linux/meta-virtualization.git/recipes-containers/cri-o, branch nanbield

cri-o: update to 1.29.0

2023-11-06T16:21:12+00:00

Bumping cri-o to version v1.27.0-662-gf8ccf314a, which comprises the following commits: 3b7ab35ff build(deps): bump crate-ci/typos from 1.16.17 to 1.16.18 f7d3228a7 Avoid an unnecessary c/storage lookup in ListImages 96e6aa9b5 Inline getImageCacheItem into ListImages e4f2b888d Split imageIsBeingPulled from ListImages c7188518d Simplify ListImages more 1cfe3c8bb Simplify appendCachedResult ae597ba16 Remove the "filter" parameter to ListImages e0750462f Turn ListImages(filter) into ImageStatus 50ce23e89 Simplify storageImageStatus a bit 2cb166512 Simplify ImageStatus a bit 1b0e82a22 Split storageImageStatus from ImageStatus ad8be44cc Simplify error handling in ImageStatus 203612b23 Move the ImageResult -> ImageStatusResponse conversion out of the loop 97329e4fa build(deps): bump ossf/scorecard-action from 2.2.0 to 2.3.0 013a0998c Update release-notes to v0.16.1 dc44bac35 Fix quoting issue in usage help text f22040da2 crio: add support for --imagestore 1d0e5d074 build(deps): bump crate-ci/typos from 1.16.15 to 1.16.17 bb4ab8110 Run GitHub actions in `update-nixpkgs-*` branches 45a6e70e7 Update nixpkgs 8ec74c5fa contrib/test: pin the latest release of runc 2505851e0 Update crun to 1.9.2 f3e53a058 test: Add test for image pinning behavior 12cabc651 internal/storage: compute Pinned field from recently loaded image 0fd641c6d build(deps): bump crate-ci/typos from 1.16.14 to 1.16.15 347194d3f build(deps): bump crate-ci/typos from 1.16.13 to 1.16.14 f532cbd89 Add nixpkgs update cron 8fa9260fc build(deps): bump crate-ci/typos from 1.16.12 to 1.16.13 72280f09c Update install.md removed spaces (markdown lint error) fe9ed4e3a storage: add support to split filesystem using imagestore 544db3209 RFC: Use RuntimeContainerMetadata for passing container data c9309ebb6 Add a layer name in one step 4f5a2e95c Microoptimize reference creation 3a77cc956 Eliminate the now unused imageAuthFile and isPauseImage parameters 61d86923c Simplify createContainerOrPodSandbox again a936e6861 Simplify CreatePodSandbox 39095cbb4 CHANGE: Simplify CreateContainer image lookup a09320639 Eliminate the clearly dead part of the just copy&pasted code a7f841955 Blindly copy the image handling code from createContainerOrPodSandbox into callers 6cabaaee1 Remove an imageID parameter to CreatePodSandbox 2b4652c52 Fix/Add error handling 8e1e1e672 update containers storage to 1.50.2 5d8538318 build(deps): bump DavidAnson/markdownlint-cli2-action from 12 to 13 6c1574efc Fix nix `dirty` build d951faa32 Make the release branch fast forward a cronjob 5dee42bcf build(deps): bump crate-ci/typos from 1.16.11 to 1.16.12 91b83b10c Fix release notes job 096f803a3 Bump golang dependencies 7d86c2e25 docs: fix CI failure f182fb411 Bump version to 1.29.0 51bae7a96 Remove the IsFullIdentifier check from Server.pullImage again 7eb248b1a Don't silently modify the caller's SystemContext 2d72e13e6 Fix a VERY misleading comment. 472d2c5f9 Remove an unnecessary check 23d7c35d5 Remove an unnecessary parse call 6f9a7173f Remove an unnecessary check 8c3e301da Optimize handling of full image IDs 5f45d232a Remove the ErrCannotParseImageID special case 335d4b0f3 Fix a VERY misleading comment b489507c9 Remove a completely unused ErrImageMultiplyTagged 98f171147 Make Server.pullImage responsible for rejecting image IDs e292f17c0 docs: Update the containers/image branch name 6005b03f2 contrib/test/ci: remove the redundant golang setup file 059a7b5f8 Add conmon-rs binary to bundle 4ac3aeef2 internal/storage: address unpredictable behavior of image names 61a0b7c79 config/server: add functions to check IDMap support in runtime 9ce778351 Remove golang-go from debian installation 3d450274e Pause container during checkpointing e069cc827 contrib/test: fix golang version extraction for CI 0774b644d build(deps): bump actions/checkout from 3 to 4 d6f4c7100 Adopters.md: fix linting issue d805d28fd Add new adopter 940de5009 build(deps): bump crate-ci/typos from 1.16.10 to 1.16.11 ac9c6fbfe Don't vendor main Kubernetes repo any more 4a1e406b0 Mention Roadmap GitHub Project in README.md bacc5e638 build(deps): bump crate-ci/typos from 1.16.9 to 1.16.10 9cbd8d555 build(deps): bump cachix/install-nix-action from 22 to 23 798a8d701 build(deps): bump actions/checkout from 3 to 4 758e3d8c3 cgmgr: reorder setting of sched_load_balance for pod cgroup 0e6b13e08 build(deps): bump crate-ci/typos from 1.16.8 to 1.16.9 ff434ba27 build(deps): bump github.com/containers/podman/v4 from 4.6.1 to 4.6.2 0002792fa build(deps): bump DavidAnson/markdownlint-cli2-action from 11 to 12 3aa18aff3 Switch to go 1.21 5b9f7f96d Add dependabot group for OTEL deps d7ad3fcbf build(deps): bump github.com/containers/buildah from 1.31.2 to 1.31.3 85c3d9db1 Bump conmon and crun dependencies 5ab387fe5 build(deps): bump github.com/containers/common from 0.55.3 to 0.55.4 a4f2d8071 server: remove deprecated functionality 28ae1f81a Fix bundle e2e tests a9afa0442 Add ppc64le binaries to release notes c8f8ca498 Add Kubernetes package test for static binary bundle 734e1538c build(deps): bump github.com/google/uuid from 1.3.0 to 1.3.1 873c0f420 Policy: Allow backport of independent features bebd421b5 Configure systemd install path based on OS ec4bbac12 feat(cmdrunner): add support for context 59f9b823d move shmSetup in server/sandbox to internal/factory/sandbox d1946b30a blockio: add blockio_reload option ce1cdfa54 main: create parent crio dir before creating clean.shutdown.supported Signed-off-by: Bruce Ashfield

cri-o: update to release 1.28.0

2023-09-15T17:30:39+00:00

Bumping cri-o to version v1.28.0, which comprises the following commits: 23dec8c7d version: bump to v1.28.0 c104a0608 build(deps): bump github.com/containers/storage from 1.48.0 to 1.49.0 5524b65d3 add info about pulling image before doing the tutorial 922573ffe build(deps): bump crate-ci/typos from 1.16.6 to 1.16.8 67724cb6f build(deps): bump github.com/containers/podman/v4 from 4.6.0 to 4.6.1 a2d46ae01 build(deps): bump github.com/containers/ocicrypt from 1.1.7 to 1.1.8 7e3522a9c Added a flag internal-repair 39ea33e29 feat: Added a feature to check at reboot time shutdown was clean or not, If it was not clean then apply repair logic c5def7f72 build(deps): bump crate-ci/typos from 1.16.5 to 1.16.6 b873985b8 Add `conmon` to ppc64le static bundle 3e3f70c22 Update install.md 9c3d622a6 Vendor Kubernetes v1.28.0 a7f160b49 build(deps): bump crate-ci/typos from 1.16.3 to 1.16.5 d2fa125a4 Update nixpkgs and use overlay 80fdf486e Add containers_events_dropped_total metric e19002329 Fix indentation in installation instructions 94f5e75c8 Update cri-tools to v1.28.0 a8d7c29e1 Vendor Kubernetes v1.28.0-rc.1 23f51c3e1 Update OWNERS_ALIASES f1bb83127 Update runc to v1.1.9 581a388ac build(deps): bump crate-ci/typos from 1.16.2 to 1.16.3 5022d956a test/image.bats: add test for checking crun-wasm workflow 05ef7a189 *: add platform_runtime_paths to RuntimeHandler 6a0c4b9ec build(deps): bump github.com/containers/image/v5 from 5.26.1 to 5.27.0 f18d122e8 Revert "devices: fill the FileMode field in spec" 8937245b0 build-static: misc fixes needed for 1.25.4 generation abfc2d616 build(deps): bump crate-ci/typos from 1.16.1 to 1.16.2 3f06640cf contrib/test/ci: add crun-wasm 3a9232c62 build(deps): bump google.golang.org/grpc from 1.56.2 to 1.57.0 bb98e2b2a Set mount type HostToContainer for mounts that include container storage root 309d045ec add script bumping 927843ea4 test/metrics: simplify oom test, add debug 64fdfbcaa build(deps): bump github.com/opencontainers/image-spec 15a586215 build(deps): bump github.com/opencontainers/runtime-spec f30ef84ad build(deps): bump github.com/onsi/gomega from 1.27.8 to 1.27.10 ecd7f9a3e cri: implement RuntimeConfig rpc 2463fdf78 vendor: update Kubernetes to v1.28.0-beta.0 edc5ece7b build(deps): bump github.com/containers/podman/v4 ef1653c8e internal/config/seccomp: Sync call signature of (*Config).Setup 67b43c4b5 internal/config/cgmgr: add non-linux stubs 1dffd7e71 internal/config/node: add non-linux stubs ecb372986 internal/config/device: add non-linux stubs 10168b534 internal/config/nsmgr: add non-linux stubs 8edfbfd45 internal/config/capabilities: add non-linux stubs 2bd7fcbd8 internal/config/apparmor: add non-linux stubs da69490d0 oci: update unit tests for new stop code be5bac87b oci: simplify stopping code 7371b1e77 oci: don't return ErrContainerStopped from StopContainer c0e34644c build(deps): bump github.com/containers/buildah from 1.31.0 to 1.31.1 41b13e28d Fix ImageRef field for containers to default to an image ID 930f49889 runc: 1.1.7 -> 1.1.8 b563cd728 Add Adobe to ADOPTERS.md 3bc609eb1 build(deps): bump sigs.k8s.io/release-sdk from 0.10.2 to 0.10.3 4e0f88970 build(deps): bump github.com/opencontainers/runc from 1.1.7 to 1.1.8 e6af91f6a oci: change IsAlive to Living 320671ed2 devices: fill the FileMode field in spec 126bd4ca9 build(deps): bump crate-ci/typos from 1.16.0 to 1.16.1 b79391fe1 Update bats to v1.10.0 5e86a5261 build(deps): bump github.com/go-chi/chi/v5 from 5.0.8 to 5.0.10 92e1d1910 Bump vendored Podman to v4.6-rc2 a3d229acf internal/factory/container: get CDI devices from CRI field. 21181672b Add Debian 12 as a supported OS to the install doc b7c826d38 build(deps): bump github.com/containers/common from 0.55.1 to 0.55.2 151572a56 build(deps): bump github.com/container-orchestrated-devices/container-device-interface c0c7ce5ae Add OpenSSF best practices badge in favor of CII 0d92db47e build(deps): bump golang.org/x/net from 0.11.0 to 0.12.0 70e5b76ca build(deps): bump google.golang.org/grpc from 1.56.1 to 1.56.2 79859a9d9 build(deps): bump crate-ci/typos from 1.15.10 to 1.16.0 7ebe2f614 Update vendored Kubernetes to v1.28.0-alpha.4 c28303fad container_test: fix "AddCapabilities ALL" test case e176397c8 vendor: drop podman replace and update runc eff07b834 Run irqbalance tests in serial within the actual suite 059dce220 build(deps): bump crate-ci/typos from 1.15.9 to 1.15.10 d43833d61 Bump bats in ci jobs to latest release 66ac754c7 build(deps): bump github.com/containers/buildah from 1.30.0 to 1.31.0 59952bf00 build(deps): bump github.com/containers/common from 0.54.0 to 0.55.1 ff3bb58db build(deps): bump crate-ci/typos from 1.15.7 to 1.15.9 4fe0b8164 build(deps): bump github.com/containers/image/v5 from 5.26.0 to 5.26.1 cb51739b1 server: use platform struct to set OS details bac73aa42 Pre-check request values on container creation 5a85cfc95 Remove non existent Debian builds from install instructions 73cf5597a test: fix make mockgen test failure dfdd2acde vendor: update release-sdk to v0.10.2 abcf50239 build(deps): bump google.golang.org/grpc from 1.55.0 to 1.56.1 9c78a1e23 vendor: update containers/storage to v1.48.0 87b126342 build(deps): bump github.com/intel/goresctrl from 0.3.0 to 0.4.0 8a9d4ef17 vendor: update containers/common to v0.54.0 cb247caf5 build(deps): bump github.com/containers/image/v5 from 5.25.0 to 5.26.0 ad3dd698b build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.31.0 b8bb276a0 build(deps): bump github.com/uptrace/opentelemetry-go-extra/otellogrus 0882a1dcb build(deps): bump crate-ci/typos from 1.15.6 to 1.15.7 6b9e49d3b Try to find `CONTAINER_CNI_PLUGIN_DIR` by binary lookup 40bbe8218 vendor: fix vendoring issue f6317807c typos: add WRONLY to the list of extend-ignore-re 6a10113c7 build(deps): bump crate-ci/typos from 1.14.12 to 1.15.6 1062a4cd3 build(deps): bump ossf/scorecard-action from 2.1.3 to 2.2.0 91d6bd38b vendor: bump github.com/onsi/ginkgo/v2 to 2.11.0 7f66c1428 build(deps): bump cachix/install-nix-action from 21 to 22 d0526337e vendor: bump github.com/urfave/cli/v2 to 2.25.7 7a2b9a220 vendor: bump golang.org/x/sync to 0.3.0 ba0751938 vendor: bump golang.org/x/net to 0.11.0 9f0680cde vendor: bump github.com/prometheus/client_golang to 1.16.0 67a132dc6 runtime handler hooks: run default hook when container stops gracefully 49d9efe8b vendor: bump github.com/stretchr/testify to 1.8.4 001733570 vendor: bump github.com/sigstore/rekor to 1.2.1 d274dd121 Use a variable to manage the version of kata used for testing. 4a7d0857b Update supported version and variable guide for adding repository 0534d7eff governance: tweak voting behavior bfc7cf55a Use kata 3.0 for testing db4b8eaab kata tests: Enabling more than one test file for kata tests. 0f08aeb6f kata tests: Update list of skipped tests for the ctr.bats file 4310e3342 Modify ansible files to re-enable kata tests 8224bd8a5 build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc f84eb7874 Move reload watcher into `Server` e3b7406b9 Update golangci-lint and config 159aaf6c6 utils: make this package build on non-linux platforms c088d69aa fix function name in comment c702bb78a build(deps): bump DavidAnson/markdownlint-cli2-action from 10 to 11 098fbebf7 Add a test for log linking 5620764ae linklogs: add support for symlinking container directory 5d7ecfe4b Add support for linking pods logs a7d314bea build(deps): bump ossf/scorecard-action from 2.1.2 to 2.1.3 e614bc756 server: ensure pod labels are present d84cc85c5 build(deps): bump github.com/BurntSushi/toml from 1.3.1 to 1.3.2 72b735603 OCPBUGS-14750: Pod termination must succeed when a hook fails 98c43d537 Add OSFF scorecard action 85c7e712e main: Added a call to GarbageCollect ccb91bc8a docs: fix eol test 08f7c0776 build(deps): bump github.com/onsi/gomega from 1.27.7 to 1.27.8 f2feb7c6f Use staging k8s.io/kubelet/cri/streaming package 72011b3c4 Add support for namespaced signature policies 3939fba97 Apply markdown linting, cleanup docs and fix broken links #6890 96e6aed74 Apply markdown linting on the tutorials folder #6890 2ead2413a Apply markdown linting on the contrib folder #6890 5d7b64018 Add markdown linter action #6890 d58f408f5 test: fix timeout metric test 5f74e7994 build(deps): bump github.com/BurntSushi/toml from 1.3.0 to 1.3.1 c87b11115 server: do not take lock to populate pid in container status and inspect 28b34889a build(deps): bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3 b373909cf build(deps): bump github.com/containerd/containerd from 1.7.1 to 1.7.2 d456a11ef crio: deprecate config migration 259e7980c metrics: add metric for resource stalled at stage 85a4ba091 build(deps): bump crate-ci/typos from 1.14.11 to 1.14.12 75aacdb04 Drop support for path based seccomp profiles e18e2e90a test/helpers: rm useless code b7d1c2e61 test/helpers: use cli to set container dirs 459372c24 test: adapt for sched_load_balance disable after stop 6da8e46b1 runtime handler hooks: add DefaultCPULoadBalanceHooks 23b9179f9 server: call hooks and NRI in stopContainer e1c68ea2a Update `README.md` version table 56ac8ac79 crio: remove DefaultsPath config feature b2a20a418 server: call hooks on infra container creation 2efd04aa4 high perf hooks: workaround libcontainer quirk when disabling cpu quota 9ec701691 cgmgr: export CrioPrefix and use containerCgroupPath more 775690b1e build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.5 to 2.9.7 cf7e0946e tests/timeout: skip for conmon-rs c1c431836 ci/gha: add space-at-eol check, fix existing ones 0a35354c4 build(deps): bump github.com/BurntSushi/toml from 1.2.1 to 1.3.0 65792546b ci: bump shellcheck to 0.9.0 6b2f35e2c test: fix a few cases of SC2086 d6b793c46 contrib/kube-local/kube-local: rm unreachable code b6014826c test/copyimg: use log.Fatalf 587e3d595 test/*.bats: rm useless echo "$output" bdb765635 test: rm explicit $status checks 933e33c1c test: simplify assigning IDs 22978429a test/status.bats: simplify exit code checks ff7bc1b52 test: simplify non-zero exit status checks 0bf509d35 test/cdi.bats: rm run_cmd, use run 21e5dcebe test/nri.bats: fix checking exit code 2fab13028 test/README.md: fix wrong bats example 9c2fcb3bd test/*bats: drop fail() 84ee0c931 Fix using ! in bats tests 045c026da test/timeout: fix "dup ctr" test 1da9bf5f7 ci: require bats 1.9.0 c5a1c1b1e test: separate var setting and img preload 7b9e5201b ci: bump bats to 1.9.0 9ad33da53 build(deps): bump github.com/containers/podman/v4 from 4.5.0 to 4.5.1 2604665cc Update nix and nixpkgs 792a5d0ad test: limit number of parallel jobs 1cc1958de test/cgroup: fix for cgroupfs aa86e94f0 ci/gha: fix double caching 47c13e037 [FEAT] Add new parameter disable_hostport_mapping in CRI-O df7df847d build(deps): bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc f7f085f6f Makefile: Remove GOPATH references 1eeaad851 build(deps): bump cachix/install-nix-action from 20 to 21 7cc3e206c build(deps): bump github.com/onsi/gomega from 1.27.6 to 1.27.7 3b5c9f115 build(deps): bump crate-ci/typos from 1.14.10 to 1.14.11 7003312b0 OCPNODE-1286: Add a CI job to run cri-o e2e tests by enabling the evented pleg feature 47958dc0b Update crun to v1.8.5 9b6a4cff7 Wrap CRI errors on image pull defdf1c9e build(deps): bump github.com/sirupsen/logrus from 1.9.0 to 1.9.2 6a3ee4e6b docs: update cri-o podman doc and remove stale information 7ed2cfc7f deps: bump runc to 1.1.7 f59c1f72a sandbox: Handle PodLinuxOverhead and PodLinuxResources CRI fields f5e58c0ea build(deps): bump crate-ci/typos from 1.14.9 to 1.14.10 1009668bb build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 42e0f7fac go.{mod,sum}, vendor: update NRI. d97ac8a10 contrib/test: reenable Statefulset Basic tests 3761965f8 contrib/test: re-enable block volmod tests 003edc26c high perf hooks: disable CPU quota with libcontainer as a pre start hook a875ef486 test: add test for cpu-quota.crio.io e1c3cf960 Check and fix typos in CI fa57ffd3e *: switch to go-chi/chi mux 6330b1d5f build(deps): bump github.com/cloudflare/circl from 1.1.0 to 1.3.3 786109a6e build(deps): bump github.com/containerd/containerd from 1.7.0 to 1.7.1 ecc712850 Support image policy verification error ccaef6a7d build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.4 to 2.9.5 484870532 build(deps): bump sigs.k8s.io/release-utils from 0.7.3 to 0.7.4 3480e9efa Fix GitHub action `bundles` test 937ed8cf6 - Convert status cli as a subcommand of crio - Moved commands to the internal criocli package and used them in the crio and crio-status binaries - Adding the status subcommands directly to the binary a247c52d9 pkg/config: update the description for templateStringCrioImagePinnedImages 4fadec5f1 internal/storge: fix CompileRegexpsForPinnedImages test case 5e751fda3 vendor: fix vendoring 5ecc82e6f contrib/metrics-explorer: fix nested modules 640624ec9 Update CNI plugins to v1.3.0 9fc177ed4 build(deps): bump golang.org/x/net in /contrib/metrics-exporter 8b230dec7 clients connected to container event stream now receive the same data 3fd71bdc9 vendor: fix CI due to incosistent vendoring 20fd7770e fix kubectl version in bug report template 21b47b11c *: update sandbox/pause image to 3.9 edbd4890f internal/storage: add sandbox/pause image to the list of pinned_images b0531365f build(deps): bump github.com/containernetworking/plugins 22ad8957b Changes to build binaries for ppc64le architecture. 32ec246ba Update README.md and associated files f10ea341d build(deps): bump golang.org/x/net from 0.9.0 to 0.10.0 c9bb988d1 *: fix warnings related to gosec 0e65290c4 .github/worflows: add go vulnerability management check for cri-o f9abf50c9 pkg/config: reload pinned_images when the new config is provided bbe9a7a2c *: add support for pinned_images in crio configuration dfcf222c3 refactoring vars 386509caf Use native crierrors package for registry unavailable a90d00103 build(deps): bump golang.org/x/sys from 0.7.0 to 0.8.0 16ab25339 Vendor latest Kubernetes master 6a095aef7 build(deps): bump google.golang.org/grpc from 1.54.0 to 1.55.0 5c064914f build(deps): bump golang.org/x/sync from 0.1.0 to 0.2.0 639b6dddf OWNERS: add sohankunkerkar to cri-o-reviewers 4477a804b tests: add a fake pinns call to delay things and cause the timeout 6fa761497 tests: use crictl binary directly when checking its capabilities 1ff3303df cni: configure cgroupPath capability arg e52e63a41 vendor: bump ocicni to tip 914763fb1 Remove vendor specific changes 08cd56fc9 Migrate image registry to registry.k8s.io 3311658af build(deps): bump github.com/uptrace/opentelemetry-go-extra/otellogrus 02fe074f2 build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.2 to 2.9.4 0b8a2c068 build(deps): bump github.com/sigstore/rekor from 1.1.0 to 1.1.1 660b63bd7 cgmgr: set sched_load_balance to disabled on sandbox cgroup 5a1707e4c test/pod.bats: update to current setup f83a4faba cgmgr: create cgroups for systemd cgroup driver for dropped infra pods f21e178f8 build(deps): bump github.com/prometheus/client_golang bf23f5c01 Support `RegistryUnavailable` type e80464e07 Update generated docs ed9c419e7 OWNERS: allow cri-o reviewers to approve dependabot PRs 58c101634 build(deps): bump github.com/urfave/cli/v2 from 2.25.1 to 2.25.3 a4fc119af .github/workflows: remove auto-approve workflow a0009cb25 build(deps): bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc 541b6563d Extend cpu-c-states.crio.io annotation to add max latency 2417374a6 build(deps): bump k8s.io/klog/v2 from 2.90.1 to 2.100.1 249c340d3 contrib/test/ci: fix the bin folder location for cri-tools cf30845e7 #6833 user ns: Fix segfault while constructing id mappings 38774e14a Use ImageRef instead of ImageName for restore 1f224d1e0 build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc 7c6676f02 contrib/test/ci/build: use `force:yes` while linking crictl/critest c9cc1529f .github/workflows: fix the github_token field a1c09ad99 .github/workflows: fix the token field 30ddd6d89 Fix events generated by Evented PLEG b8d8ff14b Update c/common to v0.53.0 b34038f8f build(deps): bump actions/setup-go from 3 to 4 4c828dc48 build(deps): bump github.com/opencontainers/runtime-spec 928d5d49c build(deps): bump github.com/prometheus/client_golang e806005d6 test/network: skip flaky test running on a node with cgroupv2 e914f0e15 test: combined oom test to avoid CI flake d5048e7ff test/seccomp: fix the syscall 473ee6b73 contrib/test/ci: remove duplicate code a1c6ae7e4 test/*: consolidate images used for integration tests 25fb4fa76 build(deps): bump github.com/Microsoft/go-winio from 0.6.0 to 0.6.1 a950c837d Download more dependencies instead of vendoring 839bd1203 build(deps): bump github.com/containers/conmon-rs from 0.5.0 to 0.5.1 edbe9c27e build(deps): bump github.com/go-logr/logr from 1.2.3 to 1.2.4 e53dcc003 Stop vendoring release notes tool 1c26776cb .github/workflows: auto approve dependabot PRs e967a178c user ns: fix segfault when host id mapping is empty 19c0b4d7b server: fix failing tests edf6a88a9 build(deps): bump k8s.io/release from 0.15.0 to 0.15.1 7a612bc4b Allow restoring of containers with different names 86b36ee6e build(deps): bump lumaxis/shellcheck-problem-matchers from 1 to 2 6da5b1272 build(deps): bump actions/stale from 7 to 8 1c1cfb92a Fix Flannel PodCIDR in kubeadm tutorial bac3a79b6 adding support for configmap namespace 603f176a0 Add debug to identify when a relabel was not requested f9fa10915 Update tutorials/debugging.md 75c8b181b Added documentation to force the Go garbage collector for CRI-O 11f5c4326 Remove remnants of CONTAINER_MANAGE_NS_LIFECYCLE Signed-off-by: Bruce Ashfield

cri-o: update to 1.27.1

2023-08-24T01:38:21+00:00

Bumping cri-o to version v1.27.1-7-gab7845e07, which comprises the following commits: fbfca3a52 oci: update unit tests for new stop code 6dec88e7c oci: simplify stopping code 5b7b82f56 oci: don't return ErrContainerStopped from StopContainer 0e4df2e9c oci: change IsAlive to Living 92b455156 devices: fill the FileMode field in spec e54504a00 version: bump to 1.27.1 a61082768 vendor: drop podman replace and actually update runc 9c86a1269 vendor: bump runc to 1.1.6 Signed-off-by: Bruce Ashfield

cri-o: update to 1.27-tip

2023-07-25T18:54:20+00:00

Bumping cri-o to version v1.27.0-48-g3abbef701, which comprises the following commits: a61082768 vendor: drop podman replace and actually update runc 9c86a1269 vendor: bump runc to 1.1.6 1d6f5a00c [1.27] Add support for namespaced signature policies 35afa9859 runtime handler hooks: run default hook when container stops gracefully 3907696a4 main: Added a call to GarbageCollect ee6868938 Add a test for log linking 5319875b4 linklogs: add support for symlinking container directory 13f8ae560 Add support for linking pods logs 605e4d935 server: ensure pod labels are present 15d6d5977 OCPBUGS-14750: Pod termination must succeed when a hook fails ccd7e23af server: do not take lock to populate pid in container status and inspect 57662c6f8 go.{mod,sum}, vendor: update NRI. ef90744ae test: adapt for sched_load_balance disable after stop 169220817 runtime handler hooks: add DefaultCPULoadBalanceHooks a74999eb6 server: call hooks and NRI in stopContainer ea3297939 server: call hooks on infra container creation 37518c031 high perf hooks: workaround libcontainer quirk when disabling cpu quota eca28447d cgmgr: export CrioPrefix and use containerCgroupPath more 49cfa2060 *: update sandbox/pause image to 3.9 bf9eec8cb Add debug to identify when a relabel was not requested 2ee3398cb high perf hooks: disable CPU quota with libcontainer as a pre start hook 11141ac32 test: add test for cpu-quota.crio.io 69a6d6fc2 Fix events generated by Evented PLEG Signed-off-by: Bruce Ashfield

cri-o: drop unneeded dependency on virtual-containerd

2023-07-11T19:11:34+00:00

Signed-off-by: Renato Caldas Signed-off-by: Bruce Ashfield

cri-o: update to 1.27.0

2023-06-07T20:40:21+00:00

Bumping cri-o to version v1.27.0-14-g81ac4cea5, which comprises the following commits: 69a6d6fc2 Fix events generated by Evented PLEG 86cae21ec cgmgr: set sched_load_balance to disabled on sandbox cgroup 47d6d6c82 test/pod.bats: update to current setup 2b7f614e0 cgmgr: create cgroups for systemd cgroup driver for dropped infra pods b415e72d6 Fix vendoring 6df1f0711 Update c/common to v0.53.0 cd9636049 Download more dependencies instead of vendoring 230e28acb Stop vendoring release notes tool a2b280af4 build(deps): bump k8s.io/release from 0.15.0 to 0.15.1 cc00b5a62 version: bump to 1.27.0 f5ce04e04 bump cri-tools to 1.27.0 bc45b9021 Fix restore tests 8d6b49db2 build(deps): bump github.com/containers/podman/v4 from 4.4.2 to 4.5.0 a28b1e760 Add unit test for crictl info with verbose 875c3a2b1 Add basic crictl info config with sandboxImage 070668a35 Bump crun to v1.8.4 48bc2bd8d contrib/test/ci: cache runc and crun setup unconditionally 48cf728dd config: mark seccomp-use-default-when-empty as deprecated a2961f8c3 Bump runc to v1.1.6 efaea1060 high perf hooks: move cpu-quota disable handling to container creation 566aa128a high perf hooks: remove test for cpu load balancing 65d25545e high perf hooks: update cpu load balancing to be cgroup based cc50b438b test: add cpu load balancing test cf77d5383 build(deps): bump github.com/onsi/gomega from 1.27.2 to 1.27.6 acd4d30ba Bump Kubernetes to v1.27.0 0087d0ee7 Don't use KUBE-MARK-MASQ in hostport rules c1c52191d Update template.go 4bc36eabd contrib/test: don't cache the cri-o content 6fcbca13f Don't print `Dependencies` if `crio version` it not verbose 4073764a8 Update nixpkgs 9aa7afcec Update golangci-lint and config cb70d29b9 internal: fix the release version for release notes 3890a7222 internal/storage.runtimeService.createContainerOrPodSandbox(): read ID maps b325ad692 Set umask for crio container 28f910952 build(deps): bump github.com/docker/docker 53431c68a runtimeVM: fix Exec(sync) overwriting the initial spec args 400793fab vendor: use go-github to fetch the latest tag from github e9a932f04 Update bom and use binary directly 4edb9e8ea Fixed signature check for commit-based downloads a86fbb63e Fixed issues found by shellcheck 0c029c62e Fixed signature check 9e5b533a3 Fixed version substitution bbe4b04a5 Generate proper signature check 683e4f858 test: run irqbalance tests serially to avoid race condition e07246fc1 Update crun to v1.8.3 and runc to v1.5.1 fd35a25b1 OCPBUGS-10970: Fix the interrupt mask width when encoding 934765cf6 Update zeitgeist to v0.4.1 5e512d6ef create the metrics endpoint with correct shutdown logic 2b7efa752 build(deps): bump github.com/urfave/cli/v2 from 2.24.4 to 2.25.1 604e7bb6b Remove `scripts/node_e2e_installer` f1e9c0e8c server: wire support for userns volumes 973c51a7b vendor: bump cri-api a8bd24c60 test: add irqbalance dependency to CI ed7bbaf28 contrib/test/ci: disable failing sig-network test for v1.27 release 2184981ea Remove SELinux policy download e57047253 Add spdx signature and cert to release notes d7cf40b7e oci: Enable checkpointing of file locks d719028aa build(deps): bump golang.org/x/sys from 0.5.0 to 0.6.0 c4c583014 go.mod: update CDI dependency to 0.5.4. 11cbc5fd7 build(deps): bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc 44d878e93 test: add irqbalance dependency f74da33a7 build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc 4bb2e930e Fix get script f556f5a58 build(deps): bump sigstore/cosign-installer from 2 to 3 244982179 Bump crun to v1.8.1 246c59139 go.mod: update github.com/containerd/nri to 0.3.0. be2cc0eb5 build(deps): bump cachix/install-nix-action from 19 to 20 11c9401a8 build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.2 cd8346082 Pin nix version to fix static builds f112d497d Add new parameter hostnetwork-disable-selinux 96906a86c [CI] Fix validate-completion ab8fc4f7d build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2 dde09588c build(deps): bump github.com/containers/storage from 1.45.3 to 1.45.4 b769f0dbb build(deps): bump github.com/containers/podman/v4 from 4.4.1 to 4.4.2 9f9fc8a19 build(deps): bump github.com/containerd/containerd 1a488f516 test: Avoid parallel execution b74d76c79 test: add integration test for irqbalance e15854938 highperfhooks: add option to configure irqbalance restore 3f9d21c7e Fix cgroup leak for systemd cgroup driver 7af09fa0a unit-test: call UpdateContainerResources when nri enabled 828ad0200 nri: add protection against nil dereference 97b03c338 build(deps): bump github.com/containerd/fifo from 1.0.0 to 1.1.0 b267ed784 highperfhooks: add logs in the irqbalance restore 3774df887 highperfhooks: test: use ExpectWithOffset e21dd08e9 highperfhook: use internal/.log, not logrus 9ee51c429 docs-validation: try String() for struct field values. ab3b401b0 internal/oci: don't crash when getting unset Spec. fa2abd239 test: update NRI BATS test. 1d0ca6fd1 completions, docs: update completions and man pages. f5afa87ce config,criocli: update NRI deps, configuration. 7cfdaebb6 Update to c/image 5.24.2 a78a7d470 build(deps): bump github.com/onsi/gomega from 1.27.0 to 1.27.1 38455da55 build(deps): bump github.com/psampaz/go-mod-outdated from 0.8.0 to 0.9.0 221a7d0f9 build(deps): bump github.com/onsi/ginkgo/v2 from 2.8.1 to 2.8.3 95f5c57aa build(deps): bump cachix/install-nix-action from 18 to 19 1f909bc5e test/*: add test for checking the /etc folder permission ef164da82 server: fix the permission issue for `/etc` 7b812d0ab build(deps): bump github.com/containers/buildah from 1.29.0 to 1.29.1 7c21bc7d7 build(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.0 a091d6c8f build(deps): bump github.com/urfave/cli/v2 from 2.24.3 to 2.24.4 25b06a987 Remove `zeitgeist` from golang dependencies ba4d53c14 Bump golang dependencies 9216a817a Revert "main: shutdown server only once" d573f0406 Drop `ENABLE_POD_EVENTS` var from e2e installer script 79a6d4fec Fix roadmap links b59e59572 test: use container_sleep for idempotent test 169908b5a Update github.com/containers/image to v5.24.0 62173e974 main: shutdown server only once 2f2d152d8 Bump the CRIO commit to the latest main 10a6096f9 Add documentation about how to use tracing 66b6bb3bc Switch to go 1.20 for CI jobs 49cbab56a dependencies: bump conmon to v2.1.6 679bbbf20 Closes #5653 Return ContainerResources in ContainerStatusResponse Signed-off-by: T K Chandra Hasan 0e7fdcaf0 Update opencontainers/runtime-tools to a6a073817ab0. 4cf3d3774 runtimeVM: ignore missing shim path for deleted containers c80ae0acd runtimeVM: notify server that the container exited 5d23b6a02 contrib/test/ci/*: refactor CI to build a cache image 7600cb4e3 contrib/test/ci: adds time information to tasks 1fb1771bd go.mod: update github.com/containerd/nri. 905bd1b37 Take MaskedPaths and ReadonlyPaths from checkpointed container cd406494f build(deps): bump google.golang.org/grpc from 1.52.0 to 1.52.3 9a2dae755 Fix unit tests 1edf19505 build(deps): bump k8s.io/klog/v2 from 2.80.1 to 2.90.0 193ae758c build(deps): bump github.com/onsi/gomega from 1.25.0 to 1.26.0 a6a95fe96 Add container stats to the ListPodSandboxStats response 8b3fca69a contrib/cni: provide more context around file selection f648ff47f build(deps): bump github.com/urfave/cli/v2 from 2.23.7 to 2.24.1 72e54a7de Add additional metadata to inspect and checkpoint a9d845a6b Update to latest version of checkpointctl 7a8f62f1b Removed pod checkpointing support f291de93a Make storage unmount less strict f3ed08a35 build(deps): bump k8s.io/release from 0.14.0 to 0.15.0 1226a601c packit: install wget before build 8e42d5360 build(deps): bump github.com/containers/ocicrypt from 1.1.6 to 1.1.7 d85a8b3cf Update OTEL dependencies 42c00941b Update CNI plugins to v1.2.0 437d7bbf9 GOVERNANCE: add org member tier 8fc1e91d3 CoC: replace with CNCF one 0059f24a6 mention MAINTAINERS file in GOVERNANCE dbf1ee997 Add MAINTAINERS.md document 700fe6590 README: add roadmap 35cce86f8 add a public roadmap ae9712231 update GOVERNANCE.md file 5ef5271b3 build(deps): bump mvdan.cc/sh/v3 from 3.5.1 to 3.6.0 34a7052a8 build(deps): bump helm.sh/helm/v3 from 3.10.0 to 3.10.3 1cc037f57 build(deps): bump github.com/onsi/gomega from 1.24.1 to 1.25.0 ff3aa8105 build(deps): bump sigs.k8s.io/release-sdk from 0.9.3 to 0.9.7 f57e36946 build(deps): bump github.com/sigstore/cosign from 1.11.1 to 1.12.0 ae60a2bb6 Update vendor of opencontainers/runtime-tools 47922035d Allow cross building from non-linux dfc43f7ba Inject release-notes branch from GitHub actions 6d35f54d7 build(deps): bump google.golang.org/grpc from 1.51.0 to 1.52.0 faeaceddb ci-verify: Run get-scripts only on main branch 752bf4d69 Update critest parameters 89029ed43 hostport: use generic Set dcc7437db server: update streaming interface to take context 1135dbad5 ci: bump cri-o.spec file to 1.26 5ae6ba51d static: bump go version 9e1b732a9 bump to cri-tools 1.26.0 2d0457814 server: add support for new CRI calls 9f1c91349 server/streaming: add context to methods eb4719b55 vendor: bump kube to 1.26.0 815a426e8 Enable upstream CI to test node e2e with evented pleg feature 404afb004 Bump e2e-installer script with the latest commit a410ce6e8 mocks: update with new c/storage mocks 43ed06ee4 vendor: bump storage to v1.44.1-0.20230101110555-a747b27fe4ca fadc73bc7 job get script: fix conflist path 666a9e91c fix inconsistent documentation for default value of b78350830 build(deps): bump actions/stale from 6 to 7 79b1b5937 Pass tracer to conmon-rs client Signed-off-by: Bruce Ashfield

cri-o: update to 1.26.2

2023-04-05T20:03:55+00:00

Bumping cri-o to version v1.26.2-10-gc0557b868, which comprises the following commits: 6ee82e547 Update crun to v1.8.3 and runc to v1.5.1 4bea0d45b create the metrics endpoint with correct shutdown logic 778169257 Update CNI plugins to v1.2.0 8f943a9cc Add spdx signature and cert to release notes ab5daed67 Fix release notes build for release-1.26 branch fc032744b version: bump to v1.26.2 141c69ac6 build(deps): bump sigstore/cosign-installer from 2 to 3 46e4d5286 Bump crun to v1.8.1 12cc52830 Pin nix version to fix static builds 2c3c8c7d8 unit-test: call UpdateContainerResources when nri enabled d3504291c nri: add protection against nil dereference 8438fdf40 docs-validation: try String() for struct field values. b997d9a61 internal/oci: don't crash when getting unset Spec. 96c12e147 test: update NRI BATS test. d19c65049 completions, docs: update completions and man pages. 3c1bb518c config,criocli: update NRI deps, configuration. 9831dddef Fix cgroup leak for systemd cgroup driver 0c32aa50d Update to c/image 5.24.2 0015d0477 test/*: add test for checking the /etc folder permission b1113fa78 server: fix the permission issue for `/etc` 7f60e0419 Update github.com/containers/image to v5.24.0 1f0b14da9 Update opencontainers/runtime-tools to a6a073817ab0. 0841fe69a Add container stats to the ListPodSandboxStats response 3facc028e Make storage unmount less strict b93180c99 Inject release-notes branch from GitHub actions 5ce93c60e ci-verify: Run get-scripts only on main branch d8c6707bd version: bump to 1.26.1 741be35fa vendor: bump storage to v1.44.1-0.20230101110555-a747b27fe4ca f49c3b608 Update critest parameters 1b1b95af8 hostport: use generic Set 1e66eb86e server: update streaming interface to take context 2adc326f6 ci: bump cri-o.spec file to 1.26 ae0a0d5f9 static: bump go version 8f8228b77 bump to cri-tools 1.26.0 fff07d82f server: add support for new CRI calls cac6a729e server/streaming: add context to methods ec5beb231 vendor: bump kube to 1.26.0 8ffb14733 mocks: update with new c/storage mocks 48d0bf4ca job get script: fix conflist path 7705f9942 bump to v1.26.0 d06cae7c9 contrib/cni: use cniVersion 0.3.1 for ipv4 only bridge config 5526fae33 bundle: use ipv4 only config because of gh action limitation 1b8b28433 Support evented PLEG in CRI-O 5783c3254 Bump cri-api to support evented pleg 29ce5a7b2 get script: fix conflist path f317b267d Fix-6080: Update the CNI version to 1.0.0 54b7b5fc0 test, Makefile: hook NRI tests into localintegration. ab73c1dcd test/nri: add a test client with basic NRI tests. 36305e7bd server: hook NRI into request processing. 773e6e005 nri: add experimental NRI adaptation interface. 907f4edf5 config,cli: add support for NRI configuration. a6430c8c8 Add test for conmonrs cgroup with no infra container b6f92b04f Add test for default conmon cgroup type f323d022c Fix applying cgroup for conmonrs when pinned 6c62954e8 Remove cri wrapper package 093d680dd server/metrics: Update seccomp notifier metrics to reduce cardinality fe2458341 ci: make golangci-lint happy da96d6be4 Support checkpointing infra less containers 4a541607e build(deps): bump github.com/onsi/ginkgo/v2 from 2.5.0 to 2.6.1 ebe73f411 build(deps): bump google.golang.org/grpc from 1.50.1 to 1.51.0 7d8f2328f Merge log and metrics interceptor cb8aa99d7 ResourceStore: delete entries after they're used 1b42a3d4c Use containerd v1.7.0-beta.0 41dca27cb server: fail if HOME variable has a newline c1d7c54fa systemd: use on-failure as restart policy 88782d59c contrib/test/ci: fix SELinux permission issue on RHEL9 8132ef511 ci: update system-packages.yml to install gpgme-devel on fedora ac319a568 OWNERS: move vrothberg to emeritus approvers c095c4781 build(deps): bump github.com/urfave/cli/v2 from 2.23.5 to 2.23.7 7150ba10b contrib/test/ci: fix the when condition for CentOS Stream 9 0ffec79a4 contrib/test/ci: enable crb repo for CentOS Stream 9 905e8485a Update security process 3232ffe2a Downgrade cgroupfs test to Ubuntu 20.04 7d848b3c1 Fix GitHub actions CI b6b4f8235 Add Reddit to ADOPTERS.md 189e9f7eb Disable typecheck linter b9d94374b Bump golang dependencies 5e71e4f9c contrib/test: set env variables for integration tests 22249fcf9 build(deps): bump sigs.k8s.io/bom from 0.3.0 to 0.4.1 a67e7776c Port remaining logrus with internal/log 14547d489 Pass ctx so that more tracing spans could be created 19bc7330f internal/log: add a function to start new tracing span 834b60336 Setup logrus hook to attach logs to traces ef3bed00b Remove CRI v1alpha2 support c9316ec2a Update golangci-lint and config 3b631242b Add seccomp notifier feature e3416bda9 build(deps): bump cachix/cachix-action from 11 to 12 71252c17b Disable checkpoint image check as early as possible 658a11552 Correctly extend $PATH before calling conmon during restore a93201a8e Use correct key for tracing hostname field 923f665ca Add docs that `tracing-sampling-rate-per-million` set to 1000000 refers to always sample 999ba7f59 Fix CI 1e8229d45 build(deps): bump github.com/urfave/cli/v2 from 2.19.2 to 2.20.2 3327991b0 build(deps): bump cachix/cachix-action from 10 to 11 0ce9fb039 build(deps): bump google.golang.org/grpc from 1.50.0 to 1.50.1 1f8221f07 build(deps): bump cachix/install-nix-action from 17 to 18 376f7e9df Update dependencies 316830590 Add logs to OpenTelemetry traces e56855dc7 docs: updated kubernetes tutorial 53e631663 Update conmon-rs to latest `main` 8bf89f341 Minor Checkpoint/Restore improvements 62d77513b Track type of all bind mounts during checkpointing 331f30bfb build(deps): bump google.golang.org/grpc from 1.49.0 to 1.50.0 997032dec .github/CODEOWNERS: drop runcom a7a279c84 build(deps): bump sigs.k8s.io/zeitgeist from 0.3.2 to 0.3.5 fb66985f1 config: avoid segfault when workloads.resources is nil 0244fee08 support checkpointing to oci image ae5d39c74 Fix lint CI on `main` eabfdb404 [#5240] update supported OS versions 26614cad9 build(deps): bump github.com/urfave/cli/v2 from 2.15.0 to 2.17.1 f7c9c2754 build(deps): bump github.com/Microsoft/go-winio from 0.5.2 to 0.6.0 42bb61393 fix: give loopback a name 9ee3457ff test/README: Update url for kata containers f1be99faa images/os/Dockerfile: Delete this, it's dead code 570a4c1b9 config: translate monitor fields when printing config 32e6520ff Update config readme 5d20c76fb Allow complete Runtimes config to change 88cc2f9b9 build(deps): bump k8s.io/klog/v2 from 2.70.1 to 2.80.1 28861ed60 build(deps): bump actions/stale from 5 to 6 88c1f772f build(deps): bump github.com/opencontainers/image-spec b6755fc94 build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc c9ba93e08 build(deps): bump github.com/containers/podman/v4 from 4.2.0 to 4.2.1 2a876f1a7 build(deps): bump github.com/containers/buildah from 1.27.0 to 1.28.0 db20b31e1 Do not use deprecated SetNames 4ea5eeddf build(deps): bump github.com/container-orchestrated-devices/container-device-interface 481683497 config: do not remove runc if different default runtime f24ea6702 workloads: fix whitespace b3f877a64 template: fix whitespace and comments in runtimes table b7b56c202 contrib/test: set LOG_DIR to debug kubernetes issues 0b0e16b1c Update conmon-rs 8e1a561e8 Bump conmon-rs code to latest `main` 506e0cbef contrib/test: drop userns integration tests 9db3e8e64 Add basic integration tests for runtime reload 877b5fbdc Add notes on runtime reload support to documentation a3fb007fb Reload runtime configs on reload 29bff1526 Invert conditional check in ValidateDefaultRuntime 2ba6ee2ed Move default runtime validation to its own function 018657b37 use cri-tools version from dependencies.yaml 406f367cb use AddInheritableCapabilities 9070d982d config: add field AddInheritableCapabilities 9d5fbfd90 resourcestore: add test for stages 40d41e3fb server: update stages according to progress with resource creation bce2bc388 resource store: return stage when a watcher is requested a8e2fc166 resource store: introduce stages 1955be644 Add conmon-rs e2e to ansible playbook 24304da5e server: return already created ID for duplicated requests 6b627cbc0 cli: fix some inconsistencies in the help text 0cdd90155 Update vendored files 14926effc go.mod: update goresctrl to v0.3.0 53182dd9b build(deps): bump github.com/urfave/cli/v2 from 2.11.2 to 2.15.0 3b6b98872 Add scripts to run node e2e tests using custom cri-o builds 6d66ea7e6 Fix integration CI runs 7a0b131f5 build(deps): bump sigs.k8s.io/zeitgeist from 0.3.1 to 0.3.2 388032759 metrics: close listener on shutdown ee5d97254 cgmgr: use NewSystemd from createSandboxCgroup aede1956a contrib/test/ci: add rhel9 variant-specific changes 8ec499266 removes async b2a72cbd8 migrates tests to run on GCP 76ec212ea Update build instructions for RHEL 8 distribution Signed-off-by: Bruce Ashfield

containers: use VIRTUAL-RUNTIME variable to allow container runtime flexibility

2023-03-08T22:08:02+00:00

Rather than using virtual-runc (which choses between the old docker and opencontainer variants), use the newly added VIRTUAL-RUNTIME_container-runtime variable, which allows switching betwen runc and crun. Signed-off-by: Bruce Ashfield

container-host-config: provide /etc/containers/policy.json

2023-02-21T15:11:47+00:00

The /etc/containers/policy.json[1] file is used to specify verification policy. For now, we can see it's used by both cri-o and skopeo. To avoid conflict, we use container-host-config to provide this file and make both skopeo and cri-o depend on it. [1] https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md Signed-off-by: Chen Qi Signed-off-by: Bruce Ashfield

cri-o: update crio.conf to match the current version

2023-02-17T20:34:51+00:00

The old crio.conf file can cause cri-o start failure. The error message is as below. validating runtime config: runtime validation: failed to \ translate monitor fields for runtime runc: cgroupfs manager \ conmon cgroup should be 'pod' or empty Use new crio.conf file to solve this issue. The file is generated by 'crio --config="" config --default' command, as indicated in the old crio.conf file. With this config file update, the crio.service can now start correctly. Signed-off-by: Chen Qi Signed-off-by: Bruce Ashfield