Tags: BenTheElder/containerd
Tags
containerd 1.2.6 Welcome to the v1.2.6 release of containerd! The sixth patch release for `containerd` 1.2 contains fixes for the containerd client, the CRI plugin and containerd io and mount handling. It whitelists 2 new syscalls in the default seccomp profile, and also updates CNI to v0.7.5 to include the fix for [CVE-2019-9946](https://nvd.nist.gov/vuln/detail/CVE-2019-9946). All these changes are noted below. ### Notable Updates * Allow overriding package name in `containerd --version` output. [containerd#3098](containerd#3098) * Add 2 new syscalls `io_pgetevents` and `statx` in the default seccomp whitelist. [containerd#3113](containerd#3113) [containerd#3115](containerd#3115) * Fix a bug that custom containerd cgroup path does not work in containerd 1.2.5. [containerd#3143](containerd#3143) * Fix a bug in the containerd client that `WithAllCapabilities` applies incomplete capability list. [containerd#3147](containerd#3147) * Fix a bug that container output can be incomplete when stdout and stderr are pointed to the same file. [containerd#3118](containerd#3118) * Fix a bug that containerd can't properly handle space in mount point path. [3161](containerd#3161) * cri: fix a bug that containers being gracefully stopped are SIGKILLed when kubelet is restarted. [cri#1098](containerd/cri#1098) * cri: Fix a bug that pod UTS namespace is used for host network. [cri#1111](containerd/cri#1111) * cri: Update CNI plugins to v0.7.5 for [CVE-2019-9946](https://nvd.nist.gov/vuln/detail/CVE-2019-9946). * Update cri to eb926cd79d3bac188dcc4ed7694fc9298f8831be. [containerd#3174](containerd#3174) * Update runc to v1.0.0-rc7-6-g029124da [containerd#3183](containerd#3183) to fix potential container start failure on non-SELinux system. [runc#2030](opencontainers/runc#2030) Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Lantao Liu * Sebastiaan van Stijn * Michael Crosby * Phil Estes * Derek McGowan * Peter Wagner * Akihiro Suda * Avi Kivity ### Changes * [`894b81a4b8`](containerd@894b81a) Merge pull request [containerd#3180](containerd#3180) from Random-Liu/1.2.6-release-note * [`4be9af65b9`](containerd@4be9af6) Prepare 1.2.6 containerd release. * [`9d87dddaec`](containerd@9d87ddd) Merge pull request [containerd#3183](containerd#3183) from thaJeztah/1.2_bump_runc * [`e01177391d`](containerd@e011773) bump runc to 029124da (v1.0.0-rc7-6-g029124da) * [`7f8cf855a0`](containerd@7f8cf85) Merge pull request [containerd#3174](containerd#3174) from Random-Liu/update-cri-release-1.2 * [`7c1ca26e2d`](containerd@7c1ca26) Update cri to eb926cd79d3bac188dcc4ed7694fc9298f8831be * [`02fd892d59`](containerd@02fd892) Merge pull request [containerd#3164](containerd#3164) from Random-Liu/update-cri-release-1.2 * [`67def02025`](containerd@67def02) Update cri to ffd9a66034aee582db04cf4c59e9b2262fd4fc59. * [`f2702c52a9`](containerd@f2702c5) Merge pull request [containerd#3161](containerd#3161) from thaJeztah/1.2_backport_fix_parseinfofile_parsing * [`f8d644ddc0`](containerd@f8d644d) Use pkg/errors for all errors * [`50cb294d08`](containerd@50cb294) fix parseInfoFile does not handle spaces in filenames * [`0d58ce1a2b`](containerd@0d58ce1) Merge pull request [containerd#3154](containerd#3154) from thaJeztah/1.2_backport_issue_3118 * [`76d1f3e692`](containerd@76d1f3e) runtime: guard Close() until both streams are complete * [`5236247ada`](containerd@5236247) runtime: log IO error when copying output streams * [`5066e517ff`](containerd@5066e51) Merge pull request [containerd#3147](containerd#3147) from Random-Liu/cherrypick-#3137-release-1.2 * [`de1b991122`](containerd@de1b991) Fix race and panic. * [`667ff6a451`](containerd@667ff6a) Merge pull request [containerd#3143](containerd#3143) from thaJeztah/1.2_backport_bump_cgroups * [`7f8deb37ed`](containerd@7f8deb3) Merge pull request [containerd#3141](containerd#3141) from thaJeztah/1.2_backport_bump_runc_v1.0.0-rc7 * [`1e75661aed`](containerd@1e75661) bump containerd/cgroups 4994991 * [`16a56020e6`](containerd@16a5602) update opencontainers/runc v1.0.0-rc7 * [`6d14516877`](containerd@6d14516) Merge pull request [containerd#3113](containerd#3113) from thaJeztah/1.2_backport_whitelist_statx * [`c9042ae5b5`](containerd@c9042ae) Merge pull request [containerd#3115](containerd#3115) from thaJeztah/1.2_backport_whitelist_io_pgetevents * [`2c2a86b019`](containerd@2c2a86b) seccomp: whitelist io_pgetevents * [`b0a8b6dd0b`](containerd@b0a8b6d) seccomp: whitelist statx syscall * [`5296db1b90`](containerd@5296db1) Merge pull request [containerd#3098](containerd#3098) from thaJeztah/1.2_backport_override_package_name * [`7700a82a47`](containerd@7700a82) Makefile: allow overriding package name ### Changes from containerd/cgroups * [`4994991`](containerd/cgroups@4994991) Merge pull request [containerd#79](containerd/cgroups#79) from crosbymichael/load-none * [`453efe3`](containerd/cgroups@453efe3) Return ErrCgroupDeleted when no subsystems ### Changes from containerd/cri * [`eb926cd7`](containerd/cri@eb926cd) Merge pull request [containerd#1115](containerd/cri#1115) from thaJeztah/1.2_backport_bump_selinux * [`c04ec48d`](containerd/cri@c04ec48) bump opencontainers/selinux v1.2.1 * [`24a507b3`](containerd/cri@24a507b) bump opencontainers/selinux to v1.2 * [`ffd9a660`](containerd/cri@ffd9a66) Merge pull request [containerd#1111](containerd/cri#1111) from Random-Liu/cherrypick-#1102-release-1.2 * [`83d24561`](containerd/cri@83d2456) No UTS namespace for hostnetwork. * [`b2937694`](containerd/cri@b293769) Merge pull request [containerd#1109](containerd/cri#1109) from Random-Liu/cherrypick-#1108-release-1.2 * [`8ec2da6d`](containerd/cri@8ec2da6) Update CNI to v0.7.5. * [`267a8caf`](containerd/cri@267a8ca) Merge pull request [containerd#1104](containerd/cri#1104) from Random-Liu/cherrypick-#1099-release-1.2 * [`03eae981`](containerd/cri@03eae98) Do not SIGKILL container if container stop is cancelled. * [`4bfcd93a`](containerd/cri@4bfcd93) Merge pull request [containerd#1097](containerd/cri#1097) from Random-Liu/cherrypick-#1083-release-1.2 * [`b3eab098`](containerd/cri@b3eab09) Support docker 18.09 in the test script. * [`087738ab`](containerd/cri@087738a) Merge pull request [containerd#1091](containerd/cri#1091) from Random-Liu/update-containerd-release-1.2 * [`befeac30`](containerd/cri@befeac3) Update containerd to v1.2.5. ### Dependency Changes Previous release can be found at [v1.2.5](https://github.com/containerd/containerd/releases/tag/v1.2.5) * **github.com/containerd/cgroups** dbea6f2 -> 4994991 * **github.com/containerd/cri** a92c40017473cbe0239ce180125f12669757e44f -> eb926cd79d3bac188dcc4ed7694fc9298f8831be * **github.com/containernetworking/plugins** v0.7.0 -> v0.7.5 * **github.com/opencontainers/runc** 2b18fe1d885ee5083ef9f0838fee39b62d653e30 -> 029124da7af7360afa781a0234d1b083550f797c * **github.com/opencontainers/selinux** b6fa367ed7f534f9ba25391cc2d467085dbb445a -> v1.2.1
containerd 1.1.7 Welcome to the v1.1.7 release of containerd! This is the seventh patch release for the `containerd` 1.1 release. This release contains fixes for image management, containerd client, CRI plugin and containerd io handling. It also updates runc to include an improved fix for [CVE-2019-5736](https://nvd.nist.gov/vuln/detail/CVE-2019-5736) to reduce the increased memory-consumption introduced by the original patch, updates CNI to v0.7.5 to include the fix for [CVE-2019-9946](https://nvd.nist.gov/vuln/detail/CVE-2019-9946), adds 2 new syscalls in the default seccomp profile. All these changes are noted below. ## Notable Updates * Fix an issue that non-existent parent directory in image layers is created with permission `0700`. [containerd#3017](containerd#3017) * Fix an issue that snapshots of the base image can be deleted by mistake, when images built on top of it are deleted. [containerd#3088](containerd#3088) * Allow overriding package name in `containerd --version` output. [containerd#3097](containerd#3097) * Add 2 new syscalls `io_pgetevents` and `statx` in the default seccomp whitelist. [containerd#3112](containerd#3112) [containerd#3114](containerd#3114) * Fix a bug that container output can be incomplete when stdout and stderr are pointed to the same file. [containerd#3156](containerd#3156) * cri: fix a bug that pod can't get started when the same volume is defined differently in the image and the pod spec. [cri#1059](containerd/cri#1059) * cri: fix a bug that causes container start failure after in-place upgrade containerd to 1.2.4+ or 1.1.6+. [cri#1082](containerd/cri#1082) * cri: fix a bug that containers being gracefully stopped are SIGKILLed when kubelet is restarted. [cri#1098](containerd/cri#1098) * cri: Fix a bug that pod UTS namespace is used for host network. [cri#1111](containerd/cri#1111) * cri: Update CNI plugins to v0.7.5 for [CVE-2019-9946](https://nvd.nist.gov/vuln/detail/CVE-2019-9946) * Update cri to f8171b4530bed8992973cc4a2f24efe53b821d53. [3175](containerd#3175) * Update runc to v1.0.0-rc7-6-g029124da [containerd#3184](containerd#3184) to include the improved fix for CVE-2019-5736, and fix a potential container start failure on non-SELinux system [runc#2030](opencontainers/runc#2030). Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Lantao Liu * Michael Crosby * Phil Estes * Sebastiaan van Stijn * Akihiro Suda * Derek McGowan * Peter Wagner * Andrei Vagin * Avi Kivity * Claudia Beresford * Daniel, Dao Quang Minh * John Howard * Kenfe-Mickaël Laventure * Lu Jingxiao * Madhan Raj Mookkandy * Nikos Anastopoulos * Parav Pandit * Sudeesh John * Wei Fu ### Changes * [`4278fbc243`](containerd@4278fbc) Merge pull request [containerd#3181](containerd#3181) from Random-Liu/prepare-1.1.7 * [`f8e22625c6`](containerd@f8e2262) Prepare v1.1.7 release. * [`af0bc2e035`](containerd@af0bc2e) Merge pull request [containerd#3184](containerd#3184) from thaJeztah/1.1_bump_runc * [`c186fd8d8c`](containerd@c186fd8) bump runc to 029124da (v1.0.0-rc7-6-g029124da) * [`82ebb90280`](containerd@82ebb90) Merge pull request [containerd#3175](containerd#3175) from Random-Liu/update-cri-release-1.1 * [`125c9a0046`](containerd@125c9a0) Update cri to f8171b4530bed8992973cc4a2f24efe53b821d53. * [`41b3a316f7`](containerd@41b3a31) Merge pull request [containerd#3165](containerd#3165) from Random-Liu/update-cri-release-1.1 * [`3afed24a4e`](containerd@3afed24) Update cri to b9c06fd1410f1e6699a83277887af399a1342736. * [`01cd85f6e8`](containerd@01cd85f) Merge pull request [containerd#3156](containerd#3156) from thaJeztah/1.1_backport_issue_3118 * [`de85314d4f`](containerd@de85314) runtime: guard Close() until both streams are complete * [`255da2a7b0`](containerd@255da2a) runtime: log IO error when copying output streams * [`2bf4d3a650`](containerd@2bf4d3a) Merge pull request [containerd#3140](containerd#3140) from thaJeztah/1.1_backport_bump_runc_v1.0.0-rc7 * [`25b40629d4`](containerd@25b4062) update opencontainers/runc v1.0.0-rc7 * [`cdc2fe6d81`](containerd@cdc2fe6) Merge pull request [containerd#3112](containerd#3112) from thaJeztah/1.1_backport_whitelist_statx * [`8f6bcb2bba`](containerd@8f6bcb2) Merge pull request [containerd#3114](containerd#3114) from thaJeztah/1.1_backport_whitelist_io_pgetevents * [`58bee8125b`](containerd@58bee81) seccomp: whitelist io_pgetevents * [`03d129bdb2`](containerd@03d129b) seccomp: whitelist statx syscall * [`9a0a5fd1e7`](containerd@9a0a5fd) Merge pull request [containerd#3097](containerd#3097) from thaJeztah/1.1_backport_override_package_name * [`d28f4aa242`](containerd@d28f4aa) Makefile: allow overriding package name * [`8ecb055c07`](containerd@8ecb055) Merge pull request [containerd#3083](containerd#3083) from thaJeztah/1.1_backport_bump_runc * [`21abff907c`](containerd@21abff9) Vendor opencontainers/runtime-spec 29686dbc * [`49b7692b16`](containerd@49b7692) Vendor in runtime spec referencing windows namespace * [`62e4a2c8e7`](containerd@62e4a2c) Update containerd dependencies for 1.2 * [`95a8d1d933`](containerd@95a8d1d) Merge pull request [containerd#3088](containerd#3088) from fuweid/me-cp-2876-release-1.1 * [`4e69228971`](containerd@4e69228) bugfix: unpack should always set the snapshot gc label * [`f86b114ac5`](containerd@f86b114) update runc to 2b18fe1d885ee5083ef9f0838fee39b62d653e30 * [`52bfc9f530`](containerd@52bfc9f) Merge pull request [containerd#3078](containerd#3078) from thaJeztah/1.1_bump_golang * [`8f044b8320`](containerd@8f044b8) Bump to Go 1.11.x * [`0fc64b682c`](containerd@0fc64b6) Workaround for gofmt change in Go 1.11 * [`45b8d86585`](containerd@45b8d86) Fix the formatting directives error during compilation * [`9d16e2e660`](containerd@9d16e2e) Merge pull request [containerd#3039](containerd#3039) from Random-Liu/cherrypick-#3018-release-1.1 * [`ee4754550a`](containerd@ee47545) Unpack should set 0755 when the parent directory doesn't exist. ### Changes from containerd/cgroups * [`5e61083`](containerd/cgroups@5e61083) Merge pull request [containerd#50](containerd/cgroups#50) from jingxiaolu/master * [`0d1587c`](containerd/cgroups@0d1587c) Add interface AddTask to control groups. So that we can set tasks when we need. * [`07683a6`](containerd/cgroups@07683a6) Merge pull request [containerd#45](containerd/cgroups#45) from anastop/master * [`15ef4c3`](containerd/cgroups@15ef4c3) Add Update method for the cpuset controller * [`c755602`](containerd/cgroups@c755602) Merge pull request [containerd#41](containerd/cgroups#41) from estesp/update-travis-go * [`0a357bb`](containerd/cgroups@0a357bb) Update Go versions for travis * [`5539584`](containerd/cgroups@5539584) Fix incorrect use of OCI runtime specs-go cgroup dev types * [`bf7d89f`](containerd/cgroups@bf7d89f) Merge pull request [containerd#40](containerd/cgroups#40) from containerd/license * [`f1d9380`](containerd/cgroups@f1d9380) Add license to files * [`78a98a6`](containerd/cgroups@78a98a6) Merge pull request [containerd#39](containerd/cgroups#39) from paravmellanox/master * [`ccd26c4`](containerd/cgroups@ccd26c4) Add support for rdma cgroup ### Changes from containerd/cri * [`f8171b45`](containerd/cri@f8171b4) Merge pull request [containerd#1117](containerd/cri#1117) from thaJeztah/1.0_backport_bump_selinux * [`961bbf32`](containerd/cri@961bbf3) bump opencontainers/selinux v1.2.1 * [`c7ec47f5`](containerd/cri@c7ec47f) bump opencontainers/selinux to v1.2 * [`b9c06fd1`](containerd/cri@b9c06fd) Merge pull request [containerd#1112](containerd/cri#1112) from Random-Liu/cherrypick-#1102-release-1.0 * [`c29999cc`](containerd/cri@c29999c) No UTS namespace for hostnetwork. * [`15a38626`](containerd/cri@15a3862) Merge pull request [containerd#1110](containerd/cri#1110) from Random-Liu/cherrypick-#1108-release-1.0 * [`5ca7e895`](containerd/cri@5ca7e89) Update CNI to v0.7.5. * [`04ccb9ca`](containerd/cri@04ccb9c) Merge pull request [containerd#1105](containerd/cri#1105) from Random-Liu/cherrypick-#1099-release-1.0 * [`b2568d2e`](containerd/cri@b2568d2) Do not SIGKILL container if container stop is cancelled. * [`3c81b301`](containerd/cri@3c81b30) Merge pull request [containerd#1087](containerd/cri#1087) from Random-Liu/cherrypick-#1085-release-1.0 * [`134c2f35`](containerd/cri@134c2f3) Fix /etc/hostname backward compatibility issue for in-place upgrade. * [`5b8046c2`](containerd/cri@5b8046c) Merge pull request [containerd#1073](containerd/cri#1073) from Random-Liu/cherrypick-#1072-release-1.0 * [`b01bbde7`](containerd/cri@b01bbde) Use clean path for map and comparison. * [`d35c6741`](containerd/cri@d35c674) Merge pull request [containerd#1068](containerd/cri#1068) from Random-Liu/cherrypick-#1055-release-1.0 * [`90bc4a66`](containerd/cri@90bc4a6) Use the correct sandbox config. * [`64e3e2d0`](containerd/cri@64e3e2d) Merge pull request [containerd#1051](containerd/cri#1051) from Random-Liu/update-containerd-release-1.0 * [`5f8a6b6b`](containerd/cri@5f8a6b6) Update containerd to 878924b. ### Changes from containerd/go-runc * [`14606eb`](containerd/go-runc@14606eb) Merge pull request [containerd#43](containerd/go-runc#43) from AkihiroSuda/rootless * [`0194529`](containerd/go-runc@0194529) add support for --rootless * [`74719bd`](containerd/go-runc@74719bd) Merge pull request [containerd#42](containerd/go-runc#42) from Random-Liu/expose-parsePSOutput * [`fdf39b3`](containerd/go-runc@fdf39b3) Expose parsePSOutput. * [`301f7c1`](containerd/go-runc@301f7c1) Merge pull request [containerd#41](containerd/go-runc#41) from masters-of-cats/master * [`07e192d`](containerd/go-runc@07e192d) Use user-specific temp directory if set * [`f271fa2`](containerd/go-runc@f271fa2) Merge pull request [containerd#40](containerd/go-runc#40) from avagin/tty * [`400dfa3`](containerd/go-runc@400dfa3) Add ConsoleSocket to RestoreOpts ### Dependency Changes Previous release can be found at [v1.1.6](https://github.com/containerd/containerd/releases/tag/v1.1.6) * **github.com/containerd/cgroups** fe281dd265766145e943a034aa41086474ea6130 -> 5e61083 * **github.com/containerd/cri** f0b5665a959119b6a6234001e6d55206d9200e95 -> f8171b4530bed8992973cc4a2f24efe53b821d53 * **github.com/containerd/go-runc** bcb223a061a3dd7de1a89c0b402a60f4dd9bd307 -> 14606eb66abd9e834e3bd22a4f5f46a3aad54c54 * **github.com/containernetworking/plugins** v0.7.0 -> v0.7.5 * **github.com/opencontainers/runc** 6635b4f0c6af3810594d2770f662f34ddc15b40d -> 029124da7af7360afa781a0234d1b083550f797c * **github.com/opencontainers/runtime-spec** v1.0.1 -> 29686dbc5559d93fb1ef402eeda3e35c38d75af4 * **github.com/opencontainers/selinux** b6fa367ed7f534f9ba25391cc2d467085dbb445a -> v1.2.1
containerd 1.2.5 Welcome to the v1.2.5 release of containerd! The fifth patch release for `containerd` 1.2 contains fixes for image management, cgroup management and the CRI plugin. It also updates runc to include an improved fix for CVE-2019-5736 to reduce the increased memory-consumption introduced by the original patch. All these changes are noted below. ### Notable Updates * Fix an issue that non-existent parent directory in image layers is created with permission `0700`. [containerd#3017](containerd#3017) * Fix an issue that snapshots of the base image can be deleted by mistake, when images built on top of it are deleted. [containerd#3087](containerd#3087) * Support for GC references to content from snapshot and container objects. [containerd#3080](containerd#3080) * cri: Fix a bug that pod can't get started when the same volume is defined differently in the image and the pod spec. [cri#1059](containerd/cri#1059) * cri: Fix a bug that causes container start failure after in-place upgrade containerd to 1.2.4+ or 1.1.6+. [cri#1082](containerd/cri#1082) * cgroups updated to dbea6f2 to fix issues for systemd 420 and non-existent cgroups. [containerd#3079](containerd#3079) * runc updated to 2b18fe1d885ee5083ef9f0838fee39b62d653e30 to include the improved fix for CVE-2019-5736. [containerd#3082](containerd#3082) * cri updated to a92c40017473cbe0239ce180125f12669757e44f. [containerd#3084](containerd#3084) Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Michael Crosby * Phil Estes * Lantao Liu * Gábor Lipták * Derek McGowan * Cedric Clerget * Daniel, Dao Quang Minh * Sebastiaan van Stijn * Ashley Sykes * Brent Baude * Chris Mark * Georgia Panoutsakopoulou * Grant Seltzer Richman * JoeWrightss * MichaelKatsoulis * Wei Fu * Wei Zhang ### Changes * [`bb71b10fd8`](containerd@bb71b10) Merge pull request [containerd#3086](containerd#3086) from Random-Liu/prepare-release-1-2-5 * [`6878e2b3fa`](containerd@6878e2b) Prepare v1.2.5 release. * [`075e1ed4e0`](containerd@075e1ed) Merge pull request [containerd#3092](containerd#3092) from Random-Liu/update-cri-release-1.2 * [`12f76332e6`](containerd@12f7633) Update cri to a92c40017473cbe0239ce180125f12669757e44f. * [`8f312e3586`](containerd@8f312e3) Merge pull request [containerd#3091](containerd#3091) from dmcgowan/release-1.2-update-mailmap * [`68f0866dfc`](containerd@68f0866) Update mailmap for cgroup authors * [`96a0d28390`](containerd@96a0d28) Merge pull request [containerd#3082](containerd#3082) from thaJeztah/1.2_backport_bump_runc * [`9ead3ca72a`](containerd@9ead3ca) Merge pull request [containerd#3087](containerd#3087) from fuweid/me-cherry-pick-2876 * [`88401ba68a`](containerd@88401ba) bugfix: unpack should always set the snapshot gc label * [`c1f49fa74c`](containerd@c1f49fa) Merge pull request [containerd#3084](containerd#3084) from Random-Liu/update-cri-release-1.2 * [`a5e6b940ea`](containerd@a5e6b94) Update cri to 8e7ca12f411d65de58ca672e8e4a0c1464b4fe34. * [`0b7e80e347`](containerd@0b7e80e) Merge pull request [containerd#3080](containerd#3080) from dmcgowan/backport-1.2-gc-content-references * [`b7e7f1140f`](containerd@b7e7f11) update runc to 2b18fe1d885ee5083ef9f0838fee39b62d653e30 * [`17a4289dee`](containerd@17a4289) Add content gc ref labels from containers, images, and snapshots * [`f3ab47dd2b`](containerd@f3ab47d) Merge pull request [containerd#3079](containerd#3079) from crosbymichael/cherry-picks1.2 * [`e8091eb546`](containerd@e8091eb) Bump cgroups to dbea6f2 * [`96a8180618`](containerd@96a8180) Merge pull request [containerd#3077](containerd#3077) from thaJeztah/1.2_bump_golang * [`aed4a5e96c`](containerd@aed4a5e) Bump to Go 1.11.x * [`782dd8988a`](containerd@782dd89) Merge pull request [containerd#3038](containerd#3038) from Random-Liu/cherrypick-#3018-release-1.2 * [`9899aca83f`](containerd@9899aca) Unpack should set 0755 when the parent directory doesn't exist. ### Changes from containerd/cgroups * [`dbea6f2`](containerd/cgroups@dbea6f2) Merge pull request [containerd#77](containerd/cgroups#77) from crosbymichael/non-active * [`4a9f0f7`](containerd/cgroups@4a9f0f7) Add SkipOpts for handling how subsystems are registered * [`4dacf2b`](containerd/cgroups@4dacf2b) Check for non-active/supported cgroups * [`39b18af`](containerd/cgroups@39b18af) Merge pull request [containerd#72](containerd/cgroups#72) from gliptak/pids1 * [`2fd912c`](containerd/cgroups@2fd912c) Add tests for pids * [`1152b96`](containerd/cgroups@1152b96) Merge pull request [containerd#73](containerd/cgroups#73) from gliptak/gofmt1 * [`afd5981`](containerd/cgroups@afd5981) Gofmt cgroup_test * [`65ce98b`](containerd/cgroups@65ce98b) Merge pull request [containerd#69](containerd/cgroups#69) from cclerget/master-weight-pointer * [`0f372c6`](containerd/cgroups@0f372c6) Merge pull request [containerd#71](containerd/cgroups#71) from JoeWrightss/patch-1 * [`f48bd85`](containerd/cgroups@f48bd85) Fixs return error message * [`10cd53e`](containerd/cgroups@10cd53e) Merge pull request [containerd#70](containerd/cgroups#70) from gliptak/patch-1 * [`64bade4`](containerd/cgroups@64bade4) Take value instead of pointer value * [`b49c471`](containerd/cgroups@b49c471) Correct ineffassign warning * [`3bc6dde`](containerd/cgroups@3bc6dde) Merge pull request [containerd#68](containerd/cgroups#68) from cclerget/master-net_prio-typo * [`6b552a8`](containerd/cgroups@6b552a8) Fix net_prio typo * [`c0437c3`](containerd/cgroups@c0437c3) Merge pull request [containerd#67](containerd/cgroups#67) from gpanouts/get-all-cgroup-tasks * [`a31a0ff`](containerd/cgroups@a31a0ff) Add functionality for retrieving all tasks of a cgroup * [`82cb49f`](containerd/cgroups@82cb49f) Merge pull request [containerd#63](containerd/cgroups#63) from ChrsMark/lenient-subsystems-checking * [`7d825b2`](containerd/cgroups@7d825b2) Add test for cgroups load when missing hierarchy in one subsystem * [`f6cbfb4`](containerd/cgroups@f6cbfb4) Change Load function in order to be more lenient on subsystems' checking * [`965bb1d`](containerd/cgroups@965bb1d) Merge pull request [containerd#66](containerd/cgroups#66) from crosbymichael/systemdci * [`ab9ec0e`](containerd/cgroups@ab9ec0e) Add go-systemd dep for CI testing * [`0e94a83`](containerd/cgroups@0e94a83) Merge pull request [containerd#59](containerd/cgroups#59) from gliptak/patch-1 * [`4479d11`](containerd/cgroups@4479d11) Merge pull request [containerd#62](containerd/cgroups#62) from estesp/fix-gofmt * [`9beb998`](containerd/cgroups@9beb998) Merge pull request [containerd#61](containerd/cgroups#61) from gliptak/patch-3 * [`9a09e58`](containerd/cgroups@9a09e58) Fix gofmt of systemd.go * [`84e6e6e`](containerd/cgroups@84e6e6e) Merge pull request [containerd#60](containerd/cgroups#60) from gliptak/patch-2 * [`e13f6cc`](containerd/cgroups@e13f6cc) Add GoReportCard badge to README * [`d124595`](containerd/cgroups@d124595) Add Go 1.11 to Travis * [`d961ab9`](containerd/cgroups@d961ab9) Correct typo * [`d240072`](containerd/cgroups@d240072) Merge pull request [containerd#57](containerd/cgroups#57) from estesp/project-update * [`e4cf832`](containerd/cgroups@e4cf832) Add project references and use common project travis * [`8baeff6`](containerd/cgroups@8baeff6) Merge pull request [containerd#56](containerd/cgroups#56) from grantseltzer/patch-1 * [`9de57ff`](containerd/cgroups@9de57ff) Add godoc badge to README.md * [`5017d4e`](containerd/cgroups@5017d4e) Merge pull request [containerd#54](containerd/cgroups#54) from WeiZhang555/bugfix * [`13aaafd`](containerd/cgroups@13aaafd) Bugfix: can't write to cpuset cgroup * [`58556f5`](containerd/cgroups@58556f5) Merge pull request [containerd#53](containerd/cgroups#53) from baude/systemdslicedelegate * [`15ed73c`](containerd/cgroups@15ed73c) systemd-239+ no longer allows delegate slice * [`3024bc7`](containerd/cgroups@3024bc7) Merge pull request [containerd#52](containerd/cgroups#52) from Sykomaniac/bugfix/slice-name * [`2596f33`](containerd/cgroups@2596f33) Remove call to unitName * [`2e2922e`](containerd/cgroups@2e2922e) Merge pull request [containerd#51](containerd/cgroups#51) from containerd/type * [`0f3de2f`](containerd/cgroups@0f3de2f) Fix empty device type ### Changes from containerd/cri * [`a92c4001`](containerd/cri@a92c400) Merge pull request [containerd#1086](containerd/cri#1086) from Random-Liu/cherrypick-#1085-release-1.2 * [`616d154e`](containerd/cri@616d154) Fix /etc/hostname backward compatibility issue for in-place upgrade. * [`8e7ca12f`](containerd/cri@8e7ca12) Merge pull request [containerd#1081](containerd/cri#1081) from Random-Liu/cherrypick-#1056-release-1.2 * [`989fb1ab`](containerd/cri@989fb1a) Add an OCI annotation for sandbox log directory. * [`0eee55a2`](containerd/cri@0eee55a) Merge pull request [containerd#1074](containerd/cri#1074) from Random-Liu/cherrypick-#1072-release-1.2 * [`4d4f610e`](containerd/cri@4d4f610) Use clean path for map and comparison. * [`9c25ab5b`](containerd/cri@9c25ab5) Merge pull request [containerd#1067](containerd/cri#1067) from Random-Liu/cherrypick-#1055-release-1.2 * [`eaf8efc5`](containerd/cri@eaf8efc) Use the correct sandbox config. * [`afbdeacc`](containerd/cri@afbdeac) Merge pull request [containerd#1050](containerd/cri#1050) from Random-Liu/update-containerd-release-1.2 * [`72fab7c8`](containerd/cri@72fab7c) Update containerd to 583472f. ### Dependency Changes Previous release can be found at [v1.2.4](https://github.com/containerd/containerd/releases/tag/v1.2.4) * **github.com/containerd/cgroups** 5e61083 -> dbea6f2 * **github.com/containerd/cri** da0c016c830b2ea97fd1d737c49a568a816bf964 -> a92c40017473cbe0239ce180125f12669757e44f * **github.com/opencontainers/runc** 6635b4f0c6af3810594d2770f662f34ddc15b40d -> 2b18fe1d885ee5083ef9f0838fee39b62d653e30
containerd 1.2.4 Welcome to the v1.2.4 release of containerd! The fourth patch release for `containerd` 1.2 re-vendors `runc` which includes the patch for the critical CVE-2019-5736 escape vulnerability. This release also includes a few fixes for the CRI plugin as well as a change for Windows; all these changes are noted below. ### Notable Updates * cri: Set /etc/hostname [containerd#1042](containerd/cri#1042) * cri: Fix env performance issue [containerd#1045](containerd/cri#1045) * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve CVE-2019-5736 * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964 * Windows: NewDirectIOFromFIFOSet [containerd#2934](containerd#2934) Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Lantao Liu * Justin Terry * Sebastiaan van Stijn * Derek McGowan * Michael Crosby * Phil Estes * John Howard ### Changes * [`e6b3f5632f`](containerd@e6b3f56) Merge pull request [containerd#3002](containerd#3002) from estesp/prepare-1.2.4-release * [`5d1443dca7`](containerd@5d1443d) Prepare v1.2.4 release * [`2095626cff`](containerd@2095626) Merge pull request [containerd#3014](containerd#3014) from thaJeztah/1.2_bump_cri * [`78286104d0`](containerd@7828610) Merge pull request [containerd#3013](containerd#3013) from thaJeztah/1.2_backport_windows_changes * [`3cbdf9e488`](containerd@3cbdf9e) [release/1.2] update containerd/cri to da0c016c830b2ea97fd1d737c49a568a816bf964 * [`dfa19e5969`](containerd@dfa19e5) Windows:NewDirectIOFromFIFOSet * [`84a14ae000`](containerd@84a14ae) Update runhcs options to include CRI Sandbox support * [`6a8198b07d`](containerd@6a8198b) Forward ctr.exe --debug as io.containerd.runhcs.v1 options * [`d40cc95fcf`](containerd@d40cc95) Implement io.containerd.runhcs.v1 shim log opts * [`30ca1c5544`](containerd@30ca1c5) Add io.containerd.runhcs.v1 shim proto options * [`7908802cb5`](containerd@7908802) Fix Makefile to run protobuild on paths with spaces * [`583472f67a`](containerd@583472f) Merge pull request [containerd#2998](containerd#2998) from thaJeztah/1.2_backport_bump_runc_cve_2019-5736 * [`b4bf3e340c`](containerd@b4bf3e3) Update runc to 6635b4f0c6af3810594d2770f662f34ddc15b40d (CVE-2019-5736) * [`74133fa4ea`](containerd@74133fa) Merge pull request [containerd#2995](containerd#2995) from thaJeztah/1.2_backport_remove_normalize_image_ref * [`ed756ffdd4`](containerd@ed756ff) Use distribution's reference.ParseDockerRef * [`2fb3823635`](containerd@2fb3823) Bump github.com/docker/distribution to 0d3efadf0154c2b8a4e7b6621fff9809655cc580 ### Changes from containerd/cri * [`da0c016c`](containerd/cri@da0c016) Merge pull request [containerd#1049](containerd/cri#1049) from Random-Liu/cherrypick-#1045-release-1.2 * [`fd12e919`](containerd/cri@fd12e91) Merge pull request [containerd#1046](containerd/cri#1046) from Random-Liu/cherrypick-#1042-release-1.2 * [`ca6506b4`](containerd/cri@ca6506b) Include default envs from containerd. * [`2add88c1`](containerd/cri@2add88c) Add env cache. * [`50fbeb6f`](containerd/cri@50fbeb6) Don't log config at info level. * [`1a51d430`](containerd/cri@1a51d43) Set /etc/hostname. ### Dependency Changes Previous release can be found at [v1.2.3](https://github.com/containerd/containerd/releases/tag/v1.2.3) * **github.com/containerd/cri** c3cf754321fc38c6af5dfd2552fdde0ad192b31d -> da0c016c830b2ea97fd1d737c49a568a816bf964 * **github.com/docker/distribution** b38e5838b7b2f2ad48e06ec4b500011976080621 -> 0d3efadf0154c2b8a4e7b6621fff9809655cc580 * **github.com/opencontainers/runc** 12f6a991201fdb8f82579582d5e00e28fba06d0a -> 6635b4f0c6af3810594d2770f662f34ddc15b40d * **golang.org/x/sys** 1b2967e3c290b7c545b3db0deeda16e9be4f98a2 -> 41f3e6584952bb034a481797859f6ab34b6803bd
containerd 1.1.6 Welcome to the v1.1.6 release of containerd! This is the sixth patch release for the `containerd` 1.1 release. This release specifically re-vendors `runc` to capture the fix for the critical CVE-2019-5736 container escape. Several CRI fixes were also included in this release and are listed below. ## Runtime * Update runc to 6635b4f0c6af3810594d2770f662f34ddc15b40d to fix CVE-2019-5736 ## CRI * containerd/cri#984 filter events for non k8s.io namespaces (resolves firecracker-microvm/firecracker-containerd#35) * containerd/cri#991 Remove container lifecycle image dependency (fixes containerd/cri#990) * containerd/cri#1016 Specify platform for image pull (fixes containerd/cri#1015) * containerd/cri#1027 Fix the log ending newline handling (fixes containerd/cri#1026) * containerd/cri#1042 Set /etc/hostname (fixes containerd/cri#1041) * containerd/cri#1045 Fix env performance issue (fixes containerd/cri#1044) * Update cri to f0b5665a959119b6a6234001e6d55206d9200e95 Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Lantao Liu * Phil Estes * Michael Crosby * Sebastiaan van Stijn * Akihiro Suda * Derek McGowan * Lifubang * Mike Brown * Wei Fu * Ace-Tang * Mike Brown ### Changes * [`0ad902c05b`](containerd@0ad902c) Merge pull request [containerd#3003](containerd#3003) from estesp/prepare-v1.1.6-release * [`ed854e3ca1`](containerd@ed854e3) Prepare v1.1.6 release * [`a79c691e0f`](containerd@a79c691) Merge pull request [containerd#3015](containerd#3015) from thaJeztah/1.1_bump_cri * [`38bf6c598a`](containerd@38bf6c5) [release/1.1] update containerd/cri to f0b5665a959119b6a6234001e6d55206d9200e95 * [`878924b9b5`](containerd@878924b) Merge pull request [containerd#2999](containerd#2999) from thaJeztah/1.1_backport_bump_runc_cve_2019-5736 * [`3177b4b96e`](containerd@3177b4b) Update runc to 6635b4f0c6af3810594d2770f662f34ddc15b40d (CVE-2019-5736) * [`80c3f1a3e4`](containerd@80c3f1a) Merge pull request [containerd#2966](containerd#2966) from fuweid/remove-noop-1-1 * [`3e6d7f678d`](containerd@3e6d7f6) metadata/gc: remove the noop-loop for snapshot reference * [`813e5f6765`](containerd@813e5f6) Merge pull request [containerd#2954](containerd#2954) from thaJeztah/1.1_backport_fix_xattr * [`b48afb426e`](containerd@b48afb4) fix: SCHILY.xattrs should be SCHILY.xattr * [`9979a1a936`](containerd@9979a1a) Merge pull request [containerd#2951](containerd#2951) from crosbymichael/lint-relase11 * [`ff8a80e4c1`](containerd@ff8a80e) [release/1.1] fix: linter issue * [`6b15143e8d`](containerd@6b15143) Merge pull request [containerd#2933](containerd#2933) from AkihiroSuda/runc20190115-1.1 * [`acd495de00`](containerd@acd495d) bump up runc * [`b55cf2cc05`](containerd@b55cf2c) Merge pull request [containerd#2892](containerd#2892) from thaJeztah/1.1_revert_temp_golang_fix * [`0e93a1e41f`](containerd@0e93a1e) Revert "Fix CI due to Golang 1.10.6 / 1.11.3 regressions (workaround)" * [`02e398d93e`](containerd@02e398d) Merge pull request [containerd#2880](containerd#2880) from thaJeztah/1.1_backport_fix_ci_golang_1.11 * [`66a3eeb5b7`](containerd@66a3eeb) Fix CI due to Golang 1.10.6 / 1.11.3 regressions (workaround) * [`3c89a5e3f1`](containerd@3c89a5e) Merge pull request [containerd#2833](containerd#2833) from acmcodercom/pidreuseattack * [`0bb672dc2b`](containerd@0bb672d) Merge pull request [containerd#2864](containerd#2864) from thaJeztah/1.1_backport_runc-kill-paused * [`a1bfd3a2ed`](containerd@a1bfd3a) Update runc to 96ec2177ae841256168fcf76954f7177af * [`dbf186d970`](containerd@dbf186d) Merge pull request [containerd#2848](containerd#2848) from thaJeztah/1.1_backport_mask_asound * [`3d313382ca`](containerd@3d31338) Add /proc/asound to masked paths * [`6bb83f2195`](containerd@6bb83f2) Merge pull request [containerd#2834](containerd#2834) from acmcodercom/execrace * [`190c910435`](containerd@190c910) fix pid reuse attack when kill a exec process * [`33c860f31d`](containerd@33c860f) fix race in exec delete and start ### Changes from containerd/cri * [`f0b5665a`](containerd/cri@f0b5665) Merge pull request [containerd#1048](containerd/cri#1048) from Random-Liu/cherrypick-#1045-release-1.0 * [`5edec1d8`](containerd/cri@5edec1d) Include default envs from containerd. * [`03cd5a31`](containerd/cri@03cd5a3) Add env cache. * [`eedb9f81`](containerd/cri@eedb9f8) Merge pull request [containerd#1047](containerd/cri#1047) from Random-Liu/cherrypick-#1042-release-1.0 * [`b33f16e1`](containerd/cri@b33f16e) Don't log config at info level. * [`3c7c404d`](containerd/cri@3c7c404) Set /etc/hostname. * [`71909a1a`](containerd/cri@71909a1) Merge pull request [containerd#1031](containerd/cri#1031) from Random-Liu/cherrypick-#1027-release-1.0 * [`dd55db0a`](containerd/cri@dd55db0) Add integration test. * [`b9cb0b21`](containerd/cri@b9cb0b2) Fix lint error. * [`0e24a83a`](containerd/cri@0e24a83) Fix the log ending newline handling. * [`562eefa9`](containerd/cri@562eefa) Merge pull request [containerd#1016](containerd/cri#1016) from Random-Liu/specify-platform-release-1.0 * [`3a10f4e6`](containerd/cri@3a10f4e) Specify platform for image pull. * [`12b411e8`](containerd/cri@12b411e) Merge pull request [containerd#1008](containerd/cri#1008) from Random-Liu/revert-#998-release-1.0 * [`1347be5a`](containerd/cri@1347be5) Revert "Temporary fix for golang regression #29241." * [`685bd043`](containerd/cri@685bd04) Merge pull request [containerd#1006](containerd/cri#1006) from Random-Liu/cherrypick-#1004-release-1.0 * [`9d3f7085`](containerd/cri@9d3f708) Install libseccomp2 package based on debian version. * [`5766ef2d`](containerd/cri@5766ef2) Merge pull request [containerd#995](containerd/cri#995) from Random-Liu/cherrypick-#991-release-1.0 * [`a8b85255`](containerd/cri@a8b8525) Merge pull request [containerd#998](containerd/cri#998) from Random-Liu/cherrypick-#997-release-1.0 * [`2b2ca4c4`](containerd/cri@2b2ca4c) Temporary fix for golang regression #29241. * [`0ac83633`](containerd/cri@0ac8363) Add integration test. * [`5e759f5c`](containerd/cri@5e759f5) Remove container lifecycle image ref dependency. * [`89aaac88`](containerd/cri@89aaac8) Merge pull request [containerd#988](containerd/cri#988) from mikebrow/cherrypick-#984-release-1.0 * [`2f5d677a`](containerd/cri@2f5d677) filter namespace ### Dependency Changes Previous release can be found at [v1.1.5](https://github.com/containerd/containerd/releases/tag/v1.1.5) * **github.com/containerd/cri** bad0ae1102e1bf9e53876f75eacc42bc97cfb557 -> f0b5665a959119b6a6234001e6d55206d9200e95 * **github.com/opencontainers/runc** 10d38b660a77168360df3522881e2dc2be5056bd -> 6635b4f0c6af3810594d2770f662f34ddc15b40d * **golang.org/x/sys** 1b2967e3c290b7c545b3db0deeda16e9be4f98a2 -> 41f3e6584952bb034a481797859f6ab34b6803bd
containerd 1.2.3 Welcome to the v1.2.3 release of containerd! The third patch release for `containerd` 1.2 contains important fixes for container image backwards compatibility as well as some runtime and CRI issues. ### Notable Updates * fix in Tar xattrs to restore compatibility with older container images [containerd#2953](containerd#2953) * background `O_NONBLOCK` in OpenFifo to fix uncancelled context timeout issue * updated `PlatformRuntime` interface to include Add/Delete methods * runtime: exec race condition fixed [containerd#2970](containerd#2970) * cri: fixed issues with extra newline character in log without an extra newline [containerd#2984](containerd#2984) * cri: fixed an issue with pods being ignored after load failures [containerd#2984](containerd#2984) * runc updated to 12f6a991201fdb8f82579582d5e00e28fba06d0a * cri updated to c3cf754321fc38c6af5dfd2552fdde0ad192b31d Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Lantao Liu * Michael Crosby * Wei Fu * Derek McGowan * Akihiro Suda * Phil Estes * Ace-Tang * Evan Hazlett ### Changes * [`7f5f1176`](containerd@7f5f117) Merge pull request [containerd#2974](containerd#2974) from ehazlett/release-v1.2.3 * [`7216861d`](containerd@7216861) Update for 1.2.3 release * [`5de147d9`](containerd@5de147d) Merge pull request [containerd#2984](containerd#2984) from Random-Liu/update-cri-release-1.2 * [`f7ac34e3`](containerd@f7ac34e) Update cri plugin to c3cf754321fc38c6af5dfd2552fdde0ad192b31d. * [`0137339c`](containerd@0137339) Merge pull request [containerd#2977](containerd#2977) from crosbymichael/io-panic * [`7daf0804`](containerd@7daf080) Fix potential containerd panic. * [`2fd20f11`](containerd@2fd20f1) Merge pull request [containerd#2972](containerd#2972) from crosbymichael/exec-lock * [`5730c500`](containerd@5730c50) Add a separate lock for pid. * [`b9b7ef32`](containerd@b9b7ef3) Revert "use state machine management for exec.Pid()" * [`dba2e5e5`](containerd@dba2e5e) Merge pull request [containerd#2965](containerd#2965) from fuweid/remove-noop * [`9b6a318a`](containerd@9b6a318) metadata/gc: remove the noop-loop for snapshot reference * [`d86a73a4`](containerd@d86a73a) Merge pull request [containerd#2946](containerd#2946) from fuweid/platformruntime * [`dd29d5c3`](containerd@dd29d5c) Merge pull request [containerd#2947](containerd#2947) from fuweid/pull-oct * [`a0b4da71`](containerd@a0b4da7) bugfix: support application/octet-stream during pull * [`b4d38c0f`](containerd@b4d38c0) runtime: add Add/Delete method in PlatformRuntime interface * [`af900154`](containerd@af90015) Merge pull request [containerd#2955](containerd#2955) from Random-Liu/cherrypick-#2944-release-1.2 * [`ab2cf013`](containerd@ab2cf01) Use context.Background for `O_NONBLOCK` `OpenFifo`. * [`fa60b5be`](containerd@fa60b5b) Merge pull request [containerd#2953](containerd#2953) from thaJeztah/1.2_backport_fix_xattr * [`2244a20c`](containerd@2244a20) fix: SCHILY.xattrs should be SCHILY.xattr * [`8c9ede4f`](containerd@8c9ede4) Merge pull request [containerd#2950](containerd#2950) from crosbymichael/lint-release * [`bf3c932a`](containerd@bf3c932) [release 1.2] fix: linter issue * [`5c38d942`](containerd@5c38d94) Merge pull request [containerd#2932](containerd#2932) from AkihiroSuda/runc20190115-1.2 * [`32f10c77`](containerd@32f10c7) bump up runc ### Changes from containerd/cri * [`c3cf7543`](containerd/cri@c3cf754) Merge pull request [containerd#1038](containerd/cri#1038) from Random-Liu/cherrypick-#1037-release-1.2 * [`89672cc6`](containerd/cri@89672cc) Update containerd to 0137339. * [`bba954f1`](containerd/cri@bba954f) Add integration test for unknown state * [`36d523d1`](containerd/cri@36d523d) Support unknown state for sandbox and container * [`ad9a8533`](containerd/cri@ad9a853) Add state machine for sandbox and container * [`c2ea49fa`](containerd/cri@c2ea49f) Change StateUnknown to StateInit * [`df07fdd2`](containerd/cri@df07fdd) Merge pull request [containerd#1030](containerd/cri#1030) from Random-Liu/cherrypick-#1027-release-1.2 * [`da7e1948`](containerd/cri@da7e194) Add integration test. * [`10073e49`](containerd/cri@10073e4) Fix lint error. * [`283aac3d`](containerd/cri@283aac3) Fix the log ending newline handling. ### Dependency Changes Previous release can be found at [v1.2.2](https://github.com/containerd/containerd/releases/tag/v1.2.2) * **github.com/containerd/cri** 0d5cabd006cb5319dc965046067b8432d9fa5ef8 -> c3cf754321fc38c6af5dfd2552fdde0ad192b31d * **github.com/opencontainers/runc** 96ec2177ae841256168fcf76954f7177af9446eb -> 12f6a991201fdb8f82579582d5e00e28fba06d0a
containerd 1.2.2 Welcome to the v1.2.2 release of containerd! The second patch release for `containerd` 1.2 includes important runtime and CRI fixes. ## Runtime * Fix rare deadlock on FIFO creation with timeout ## CRI **ACTION REQUIRED:** For Kubernetes support, when upgrading containerd from 1.2.0 (including rc releases) to 1.2.1+, a node reboot is recommended to avoid a known deadlock in 1.2.0. See [containerd/cri#1018](containerd/cri#1018) * Fix a bug that a container can't be stopped or inspected when its corresponding image is deleted * Fix a bug that the cri plugin handles containerd events outside of `k8s.io` namespace Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Lantao Liu * Derek McGowan * Michael Crosby * Mike Brown * Sebastiaan van Stijn * Akihiro Suda ### Changes * [`9754871865`](containerd@9754871) Merge pull request [containerd#2917](containerd#2917) from dmcgowan/release-1.2.2 * [`ef637041ed`](containerd@ef63704) Update for 1.2.2 release * [`4bb2b0c366`](containerd@4bb2b0c) Merge pull request [containerd#2912](containerd#2912) from Random-Liu/update-cri-release-1.2 * [`f30fd02372`](containerd@f30fd02) Update cri to 0d5cabd006cb5319dc965046067b8432d9fa5ef8 (branch release/1.2). * [`46e633389b`](containerd@46e6333) Merge pull request [containerd#2893](containerd#2893) from thaJeztah/1.2_revert_temp_golang_fix * [`e71a191f6d`](containerd@e71a191) Revert "Fix CI due to Golang 1.10.6 / 1.11.3 regressions (workaround)" * [`aa5e000c96`](containerd@aa5e000) Merge pull request [containerd#2878](containerd#2878) from andrewhsu/backport-1.2-fifo-timeout * [`31be8649fd`](containerd@31be864) Merge pull request [containerd#2881](containerd#2881) from thaJeztah/1.2_backport_fix_ci_golang_1.11 * [`27c6449c2c`](containerd@27c6449) Fix CI due to Golang 1.10.6 / 1.11.3 regressions (workaround) * [`18f57e20b0`](containerd@18f57e2) Add timeout and cancel to shim fifo open ### Changes from containerd/cri * [`0d5cabd0`](containerd/cri@0d5cabd) Merge pull request [containerd#1007](containerd/cri#1007) from Random-Liu/revert-#999-release-1.2 * [`6ca182a8`](containerd/cri@6ca182a) Revert "Temporary fix for golang regression #29241." * [`d0f8c33c`](containerd/cri@d0f8c33) Merge pull request [containerd#1005](containerd/cri#1005) from Random-Liu/cherrypick-#1004-release-1.2 * [`5e6b3386`](containerd/cri@5e6b338) Install libseccomp2 package based on debian version. * [`763bf278`](containerd/cri@763bf27) Merge pull request [containerd#996](containerd/cri#996) from Random-Liu/cherrypick-#995-release-1.2 * [`23e907d9`](containerd/cri@23e907d) Merge pull request [containerd#999](containerd/cri#999) from Random-Liu/cherrypick-#997-release-1.2 * [`298c7fd9`](containerd/cri@298c7fd) Temporary fix for golang regression #29241. * [`e38e269a`](containerd/cri@e38e269) Add integration test. * [`dcc9d279`](containerd/cri@dcc9d27) Remove container lifecycle image ref dependency. * [`47f62352`](containerd/cri@47f6235) Merge pull request [containerd#987](containerd/cri#987) from mikebrow/cherrypick-#984-release-1.2 * [`2216805e`](containerd/cri@2216805) filter namespace ### Dependency Changes Previous release can be found at [v1.2.1](https://github.com/containerd/containerd/releases/tag/v1.2.1) * **github.com/containerd/cri** 0ca1e3c2b73b5c38e72f29bb76338d0078b23d6c -> 0d5cabd006cb5319dc965046067b8432d9fa5ef8
containerd 1.2.1 Welcome to the v1.2.1 release of containerd! The first patch release for `containerd` 1.2 includes several runtime and CRI fixes. ## Runtime * Fix race in process state when pausing containers * Optimize runtime v1 shim locking * Fix hang processing events * Increase event buffer size * Fix broken pipe causing shim hang * Update runc ## CRI * Remove auth config logs * Fix NetNS cache state * Fix a bug that containers sharing pod pid namespace can't be stopped * Remove host pid usage to work better with katacontainer ## Service * Ignore modprobe failures in systemd ExecStartPre Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Lantao Liu * Derek McGowan * Michael Crosby * Phil Estes * Lifubang * Sebastiaan van Stijn * Ace-Tang * Akihiro Suda * Justin Terry * Mike Brown * Wei Fu ### Changes * [`9b32062dc1`](containerd@9b32062) Merge pull request [containerd#2852](containerd#2852) from dmcgowan/prepare-1.2.1 * [`51134077d1`](containerd@5113407) Update version to 1.2.1 * [`dcc47dddd1`](containerd@dcc47dd) Merge pull request [containerd#2861](containerd#2861) from dmcgowan/cherrypick-1.2-2857 * [`4c327b8e56`](containerd@4c327b8) Update runc to 96ec2177ae841256168fcf76954f7177af * [`b65a1137f4`](containerd@b65a113) Merge pull request [containerd#2860](containerd#2860) from Random-Liu/update-cri-release-1.2 * [`18e453e4fd`](containerd@18e453e) Update release note. * [`586807a80c`](containerd@586807a) Update cri plugin to 0ca1e3c2b73b5c38e72f29bb76338d0078b23d6c. * [`4b284fa3ab`](containerd@4b284fa) Merge pull request [containerd#2856](containerd#2856) from Random-Liu/cherrypick-#2854-release-1.2 * [`b413e843ad`](containerd@b413e84) Kill should still work in stopped state. * [`a06cddc2ed`](containerd@a06cddc) Merge pull request [containerd#2845](containerd#2845) from nnttmm/backport_2826 * [`176a56216c`](containerd@176a562) Merge pull request [containerd#2842](containerd#2842) from thaJeztah/1.2_backport_update_runc_1.0-rc6 * [`8dc87dd8d9`](containerd@8dc87dd) Merge pull request [containerd#2847](containerd#2847) from thaJeztah/1.2_backport_mask_asound * [`703786c5c9`](containerd@703786c) Add /proc/asound to masked paths * [`c42c8952b7`](containerd@c42c895) use state machine management for exec.Pid() * [`93d5b4b018`](containerd@93d5b4b) Update runc to v1.0.0-rc6 * [`de1f167ab9`](containerd@de1f167) Merge pull request [containerd#2819](containerd#2819) from dmcgowan/prepare-1.2.1-rc * [`27d72ba795`](containerd@27d72ba) Update version * [`e3840cce17`](containerd@e3840cc) Add 1.2.1 release notes * [`940c0c06d2`](containerd@940c0c0) Merge pull request [containerd#2817](containerd#2817) from Random-Liu/cherrypick-2811-release-1.2 * [`4598ec2111`](containerd@4598ec2) Lock `KillAll`. * [`e429785ca0`](containerd@e429785) Merge pull request [containerd#2815](containerd#2815) from thaJeztah/1.2_backport_shimlockwhenstdinclose * [`9be591e4a6`](containerd@9be591e) Merge pull request [containerd#2803](containerd#2803) from crosbymichael/cherry-proc-lock * [`309973edd9`](containerd@309973e) Merge pull request [containerd#2801](containerd#2801) from crosbymichael/cherry-runc * [`e4c49d7053`](containerd@e4c49d7) Update runc to 10d38b660a77168360df3522881e2dc2be * [`cd83a4e0ba`](containerd@cd83a4e) fix pipe in broken may cause shim lock forever for runtime v1 * [`275f99feb9`](containerd@275f99f) fix pipe in broken may cause shim lock forever for runtime v2 * [`39cd86348c`](containerd@39cd863) Merge pull request [containerd#2795](containerd#2795) from estesp/cherrypick-optimize-shim-lock * [`3afc3f149c`](containerd@3afc3f1) Merge pull request [containerd#2796](containerd#2796) from estesp/cherrypick-exit-ch-buffers * [`f9323ca957`](containerd@f9323ca) Revert v2 dropped events * [`4c72befe09`](containerd@4c72bef) Fix process locking and state management * [`14dc3078b9`](containerd@14dc307) Partially revert the event discard change in containerd#2748. * [`417d694148`](containerd@417d694) Increase reaper buffer size and non-blocking send * [`7ef5285b56`](containerd@7ef5285) optimize shim lock in runtime v1 * [`040e73fde1`](containerd@040e73f) Merge pull request [containerd#2792](containerd#2792) from estesp/cherrypick-update-hcsshim-vendor * [`c4a256d342`](containerd@c4a256d) Merge pull request [containerd#2790](containerd#2790) from estesp/cherrypick-v1v2-runtime-fix * [`737587653d`](containerd@7375876) Temp: add appveyor enablement for release/1.2 branch * [`090e3e98a2`](containerd@090e3e9) Revendor github.com/Microsoft/hcsshim * [`046b6c6d00`](containerd@046b6c6) enhance: update v1/v2 runtime * [`7ff9f6815a`](containerd@7ff9f68) Merge pull request [containerd#2784](containerd#2784) from Random-Liu/update-cri-release-1.2 * [`54895c0b98`](containerd@54895c0) Update cri to 2bb57d27203d82fc79c496aea724aec593b2705a. * [`cd0ecb78c7`](containerd@cd0ecb7) Merge pull request [containerd#2779](containerd#2779) from thaJeztah/1.2_backport_ignore_modprobe_failures * [`c4acd17e70`](containerd@c4acd17) Ignore modprobe failures in ExecStartPre (systemd unit) ### Changes from containerd/cri * [`0ca1e3c2`](containerd/cri@0ca1e3c) Merge pull request [containerd#985](containerd/cri#985) from Random-Liu/cherrypick-#983-release-1.2 * [`88dbb6d6`](containerd/cri@88dbb6d) Update containerd to 4b284fa. * [`d58c1893`](containerd/cri@d58c189) Fix kill when shared pid namespace. * [`8671a278`](containerd/cri@8671a27) Merge pull request [containerd#975](containerd/cri#975) from Random-Liu/cherrypick-#973-release-1.2 * [`e2d2a5de`](containerd/cri@e2d2a5d) Use the `ID` field of `TaskExit` event. * [`2bb57d27`](containerd/cri@2bb57d2) Merge pull request [containerd#966](containerd/cri#966) from Random-Liu/cherrypick-#959-release-1.2 * [`c4773dd5`](containerd/cri@c4773dd) Use commit as version. * [`9b67975b`](containerd/cri@9b67975) Merge pull request [containerd#962](containerd/cri#962) from mikebrow/cherry-pick-remove-authconfig-from-log * [`c064d480`](containerd/cri@c064d48) removes authconfig from info log * [`a72707ca`](containerd/cri@a72707c) Merge pull request [containerd#958](containerd/cri#958) from Random-Liu/cherrypick-#950-release-1.2 * [`6881f449`](containerd/cri@6881f44) Update integration test. * [`6681eb15`](containerd/cri@6681eb1) Manage mount lifecycle and remove cached state ### Dependency Changes Previous release can be found at [v1.2.0](https://github.com/containerd/containerd/releases/tag/v1.2.0) * **github.com/Microsoft/hcsshim** v0.7.12 -> v0.8.1 * **github.com/containerd/cri** f913714917d2456d7e65a0be84962b1ce8acb487 -> 0ca1e3c2b73b5c38e72f29bb76338d0078b23d6c * **github.com/opencontainers/runc** 58592df56734acf62e574865fe40b9e53e967910 -> 96ec2177ae841256168fcf76954f7177af9446eb
containerd 1.2.1-rc.0 Welcome to the v1.2.1-rc.0 release of containerd! *This is a pre-release of containerd* The first patch release for `containerd` 1.2 includes several runtime and CRI fixes. ## Runtime * Fix race in process state when pausing containers * Optimize runtime v1 shim locking * Fix hang processing events * Increase event buffer size * Fix broken pipe causing shim hang * Update runc ## CRI * Remove auth config logs * Fix NetNS cache state ## Service * Ignore modprobe failures in systemd ExecStartPre Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Lantao Liu * Michael Crosby * Derek McGowan * Lifubang * Phil Estes * Ace-Tang * Akihiro Suda * Justin Terry * Mike Brown * Sebastiaan van Stijn * Wei Fu ### Changes * [`de1f167ab9`](containerd@de1f167) Merge pull request [containerd#2819](containerd#2819) from dmcgowan/prepare-1.2.1-rc * [`27d72ba795`](containerd@27d72ba) Update version * [`e3840cce17`](containerd@e3840cc) Add 1.2.1 release notes * [`940c0c06d2`](containerd@940c0c0) Merge pull request [containerd#2817](containerd#2817) from Random-Liu/cherrypick-2811-release-1.2 * [`4598ec2111`](containerd@4598ec2) Lock `KillAll`. * [`e429785ca0`](containerd@e429785) Merge pull request [containerd#2815](containerd#2815) from thaJeztah/1.2_backport_shimlockwhenstdinclose * [`9be591e4a6`](containerd@9be591e) Merge pull request [containerd#2803](containerd#2803) from crosbymichael/cherry-proc-lock * [`309973edd9`](containerd@309973e) Merge pull request [containerd#2801](containerd#2801) from crosbymichael/cherry-runc * [`e4c49d7053`](containerd@e4c49d7) Update runc to 10d38b660a77168360df3522881e2dc2be * [`cd83a4e0ba`](containerd@cd83a4e) fix pipe in broken may cause shim lock forever for runtime v1 * [`275f99feb9`](containerd@275f99f) fix pipe in broken may cause shim lock forever for runtime v2 * [`39cd86348c`](containerd@39cd863) Merge pull request [containerd#2795](containerd#2795) from estesp/cherrypick-optimize-shim-lock * [`3afc3f149c`](containerd@3afc3f1) Merge pull request [containerd#2796](containerd#2796) from estesp/cherrypick-exit-ch-buffers * [`f9323ca957`](containerd@f9323ca) Revert v2 dropped events * [`4c72befe09`](containerd@4c72bef) Fix process locking and state management * [`14dc3078b9`](containerd@14dc307) Partially revert the event discard change in containerd#2748. * [`417d694148`](containerd@417d694) Increase reaper buffer size and non-blocking send * [`7ef5285b56`](containerd@7ef5285) optimize shim lock in runtime v1 * [`040e73fde1`](containerd@040e73f) Merge pull request [containerd#2792](containerd#2792) from estesp/cherrypick-update-hcsshim-vendor * [`c4a256d342`](containerd@c4a256d) Merge pull request [containerd#2790](containerd#2790) from estesp/cherrypick-v1v2-runtime-fix * [`737587653d`](containerd@7375876) Temp: add appveyor enablement for release/1.2 branch * [`090e3e98a2`](containerd@090e3e9) Revendor github.com/Microsoft/hcsshim * [`046b6c6d00`](containerd@046b6c6) enhance: update v1/v2 runtime * [`7ff9f6815a`](containerd@7ff9f68) Merge pull request [containerd#2784](containerd#2784) from Random-Liu/update-cri-release-1.2 * [`54895c0b98`](containerd@54895c0) Update cri to 2bb57d27203d82fc79c496aea724aec593b2705a. * [`cd0ecb78c7`](containerd@cd0ecb7) Merge pull request [containerd#2779](containerd#2779) from thaJeztah/1.2_backport_ignore_modprobe_failures * [`c4acd17e70`](containerd@c4acd17) Ignore modprobe failures in ExecStartPre (systemd unit) ### Changes from containerd/cri * [`2bb57d27`](containerd/cri@2bb57d2) Merge pull request [containerd#966](containerd/cri#966) from Random-Liu/cherrypick-#959-release-1.2 * [`c4773dd5`](containerd/cri@c4773dd) Use commit as version. * [`9b67975b`](containerd/cri@9b67975) Merge pull request [containerd#962](containerd/cri#962) from mikebrow/cherry-pick-remove-authconfig-from-log * [`c064d480`](containerd/cri@c064d48) removes authconfig from info log * [`a72707ca`](containerd/cri@a72707c) Merge pull request [containerd#958](containerd/cri#958) from Random-Liu/cherrypick-#950-release-1.2 * [`6881f449`](containerd/cri@6881f44) Update integration test. * [`6681eb15`](containerd/cri@6681eb1) Manage mount lifecycle and remove cached state ### Dependency Changes Previous release can be found at [v1.2.0](https://github.com/containerd/containerd/releases/tag/v1.2.0) * **github.com/Microsoft/hcsshim** v0.7.12 -> v0.8.1 * **github.com/containerd/cri** f913714917d2456d7e65a0be84962b1ce8acb487 -> 2bb57d27203d82fc79c496aea724aec593b2705a * **github.com/opencontainers/runc** 58592df56734acf62e574865fe40b9e53e967910 -> 10d38b660a77168360df3522881e2dc2be5056bd
containerd 1.1.5 Welcome to the v1.1.5 release of containerd! This is the fifth patch release for the `containerd` 1.1 release. This release includes several fixes in both the CRI plugin and containerd-shim. ## Runtime * Fix a bug that containerd-shim may hang when many exec processes simultaneously run in a container. * Update runc ## CRI Plugin * Fix a bug that IPAM IP leaks after node reboot. * Stop logging image `AuthConfig` in the CRI plugin log. To use containerd 1.1 with Kubernetes 1.11+, please set `stream_server_address` to `127.0.0.1` or `localhost`, and set `enable_tls_streaming` to `false`. # Service * Ignore modprobe failures in systemd ExecStartPre. This fixes containerd start failures in the environment where `modprobe overlay` always returns error, e.g. an LXC container, a kernel with overlay built-in etc. Please see the changelog for full details. Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Lantao Liu * Abhinandan Prativadi * Michael Crosby * Phil Estes * Derek McGowan * Ace-Tang * Akihiro Suda * Lifubang * Mike Brown * Sebastiaan van Stijn * Wei Fu ### Changes * [`5960cade47`](containerd@5960cad) Merge pull request [containerd#2787](containerd#2787) from Random-Liu/prepare-1-1-5-release * [`32d08d0491`](containerd@32d08d0) Prepare v1.1.5 release. * [`5cbe42afb9`](containerd@5cbe42a) Merge pull request [containerd#2818](containerd#2818) from Random-Liu/cherrypick-2811-release-1.1 * [`4cb837a5e5`](containerd@4cb837a) Lock `KillAll`. * [`943f15f3e2`](containerd@943f15f) Merge pull request [containerd#2816](containerd#2816) from thaJeztah/1.1_backport_shimlockwhenstdinclose * [`538c6661e7`](containerd@538c666) fix pipe in broken may cause shim lock forever for runtime v1 * [`02f79c0b51`](containerd@02f79c0) Merge pull request [containerd#2802](containerd#2802) from thaJeztah/1.1_backport_bump_runc * [`4dbb90fddc`](containerd@4dbb90f) Update runc to 10d38b660a77168360df3522881e2dc2be * [`f277cdc6f6`](containerd@f277cdc) Update runc to 58592df56734acf62e574865fe40b9e53e * [`132ee4cb28`](containerd@132ee4c) Update runc to 00dc70017d222b178a002ed30e9321b126 * [`a6a94b1d93`](containerd@a6a94b1) Update runc vendor * [`7cc13025a6`](containerd@7cc1302) Merge pull request [containerd#2762](containerd#2762) from estesp/cherrypick-exec-exit-chan-size-pr * [`a19509e2a8`](containerd@a19509e) Merge pull request [containerd#2783](containerd#2783) from Random-Liu/update-cri-release-1.1 * [`cc1c45a6e5`](containerd@cc1c45a) Merge pull request [containerd#2782](containerd#2782) from thaJeztah/1.1_backport_shim_procs * [`2215b426c1`](containerd@2215b42) Update cri to bad0ae1102e1bf9e53876f75eacc42bc97cfb557. * [`900f0d4625`](containerd@900f0d4) Merge pull request [containerd#2774](containerd#2774) from Random-Liu/cherrypick-#2769-release-1.1 * [`069260a0f3`](containerd@069260a) Set shim max procs via env var * [`966fc1a0a7`](containerd@966fc1a) Partially revert the event discard change in containerd#2748. * [`d91f8412b4`](containerd@d91f841) Increase reaper buffer size and non-blocking send * [`a7dff7edfe`](containerd@a7dff7e) Merge pull request [containerd#2778](containerd#2778) from thaJeztah/1.1_backport_ignore_modprobe_failures * [`36d2576149`](containerd@36d2576) Ignore modprobe failures in ExecStartPre (systemd unit) * [`665815b627`](containerd@665815b) enhance: update v1/v2 runtime * [`b33743050f`](containerd@b337430) Merge pull request [containerd#2765](containerd#2765) from Random-Liu/cherrypick-#2743-release-1.1 * [`345837be5d`](containerd@345837b) optimize shim lock in runtime v1 * [`68a2cbc50f`](containerd@68a2cbc) Merge pull request [containerd#2757](containerd#2757) from Random-Liu/cherry-pick-#2624 * [`deeaac9094`](containerd@deeaac9) fix: modify lock location of exec delete * [`c018c6ed18`](containerd@c018c6e) Merge pull request [containerd#2749](containerd#2749) from Random-Liu/update-cri-release-1.1 * [`004e97846d`](containerd@004e978) Update cri to ac043660063cf4fd93aa17aeb8bfcaf2d7d249ab. ### Changes from containerd/cri * [`bad0ae11`](containerd/cri@bad0ae1) Merge pull request [containerd#964](containerd/cri#964) from mikebrow/cherry-pick-1.0-remove-authconfig-from-log * [`51dff647`](containerd/cri@51dff64) removes authconfig from info log * [`ac043660`](containerd/cri@ac04366) Merge pull request [containerd#952](containerd/cri#952) from Random-Liu/cherrypick-#949-release-1.0 * [`9af1f21b`](containerd/cri@9af1f21) Add integration test. * [`a601166e`](containerd/cri@a601166) Update go-cni to 40bcf8ec8acd7372be1d77031d585d5d8e561c90. * [`f73ae0e3`](containerd/cri@f73ae0e) Teardown pod network even if the network namespace is closed ### Changes from containerd/go-cni * [`40bcf8e`](containerd/go-cni@40bcf8e) Merge pull request [containerd#32](containerd/go-cni#32) from Random-Liu/ignore-error-for-empty-path * [`5ce81a6`](containerd/go-cni@5ce81a6) Only ignore "no such file or directory" error for empty path * [`cc959f7`](containerd/go-cni@cc959f7) Merge pull request [containerd#31](containerd/go-cni#31) from Random-Liu/ignore-not-exit-error * [`a442970`](containerd/go-cni@a442970) Ignore "no such file or directory" error. * [`7585e6d`](containerd/go-cni@7585e6d) Merge pull request [containerd#30](containerd/go-cni#30) from Random-Liu/set-max-network-config * [`6d7b509`](containerd/go-cni@6d7b509) Add WithAllConf, and change WithDefaultConf to only load default. * [`ef9a3f8`](containerd/go-cni@ef9a3f8) Merge pull request [containerd#29](containerd/go-cni#29) from crosbymichael/prefix * [`6aeaa2d`](containerd/go-cni@6aeaa2d) Use network count in ifname index * [`5882530`](containerd/go-cni@5882530) Merge pull request [containerd#26](containerd/go-cni#26) from abhi/master * [`1695039`](containerd/go-cni@1695039) Minor cleanup with concurrency and locking * [`47457ea`](containerd/go-cni@47457ea) Merge pull request [containerd#24](containerd/go-cni#24) from containerd/cni-opts * [`d6ba409`](containerd/go-cni@d6ba409) Same Opt API for Load and New * [`18e77c5`](containerd/go-cni@18e77c5) Merge pull request [containerd#23](containerd/go-cni#23) from abhi/master * [`83a302e`](containerd/go-cni@83a302e) Updating Readme based on new APIs * [`25573b2`](containerd/go-cni@25573b2) Merge pull request [containerd#22](containerd/go-cni#22) from abhi/badge * [`ca0948e`](containerd/go-cni@ca0948e) Merge pull request [containerd#21](containerd/go-cni#21) from abhi/travis * [`9e927d3`](containerd/go-cni@9e927d3) Adding build badge * [`e93f297`](containerd/go-cni@e93f297) Updating travis ### Dependency Changes Previous release can be found at [v1.1.4](https://github.com/containerd/containerd/releases/tag/v1.1.4) * **github.com/containerd/cri** f117382467baf182382c44332bfbf488effc34bb -> bad0ae1102e1bf9e53876f75eacc42bc97cfb557 * **github.com/containerd/go-cni** f2d7272f12d045b16ed924f50e91f9f9cecc55a7 -> 40bcf8ec8acd7372be1d77031d585d5d8e561c90 * **github.com/opencontainers/runc** 69663f0bd4b60df09991c08812a60108003fa340 -> 10d38b660a77168360df3522881e2dc2be5056bd
PreviousNext