update runc binary to v1.1.6 85df1cc6b doc: update CI signal info in README 7e6ab8488 cri: Throw an error if idmap mounts is requested 85afda6f5 cri: Vendor v0.27.0-beta.0 for mounts uid/gid mappings f7b8b1181 update the version of the runc shim in the readme and examples dc2fc987c capture desc variable in range variable just in case that it run in parallel mode 05bb52b27 Use t.TempDir instead of os.MkdirTemp 7a7519a78 CRI Sbserver: Make PodSandboxStatus friendlier to shim crashes 79cb4b000 [sbserver] handle missing cpu stats 464a4977a [sbserver] Refactor usageNanoCores be to used for all OSes e0b817ec1 Fix argsEscaped tests aee358765 Update to setup-go@v4 action 811be6085 Update Azure-based Windows workflow image SKUs. dfc7590d5 remotes/docker: Add MountedFrom and Exists push status db223271e Register imagePullThroughput and count with MiB 6f0714efc Use RunWithPrivileges b41ca1159 Fix access denied on mounted vhdx root a7fddb40b Use wait instead of a sleep to check for startup delay d0527e228 Support for dropping inheritable capabilities 0fb2d9132 update go to go1.20.3, go1.19.8 cab056226 oci: Use WithReadonlyTempMount when adding users/groups c9e5c33a1 UnmountAll is a no-op for missing mount points 8538e7a2a Improve error messages and remove check ba74cdf15 Make ReadOnly() available on all platforms 7bb2756bc Increase integration test tmieout to 20m 1279ad880 Remove bind code path in mount() 6a5b4c9c2 Remove "bind" code path from diff 76690706f CI: bump up crun to 1.8.3 d373ebc4d Properly mount base layers ca5605b4a Skip parent layer options on bind mounts 7f82dd91f Add ReadOnly() function 157fe6a13 docs: fix typo in comment of ExitStatus.Exit(Code|Time) 4012c1b85 Remove escalated privileges 54f8abe55 Use DefaultSnapshotter 47dd3dcff use t.Fatal if we cannot enable process privileges e31bef15f Update continuity 95687a932 Fix go.mod, simplify boolean logic, add logging 7a36efd75 Ignore ERROR_NOT_FOUND error when removing mount db3279859 Update continuity, go-winio and hcsshim 00efd3e6d Remove unused function dc980b14a Grant needed privileges for snapshotter tests feb637f92 Fix layer comparison and enable read-only checks 36dc2782c Use bind filer for mounts d591bb042 Enable TestSnapshotterClient on Windows 7b36becd2 Run Windows snapshotter through the test suite ac30eabbd Fix misspelling of 'Native' as 'Naive' 639c5799a Add paired 'mount' log for 'unmount' 8395e3a89 Don't use all-upper-case filenames in snapshot tests 909730dec Skip tests that do not apply to WCOW on Windows 469c13997 Ensure mounts are unmounted before leaving the test 84cc3e496 Unify testutil.Unmount on Windows and Unix 474a257b1 Implement Windows mounting for bind and windows-layer mounts 34b07d3e2 Implement WCOW parentless active snapshots and view snapshots 82ec62b86 fix: cio.Cancel() should close the pipes ac84bf7c8 Update sbserver to add noexec nodev and nosuid to /etc/resolv.conf mount bind. 126ab72fe Keep linux mounts for linux sandboxes on Windows/Darwin 990199a02 Test to ensure nosuid,nodev,noexec are set on /etc/reolv.conf mount. 96490734b update runc binary to v1.1.5 b55dad06a go.mod: github.com/opencontainers/runc v1.1.5 c89438e83 integration: add container start test using abs runtime path 3557ac884 Extract image service from CRI 97064b077 WithRuntimePath uses the TaskInfo.RuntimePath field c56f54aa1 devmapper plugin: skip plugin when not configured a11e47b48 Use built in atomic.Bool 87346df54 Defer uid lookups on Darwin ae4dbb60d Add noexec nodev and nosuid to sandbox /etc/resolv.conf mount bind. 1be08b10f ctr/tasks: fix unmarshal the task metrics for cgroups v1 8322bcb88 Adds a file header 50b576a94 Adds a dev container and Codespaces docs 0bbca7f1b Cleanup protobuild config daa3a7665 Add `WithReadonlyTempMount` to create readonly temporary mounts f48ae2227 fix: Update error message format based on feedback 3193650f1 fix: 'failed to resolve symlink' error messaging 14714b94d Fold the output of `crictl info` 5fdca538d adding cni metadata to the container in the `ctr run --config` 32d431a7c Update crictl doc 690ae58ca Update cri-tools version on windows 5956cdea8 Remove third-party package cri-api c011502bd Remove cri v1alpha1 services 23d288a80 Remove the CriuPath field from runc's options 62f98a1c1 CRI: Don't always close netConfMonitor channel a4d33a784 Remove support for config.toml `version = 1` 3e87f05b6 Fix image pulling with Transfer service c5f1086ad Update docs fda5c84bc Update gce contrib to use v2 by default 8bd82e355 Remove no_pivot when creating container from CRI 07c2ae12e Remove v1 runctypes c50a3ef04 Update Makefile and CI ef516a150 Remove runtime v1 76778aee6 integration: add restart monitor test for paused task 35a103d32 Remove "containerd.io/restart.logpath" label (deprecated since v1.5) 08337f356 Pre-splice strings and determine whether it is a file and check criCleanup err. e0d9b9663 Fix restarting the paused containers 86fc1ccab Remove `aufs` snapshotter (deprecated since v1.5) 50740a1a0 use strings.Cut instead of strings.Split for parsing imageConfig.User b39ac5d09 docs: fix typo in comment of plugin.Plugin.Err() d835fd2a3 Sandbox: Correct/add some fields to Status() d3e856da7 export: add test for WithSkipDockerManifest 70da5c783 Sandbox: Cleanup shim on Start failure 406583165 archive: consistently respect value of WithSkipDockerManifest 727b25403 fix userstr for dditionalGids on Linux Signed-off-by: Bruce Ashfield

containerd: update to 1.7.7

2023-11-06T16:21:12+00:00

Bumping containerd to version v1.7.7-5-g5e21abb18, which comprises the following commits: d0a1fedb5 *: add runc-fp as runc wrapper to inject failpoint 04491240a containerd-shim-runc-v2: avoid potential deadlock in create handler 6982a0df5 containerd-shim-runc-v2: remove unnecessary `s.getContainer()` 0e2320398 Uncopypaste parsing of OCI Bundle spec file a34fa5681 Prepare release notes for v1.7.7 6ca0aebf0 Allow for images with artifacts to pull 7df492a95 remotes/docker: Fix MountedFrom prefixed with target repository 7779ce64e remotes: always try to establish tls connection when tls configured b3db314a5 Bump x/net to 0.13 a83c66813 Require plugins to succeed after registering readiness 171d76849 cri: call RegisterReadiness after NewCRIService 6013b5e03 cri: stop recommending disable_cgroup 3d27bc738 Handle unexpected shim kill events 4ffa3ed29 Build binaries with 1.21.1 5756f6064 [release/1.7] vendor: github.com/Microsoft/hcsshim v0.11.1 09633b539 deprecate logs package, but disable linter (for transitioning) cb201519f alias log package to github.com/containerd/log v0.1.0 a5024e6dd vendor: github.com/stretchr/testify v1.8.4 7bd976af3 vendor: github.com/sirupsen/logrus v1.9.3 3ca015e55 nri: update mock plugin handlers 4cd208c1f vendor: update github.com/containerd/nri@v0.4.0 8cd2d33c2 [release/1.7] remotes/docker: Add MountedFrom and Exists push status 3e09c65b2 Prepare release notes for v1.7.6 5ebf05d97 push: inherit distribution sources from parent d206896dd content: add InfoProvider interface 423693d7b [release/1.7] update to go1.20.8 c7a35ccdc Fix transfer service dependencies: 38d4e506d Invoke Stable ABI compatibility function in windows platform matcher ddffc7c9a Update hcsshim tag to v0.11.0 b449440a4 CRI: Support Linux usernames for !linux platforms Signed-off-by: Bruce Ashfield

containerd: update to 1.7.5

2023-09-15T17:30:39+00:00

Bumping containerd to version v1.7.5-8-g86dc86e62, which comprises the following commits: ed4bac11e Blockfile: Enlighten blockfile copy on Darwin 4d1cfbbdd Revert "log: define G() as a function instead of a variable" a34e93241 make repositories of install dependencies configurable b449440a4 CRI: Support Linux usernames for !linux platforms 503ab21bf go.mod: github.com/containerd/continuity v0.4.2 93b23eb10 Prepare release notes for v1.7.5 fb1292c8d Bump version to v1.7.4 7a0cae3ca [release/1.7] Prepare release notes for v1.7.4 537d7526e integration: issue7496 case should work for runc.v2 only 0f4885c16 Add configurable mount options to overlay 8804a27d7 feat: make overlay sync removal configurable 5add172be Vagrantfile: add strace tool 207e28f36 integration: add ShouldRetryShutdown case based on #7496 b4f480fb3 pkg/cri/sbserver: fix leaked shim issue for podsandbox mode 88ff575c5 pkg/cri/server: fix leaked shim issue 9f61dfb7c integration: add case to reproduce #7496 2a9ae3c51 log: swap logrus functions with their equivalent on default logger 01445bb73 log: add package documentation and summary of package's purpose 932795f45 log: make Fields type a generic map[string]any 707ca94d8 log: add log.Entry type 0a79e67e4 log: define OutputFormat type dbbe28b7d log: define G() as a function instead of a variable 93b6cb784 log: add all log-levels that are accepted e8e086e02 log: group "enum" consts and touch-up docs 7aa4f8fdc log: WithLogger: remove redundant intermediate var bfdce4ce4 log: SetFormat: include returns in switch 6621e0888 log: remove testify dependency df76aaede removes/docker: remove unnecessary conversion (unconvert) 1c2dd5198 Remove temporary replace 2bf6bd143 vendor: update github.com/containerd/continuity 30a163086 snapshots|pkg: umount without DETACH and nosync after umount c9eebe3d1 mount: support direct-io for loopback device 1c2977db0 Modify loopback size cf9c78d2d snapshots/blockfile: fix lint issue b823b4f54 snapshots/blockfile: deflaky the testsuite 6daeceb11 snapshots/blockfile: use passed in dst in scratchGenerator 99b61aee3 snapshots/blockfile: use loop if options is empty fd39769ac Add mount options to blockfile snapshotter 8d732c6c2 Add sync before unmount on snapshotter layer test 8472a407e Add blockfile snapshotter to snapshotters doc 6740d77ca Add blockfile as a builtin 07cc24b32 Add blockfile snapshotter 32e3b76ee Add diffservice to contrib 661e505c8 Add proxy differ af79c07fd update runc binary to v1.1.9 c0b1c8f74 fix ci Linux Integration test fail 4e97a115f cri: Don't use rel path for image volumes 34a5d0330 fix: allow attaching to any combination of stdin/stdout/stderr c5e7b84c0 update to go1.20.7, go1.19.12 2eaeb3205 Fix ro mount option being passed Signed-off-by: Bruce Ashfield

recipes/classes/scripts: Drop SRCPV usage

2023-08-24T01:38:21+00:00

bitbake has been enhanced such that SRCPV is no longer needed in PV to handle updating git hashes and task signatures. We can simplify our PV by dropping SRCPV Signed-off-by: Bruce Ashfield

containerd: update to 1.7.2

2023-08-24T01:38:21+00:00

Bumping containerd to version v1.7.3-2-g98e8e05b6, which comprises the following commits: 2eaeb3205 Fix ro mount option being passed 4cb2f1515 [release/1.7] Add release notes for v1.7.3 b461ecacf cri: memory.memsw.limit_in_bytes: no such file or directory 14328ae03 migrate to community owned bucket b985f7ef1 update runc binary to v1.1.8 f7a20e17c Move logrus setup code to log package 7353c0286 ctr: update WritePidFile to use atomicfile ae7021300 shim: WritePidFile & WriteAddress use atomicfile 186eb64b7 cri: write generated CNI config atomically on Unix 64c3dcd8e atomicfile: new package for atomic file writes 083f57160 capture desc variable in range variable just in case that it run in parallel mode a9440ce6b Use t.TempDir instead of os.MkdirTemp eea3440d8 use strings.Cut instead of strings.Split for parsing imageConfig.User eace67180 fix userstr for dditionalGids on Linux 973778193 Update Go to 1.20.6,1.19.11 60a6db9c2 Cirrus CI: configure apt-get to wait for locks 6b6b0c828 bugfix(port-forward): Correctly handle known errors 898eca21e Change http.Header copy to builtin Clone fa2efc406 Resolve docker.NewResolver race condition 241514815 pkg/cri/server: Test net.ipv4.ping_group_range works with userns 801e8c806 pkg/cri/server: Fix net.ipv4.ping_group_range with userns d5639a5a8 vendor: github.com/containerd/zfs v1.1.0 403033e52 update go to go1.20.5, go1.19.10 15d65709e ci: remove libseccomp-dev installation for nightly a08ae718c [release/1.7] go.mod: Update cgroups to 3.0.2 c2c54af9d Update ginkgo to match cri-tools' version 6281d46df seccomp: always allow name_to_handle_at 3bf3996d9 integration/client: add timeout to `TestShimOOMScore` 699d6701a Pinned image support 18c6503d9 runtime/v2/runc: handle early exits w/o big locks dafbeb5b1 No more nondistributable layers in MS registry Signed-off-by: Bruce Ashfield

containerd: update to 1.7.2

2023-07-25T18:54:20+00:00

Bumping containerd to version v1.7.2-13-ga766dc550, which comprises the following commits: dafbeb5b1 No more nondistributable layers in MS registry e5b2a0131 task: don't `close()` io before `cancel()` a6a15afe3 move to CRI-TOOLS v1.27.0 58b6b99cd Add a check to skip stats for containers that are not running 0b2b96479 RELEASES.md: de-deprecation of CNI conf_template will be v1.7.3 a24267b28 Remove cni conf_template deprecation 89415fe36 Fix issue for HPC pod metrics e134b6393 Fix panic when remote differ returns empty result 0e41daaea [release/1.7] Prepare release notes for v1.7.2 99582fb1a fix: cio.Cancel() should close the pipes eeda70fb0 remotes/docker: ResolverOptions: fix deprecation comments 313c226b8 Update continuity to a tagged version e21c8beee Post cherry-pick fixes 246240f71 Move PLEG event back to CRI 16f3726dd Generate sandbox exit events from CRI 0c8cfb1a7 Move pod sandbox recovery to podsandbox/ package 91d9f5c64 Publish sandbox events 4b77683b4 Add sandbox events protos 8dd16285a UnmountAll is a no-op for missing mount points acff3eefa Improve error messages and remove check b4dd3bf4e Make ReadOnly() available on all platforms 08d8baf3f Increase integration test tmieout to 20m 1f0dbd011 Remove bind code path in mount() 8f37b1c63 Remove "bind" code path from diff 9139208b3 Properly mount base layers e61e7b312 Skip parent layer options on bind mounts e4307926f Add ReadOnly() function 0277b9b01 Remove escalated privileges d5c18dfb7 Use DefaultSnapshotter 853179366 use t.Fatal if we cannot enable process privileges 5b3ee413f Update continuity 375172604 Fix go.mod, simplify boolean logic, add logging 600abd137 Ignore ERROR_NOT_FOUND error when removing mount df7295dcd Update continuity, go-winio and hcsshim 0db78c482 Remove unused function 219058766 Grant needed privileges for snapshotter tests 96fbe5bc8 Fix layer comparison and enable read-only checks 279e0d3c9 Use bind filer for mounts 93e94da40 Enable TestSnapshotterClient on Windows 3a3da693a Run Windows snapshotter through the test suite e7b62322f Fix misspelling of 'Native' as 'Naive' e1f999a18 Add paired 'mount' log for 'unmount' 5788d6e52 Don't use all-upper-case filenames in snapshot tests 3cdcb2f10 Skip tests that do not apply to WCOW on Windows b0968b8bb Ensure mounts are unmounted before leaving the test b57424851 Unify testutil.Unmount on Windows and Unix b9a8aad45 Implement Windows mounting for bind and windows-layer mounts 1a64ee183 Implement WCOW parentless active snapshots and view snapshots 7851b0a9f CRI: Make stats respect sandbox's platform 8d7c340ca [sbserver] handle missing cpu stats d08b2a088 [sbserver] Refactor usageNanoCores be to used for all OSes 2c38cad77 notify readiness when registered plugins are ready 08de6e7b8 Update volume-ownership image with latest hashes 6a5e54c15 Get CDI devices from CRI Config.CDIDevices field Signed-off-by: Bruce Ashfield