Nothing Special   »   [go: up one dir, main page]

Skip to content

Tags: BenTheElder/containerd

Tags

v1.2.6

Toggle v1.2.6's commit message

Verified

This tag was signed with the committer’s verified signature.
dmcgowan Derek McGowan
containerd 1.2.6

Welcome to the v1.2.6 release of containerd!

The sixth patch release for `containerd` 1.2 contains fixes
for the containerd client, the CRI plugin and containerd io
and mount handling.

It whitelists 2 new syscalls in the default seccomp profile,
and also updates CNI to v0.7.5 to include the fix for [CVE-2019-9946](https://nvd.nist.gov/vuln/detail/CVE-2019-9946).

All these changes are noted below.
### Notable Updates
* Allow overriding package name in `containerd --version` output. [containerd#3098](containerd#3098)
* Add 2 new syscalls `io_pgetevents` and `statx` in the default seccomp whitelist. [containerd#3113](containerd#3113) [containerd#3115](containerd#3115)
* Fix a bug that custom containerd cgroup path does not work in containerd 1.2.5. [containerd#3143](containerd#3143)
* Fix a bug in the containerd client that `WithAllCapabilities` applies incomplete capability list. [containerd#3147](containerd#3147)
* Fix a bug that container output can be incomplete when stdout and stderr are pointed to the same file. [containerd#3118](containerd#3118)
* Fix a bug that containerd can't properly handle space in mount point path. [3161](containerd#3161)
* cri: fix a bug that containers being gracefully stopped are SIGKILLed when kubelet is restarted. [cri#1098](containerd/cri#1098)
* cri: Fix a bug that pod UTS namespace is used for host network. [cri#1111](containerd/cri#1111)
* cri: Update CNI plugins to v0.7.5 for [CVE-2019-9946](https://nvd.nist.gov/vuln/detail/CVE-2019-9946).
* Update cri to eb926cd79d3bac188dcc4ed7694fc9298f8831be. [containerd#3174](containerd#3174)
* Update runc to v1.0.0-rc7-6-g029124da [containerd#3183](containerd#3183) to fix potential container start failure on non-SELinux system. [runc#2030](opencontainers/runc#2030)

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

### Contributors

* Lantao Liu
* Sebastiaan van Stijn
* Michael Crosby
* Phil Estes
* Derek McGowan
* Peter Wagner
* Akihiro Suda
* Avi Kivity

### Changes

* [`894b81a4b8`](containerd@894b81a) Merge pull request  [containerd#3180](containerd#3180) from Random-Liu/1.2.6-release-note
* [`4be9af65b9`](containerd@4be9af6) Prepare 1.2.6 containerd release.
* [`9d87dddaec`](containerd@9d87ddd) Merge pull request  [containerd#3183](containerd#3183) from thaJeztah/1.2_bump_runc
* [`e01177391d`](containerd@e011773) bump runc to 029124da (v1.0.0-rc7-6-g029124da)
* [`7f8cf855a0`](containerd@7f8cf85) Merge pull request  [containerd#3174](containerd#3174) from Random-Liu/update-cri-release-1.2
* [`7c1ca26e2d`](containerd@7c1ca26) Update cri to eb926cd79d3bac188dcc4ed7694fc9298f8831be
* [`02fd892d59`](containerd@02fd892) Merge pull request  [containerd#3164](containerd#3164) from Random-Liu/update-cri-release-1.2
* [`67def02025`](containerd@67def02) Update cri to ffd9a66034aee582db04cf4c59e9b2262fd4fc59.
* [`f2702c52a9`](containerd@f2702c5) Merge pull request  [containerd#3161](containerd#3161) from thaJeztah/1.2_backport_fix_parseinfofile_parsing
* [`f8d644ddc0`](containerd@f8d644d) Use pkg/errors for all errors
* [`50cb294d08`](containerd@50cb294) fix parseInfoFile does not handle spaces in filenames
* [`0d58ce1a2b`](containerd@0d58ce1) Merge pull request  [containerd#3154](containerd#3154) from thaJeztah/1.2_backport_issue_3118
* [`76d1f3e692`](containerd@76d1f3e) runtime: guard Close() until both streams are complete
* [`5236247ada`](containerd@5236247) runtime: log IO error when copying output streams
* [`5066e517ff`](containerd@5066e51) Merge pull request  [containerd#3147](containerd#3147) from Random-Liu/cherrypick-#3137-release-1.2
* [`de1b991122`](containerd@de1b991) Fix race and panic.
* [`667ff6a451`](containerd@667ff6a) Merge pull request  [containerd#3143](containerd#3143) from thaJeztah/1.2_backport_bump_cgroups
* [`7f8deb37ed`](containerd@7f8deb3) Merge pull request  [containerd#3141](containerd#3141) from thaJeztah/1.2_backport_bump_runc_v1.0.0-rc7
* [`1e75661aed`](containerd@1e75661) bump containerd/cgroups 4994991
* [`16a56020e6`](containerd@16a5602) update opencontainers/runc v1.0.0-rc7
* [`6d14516877`](containerd@6d14516) Merge pull request  [containerd#3113](containerd#3113) from thaJeztah/1.2_backport_whitelist_statx
* [`c9042ae5b5`](containerd@c9042ae) Merge pull request  [containerd#3115](containerd#3115) from thaJeztah/1.2_backport_whitelist_io_pgetevents
* [`2c2a86b019`](containerd@2c2a86b) seccomp: whitelist io_pgetevents
* [`b0a8b6dd0b`](containerd@b0a8b6d) seccomp: whitelist statx syscall
* [`5296db1b90`](containerd@5296db1) Merge pull request  [containerd#3098](containerd#3098) from thaJeztah/1.2_backport_override_package_name
* [`7700a82a47`](containerd@7700a82) Makefile: allow overriding package name

### Changes from containerd/cgroups

* [`4994991`](containerd/cgroups@4994991) Merge pull request  [containerd#79](containerd/cgroups#79) from crosbymichael/load-none
* [`453efe3`](containerd/cgroups@453efe3) Return ErrCgroupDeleted when no subsystems

### Changes from containerd/cri

* [`eb926cd7`](containerd/cri@eb926cd) Merge pull request  [containerd#1115](containerd/cri#1115) from thaJeztah/1.2_backport_bump_selinux
* [`c04ec48d`](containerd/cri@c04ec48) bump opencontainers/selinux v1.2.1
* [`24a507b3`](containerd/cri@24a507b) bump opencontainers/selinux to v1.2
* [`ffd9a660`](containerd/cri@ffd9a66) Merge pull request  [containerd#1111](containerd/cri#1111) from Random-Liu/cherrypick-#1102-release-1.2
* [`83d24561`](containerd/cri@83d2456) No UTS namespace for hostnetwork.
* [`b2937694`](containerd/cri@b293769) Merge pull request  [containerd#1109](containerd/cri#1109) from Random-Liu/cherrypick-#1108-release-1.2
* [`8ec2da6d`](containerd/cri@8ec2da6) Update CNI to v0.7.5.
* [`267a8caf`](containerd/cri@267a8ca) Merge pull request  [containerd#1104](containerd/cri#1104) from Random-Liu/cherrypick-#1099-release-1.2
* [`03eae981`](containerd/cri@03eae98) Do not SIGKILL container if container stop is cancelled.
* [`4bfcd93a`](containerd/cri@4bfcd93) Merge pull request  [containerd#1097](containerd/cri#1097) from Random-Liu/cherrypick-#1083-release-1.2
* [`b3eab098`](containerd/cri@b3eab09) Support docker 18.09 in the test script.
* [`087738ab`](containerd/cri@087738a) Merge pull request  [containerd#1091](containerd/cri#1091) from Random-Liu/update-containerd-release-1.2
* [`befeac30`](containerd/cri@befeac3) Update containerd to v1.2.5.

### Dependency Changes

Previous release can be found at [v1.2.5](https://github.com/containerd/containerd/releases/tag/v1.2.5)

* **github.com/containerd/cgroups**           dbea6f2 -> 4994991
* **github.com/containerd/cri**               a92c40017473cbe0239ce180125f12669757e44f -> eb926cd79d3bac188dcc4ed7694fc9298f8831be
* **github.com/containernetworking/plugins**  v0.7.0 -> v0.7.5
* **github.com/opencontainers/runc**          2b18fe1d885ee5083ef9f0838fee39b62d653e30 -> 029124da7af7360afa781a0234d1b083550f797c
* **github.com/opencontainers/selinux**       b6fa367ed7f534f9ba25391cc2d467085dbb445a -> v1.2.1

v1.1.7

Toggle v1.1.7's commit message

Verified

This tag was signed with the committer’s verified signature.
dmcgowan Derek McGowan
containerd 1.1.7

Welcome to the v1.1.7 release of containerd!

This is the seventh patch release for the `containerd` 1.1 release. This
release contains fixes for image management, containerd client, CRI plugin
and containerd io handling.

It also updates runc to include an improved fix for [CVE-2019-5736](https://nvd.nist.gov/vuln/detail/CVE-2019-5736)
to reduce the increased memory-consumption introduced by the original
patch, updates CNI to v0.7.5 to include the fix for [CVE-2019-9946](https://nvd.nist.gov/vuln/detail/CVE-2019-9946),
adds 2 new syscalls in the default seccomp profile.

All these changes are noted below.
## Notable Updates
* Fix an issue that non-existent parent directory in image layers is created with permission `0700`. [containerd#3017](containerd#3017)
* Fix an issue that snapshots of the base image can be deleted by mistake, when images built on top of it are deleted. [containerd#3088](containerd#3088)
* Allow overriding package name in `containerd --version` output. [containerd#3097](containerd#3097)
* Add 2 new syscalls `io_pgetevents` and `statx` in the default seccomp whitelist. [containerd#3112](containerd#3112) [containerd#3114](containerd#3114)
* Fix a bug that container output can be incomplete when stdout and stderr are pointed to the same file. [containerd#3156](containerd#3156)
* cri: fix a bug that pod can't get started when the same volume is defined differently in the image and the pod spec. [cri#1059](containerd/cri#1059)
* cri: fix a bug that causes container start failure after in-place upgrade containerd to 1.2.4+ or 1.1.6+. [cri#1082](containerd/cri#1082)
* cri: fix a bug that containers being gracefully stopped are SIGKILLed when kubelet is restarted. [cri#1098](containerd/cri#1098)
* cri: Fix a bug that pod UTS namespace is used for host network. [cri#1111](containerd/cri#1111)
* cri: Update CNI plugins to v0.7.5 for [CVE-2019-9946](https://nvd.nist.gov/vuln/detail/CVE-2019-9946)
* Update cri to f8171b4530bed8992973cc4a2f24efe53b821d53. [3175](containerd#3175)
* Update runc to v1.0.0-rc7-6-g029124da [containerd#3184](containerd#3184) to include the improved fix for CVE-2019-5736, and fix a potential container start failure on non-SELinux system [runc#2030](opencontainers/runc#2030).

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

### Contributors

* Lantao Liu
* Michael Crosby
* Phil Estes
* Sebastiaan van Stijn
* Akihiro Suda
* Derek McGowan
* Peter Wagner
* Andrei Vagin
* Avi Kivity
* Claudia Beresford
* Daniel, Dao Quang Minh
* John Howard
* Kenfe-Mickaël Laventure
* Lu Jingxiao
* Madhan Raj Mookkandy
* Nikos Anastopoulos
* Parav Pandit
* Sudeesh John
* Wei Fu

### Changes

* [`4278fbc243`](containerd@4278fbc) Merge pull request  [containerd#3181](containerd#3181) from Random-Liu/prepare-1.1.7
* [`f8e22625c6`](containerd@f8e2262) Prepare v1.1.7 release.
* [`af0bc2e035`](containerd@af0bc2e) Merge pull request  [containerd#3184](containerd#3184) from thaJeztah/1.1_bump_runc
* [`c186fd8d8c`](containerd@c186fd8) bump runc to 029124da (v1.0.0-rc7-6-g029124da)
* [`82ebb90280`](containerd@82ebb90) Merge pull request  [containerd#3175](containerd#3175) from Random-Liu/update-cri-release-1.1
* [`125c9a0046`](containerd@125c9a0) Update cri to f8171b4530bed8992973cc4a2f24efe53b821d53.
* [`41b3a316f7`](containerd@41b3a31) Merge pull request  [containerd#3165](containerd#3165) from Random-Liu/update-cri-release-1.1
* [`3afed24a4e`](containerd@3afed24) Update cri to b9c06fd1410f1e6699a83277887af399a1342736.
* [`01cd85f6e8`](containerd@01cd85f) Merge pull request  [containerd#3156](containerd#3156) from thaJeztah/1.1_backport_issue_3118
* [`de85314d4f`](containerd@de85314) runtime: guard Close() until both streams are complete
* [`255da2a7b0`](containerd@255da2a) runtime: log IO error when copying output streams
* [`2bf4d3a650`](containerd@2bf4d3a) Merge pull request  [containerd#3140](containerd#3140) from thaJeztah/1.1_backport_bump_runc_v1.0.0-rc7
* [`25b40629d4`](containerd@25b4062) update opencontainers/runc v1.0.0-rc7
* [`cdc2fe6d81`](containerd@cdc2fe6) Merge pull request  [containerd#3112](containerd#3112) from thaJeztah/1.1_backport_whitelist_statx
* [`8f6bcb2bba`](containerd@8f6bcb2) Merge pull request  [containerd#3114](containerd#3114) from thaJeztah/1.1_backport_whitelist_io_pgetevents
* [`58bee8125b`](containerd@58bee81) seccomp: whitelist io_pgetevents
* [`03d129bdb2`](containerd@03d129b) seccomp: whitelist statx syscall
* [`9a0a5fd1e7`](containerd@9a0a5fd) Merge pull request  [containerd#3097](containerd#3097) from thaJeztah/1.1_backport_override_package_name
* [`d28f4aa242`](containerd@d28f4aa) Makefile: allow overriding package name
* [`8ecb055c07`](containerd@8ecb055) Merge pull request  [containerd#3083](containerd#3083) from thaJeztah/1.1_backport_bump_runc
* [`21abff907c`](containerd@21abff9) Vendor opencontainers/runtime-spec 29686dbc
* [`49b7692b16`](containerd@49b7692) Vendor in runtime spec referencing windows namespace
* [`62e4a2c8e7`](containerd@62e4a2c) Update containerd dependencies for 1.2
* [`95a8d1d933`](containerd@95a8d1d) Merge pull request  [containerd#3088](containerd#3088) from fuweid/me-cp-2876-release-1.1
* [`4e69228971`](containerd@4e69228) bugfix: unpack should always set the snapshot gc label
* [`f86b114ac5`](containerd@f86b114) update runc to 2b18fe1d885ee5083ef9f0838fee39b62d653e30
* [`52bfc9f530`](containerd@52bfc9f) Merge pull request  [containerd#3078](containerd#3078) from thaJeztah/1.1_bump_golang
* [`8f044b8320`](containerd@8f044b8) Bump to Go 1.11.x
* [`0fc64b682c`](containerd@0fc64b6) Workaround for gofmt change in Go 1.11
* [`45b8d86585`](containerd@45b8d86) Fix the formatting directives error during compilation
* [`9d16e2e660`](containerd@9d16e2e) Merge pull request  [containerd#3039](containerd#3039) from Random-Liu/cherrypick-#3018-release-1.1
* [`ee4754550a`](containerd@ee47545) Unpack should set 0755 when the parent directory doesn't exist.

### Changes from containerd/cgroups

* [`5e61083`](containerd/cgroups@5e61083) Merge pull request  [containerd#50](containerd/cgroups#50) from jingxiaolu/master
* [`0d1587c`](containerd/cgroups@0d1587c) Add interface AddTask to control groups. So that we can set tasks when we need.
* [`07683a6`](containerd/cgroups@07683a6) Merge pull request  [containerd#45](containerd/cgroups#45) from anastop/master
* [`15ef4c3`](containerd/cgroups@15ef4c3) Add Update method for the cpuset controller
* [`c755602`](containerd/cgroups@c755602) Merge pull request  [containerd#41](containerd/cgroups#41) from estesp/update-travis-go
* [`0a357bb`](containerd/cgroups@0a357bb) Update Go versions for travis
* [`5539584`](containerd/cgroups@5539584) Fix incorrect use of OCI runtime specs-go cgroup dev types
* [`bf7d89f`](containerd/cgroups@bf7d89f) Merge pull request  [containerd#40](containerd/cgroups#40) from containerd/license
* [`f1d9380`](containerd/cgroups@f1d9380) Add license to files
* [`78a98a6`](containerd/cgroups@78a98a6) Merge pull request  [containerd#39](containerd/cgroups#39) from paravmellanox/master
* [`ccd26c4`](containerd/cgroups@ccd26c4) Add support for rdma cgroup

### Changes from containerd/cri

* [`f8171b45`](containerd/cri@f8171b4) Merge pull request  [containerd#1117](containerd/cri#1117) from thaJeztah/1.0_backport_bump_selinux
* [`961bbf32`](containerd/cri@961bbf3) bump opencontainers/selinux v1.2.1
* [`c7ec47f5`](containerd/cri@c7ec47f) bump opencontainers/selinux to v1.2
* [`b9c06fd1`](containerd/cri@b9c06fd) Merge pull request  [containerd#1112](containerd/cri#1112) from Random-Liu/cherrypick-#1102-release-1.0
* [`c29999cc`](containerd/cri@c29999c) No UTS namespace for hostnetwork.
* [`15a38626`](containerd/cri@15a3862) Merge pull request  [containerd#1110](containerd/cri#1110) from Random-Liu/cherrypick-#1108-release-1.0
* [`5ca7e895`](containerd/cri@5ca7e89) Update CNI to v0.7.5.
* [`04ccb9ca`](containerd/cri@04ccb9c) Merge pull request  [containerd#1105](containerd/cri#1105) from Random-Liu/cherrypick-#1099-release-1.0
* [`b2568d2e`](containerd/cri@b2568d2) Do not SIGKILL container if container stop is cancelled.
* [`3c81b301`](containerd/cri@3c81b30) Merge pull request  [containerd#1087](containerd/cri#1087) from Random-Liu/cherrypick-#1085-release-1.0
* [`134c2f35`](containerd/cri@134c2f3) Fix /etc/hostname backward compatibility issue for in-place upgrade.
* [`5b8046c2`](containerd/cri@5b8046c) Merge pull request  [containerd#1073](containerd/cri#1073) from Random-Liu/cherrypick-#1072-release-1.0
* [`b01bbde7`](containerd/cri@b01bbde) Use clean path for map and comparison.
* [`d35c6741`](containerd/cri@d35c674) Merge pull request  [containerd#1068](containerd/cri#1068) from Random-Liu/cherrypick-#1055-release-1.0
* [`90bc4a66`](containerd/cri@90bc4a6) Use the correct sandbox config.
* [`64e3e2d0`](containerd/cri@64e3e2d) Merge pull request  [containerd#1051](containerd/cri#1051) from Random-Liu/update-containerd-release-1.0
* [`5f8a6b6b`](containerd/cri@5f8a6b6) Update containerd to 878924b.

### Changes from containerd/go-runc

* [`14606eb`](containerd/go-runc@14606eb) Merge pull request  [containerd#43](containerd/go-runc#43) from AkihiroSuda/rootless
* [`0194529`](containerd/go-runc@0194529) add support for --rootless
* [`74719bd`](containerd/go-runc@74719bd) Merge pull request  [containerd#42](containerd/go-runc#42) from Random-Liu/expose-parsePSOutput
* [`fdf39b3`](containerd/go-runc@fdf39b3) Expose parsePSOutput.
* [`301f7c1`](containerd/go-runc@301f7c1) Merge pull request  [containerd#41](containerd/go-runc#41) from masters-of-cats/master
* [`07e192d`](containerd/go-runc@07e192d) Use user-specific temp directory if set
* [`f271fa2`](containerd/go-runc@f271fa2) Merge pull request  [containerd#40](containerd/go-runc#40) from avagin/tty
* [`400dfa3`](containerd/go-runc@400dfa3) Add ConsoleSocket to RestoreOpts

### Dependency Changes

Previous release can be found at [v1.1.6](https://github.com/containerd/containerd/releases/tag/v1.1.6)

* **github.com/containerd/cgroups**           fe281dd265766145e943a034aa41086474ea6130 -> 5e61083
* **github.com/containerd/cri**               f0b5665a959119b6a6234001e6d55206d9200e95 -> f8171b4530bed8992973cc4a2f24efe53b821d53
* **github.com/containerd/go-runc**           bcb223a061a3dd7de1a89c0b402a60f4dd9bd307 -> 14606eb66abd9e834e3bd22a4f5f46a3aad54c54
* **github.com/containernetworking/plugins**  v0.7.0 -> v0.7.5
* **github.com/opencontainers/runc**          6635b4f0c6af3810594d2770f662f34ddc15b40d -> 029124da7af7360afa781a0234d1b083550f797c
* **github.com/opencontainers/runtime-spec**  v1.0.1 -> 29686dbc5559d93fb1ef402eeda3e35c38d75af4
* **github.com/opencontainers/selinux**       b6fa367ed7f534f9ba25391cc2d467085dbb445a -> v1.2.1

v1.2.5

Toggle v1.2.5's commit message

Verified

This tag was signed with the committer’s verified signature.
dmcgowan Derek McGowan
containerd 1.2.5

Welcome to the v1.2.5 release of containerd!

The fifth patch release for `containerd` 1.2 contains fixes
for image management, cgroup management and the
CRI plugin.
It also updates runc to include an improved fix for CVE-2019-5736
to reduce the increased memory-consumption introduced by the original
patch.
All these changes are noted below.
### Notable Updates
* Fix an issue that non-existent parent directory in image layers is created with permission
`0700`. [containerd#3017](containerd#3017)
* Fix an issue that snapshots of the base image can be deleted by mistake, when images
built on top of it are deleted. [containerd#3087](containerd#3087)
* Support for GC references to content from snapshot and container objects. [containerd#3080](containerd#3080)
* cri: Fix a bug that pod can't get started when the same volume is defined
differently in the image and the pod spec. [cri#1059](containerd/cri#1059)
* cri: Fix a bug that causes container start failure after in-place upgrade containerd
to 1.2.4+ or 1.1.6+. [cri#1082](containerd/cri#1082)
* cgroups updated to dbea6f2 to fix issues for systemd 420 and
non-existent cgroups. [containerd#3079](containerd#3079)
* runc updated to 2b18fe1d885ee5083ef9f0838fee39b62d653e30 to include the improved
fix for CVE-2019-5736. [containerd#3082](containerd#3082)
* cri updated to a92c40017473cbe0239ce180125f12669757e44f. [containerd#3084](containerd#3084)

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

### Contributors

* Michael Crosby
* Phil Estes
* Lantao Liu
* Gábor Lipták
* Derek McGowan
* Cedric Clerget
* Daniel, Dao Quang Minh
* Sebastiaan van Stijn
* Ashley Sykes
* Brent Baude
* Chris Mark
* Georgia Panoutsakopoulou
* Grant Seltzer Richman
* JoeWrightss
* MichaelKatsoulis
* Wei Fu
* Wei Zhang

### Changes

* [`bb71b10fd8`](containerd@bb71b10) Merge pull request  [containerd#3086](containerd#3086) from Random-Liu/prepare-release-1-2-5
* [`6878e2b3fa`](containerd@6878e2b) Prepare v1.2.5 release.
* [`075e1ed4e0`](containerd@075e1ed) Merge pull request  [containerd#3092](containerd#3092) from Random-Liu/update-cri-release-1.2
* [`12f76332e6`](containerd@12f7633) Update cri to a92c40017473cbe0239ce180125f12669757e44f.
* [`8f312e3586`](containerd@8f312e3) Merge pull request  [containerd#3091](containerd#3091) from dmcgowan/release-1.2-update-mailmap
* [`68f0866dfc`](containerd@68f0866) Update mailmap for cgroup authors
* [`96a0d28390`](containerd@96a0d28) Merge pull request  [containerd#3082](containerd#3082) from thaJeztah/1.2_backport_bump_runc
* [`9ead3ca72a`](containerd@9ead3ca) Merge pull request  [containerd#3087](containerd#3087) from fuweid/me-cherry-pick-2876
* [`88401ba68a`](containerd@88401ba) bugfix: unpack should always set the snapshot gc label
* [`c1f49fa74c`](containerd@c1f49fa) Merge pull request  [containerd#3084](containerd#3084) from Random-Liu/update-cri-release-1.2
* [`a5e6b940ea`](containerd@a5e6b94) Update cri to 8e7ca12f411d65de58ca672e8e4a0c1464b4fe34.
* [`0b7e80e347`](containerd@0b7e80e) Merge pull request  [containerd#3080](containerd#3080) from dmcgowan/backport-1.2-gc-content-references
* [`b7e7f1140f`](containerd@b7e7f11) update runc to 2b18fe1d885ee5083ef9f0838fee39b62d653e30
* [`17a4289dee`](containerd@17a4289) Add content gc ref labels from containers, images, and snapshots
* [`f3ab47dd2b`](containerd@f3ab47d) Merge pull request  [containerd#3079](containerd#3079) from crosbymichael/cherry-picks1.2
* [`e8091eb546`](containerd@e8091eb) Bump cgroups to dbea6f2
* [`96a8180618`](containerd@96a8180) Merge pull request  [containerd#3077](containerd#3077) from thaJeztah/1.2_bump_golang
* [`aed4a5e96c`](containerd@aed4a5e) Bump to Go 1.11.x
* [`782dd8988a`](containerd@782dd89) Merge pull request  [containerd#3038](containerd#3038) from Random-Liu/cherrypick-#3018-release-1.2
* [`9899aca83f`](containerd@9899aca) Unpack should set 0755 when the parent directory doesn't exist.

### Changes from containerd/cgroups

* [`dbea6f2`](containerd/cgroups@dbea6f2) Merge pull request  [containerd#77](containerd/cgroups#77) from crosbymichael/non-active
* [`4a9f0f7`](containerd/cgroups@4a9f0f7) Add SkipOpts for handling how subsystems are registered
* [`4dacf2b`](containerd/cgroups@4dacf2b) Check for non-active/supported cgroups
* [`39b18af`](containerd/cgroups@39b18af) Merge pull request  [containerd#72](containerd/cgroups#72) from gliptak/pids1
* [`2fd912c`](containerd/cgroups@2fd912c) Add tests for pids
* [`1152b96`](containerd/cgroups@1152b96) Merge pull request  [containerd#73](containerd/cgroups#73) from gliptak/gofmt1
* [`afd5981`](containerd/cgroups@afd5981) Gofmt cgroup_test
* [`65ce98b`](containerd/cgroups@65ce98b) Merge pull request  [containerd#69](containerd/cgroups#69) from cclerget/master-weight-pointer
* [`0f372c6`](containerd/cgroups@0f372c6) Merge pull request  [containerd#71](containerd/cgroups#71) from JoeWrightss/patch-1
* [`f48bd85`](containerd/cgroups@f48bd85) Fixs return error message
* [`10cd53e`](containerd/cgroups@10cd53e) Merge pull request  [containerd#70](containerd/cgroups#70) from gliptak/patch-1
* [`64bade4`](containerd/cgroups@64bade4) Take value instead of pointer value
* [`b49c471`](containerd/cgroups@b49c471) Correct ineffassign warning
* [`3bc6dde`](containerd/cgroups@3bc6dde) Merge pull request  [containerd#68](containerd/cgroups#68) from cclerget/master-net_prio-typo
* [`6b552a8`](containerd/cgroups@6b552a8) Fix net_prio typo
* [`c0437c3`](containerd/cgroups@c0437c3) Merge pull request  [containerd#67](containerd/cgroups#67) from gpanouts/get-all-cgroup-tasks
* [`a31a0ff`](containerd/cgroups@a31a0ff) Add functionality for retrieving all tasks of a cgroup
* [`82cb49f`](containerd/cgroups@82cb49f) Merge pull request  [containerd#63](containerd/cgroups#63) from ChrsMark/lenient-subsystems-checking
* [`7d825b2`](containerd/cgroups@7d825b2) Add test for cgroups load when missing hierarchy in one subsystem
* [`f6cbfb4`](containerd/cgroups@f6cbfb4) Change Load function in order to be more lenient on subsystems' checking
* [`965bb1d`](containerd/cgroups@965bb1d) Merge pull request  [containerd#66](containerd/cgroups#66) from crosbymichael/systemdci
* [`ab9ec0e`](containerd/cgroups@ab9ec0e) Add go-systemd dep for CI testing
* [`0e94a83`](containerd/cgroups@0e94a83) Merge pull request  [containerd#59](containerd/cgroups#59) from gliptak/patch-1
* [`4479d11`](containerd/cgroups@4479d11) Merge pull request  [containerd#62](containerd/cgroups#62) from estesp/fix-gofmt
* [`9beb998`](containerd/cgroups@9beb998) Merge pull request  [containerd#61](containerd/cgroups#61) from gliptak/patch-3
* [`9a09e58`](containerd/cgroups@9a09e58) Fix gofmt of systemd.go
* [`84e6e6e`](containerd/cgroups@84e6e6e) Merge pull request  [containerd#60](containerd/cgroups#60) from gliptak/patch-2
* [`e13f6cc`](containerd/cgroups@e13f6cc) Add GoReportCard badge to README
* [`d124595`](containerd/cgroups@d124595) Add Go 1.11 to Travis
* [`d961ab9`](containerd/cgroups@d961ab9) Correct typo
* [`d240072`](containerd/cgroups@d240072) Merge pull request  [containerd#57](containerd/cgroups#57) from estesp/project-update
* [`e4cf832`](containerd/cgroups@e4cf832) Add project references and use common project travis
* [`8baeff6`](containerd/cgroups@8baeff6) Merge pull request  [containerd#56](containerd/cgroups#56) from grantseltzer/patch-1
* [`9de57ff`](containerd/cgroups@9de57ff) Add godoc badge to README.md
* [`5017d4e`](containerd/cgroups@5017d4e) Merge pull request  [containerd#54](containerd/cgroups#54) from WeiZhang555/bugfix
* [`13aaafd`](containerd/cgroups@13aaafd) Bugfix: can't write to cpuset cgroup
* [`58556f5`](containerd/cgroups@58556f5) Merge pull request  [containerd#53](containerd/cgroups#53) from baude/systemdslicedelegate
* [`15ed73c`](containerd/cgroups@15ed73c) systemd-239+ no longer allows delegate slice
* [`3024bc7`](containerd/cgroups@3024bc7) Merge pull request  [containerd#52](containerd/cgroups#52) from Sykomaniac/bugfix/slice-name
* [`2596f33`](containerd/cgroups@2596f33) Remove call to unitName
* [`2e2922e`](containerd/cgroups@2e2922e) Merge pull request  [containerd#51](containerd/cgroups#51) from containerd/type
* [`0f3de2f`](containerd/cgroups@0f3de2f) Fix empty device type

### Changes from containerd/cri

* [`a92c4001`](containerd/cri@a92c400) Merge pull request  [containerd#1086](containerd/cri#1086) from Random-Liu/cherrypick-#1085-release-1.2
* [`616d154e`](containerd/cri@616d154) Fix /etc/hostname backward compatibility issue for in-place upgrade.
* [`8e7ca12f`](containerd/cri@8e7ca12) Merge pull request  [containerd#1081](containerd/cri#1081) from Random-Liu/cherrypick-#1056-release-1.2
* [`989fb1ab`](containerd/cri@989fb1a) Add an OCI annotation for sandbox log directory.
* [`0eee55a2`](containerd/cri@0eee55a) Merge pull request  [containerd#1074](containerd/cri#1074) from Random-Liu/cherrypick-#1072-release-1.2
* [`4d4f610e`](containerd/cri@4d4f610) Use clean path for map and comparison.
* [`9c25ab5b`](containerd/cri@9c25ab5) Merge pull request  [containerd#1067](containerd/cri#1067) from Random-Liu/cherrypick-#1055-release-1.2
* [`eaf8efc5`](containerd/cri@eaf8efc) Use the correct sandbox config.
* [`afbdeacc`](containerd/cri@afbdeac) Merge pull request  [containerd#1050](containerd/cri#1050) from Random-Liu/update-containerd-release-1.2
* [`72fab7c8`](containerd/cri@72fab7c) Update containerd to 583472f.

### Dependency Changes

Previous release can be found at [v1.2.4](https://github.com/containerd/containerd/releases/tag/v1.2.4)

* **github.com/containerd/cgroups**   5e61083 -> dbea6f2
* **github.com/containerd/cri**       da0c016c830b2ea97fd1d737c49a568a816bf964 -> a92c40017473cbe0239ce180125f12669757e44f
* **github.com/opencontainers/runc**  6635b4f0c6af3810594d2770f662f34ddc15b40d -> 2b18fe1d885ee5083ef9f0838fee39b62d653e30

v1.2.4

Toggle v1.2.4's commit message

Verified

This tag was signed with the committer’s verified signature.
dmcgowan Derek McGowan
containerd 1.2.4

Welcome to the v1.2.4 release of containerd!

The fourth patch release for `containerd` 1.2 re-vendors
`runc` which includes the patch for the critical CVE-2019-5736 escape
vulnerability. This release also includes a few fixes for the CRI plugin as
well as a change for Windows; all these changes are noted below.

### Notable Updates
* cri: Set /etc/hostname [containerd#1042](containerd/cri#1042)
* cri: Fix env performance issue [containerd#1045](containerd/cri#1045)
* runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve CVE-2019-5736
* cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
* Windows: NewDirectIOFromFIFOSet [containerd#2934](containerd#2934)

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

### Contributors

* Lantao Liu
* Justin Terry
* Sebastiaan van Stijn
* Derek McGowan
* Michael Crosby
* Phil Estes
* John Howard

### Changes

* [`e6b3f5632f`](containerd@e6b3f56) Merge pull request  [containerd#3002](containerd#3002) from estesp/prepare-1.2.4-release
* [`5d1443dca7`](containerd@5d1443d) Prepare v1.2.4 release
* [`2095626cff`](containerd@2095626) Merge pull request  [containerd#3014](containerd#3014) from thaJeztah/1.2_bump_cri
* [`78286104d0`](containerd@7828610) Merge pull request  [containerd#3013](containerd#3013) from thaJeztah/1.2_backport_windows_changes
* [`3cbdf9e488`](containerd@3cbdf9e) [release/1.2] update containerd/cri to da0c016c830b2ea97fd1d737c49a568a816bf964
* [`dfa19e5969`](containerd@dfa19e5) Windows:NewDirectIOFromFIFOSet
* [`84a14ae000`](containerd@84a14ae) Update runhcs options to include CRI Sandbox support
* [`6a8198b07d`](containerd@6a8198b) Forward ctr.exe --debug as io.containerd.runhcs.v1 options
* [`d40cc95fcf`](containerd@d40cc95) Implement io.containerd.runhcs.v1 shim log opts
* [`30ca1c5544`](containerd@30ca1c5) Add io.containerd.runhcs.v1 shim proto options
* [`7908802cb5`](containerd@7908802) Fix Makefile to run protobuild on paths with spaces
* [`583472f67a`](containerd@583472f) Merge pull request  [containerd#2998](containerd#2998) from thaJeztah/1.2_backport_bump_runc_cve_2019-5736
* [`b4bf3e340c`](containerd@b4bf3e3) Update runc to 6635b4f0c6af3810594d2770f662f34ddc15b40d (CVE-2019-5736)
* [`74133fa4ea`](containerd@74133fa) Merge pull request  [containerd#2995](containerd#2995) from thaJeztah/1.2_backport_remove_normalize_image_ref
* [`ed756ffdd4`](containerd@ed756ff) Use distribution's reference.ParseDockerRef
* [`2fb3823635`](containerd@2fb3823) Bump github.com/docker/distribution to 0d3efadf0154c2b8a4e7b6621fff9809655cc580

### Changes from containerd/cri

* [`da0c016c`](containerd/cri@da0c016) Merge pull request  [containerd#1049](containerd/cri#1049) from Random-Liu/cherrypick-#1045-release-1.2
* [`fd12e919`](containerd/cri@fd12e91) Merge pull request  [containerd#1046](containerd/cri#1046) from Random-Liu/cherrypick-#1042-release-1.2
* [`ca6506b4`](containerd/cri@ca6506b) Include default envs from containerd.
* [`2add88c1`](containerd/cri@2add88c) Add env cache.
* [`50fbeb6f`](containerd/cri@50fbeb6) Don't log config at info level.
* [`1a51d430`](containerd/cri@1a51d43) Set /etc/hostname.

### Dependency Changes

Previous release can be found at [v1.2.3](https://github.com/containerd/containerd/releases/tag/v1.2.3)

* **github.com/containerd/cri**       c3cf754321fc38c6af5dfd2552fdde0ad192b31d -> da0c016c830b2ea97fd1d737c49a568a816bf964
* **github.com/docker/distribution**  b38e5838b7b2f2ad48e06ec4b500011976080621 -> 0d3efadf0154c2b8a4e7b6621fff9809655cc580
* **github.com/opencontainers/runc**  12f6a991201fdb8f82579582d5e00e28fba06d0a -> 6635b4f0c6af3810594d2770f662f34ddc15b40d
* **golang.org/x/sys**                1b2967e3c290b7c545b3db0deeda16e9be4f98a2 -> 41f3e6584952bb034a481797859f6ab34b6803bd

v1.1.6

Toggle v1.1.6's commit message

Verified

This tag was signed with the committer’s verified signature.
dmcgowan Derek McGowan
containerd 1.1.6

Welcome to the v1.1.6 release of containerd!

This is the sixth patch release for the `containerd` 1.1 release. This
release specifically re-vendors `runc` to capture the fix for the critical
CVE-2019-5736 container escape. Several CRI fixes were also included in
this release and are listed below.

## Runtime
* Update runc to 6635b4f0c6af3810594d2770f662f34ddc15b40d to fix CVE-2019-5736

## CRI
* containerd/cri#984 filter events for non k8s.io namespaces (resolves firecracker-microvm/firecracker-containerd#35)
* containerd/cri#991 Remove container lifecycle image dependency (fixes containerd/cri#990)
* containerd/cri#1016 Specify platform for image pull (fixes containerd/cri#1015)
* containerd/cri#1027 Fix the log ending newline handling (fixes containerd/cri#1026)
* containerd/cri#1042 Set /etc/hostname (fixes containerd/cri#1041)
* containerd/cri#1045 Fix env performance issue (fixes containerd/cri#1044)
* Update cri to f0b5665a959119b6a6234001e6d55206d9200e95

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

### Contributors

* Lantao Liu
* Phil Estes
* Michael Crosby
* Sebastiaan van Stijn
* Akihiro Suda
* Derek McGowan
* Lifubang
* Mike Brown
* Wei Fu
* Ace-Tang
* Mike Brown

### Changes

* [`0ad902c05b`](containerd@0ad902c) Merge pull request  [containerd#3003](containerd#3003) from estesp/prepare-v1.1.6-release
* [`ed854e3ca1`](containerd@ed854e3) Prepare v1.1.6 release
* [`a79c691e0f`](containerd@a79c691) Merge pull request  [containerd#3015](containerd#3015) from thaJeztah/1.1_bump_cri
* [`38bf6c598a`](containerd@38bf6c5) [release/1.1] update containerd/cri to f0b5665a959119b6a6234001e6d55206d9200e95
* [`878924b9b5`](containerd@878924b) Merge pull request  [containerd#2999](containerd#2999) from thaJeztah/1.1_backport_bump_runc_cve_2019-5736
* [`3177b4b96e`](containerd@3177b4b) Update runc to 6635b4f0c6af3810594d2770f662f34ddc15b40d (CVE-2019-5736)
* [`80c3f1a3e4`](containerd@80c3f1a) Merge pull request  [containerd#2966](containerd#2966) from fuweid/remove-noop-1-1
* [`3e6d7f678d`](containerd@3e6d7f6) metadata/gc: remove the noop-loop for snapshot reference
* [`813e5f6765`](containerd@813e5f6) Merge pull request  [containerd#2954](containerd#2954) from thaJeztah/1.1_backport_fix_xattr
* [`b48afb426e`](containerd@b48afb4) fix: SCHILY.xattrs should be SCHILY.xattr
* [`9979a1a936`](containerd@9979a1a) Merge pull request  [containerd#2951](containerd#2951) from crosbymichael/lint-relase11
* [`ff8a80e4c1`](containerd@ff8a80e) [release/1.1] fix: linter issue
* [`6b15143e8d`](containerd@6b15143) Merge pull request  [containerd#2933](containerd#2933) from AkihiroSuda/runc20190115-1.1
* [`acd495de00`](containerd@acd495d) bump up runc
* [`b55cf2cc05`](containerd@b55cf2c) Merge pull request  [containerd#2892](containerd#2892) from thaJeztah/1.1_revert_temp_golang_fix
* [`0e93a1e41f`](containerd@0e93a1e) Revert "Fix CI due to Golang 1.10.6 / 1.11.3 regressions (workaround)"
* [`02e398d93e`](containerd@02e398d) Merge pull request  [containerd#2880](containerd#2880) from thaJeztah/1.1_backport_fix_ci_golang_1.11
* [`66a3eeb5b7`](containerd@66a3eeb) Fix CI due to Golang 1.10.6 / 1.11.3 regressions (workaround)
* [`3c89a5e3f1`](containerd@3c89a5e) Merge pull request  [containerd#2833](containerd#2833) from acmcodercom/pidreuseattack
* [`0bb672dc2b`](containerd@0bb672d) Merge pull request  [containerd#2864](containerd#2864) from thaJeztah/1.1_backport_runc-kill-paused
* [`a1bfd3a2ed`](containerd@a1bfd3a) Update runc to 96ec2177ae841256168fcf76954f7177af
* [`dbf186d970`](containerd@dbf186d) Merge pull request  [containerd#2848](containerd#2848) from thaJeztah/1.1_backport_mask_asound
* [`3d313382ca`](containerd@3d31338) Add /proc/asound to masked paths
* [`6bb83f2195`](containerd@6bb83f2) Merge pull request  [containerd#2834](containerd#2834) from acmcodercom/execrace
* [`190c910435`](containerd@190c910) fix pid reuse attack when kill a exec process
* [`33c860f31d`](containerd@33c860f) fix race in exec delete and start

### Changes from containerd/cri

* [`f0b5665a`](containerd/cri@f0b5665) Merge pull request  [containerd#1048](containerd/cri#1048) from Random-Liu/cherrypick-#1045-release-1.0
* [`5edec1d8`](containerd/cri@5edec1d) Include default envs from containerd.
* [`03cd5a31`](containerd/cri@03cd5a3) Add env cache.
* [`eedb9f81`](containerd/cri@eedb9f8) Merge pull request  [containerd#1047](containerd/cri#1047) from Random-Liu/cherrypick-#1042-release-1.0
* [`b33f16e1`](containerd/cri@b33f16e) Don't log config at info level.
* [`3c7c404d`](containerd/cri@3c7c404) Set /etc/hostname.
* [`71909a1a`](containerd/cri@71909a1) Merge pull request  [containerd#1031](containerd/cri#1031) from Random-Liu/cherrypick-#1027-release-1.0
* [`dd55db0a`](containerd/cri@dd55db0) Add integration test.
* [`b9cb0b21`](containerd/cri@b9cb0b2) Fix lint error.
* [`0e24a83a`](containerd/cri@0e24a83) Fix the log ending newline handling.
* [`562eefa9`](containerd/cri@562eefa) Merge pull request  [containerd#1016](containerd/cri#1016) from Random-Liu/specify-platform-release-1.0
* [`3a10f4e6`](containerd/cri@3a10f4e) Specify platform for image pull.
* [`12b411e8`](containerd/cri@12b411e) Merge pull request  [containerd#1008](containerd/cri#1008) from Random-Liu/revert-#998-release-1.0
* [`1347be5a`](containerd/cri@1347be5) Revert "Temporary fix for golang regression #29241."
* [`685bd043`](containerd/cri@685bd04) Merge pull request  [containerd#1006](containerd/cri#1006) from Random-Liu/cherrypick-#1004-release-1.0
* [`9d3f7085`](containerd/cri@9d3f708) Install libseccomp2 package based on debian version.
* [`5766ef2d`](containerd/cri@5766ef2) Merge pull request  [containerd#995](containerd/cri#995) from Random-Liu/cherrypick-#991-release-1.0
* [`a8b85255`](containerd/cri@a8b8525) Merge pull request  [containerd#998](containerd/cri#998) from Random-Liu/cherrypick-#997-release-1.0
* [`2b2ca4c4`](containerd/cri@2b2ca4c) Temporary fix for golang regression #29241.
* [`0ac83633`](containerd/cri@0ac8363) Add integration test.
* [`5e759f5c`](containerd/cri@5e759f5) Remove container lifecycle image ref dependency.
* [`89aaac88`](containerd/cri@89aaac8) Merge pull request  [containerd#988](containerd/cri#988) from mikebrow/cherrypick-#984-release-1.0
* [`2f5d677a`](containerd/cri@2f5d677) filter namespace

### Dependency Changes

Previous release can be found at [v1.1.5](https://github.com/containerd/containerd/releases/tag/v1.1.5)

* **github.com/containerd/cri**       bad0ae1102e1bf9e53876f75eacc42bc97cfb557 -> f0b5665a959119b6a6234001e6d55206d9200e95
* **github.com/opencontainers/runc**  10d38b660a77168360df3522881e2dc2be5056bd -> 6635b4f0c6af3810594d2770f662f34ddc15b40d
* **golang.org/x/sys**                1b2967e3c290b7c545b3db0deeda16e9be4f98a2 -> 41f3e6584952bb034a481797859f6ab34b6803bd

v1.2.3

Toggle v1.2.3's commit message

Verified

This tag was signed with the committer’s verified signature.
ehazlett Evan Hazlett
containerd 1.2.3

Welcome to the v1.2.3 release of containerd!

The third patch release for `containerd` 1.2 contains important fixes
for container image backwards compatibility as well as some runtime and
CRI issues.

### Notable Updates
* fix in Tar xattrs to restore compatibility with older container images [containerd#2953](containerd#2953)
* background `O_NONBLOCK` in OpenFifo to fix uncancelled context timeout issue
* updated `PlatformRuntime` interface to include Add/Delete methods
* runtime: exec race condition fixed [containerd#2970](containerd#2970)
* cri: fixed issues with extra newline character in log without an extra newline [containerd#2984](containerd#2984)
* cri: fixed an issue with pods being ignored after load failures [containerd#2984](containerd#2984)
* runc updated to 12f6a991201fdb8f82579582d5e00e28fba06d0a
* cri updated to c3cf754321fc38c6af5dfd2552fdde0ad192b31d

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

### Contributors

* Lantao Liu
* Michael Crosby
* Wei Fu
* Derek McGowan
* Akihiro Suda
* Phil Estes
* Ace-Tang
* Evan Hazlett

### Changes

* [`7f5f1176`](containerd@7f5f117) Merge pull request  [containerd#2974](containerd#2974) from ehazlett/release-v1.2.3
* [`7216861d`](containerd@7216861) Update for 1.2.3 release
* [`5de147d9`](containerd@5de147d) Merge pull request  [containerd#2984](containerd#2984) from Random-Liu/update-cri-release-1.2
* [`f7ac34e3`](containerd@f7ac34e) Update cri plugin to c3cf754321fc38c6af5dfd2552fdde0ad192b31d.
* [`0137339c`](containerd@0137339) Merge pull request  [containerd#2977](containerd#2977) from crosbymichael/io-panic
* [`7daf0804`](containerd@7daf080) Fix potential containerd panic.
* [`2fd20f11`](containerd@2fd20f1) Merge pull request  [containerd#2972](containerd#2972) from crosbymichael/exec-lock
* [`5730c500`](containerd@5730c50) Add a separate lock for pid.
* [`b9b7ef32`](containerd@b9b7ef3) Revert "use state machine management for exec.Pid()"
* [`dba2e5e5`](containerd@dba2e5e) Merge pull request  [containerd#2965](containerd#2965) from fuweid/remove-noop
* [`9b6a318a`](containerd@9b6a318) metadata/gc: remove the noop-loop for snapshot reference
* [`d86a73a4`](containerd@d86a73a) Merge pull request  [containerd#2946](containerd#2946) from fuweid/platformruntime
* [`dd29d5c3`](containerd@dd29d5c) Merge pull request  [containerd#2947](containerd#2947) from fuweid/pull-oct
* [`a0b4da71`](containerd@a0b4da7) bugfix: support application/octet-stream during pull
* [`b4d38c0f`](containerd@b4d38c0) runtime: add Add/Delete method in PlatformRuntime interface
* [`af900154`](containerd@af90015) Merge pull request  [containerd#2955](containerd#2955) from Random-Liu/cherrypick-#2944-release-1.2
* [`ab2cf013`](containerd@ab2cf01) Use context.Background for `O_NONBLOCK` `OpenFifo`.
* [`fa60b5be`](containerd@fa60b5b) Merge pull request  [containerd#2953](containerd#2953) from thaJeztah/1.2_backport_fix_xattr
* [`2244a20c`](containerd@2244a20) fix: SCHILY.xattrs should be SCHILY.xattr
* [`8c9ede4f`](containerd@8c9ede4) Merge pull request  [containerd#2950](containerd#2950) from crosbymichael/lint-release
* [`bf3c932a`](containerd@bf3c932) [release 1.2] fix: linter issue
* [`5c38d942`](containerd@5c38d94) Merge pull request  [containerd#2932](containerd#2932) from AkihiroSuda/runc20190115-1.2
* [`32f10c77`](containerd@32f10c7) bump up runc

### Changes from containerd/cri

* [`c3cf7543`](containerd/cri@c3cf754) Merge pull request  [containerd#1038](containerd/cri#1038) from Random-Liu/cherrypick-#1037-release-1.2
* [`89672cc6`](containerd/cri@89672cc) Update containerd to 0137339.
* [`bba954f1`](containerd/cri@bba954f) Add integration test for unknown state
* [`36d523d1`](containerd/cri@36d523d) Support unknown state for sandbox and container
* [`ad9a8533`](containerd/cri@ad9a853) Add state machine for sandbox and container
* [`c2ea49fa`](containerd/cri@c2ea49f) Change StateUnknown to StateInit
* [`df07fdd2`](containerd/cri@df07fdd) Merge pull request  [containerd#1030](containerd/cri#1030) from Random-Liu/cherrypick-#1027-release-1.2
* [`da7e1948`](containerd/cri@da7e194) Add integration test.
* [`10073e49`](containerd/cri@10073e4) Fix lint error.
* [`283aac3d`](containerd/cri@283aac3) Fix the log ending newline handling.

### Dependency Changes

Previous release can be found at [v1.2.2](https://github.com/containerd/containerd/releases/tag/v1.2.2)

* **github.com/containerd/cri**       0d5cabd006cb5319dc965046067b8432d9fa5ef8 -> c3cf754321fc38c6af5dfd2552fdde0ad192b31d
* **github.com/opencontainers/runc**  96ec2177ae841256168fcf76954f7177af9446eb -> 12f6a991201fdb8f82579582d5e00e28fba06d0a

v1.2.2

Toggle v1.2.2's commit message

Verified

This tag was signed with the committer’s verified signature.
dmcgowan Derek McGowan
containerd 1.2.2

Welcome to the v1.2.2 release of containerd!

The second patch release for `containerd` 1.2 includes important
runtime and CRI fixes.

## Runtime
* Fix rare deadlock on FIFO creation with timeout

## CRI

**ACTION REQUIRED:**
For Kubernetes support, when upgrading containerd from 1.2.0 (including rc releases)
to 1.2.1+, a node reboot is recommended to avoid a known deadlock in 1.2.0.
See [containerd/cri#1018](containerd/cri#1018)

* Fix a bug that a container can't be stopped or inspected when its corresponding image is deleted
* Fix a bug that the cri plugin handles containerd events outside of `k8s.io` namespace

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

### Contributors

* Lantao Liu
* Derek McGowan
* Michael Crosby
* Mike Brown
* Sebastiaan van Stijn
* Akihiro Suda

### Changes

* [`9754871865`](containerd@9754871) Merge pull request  [containerd#2917](containerd#2917) from dmcgowan/release-1.2.2
* [`ef637041ed`](containerd@ef63704) Update for 1.2.2 release
* [`4bb2b0c366`](containerd@4bb2b0c) Merge pull request  [containerd#2912](containerd#2912) from Random-Liu/update-cri-release-1.2
* [`f30fd02372`](containerd@f30fd02) Update cri to 0d5cabd006cb5319dc965046067b8432d9fa5ef8 (branch release/1.2).
* [`46e633389b`](containerd@46e6333) Merge pull request  [containerd#2893](containerd#2893) from thaJeztah/1.2_revert_temp_golang_fix
* [`e71a191f6d`](containerd@e71a191) Revert "Fix CI due to Golang 1.10.6 / 1.11.3 regressions (workaround)"
* [`aa5e000c96`](containerd@aa5e000) Merge pull request  [containerd#2878](containerd#2878) from andrewhsu/backport-1.2-fifo-timeout
* [`31be8649fd`](containerd@31be864) Merge pull request  [containerd#2881](containerd#2881) from thaJeztah/1.2_backport_fix_ci_golang_1.11
* [`27c6449c2c`](containerd@27c6449) Fix CI due to Golang 1.10.6 / 1.11.3 regressions (workaround)
* [`18f57e20b0`](containerd@18f57e2) Add timeout and cancel to shim fifo open

### Changes from containerd/cri

* [`0d5cabd0`](containerd/cri@0d5cabd) Merge pull request  [containerd#1007](containerd/cri#1007) from Random-Liu/revert-#999-release-1.2
* [`6ca182a8`](containerd/cri@6ca182a) Revert "Temporary fix for golang regression #29241."
* [`d0f8c33c`](containerd/cri@d0f8c33) Merge pull request  [containerd#1005](containerd/cri#1005) from Random-Liu/cherrypick-#1004-release-1.2
* [`5e6b3386`](containerd/cri@5e6b338) Install libseccomp2 package based on debian version.
* [`763bf278`](containerd/cri@763bf27) Merge pull request  [containerd#996](containerd/cri#996) from Random-Liu/cherrypick-#995-release-1.2
* [`23e907d9`](containerd/cri@23e907d) Merge pull request  [containerd#999](containerd/cri#999) from Random-Liu/cherrypick-#997-release-1.2
* [`298c7fd9`](containerd/cri@298c7fd) Temporary fix for golang regression #29241.
* [`e38e269a`](containerd/cri@e38e269) Add integration test.
* [`dcc9d279`](containerd/cri@dcc9d27) Remove container lifecycle image ref dependency.
* [`47f62352`](containerd/cri@47f6235) Merge pull request  [containerd#987](containerd/cri#987) from mikebrow/cherrypick-#984-release-1.2
* [`2216805e`](containerd/cri@2216805) filter namespace

### Dependency Changes

Previous release can be found at [v1.2.1](https://github.com/containerd/containerd/releases/tag/v1.2.1)

* **github.com/containerd/cri**  0ca1e3c2b73b5c38e72f29bb76338d0078b23d6c -> 0d5cabd006cb5319dc965046067b8432d9fa5ef8

v1.2.1

Toggle v1.2.1's commit message

Verified

This tag was signed with the committer’s verified signature.
dmcgowan Derek McGowan
containerd 1.2.1

Welcome to the v1.2.1 release of containerd!

The first patch release for `containerd` 1.2 includes several
runtime and CRI fixes.

## Runtime
* Fix race in process state when pausing containers
* Optimize runtime v1 shim locking
* Fix hang processing events
* Increase event buffer size
* Fix broken pipe causing shim hang
* Update runc

## CRI
* Remove auth config logs
* Fix NetNS cache state
* Fix a bug that containers sharing pod pid namespace can't be stopped
* Remove host pid usage to work better with katacontainer

## Service
* Ignore modprobe failures in systemd ExecStartPre

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

### Contributors

* Lantao Liu
* Derek McGowan
* Michael Crosby
* Phil Estes
* Lifubang
* Sebastiaan van Stijn
* Ace-Tang
* Akihiro Suda
* Justin Terry
* Mike Brown
* Wei Fu

### Changes

* [`9b32062dc1`](containerd@9b32062) Merge pull request  [containerd#2852](containerd#2852) from dmcgowan/prepare-1.2.1
* [`51134077d1`](containerd@5113407) Update version to 1.2.1
* [`dcc47dddd1`](containerd@dcc47dd) Merge pull request  [containerd#2861](containerd#2861) from dmcgowan/cherrypick-1.2-2857
* [`4c327b8e56`](containerd@4c327b8) Update runc to 96ec2177ae841256168fcf76954f7177af
* [`b65a1137f4`](containerd@b65a113) Merge pull request  [containerd#2860](containerd#2860) from Random-Liu/update-cri-release-1.2
* [`18e453e4fd`](containerd@18e453e) Update release note.
* [`586807a80c`](containerd@586807a) Update cri plugin to 0ca1e3c2b73b5c38e72f29bb76338d0078b23d6c.
* [`4b284fa3ab`](containerd@4b284fa) Merge pull request  [containerd#2856](containerd#2856) from Random-Liu/cherrypick-#2854-release-1.2
* [`b413e843ad`](containerd@b413e84) Kill should still work in stopped state.
* [`a06cddc2ed`](containerd@a06cddc) Merge pull request  [containerd#2845](containerd#2845) from nnttmm/backport_2826
* [`176a56216c`](containerd@176a562) Merge pull request  [containerd#2842](containerd#2842) from thaJeztah/1.2_backport_update_runc_1.0-rc6
* [`8dc87dd8d9`](containerd@8dc87dd) Merge pull request  [containerd#2847](containerd#2847) from thaJeztah/1.2_backport_mask_asound
* [`703786c5c9`](containerd@703786c) Add /proc/asound to masked paths
* [`c42c8952b7`](containerd@c42c895) use state machine management for exec.Pid()
* [`93d5b4b018`](containerd@93d5b4b) Update runc to v1.0.0-rc6
* [`de1f167ab9`](containerd@de1f167) Merge pull request  [containerd#2819](containerd#2819) from dmcgowan/prepare-1.2.1-rc
* [`27d72ba795`](containerd@27d72ba) Update version
* [`e3840cce17`](containerd@e3840cc) Add 1.2.1 release notes
* [`940c0c06d2`](containerd@940c0c0) Merge pull request  [containerd#2817](containerd#2817) from Random-Liu/cherrypick-2811-release-1.2
* [`4598ec2111`](containerd@4598ec2) Lock `KillAll`.
* [`e429785ca0`](containerd@e429785) Merge pull request  [containerd#2815](containerd#2815) from thaJeztah/1.2_backport_shimlockwhenstdinclose
* [`9be591e4a6`](containerd@9be591e) Merge pull request  [containerd#2803](containerd#2803) from crosbymichael/cherry-proc-lock
* [`309973edd9`](containerd@309973e) Merge pull request  [containerd#2801](containerd#2801) from crosbymichael/cherry-runc
* [`e4c49d7053`](containerd@e4c49d7) Update runc to 10d38b660a77168360df3522881e2dc2be
* [`cd83a4e0ba`](containerd@cd83a4e) fix pipe in broken may cause shim lock forever for runtime v1
* [`275f99feb9`](containerd@275f99f) fix pipe in broken may cause shim lock forever for runtime v2
* [`39cd86348c`](containerd@39cd863) Merge pull request  [containerd#2795](containerd#2795) from estesp/cherrypick-optimize-shim-lock
* [`3afc3f149c`](containerd@3afc3f1) Merge pull request  [containerd#2796](containerd#2796) from estesp/cherrypick-exit-ch-buffers
* [`f9323ca957`](containerd@f9323ca) Revert v2 dropped events
* [`4c72befe09`](containerd@4c72bef) Fix process locking and state management
* [`14dc3078b9`](containerd@14dc307) Partially revert the event discard change in containerd#2748.
* [`417d694148`](containerd@417d694) Increase reaper buffer size and non-blocking send
* [`7ef5285b56`](containerd@7ef5285) optimize shim lock in runtime v1
* [`040e73fde1`](containerd@040e73f) Merge pull request  [containerd#2792](containerd#2792) from estesp/cherrypick-update-hcsshim-vendor
* [`c4a256d342`](containerd@c4a256d) Merge pull request  [containerd#2790](containerd#2790) from estesp/cherrypick-v1v2-runtime-fix
* [`737587653d`](containerd@7375876) Temp: add appveyor enablement for release/1.2 branch
* [`090e3e98a2`](containerd@090e3e9) Revendor github.com/Microsoft/hcsshim
* [`046b6c6d00`](containerd@046b6c6) enhance: update v1/v2 runtime
* [`7ff9f6815a`](containerd@7ff9f68) Merge pull request  [containerd#2784](containerd#2784) from Random-Liu/update-cri-release-1.2
* [`54895c0b98`](containerd@54895c0) Update cri to 2bb57d27203d82fc79c496aea724aec593b2705a.
* [`cd0ecb78c7`](containerd@cd0ecb7) Merge pull request  [containerd#2779](containerd#2779) from thaJeztah/1.2_backport_ignore_modprobe_failures
* [`c4acd17e70`](containerd@c4acd17) Ignore modprobe failures in ExecStartPre (systemd unit)

### Changes from containerd/cri

* [`0ca1e3c2`](containerd/cri@0ca1e3c) Merge pull request  [containerd#985](containerd/cri#985) from Random-Liu/cherrypick-#983-release-1.2
* [`88dbb6d6`](containerd/cri@88dbb6d) Update containerd to 4b284fa.
* [`d58c1893`](containerd/cri@d58c189) Fix kill when shared pid namespace.
* [`8671a278`](containerd/cri@8671a27) Merge pull request  [containerd#975](containerd/cri#975) from Random-Liu/cherrypick-#973-release-1.2
* [`e2d2a5de`](containerd/cri@e2d2a5d) Use the `ID` field of `TaskExit` event.
* [`2bb57d27`](containerd/cri@2bb57d2) Merge pull request  [containerd#966](containerd/cri#966) from Random-Liu/cherrypick-#959-release-1.2
* [`c4773dd5`](containerd/cri@c4773dd) Use commit as version.
* [`9b67975b`](containerd/cri@9b67975) Merge pull request  [containerd#962](containerd/cri#962) from mikebrow/cherry-pick-remove-authconfig-from-log
* [`c064d480`](containerd/cri@c064d48) removes authconfig from info log
* [`a72707ca`](containerd/cri@a72707c) Merge pull request  [containerd#958](containerd/cri#958) from Random-Liu/cherrypick-#950-release-1.2
* [`6881f449`](containerd/cri@6881f44) Update integration test.
* [`6681eb15`](containerd/cri@6681eb1) Manage mount lifecycle and remove cached state

### Dependency Changes

Previous release can be found at [v1.2.0](https://github.com/containerd/containerd/releases/tag/v1.2.0)

* **github.com/Microsoft/hcsshim**    v0.7.12 -> v0.8.1
* **github.com/containerd/cri**       f913714917d2456d7e65a0be84962b1ce8acb487 -> 0ca1e3c2b73b5c38e72f29bb76338d0078b23d6c
* **github.com/opencontainers/runc**  58592df56734acf62e574865fe40b9e53e967910 -> 96ec2177ae841256168fcf76954f7177af9446eb

v1.2.1-rc.0

Toggle v1.2.1-rc.0's commit message

Verified

This tag was signed with the committer’s verified signature.
dmcgowan Derek McGowan
containerd 1.2.1-rc.0

Welcome to the v1.2.1-rc.0 release of containerd!
*This is a pre-release of containerd*

The first patch release for `containerd` 1.2 includes several
runtime and CRI fixes.

## Runtime
* Fix race in process state when pausing containers
* Optimize runtime v1 shim locking
* Fix hang processing events
* Increase event buffer size
* Fix broken pipe causing shim hang
* Update runc

## CRI
* Remove auth config logs
* Fix NetNS cache state

## Service
* Ignore modprobe failures in systemd ExecStartPre

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

### Contributors

* Lantao Liu
* Michael Crosby
* Derek McGowan
* Lifubang
* Phil Estes
* Ace-Tang
* Akihiro Suda
* Justin Terry
* Mike Brown
* Sebastiaan van Stijn
* Wei Fu

### Changes

* [`de1f167ab9`](containerd@de1f167) Merge pull request  [containerd#2819](containerd#2819) from dmcgowan/prepare-1.2.1-rc
* [`27d72ba795`](containerd@27d72ba) Update version
* [`e3840cce17`](containerd@e3840cc) Add 1.2.1 release notes
* [`940c0c06d2`](containerd@940c0c0) Merge pull request  [containerd#2817](containerd#2817) from Random-Liu/cherrypick-2811-release-1.2
* [`4598ec2111`](containerd@4598ec2) Lock `KillAll`.
* [`e429785ca0`](containerd@e429785) Merge pull request  [containerd#2815](containerd#2815) from thaJeztah/1.2_backport_shimlockwhenstdinclose
* [`9be591e4a6`](containerd@9be591e) Merge pull request  [containerd#2803](containerd#2803) from crosbymichael/cherry-proc-lock
* [`309973edd9`](containerd@309973e) Merge pull request  [containerd#2801](containerd#2801) from crosbymichael/cherry-runc
* [`e4c49d7053`](containerd@e4c49d7) Update runc to 10d38b660a77168360df3522881e2dc2be
* [`cd83a4e0ba`](containerd@cd83a4e) fix pipe in broken may cause shim lock forever for runtime v1
* [`275f99feb9`](containerd@275f99f) fix pipe in broken may cause shim lock forever for runtime v2
* [`39cd86348c`](containerd@39cd863) Merge pull request  [containerd#2795](containerd#2795) from estesp/cherrypick-optimize-shim-lock
* [`3afc3f149c`](containerd@3afc3f1) Merge pull request  [containerd#2796](containerd#2796) from estesp/cherrypick-exit-ch-buffers
* [`f9323ca957`](containerd@f9323ca) Revert v2 dropped events
* [`4c72befe09`](containerd@4c72bef) Fix process locking and state management
* [`14dc3078b9`](containerd@14dc307) Partially revert the event discard change in containerd#2748.
* [`417d694148`](containerd@417d694) Increase reaper buffer size and non-blocking send
* [`7ef5285b56`](containerd@7ef5285) optimize shim lock in runtime v1
* [`040e73fde1`](containerd@040e73f) Merge pull request  [containerd#2792](containerd#2792) from estesp/cherrypick-update-hcsshim-vendor
* [`c4a256d342`](containerd@c4a256d) Merge pull request  [containerd#2790](containerd#2790) from estesp/cherrypick-v1v2-runtime-fix
* [`737587653d`](containerd@7375876) Temp: add appveyor enablement for release/1.2 branch
* [`090e3e98a2`](containerd@090e3e9) Revendor github.com/Microsoft/hcsshim
* [`046b6c6d00`](containerd@046b6c6) enhance: update v1/v2 runtime
* [`7ff9f6815a`](containerd@7ff9f68) Merge pull request  [containerd#2784](containerd#2784) from Random-Liu/update-cri-release-1.2
* [`54895c0b98`](containerd@54895c0) Update cri to 2bb57d27203d82fc79c496aea724aec593b2705a.
* [`cd0ecb78c7`](containerd@cd0ecb7) Merge pull request  [containerd#2779](containerd#2779) from thaJeztah/1.2_backport_ignore_modprobe_failures
* [`c4acd17e70`](containerd@c4acd17) Ignore modprobe failures in ExecStartPre (systemd unit)

### Changes from containerd/cri

* [`2bb57d27`](containerd/cri@2bb57d2) Merge pull request  [containerd#966](containerd/cri#966) from Random-Liu/cherrypick-#959-release-1.2
* [`c4773dd5`](containerd/cri@c4773dd) Use commit as version.
* [`9b67975b`](containerd/cri@9b67975) Merge pull request  [containerd#962](containerd/cri#962) from mikebrow/cherry-pick-remove-authconfig-from-log
* [`c064d480`](containerd/cri@c064d48) removes authconfig from info log
* [`a72707ca`](containerd/cri@a72707c) Merge pull request  [containerd#958](containerd/cri#958) from Random-Liu/cherrypick-#950-release-1.2
* [`6881f449`](containerd/cri@6881f44) Update integration test.
* [`6681eb15`](containerd/cri@6681eb1) Manage mount lifecycle and remove cached state

### Dependency Changes

Previous release can be found at [v1.2.0](https://github.com/containerd/containerd/releases/tag/v1.2.0)

* **github.com/Microsoft/hcsshim**    v0.7.12 -> v0.8.1
* **github.com/containerd/cri**       f913714917d2456d7e65a0be84962b1ce8acb487 -> 2bb57d27203d82fc79c496aea724aec593b2705a
* **github.com/opencontainers/runc**  58592df56734acf62e574865fe40b9e53e967910 -> 10d38b660a77168360df3522881e2dc2be5056bd

v1.1.5

Toggle v1.1.5's commit message

Verified

This tag was signed with the committer’s verified signature.
dmcgowan Derek McGowan
containerd 1.1.5

Welcome to the v1.1.5 release of containerd!

This is the fifth patch release for the `containerd` 1.1 release. This
release includes several fixes in both the CRI plugin and containerd-shim.

## Runtime
* Fix a bug that containerd-shim may hang when many exec processes simultaneously
run in a container.
* Update runc

## CRI Plugin
* Fix a bug that IPAM IP leaks after node reboot.
* Stop logging image `AuthConfig` in the CRI plugin log.

To use containerd 1.1 with Kubernetes 1.11+, please set `stream_server_address` to
`127.0.0.1` or `localhost`, and set `enable_tls_streaming` to `false`.

# Service
* Ignore modprobe failures in systemd ExecStartPre. This fixes containerd start
failures in the environment where `modprobe overlay` always returns error, e.g.
an LXC container, a kernel with overlay built-in etc.

Please see the changelog for full details.

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

### Contributors

* Lantao Liu
* Abhinandan Prativadi
* Michael Crosby
* Phil Estes
* Derek McGowan
* Ace-Tang
* Akihiro Suda
* Lifubang
* Mike Brown
* Sebastiaan van Stijn
* Wei Fu

### Changes

* [`5960cade47`](containerd@5960cad) Merge pull request  [containerd#2787](containerd#2787) from Random-Liu/prepare-1-1-5-release
* [`32d08d0491`](containerd@32d08d0) Prepare v1.1.5 release.
* [`5cbe42afb9`](containerd@5cbe42a) Merge pull request  [containerd#2818](containerd#2818) from Random-Liu/cherrypick-2811-release-1.1
* [`4cb837a5e5`](containerd@4cb837a) Lock `KillAll`.
* [`943f15f3e2`](containerd@943f15f) Merge pull request  [containerd#2816](containerd#2816) from thaJeztah/1.1_backport_shimlockwhenstdinclose
* [`538c6661e7`](containerd@538c666) fix pipe in broken may cause shim lock forever for runtime v1
* [`02f79c0b51`](containerd@02f79c0) Merge pull request  [containerd#2802](containerd#2802) from thaJeztah/1.1_backport_bump_runc
* [`4dbb90fddc`](containerd@4dbb90f) Update runc to 10d38b660a77168360df3522881e2dc2be
* [`f277cdc6f6`](containerd@f277cdc) Update runc to 58592df56734acf62e574865fe40b9e53e
* [`132ee4cb28`](containerd@132ee4c) Update runc to 00dc70017d222b178a002ed30e9321b126
* [`a6a94b1d93`](containerd@a6a94b1) Update runc vendor
* [`7cc13025a6`](containerd@7cc1302) Merge pull request  [containerd#2762](containerd#2762) from estesp/cherrypick-exec-exit-chan-size-pr
* [`a19509e2a8`](containerd@a19509e) Merge pull request  [containerd#2783](containerd#2783) from Random-Liu/update-cri-release-1.1
* [`cc1c45a6e5`](containerd@cc1c45a) Merge pull request  [containerd#2782](containerd#2782) from thaJeztah/1.1_backport_shim_procs
* [`2215b426c1`](containerd@2215b42) Update cri to bad0ae1102e1bf9e53876f75eacc42bc97cfb557.
* [`900f0d4625`](containerd@900f0d4) Merge pull request  [containerd#2774](containerd#2774) from Random-Liu/cherrypick-#2769-release-1.1
* [`069260a0f3`](containerd@069260a) Set shim max procs via env var
* [`966fc1a0a7`](containerd@966fc1a) Partially revert the event discard change in containerd#2748.
* [`d91f8412b4`](containerd@d91f841) Increase reaper buffer size and non-blocking send
* [`a7dff7edfe`](containerd@a7dff7e) Merge pull request  [containerd#2778](containerd#2778) from thaJeztah/1.1_backport_ignore_modprobe_failures
* [`36d2576149`](containerd@36d2576) Ignore modprobe failures in ExecStartPre (systemd unit)
* [`665815b627`](containerd@665815b) enhance: update v1/v2 runtime
* [`b33743050f`](containerd@b337430) Merge pull request  [containerd#2765](containerd#2765) from Random-Liu/cherrypick-#2743-release-1.1
* [`345837be5d`](containerd@345837b) optimize shim lock in runtime v1
* [`68a2cbc50f`](containerd@68a2cbc) Merge pull request  [containerd#2757](containerd#2757) from Random-Liu/cherry-pick-#2624
* [`deeaac9094`](containerd@deeaac9) fix: modify lock location of exec delete
* [`c018c6ed18`](containerd@c018c6e) Merge pull request  [containerd#2749](containerd#2749) from Random-Liu/update-cri-release-1.1
* [`004e97846d`](containerd@004e978) Update cri to ac043660063cf4fd93aa17aeb8bfcaf2d7d249ab.

### Changes from containerd/cri

* [`bad0ae11`](containerd/cri@bad0ae1) Merge pull request  [containerd#964](containerd/cri#964) from mikebrow/cherry-pick-1.0-remove-authconfig-from-log
* [`51dff647`](containerd/cri@51dff64) removes authconfig from info log
* [`ac043660`](containerd/cri@ac04366) Merge pull request  [containerd#952](containerd/cri#952) from Random-Liu/cherrypick-#949-release-1.0
* [`9af1f21b`](containerd/cri@9af1f21) Add integration test.
* [`a601166e`](containerd/cri@a601166) Update go-cni to 40bcf8ec8acd7372be1d77031d585d5d8e561c90.
* [`f73ae0e3`](containerd/cri@f73ae0e) Teardown pod network even if the network namespace is closed

### Changes from containerd/go-cni

* [`40bcf8e`](containerd/go-cni@40bcf8e) Merge pull request  [containerd#32](containerd/go-cni#32) from Random-Liu/ignore-error-for-empty-path
* [`5ce81a6`](containerd/go-cni@5ce81a6) Only ignore "no such file or directory" error for empty path
* [`cc959f7`](containerd/go-cni@cc959f7) Merge pull request  [containerd#31](containerd/go-cni#31) from Random-Liu/ignore-not-exit-error
* [`a442970`](containerd/go-cni@a442970) Ignore "no such file or directory" error.
* [`7585e6d`](containerd/go-cni@7585e6d) Merge pull request  [containerd#30](containerd/go-cni#30) from Random-Liu/set-max-network-config
* [`6d7b509`](containerd/go-cni@6d7b509) Add WithAllConf, and change WithDefaultConf to only load default.
* [`ef9a3f8`](containerd/go-cni@ef9a3f8) Merge pull request  [containerd#29](containerd/go-cni#29) from crosbymichael/prefix
* [`6aeaa2d`](containerd/go-cni@6aeaa2d) Use network count in ifname index
* [`5882530`](containerd/go-cni@5882530) Merge pull request  [containerd#26](containerd/go-cni#26) from abhi/master
* [`1695039`](containerd/go-cni@1695039) Minor cleanup with concurrency and locking
* [`47457ea`](containerd/go-cni@47457ea) Merge pull request  [containerd#24](containerd/go-cni#24) from containerd/cni-opts
* [`d6ba409`](containerd/go-cni@d6ba409) Same Opt API for Load and New
* [`18e77c5`](containerd/go-cni@18e77c5) Merge pull request  [containerd#23](containerd/go-cni#23) from abhi/master
* [`83a302e`](containerd/go-cni@83a302e) Updating Readme based on new APIs
* [`25573b2`](containerd/go-cni@25573b2) Merge pull request  [containerd#22](containerd/go-cni#22) from abhi/badge
* [`ca0948e`](containerd/go-cni@ca0948e) Merge pull request  [containerd#21](containerd/go-cni#21) from abhi/travis
* [`9e927d3`](containerd/go-cni@9e927d3) Adding build badge
* [`e93f297`](containerd/go-cni@e93f297) Updating travis

### Dependency Changes

Previous release can be found at [v1.1.4](https://github.com/containerd/containerd/releases/tag/v1.1.4)

* **github.com/containerd/cri**       f117382467baf182382c44332bfbf488effc34bb -> bad0ae1102e1bf9e53876f75eacc42bc97cfb557
* **github.com/containerd/go-cni**    f2d7272f12d045b16ed924f50e91f9f9cecc55a7 -> 40bcf8ec8acd7372be1d77031d585d5d8e561c90
* **github.com/opencontainers/runc**  69663f0bd4b60df09991c08812a60108003fa340 -> 10d38b660a77168360df3522881e2dc2be5056bd