-
v1.6.7
containerd 1.6.7 Welcome to the v1.6.7 release of containerd! The seventh patch release for containerd 1.6 contains various fixes, includes a new version of runc and adds support for ppc64le and riscv64 (requires unreleased runc 1.2) builds. ### Notable Updates * **Update runc to v1.1.3** ([#7036](https://github.com/containerd/containerd/pull/7036)) * **Seccomp: Allow clock_settime64 with CAP_SYS_TIME** ([#7172](https://github.com/containerd/containerd/pull/7172)) * **Fix WWW-Authenticate parsing** ([#7131](https://github.com/containerd/containerd/pull/7131)) * **Support RISC-V 64 and ppc64le builds** ([#7170](https://github.com/containerd/containerd/pull/7170)) * **Windows: Update hcsshim to v0.9.4 to fix regression with HostProcess stats** ([#7200](https://github.com/containerd/containerd/pull/7200)) * **Windows: Fix shim logs going to panic.log file** ([#7242](https://github.com/containerd/containerd/pull/7242)) * **Allow ptrace(2) by default for kernels >= 4.8** ([#7171](https://github.com/containerd/containerd/pull/7171)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Phil Estes * Daniel Canter * Derek McGowan * Akihiro Suda * Kazuyoshi Kato * Mike Brown * Sebastiaan van Stijn * Wei Fu * Baoshuo * Gabriel Adrian Samfira * Henry Wang * Iceber Gu * Marvin Giessing ### Changes <details><summary>40 commits</summary> <p> * [release/1.6] Update release build timeout ([#7250](https://github.com/containerd/containerd/pull/7250)) * [`eccb82f6d`](https://github.com/containerd/containerd/commit/eccb82f6d6211ac7958abb10b2105e8d7d3fb80f) Update release build timeout to 20 minutes * Prepare releases notes for 1.6.7 ([#7225](https://github.com/containerd/containerd/pull/7225)) * [`6a854d4b5`](https://github.com/containerd/containerd/commit/6a854d4b59761698134a89080fe005243af4c0ec) Update mailmap * [`61612e1a2`](https://github.com/containerd/containerd/commit/61612e1a2cd63feea45b533ca29524018edbc320) Prepare release notes for 1.6.7 * [release/1.6] Update golang to 1.17.13 ([#7244](https://github.com/containerd/containerd/pull/7244)) * [`d199ee462`](https://github.com/containerd/containerd/commit/d199ee462b8a592277ed910d655b5c9b16295f66) Update golang to 1.17.13 * [release/1.6] Backport: Change os.Stderr reassign for Windows service ([#7242](https://github.com/containerd/containerd/pull/7242)) * [`0578d20c5`](https://github.com/containerd/containerd/commit/0578d20c5db1fd84db42ed35e6e4ee637976b895) Change os.Stderr reassign for Windows service * [release/1.6] Backport: bump macos runner version ([#7230](https://github.com/containerd/containerd/pull/7230)) * [`12cae4961`](https://github.com/containerd/containerd/commit/12cae49615eedcc678d80e1f90e31d1a1315fdcc) Update Vagrant CI to macos-12 * [`bc4091aae`](https://github.com/containerd/containerd/commit/bc4091aaebb1e7419f8ff82135fbc1efc0d7ecd6) chore: bump macos runner version * [release/1.6] Backport Windows HostProcess test improvements ([#7227](https://github.com/containerd/containerd/pull/7227)) * [`cb73bd050`](https://github.com/containerd/containerd/commit/cb73bd0501dd7bdeb7fac66776df49e41eeaba6e) Windows HostProcess container CRI stats test * [`ac388525a`](https://github.com/containerd/containerd/commit/ac388525aeb2826607d80dff2280cc6ce7faac5a) Add validations for Windows HostProcess CRI configs * [release/1.6] go.mod: Bump hcsshim to v0.9.4 ([#7200](https://github.com/containerd/containerd/pull/7200)) * [`0007f40fe`](https://github.com/containerd/containerd/commit/0007f40fe21a89527961e743af259df312a14823) [release/1.6] go.mod: Bump hcsshim to v0.9.4 * [release/1.6] Update Fedora version to 36 ([#7217](https://github.com/containerd/containerd/pull/7217)) * [`c9607e78c`](https://github.com/containerd/containerd/commit/c9607e78c98315b2dab55b8d4c73b7b84e146f52) Update Fedora version to 36 * [release/1.6] Support RISC-V 64 ([#7170](https://github.com/containerd/containerd/pull/7170)) * [`2952b66c0`](https://github.com/containerd/containerd/commit/2952b66c0110e634c10925cce4093c5417d09ad6) CI: add riscv64 builds * [`6b2dc9a37`](https://github.com/containerd/containerd/commit/6b2dc9a37ae27e4e4785dc07ae464cbc921d00ad) release/Dockerfile: update Ubuntu to 22.04 for supporting riscv64 * [`745dc07c4`](https://github.com/containerd/containerd/commit/745dc07c45487217c1cf7bf62987a7bfe0e1f6f9) seccomp: support riscv64 * [`c2f841f21`](https://github.com/containerd/containerd/commit/c2f841f218a823ad24127f74e25ae6e90ceea887) Create ppc64le release * [release/1.6] allow ptrace(2) by default for kernel >= 4.8 ([#7171](https://github.com/containerd/containerd/pull/7171)) * [`f3da3e51f`](https://github.com/containerd/containerd/commit/f3da3e51f5f1b3b6b50586c9962b112b26aba672) allow ptrace(2) by default for kernel >= 4.8 * [release/1.6] seccomp: allow clock_settime64 when CAP_SYS_TIME is added ([#7172](https://github.com/containerd/containerd/pull/7172)) * [`86b55bd8d`](https://github.com/containerd/containerd/commit/86b55bd8dbb90b84d2b46d8726e3a993f2a75ed4) seccomp: allow clock_settime64 when CAP_SYS_TIME is added * [release/1.6] update golang to 1.17.12 ([#7160](https://github.com/containerd/containerd/pull/7160)) * [`aa1101068`](https://github.com/containerd/containerd/commit/aa110106835c55217c5f10ff23e927bf8b50f307) [release/1.6] update golang to 1.17.12 * [release/1.6] Fix WWW-Authenticate parsing ([#7131](https://github.com/containerd/containerd/pull/7131)) * [`37dfc5c9d`](https://github.com/containerd/containerd/commit/37dfc5c9db66afcfa47b6f40b7797763ac3fde76) [release/1.6] Fix WWW-Authenticate parsing * [release/1.6] Downgrade MinGW to version 10.2.0 ([#7133](https://github.com/containerd/containerd/pull/7133)) * [`fa2016d58`](https://github.com/containerd/containerd/commit/fa2016d58ada2438d0af51a522b528dc228cb4ba) [release/1.6] Downgrade MinGW to version 10.2.0 * [release/1.6] ctr: fix label args used in NewContainer ([#7051](https://github.com/containerd/containerd/pull/7051)) * [`99c56d217`](https://github.com/containerd/containerd/commit/99c56d2175bc02f0fc4db58014b9b483021051a0) ctr: fix label args used in NewContainer * [release/1.6] Make building static binaries simpler ([#7045](https://github.com/containerd/containerd/pull/7045)) * [`51de785f8`](https://github.com/containerd/containerd/commit/51de785f85cb23bc31ea9f85938cc043ded7fdf1) [release/1.6] Make building static binaries simpler * [release/1.6] update runc binary to v1.1.3 ([#7036](https://github.com/containerd/containerd/pull/7036)) * [`2ea4e6348`](https://github.com/containerd/containerd/commit/2ea4e63483e7799f2fd971cf06d7d0472e9e47d0) update runc binary to v1.1.3 </p> </details> ### Dependency Changes * **github.com/Microsoft/hcsshim** v0.9.3 -> v0.9.4 Previous release can be found at [v1.6.6](https://github.com/containerd/containerd/releases/tag/v1.6.6)
-
v1.6.6
containerd 1.6.6 Welcome to the v1.6.6 release of containerd! The sixth patch release for containerd 1.6 includes a fix for [GHSA-5ffw-gxpp-mxpf](https://github.com/containerd/containerd/security/advisories/GHSA-5ffw-gxpp-mxpf). ### Notable Updates * **Fix ExecSync handler to cap console output size** ([GHSA-5ffw-gxpp-mxpf](https://github.com/containerd/containerd/security/advisories/GHSA-5ffw-gxpp-mxpf)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Derek McGowan * Kazuyoshi Kato ### Changes <details><summary>4 commits</summary> <p> * Github Security Advisory [GHSA-5ffw-gxpp-mxpf](https://github.com/containerd/containerd/security/advisories/GHSA-5ffw-gxpp-mxpf) * [`61213742a`](https://github.com/containerd/containerd/commit/61213742a8e57458cd6432c46eee9dd35e0584c7) Prepare release notes for v1.6.6 * [`f92068350`](https://github.com/containerd/containerd/commit/f92068350f189040a3bc41f9aa65994c8aba796a) Implicitly discard the input to drain the reader * [`2eb67213b`](https://github.com/containerd/containerd/commit/2eb67213b8ec38f5d7233cf0098763d9364e2a17) [release/1.6] Limit the response size of ExecSync </p> </details> ### Dependency Changes This release has no dependency changes Previous release can be found at [v1.6.5](https://github.com/containerd/containerd/releases/tag/v1.6.5)
-
v1.5.13
containerd 1.5.13 Welcome to the v1.5.13 release of containerd! The thirteenth patch release for containerd 1.5 includes a fix for [GHSA-5ffw-gxpp-mxpf](https://github.com/containerd/containerd/security/advisories/GHSA-5ffw-gxpp-mxpf). ### Notable Updates * **Fix ExecSync handler to cap console output size** ([GHSA-5ffw-gxpp-mxpf](https://github.com/containerd/containerd/security/advisories/GHSA-5ffw-gxpp-mxpf)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Derek McGowan * Kazuyoshi Kato ### Changes <details><summary>4 commits</summary> <p> * Github Security Advisory [GHSA-5ffw-gxpp-mxpf](https://github.com/containerd/containerd/security/advisories/GHSA-5ffw-gxpp-mxpf) * [`1ab043141`](https://github.com/containerd/containerd/commit/1ab043141f77a733cbb2437b857d6385feda368c) Prepare release notes for v1.5.13 * [`b40a356cf`](https://github.com/containerd/containerd/commit/b40a356cfd9f0e5202da130f448f6c35b886ad04) Implicitly discard the input to drain the reader * [`943588b54`](https://github.com/containerd/containerd/commit/943588b54807f48ca545f7560a3def20501993de) [release/1.5] Limit the response size of ExecSync </p> </details> ### Dependency Changes This release has no dependency changes Previous release can be found at [v1.5.12](https://github.com/containerd/containerd/releases/tag/v1.5.12)
-
v1.6.5
containerd 1.6.5 Welcome to the v1.6.5 release of containerd! The fifth patch release for containerd 1.6 includes a few fixes and updated version of runc. ### Notable Updates * **Fix for older CNI plugins not reporting version** ([#7011](https://github.com/containerd/containerd/pull/7011)) * **Fix mount path handling for CRI plugin on Windows** ([#6929](https://github.com/containerd/containerd/pull/6929)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Mike Brown * Sebastiaan van Stijn * Kazuyoshi Kato * Phil Estes * Wei Fu * Akihiro Suda * Derek McGowan * Paul S. Schweigert * Amit Barve * Daniel Canter * Kevin Parsons * Marc Schwind ### Changes <details><summary>26 commits</summary> <p> * Prepare release notes for v1.6.5 ([#7021](https://github.com/containerd/containerd/pull/7021)) * [`185e87275`](https://github.com/containerd/containerd/commit/185e87275cce838776f91abaf34c4ad4af3bfa69) Prepare release notes for v1.6.5 * [release/1.6] update golang to 1.17.11 ([#7013](https://github.com/containerd/containerd/pull/7013)) * [`5c9c83d3e`](https://github.com/containerd/containerd/commit/5c9c83d3e0f03d86644c448d23dc67c7433a2410) [release/1.6] update golang to 1.17.11 * [release/1.6] update go-cni/for cni update fixing plugins that don't respond with version ([#7011](https://github.com/containerd/containerd/pull/7011)) * [`fdcdc27bc`](https://github.com/containerd/containerd/commit/fdcdc27bce9b6105b4afa70759498fed6efed97a) update go-cni/for cni update fixing plugins that don't respond with version * [release/1.6] archive: add human-readable hint to Lchown error ([#6985](https://github.com/containerd/containerd/pull/6985)) * [`e33b9e709`](https://github.com/containerd/containerd/commit/e33b9e7091792c8f4db042f4d196b130ac412ec1) archive: add human-readable hint to Lchown error * [release/1.6] go.mod: Bump hcsshim to 0.9.3 ([#6968](https://github.com/containerd/containerd/pull/6968)) * [`6eff5b6c0`](https://github.com/containerd/containerd/commit/6eff5b6c0e03bf792b232e3bf2603a2445e57bcf) [release/1.6] go.mod: Bump hcsshim to 0.9.3 * [release/1.6] config: improve config v1 deprecation message ([#6980](https://github.com/containerd/containerd/pull/6980)) * [`3bb5a9d19`](https://github.com/containerd/containerd/commit/3bb5a9d19f42b58bde83585a1cc7faa3e1d2e9b9) config: improve config v1 deprecation message * [release/1.6] update golang to 1.17.10, golang.org/x/sys v0.0.0-20220412211240-33da011f77ad ([#6927](https://github.com/containerd/containerd/pull/6927)) * [`f1d2d9260`](https://github.com/containerd/containerd/commit/f1d2d9260a5d5e8ac46b803757007cb138383206) [release/1.6] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad * [`9f99be51b`](https://github.com/containerd/containerd/commit/9f99be51ba3282f4ac90c574c926e81494973225) [release/1.6] update golang to 1.17.10 * [release/1.6] Bug fix for mount path handling ([#6929](https://github.com/containerd/containerd/pull/6929)) * [`70839a344`](https://github.com/containerd/containerd/commit/70839a344033dbb86ae152b30a747f9258527c9e) Bug fix for mount path handling * [release/1.6] Reverts removal of parallel run from critest ([#6942](https://github.com/containerd/containerd/pull/6942)) * [`82a77be2d`](https://github.com/containerd/containerd/commit/82a77be2dd20790a14a1c96f21be41b8d597cc2e) reverts removal of parallel run from critest * [release/1.6 backport] update runc binary and vendor to v1.1.2 ([#6936](https://github.com/containerd/containerd/pull/6936)) * [`246a1b42e`](https://github.com/containerd/containerd/commit/246a1b42e64337656992335bf9e81738cbec89cb) vendor: github.com/opencontainers/runc v1.1.2 * [`43717e03a`](https://github.com/containerd/containerd/commit/43717e03aa5266702871b2ac3584bf949642443c) update runc binary to v1.1.2 * [release/1.6] Allow git commands in Vagrantfile ([#6941](https://github.com/containerd/containerd/pull/6941)) * [`06bdfeb67`](https://github.com/containerd/containerd/commit/06bdfeb675297ebd7406b7de94107b2dc74017ad) Allow git commands in Vagrantfile * [release/1.6] Update critools to v1.24 ([#6895](https://github.com/containerd/containerd/pull/6895)) * [`1520bae0f`](https://github.com/containerd/containerd/commit/1520bae0f44e1a47f68807bd61065135f1560256) update critools to v1.24 </p> </details> ### Changes from containerd/go-cni <details><summary>6 commits</summary> <p> * go.mod: update libcni to v1.1.1 ([#101](https://github.com/containerd/go-cni/pull/101)) * [`cb645ef`](https://github.com/containerd/go-cni/commit/cb645efd5a911122fa150704930c1205b31c2308) go.mod: update libcni to v1.1.1 * add in some serial setup tests; a little make cleanup ([#100](https://github.com/containerd/go-cni/pull/100)) * [`42cfe0f`](https://github.com/containerd/go-cni/commit/42cfe0f8dcae8919832c955502b1e9de32282f94) add in some serial setup tests; a little make cleanup * Re-introduce serial network setup ([#99](https://github.com/containerd/go-cni/pull/99)) * [`ee1a707`](https://github.com/containerd/go-cni/commit/ee1a707cb4d9c2a1a11e901fddd954ac7bc23494) Re-introduce serial network setup </p> </details> ### Dependency Changes * **github.com/Microsoft/hcsshim** v0.9.2 -> v0.9.3 * **github.com/containerd/go-cni** v1.1.5 -> v1.1.6 * **github.com/containernetworking/cni** v1.1.0 -> v1.1.1 * **github.com/opencontainers/runc** v1.1.1 -> v1.1.2 * **golang.org/x/sys** 1d35b9e2eb4e -> 33da011f77ad Previous release can be found at [v1.6.4](https://github.com/containerd/containerd/releases/tag/v1.6.4)
-
v1.5.12
containerd 1.5.12 Welcome to the v1.5.12 release of containerd! The twelfth patch release for containerd 1.5 includes various fixes and updates along with an updated version of runc. ### Notable Updates * **Fix inotify fd leak when cgroup is deleted** ([#6961](https://github.com/containerd/containerd/pull/6961)) * **Close fifos when container is deleted in CRI plugin** ([#6857](https://github.com/containerd/containerd/pull/6857)) * **Update unpack to to respect MaxConcurrentDownloads** ([#6774](https://github.com/containerd/containerd/pull/6774)) * **Monitor OOMKill instead of OOM in cgroupv2** ([#6735](https://github.com/containerd/containerd/pull/6735)) * **Make the temp mount as ready only in container WithVolumes** ([#6729](https://github.com/containerd/containerd/pull/6729)) * **Fix deadlock from abandoned transactions in native snapshotter** ([#6726](https://github.com/containerd/containerd/pull/6726)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Sebastiaan van Stijn * Phil Estes * Akihiro Suda * Derek McGowan * Wei Fu * Jeremi Piotrowski * Kazuyoshi Kato * Maksym Pavlenko * Miao Wang * Mike Brown * Alexey Ivanov * Brian Goff * Henry Wang * Michael Crosby * Qiutong Song * Samuel Ortiz * Tõnis Tiigi * chenxiaoyu * linrunlong * ningmingxiao * zounengren ### Changes <details><summary>34 commits</summary> <p> * Prepare release notes for v1.5.12 ([#7019](https://github.com/containerd/containerd/pull/7019)) * [`5a55f1efc`](https://github.com/containerd/containerd/commit/5a55f1efcfb3f8775399f960e7b6bb5921b5699a) Prepare release notes for v1.5.12 * [release/1.5] update golang to 1.17.11 ([#7014](https://github.com/containerd/containerd/pull/7014)) * [`3f61d5ed4`](https://github.com/containerd/containerd/commit/3f61d5ed4fe148e506db79aabad08106cf12290d) [release/1.5] update golang to 1.17.11 * [release/1.5] archive: add human-readable hint to Lchown error ([#6986](https://github.com/containerd/containerd/pull/6986)) * [`f67de000d`](https://github.com/containerd/containerd/commit/f67de000dc26f34ae088d8db7c5d936375c6ba61) archive: add human-readable hint to Lchown error * [release/1.5] config: improve config v1 deprecation message ([#6981](https://github.com/containerd/containerd/pull/6981)) * [`4c98768bd`](https://github.com/containerd/containerd/commit/4c98768bd4c6299c111eac04adf32597824a05f4) config: improve config v1 deprecation message * [release/1.5] upgrade containerd/cgroups to v1.0.3 ([#6961](https://github.com/containerd/containerd/pull/6961)) * [`f890c79fd`](https://github.com/containerd/containerd/commit/f890c79fd4b0826fec2ff92c40d6107ddc2311ff) [release/1.5] upgrade containerd/cgroups to v1.0.3 * [release/1.5] update golang to 1.17.10, golang.org/x/sys v0.0.0-20220412211240-33da011f77ad ([#6928](https://github.com/containerd/containerd/pull/6928)) * [`9f6e1864c`](https://github.com/containerd/containerd/commit/9f6e1864cd367b6ea50280943637da665772603f) [release/1.5] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad * [`c00476595`](https://github.com/containerd/containerd/commit/c00476595fb5f5ec65f4c6e2e943aea9ea15fd74) [release/1.5] update golang to 1.17.10 * [release/1.5 backport] update runc binary to v1.1.2 ([#6935](https://github.com/containerd/containerd/pull/6935)) * [`c2f793349`](https://github.com/containerd/containerd/commit/c2f7933497a06ddc407b1cd189cfeac49388f332) update runc binary to v1.1.2 * [release/1.5] cherry-pick: Allow git commands in Vagrantfile ([#6943](https://github.com/containerd/containerd/pull/6943)) * [`1f9900830`](https://github.com/containerd/containerd/commit/1f9900830a7f886c73cb50db6a8bb941b1b0b949) Allow git commands in Vagrantfile * [release/1.5] cri: close fifos when container is deleted ([#6857](https://github.com/containerd/containerd/pull/6857)) * [`689b342c1`](https://github.com/containerd/containerd/commit/689b342c1d6a5388f149721a5afb55d03837b41d) cri: close fifos when container is deleted * [release/1.5] update golang to 1.17.9 ([#6824](https://github.com/containerd/containerd/pull/6824)) * [`65aad9d93`](https://github.com/containerd/containerd/commit/65aad9d9326882909bb7fe4a19f6ec9bc1e0a079) [release/1.5] update golang to 1.17.9 * [release/1.5] check for duplicate nspath possibilities ([#6814](https://github.com/containerd/containerd/pull/6814)) * [`283058cd6`](https://github.com/containerd/containerd/commit/283058cd6973a51e0acb48557e03312887d9ba72) check for duplicate nspath possibilities * [release/1.5] fix #6054 MaxConcurrentDownloads is not effect when Unpack is true ([#6774](https://github.com/containerd/containerd/pull/6774)) * [`4dbd0c851`](https://github.com/containerd/containerd/commit/4dbd0c851b9b0cb0d8b02c44d72c311a25a2512a) fix #6054 MaxConcurrentDownloads is not effect when Unpack is true * [release/1.5 backport] update runc binary to v1.1.1 ([#6770](https://github.com/containerd/containerd/pull/6770)) * [`ef56dcafc`](https://github.com/containerd/containerd/commit/ef56dcafc32d67e750b89fdb5ee24d0c7ffa9608) update runc binary to v1.1.1 * [`b8ab8dd3f`](https://github.com/containerd/containerd/commit/b8ab8dd3fbd5b7020fe29d6d26d8d6a987215f5a) update runc binary to v1.1.0 * [release/1.5 backport] Make the temp mount as ready only in container WithVolumes ([#6729](https://github.com/containerd/containerd/pull/6729)) * [`05b04a1a3`](https://github.com/containerd/containerd/commit/05b04a1a36da8c94bb6a7af639a3059d01bea5e4) Make the temp mount as ready only in container WithVolumes * [release/1.5 backport] native: fix deadlock from leaving transactions open ([#6726](https://github.com/containerd/containerd/pull/6726)) * [`603ef55e0`](https://github.com/containerd/containerd/commit/603ef55e0e696b382ad08d83168d608f54f1b6e2) native: fix deadlock from leaving transactions open * [release/1.5 backport] cgroup2: monitor OOMKill instead of OOM to prevent missing container events ([#6735](https://github.com/containerd/containerd/pull/6735)) * [`1c68f5037`](https://github.com/containerd/containerd/commit/1c68f50378b3562e7497d42973ba610945c4bc66) cgroup2: monitor OOMKill instead of OOM to prevent missing container OOM events </p> </details> ### Changes from containerd/cgroups <details><summary>33 commits</summary> <p> * v2: Fix inotify fd leak when cgroup is deleted ([#212](https://github.com/containerd/cgroups/pull/212)) * [`a7d6888`](https://github.com/containerd/cgroups/commit/a7d6888aa30218c8aff15d979eb3f6aec0b7979c) v2: add test case for Manager.EventChan() behavior * [`cf1f978`](https://github.com/containerd/cgroups/commit/cf1f978b93bf784118d3ab7dec6a47b8204918c2) v2: flip error handling for readKVStat("memory.events") to reduce indentation * [`6a46df2`](https://github.com/containerd/cgroups/commit/6a46df25065d551a8d998495c34263354c84f2c1) v2: manager: factor out memory.events parsing * [`35b5b55`](https://github.com/containerd/cgroups/commit/35b5b55c686080de64facf127d6d6a5ca9a0fe6b) v2: Fix inotify leak when cgroup is deleted * fix Implicit memory aliasing in for loop ([#214](https://github.com/containerd/cgroups/pull/214)) * [`182c3af`](https://github.com/containerd/cgroups/commit/182c3afa53b8cccce0611cca9dee46410c4f82f7) fix Implicit memory aliasing in for loop * Fix potential dirfd leak. ([#210](https://github.com/containerd/cgroups/pull/210)) * [`17fece8`](https://github.com/containerd/cgroups/commit/17fece81870ef8aa1a31f05210b8f425e37038a0) Fix potential dirfd leak. * cgroup: Optionally add process and task to a subsystems subset ([#203](https://github.com/containerd/cgroups/pull/203)) * [`80a7821`](https://github.com/containerd/cgroups/commit/80a7821536fc82757f390f8d65693074bd3ef8e4) cgroup: Optionally add process and task to a subsystems subset * replace pkg/errors from vendor ([#208](https://github.com/containerd/cgroups/pull/208)) * [`0072297`](https://github.com/containerd/cgroups/commit/0072297e4547d623094fc68b0df41eef364d1747) replace pkg/errors from vendor * cgroup.go: avoid panic on nil interface ([#207](https://github.com/containerd/cgroups/pull/207)) * [`d55de5d`](https://github.com/containerd/cgroups/commit/d55de5d2af9a3616eb758e393a2170a1421155c1) cgroup.go: avoid panic on nil interface * Improvements on cgroup v2 support ([#204](https://github.com/containerd/cgroups/pull/204)) * [`73a8516`](https://github.com/containerd/cgroups/commit/73a8516e7f0f45fe9931d02cc57ff6059202f553) cgroupv2: reset lastErr to nil when subtree control is successfully written * [`2ca92c5`](https://github.com/containerd/cgroups/commit/2ca92c515038c7a30c1998dbe29a87873b98a3b3) cgroupv2: enable controllers before setting resources in NewChild() * v2: remove unimplemented errors and ErrorHandler, IgnoreNotExist ([#201](https://github.com/containerd/cgroups/pull/201)) * [`db173a8`](https://github.com/containerd/cgroups/commit/db173a86bea843700360e7061c6f8d3869d13363) v2: remove ErrorHandler and IgnoreNotExist as they are not implemented * [`b19a60d`](https://github.com/containerd/cgroups/commit/b19a60d64d89b858b3c2bee4a04fb7f70642ffce) v2: remove errors that are never returned * v1: reduce duplicated code ([#202](https://github.com/containerd/cgroups/pull/202)) * [`4fe70f3`](https://github.com/containerd/cgroups/commit/4fe70f3edc256fc2345d5f8f8a54e2f4e96f271e) v1: reduce duplicated code * cgroup v1: implement AddProc() ([#200](https://github.com/containerd/cgroups/pull/200)) * [`6659093`](https://github.com/containerd/cgroups/commit/66590933215fb7b0c9f9ffd39e9946ab510d7679) cgroup v1: implement AddProc() * Rename branch from master to main ([#199](https://github.com/containerd/cgroups/pull/199)) * [`7254c12`](https://github.com/containerd/cgroups/commit/7254c1242cee46d1c37bf3da2151eed571879b5c) Rename branch from master to main * utils: export ParseCgroupFile() ([#197](https://github.com/containerd/cgroups/pull/197)) * [`23b5120`](https://github.com/containerd/cgroups/commit/23b51209bf7bd11941d5613119309b11029e8373) utils: export ParseCgroupFile() * go.mod: coreos/go-systemd/v22 v22.3.2 to prepare for deprecations ([#194](https://github.com/containerd/cgroups/pull/194)) * [`f8918cf`](https://github.com/containerd/cgroups/commit/f8918cf2d923b7003970ce99bb29545f2f34b531) go.mod: coreos/go-systemd/v22 v22.3.2 to prepare for deprecations * Use /proc/partitions to get device names ([#195](https://github.com/containerd/cgroups/pull/195)) * [`1a4509d`](https://github.com/containerd/cgroups/commit/1a4509dd06454dc765aed7f62cb26531416ffce3) Use /proc/partitions to get device names </p> </details> ### Dependency Changes * **github.com/containerd/cgroups** v1.0.1 -> v1.0.3 * **github.com/stretchr/testify** v1.6.1 -> v1.7.0 * **golang.org/x/net** e18ecbb05110 -> a5a99cb37ef4 * **golang.org/x/sync** 09787c993a3a -> 036812b2e83c * **golang.org/x/sys** d19ff857e887 -> 33da011f77ad Previous release can be found at [v1.5.11](https://github.com/containerd/containerd/releases/tag/v1.5.11)
-
v1.6.4
containerd 1.6.4 Welcome to the v1.6.4 release of containerd! The fourth patch release for containerd 1.6 includes two fixes for CNI and SELinux. ### Notable Updates * **Update go-cni to fix teardown regression** ([#6877](https://github.com/containerd/containerd/pull/6877)) * **Fix broken SELinux relabeling for Kubernetes volume mounts** ([#6878](https://github.com/containerd/containerd/pull/6878)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Mike Brown * Kazuyoshi Kato * Michael Zappa * Wang Bing * Wei Fu * Antonio Ojea * Derek McGowan * Henry Wang * Nabeel Rana * Phil Estes ### Changes <details><summary>8 commits</summary> <p> * Prepare release notes for 1.6.4 ([#6887](https://github.com/containerd/containerd/pull/6887)) * [`0d1d2953b`](https://github.com/containerd/containerd/commit/0d1d2953bfec64910f7e11b5cc0049e4fdafbb0c) Prepare release notes for 1.6.4 * [release/1.6 backport] Bump opencontainers/selinux from 1.10.0 to 1.10.1 ([#6878](https://github.com/containerd/containerd/pull/6878)) * [`42d691fe6`](https://github.com/containerd/containerd/commit/42d691fe6bb18f523b643e8e960f9fa3abb13bc6) Bump opencontainers/selinux from 1.10.0 to 1.10.1 * [release/1.6] Update go-cni to v1.1.5 backported due to conflict in go.mod ([#6877](https://github.com/containerd/containerd/pull/6877)) * [`e9f22e008`](https://github.com/containerd/containerd/commit/e9f22e008b18a383cb440d86c8fd3a93e364f3f4) Update go-cni to v1.1.5 * [release/1.6] cri: close fifos when container is deleted ([#6859](https://github.com/containerd/containerd/pull/6859)) * [`be4909e95`](https://github.com/containerd/containerd/commit/be4909e950da484ceb7bf11ebd858a8757677d8f) cri: close fifos when container is deleted </p> </details> ### Changes from containerd/go-cni <details><summary>8 commits</summary> <p> * bump github.com/containernetworking/cni v1.1.0 ([#98](https://github.com/containerd/go-cni/pull/98)) * [`e24193e`](https://github.com/containerd/go-cni/commit/e24193e4e5ade8070f9c0a73918f7e3fd782b0cc) bump github.com/containernetworking/cni v1.1.0 * Revert "Update loopback version to support check" ([#96](https://github.com/containerd/go-cni/pull/96)) * [`186662c`](https://github.com/containerd/go-cni/commit/186662cf27eee1f357c5f71b3a373d78c1e69988) Revert "Update loopback version to support check" * Use revive instead of golint ([#92](https://github.com/containerd/go-cni/pull/92)) * [`322e8bf`](https://github.com/containerd/go-cni/commit/322e8bfbe6917a4343bc355f5a7f0525e0007099) Use revive instead of golint * Bump go verion to 1.17 ([#91](https://github.com/containerd/go-cni/pull/91)) * [`9b78de4`](https://github.com/containerd/go-cni/commit/9b78de41083664e4ea005986ed39fa81cbb77cf5) Bump go verion to 1.17 </p> </details> ### Dependency Changes * **github.com/containerd/go-cni** v1.1.4 -> v1.1.5 * **github.com/containernetworking/cni** v1.0.1 -> v1.1.0 * **github.com/opencontainers/selinux** v1.10.0 -> v1.10.1 Previous release can be found at [v1.6.3](https://github.com/containerd/containerd/releases/tag/v1.6.3)
-
v1.6.3
containerd 1.6.3 Welcome to the v1.6.3 release of containerd! The third patch release for containerd 1.6 includes various fixes and updates. ### Notable Updates * **Fix panic when configuring tracing plugin** ([#6853](https://github.com/containerd/containerd/pull/6853)) * **Improve image pull performance in CRI plugin** ([#6816](https://github.com/containerd/containerd/pull/6816)) * **Check for duplicate nspath** ([#6813](https://github.com/containerd/containerd/pull/6813)) * **Fix deadlock in cgroup metrics collector** ([#6801](https://github.com/containerd/containerd/pull/6801)) * **Mount devmapper xfs file system with "nouuid" option** ([#6731](https://github.com/containerd/containerd/pull/6731)) * **Make the temp mount as ready only in container WithVolumes** ([#6730](https://github.com/containerd/containerd/pull/6730)) * **Fix deadlock from leaving transaction open in native snapshotter** ([#6727](https://github.com/containerd/containerd/pull/6727)) * **Monitor OOMKill events to prevent missing container events** ([#6734](https://github.com/containerd/containerd/pull/6734)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Stefan Berger * Wei Fu * Akihiro Suda * Derek McGowan * Phil Estes * Kazuyoshi Kato * Mike Brown * Sebastiaan van Stijn * Maksym Pavlenko * dependabot[bot] * Cory Snider * Henry Wang * Jeremi Piotrowski * Michael Zappa * Qiutong Song * Tõnis Tiigi * Ye Sijun ### Changes <details><summary>35 commits</summary> <p> * Prepare release notes for v1.6.3 ([#6844](https://github.com/containerd/containerd/pull/6844)) * [`baa386dc0`](https://github.com/containerd/containerd/commit/baa386dc04afe1c8475be8c7c22a0d632482ff41) Prepare release notes for v1.6.3 * [release/1.6] tracing: fix panic on startup when configured ([#6853](https://github.com/containerd/containerd/pull/6853)) * [`e8da82adc`](https://github.com/containerd/containerd/commit/e8da82adcdc667d8247bd27a8b2c835d0872066b) tracing: fix panic on startup when configured * [release/1.6] CRI: improve image pulling performance ([#6816](https://github.com/containerd/containerd/pull/6816)) * [`1764ea9a2`](https://github.com/containerd/containerd/commit/1764ea9a2815ddbd0cde777b557f97171b84cd02) CRI: improve image pulling performance * [release/1.6] update golang to 1.17.9 ([#6823](https://github.com/containerd/containerd/pull/6823)) * [`9cd76d465`](https://github.com/containerd/containerd/commit/9cd76d465576ec766fc6385f14e27ca3cf536bc5) [release/1.6] update golang to 1.17.9 * [release/1.6] check for duplicate nspath possibilities ([#6813](https://github.com/containerd/containerd/pull/6813)) * [`c09cc1242`](https://github.com/containerd/containerd/commit/c09cc12421b3317ac83aa4412e7a174c8174e916) check for duplicate nspath possibilities * [release/1.6] metrics/cgroups: fix deadlock issue in Add during Collect ([#6801](https://github.com/containerd/containerd/pull/6801)) * [`fe6ba62ce`](https://github.com/containerd/containerd/commit/fe6ba62ceae6c4b692d4a8feb5655f59351abd05) metrics/cgroups: fix deadlock issue in Add during Collect * [release/1.6] go.mod: update image-spec to merge-commit of v1 into main ([#6766](https://github.com/containerd/containerd/pull/6766)) * [`8b81a7843`](https://github.com/containerd/containerd/commit/8b81a78434e9431771fd2bc0e2b226facc3f32f9) [release/1.6] go.mod: update image-spec to merge-commit of v1 into main * [release/1.6 backport] update runc to 1.1.1 ([#6759](https://github.com/containerd/containerd/pull/6759)) * [`f2ba2041b`](https://github.com/containerd/containerd/commit/f2ba2041be70b2c61dfd3151e2d91c74a917c4bf) update runc binary to v1.1.1 * [`b736b4dab`](https://github.com/containerd/containerd/commit/b736b4dab097bb79d11cc72c2ab3a19615613060) go.mod: github.com/opencontainers/runc v1.1.1 * [release/1.6] CI: add Rocky Linux 8 ([#6752](https://github.com/containerd/containerd/pull/6752)) * [`72f1e58c7`](https://github.com/containerd/containerd/commit/72f1e58c703db70b10486635c56c31b6758de29e) CI: add Rocky Linux 8 * [release/1.6] vendor: github.com/containerd/imgcrypt v1.1.4 ([#6739](https://github.com/containerd/containerd/pull/6739)) * [`7ede40c5c`](https://github.com/containerd/containerd/commit/7ede40c5ca3c8d0565798fa653402357b8c088a0) [release/1.6] vendor: github.com/containerd/imgcrypt v1.1.4 * [release/1.6 backport] moving up to go-cni v1.1.4 ([#6728](https://github.com/containerd/containerd/pull/6728)) * [`82a12edf2`](https://github.com/containerd/containerd/commit/82a12edf250b8df03c1dcfc6f18928fba6610250) moving up to go-cni v1.1.4 * [release/1.6 backport] Update prometheus client vendor ([#6732](https://github.com/containerd/containerd/pull/6732)) * [`da35c19da`](https://github.com/containerd/containerd/commit/da35c19dad1a39ad49341635e098a258af0d9566) Test turning off golang CI lint cache * [`a0213573b`](https://github.com/containerd/containerd/commit/a0213573b2179224fa9c0c876bf14e26416de2da) Add nolint:staticcheck to platform-specific calls * [`ad0036ed6`](https://github.com/containerd/containerd/commit/ad0036ed62be304b72bddcf01f1cfa5acf5c0a17) Update prometheus client vendor * [release/1.6 backport] Mount devmapper xfs file system with "nouuid" option. ([#6731](https://github.com/containerd/containerd/pull/6731)) * [`c7bbf316f`](https://github.com/containerd/containerd/commit/c7bbf316f4f0f86355a87a82294d60119d7fe5e8) Mount devmapper xfs file system with "nouuid" option. * [release/1.6 backport] Make the temp mount as ready only in container WithVolumes ([#6730](https://github.com/containerd/containerd/pull/6730)) * [`a1de89c3e`](https://github.com/containerd/containerd/commit/a1de89c3e8ed4e6918875bda626f6b2932b4e95c) Make the temp mount as ready only in container WithVolumes * [release/1.6 backport] native: fix deadlock from leaving transactions open ([#6727](https://github.com/containerd/containerd/pull/6727)) * [`28b44826b`](https://github.com/containerd/containerd/commit/28b44826b004cb04a3d53820c1ba4f845d351963) native: fix deadlock from leaving transactions open * [release/1.6 backport] cgroup2: monitor OOMKill instead of OOM to prevent missing container events ([#6734](https://github.com/containerd/containerd/pull/6734)) * [`5538be6cf`](https://github.com/containerd/containerd/commit/5538be6cf2f52ee09a1e9c217dcc031669ecc7c4) cgroup2: monitor OOMKill instead of OOM to prevent missing container OOM events </p> </details> ### Changes from containerd/go-cni <details><summary>8 commits</summary> <p> * moving up to latest CNI plugin release ([#90](https://github.com/containerd/go-cni/pull/90)) * [`689fcd9`](https://github.com/containerd/go-cni/commit/689fcd968353e729ac9b5454087accf118472f57) moving up to latest CNI plugin release * Fix Loopback Version ([#88](https://github.com/containerd/go-cni/pull/88)) * [`9ebcec1`](https://github.com/containerd/go-cni/commit/9ebcec1f5aae75ddd28394898d310212bc87c478) Update loopback version to support check * Update comment for capabilities ([#89](https://github.com/containerd/go-cni/pull/89)) * [`a4d8d38`](https://github.com/containerd/go-cni/commit/a4d8d386ca3b4fd71850ab58769e5b5d4cc5ecdc) update comment for capabilities * Add integration test for linux and update go version from 1.16 to 1.17 ([#84](https://github.com/containerd/go-cni/pull/84)) * [`49aa5ab`](https://github.com/containerd/go-cni/commit/49aa5ab910ad9812d2688764ff67dfdd42f77351) Add integration test and update go version </p> </details> ### Changes from containerd/imgcrypt <details><summary>13 commits</summary> <p> * CHANGES: Updated CHANGES document for 1.1.4 release ([#74](https://github.com/containerd/imgcrypt/pull/74)) * [`f576654`](https://github.com/containerd/imgcrypt/commit/f5766549f0d7ff396aeef807f93701d5c5bd1954) CHANGES: Updated CHANGES document for 1.1.4 release * Bump github.com/containerd/containerd from 1.5.10 to 1.6.1 ([#73](https://github.com/containerd/imgcrypt/pull/73)) * [`2efa871`](https://github.com/containerd/imgcrypt/commit/2efa871163e1bae96d137356abf6cb4cb70b8a21) Bump github.com/containerd/containerd from 1.5.10 to 1.6.1 * images: prepare for typeurl.Any ([#72](https://github.com/containerd/imgcrypt/pull/72)) * [`f842da4`](https://github.com/containerd/imgcrypt/commit/f842da460337d2d54f7f48af3b7234bbc3cfaa4e) images: prepare for typeurl.Any * [`6fdd981`](https://github.com/containerd/imgcrypt/commit/6fdd9818a4d8142107b7ecd767d839c9707700d9) images: Add list of Platforms to CheckAuthorization() * [`f440058`](https://github.com/containerd/imgcrypt/commit/f4400580b658c1fcb3cacc52dfb6104ea3c3aa82) test: Test running of encrypted image only pulled for local platform * Bump ocicrypt to 1.1.3 ([#71](https://github.com/containerd/imgcrypt/pull/71)) * [`d4d4684`](https://github.com/containerd/imgcrypt/commit/d4d468487cecbd1ccf2f2eb1c05c8d3439471922) Bump ocicrypt to 1.1.3 * [`727850f`](https://github.com/containerd/imgcrypt/commit/727850ffb1438cf9dd6a46c7ad4ec162984f7bb2) Bump github.com/containerd/containerd from 1.5.9 to 1.5.10 * Bump github.com/containerd/containerd from 1.5.8 to 1.5.9 ([#67](https://github.com/containerd/imgcrypt/pull/67)) * [`3c7db10`](https://github.com/containerd/imgcrypt/commit/3c7db10f6482b7771f14b7503ae69164f3fe793d) Bump github.com/containerd/containerd from 1.5.8 to 1.5.9 </p> </details> ### Dependency Changes * **github.com/containerd/go-cni** v1.1.3 -> v1.1.4 * **github.com/containerd/imgcrypt** v1.1.3 -> v1.1.4 * **github.com/containernetworking/plugins** v1.0.1 -> v1.1.1 * **github.com/containers/ocicrypt** v1.1.2 -> v1.1.3 * **github.com/miekg/pkcs11** v1.0.3 -> v1.1.1 * **github.com/opencontainers/image-spec** 693428a734f5 -> c5a74bcca799 * **github.com/opencontainers/runc** v1.1.0 -> v1.1.1 * **github.com/prometheus/client_golang** v1.11.0 -> v1.11.1 Previous release can be found at [v1.6.2](https://github.com/containerd/containerd/releases/tag/v1.6.2)
-
v1.6.2
containerd 1.6.2 Welcome to the v1.6.2 release of containerd! The second patch release for containerd 1.6 includes a fix for [CVE-2022-24769](https://github.com/containerd/containerd/security/advisories/GHSA-c9cp-9c75-9v8c). ### Notable Updates * **Fix the inheritable capability defaults** ([GHSA-c9cp-9c75-9v8c](https://github.com/containerd/containerd/security/advisories/GHSA-c9cp-9c75-9v8c)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Derek McGowan * Kazuyoshi Kato * Sebastiaan van Stijn * Akihiro Suda * Andrew G. Morgan * Phil Estes * Shengjing Zhu * Wei Fu ### Changes <details><summary>17 commits</summary> <p> * Prepare release notes for v1.6.2 ([#6725](https://github.com/containerd/containerd/pull/6725)) * Prepare release notes for v1.6.2 * Add static checks to shim for Windows * [release/1.6] update go.mod go version ([#6724](https://github.com/containerd/containerd/pull/6724)) * Update go.mod go version * [release/1.6] remove empty go mod to allow building for go 1.18 ([#6717](https://github.com/containerd/containerd/pull/6717)) * [release/1.6] remove empty go mod to allow building for go 1.18 * Github Security Advisory [GHSA-c9cp-9c75-9v8c](https://github.com/containerd/containerd/security/advisories/GHSA-c9cp-9c75-9v8c) * Fix the Inheritable capability defaults. * [release/1.6] cherry-pick: Update TestNormalize to only test Windows ([#6673](https://github.com/containerd/containerd/pull/6673)) * Update TestNormalize to only test Windows * [release/1.6] cherry-pick: Upgrade golangci-lint and its GitHub Action ([#6675](https://github.com/containerd/containerd/pull/6675)) * Upgrade golangci-lint and its GitHub Action * [release/1.6] cri: relax test for system without hugetlb ([#6623](https://github.com/containerd/containerd/pull/6623)) * cri: relax test for system without hugetlb * [release/1.6] update to go 1.16.15, 1.17.8 to address CVE-2022-24921 ([#6620](https://github.com/containerd/containerd/pull/6620)) * update to go 1.16.15, 1.17.8 to address CVE-2022-24921 </p> </details> ### Dependency Changes This release has no dependency changes Previous release can be found at [v1.6.1](https://github.com/containerd/containerd/releases/tag/v1.6.1)
-
v1.5.11
containerd 1.5.11 Welcome to the v1.5.11 release of containerd! The eleventh patch release for containerd 1.5 includes a fix for [CVE-2022-24769](https://github.com/containerd/containerd/security/advisories/GHSA-c9cp-9c75-9v8c). ### Notable Updates * **Fix the inheritable capability defaults** ([GHSA-c9cp-9c75-9v8c](https://github.com/containerd/containerd/security/advisories/GHSA-c9cp-9c75-9v8c)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Derek McGowan * Sebastiaan van Stijn * Akihiro Suda * Andrew G. Morgan * Daniel Canter * Kazuyoshi Kato * Phil Estes ### Changes <details><summary>18 commits</summary> <p> * Prepare release notes for v1.5.11 ([#6723](https://github.com/containerd/containerd/pull/6723)) * Prepare release notes for v1.5.11 * [release/1.5] Upgrade Go to 1.17 and golangci-lint ([#6719](https://github.com/containerd/containerd/pull/6719)) * Update go version to 1.17 * Update linter errors * Run gofmt * Upgrade golangci-lint and its GitHub Action * [release/1.5] fix critools installation ([#6718](https://github.com/containerd/containerd/pull/6718)) * Update get to install for cri tools * [release/1.5] remove empty go mod to allow building for go 1.18 ([#6716](https://github.com/containerd/containerd/pull/6716)) * install-dev-tools: use go install, and pin by version * [release/1.5] remove empty go mod to allow building for go 1.18 * Github Security Advisory [GHSA-c9cp-9c75-9v8c](https://github.com/containerd/containerd/security/advisories/GHSA-c9cp-9c75-9v8c) * Fix the Inheritable capability defaults. * [release/1.5] update to go 1.16.15 to address CVE-2022-24921 ([#6621](https://github.com/containerd/containerd/pull/6621)) * [release/1.5] update to go 1.16.15 to address CVE-2022-24921 * [release/1.5] go.mod: Bump hcsshim to v0.8.24 ([#6588](https://github.com/containerd/containerd/pull/6588)) * go.mod: Bump hcsshim to v0.8.24 </p> </details> ### Dependency Changes * **github.com/Microsoft/hcsshim** v0.8.23 -> v0.8.24 Previous release can be found at [v1.5.10](https://github.com/containerd/containerd/releases/tag/v1.5.10)
-
v1.6.1
containerd 1.6.1 Welcome to the v1.6.1 release of containerd! The first patch release for containerd 1.6 includes a fix for [CVE-2022-23648](https://github.com/containerd/containerd/security/advisories/GHSA-crp2-qrr5-8pq7) and other issues. ### Notable Updates * **Use fs.RootPath when mounting volumes** ([GHSA-crp2-qrr5-8pq7](https://github.com/containerd/containerd/security/advisories/GHSA-crp2-qrr5-8pq7)) * **Return init pid when clean dead shim in runc.v1/v2 shims** ([#6572](https://github.com/containerd/containerd/pull/6572)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Derek McGowan * Jeff Zvier * Maksym Pavlenko * Wei Fu * ruiwen-zhao ### Changes <details><summary>7 commits</summary> <p> * [release/1.6] Prepare release notes for v1.6.1 ([#6607](https://github.com/containerd/containerd/pull/6607)) * Prepare release notes for v1.6.1 * Github Security Advisory [GHSA-crp2-qrr5-8pq7](https://github.com/containerd/containerd/security/advisories/GHSA-crp2-qrr5-8pq7) * Use fs.RootPath when mounting volumes * [release/1.6] runc.v1/v2: return init pid when clean dead shim ([#6572](https://github.com/containerd/containerd/pull/6572)) * containerd-shim-runc-v1: return init pid when clean dead shim * containerd-shim-runc-v2: return init pid when clean dead shim </p> </details> ### Dependency Changes This release has no dependency changes Previous release can be found at [v1.6.0](https://github.com/containerd/containerd/releases/tag/v1.6.0)
-
v1.5.10
containerd 1.5.10 Welcome to the v1.5.10 release of containerd! The tenth patch release for containerd 1.5 includes a fix for [CVE-2022-23648](https://github.com/containerd/containerd/security/advisories/GHSA-crp2-qrr5-8pq7) and other issues. ### Notable Updates * **Use fs.RootPath when mounting volumes** ([GHSA-crp2-qrr5-8pq7](https://github.com/containerd/containerd/security/advisories/GHSA-crp2-qrr5-8pq7)) * **Return init pid when clean dead shim in runc.v1/v2 shims** ([#6570](https://github.com/containerd/containerd/pull/6570)) * **Handle sigint/sigterm in shimv2** ([#6509](https://github.com/containerd/containerd/pull/6509)) * **Use readonly mount to read user/group info** ([#6503](https://github.com/containerd/containerd/pull/6503)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Derek McGowan * Wei Fu * Sebastiaan van Stijn * Phil Estes * Alexander Minbaev * Brian Goff * Daniel Canter * David Porter * Kazuyoshi Kato * Maksym Pavlenko * ruiwen-zhao ### Changes <details><summary>22 commits</summary> <p> * [release/1.5] Prepare release notes for v1.5.10 ([#6606](https://github.com/containerd/containerd/pull/6606)) * Prepare release notes for v1.5.10 * Github Security Advisory [GHSA-crp2-qrr5-8pq7](https://github.com/containerd/containerd/security/advisories/GHSA-crp2-qrr5-8pq7) * Use fs.RootPath when mounting volumes * [release/1.5] runc.v1/v2: return init pid when clean dead shim ([#6570](https://github.com/containerd/containerd/pull/6570)) * runc.v1/v2: return init pid when clean dead shim * [release/1.5] Update Go to 1.16.14 ([#6556](https://github.com/containerd/containerd/pull/6556)) * [release/1.5] Update Go to 1.16.14 * Wait for containerd installation in GCE scripts [1.5 backport] ([#6552](https://github.com/containerd/containerd/pull/6552)) * Wait for containerd installation in GCE scripts * [release/1.5] shimv2: handle sigint/sigterm ([#6509](https://github.com/containerd/containerd/pull/6509)) * shimv2: handle sigint/sigterm * [release/1.5] Update Go to 1.16.13 ([#6526](https://github.com/containerd/containerd/pull/6526)) * [release/1.5] Update Go to 1.16.13 * [release/1.5 backport] GHA fixes, update GolangCI-Lint v1.42.0, and go-mdman v2.0.1 ([#6511](https://github.com/containerd/containerd/pull/6511)) * script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0 * Fix Linux CI Linter using go 1.15.14 * Update cpuguy83/go-md2man binary to v2.0.1 * [release/1.5] oci: use readonly mount to read user/group info ([#6503](https://github.com/containerd/containerd/pull/6503)) * oci: use readonly mount to read user/group info * [release/1.5] add-list-stat: return container list if filter is nil ([#6466](https://github.com/containerd/containerd/pull/6466)) * add-list-stat: return container list if filter is nil </p> </details> ### Dependency Changes This release has no dependency changes Previous release can be found at [v1.5.9](https://github.com/containerd/containerd/releases/tag/v1.5.9)
-
v1.4.13
containerd 1.4.13 Welcome to the v1.4.13 release of containerd! The thirteenth patch release for containerd 1.4 is a security release to address [CVE-2022-23648](https://github.com/containerd/containerd/security/advisories/GHSA-crp2-qrr5-8pq7). ### Notable Updates * **Use fs.RootPath when mounting volumes** ([GHSA-crp2-qrr5-8pq7](https://github.com/containerd/containerd/security/advisories/GHSA-crp2-qrr5-8pq7)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Derek McGowan * Sebastiaan van Stijn * Phil Estes * Akihiro Suda * David Porter * Kazuyoshi Kato * Michael Crosby ### Changes <details><summary>17 commits</summary> <p> * Github Security Advisory [GHSA-crp2-qrr5-8pq7](https://github.com/containerd/containerd/security/advisories/GHSA-crp2-qrr5-8pq7) * Prepare release notes for v1.4.13 * Use fs.RootPath when mounting volumes * [release/1.4] backport: Wait for containerd installation in GCE scripts ([#6553](https://github.com/containerd/containerd/pull/6553)) * Wait for containerd installation in GCE scripts * [release/1.4] Update Go to 1.16.14 ([#6527](https://github.com/containerd/containerd/pull/6527)) * Do not use `go get` to install executables * [release/1.4] update Go to 1.16.14 * [release/1.4] Update Go to 1.16.13 * [release/1.4] vendor: github.com/opencontainers/image-spec v1.0.2 ([#6265](https://github.com/containerd/containerd/pull/6265)) * [release/1.4] vendor: github.com/opencontainers/image-spec v1.0.2 * [release/1.4] Update Go to 1.16.12 ([#6368](https://github.com/containerd/containerd/pull/6368)) * [release/1.4] Update Go to 1.16.12 * [release/1.4] update runc binary to v1.0.3 ([#6344](https://github.com/containerd/containerd/pull/6344)) * update runc binary to v1.0.3 * [release/1.4] Update Go to 1.16.11 ([#6335](https://github.com/containerd/containerd/pull/6335)) * [release/1.4] Update Go to 1.16.11 </p> </details> ### Changes from containerd/cri <details><summary>4 commits</summary> <p> * [release/1.4] Use fs.RootPath when mounting volumes ([#1655](https://github.com/containerd/cri/pull/1655)) * Use fs.RootPath when mounting volumes * [release/1.4] update Go 1.15.14 (to match containerd) ([#1645](https://github.com/containerd/cri/pull/1645)) * [release/1.4] update Go 1.15.14 (to match containerd) </p> </details> ### Dependency Changes * **github.com/containerd/cri** 3b02bec16031 -> 8f1a8a1fb9eb * **github.com/opencontainers/image-spec** v1.0.1 -> v1.0.2 Previous release can be found at [v1.4.12](https://github.com/containerd/containerd/releases/tag/v1.4.12)
-
v1.6.0
containerd 1.6.0 Welcome to the v1.6.0 release of containerd! The seventh major release of containerd includes many improvements and added support to increase overall compatibility and stability. ### Highlights #### Runtime * **Add runtime label to metrics** ([#5744](https://github.com/containerd/containerd/pull/5744)) * **Cleanup task delete logic in v2 shim** ([#5813](https://github.com/containerd/containerd/pull/5813)) * **Add support for shim plugins** ([#5817](https://github.com/containerd/containerd/pull/5817)) * **Handle sigint and sigterm in shimv2** ([#5828](https://github.com/containerd/containerd/pull/5828)) * **Decouple shim and task manager** ([#5918](https://github.com/containerd/containerd/pull/5918)) * **Add runc shim support for core scheduling** ([#6011](https://github.com/containerd/containerd/pull/6011)) * **Update shim client connect attempt to fail fast when shim errors** ([#6031](https://github.com/containerd/containerd/pull/6031)) * **Add support for absolute path to shim binaries** ([#6206](https://github.com/containerd/containerd/pull/6206)) * **Update runc to v1.1.0** ([#6375](https://github.com/containerd/containerd/pull/6375)) #### Windows * **Add support for Windows HostProcess containers** ([#5131](https://github.com/containerd/containerd/pull/5131)) * **Add support for Windows resource limits** ([#5778](https://github.com/containerd/containerd/pull/5778)) #### CRI * **Add CNI configuration based on runtime class** ([#4695](https://github.com/containerd/containerd/pull/4695)) * **Add support for Intel RDT** ([#5439](https://github.com/containerd/containerd/pull/5439)) * **Add support for CRI v1 and v1alpha in parallel** ([#5619](https://github.com/containerd/containerd/pull/5619)) * **Add support for unified resources field for cgroups v2** ([#5627](https://github.com/containerd/containerd/pull/5627)) * **Add IP preference configuration for reporting pod IP** ([#5964](https://github.com/containerd/containerd/pull/5964)) * **Implement new CRI pod sandbox stats API** ([#6113](https://github.com/containerd/containerd/pull/6113)) * **Add sandbox and container latency metrics** ([#6111](https://github.com/containerd/containerd/pull/6111)) * **Add namespace to ttrpc and grpc plugin connections** ([#6130](https://github.com/containerd/containerd/pull/6130)) * **Add option to allow ping sockets and privileged ports with no capabilities** ([#6170](https://github.com/containerd/containerd/pull/6170)) * **Add support for configuring swap** ([#6320](https://github.com/containerd/containerd/pull/6320)) #### Other * **Add support for client TLS Auth for grpc** ([#5606](https://github.com/containerd/containerd/pull/5606)) * **Add xfs support for devicemapper snapshotter** ([#5610](https://github.com/containerd/containerd/pull/5610)) * **Add metric exposing build version and revision** ([#5965](https://github.com/containerd/containerd/pull/5965)) * **Add support for custom fs options in devmapper snapshotter** ([#6122](https://github.com/containerd/containerd/pull/6122)) * **Update introspection service to show GRPC plugins** ([#6432](https://github.com/containerd/containerd/pull/6432)) #### Client * **Allow WithServices to use custom implementations** ([#5709](https://github.com/containerd/containerd/pull/5709)) * **Support custom compressor for walking differ** ([#5735](https://github.com/containerd/containerd/pull/5735)) ### Release Updates #### containerd/CNI/runc/critools tar bundle The tar bundles released as `cri-containerd-*.tar.gz` contain a build of runc linked with a newer version of libseccomp. This dynamically-linked build of runc was built on Ubuntu 18.04 and will not work on some other distributions, such as RHEL 7 and Debian 10. Users of such distributions may get a statically-linked runc binary from https://github.com/opencontainers/runc/releases or build runc for their own environment. > **_Deprecation_** These tar bundles are now deprecated and will be removed or > replaced in containerd 2.0. Projects relying on these tar bundles should use > the `containerd-*.tar.gz` bundles or work with the containerd community on a > suitable replacement in containerd 2.0. See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Derek McGowan * Phil Estes * Akihiro Suda * Wei Fu * Maksym Pavlenko * Sebastiaan van Stijn * Michael Crosby * Kazuyoshi Kato * Mike Brown * Claudiu Belu * Daniel Canter * Gabriel Adrian Samfira * haoyun * Brian Goff * Stefan Berger * zounengren * AdamKorcz * Adelina Tuvenie * Kohei Tokunaga * Davanum Srinivas * Nashwan Azhari * Samuel Karp * Shiming Zhang * Markus Lehtonen * Enrico Weigelt, metux IT consult * Alakesh Haloi * Hajime Tazaki * Iceber Gu * Kevin Parsons * Aditi Sharma * David Porter * Jeremi Piotrowski * Gijs Peskens * ningmingxiao * Brandon Lum * Cody Roseborough * Danielle Lancashire * Eric Ernst * Jacob MacElroy * Tõnis Tiigi * dependabot[bot] * wanglei * Alexandre Peixoto Ferreira * Fabiano Fidêncio * Furkan Türkal * Jiaming Xu * Kir Kolyshkin * Miao Wang * Neil Johnson * Paul "TBBle" Hampson * Priyanka Saggu * Romain Aviolat * Samuel Ortiz * Sunghoon Kang * Takumasa Sakao * Tobias Klauser * Zhiyu Li * ye.sijun * Alexander Minbaev * Alexey Ivanov * Andrey Smirnov * Artem Khramov * Aurelien Lun-Sin * Ben Hutchings * Cory Bennett * Da McGrady * Dan Williams * Eng Zer Jun * Ethan Chen * Fupan Li * Gaurav Gahlot * Gunju Kim * Henry Wang * Jacob Blain Christen * James Gordon * James Sturtevant * Jan Klippel * Jayme Howard * Jiajun Jiang * Jintao Zhang * Justin Terry * Kaijie Chen * Kante * Kern Walster * Kitt Hsu * Lantao Liu * Ma Xinjian * Manabu Sugimoto * Manuel Alejandro de Brito Fontes * Mark Rossetti * Markus Lippert * Mete Durlu * Michael Zappa * Mikko Ylinen * Ng Yang * Nicolas Chariglione * Ning Li * Olli Janatuinen * Peri Thompson * Quan Tian * Radostin Stoyanov * Rui Lopes * Sambhav Kothari * Sebastian Hasler * Sergey Kanzhelev * Shuntaro Azuma * Sören Tempel * Yang Yang * Yifan Yuan * Zilong Wang * Zufar Dhiyaulhaq * botieking98 * chenxiaoyu * jayonlau * jerryzhuang * linrunlong * scuzhanglei * wangzhan * Étienne Guesnet ### Changes <details><summary>1059 commits</summary> <p> * Prepare release notes for v1.6.0 ([#6531](https://github.com/containerd/containerd/pull/6531)) * Prepare release notes for v1.6.0 * Update Go to 1.16.14, 1.17.7 ([#6555](https://github.com/containerd/containerd/pull/6555)) * Update Go to 1.16.14, 1.17.7 * Change the context to avoid misunderstandings in architecture.md. ([#6533](https://github.com/containerd/containerd/pull/6533)) * Change the context to avoid misunderstandings * Update go-cni to v1.1.3 ([#6543](https://github.com/containerd/containerd/pull/6543)) * Update go-cni to v1.1.3 * Update go-cni to v1.1.2 * Wait for containerd installation in GCE scripts ([#6544](https://github.com/containerd/containerd/pull/6544)) * Wait for containerd installation in GCE scripts * Enable TestContainerPTY and TestContainerUsername ([#6540](https://github.com/containerd/containerd/pull/6540)) * Enable TestContainerPTY and TestContainerUsername * Update BUILDING.md ([#6500](https://github.com/containerd/containerd/pull/6500)) * Add instructions on using go with admin perms * Prepare release notes for v1.6.0-rc.4 ([#6537](https://github.com/containerd/containerd/pull/6537)) * Prepare release notes for v1.6.0-rc.4 * Change file name for shim binary path ([#6536](https://github.com/containerd/containerd/pull/6536)) * Change file name for shim binary path * containerd-stress: introduce option for specifying image ([#6532](https://github.com/containerd/containerd/pull/6532)) * containerd-stress: introduce option for specifying image * Prepare release notes for v1.6.0-rc.3 ([#6524](https://github.com/containerd/containerd/pull/6524)) * Prepare release notes for v1.6.0-rc.3 * Use white logo in github dark mode ([#6529](https://github.com/containerd/containerd/pull/6529)) * Use white logo in github dark mode * cri: fix handling of ignore_rdt_not_enabled_errors config option ([#6514](https://github.com/containerd/containerd/pull/6514)) * cri: fix handling of ignore_rdt_not_enabled_errors config option * pkg/oom/v2: handle EventChan routine shutdown quietly ([#6504](https://github.com/containerd/containerd/pull/6504)) * pkg/oom/v2: handle EventChan routine shutdown quietly * fix: .dockerignore make git working tree dirty ([#6523](https://github.com/containerd/containerd/pull/6523)) * fix: .dockerignore makes git working tree dirty * containerd-stress: start task ctr before starting execs ([#6518](https://github.com/containerd/containerd/pull/6518)) * containerd-stress: start task ctr before starting execs * Document fs_type and fs_options in snapshots/devmapper/README.md ([#6501](https://github.com/containerd/containerd/pull/6501)) * Document fs_type and fs_options in snapshots/devmapper/README.md * docs: add Talos Linux to the list of adopters ([#6510](https://github.com/containerd/containerd/pull/6510)) * docs: add Talos Linux to the list of adopters * Prepare 1.6.0-rc.2 ([#6502](https://github.com/containerd/containerd/pull/6502)) * Prepare release notes for v1.6.0-rc.2 * Update releases document * platforms.Normalize(): do not reset OSVersion and OSFeatures ([#6497](https://github.com/containerd/containerd/pull/6497)) * platforms.Normalize(): do not reset OSVersion and OSFeatures * tracing: use OTLP/HTTP in addition to OTLP/gRPC ([#6457](https://github.com/containerd/containerd/pull/6457)) * tracing: return (ctx, span) from StartSpan * tracing: support OTLP/HTTP in addition to gRPC * Update cgroups to v1.0.3 ([#6498](https://github.com/containerd/containerd/pull/6498)) * Update cgroups to v1.0.3 * seccomp: kernel 5.11 -> 5.16 ([#6494](https://github.com/containerd/containerd/pull/6494)) * seccomp: kernel 5.16 (futex_waitv) * seccomp: kernel 5.15 (process_mrelease) * seccomp: kernel 5.14 (quotactl_fd, memfd_secret) * seccomp: kernel 5.13 (landlock_{add_rule,create_ruleset,restrict_self}) * seccomp: kernel 5.12 (mount_setattr) * remotes: fix dockerPusher to handle abort correctly ([#6243](https://github.com/containerd/containerd/pull/6243)) * remotes: fix dockerPusher to handle abort correctly * seccomp: add support for "swapcontext" syscall in default policy ([#6411](https://github.com/containerd/containerd/pull/6411)) * seccomp: add support for "swapcontext" syscall in default policy * oci: use readonly mount to read user/group info ([#6478](https://github.com/containerd/containerd/pull/6478)) * oci: use readonly mount to read user/group info * Fix possibly incorrect media type default on import ([#6475](https://github.com/containerd/containerd/pull/6475)) * Fix possibly incorrect media type default on import * shimv2: handle sigint/sigterm ([#5828](https://github.com/containerd/containerd/pull/5828)) * shimv2: handle sigint/sigterm * Fix acr fetch token 400 ([#6481](https://github.com/containerd/containerd/pull/6481)) * fix acr fetch token 400 * platforms: add support for matching amd64 variants ([#6455](https://github.com/containerd/containerd/pull/6455)) * platforms: add support for matching amd64 variants * Fix windows periodic workflow ([#6476](https://github.com/containerd/containerd/pull/6476)) * Fix windows periodic workflow * docs: add doc-comments on GC-related methods ([#6473](https://github.com/containerd/containerd/pull/6473)) * docs: add doc-comments on GC-related methods * fix: should not send 137 code event if cmd is notfound ([#6465](https://github.com/containerd/containerd/pull/6465)) * fix: should not send 137 code event if cmd is notfound * Fix empty scopes return ([#6463](https://github.com/containerd/containerd/pull/6463)) * fix empty scopes return * Prepare release notes for v1.6.0-rc.1 ([#6462](https://github.com/containerd/containerd/pull/6462)) * Prepare release notes for v1.6.0-rc.1 * Add support for skipping non-dist blob push ([#6424](https://github.com/containerd/containerd/pull/6424)) * ctr: flag to toggle non-distributable blob push * Add image handler to skip non-distributable blobs. * Compile binaries for go1.16 and go1.17 in CI ([#6461](https://github.com/containerd/containerd/pull/6461)) * Compile binaries for go1.16 and go1.17 in CI * services/introspection: fix plugin caching to show grpc plugins ([#6432](https://github.com/containerd/containerd/pull/6432)) * Update caching logic to avoid map access * services/introspection: support to show introspection grpc service * Integration: Change to Windows Server 2022 build number constant ([#6458](https://github.com/containerd/containerd/pull/6458)) * Integration: Change to Windows Server 2022 build number constant * Update kubernetes vendor to 0.22.5 ([#6460](https://github.com/containerd/containerd/pull/6460)) * Update kubernetes vendor to 0.22.5 * Fix rdt build tags for go 1.16 ([#6459](https://github.com/containerd/containerd/pull/6459)) * Fix rdt build tags for go 1.16 * Remove submodule go mod ([#6439](https://github.com/containerd/containerd/pull/6439)) * Remove api go submodule * Update makefile to remove API submodule * go.mod: Update hcsshim to v0.9.2 ([#6453](https://github.com/containerd/containerd/pull/6453)) * go.mod: Update hcsshim to v0.9.2 * update runc to v1.1.0 ([#6375](https://github.com/containerd/containerd/pull/6375)) * go.mod: github.com/opencontainers/runc v1.1.0 * update runc binary to v1.1.0 * tracing: fix OTLP tracer's initialization ([#6443](https://github.com/containerd/containerd/pull/6443)) * tracing: fix OTLP tracer's initialization * gha: run CodeQL scan on pull requests ([#6386](https://github.com/containerd/containerd/pull/6386)) * gha: run CodeQL scan on pull requests * Do not automatically inject client traces ([#6445](https://github.com/containerd/containerd/pull/6445)) * Do not automatically inject client traces * [containerd-stress] delete useless code ([#6451](https://github.com/containerd/containerd/pull/6451)) * delete useless code * Revert "Add shared content label to namespaces" ([#6440](https://github.com/containerd/containerd/pull/6440)) * Revert "Add shared content label to namespaces" * Add ppc64 support for test images ([#6435](https://github.com/containerd/containerd/pull/6435)) * Add ppc64 support for test images * ctr: Unify the delete subcommand alias ([#6427](https://github.com/containerd/containerd/pull/6427)) * ctr: Unify the delete subcommand alias * Prepare release notes for v1.6.0-rc.0 ([#6431](https://github.com/containerd/containerd/pull/6431)) * Prepare release notes for v1.6.0-rc.0 * Integration: Switch to using `auth` Gcloud action in Windows workflow. ([#6397](https://github.com/containerd/containerd/pull/6397)) * Integration: Switch to `upload-cloud-storage` Gcloud action. * Integration: Switch to using `auth` Gcloud action in Windows workflow. * remove io/ioutil ([#6426](https://github.com/containerd/containerd/pull/6426)) * remove io/ioutil * test: e2e node COS cgroupv2 script ([#6418](https://github.com/containerd/containerd/pull/6418)) * test: e2e node COS cgroupv2 script * Integration: Enable CRITest on Windows 2022. ([#6378](https://github.com/containerd/containerd/pull/6378)) * Enable critest tests on Windows Server 2022. * Parametrize CRITest test images in Windows Periodic workflow. * Update error message for apparmor parser ([#6415](https://github.com/containerd/containerd/pull/6415)) * Update error message for apparmor parser * Fix wrong log message ([#6419](https://github.com/containerd/containerd/pull/6419)) * Fix wrong log message * Followup errors change ([#6414](https://github.com/containerd/containerd/pull/6414)) * Fix incorrect error wrapped when closing ingest file * Fix seek error used without nil check * Fix followup items from errors replacement * Updates CRI API & Kubernetes to 1.23 ([#6351](https://github.com/containerd/containerd/pull/6351)) * Update k/k to 1.23.0 * Updating adoption of containerd for AKS ([#6416](https://github.com/containerd/containerd/pull/6416)) * Updating adoption of containerd for AKS * update the adoption status of containerd in GKE ([#6413](https://github.com/containerd/containerd/pull/6413)) * update the adoption status of containerd in GKE * go.mod: update github.com/containerd/{continuity,go-cni,imgcrypt} ([#6410](https://github.com/containerd/containerd/pull/6410)) * go.mod: update github.com/containerd/{continuity,go-cni,imgcrypt} * replace github.com/pkg/errors with native errors ([#6366](https://github.com/containerd/containerd/pull/6366)) * feat: replace github.com/pkg/errors to errors * corrected link in cri architecture documentation ([#6412](https://github.com/containerd/containerd/pull/6412)) * corrected link in cri architecture documentation * remotes/docker: allow fetching "refresh token" (aka "identity token", "offline token") ([#6396](https://github.com/containerd/containerd/pull/6396)) * remotes/docker: allow fetching "refresh token" (aka "identity token") * remotes/docker/config: allow setting custom AuthorizerOpts * Prepare release notes for v1.6.0-beta.5 ([#6407](https://github.com/containerd/containerd/pull/6407)) * Prepare release notes for v1.6.0-beta.5 * Integration: Check GCP secrets on Windows CI artifact upload. ([#6292](https://github.com/containerd/containerd/pull/6292)) * Integration: Check GCP secrets on Windows CI artifact upload. * Github Security Advisory [GHSA-mvff-h3cj-wj9c](https://github.com/containerd/containerd/security/advisories/GHSA-mvff-h3cj-wj9c) * only relabel cri managed host mounts * Add support for Intel RDT ([#5439](https://github.com/containerd/containerd/pull/5439)) * cri: add ignore_rdt_not_enabled_errors config option * Update dependencies * cri: annotations for controlling RDT class * tasks: add Linux rdt support * cmd: add --rdt-class command line option * oci: implement WithRdt * fix: use _ for consistency ([#6391](https://github.com/containerd/containerd/pull/6391)) * fix: use _ for consistency * content/local: use syscall.Timespec.Unix ([#6403](https://github.com/containerd/containerd/pull/6403)) * content/local: use syscall.Timespec.Unix * docs: improve plugin documentation ([#6207](https://github.com/containerd/containerd/pull/6207)) * docs: document the runtime shim plugin config options * docs: use proper markdown lists in containerd-config.toml.5.md * fix(ctr): enable networking for Windows containers ([#6304](https://github.com/containerd/containerd/pull/6304)) * fix(ctr): enable networking for Windows containers * Fix $(PWD) issue for Windows makefile ([#6394](https://github.com/containerd/containerd/pull/6394)) * Fix $(PWD) issue for Windows makefile * only test abstract uds on linux ([#6395](https://github.com/containerd/containerd/pull/6395)) * fix: only test abstract unix socket on linux * Fix restart container test ([#6390](https://github.com/containerd/containerd/pull/6390)) * Expect ErrorNotFound on Windows after Kill() * Replace tskill with taskkill * fix when kernel version < 4.13rc1 by using index=off cause test error ([#6291](https://github.com/containerd/containerd/pull/6291)) * fix when kernel version < 4.13rc1 by using index=off cause overlay test error * Fix no-daemon flag for integration/client tests ([#6384](https://github.com/containerd/containerd/pull/6384)) * Fix no-daemon flag for integration/client tests * Enable lazy init for ext4 with devicemapper ([#6122](https://github.com/containerd/containerd/pull/6122)) * Enable lazy init for ext4 with devicemapper * Fix flakiness on Windows for list stats ([#6385](https://github.com/containerd/containerd/pull/6385)) * Fix flakiness on Windows for list stats * cri-integration: Add Windows defaults and fix spaces issue ([#6347](https://github.com/containerd/containerd/pull/6347)) * cri-integration: Add Windows default paths * Upgrade OpenTelemetry dependencies ([#6383](https://github.com/containerd/containerd/pull/6383)) * Upgrade k8s.io/klog/v2 from 2.9.0 to 2.20.0 * Use insecure.NewCredentials instead of grpc.WithInsecure * Upgrade OpenTelemetry dependencies * Fix default makefile target for windows ([#6322](https://github.com/containerd/containerd/pull/6322)) * Fix default makefile target for windows * Disable TestContainerHook on Windows ([#6379](https://github.com/containerd/containerd/pull/6379)) * Disable TestContainerHook on Windows * seutil: Fix setting the "container_kvm_t" label ([#6372](https://github.com/containerd/containerd/pull/6372)) * seutil: Fix setting the "container_kvm_t" label * Remove Windows integration testing for 2004. ([#6350](https://github.com/containerd/containerd/pull/6350)) * Remove Windows integration testing for 2004. * OCI: Mount (accessible) host devices in privileged rootless containers ([#6308](https://github.com/containerd/containerd/pull/6308)) * OCI: Mount (accessible) host devices in privileged rootless containers * oci.getDevices(): move "non-dir, non '/dev/console'" case into switch * cri: add support for configuring swap ([#6320](https://github.com/containerd/containerd/pull/6320)) * fixup: check for swap accounting * fixup: handle diff between cgroupsv1 and v2 * cri: add support for configuring swap * Integration: Enable TestVolumeOwnership on Windows ([#6275](https://github.com/containerd/containerd/pull/6275)) * Replace find with native Go code * Enable TestVolumeOwnership on Windows * Prepare release notes for v1.6.0-beta.4 ([#6296](https://github.com/containerd/containerd/pull/6296)) * Prepare release notes for v1.6.0-beta.4 * refactor: functions for error log and error return ([#6358](https://github.com/containerd/containerd/pull/6358)) * feat: Errorf usage * Split apart runc shim into plugin components ([#6021](https://github.com/containerd/containerd/pull/6021)) * Use task plugin for runc shim * Seperate shim manager and task service * Split runc shim into plugin components * Add shutdown package * CRI update for sandbox sizing ([#6155](https://github.com/containerd/containerd/pull/6155)) * cri, sandbox: pass sandbox resource details if available, applicable * medatada: make namespaces' deletion error less cryptic ([#6354](https://github.com/containerd/containerd/pull/6354)) * medatada: make namespaces' deletion error less cryptic * ListContainerStats to return stats response if ContainerStatsFilter is nil ([#6373](https://github.com/containerd/containerd/pull/6373)) * add-list-stat: return container list if filter is nil * integration: deflake TestContainerdRestart ([#6369](https://github.com/containerd/containerd/pull/6369)) * integration: deflake TestContainerdRestart * feat: add timeout for bolt open ([#6225](https://github.com/containerd/containerd/pull/6225)) * feat: support custom timeout for blot open * Update Go to 1.17.5 ([#6333](https://github.com/containerd/containerd/pull/6333)) * Update Go to 1.17.5 * cri/server: use consistent alias for pkg/ioutil ([#6332](https://github.com/containerd/containerd/pull/6332)) * cri/server: use consistent alias for pkg/ioutil * Disable restart monitor test in Windows ([#6364](https://github.com/containerd/containerd/pull/6364)) * Disable restart monitor test in Windows * Don't fail-fast on Windows integration tests ([#6338](https://github.com/containerd/containerd/pull/6338)) * Don't fail-fast on Windows integration tests * Update restart monitor test to output daemon logs on failure ([#6355](https://github.com/containerd/containerd/pull/6355)) * Run windows parallel integration test as short * Update restart monitor test to output daemon logs on failure * go.mod: update image-spec to latest (v1.0.3-dev) ([#6263](https://github.com/containerd/containerd/pull/6263)) * images/converter: remove deprecated types * go.mod: update image-spec to latest (v1.0.3-dev) * Skip WithAdditionalGIDs on Darwin ([#6353](https://github.com/containerd/containerd/pull/6353)) * Skip WithAdditionalGIDs on Darwin * Use RFC3339 format on Windows periodic resource group creation so cleanup works ([#6303](https://github.com/containerd/containerd/pull/6303)) * Use RFC3339 format so rg cleanup works * update runc to v1.0.3 ([#6330](https://github.com/containerd/containerd/pull/6330)) * go.mod: github.com/opencontainers/runc v1.0.3 * update runc binary to v1.0.3 * Unblock native snapshotter on Darwin ([#6329](https://github.com/containerd/containerd/pull/6329)) * Allow native snapshotter on Darwin * Do not use `go get` to install executables ([#6328](https://github.com/containerd/containerd/pull/6328)) * Do not use `go get` to install executables * Include runtime v2 in default builtins ([#6326](https://github.com/containerd/containerd/pull/6326)) * Include runtime v2 in default builtins * Add Windows Server 2022 CI runs ([#6314](https://github.com/containerd/containerd/pull/6314)) * Add Windows Server 2022 CI runs * Set explicit ACL on test files ([#6324](https://github.com/containerd/containerd/pull/6324)) * Use a single RUN command * Set explicit ACL on test files * integration: align tags of test images ([#6311](https://github.com/containerd/containerd/pull/6311)) * integration: align tags of test images * Set CONTAINERD_ROOT in Windows cri-integration ([#6325](https://github.com/containerd/containerd/pull/6325)) * Set CONTAINERD_ROOT in Windows cri-integration * export oci.DeviceFromPath() ([#6312](https://github.com/containerd/containerd/pull/6312)) * export oci.DeviceFromPath() * Update volume test images ([#6321](https://github.com/containerd/containerd/pull/6321)) * Update continuity dependency * Update volume test images * Update TestRestartMonitor expected time check ([#6201](https://github.com/containerd/containerd/pull/6201)) * Add error logging on cleanup * Update TestRestartMonitor expected time check * Move test volume images from gcr to ghcr ([#6319](https://github.com/containerd/containerd/pull/6319)) * Move volume images from gcr to ghcr * Revert shim service plugin migration ([#6301](https://github.com/containerd/containerd/pull/6301)) * Revert shim plugin migration * Authenticate against ghcr.io ([#6317](https://github.com/containerd/containerd/pull/6317)) * Add permissions * Authenticate against ghcr.io * oci/deviceFromPath(): correctly check device types ([#6306](https://github.com/containerd/containerd/pull/6306)) * oci/deviceFromPath(): correctly check device types * Skip TestExportAndImportMultiLayer on Windows ([#6315](https://github.com/containerd/containerd/pull/6315)) * Skip TestExportAndImportMultiLayer on Windows * Integration: Add image build workflow ([#6290](https://github.com/containerd/containerd/pull/6290)) * Add image build workflow * Integration: Separate Windows Periodic Tests workflow trigger. ([#6286](https://github.com/containerd/containerd/pull/6286)) * Integration: Separate Windows Periodic Tests workflow trigger. * Build volume test images on Windows ([#6274](https://github.com/containerd/containerd/pull/6274)) * Build volume test images on Windows * Add VMware TKG & TCE to Containerd adopters ([#6297](https://github.com/containerd/containerd/pull/6297)) * Add VMware TKG & TCE to Containerd adopters * Vagrantfile: update to Fedora 35 ([#6293](https://github.com/containerd/containerd/pull/6293)) * Vagrantfile: update to Fedora 35 * Update README.md repo->org ([#6269](https://github.com/containerd/containerd/pull/6269)) * Update README.md repo->org * Fix executable file not found when restoring shims ([#6278](https://github.com/containerd/containerd/pull/6278)) * Fix executable file not found when restoring shims * ctr/snapshots/diff: show media-type in stderr ([#6271](https://github.com/containerd/containerd/pull/6271)) * ctr/snapshots/diff: don't show the media-type in output * ctr: Add Linux Capabilities control flags ([#6289](https://github.com/containerd/containerd/pull/6289)) * ctr: Add Linux Capabilities control flags * integration: add stats result in error message ([#6270](https://github.com/containerd/containerd/pull/6270)) * integration: add stats result in error message * releases: mark 1.4 as Extended ([#6287](https://github.com/containerd/containerd/pull/6287)) * docs: mark 1.4 as Extended * docs: fix RELEASES.md gRPC API anchor * feat: skip ci for fork ([#6284](https://github.com/containerd/containerd/pull/6284)) * feat: skip ci for fork * content/local: Close the file if Seek fails ([#6280](https://github.com/containerd/containerd/pull/6280)) * content/local: Close the file if Seek fails * Integration: Remove explicit version passing to `azure/CLI`. ([#6268](https://github.com/containerd/containerd/pull/6268)) * Integration: Remove explicit version passing to `azure/CLI`. * Fix wrong make target on documentation ([#6276](https://github.com/containerd/containerd/pull/6276)) * Fix wrong make target on documentation * fix: server error return ([#6272](https://github.com/containerd/containerd/pull/6272)) * fix: server error return * Prepare release notes for v1.6.0-beta.3 ([#6267](https://github.com/containerd/containerd/pull/6267)) * Prepare release notes for v1.6.0-beta.3 * Update API version in go.mod * Update release name to use consistent format * feat:support custom callopts on client side ([#6254](https://github.com/containerd/containerd/pull/6254)) * fix: make max recv/send msg size setting default * feat:support custom callopts on client side * [CRI] Fix panic when registry.mirrors use localhost ([#6258](https://github.com/containerd/containerd/pull/6258)) * [CRI] Fix panic when registry.mirrors use localhost * Add support for TMP override on toml ([#6241](https://github.com/containerd/containerd/pull/6241)) * Add support for TMP override on toml * CRI: Support enable_unprivileged_icmp and enable_unprivileged_ports options ([#6170](https://github.com/containerd/containerd/pull/6170)) * CRI: Support enable_unprivileged_icmp and enable_unprivileged_ports options * Github Security Advisory [GHSA-5j5w-g665-5m35](https://github.com/containerd/containerd/security/advisories/GHSA-5j5w-g665-5m35) * schema1: reject ambiguous documents * images: validate document type before unmarshal * [cri] add sandbox and container latency metrics ([#6111](https://github.com/containerd/containerd/pull/6111)) * [cri] add sandbox and container latency metrics * Integration: Generalize Windows CI setup scripts for any username. ([#6255](https://github.com/containerd/containerd/pull/6255)) * Generalize Windows CI setup script for any user. * Standardize cmdlet capitalization in Windows CI scripts. * feat: use rwmutex instead ([#6253](https://github.com/containerd/containerd/pull/6253)) * feat: use rwmutex instead * Allow absolute path to shim binaries ([#6206](https://github.com/containerd/containerd/pull/6206)) * Fix package alias * Support custom runtime path when launching tasks * Add runtime path in CreateTaskRequest * Close file if permission modification fails ([#6246](https://github.com/containerd/containerd/pull/6246)) * Close file if permission modification fails * release: change tar name to match prior releases ([#6250](https://github.com/containerd/containerd/pull/6250)) * release: change tar name to match prior releases * Fix wrong error returned for image index lookup ([#6237](https://github.com/containerd/containerd/pull/6237)) * Fix wrong error returned for image index lookup * Fix containerd fails to pull OCI image with non-`http(s)://` urls ([#6221](https://github.com/containerd/containerd/pull/6221)) * Fix containerd fails to pull OCI image with non-`http(s)://` urls * Prepare release notes for v1.6.0-beta.2 ([#6223](https://github.com/containerd/containerd/pull/6223)) * Prepare release notes for v1.6.0-beta.2 * Add arm64 to releases ([#6196](https://github.com/containerd/containerd/pull/6196)) * Rename release dockerfile to omit distro name * release: improve dockerfile * Add arm64 to releases * use write lock when updating container stats ([#6236](https://github.com/containerd/containerd/pull/6236)) * use write lock when updating container stats * go.mod: Bump hcsshim to v0.9.1 ([#6230](https://github.com/containerd/containerd/pull/6230)) * go.mod: Bump hcsshim to v0.9.1 * go.mod: Bump ttrpc to 1.1.0 ([#6228](https://github.com/containerd/containerd/pull/6228)) * go.mod: Bump ttrpc to 1.1.0 * go.mod: bump moby/sys/symlink v0.2.0, moby/sys/signal v0.6.0, moby/sys/mountinfo v0.5.0 ([#6213](https://github.com/containerd/containerd/pull/6213)) * go.mod: github.com/moby/sys/mountinfo v0.5.0 * go.mod: github.com/moby/sys/signal v0.6.0 * go.mod: github.com/moby/sys/symlink v0.2.0 * go.mod: golang.org/x/sys v0.0.0-20211025201205-69cdffdb9359 * cleanup: add more description on comment ([#6222](https://github.com/containerd/containerd/pull/6222)) * cleanup: add more description on comment * Update Go to 1.17.3 ([#6211](https://github.com/containerd/containerd/pull/6211)) * Update Go to 1.17.3 * CI: bump up crun: 1.0 -> 1.3 ([#6214](https://github.com/containerd/containerd/pull/6214)) * CI: bump up crun: 1.0 -> 1.3 * Pin az CLI version in windows-periodic workflow ([#6205](https://github.com/containerd/containerd/pull/6205)) * Pin az CLI version * Decouple task manager ([#5918](https://github.com/containerd/containerd/pull/5918)) * Address PR comments * Fix build after rebase * Migrate task directory * Expose shim process interface * Fix after rebase * Cleanup shim loading * Move shim restore to a separate file * Fix backward compatibility with old task shims * Add plugin dependency between shim and shim services * Rework task create and cleanup flow * Add task manager * Rename task manager to shim manager * [cri] Implement k8s 1.23 CRI Pod Sandbox and Container Stats ([#6113](https://github.com/containerd/containerd/pull/6113)) * Implement CRI container and pods stats * Vendor latest k8s.io/cri-api and netlink * test: Add grace period for restart monitor test ([#6200](https://github.com/containerd/containerd/pull/6200)) * test: Add grace period for restart monitor test * integration: Enables TestRuntimeHandler for Windows ([#6179](https://github.com/containerd/containerd/pull/6179)) * integration: Enables TestRuntimeHandler for Windows * Add mkdir on Dockerfile ([#6171](https://github.com/containerd/containerd/pull/6171)) * Add mkdir on Dockerfile * sys/reaper: avoid leaky goroutine when exec timeout ([#6189](https://github.com/containerd/containerd/pull/6189)) * sys/reaper: avoid leaky goroutine when exec timeout * adds additional debug out to timebox cni setup ([#6184](https://github.com/containerd/containerd/pull/6184)) * adds additional debug out to timebox cni setup * converter: Allow hooks during image conversion ([#6176](https://github.com/containerd/containerd/pull/6176)) * converter: Allow hooks during image conversion * compression: support zstd with skippable frame ([#6177](https://github.com/containerd/containerd/pull/6177)) * compression: support zstd with skippable frame * integration: Enables TestVolumeCopyUp for Windows ([#6182](https://github.com/containerd/containerd/pull/6182)) * integration: Enables TestVolumeCopyUp for Windows * integration: Enable some tests for Windows (part 2) ([#6121](https://github.com/containerd/containerd/pull/6121)) * integration: Enable some tests for Windows (part 2) * integration: Enable some tests for Windows ([#6085](https://github.com/containerd/containerd/pull/6085)) * integration: Enable some tests for Windows * Update doc to version 2 syntax ([#6125](https://github.com/containerd/containerd/pull/6125)) * feat(doc): update to version 2 syntax * fix shim reaper wait command execute blocked ([#6166](https://github.com/containerd/containerd/pull/6166)) * fix shim reaper wait command execute blocked * content: close stream after commit request ([#6145](https://github.com/containerd/containerd/pull/6145)) * content: close stream after commit request * Generating token options with each scope as a separate string. ([#6165](https://github.com/containerd/containerd/pull/6165)) * Adding scope tests for ParseAuthHeader * Adding tests for GenerateTokenOptions * Generate token options with each scope as a separate string. * vendor: Updates go-cni ([#6167](https://github.com/containerd/containerd/pull/6167)) * vendor: Updates go-cni * commands: Enables task metrics for Windows ([#6159](https://github.com/containerd/containerd/pull/6159)) * commands: Enables task metrics for Windows * vendor: update moby/sys for darwin support ([#6149](https://github.com/containerd/containerd/pull/6149)) * vendor: update moby/sys for darwin support * Prepare v1.6.0-beta.1 ([#6144](https://github.com/containerd/containerd/pull/6144)) * Prepare release notes for v1.6.0-beta.1 * Update mailmap * Update api vendor * bump cni to spec v1.0.0 ([#6136](https://github.com/containerd/containerd/pull/6136)) * bump CNI to spec v1.0.0 * Inject otel traces to grpc client. ([#5992](https://github.com/containerd/containerd/pull/5992)) * Inject otel traces to grpc client. * client: expose (*image).platform ([#6142](https://github.com/containerd/containerd/pull/6142)) * client: expose (*image).platform * Adding documentation for Core Scheduling ([#6128](https://github.com/containerd/containerd/pull/6128)) * feat(doc): add Core Scheduling documentation * Ensure namespace is proxied to grpc/ttrpc plugins ([#6130](https://github.com/containerd/containerd/pull/6130)) * Ensure namespace is proxied to grpc/ttrpc plugins * fix #6054 MaxConcurrentDownloads is not effect when Unpack is true ([#6109](https://github.com/containerd/containerd/pull/6109)) * fix #6054 MaxConcurrentDownloads is not effect when Unpack is true * Output a warning for label image labels instead of erroring ([#6124](https://github.com/containerd/containerd/pull/6124)) * Output a warning for label image labels instead of erroring * Fix spelling mistake in Windows snapshotter ([#6132](https://github.com/containerd/containerd/pull/6132)) * Fix spelling mistake in Windows snapshotter * Windows: Cleanup rm- prefixed layers ([#6126](https://github.com/containerd/containerd/pull/6126)) * Windows: Cleanup rm- prefixed layers * cleanup deprecated package `io/ioutil ` ([#6118](https://github.com/containerd/containerd/pull/6118)) * io/ioutil package has been deprecated in Go 1.16 that replaces io/ioutil functions * close Writer after use which may memory leak ([#6115](https://github.com/containerd/containerd/pull/6115)) * close Writer after use which may leak mem * Adds Windows resource limits support ([#5778](https://github.com/containerd/containerd/pull/5778)) * Adds Windows resource limits support * Prepare release notes for v1.6.0-beta.0 ([#6098](https://github.com/containerd/containerd/pull/6098)) * Prepare release notes for v1.6.0-beta.0 * Add error message to in TestContainerdRestart integration test ([#6105](https://github.com/containerd/containerd/pull/6105)) * Add error message to in TestContainerdRestart integration test * Fix typo in the NewContainer function documentation ([#6110](https://github.com/containerd/containerd/pull/6110)) * Fix typo in the NewContainer function documentation * Update cgroups to v1.0.2 ([#6104](https://github.com/containerd/containerd/pull/6104)) * Update cgroups to v1.0.2 * btrfs: verify file content after mount ([#6100](https://github.com/containerd/containerd/pull/6100)) * test: check file content after mount * Update test timeout based on recent cancellations ([#6107](https://github.com/containerd/containerd/pull/6107)) * Update test timeout based on recent cancellations * Check the pid in cri test teardown ([#6106](https://github.com/containerd/containerd/pull/6106)) * Remove extra test_teardown * Check the pid in cri test teardown * add runc shim support for sched core ([#6011](https://github.com/containerd/containerd/pull/6011)) * fix integration client vendor * add runc shim support for sched core * integration: Enables Windows containerd restart test ([#5579](https://github.com/containerd/containerd/pull/5579)) * integration: Enables Windows containerd restart test * vendor: Bump hcsshim to 0.9.0 ([#6099](https://github.com/containerd/containerd/pull/6099)) * vendor: Bump hcsshim to 0.9.0 * [cri] Add CNI conf based on runtime class ([#4695](https://github.com/containerd/containerd/pull/4695)) * Add CNI conf based on runtime class * Update Go to 1.17.2 ([#6102](https://github.com/containerd/containerd/pull/6102)) * Update Go to 1.17.2 * integration: Adds test for multilayer image import ([#5933](https://github.com/containerd/containerd/pull/5933)) * integration: Adds test for multilayer image import * runtime: should fail fast if dial error on shim ([#6031](https://github.com/containerd/containerd/pull/6031)) * runtime: should fail fast if dial error on shim * Fixes Windows containers with image volumes ([#6034](https://github.com/containerd/containerd/pull/6034)) * Windows: Fixes Windows containers with image volumes * run `gofmt` with GO 1.17 ([#6094](https://github.com/containerd/containerd/pull/6094)) * run `gofmt` with Go 1.17 * pkg/cap: remove an outdated comment ([#6088](https://github.com/containerd/containerd/pull/6088)) * pkg/cap: remove an outdated comment * Update go otel 1.0.1 ([#6066](https://github.com/containerd/containerd/pull/6066)) * Update go otel 1.0.1 * Update ADOPTERS.md with additional uses ([#6086](https://github.com/containerd/containerd/pull/6086)) * Update ADOPTERS.md with additional uses * modify the way for checking cos ([#6082](https://github.com/containerd/containerd/pull/6082)) * modify the way for checking cos * Fuzzing: Add fuzzers + small modifications ([#5915](https://github.com/containerd/containerd/pull/5915)) * Fuzzing: Add 4 fuzzers + small modifications * Fixes for Windows CI ([#6081](https://github.com/containerd/containerd/pull/6081)) * Pin mingw to version 10.2.0 * Update to golang 1.17.1 * Install nssm * Github Security Advisory [GHSA-c2h3-6mxw-7mvq](https://github.com/containerd/containerd/security/advisories/GHSA-c2h3-6mxw-7mvq) * btrfs: reduce permissions on plugin directories * v1 runtime: reduce permissions for bundle dir * v2 runtime: reduce permissions for bundle dir * task service: return known error type ([#6079](https://github.com/containerd/containerd/pull/6079)) * task service: return known error type * refactor: move from io/ioutil to io and os package ([#5973](https://github.com/containerd/containerd/pull/5973)) * refactor: move from io/ioutil to io and os package * fix: import from k8s.io/utils/clock instead ([#6076](https://github.com/containerd/containerd/pull/6076)) * fix: update vendor * cleanup: import from k8s.io/utils/clock/testing instead * cleanup: import from k8s.io/utils/clock instead * feat: enable integration cri remote client to call with grpc calloptions ([#6069](https://github.com/containerd/containerd/pull/6069)) * feat: enable cri remote client to call with grpc calloptions * cleanup k8s ansible yaml (carry for #5713) ([#6074](https://github.com/containerd/containerd/pull/6074)) * cleanup k8s ansible yaml (carry for https://github.com/jayonlau <jayonlau@gmail.com>) * feat: support import image for specific platform ([#6070](https://github.com/containerd/containerd/pull/6070)) * fix: wrong flag type * feat: support import image for specific platform * Update mirror images to take target image name ([#6065](https://github.com/containerd/containerd/pull/6065)) * Update mirror images to take target image name * fix: make exec-id flag required in exec command ([#6059](https://github.com/containerd/containerd/pull/6059)) * fix: make exec-id flag required in exec command * images: enable converter to uncompress zstd ([#6052](https://github.com/containerd/containerd/pull/6052)) * images: enable converter to uncompress zstd * replace deprecated function with Domain and Path ([#5922](https://github.com/containerd/containerd/pull/5922)) * replace deprecated function * integration: Adds Windows HostProcess tests ([#5853](https://github.com/containerd/containerd/pull/5853)) * integration: Adds Windows HostProcess tests * Fix main branch build is broken ([#6047](https://github.com/containerd/containerd/pull/6047)) * Fix main branch build is broken * Add open telemetry logging hook for logrus ([#6003](https://github.com/containerd/containerd/pull/6003)) * Add open telemetry logging hook for logrus * Change `oci.WithUser` behavior for LCOW ([#6023](https://github.com/containerd/containerd/pull/6023)) * Change oci.WithUser behavior for LCOW * switch usage directly to errdefs.(ErrAlreadyExists and ErrNotFound) ([#5946](https://github.com/containerd/containerd/pull/5946)) * switch usage directly to errdefs.(ErrAlreadyExists and ErrNotFound) * import: Raise error if the imported image is filtered out ([#5926](https://github.com/containerd/containerd/pull/5926)) * import: Raise error if the imported image is filtered out * Fix panic in metadata content writer on copy error ([#6043](https://github.com/containerd/containerd/pull/6043)) * Fix panic in metadata content writer on copy error * Move tracing to plugin ([#6001](https://github.com/containerd/containerd/pull/6001)) * Move tracing to plugin * ctr: Fixes Windows image import ([#5916](https://github.com/containerd/containerd/pull/5916)) * ctr: Fixes Windows image import * update open go.opentelemetry.io v1.0.0 to fix import path ([#6017](https://github.com/containerd/containerd/pull/6017)) * go.mod: update opentelemetry modules to v1.0.0 * fix error string format ([#5979](https://github.com/containerd/containerd/pull/5979)) * fix error string format * Add github action to mirror image ([#6036](https://github.com/containerd/containerd/pull/6036)) * Add github action to mirror image * add current process state to the error message ([#6027](https://github.com/containerd/containerd/pull/6027)) * add current process state to the error message * FreeBSD: fix tar headers & the nil check on getxattr ([#5991](https://github.com/containerd/containerd/pull/5991)) * FreeBSD: fix tar headers & the nil check on getxattr * gha: collect VMs' IP addresses ([#6035](https://github.com/containerd/containerd/pull/6035)) * gha: collect Vagrant VMs' IP addresses * bump continuity and console version that remove pkg/errors ([#6033](https://github.com/containerd/containerd/pull/6033)) * bump continuity and console version that remove pkg/errors * import: Add option to prevent duplicated digest image ([#5997](https://github.com/containerd/containerd/pull/5997)) * import: Add option to skip creating digest image * ctr namespaces: improve usage string ([#5998](https://github.com/containerd/containerd/pull/5998)) * ctr namespaces: improve usage string * bump console version to v1.0.3 that remove pkg/errors ([#6028](https://github.com/containerd/containerd/pull/6028)) * bump console version to v1.0.3 that remove pkg/errors * Use github images for integration tests ([#6032](https://github.com/containerd/containerd/pull/6032)) * Use github images for integration tests * Fix typo ([#5995](https://github.com/containerd/containerd/pull/5995)) * Fix typo * Enable image config labels in ctr and CRI container creation ([#6012](https://github.com/containerd/containerd/pull/6012)) * Enable image config labels in ctr and CRI container creation * Make sure exit signals trigger an exit during init ([#5970](https://github.com/containerd/containerd/pull/5970)) * Make sure exit signals trigger an exit during init * task delete: Closes task IO before waiting ([#5974](https://github.com/containerd/containerd/pull/5974)) * task delete: Closes task IO before waiting * CI: bump up crun to 1.0 ([#5985](https://github.com/containerd/containerd/pull/5985)) * CI: bump up crun to 1.0 * seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted) ([#5982](https://github.com/containerd/containerd/pull/5982)) * seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted) * Update to Go 1.17.1 ([#5990](https://github.com/containerd/containerd/pull/5990)) * Update to Go 1.17.1 * CI: Switch to available latest images ([#5987](https://github.com/containerd/containerd/pull/5987)) * CI: Switch to available latest images * add xfs support to devicemapper snapshotter ([#5610](https://github.com/containerd/containerd/pull/5610)) * add xfs support to devicemapper snapshotter * Fixes task kill --force on Windows ([#5956](https://github.com/containerd/containerd/pull/5956)) * Fixes task kill --force on Windows * Add support for shim plugins ([#5817](https://github.com/containerd/containerd/pull/5817)) * Add support for shim plugins * vendor: update continuity for darwin support ([#5976](https://github.com/containerd/containerd/pull/5976)) * vendor: update continuity for darwin support * replace uses of os/exec with golang.org/x/sys/execabs ([#5906](https://github.com/containerd/containerd/pull/5906)) * replace uses of os/exec with golang.org/x/sys/execabs * complete integration test for pulling image with labels ([#5972](https://github.com/containerd/containerd/pull/5972)) * Additional integration tests for pulling image with labels * Fix content copy to not ignore unexpected EOF ([#5966](https://github.com/containerd/containerd/pull/5966)) * Fix content copy to not ignore unexpected EOF * add ip_pref CNI options for primary pod ip ([#5964](https://github.com/containerd/containerd/pull/5964)) * add ip_pref CNI options for primary pod ip * cri: add devices for privileged container ([#5939](https://github.com/containerd/containerd/pull/5939)) * cri: add devices for privileged container * sandbox: Allows the sandbox to be deleted in NotReady state ([#5954](https://github.com/containerd/containerd/pull/5954)) * sandbox: Allows the sandbox to be deleted in NotReady state * pin protobuild version to tag ([#5969](https://github.com/containerd/containerd/pull/5969)) * pin protobuild version to tag * Add metric exposing build version&revision ([#5965](https://github.com/containerd/containerd/pull/5965)) * use a const metric for build_info * Add metric exposing build version&revision * Feature: containerd-cri support LinuxContainerResources.Unified ([#5627](https://github.com/containerd/containerd/pull/5627)) * add cri test case * feature: add field LinuxContainerResources.Unified on cri * integration: investigate TestRestartMonitor's failure ([#5861](https://github.com/containerd/containerd/pull/5861)) * integration: investigate TestRestartMonitor's failure * Use issue forms for bug reporting ([#5917](https://github.com/containerd/containerd/pull/5917)) * Address issue forms feedback * Use issue forms for bug reporting * cri: patch update image labels ([#5945](https://github.com/containerd/containerd/pull/5945)) * cri: patch update image labels * darwin: runtime support ([#5936](https://github.com/containerd/containerd/pull/5936)) * darwin: runtime support * darwin: use the default values for socketRoot variable * Update RELEASES.md ([#5858](https://github.com/containerd/containerd/pull/5858)) * Update RELEASES.md * archive: Add WriteDiff error logs ([#5949](https://github.com/containerd/containerd/pull/5949)) * archive: Add WriteDiff error logs * replace deprecated Dialer with ContextDialer ([#5958](https://github.com/containerd/containerd/pull/5958)) * replace deprecated Dail with DailContext * Add WS2022 support in Windows Periodic tests ([#5951](https://github.com/containerd/containerd/pull/5951)) * Add WS2022 support in Windows Periodic tests * Content fuzzer: Clean up temp store dir ([#5943](https://github.com/containerd/containerd/pull/5943)) * content fuzzer: Clean up tempdir * using Hosts replace deprecated field ([#5944](https://github.com/containerd/containerd/pull/5944)) * using Hosts replace deprecated field * fix document non-synchronous ([#5947](https://github.com/containerd/containerd/pull/5947)) * fix document non-synchronous in crictl.md * go.mod: Update hcsshim to v0.8.21 ([#5929](https://github.com/containerd/containerd/pull/5929)) * go.mod: Update hcsshim to v0.8.21 * Makefile.linux: build on RISC-V with PIE ([#5937](https://github.com/containerd/containerd/pull/5937)) * Makefile.linux: build on riscv with PIE * Fix cwd flag for `ctr tasks exec` ([#5932](https://github.com/containerd/containerd/pull/5932)) * Fix cwd flag for `ctr tasks exec` * Update Pause image in tests & config ([#5927](https://github.com/containerd/containerd/pull/5927)) * Update Pause image in tests & config * cri: Devices ownership from SecurityContext ([#5122](https://github.com/containerd/containerd/pull/5122)) * cri: Devices ownership from SecurityContext * Fix pull fails on unexpected EOF ([#5921](https://github.com/containerd/containerd/pull/5921)) * Fix pull fails on unexpected EOF * Fix dir support for devices ([#5845](https://github.com/containerd/containerd/pull/5845)) * Adding testing of two devices * Fix dir support for devices V3 (#4847) * windows: The DefaultSpec platform should match the Default matcher ([#5914](https://github.com/containerd/containerd/pull/5914)) * windows: The DefaultSpec platform should match the Default matcher * Add RunAsUserName functionality for the Windows pod sandbox container ([#5865](https://github.com/containerd/containerd/pull/5865)) * Add RunAsUserName functionality for the Windows Pod Sandbox Container * bump up runc v1.0.2 ([#5899](https://github.com/containerd/containerd/pull/5899)) * go.mod: update runc to v1.0.2 * update runc binary to v1.0.2 * Run `go fmt` with Go 1.17 ([#5903](https://github.com/containerd/containerd/pull/5903)) * Run `go fmt` with Go 1.17 * go.mod: github.com/pelletier/go-toml v1.9.3 ([#5905](https://github.com/containerd/containerd/pull/5905)) * go.mod: github.com/pelletier/go-toml v1.9.3 * cri: filter selinux xattr for image volumes ([#5902](https://github.com/containerd/containerd/pull/5902)) * cri: filter selinux xattr for image volumes * Add Windows HostProcess Support ([#5131](https://github.com/containerd/containerd/pull/5131)) * Added windows hostProcess cni skip * script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0 ([#5897](https://github.com/containerd/containerd/pull/5897)) * script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0 * Update to Go 1.17 ([#5889](https://github.com/containerd/containerd/pull/5889)) * Bump integration timeout to 35 min * Update to Go 1.17 * integration: fix TestContainerPids ([#5896](https://github.com/containerd/containerd/pull/5896)) * integration: fix TestContainerPids * [ctr] add HOSTNAME env for host network ([#5891](https://github.com/containerd/containerd/pull/5891)) * [ctr] add HOSTNAME env for host network * Fuzzing: Add fuzzer ([#5886](https://github.com/containerd/containerd/pull/5886)) * Fuzzing: Add fuzzer * Make Cgroup driver configurable in gce configure script ([#5884](https://github.com/containerd/containerd/pull/5884)) * Add env for SystemdCgroup driver * Allow expanded DNS configuration ([#5878](https://github.com/containerd/containerd/pull/5878)) * Allow expanded DNS configuration * Fuzzing: Add 4 fuzzers ([#5863](https://github.com/containerd/containerd/pull/5863)) * Fuzzing: Add 4 fuzzers * Cleanup v2 shim ([#5813](https://github.com/containerd/containerd/pull/5813)) * Cleanup v2 shim * Fuzzing: Add experimental version of container fuzzer ([#5840](https://github.com/containerd/containerd/pull/5840)) * Use http.Get to download binaries instead of exec.Command * Fuzzing: Add experimental version of container fuzzer * add cpu-shares to ctr ([#5846](https://github.com/containerd/containerd/pull/5846)) * add cpu-shares to ctr * docs: rename master to main (it was opposite on the actual commit) ([#5847](https://github.com/containerd/containerd/pull/5847)) * docs: rename main to master * content: return the error with its timestamp ([#5849](https://github.com/containerd/containerd/pull/5849)) * content: return the error with its timestamp * Fix bad `make protos` failure ([#5857](https://github.com/containerd/containerd/pull/5857)) * Fix bad `make protos` failure * replace cri and point to new location ([#5851](https://github.com/containerd/containerd/pull/5851)) * archive docs and point to new location fix #https://github.com/containerd/cri/issues/1624 * docs: remove FOSSA's badge ([#5856](https://github.com/containerd/containerd/pull/5856)) * docs: remove FOSSA's badge * BUILDING.md: remove some bits about building runc ([#5850](https://github.com/containerd/containerd/pull/5850)) * BUILDING.md: remove some bits about building runc * BUILDING.md: markdown fixes * go.mod: update k8s deps to v1.22.0 ([#5836](https://github.com/containerd/containerd/pull/5836)) * go.mod: update kubernetes to v1.22.0 * [Scripts] Add trap to cri-integration test script ([#5852](https://github.com/containerd/containerd/pull/5852)) * Add trap to cri-integration test script * docs: list all snapshotter-related build flags ([#5848](https://github.com/containerd/containerd/pull/5848)) * docs: list all snapshotter-related build flags * Move plugin context events into separate plugin ([#5835](https://github.com/containerd/containerd/pull/5835)) * Move plugin context events into separate plugin * Fix Linux CI Linter using Go 1.15.14 ([#5839](https://github.com/containerd/containerd/pull/5839)) * Fix Linux CI Linter using go 1.15.14 * Update Go to 1.16.7 ([#5842](https://github.com/containerd/containerd/pull/5842)) * Update Go to 1.16.7 * Cleanup CI ([#5838](https://github.com/containerd/containerd/pull/5838)) * Cleanup CI * Remove redundant build tags ([#5834](https://github.com/containerd/containerd/pull/5834)) * Remove redundant build tags * Change default directories on Darwin ([#5830](https://github.com/containerd/containerd/pull/5830)) * Change default directories on Darwin * [otel-tracing] Initial opentelemetry support ([#5731](https://github.com/containerd/containerd/pull/5731)) * [otel-tracing] vendor and go modules changes * [otel-tracing] Initial opentelemetry support * remove go 1.13 from containerd * Fuzzing: Fix for OSS-fuzz issue 36825 ([#5829](https://github.com/containerd/containerd/pull/5829)) * Fuzzing: Fix for OSS-fuzz issue 36825 * Fuzzing: Add two fuzzers ([#5825](https://github.com/containerd/containerd/pull/5825)) * Fuzzing: Add two more fuzzers * scripts: linting fixes, and remove support for Debian Jessie (as it's EOL) ([#5760](https://github.com/containerd/containerd/pull/5760)) * scripts: declare ROOT closer to where it's used, and some DRY changes * scripts: add missing quotes, and minor linting issues * test/build-utils.sh: remove support for Debian Jessie * platforms: Format(): use path.Join() instead of joinNotEmpty() ([#5821](https://github.com/containerd/containerd/pull/5821)) * platforms: Format(): use path.Join() instead of joinNotEmpty() * Fuzzing: Remove panics of container_fuzzer ([#5823](https://github.com/containerd/containerd/pull/5823)) * Fuzzing: Remove panics of container_fuzzer * Fuzzing: Add container fuzzer ([#5785](https://github.com/containerd/containerd/pull/5785)) * Change protoc link * Split fuzzer to two fuzzers * Fuzzing: Add container fuzzer * runtime: fix the issue of create new socket with abstract address ([#5746](https://github.com/containerd/containerd/pull/5746)) * runtime: fix the issue of create new socket with abstract address * mergo: Upgrade to 0.3.12 to fix panic ([#5809](https://github.com/containerd/containerd/pull/5809)) * mergo: Upgrade to 0.3.12 to fix panic * ci: install criu from PPA ([#5802](https://github.com/containerd/containerd/pull/5802)) * ci: install criu from PPA * Update release workflow to upload binary without CNI ([#5144](https://github.com/containerd/containerd/pull/5144)) * Split release steps into multiple tasks * Update release workflow to upload binary without CNI * Enable critest on Windows Periodic Jobs ([#5725](https://github.com/containerd/containerd/pull/5725)) * Enable critest on Windows * Script to check if entries in go.mod files are in sync ([#5792](https://github.com/containerd/containerd/pull/5792)) * Script to check if entries in go.mod files are in sync * Add a sharedNamespace label ([#5043](https://github.com/containerd/containerd/pull/5043)) * Add shared content label to namespaces * platforms: add "ios" as known OS, "loong64" as known ARCH ([#5784](https://github.com/containerd/containerd/pull/5784)) * platforms: add "ios" as known OS, "loong64" as known ARCH * Updates the location of protobuf downloads ([#5804](https://github.com/containerd/containerd/pull/5804)) * Updates the location of protobuf downloads in docs * Update protobuf install to use correct repository ([#5803](https://github.com/containerd/containerd/pull/5803)) * Update protobuf install to use correct repository * overlay: expose upperdir location of each snapshot via an optional label ([#5624](https://github.com/containerd/containerd/pull/5624)) * overlay: add an optional label of upperdir location of each snapshot * Support SIGRTMIN+n signals ([#5693](https://github.com/containerd/containerd/pull/5693)) * Support SIGRTMIN+n signals * respect context timeout in shim binary call ([#5800](https://github.com/containerd/containerd/pull/5800)) * respect context timeout in shim binary call * Introduce a new go module - containerd/api for use in standalone clients ([#5716](https://github.com/containerd/containerd/pull/5716)) * Introduce a new go module - containerd/api for use in standalone clients * grpc config add options tcp_client_ca_cert ([#5606](https://github.com/containerd/containerd/pull/5606)) * grpc config add options tcp_tls_ca * integration: Windows volume-copy-up images ([#5162](https://github.com/containerd/containerd/pull/5162)) * integration: Windows volume-copy-up images * add CRI support matrix to RELEASES.md ([#5795](https://github.com/containerd/containerd/pull/5795)) * add CRI support matrix to RELEASES.md * adding a little more clarity ([#5794](https://github.com/containerd/containerd/pull/5794)) * adding a little more clarity * update gotestsum to v1.7.0 ([#5793](https://github.com/containerd/containerd/pull/5793)) * update gotestsum to v1.7.0 * Discard blocks when removing a thin device ([#5756](https://github.com/containerd/containerd/pull/5756)) * Discard blocks when removing a thin device * Makefile: fix passing build tags ([#5590](https://github.com/containerd/containerd/pull/5590)) * Makefile: pass build tags to manpage build process * Makefile: fix tags parameter computation * Add runtime label to metrics ([#5744](https://github.com/containerd/containerd/pull/5744)) * Add runtime label to metrics * interface about shim build check ([#5745](https://github.com/containerd/containerd/pull/5745)) * interface about shim build check * integration: log all processes to investigate the test failure ([#5775](https://github.com/containerd/containerd/pull/5775)) * integration: log all processes to investigate the test failure * Fuzzing: Add archive fuzzer ([#5779](https://github.com/containerd/containerd/pull/5779)) * Fuzzing: Add archive fuzzer * Add docker.Fetch fuzzer ([#5687](https://github.com/containerd/containerd/pull/5687)) * Add docker fetch fuzzer * Support custom compressor for walking differ ([#5735](https://github.com/containerd/containerd/pull/5735)) * Support custom compressor for walking differ * remotes/docker/pusher.go: Fix missing Close() on push to docker remote ([#5770](https://github.com/containerd/containerd/pull/5770)) * remotes/docker/pusher.go: Fix missing Close() * remotes/docker/fetcher.go: Fix missing Close() on fetch from docker remote ([#5769](https://github.com/containerd/containerd/pull/5769)) * remotes/docker/fetcher.go: Fix missing Close() * Update cpuguy83/go-md2man binary to v2.0.1 ([#5771](https://github.com/containerd/containerd/pull/5771)) * Update cpuguy83/go-md2man binary to v2.0.1 * Refactor / optimize contrib/Dockerfile.test ([#5750](https://github.com/containerd/containerd/pull/5750)) * Dockerfile.test: build containerd in separate stage * Dockerfile.test: add GOLANG_IMAGE build arg to allow overriding * Dockerfile.test: clean up apt indexes after installing * Dockerfile.test: build critools in a separate stage * Dockerfile.test: build cni in a separate stage * Dockerfile.test: standard directory to collect build aftifacts * Dockerfile.test: split dev stage, and optimize order * Dockerfile.test: skip curl, gcc, git and make install * install-critools: make sure DESTDIR exists * update gotestsum to current master ([#5754](https://github.com/containerd/containerd/pull/5754)) * update gotestsum to current master * Github Security Advisory [GHSA-c72p-9xmj-rx3w](https://github.com/containerd/containerd/security/advisories/GHSA-c72p-9xmj-rx3w) * Add test for archive breakout test for lchmod * Use systemd cgroup driver for Kubernetes e2e tests with cgroupsv2 ([#5755](https://github.com/containerd/containerd/pull/5755)) * Use systemd cgroup driver for cgroupv2 tests * update runc to v1.0.1 ([#5751](https://github.com/containerd/containerd/pull/5751)) * go.mod: runc v1.0.1 * update runc binary to v1.0.1 * runtime: runc v2: remove redundant validation ([#5737](https://github.com/containerd/containerd/pull/5737)) * runtime: runc v2: remove redundant validation * Add timestamp to flaky restart monitor test ([#5727](https://github.com/containerd/containerd/pull/5727)) * Move loop check to before sleep * Add timestamp to flaky restart monitor test * Update Go to 1.16.6 ([#5722](https://github.com/containerd/containerd/pull/5722)) * integration/client: go mod tidy * Update Go to 1.16.6 * client: surface a connection error more clearly ([#4447](https://github.com/containerd/containerd/pull/4447)) * client: surface a connection error more clearly * Fix missing Body.Close() calls on push to docker remote ([#5712](https://github.com/containerd/containerd/pull/5712)) * Fix missing Body.Close() calls on push to docker remote * remove pkg/cri/platforms package ([#5710](https://github.com/containerd/containerd/pull/5710)) * remove pkg/cri/platforms package * Allow WithServices to use custom implementations ([#5709](https://github.com/containerd/containerd/pull/5709)) * Allow WithServices to use custom implementations * [Vendor] Update hcsshim to 0.8.18 ([#5673](https://github.com/containerd/containerd/pull/5673)) * [Vendor] Update hcsshim to 0.8.18 * test integration: Adds a test that restarts a failed container ([#5578](https://github.com/containerd/containerd/pull/5578)) * test integration: Adds a test that restarts a failed container * [CRI] move up to CRI v1 and support v1alpha in parallel ([#5619](https://github.com/containerd/containerd/pull/5619)) * use fu wei's suggeted interface pick for marshaling * add alpha version * move up to CRI v1 and support v1alpha in parallel * gha: make release workflow work in forks ([#5682](https://github.com/containerd/containerd/pull/5682)) * gha: make release workflow work in forks * Add unit test for plugin ([#5666](https://github.com/containerd/containerd/pull/5666)) * Add unit test for plugin * Dockerfile.test: add "cri-in-userns" (aka rootless) test stage ([#5700](https://github.com/containerd/containerd/pull/5700)) * Dockerfile.test: add "cri-in-userns" (aka rootless) test stage * Update for distribution spec 1.0 ([#5676](https://github.com/containerd/containerd/pull/5676)) * Add support for registry host path override * Update documenation for OCI distribution 1.0 * archive: cleanup lchmod logic ([#5702](https://github.com/containerd/containerd/pull/5702)) * Cleanup lchmod logic in archive * Install specific golang version in Windows CI. ([#5571](https://github.com/containerd/containerd/pull/5571)) * Install specific golang version in Windows CI. * Add ctr command label in NewContainerOpts ([#5660](https://github.com/containerd/containerd/pull/5660)) * feat: Add snapshotter label to the new snapshot for container. * snapshot/devmapper: log exported methods correctly ([#5655](https://github.com/containerd/containerd/pull/5655)) * snapshot/devmapper: log exported methods correctly * Makefile: fix DESTDIR and PREFIX concatenation ([#5662](https://github.com/containerd/containerd/pull/5662)) * Makefile: fix DESTDIR and PREFIX concatenation * Cri integration cleanup ([#5287](https://github.com/containerd/containerd/pull/5287)) * tests: Use EnsureImageExists for image pulling * tests: Refactors PodSandbox creation * move sys.FMountat() into mount package and un-export ([#5641](https://github.com/containerd/containerd/pull/5641)) * un-export mount.FMountat * move sys.FMountat() into mount package * sandbox: send pod UID to CNI plugins as K8S_POD_UID ([#5640](https://github.com/containerd/containerd/pull/5640)) * sandbox: send pod UID to CNI plugins as K8S_POD_UID * sys: remove StatAtime(), StatCtime(), StatMtime() and StatATimeAsTime() utils ([#5639](https://github.com/containerd/containerd/pull/5639)) * sys: remove StatAtime(), StatCtime(), StatMtime() and StatATimeAsTime() utils * content/local: inline sys.StatATimeAsTime() ([#5633](https://github.com/containerd/containerd/pull/5633)) * content/local: inline sys.StatATimeAsTime() * allow multi gpu to be specified via ctr ([#5636](https://github.com/containerd/containerd/pull/5636)) * allow multi gpu to be specified via ctr * go.mod: runc v1.0.0 * update runc binary to v1.0.0 GA * fixing some doc links ([#5629](https://github.com/containerd/containerd/pull/5629)) * fixing some doc links * Sync integration/go.mod with root go.mod ([#5623](https://github.com/containerd/containerd/pull/5623)) * Sync integration/go.mod with root go.mod * archive: Expose ChangeWriter to allow customized diff computing ([#5615](https://github.com/containerd/containerd/pull/5615)) * archive: Expose ChangeWriter to allow customized diff computing * CI: Switch to the available latest images ([#5625](https://github.com/containerd/containerd/pull/5625)) * CI: Switch to available latest images * fix deprecation config for default runtime * Re-enable criu in main integration runs ([#5614](https://github.com/containerd/containerd/pull/5614)) * Re-enable criu in main integration runs * runtime,v2: Enable debug when containerd is on debug+ log level ([#5617](https://github.com/containerd/containerd/pull/5617)) * runtime,v2: Enable debug when containerd is on debug+ log level * github.com/golang/protobuf/proto is deprecated * Update github.com/golang/protobuf from v1.3.5 to v1.4.3 * Update google.golang.org/grpc from v1.27.1 to v1.38.0 * Increase golangci-lint timeout * ctr flags of container rootfs propagation ([#5611](https://github.com/containerd/containerd/pull/5611)) * command line flags of setting container rootfs propagation * add cgroupv2 setup for cos with a flag * Update gotestsum to add timestamps to junit output ([#5612](https://github.com/containerd/containerd/pull/5612)) * Update gotestsum to add timestamps to junit output * Allow to pass --no-cgroups option to nvidia-container-cli ([#5604](https://github.com/containerd/containerd/pull/5604)) * Allow to pass --no-cgroup option to nvidia-container-cli * Makefile: FHS conformant manpage installation pathes ([#5577](https://github.com/containerd/containerd/pull/5577)) * Makefile: FHS conformant manpage installation pathes * Add proper Go version before project checks ([#5594](https://github.com/containerd/containerd/pull/5594)) * Add proper Go version before project checks * Enable cri-integration in Windows Periodic Tests ([#5580](https://github.com/containerd/containerd/pull/5580)) * Enable cri-integration in Windows Periodic Tests * adds explanation for seccomp unset/unconfined default vs runtime default ([#5573](https://github.com/containerd/containerd/pull/5573)) * adds explanation for seccomp unset/unconfined default vs runtime default * Fix cleanup context of teardownPodNetwork ([#5569](https://github.com/containerd/containerd/pull/5569)) * Fix cleanup context of teardownPodNetwork * update integration/client go.sum ([#5572](https://github.com/containerd/containerd/pull/5572)) * update integration/client go.sum * Revert diff/walking error change ([#5566](https://github.com/containerd/containerd/pull/5566)) * Revert diff/walking error change * Update opencontainers/selinux to v1.8.2 ([#5562](https://github.com/containerd/containerd/pull/5562)) * Update opencontainers/selinux to v1.8.2 * fix invalid validation error checking ([#5565](https://github.com/containerd/containerd/pull/5565)) * fix invalid validation error checking * diff/walking: fix defer cleanup ([#5551](https://github.com/containerd/containerd/pull/5551)) * diff/walking: fix defer cleanup * Windows periodic job: Add creation timestamp to RG ([#5559](https://github.com/containerd/containerd/pull/5559)) * Add creation timestamp to RG * Fix error case in Windows layer cleanup ([#5328](https://github.com/containerd/containerd/pull/5328)) * Fix error case in Windows layer cleanup * Use DeactivateLayer to unlock layers that we cannot rename ([#5422](https://github.com/containerd/containerd/pull/5422)) * Small typo fix "reimporst" * Use DeactivateLayer to recover layers that we cannot rename * tests: Symlink volume tests ([#5284](https://github.com/containerd/containerd/pull/5284)) * tests: Symlink volume tests * Makefile: fix DESTDIR environment variable behaviour ([#5535](https://github.com/containerd/containerd/pull/5535)) * Makefile: fix DESTDIR environment variable behaviour * Change Wrapf of non-error to an actual error ([#5560](https://github.com/containerd/containerd/pull/5560)) * Change Wrapf of non-error to an actual error * Install apparmor parser for arm64 environment * scrub the stale TODO ([#5536](https://github.com/containerd/containerd/pull/5536)) * scrub the stale TODO * docs: explicitly mention containerd's Prometheus path ([#5554](https://github.com/containerd/containerd/pull/5554)) * docs: explicitly mention containerd's Prometheus path * integration: Cleanup containerd on test teardown ([#5553](https://github.com/containerd/containerd/pull/5553)) * integration: Cleanup containerd on test teardown * docs/cri: update links ([#5548](https://github.com/containerd/containerd/pull/5548)) * docs/cri: update ocicrypt link * docs/cri: fix broken links * Update Windows periodic tests ([#5544](https://github.com/containerd/containerd/pull/5544)) * Update Windows periodic tests * Add CI periodic Windows Jobs. ([#5165](https://github.com/containerd/containerd/pull/5165)) * Schedule Windows job daily after midnight. * Update windows-periodic.yml * Add CI periodic Windows Jobs. * Rename atomicWrite to writeToCompletion ([#5273](https://github.com/containerd/containerd/pull/5273)) * Rename atomicWrite to writeToCompletion * Do not run btrfs tests if btrfs kernel module is not loaded ([#5539](https://github.com/containerd/containerd/pull/5539)) * Do not run btrfs tests if btrfs kernel module is not loaded * Fix incorrect UA used for registry authentication ([#5533](https://github.com/containerd/containerd/pull/5533)) * Fix incorrect UA used for registry authentication * ctr: parse mount options with embedded = character ([#5531](https://github.com/containerd/containerd/pull/5531)) * ctr: parse mount options with embedded = character * Fix mounts for FreeBSD ([#5472](https://github.com/containerd/containerd/pull/5472)) * Add ruleset=4 option * Remove mountpoints not commonly mounted on FreeBSD * Add copyright header & make sure compilation succeeds on all platforms * Fix mounts for FreeBSD * ctr: make exec pty behavior consistent with run ([#5527](https://github.com/containerd/containerd/pull/5527)) * ctr: exec handle pty resize after Start * ctr: exec setup IO with console * Makefile: use $@ for target file names ([#5534](https://github.com/containerd/containerd/pull/5534)) * Makefile: use $@ for target file names * Fix small typo ([#5528](https://github.com/containerd/containerd/pull/5528)) * Fix small typo * Don't check for apparmor_parser to be present ([#5519](https://github.com/containerd/containerd/pull/5519)) * update the link * Don't check for apparmor_parser to be present * Remove useless lines ([#5520](https://github.com/containerd/containerd/pull/5520)) * Remove useless lines * Fixed typos in docs ([#5509](https://github.com/containerd/containerd/pull/5509)) * fixed typos * Try next mirror in case of non-404 errors, too ([#5275](https://github.com/containerd/containerd/pull/5275)) * Try next mirror in case of non-404 errors, too * bump runc version to v1.0.0-rc95 ([#5514](https://github.com/containerd/containerd/pull/5514)) * bump runc version to v1.0.0-rc95 * update runc binary to v1.0.0-rc95 ([#5511](https://github.com/containerd/containerd/pull/5511)) * update runc binary to v1.0.0-rc95 * Bump github.com/Microsoft/go-winio from 0.4.15 to 0.5.0 ([#5508](https://github.com/containerd/containerd/pull/5508)) * Bump github.com/Microsoft/go-winio from 0.4.15 to 0.5.0 * Bump github.com/opencontainers/selinux from 1.8.0 to 1.8.1 ([#5507](https://github.com/containerd/containerd/pull/5507)) * Bump github.com/opencontainers/selinux from 1.8.0 to 1.8.1 * Makefile: allow overriding install command via environment ([#5493](https://github.com/containerd/containerd/pull/5493)) * Makefile: allow overriding install command via environment * tests: Adds support for Windows cri-integration tests ([#5163](https://github.com/containerd/containerd/pull/5163)) * tests: Adds support for Windows cri-integration tests * Update docker resolver to authorize redirects ([#5504](https://github.com/containerd/containerd/pull/5504)) * Update docker resolver to authorize redirects * bump hcsshim version to v0.8.17 ([#5505](https://github.com/containerd/containerd/pull/5505)) * bump hcsshim version to v0.8.17 * Release binary update for imgcrypt ([#5498](https://github.com/containerd/containerd/pull/5498)) * just release ctd-decoder not ctr-enc * Merge remote-tracking branch 'upstream/master' * Pin integration test image for alpine * cri-integration tests: Pull images once ([#5313](https://github.com/containerd/containerd/pull/5313)) * tests: Prepull images used in tests * plugin: optimize the check for the last registration ([#5440](https://github.com/containerd/containerd/pull/5440)) * plugin: optimize the check for the last registration * metadata: modify NewLeaseManager to return leases.Manager ([#5465](https://github.com/containerd/containerd/pull/5465)) * metadata: modify NewLeaseManager to return leases.Manager * Skip TLS verification for localhost ([#5100](https://github.com/containerd/containerd/pull/5100)) * Skip TLS verification for localhost * Merge remote-tracking branch 'upstream/master' * Makefile: make sure manpages are built before install-man ([#5492](https://github.com/containerd/containerd/pull/5492)) * Makefile: make sure manpages are built before install-man * adds description for hosts.toml ([#5309](https://github.com/containerd/containerd/pull/5309)) * adds credentials description * adds description for hosts.toml * Prepare default branch rename ([#5459](https://github.com/containerd/containerd/pull/5459)) * Prepare default branch rename * Merge remote-tracking branch 'upstream/master' * Update runc to rc94 ([#5473](https://github.com/containerd/containerd/pull/5473)) * Update vendored runc to v1.0.0.0-rc94 * Update the runc binary used with containerd to runc v1.0.0-rc94 * Fix `content.ReaderAt` close ([#5468](https://github.com/containerd/containerd/pull/5468)) * Fix content.ReaderAt close * Update releases doc with updated support timeline ([#5466](https://github.com/containerd/containerd/pull/5466)) * Update releases doc with updated support timeline * tests: add test for adaptor ([#5452](https://github.com/containerd/containerd/pull/5452)) * tests: add test for adaptor * Makefile: allow overriding go command by environment ([#5450](https://github.com/containerd/containerd/pull/5450)) * Makefile: allow overriding go command by environment * update to new cri-tools make install ([#5462](https://github.com/containerd/containerd/pull/5462)) * update to new cri-tools make install * Update Go to 1.16.4 ([#5461](https://github.com/containerd/containerd/pull/5461)) * Update Go to 1.16.4 * Merge remote-tracking branch 'upstream/release/1.5' * [release/1.5] go.mod: cut circular dependency on github.com/containerd/containerd ([#5457](https://github.com/containerd/containerd/pull/5457)) * go.mod: cut circular dependency on github.com/containerd/containerd * integration/client: go mod tidy * oci: fix WithDevShmSize ([#5063](https://github.com/containerd/containerd/pull/5063)) * oci: fix WithDevShmSize * [release/1.5] cherry-pick: windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink ([#5454](https://github.com/containerd/containerd/pull/5454)) * windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink * windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink ([#5411](https://github.com/containerd/containerd/pull/5411)) * windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink * doc: add missing namespaces package ([#5448](https://github.com/containerd/containerd/pull/5448)) * doc: add missing namespaces package * update seccomp version ([#5445](https://github.com/containerd/containerd/pull/5445)) * update seccomp version * Update golang.org/x/sys to add linux/ppc support ([#5436](https://github.com/containerd/containerd/pull/5436)) * Update golang.org/x/sys to add linux/ppc support * go.mod: cut circular dependency on github.com/containerd/containerd ([#5441](https://github.com/containerd/containerd/pull/5441)) * go.mod: cut circular dependency on github.com/containerd/containerd * integration/client: go mod tidy * Fix different registry hosts referencing the same auth config. ([#5446](https://github.com/containerd/containerd/pull/5446)) * Fix different registry hosts referencing the same auth config. </p> </details> ### Changes from containerd/cgroups <details><summary>33 commits</summary> <p> * v2: Fix inotify fd leak when cgroup is deleted ([#212](https://github.com/containerd/cgroups/pull/212)) * v2: add test case for Manager.EventChan() behavior * v2: flip error handling for readKVStat("memory.events") to reduce indentation * v2: manager: factor out memory.events parsing * v2: Fix inotify leak when cgroup is deleted * fix Implicit memory aliasing in for loop ([#214](https://github.com/containerd/cgroups/pull/214)) * fix Implicit memory aliasing in for loop * Fix potential dirfd leak. ([#210](https://github.com/containerd/cgroups/pull/210)) * Fix potential dirfd leak. * cgroup: Optionally add process and task to a subsystems subset ([#203](https://github.com/containerd/cgroups/pull/203)) * cgroup: Optionally add process and task to a subsystems subset * replace pkg/errors from vendor ([#208](https://github.com/containerd/cgroups/pull/208)) * replace pkg/errors from vendor * cgroup.go: avoid panic on nil interface ([#207](https://github.com/containerd/cgroups/pull/207)) * cgroup.go: avoid panic on nil interface * Improvements on cgroup v2 support ([#204](https://github.com/containerd/cgroups/pull/204)) * cgroupv2: reset lastErr to nil when subtree control is successfully written * cgroupv2: enable controllers before setting resources in NewChild() * v2: remove unimplemented errors and ErrorHandler, IgnoreNotExist ([#201](https://github.com/containerd/cgroups/pull/201)) * v2: remove ErrorHandler and IgnoreNotExist as they are not implemented * v2: remove errors that are never returned * v1: reduce duplicated code ([#202](https://github.com/containerd/cgroups/pull/202)) * v1: reduce duplicated code * cgroup v1: implement AddProc() ([#200](https://github.com/containerd/cgroups/pull/200)) * cgroup v1: implement AddProc() * Rename branch from master to main ([#199](https://github.com/containerd/cgroups/pull/199)) * Rename branch from master to main * utils: export ParseCgroupFile() ([#197](https://github.com/containerd/cgroups/pull/197)) * utils: export ParseCgroupFile() * go.mod: coreos/go-systemd/v22 v22.3.2 to prepare for deprecations ([#194](https://github.com/containerd/cgroups/pull/194)) * go.mod: coreos/go-systemd/v22 v22.3.2 to prepare for deprecations * Use /proc/partitions to get device names ([#195](https://github.com/containerd/cgroups/pull/195)) * Use /proc/partitions to get device names </p> </details> ### Changes from containerd/console <details><summary>6 commits</summary> <p> * Fix CI ([#55](https://github.com/containerd/console/pull/55)) * Fix CI * Stop using pkg/errors * Add support for z/OS ([#46](https://github.com/containerd/console/pull/46)) * Console test on z/OS * Add support for z/OS </p> </details> ### Changes from containerd/continuity <details><summary>28 commits</summary> <p> * fs: use syscall.Timespec.Unix ([#193](https://github.com/containerd/continuity/pull/193)) * fs: use syscall.Timespec.Unix * Update CI Go version to 1.17 ([#192](https://github.com/containerd/continuity/pull/192)) * Update CI Go version to 1.17 * Build containerd/continuity on multiple Unix OSes ([#190](https://github.com/containerd/continuity/pull/190)) * Build containerd/continuity on multiple Unix OSes * Do not log errors before returning them ([#191](https://github.com/containerd/continuity/pull/191)) * Do not log errors before returning them * Copy Windows file metadata ([#188](https://github.com/containerd/continuity/pull/188)) * Copy Windows file metadata * fix fmt.Errorf("%w", err) on err == nil ([#187](https://github.com/containerd/continuity/pull/187)) * fix fmt.Errorf("%w", err) on err == nil * Remove direct dependency on github.com/pkg/errors ([#185](https://github.com/containerd/continuity/pull/185)) * run gofmt with Go 1.17 * remove direct dependency on github.com/pkg/errors * Fix darwin issues ([#186](https://github.com/containerd/continuity/pull/186)) * update AUTHORS * darwin: use utimensat syscall instead of utimes * fix darwin usage of du command * go.mod: bazil.org/fuse v0.0.0-20200407214033-5883e5a4b5125 ([#161](https://github.com/containerd/continuity/pull/161)) * go.mod: bazil.org/fuse v0.0.0-20200407214033-5883e5a4b5125 * fs/stat: add FreeBSD, and cleanup some nolint-comments ([#184](https://github.com/containerd/continuity/pull/184)) * reformat nolint comments * fs/stat: add FreeBSD * Rename branch from master to main ([#182](https://github.com/containerd/continuity/pull/182)) * Rename branch from master to main * testutil/loopback: print more debug info ([#180](https://github.com/containerd/continuity/pull/180)) * testutil/loopback: print more debug info </p> </details> ### Changes from containerd/go-cni <details><summary>24 commits</summary> <p> * init exec when create CNIConfig ([#83](https://github.com/containerd/go-cni/pull/83)) * init exec when create CNIConfig * cni: fix data-race on lazy init by ensureExec(). ([#82](https://github.com/containerd/go-cni/pull/82)) * cni: fix data-race on lazy init by ensureExec(). * Implement CNI CHECK command ([#80](https://github.com/containerd/go-cni/pull/80)) * Implement CNI CHECK command * run setup on networks in parallel ([#76](https://github.com/containerd/go-cni/pull/76)) * switch to direct index * run setup on networks in parallel * remove: Continue on "not found" errors ([#74](https://github.com/containerd/go-cni/pull/74)) * remove: Continue on "not found" errors * go.mod: github.com/containernetworking/cni v1.0.1 ([#72](https://github.com/containerd/go-cni/pull/72)) * go.mod: github.com/containernetworking/cni v1.0.1 * remove direct dependency on github.com/pkg/errors ([#71](https://github.com/containerd/go-cni/pull/71)) * remove direct dependency on github.com/pkg/errors * update CNI to v1.0.0 ([#70](https://github.com/containerd/go-cni/pull/70)) * test: add TestLibCNIType100 * update CNI to v1.0.0 * Rename branch from master to main ([#69](https://github.com/containerd/go-cni/pull/69)) * Rename branch from master to main * result: change Raw from a struct field to a method ([#68](https://github.com/containerd/go-cni/pull/68)) * result: change Raw from a struct field to a method * result: expose raw result ([#67](https://github.com/containerd/go-cni/pull/67)) * result: expose raw result </p> </details> ### Changes from containerd/imgcrypt <details><summary>32 commits</summary> <p> * CHANGES: Updated CHANGES document for 1.1.3 release ([#64](https://github.com/containerd/imgcrypt/pull/64)) * CHANGES: Updated CHANGES document for 1.1.3 release * docs: update project branch to main ([#63](https://github.com/containerd/imgcrypt/pull/63)) * docs: update project branch to main * Update linter to match containerd repo ([#61](https://github.com/containerd/imgcrypt/pull/61)) * Update linter to match containerd repo * update CI golang version * Bump github.com/containerd/containerd from 1.5.7 to 1.5.8 ([#59](https://github.com/containerd/imgcrypt/pull/59)) * Bump github.com/containerd/containerd from 1.5.7 to 1.5.8 * maint: Update to ocicrypt v1.1.2 ([#57](https://github.com/containerd/imgcrypt/pull/57)) * maint: Update to ocicrypt v1.1.2 * Decouple CreateCryptoConfig() from github.com/urfave/cli ([#56](https://github.com/containerd/imgcrypt/pull/56)) * Decouple CreateCryptoConfig() from github.com/urfave/cli * Bump github.com/containerd/containerd from 1.5.5 to 1.5.7 ([#55](https://github.com/containerd/imgcrypt/pull/55)) * Bump github.com/containerd/containerd from 1.5.5 to 1.5.7 * replace pkg/errors and bump related library * README: Fix CRI decryption document URL ([#53](https://github.com/containerd/imgcrypt/pull/53)) * README: Fix CRI decryption document URL * Bump github.com/containerd/containerd from 1.5.2 to 1.5.4 ([#52](https://github.com/containerd/imgcrypt/pull/52)) * Bump github.com/containerd/containerd from 1.5.2 to 1.5.4 * Bump containerd to 1.5.2 ([#51](https://github.com/containerd/imgcrypt/pull/51)) * Bump containerd to 1.5.2 * images: Implement ConvertFunc for image en- and decryption ([#49](https://github.com/containerd/imgcrypt/pull/49)) * images: Implement ConvertFunc for image en- and decryption * Add containerd-release to makefile ([#48](https://github.com/containerd/imgcrypt/pull/48)) * Remove ctr-enc from installation * vendor sync up with containerd 1.5 ga, and runc94 ([#47](https://github.com/containerd/imgcrypt/pull/47)) * sync up with containerd 1.5 ga, and runc94 * Sync ctr-enc with containerd's ctr v1.5.0-rc.3 ([#46](https://github.com/containerd/imgcrypt/pull/46)) * CICD: Run 'apt update' before pulling packages * ctr-enc: Set the version for ctr-enc when linking * Sync ctr-enc with containerd's ctr v1.5.0-rc.3 </p> </details> ### Changes from containerd/ttrpc <details><summary>34 commits</summary> <p> * Add protoc-gen-go-ttrpc ([#96](https://github.com/containerd/ttrpc/pull/96)) * Add protoc-gen-go-ttrpc * client: Handle sending/receiving in separate goroutines ([#94](https://github.com/containerd/ttrpc/pull/94)) * client: Handle sending/receiving in separate goroutines * Run Protobuild in GitHub Actions ([#95](https://github.com/containerd/ttrpc/pull/95)) * Run Protobuild in GitHub Actions * Re-generate example.pb.go * replace pkg/errors ([#93](https://github.com/containerd/ttrpc/pull/93)) * replace pkg/errors from vendor * Rename branch from master to main ([#86](https://github.com/containerd/ttrpc/pull/86)) * Rename branch from master to main * Make "go test" and "go build" work on macOS ([#85](https://github.com/containerd/ttrpc/pull/85)) * Make the example command buildable on macOS * Run GitHub Actions on macOS * Make "go test" work on macOS * Return Unimplemented when services or methods are not implemented ([#83](https://github.com/containerd/ttrpc/pull/83)) * Return Unimplemented when services or methods are not implemented * Remove "Very new" and checked TODO items ([#84](https://github.com/containerd/ttrpc/pull/84)) * Remove "Very new" and checked TODO items * removing glide from ignore ([#82](https://github.com/containerd/ttrpc/pull/82)) * removing glide from ignore * go.mod: update dependencies ([#79](https://github.com/containerd/ttrpc/pull/79)) * go.mod: github.com/prometheus/procfs v0.6.0 * go.mod: google.golang.org/genproto v0.0.0-20200224152610-e50cd9704f63 * go.mod: google.golang.org/grpc v1.27.1 * go.mod: github.com/gogo/protobuf v1.3.2 * remove travis, add codecov badge ([#78](https://github.com/containerd/ttrpc/pull/78)) * CI: add codecov badge to readme * CI: remove travis * Use GitHub Actions for CI ([#77](https://github.com/containerd/ttrpc/pull/77)) * Use GitHub Actions for CI * go.mod: sirupsen/logrus v1.7.0 ([#76](https://github.com/containerd/ttrpc/pull/76)) * go.mod: sirupsen/logrus v1.7.0 * go mod tidy </p> </details> ### Dependency Changes * **cloud.google.com/go** v0.81.0 **_new_** * **github.com/AdaLogics/go-fuzz-headers** 6c3934b029d8 **_new_** * **github.com/Microsoft/go-winio** v0.4.17 -> v0.5.1 * **github.com/Microsoft/hcsshim** v0.8.16 -> v0.9.2 * **github.com/blang/semver** v3.5.1 **_new_** * **github.com/cenkalti/backoff/v4** v4.1.2 **_new_** * **github.com/cespare/xxhash/v2** v2.1.1 -> v2.1.2 * **github.com/cilium/ebpf** v0.4.0 -> v0.7.0 * **github.com/containerd/cgroups** v1.0.1 -> v1.0.3 * **github.com/containerd/console** v1.0.2 -> v1.0.3 * **github.com/containerd/continuity** v0.1.0 -> v0.2.2 * **github.com/containerd/go-cni** v1.0.2 -> v1.1.3 * **github.com/containerd/imgcrypt** v1.1.1 -> v1.1.3 * **github.com/containerd/ttrpc** v1.0.2 -> v1.1.0 * **github.com/containernetworking/cni** v0.8.1 -> v1.0.1 * **github.com/containernetworking/plugins** v0.9.1 -> v1.0.1 * **github.com/containers/ocicrypt** v1.1.1 -> v1.1.2 * **github.com/coreos/go-systemd/v22** v22.1.0 -> v22.3.2 * **github.com/go-logr/logr** v0.2.0 -> v1.2.2 * **github.com/go-logr/stdr** v1.2.2 **_new_** * **github.com/godbus/dbus/v5** v5.0.3 -> v5.0.6 * **github.com/golang/groupcache** 8c9f03a8e57e -> 41bb18bfe9da * **github.com/golang/protobuf** v1.3.5 -> v1.5.2 * **github.com/google/go-cmp** v0.5.4 -> v0.5.6 * **github.com/google/gofuzz** v1.1.0 -> v1.2.0 * **github.com/grpc-ecosystem/go-grpc-middleware** v1.3.0 **_new_** * **github.com/grpc-ecosystem/grpc-gateway** v1.16.0 **_new_** * **github.com/hashicorp/errwrap** v1.0.0 -> v1.1.0 * **github.com/hashicorp/go-multierror** v1.0.0 -> v1.1.1 * **github.com/imdario/mergo** v0.3.11 -> v0.3.12 * **github.com/intel/goresctrl** v0.2.0 **_new_** * **github.com/json-iterator/go** v1.1.10 -> v1.1.12 * **github.com/moby/spdystream** v0.2.0 **_new_** * **github.com/moby/sys/mountinfo** v0.4.1 -> v0.5.0 * **github.com/moby/sys/signal** v0.6.0 **_new_** * **github.com/moby/sys/symlink** v0.1.0 -> v0.2.0 * **github.com/modern-go/reflect2** v1.0.1 -> v1.0.2 * **github.com/opencontainers/image-spec** v1.0.1 -> 693428a734f5 * **github.com/opencontainers/runc** v1.0.0-rc93 -> v1.1.0 * **github.com/opencontainers/runtime-spec** e6143ca7d51d -> 1c3f411f0417 * **github.com/opencontainers/selinux** v1.8.0 -> v1.10.0 * **github.com/pelletier/go-toml** v1.8.1 -> v1.9.3 * **github.com/prometheus/client_golang** v1.7.1 -> v1.11.0 * **github.com/prometheus/common** v0.10.0 -> v0.30.0 * **github.com/prometheus/procfs** v0.6.0 -> v0.7.3 * **github.com/satori/go.uuid** v1.2.0 **_new_** * **github.com/sirupsen/logrus** v1.7.0 -> v1.8.1 * **github.com/spf13/pflag** v1.0.5 **_new_** * **github.com/stretchr/testify** v1.6.1 -> v1.7.0 * **github.com/vishvananda/netlink** f5de75959ad5 **_new_** * **github.com/vishvananda/netns** 2eb08e3e575f **_new_** * **go.etcd.io/bbolt** v1.3.5 -> v1.3.6 * **go.opencensus.io** v0.22.3 -> v0.23.0 * **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc** v0.28.0 **_new_** * **go.opentelemetry.io/otel** v1.3.0 **_new_** * **go.opentelemetry.io/otel/exporters/otlp/internal/retry** v1.3.0 **_new_** * **go.opentelemetry.io/otel/exporters/otlp/otlptrace** v1.3.0 **_new_** * **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc** v1.3.0 **_new_** * **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp** v1.3.0 **_new_** * **go.opentelemetry.io/otel/sdk** v1.3.0 **_new_** * **go.opentelemetry.io/otel/trace** v1.3.0 **_new_** * **go.opentelemetry.io/proto/otlp** v0.11.0 **_new_** * **golang.org/x/crypto** 0c34fe9e7dc2 -> 32db794688a5 * **golang.org/x/net** e18ecbb05110 -> fe4d6282115f * **golang.org/x/oauth2** bf48bf16ab8d -> 2bc19b11175f * **golang.org/x/sync** 09787c993a3a -> 036812b2e83c * **golang.org/x/sys** 47abb6519492 -> 1d35b9e2eb4e * **golang.org/x/term** 7de9c90e9dd1 -> 6886f2dfbf5b * **golang.org/x/text** v0.3.4 -> v0.3.7 * **golang.org/x/time** 3af7569d3a1e -> 1f47c861a9ac * **google.golang.org/appengine** v1.6.5 -> v1.6.7 * **google.golang.org/grpc** v1.27.1 -> v1.43.0 * **google.golang.org/protobuf** v1.27.1 **_new_** * **gopkg.in/yaml.v3** 9f266ea9e77c -> 496545a6307b * **k8s.io/api** v0.20.6 -> v0.22.5 * **k8s.io/apimachinery** v0.20.6 -> v0.22.5 * **k8s.io/apiserver** v0.20.6 -> v0.22.5 * **k8s.io/client-go** v0.20.6 -> v0.22.5 * **k8s.io/component-base** v0.20.6 -> v0.22.5 * **k8s.io/cri-api** v0.20.6 -> v0.23.1 * **k8s.io/klog/v2** v2.4.0 -> v2.30.0 * **k8s.io/utils** 67b214c5f920 -> cb0fa318a74b * **sigs.k8s.io/structured-merge-diff/v4** v4.0.3 -> v4.1.2 Previous release can be found at [v1.5.0](https://github.com/containerd/containerd/releases/tag/v1.5.0)
-
v1.6.0-rc.4
containerd 1.6.0-rc.4 Welcome to the v1.6.0-rc.4 release of containerd! *This is a pre-release of containerd* The seventh major release of containerd includes many improvements and added support to increase overall compatibility and stability. ### Highlights #### Runtime * **Add runtime label to metrics** ([#5744](https://github.com/containerd/containerd/pull/5744)) * **Cleanup task delete logic in v2 shim** ([#5813](https://github.com/containerd/containerd/pull/5813)) * **Add support for shim plugins** ([#5817](https://github.com/containerd/containerd/pull/5817)) * **Handle sigint and sigterm in shimv2** ([#5828](https://github.com/containerd/containerd/pull/5828)) * **Decouple shim and task manager** ([#5918](https://github.com/containerd/containerd/pull/5918)) * **Add runc shim support for core scheduling** ([#6011](https://github.com/containerd/containerd/pull/6011)) * **Update shim client connect attempt to fail fast when shim errors** ([#6031](https://github.com/containerd/containerd/pull/6031)) * **Add support for absolute path to shim binaries** ([#6206](https://github.com/containerd/containerd/pull/6206)) * **Update runc to v1.1.0** ([#6375](https://github.com/containerd/containerd/pull/6375)) #### Windows * **Add support for Windows HostProcess containers** ([#5131](https://github.com/containerd/containerd/pull/5131)) * **Add support for Windows resource limits** ([#5778](https://github.com/containerd/containerd/pull/5778)) #### CRI * **Add CNI configuration based on runtime class** ([#4695](https://github.com/containerd/containerd/pull/4695)) * **Add support for Intel RDT** ([#5439](https://github.com/containerd/containerd/pull/5439)) * **Add support for CRI v1 and v1alpha in parallel** ([#5619](https://github.com/containerd/containerd/pull/5619)) * **Add support for unified resources field for cgroups v2** ([#5627](https://github.com/containerd/containerd/pull/5627)) * **Add IP preference configuration for reporting pod IP** ([#5964](https://github.com/containerd/containerd/pull/5964)) * **Implement new CRI pod sandbox stats API** ([#6113](https://github.com/containerd/containerd/pull/6113)) * **Add sandbox and container latency metrics** ([#6111](https://github.com/containerd/containerd/pull/6111)) * **Add namespace to ttrpc and grpc plugin connections** ([#6130](https://github.com/containerd/containerd/pull/6130)) * **Add option to allow ping sockets and privileged ports with no capabilities** ([#6170](https://github.com/containerd/containerd/pull/6170)) * **Add support for configuring swap** ([#6320](https://github.com/containerd/containerd/pull/6320)) #### Other * **Add support for client TLS Auth for grpc** ([#5606](https://github.com/containerd/containerd/pull/5606)) * **Add xfs support for devicemapper snapshotter** ([#5610](https://github.com/containerd/containerd/pull/5610)) * **Add metric exposing build version and revision** ([#5965](https://github.com/containerd/containerd/pull/5965)) * **Add support for custom fs options in devmapper snapshotter** ([#6122](https://github.com/containerd/containerd/pull/6122)) * **Update introspection service to show GRPC plugins** ([#6432](https://github.com/containerd/containerd/pull/6432)) #### Client * **Allow WithServices to use custom implementations** ([#5709](https://github.com/containerd/containerd/pull/5709)) * **Support custom compressor for walking differ** ([#5735](https://github.com/containerd/containerd/pull/5735)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Derek McGowan * Phil Estes * Akihiro Suda * Wei Fu * Maksym Pavlenko * Sebastiaan van Stijn * Michael Crosby * Kazuyoshi Kato * Mike Brown * Claudiu Belu * Daniel Canter * haoyun * Brian Goff * Gabriel Adrian Samfira * Stefan Berger * zounengren * AdamKorcz * Adelina Tuvenie * Kohei Tokunaga * Davanum Srinivas * Nashwan Azhari * Samuel Karp * Shiming Zhang * Markus Lehtonen * Enrico Weigelt, metux IT consult * Alakesh Haloi * Hajime Tazaki * Iceber Gu * Kevin Parsons * Aditi Sharma * Jeremi Piotrowski * David Porter * Gijs Peskens * ningmingxiao * Brandon Lum * Cody Roseborough * Danielle Lancashire * Eric Ernst * Jacob MacElroy * Tõnis Tiigi * dependabot[bot] * wanglei * Alexandre Peixoto Ferreira * Fabiano Fidêncio * Furkan Türkal * Jiaming Xu * Kir Kolyshkin * Miao Wang * Neil Johnson * Paul "TBBle" Hampson * Priyanka Saggu * Romain Aviolat * Samuel Ortiz * Sunghoon Kang * Takumasa Sakao * Tobias Klauser * Zhiyu Li * ye.sijun * Alexander Minbaev * Alexey Ivanov * Andrey Smirnov * Artem Khramov * Aurelien Lun-Sin * Ben Hutchings * Cory Bennett * Da McGrady * Dan Williams * Eng Zer Jun * Ethan Chen * Fupan Li * Gaurav Gahlot * Gunju Kim * Henry Wang * Jacob Blain Christen * James Gordon * James Sturtevant * Jan Klippel * Jayme Howard * Jiajun Jiang * Jintao Zhang * Justin Terry * Kaijie Chen * Kante * Kern Walster * Kitt Hsu * Lantao Liu * Ma Xinjian * Manabu Sugimoto * Manuel Alejandro de Brito Fontes * Mark Rossetti * Markus Lippert * Mikko Ylinen * Ng Yang * Nicolas Chariglione * Ning Li * Olli Janatuinen * Peri Thompson * Quan Tian * Radostin Stoyanov * Rui Lopes * Sambhav Kothari * Sebastian Hasler * Sergey Kanzhelev * Sören Tempel * Yang Yang * Yifan Yuan * Zilong Wang * Zufar Dhiyaulhaq * botieking98 * chenxiaoyu * jayonlau * jerryzhuang * linrunlong * scuzhanglei * wangzhan * Étienne Guesnet ### Changes <details><summary>1044 commits</summary> <p> * Prepare release notes for v1.6.0-rc.4 ([#6537](https://github.com/containerd/containerd/pull/6537)) * Prepare release notes for v1.6.0-rc.4 * Change file name for shim binary path ([#6536](https://github.com/containerd/containerd/pull/6536)) * Change file name for shim binary path * containerd-stress: introduce option for specifying image ([#6532](https://github.com/containerd/containerd/pull/6532)) * containerd-stress: introduce option for specifying image * Prepare release notes for v1.6.0-rc.3 ([#6524](https://github.com/containerd/containerd/pull/6524)) * Prepare release notes for v1.6.0-rc.3 * Use white logo in github dark mode ([#6529](https://github.com/containerd/containerd/pull/6529)) * Use white logo in github dark mode * cri: fix handling of ignore_rdt_not_enabled_errors config option ([#6514](https://github.com/containerd/containerd/pull/6514)) * cri: fix handling of ignore_rdt_not_enabled_errors config option * pkg/oom/v2: handle EventChan routine shutdown quietly ([#6504](https://github.com/containerd/containerd/pull/6504)) * pkg/oom/v2: handle EventChan routine shutdown quietly * fix: .dockerignore make git working tree dirty ([#6523](https://github.com/containerd/containerd/pull/6523)) * fix: .dockerignore makes git working tree dirty * containerd-stress: start task ctr before starting execs ([#6518](https://github.com/containerd/containerd/pull/6518)) * containerd-stress: start task ctr before starting execs * Document fs_type and fs_options in snapshots/devmapper/README.md ([#6501](https://github.com/containerd/containerd/pull/6501)) * Document fs_type and fs_options in snapshots/devmapper/README.md * docs: add Talos Linux to the list of adopters ([#6510](https://github.com/containerd/containerd/pull/6510)) * docs: add Talos Linux to the list of adopters * Prepare 1.6.0-rc.2 ([#6502](https://github.com/containerd/containerd/pull/6502)) * Prepare release notes for v1.6.0-rc.2 * Update releases document * platforms.Normalize(): do not reset OSVersion and OSFeatures ([#6497](https://github.com/containerd/containerd/pull/6497)) * platforms.Normalize(): do not reset OSVersion and OSFeatures * tracing: use OTLP/HTTP in addition to OTLP/gRPC ([#6457](https://github.com/containerd/containerd/pull/6457)) * tracing: return (ctx, span) from StartSpan * tracing: support OTLP/HTTP in addition to gRPC * Update cgroups to v1.0.3 ([#6498](https://github.com/containerd/containerd/pull/6498)) * Update cgroups to v1.0.3 * seccomp: kernel 5.11 -> 5.16 ([#6494](https://github.com/containerd/containerd/pull/6494)) * seccomp: kernel 5.16 (futex_waitv) * seccomp: kernel 5.15 (process_mrelease) * seccomp: kernel 5.14 (quotactl_fd, memfd_secret) * seccomp: kernel 5.13 (landlock_{add_rule,create_ruleset,restrict_self}) * seccomp: kernel 5.12 (mount_setattr) * remotes: fix dockerPusher to handle abort correctly ([#6243](https://github.com/containerd/containerd/pull/6243)) * remotes: fix dockerPusher to handle abort correctly * seccomp: add support for "swapcontext" syscall in default policy ([#6411](https://github.com/containerd/containerd/pull/6411)) * seccomp: add support for "swapcontext" syscall in default policy * oci: use readonly mount to read user/group info ([#6478](https://github.com/containerd/containerd/pull/6478)) * oci: use readonly mount to read user/group info * Fix possibly incorrect media type default on import ([#6475](https://github.com/containerd/containerd/pull/6475)) * Fix possibly incorrect media type default on import * shimv2: handle sigint/sigterm ([#5828](https://github.com/containerd/containerd/pull/5828)) * shimv2: handle sigint/sigterm * Fix acr fetch token 400 ([#6481](https://github.com/containerd/containerd/pull/6481)) * fix acr fetch token 400 * platforms: add support for matching amd64 variants ([#6455](https://github.com/containerd/containerd/pull/6455)) * platforms: add support for matching amd64 variants * Fix windows periodic workflow ([#6476](https://github.com/containerd/containerd/pull/6476)) * Fix windows periodic workflow * docs: add doc-comments on GC-related methods ([#6473](https://github.com/containerd/containerd/pull/6473)) * docs: add doc-comments on GC-related methods * fix: should not send 137 code event if cmd is notfound ([#6465](https://github.com/containerd/containerd/pull/6465)) * fix: should not send 137 code event if cmd is notfound * Fix empty scopes return ([#6463](https://github.com/containerd/containerd/pull/6463)) * fix empty scopes return * Prepare release notes for v1.6.0-rc.1 ([#6462](https://github.com/containerd/containerd/pull/6462)) * Prepare release notes for v1.6.0-rc.1 * Add support for skipping non-dist blob push ([#6424](https://github.com/containerd/containerd/pull/6424)) * ctr: flag to toggle non-distributable blob push * Add image handler to skip non-distributable blobs. * Compile binaries for go1.16 and go1.17 in CI ([#6461](https://github.com/containerd/containerd/pull/6461)) * Compile binaries for go1.16 and go1.17 in CI * services/introspection: fix plugin caching to show grpc plugins ([#6432](https://github.com/containerd/containerd/pull/6432)) * Update caching logic to avoid map access * services/introspection: support to show introspection grpc service * Integration: Change to Windows Server 2022 build number constant ([#6458](https://github.com/containerd/containerd/pull/6458)) * Integration: Change to Windows Server 2022 build number constant * Update kubernetes vendor to 0.22.5 ([#6460](https://github.com/containerd/containerd/pull/6460)) * Update kubernetes vendor to 0.22.5 * Fix rdt build tags for go 1.16 ([#6459](https://github.com/containerd/containerd/pull/6459)) * Fix rdt build tags for go 1.16 * Remove submodule go mod ([#6439](https://github.com/containerd/containerd/pull/6439)) * Remove api go submodule * Update makefile to remove API submodule * go.mod: Update hcsshim to v0.9.2 ([#6453](https://github.com/containerd/containerd/pull/6453)) * go.mod: Update hcsshim to v0.9.2 * update runc to v1.1.0 ([#6375](https://github.com/containerd/containerd/pull/6375)) * go.mod: github.com/opencontainers/runc v1.1.0 * update runc binary to v1.1.0 * tracing: fix OTLP tracer's initialization ([#6443](https://github.com/containerd/containerd/pull/6443)) * tracing: fix OTLP tracer's initialization * gha: run CodeQL scan on pull requests ([#6386](https://github.com/containerd/containerd/pull/6386)) * gha: run CodeQL scan on pull requests * Do not automatically inject client traces ([#6445](https://github.com/containerd/containerd/pull/6445)) * Do not automatically inject client traces * [containerd-stress] delete useless code ([#6451](https://github.com/containerd/containerd/pull/6451)) * delete useless code * Revert "Add shared content label to namespaces" ([#6440](https://github.com/containerd/containerd/pull/6440)) * Revert "Add shared content label to namespaces" * Add ppc64 support for test images ([#6435](https://github.com/containerd/containerd/pull/6435)) * Add ppc64 support for test images * ctr: Unify the delete subcommand alias ([#6427](https://github.com/containerd/containerd/pull/6427)) * ctr: Unify the delete subcommand alias * Prepare release notes for v1.6.0-rc.0 ([#6431](https://github.com/containerd/containerd/pull/6431)) * Prepare release notes for v1.6.0-rc.0 * Integration: Switch to using `auth` Gcloud action in Windows workflow. ([#6397](https://github.com/containerd/containerd/pull/6397)) * Integration: Switch to `upload-cloud-storage` Gcloud action. * Integration: Switch to using `auth` Gcloud action in Windows workflow. * remove io/ioutil ([#6426](https://github.com/containerd/containerd/pull/6426)) * remove io/ioutil * test: e2e node COS cgroupv2 script ([#6418](https://github.com/containerd/containerd/pull/6418)) * test: e2e node COS cgroupv2 script * Integration: Enable CRITest on Windows 2022. ([#6378](https://github.com/containerd/containerd/pull/6378)) * Enable critest tests on Windows Server 2022. * Parametrize CRITest test images in Windows Periodic workflow. * Update error message for apparmor parser ([#6415](https://github.com/containerd/containerd/pull/6415)) * Update error message for apparmor parser * Fix wrong log message ([#6419](https://github.com/containerd/containerd/pull/6419)) * Fix wrong log message * Followup errors change ([#6414](https://github.com/containerd/containerd/pull/6414)) * Fix incorrect error wrapped when closing ingest file * Fix seek error used without nil check * Fix followup items from errors replacement * Updates CRI API & Kubernetes to 1.23 ([#6351](https://github.com/containerd/containerd/pull/6351)) * Update k/k to 1.23.0 * Updating adoption of containerd for AKS ([#6416](https://github.com/containerd/containerd/pull/6416)) * Updating adoption of containerd for AKS * update the adoption status of containerd in GKE ([#6413](https://github.com/containerd/containerd/pull/6413)) * update the adoption status of containerd in GKE * go.mod: update github.com/containerd/{continuity,go-cni,imgcrypt} ([#6410](https://github.com/containerd/containerd/pull/6410)) * go.mod: update github.com/containerd/{continuity,go-cni,imgcrypt} * replace github.com/pkg/errors with native errors ([#6366](https://github.com/containerd/containerd/pull/6366)) * feat: replace github.com/pkg/errors to errors * corrected link in cri architecture documentation ([#6412](https://github.com/containerd/containerd/pull/6412)) * corrected link in cri architecture documentation * remotes/docker: allow fetching "refresh token" (aka "identity token", "offline token") ([#6396](https://github.com/containerd/containerd/pull/6396)) * remotes/docker: allow fetching "refresh token" (aka "identity token") * remotes/docker/config: allow setting custom AuthorizerOpts * Prepare release notes for v1.6.0-beta.5 ([#6407](https://github.com/containerd/containerd/pull/6407)) * Prepare release notes for v1.6.0-beta.5 * Integration: Check GCP secrets on Windows CI artifact upload. ([#6292](https://github.com/containerd/containerd/pull/6292)) * Integration: Check GCP secrets on Windows CI artifact upload. * Github Security Advisory [GHSA-mvff-h3cj-wj9c](https://github.com/containerd/containerd/security/advisories/GHSA-mvff-h3cj-wj9c) * only relabel cri managed host mounts * Add support for Intel RDT ([#5439](https://github.com/containerd/containerd/pull/5439)) * cri: add ignore_rdt_not_enabled_errors config option * Update dependencies * cri: annotations for controlling RDT class * tasks: add Linux rdt support * cmd: add --rdt-class command line option * oci: implement WithRdt * fix: use _ for consistency ([#6391](https://github.com/containerd/containerd/pull/6391)) * fix: use _ for consistency * content/local: use syscall.Timespec.Unix ([#6403](https://github.com/containerd/containerd/pull/6403)) * content/local: use syscall.Timespec.Unix * docs: improve plugin documentation ([#6207](https://github.com/containerd/containerd/pull/6207)) * docs: document the runtime shim plugin config options * docs: use proper markdown lists in containerd-config.toml.5.md * fix(ctr): enable networking for Windows containers ([#6304](https://github.com/containerd/containerd/pull/6304)) * fix(ctr): enable networking for Windows containers * Fix $(PWD) issue for Windows makefile ([#6394](https://github.com/containerd/containerd/pull/6394)) * Fix $(PWD) issue for Windows makefile * only test abstract uds on linux ([#6395](https://github.com/containerd/containerd/pull/6395)) * fix: only test abstract unix socket on linux * Fix restart container test ([#6390](https://github.com/containerd/containerd/pull/6390)) * Expect ErrorNotFound on Windows after Kill() * Replace tskill with taskkill * fix when kernel version < 4.13rc1 by using index=off cause test error ([#6291](https://github.com/containerd/containerd/pull/6291)) * fix when kernel version < 4.13rc1 by using index=off cause overlay test error * Fix no-daemon flag for integration/client tests ([#6384](https://github.com/containerd/containerd/pull/6384)) * Fix no-daemon flag for integration/client tests * Enable lazy init for ext4 with devicemapper ([#6122](https://github.com/containerd/containerd/pull/6122)) * Enable lazy init for ext4 with devicemapper * Fix flakiness on Windows for list stats ([#6385](https://github.com/containerd/containerd/pull/6385)) * Fix flakiness on Windows for list stats * cri-integration: Add Windows defaults and fix spaces issue ([#6347](https://github.com/containerd/containerd/pull/6347)) * cri-integration: Add Windows default paths * Upgrade OpenTelemetry dependencies ([#6383](https://github.com/containerd/containerd/pull/6383)) * Upgrade k8s.io/klog/v2 from 2.9.0 to 2.20.0 * Use insecure.NewCredentials instead of grpc.WithInsecure * Upgrade OpenTelemetry dependencies * Fix default makefile target for windows ([#6322](https://github.com/containerd/containerd/pull/6322)) * Fix default makefile target for windows * Disable TestContainerHook on Windows ([#6379](https://github.com/containerd/containerd/pull/6379)) * Disable TestContainerHook on Windows * seutil: Fix setting the "container_kvm_t" label ([#6372](https://github.com/containerd/containerd/pull/6372)) * seutil: Fix setting the "container_kvm_t" label * Remove Windows integration testing for 2004. ([#6350](https://github.com/containerd/containerd/pull/6350)) * Remove Windows integration testing for 2004. * OCI: Mount (accessible) host devices in privileged rootless containers ([#6308](https://github.com/containerd/containerd/pull/6308)) * OCI: Mount (accessible) host devices in privileged rootless containers * oci.getDevices(): move "non-dir, non '/dev/console'" case into switch * cri: add support for configuring swap ([#6320](https://github.com/containerd/containerd/pull/6320)) * fixup: check for swap accounting * fixup: handle diff between cgroupsv1 and v2 * cri: add support for configuring swap * Integration: Enable TestVolumeOwnership on Windows ([#6275](https://github.com/containerd/containerd/pull/6275)) * Replace find with native Go code * Enable TestVolumeOwnership on Windows * Prepare release notes for v1.6.0-beta.4 ([#6296](https://github.com/containerd/containerd/pull/6296)) * Prepare release notes for v1.6.0-beta.4 * refactor: functions for error log and error return ([#6358](https://github.com/containerd/containerd/pull/6358)) * feat: Errorf usage * Split apart runc shim into plugin components ([#6021](https://github.com/containerd/containerd/pull/6021)) * Use task plugin for runc shim * Seperate shim manager and task service * Split runc shim into plugin components * Add shutdown package * CRI update for sandbox sizing ([#6155](https://github.com/containerd/containerd/pull/6155)) * cri, sandbox: pass sandbox resource details if available, applicable * medatada: make namespaces' deletion error less cryptic ([#6354](https://github.com/containerd/containerd/pull/6354)) * medatada: make namespaces' deletion error less cryptic * ListContainerStats to return stats response if ContainerStatsFilter is nil ([#6373](https://github.com/containerd/containerd/pull/6373)) * add-list-stat: return container list if filter is nil * integration: deflake TestContainerdRestart ([#6369](https://github.com/containerd/containerd/pull/6369)) * integration: deflake TestContainerdRestart * feat: add timeout for bolt open ([#6225](https://github.com/containerd/containerd/pull/6225)) * feat: support custom timeout for blot open * Update Go to 1.17.5 ([#6333](https://github.com/containerd/containerd/pull/6333)) * Update Go to 1.17.5 * cri/server: use consistent alias for pkg/ioutil ([#6332](https://github.com/containerd/containerd/pull/6332)) * cri/server: use consistent alias for pkg/ioutil * Disable restart monitor test in Windows ([#6364](https://github.com/containerd/containerd/pull/6364)) * Disable restart monitor test in Windows * Don't fail-fast on Windows integration tests ([#6338](https://github.com/containerd/containerd/pull/6338)) * Don't fail-fast on Windows integration tests * Update restart monitor test to output daemon logs on failure ([#6355](https://github.com/containerd/containerd/pull/6355)) * Run windows parallel integration test as short * Update restart monitor test to output daemon logs on failure * go.mod: update image-spec to latest (v1.0.3-dev) ([#6263](https://github.com/containerd/containerd/pull/6263)) * images/converter: remove deprecated types * go.mod: update image-spec to latest (v1.0.3-dev) * Skip WithAdditionalGIDs on Darwin ([#6353](https://github.com/containerd/containerd/pull/6353)) * Skip WithAdditionalGIDs on Darwin * Use RFC3339 format on Windows periodic resource group creation so cleanup works ([#6303](https://github.com/containerd/containerd/pull/6303)) * Use RFC3339 format so rg cleanup works * update runc to v1.0.3 ([#6330](https://github.com/containerd/containerd/pull/6330)) * go.mod: github.com/opencontainers/runc v1.0.3 * update runc binary to v1.0.3 * Unblock native snapshotter on Darwin ([#6329](https://github.com/containerd/containerd/pull/6329)) * Allow native snapshotter on Darwin * Do not use `go get` to install executables ([#6328](https://github.com/containerd/containerd/pull/6328)) * Do not use `go get` to install executables * Include runtime v2 in default builtins ([#6326](https://github.com/containerd/containerd/pull/6326)) * Include runtime v2 in default builtins * Add Windows Server 2022 CI runs ([#6314](https://github.com/containerd/containerd/pull/6314)) * Add Windows Server 2022 CI runs * Set explicit ACL on test files ([#6324](https://github.com/containerd/containerd/pull/6324)) * Use a single RUN command * Set explicit ACL on test files * integration: align tags of test images ([#6311](https://github.com/containerd/containerd/pull/6311)) * integration: align tags of test images * Set CONTAINERD_ROOT in Windows cri-integration ([#6325](https://github.com/containerd/containerd/pull/6325)) * Set CONTAINERD_ROOT in Windows cri-integration * export oci.DeviceFromPath() ([#6312](https://github.com/containerd/containerd/pull/6312)) * export oci.DeviceFromPath() * Update volume test images ([#6321](https://github.com/containerd/containerd/pull/6321)) * Update continuity dependency * Update volume test images * Update TestRestartMonitor expected time check ([#6201](https://github.com/containerd/containerd/pull/6201)) * Add error logging on cleanup * Update TestRestartMonitor expected time check * Move test volume images from gcr to ghcr ([#6319](https://github.com/containerd/containerd/pull/6319)) * Move volume images from gcr to ghcr * Revert shim service plugin migration ([#6301](https://github.com/containerd/containerd/pull/6301)) * Revert shim plugin migration * Authenticate against ghcr.io ([#6317](https://github.com/containerd/containerd/pull/6317)) * Add permissions * Authenticate against ghcr.io * oci/deviceFromPath(): correctly check device types ([#6306](https://github.com/containerd/containerd/pull/6306)) * oci/deviceFromPath(): correctly check device types * Skip TestExportAndImportMultiLayer on Windows ([#6315](https://github.com/containerd/containerd/pull/6315)) * Skip TestExportAndImportMultiLayer on Windows * Integration: Add image build workflow ([#6290](https://github.com/containerd/containerd/pull/6290)) * Add image build workflow * Integration: Separate Windows Periodic Tests workflow trigger. ([#6286](https://github.com/containerd/containerd/pull/6286)) * Integration: Separate Windows Periodic Tests workflow trigger. * Build volume test images on Windows ([#6274](https://github.com/containerd/containerd/pull/6274)) * Build volume test images on Windows * Add VMware TKG & TCE to Containerd adopters ([#6297](https://github.com/containerd/containerd/pull/6297)) * Add VMware TKG & TCE to Containerd adopters * Vagrantfile: update to Fedora 35 ([#6293](https://github.com/containerd/containerd/pull/6293)) * Vagrantfile: update to Fedora 35 * Update README.md repo->org ([#6269](https://github.com/containerd/containerd/pull/6269)) * Update README.md repo->org * Fix executable file not found when restoring shims ([#6278](https://github.com/containerd/containerd/pull/6278)) * Fix executable file not found when restoring shims * ctr/snapshots/diff: show media-type in stderr ([#6271](https://github.com/containerd/containerd/pull/6271)) * ctr/snapshots/diff: don't show the media-type in output * ctr: Add Linux Capabilities control flags ([#6289](https://github.com/containerd/containerd/pull/6289)) * ctr: Add Linux Capabilities control flags * integration: add stats result in error message ([#6270](https://github.com/containerd/containerd/pull/6270)) * integration: add stats result in error message * releases: mark 1.4 as Extended ([#6287](https://github.com/containerd/containerd/pull/6287)) * docs: mark 1.4 as Extended * docs: fix RELEASES.md gRPC API anchor * feat: skip ci for fork ([#6284](https://github.com/containerd/containerd/pull/6284)) * feat: skip ci for fork * content/local: Close the file if Seek fails ([#6280](https://github.com/containerd/containerd/pull/6280)) * content/local: Close the file if Seek fails * Integration: Remove explicit version passing to `azure/CLI`. ([#6268](https://github.com/containerd/containerd/pull/6268)) * Integration: Remove explicit version passing to `azure/CLI`. * Fix wrong make target on documentation ([#6276](https://github.com/containerd/containerd/pull/6276)) * Fix wrong make target on documentation * fix: server error return ([#6272](https://github.com/containerd/containerd/pull/6272)) * fix: server error return * Prepare release notes for v1.6.0-beta.3 ([#6267](https://github.com/containerd/containerd/pull/6267)) * Prepare release notes for v1.6.0-beta.3 * Update API version in go.mod * Update release name to use consistent format * feat:support custom callopts on client side ([#6254](https://github.com/containerd/containerd/pull/6254)) * fix: make max recv/send msg size setting default * feat:support custom callopts on client side * [CRI] Fix panic when registry.mirrors use localhost ([#6258](https://github.com/containerd/containerd/pull/6258)) * [CRI] Fix panic when registry.mirrors use localhost * Add support for TMP override on toml ([#6241](https://github.com/containerd/containerd/pull/6241)) * Add support for TMP override on toml * CRI: Support enable_unprivileged_icmp and enable_unprivileged_ports options ([#6170](https://github.com/containerd/containerd/pull/6170)) * CRI: Support enable_unprivileged_icmp and enable_unprivileged_ports options * Github Security Advisory [GHSA-5j5w-g665-5m35](https://github.com/containerd/containerd/security/advisories/GHSA-5j5w-g665-5m35) * schema1: reject ambiguous documents * images: validate document type before unmarshal * [cri] add sandbox and container latency metrics ([#6111](https://github.com/containerd/containerd/pull/6111)) * [cri] add sandbox and container latency metrics * Integration: Generalize Windows CI setup scripts for any username. ([#6255](https://github.com/containerd/containerd/pull/6255)) * Generalize Windows CI setup script for any user. * Standardize cmdlet capitalization in Windows CI scripts. * feat: use rwmutex instead ([#6253](https://github.com/containerd/containerd/pull/6253)) * feat: use rwmutex instead * Allow absolute path to shim binaries ([#6206](https://github.com/containerd/containerd/pull/6206)) * Fix package alias * Support custom runtime path when launching tasks * Add runtime path in CreateTaskRequest * Close file if permission modification fails ([#6246](https://github.com/containerd/containerd/pull/6246)) * Close file if permission modification fails * release: change tar name to match prior releases ([#6250](https://github.com/containerd/containerd/pull/6250)) * release: change tar name to match prior releases * Fix wrong error returned for image index lookup ([#6237](https://github.com/containerd/containerd/pull/6237)) * Fix wrong error returned for image index lookup * Fix containerd fails to pull OCI image with non-`http(s)://` urls ([#6221](https://github.com/containerd/containerd/pull/6221)) * Fix containerd fails to pull OCI image with non-`http(s)://` urls * Prepare release notes for v1.6.0-beta.2 ([#6223](https://github.com/containerd/containerd/pull/6223)) * Prepare release notes for v1.6.0-beta.2 * Add arm64 to releases ([#6196](https://github.com/containerd/containerd/pull/6196)) * Rename release dockerfile to omit distro name * release: improve dockerfile * Add arm64 to releases * use write lock when updating container stats ([#6236](https://github.com/containerd/containerd/pull/6236)) * use write lock when updating container stats * go.mod: Bump hcsshim to v0.9.1 ([#6230](https://github.com/containerd/containerd/pull/6230)) * go.mod: Bump hcsshim to v0.9.1 * go.mod: Bump ttrpc to 1.1.0 ([#6228](https://github.com/containerd/containerd/pull/6228)) * go.mod: Bump ttrpc to 1.1.0 * go.mod: bump moby/sys/symlink v0.2.0, moby/sys/signal v0.6.0, moby/sys/mountinfo v0.5.0 ([#6213](https://github.com/containerd/containerd/pull/6213)) * go.mod: github.com/moby/sys/mountinfo v0.5.0 * go.mod: github.com/moby/sys/signal v0.6.0 * go.mod: github.com/moby/sys/symlink v0.2.0 * go.mod: golang.org/x/sys v0.0.0-20211025201205-69cdffdb9359 * cleanup: add more description on comment ([#6222](https://github.com/containerd/containerd/pull/6222)) * cleanup: add more description on comment * Update Go to 1.17.3 ([#6211](https://github.com/containerd/containerd/pull/6211)) * Update Go to 1.17.3 * CI: bump up crun: 1.0 -> 1.3 ([#6214](https://github.com/containerd/containerd/pull/6214)) * CI: bump up crun: 1.0 -> 1.3 * Pin az CLI version in windows-periodic workflow ([#6205](https://github.com/containerd/containerd/pull/6205)) * Pin az CLI version * Decouple task manager ([#5918](https://github.com/containerd/containerd/pull/5918)) * Address PR comments * Fix build after rebase * Migrate task directory * Expose shim process interface * Fix after rebase * Cleanup shim loading * Move shim restore to a separate file * Fix backward compatibility with old task shims * Add plugin dependency between shim and shim services * Rework task create and cleanup flow * Add task manager * Rename task manager to shim manager * [cri] Implement k8s 1.23 CRI Pod Sandbox and Container Stats ([#6113](https://github.com/containerd/containerd/pull/6113)) * Implement CRI container and pods stats * Vendor latest k8s.io/cri-api and netlink * test: Add grace period for restart monitor test ([#6200](https://github.com/containerd/containerd/pull/6200)) * test: Add grace period for restart monitor test * integration: Enables TestRuntimeHandler for Windows ([#6179](https://github.com/containerd/containerd/pull/6179)) * integration: Enables TestRuntimeHandler for Windows * Add mkdir on Dockerfile ([#6171](https://github.com/containerd/containerd/pull/6171)) * Add mkdir on Dockerfile * sys/reaper: avoid leaky goroutine when exec timeout ([#6189](https://github.com/containerd/containerd/pull/6189)) * sys/reaper: avoid leaky goroutine when exec timeout * adds additional debug out to timebox cni setup ([#6184](https://github.com/containerd/containerd/pull/6184)) * adds additional debug out to timebox cni setup * converter: Allow hooks during image conversion ([#6176](https://github.com/containerd/containerd/pull/6176)) * converter: Allow hooks during image conversion * compression: support zstd with skippable frame ([#6177](https://github.com/containerd/containerd/pull/6177)) * compression: support zstd with skippable frame * integration: Enables TestVolumeCopyUp for Windows ([#6182](https://github.com/containerd/containerd/pull/6182)) * integration: Enables TestVolumeCopyUp for Windows * integration: Enable some tests for Windows (part 2) ([#6121](https://github.com/containerd/containerd/pull/6121)) * integration: Enable some tests for Windows (part 2) * integration: Enable some tests for Windows ([#6085](https://github.com/containerd/containerd/pull/6085)) * integration: Enable some tests for Windows * Update doc to version 2 syntax ([#6125](https://github.com/containerd/containerd/pull/6125)) * feat(doc): update to version 2 syntax * fix shim reaper wait command execute blocked ([#6166](https://github.com/containerd/containerd/pull/6166)) * fix shim reaper wait command execute blocked * content: close stream after commit request ([#6145](https://github.com/containerd/containerd/pull/6145)) * content: close stream after commit request * Generating token options with each scope as a separate string. ([#6165](https://github.com/containerd/containerd/pull/6165)) * Adding scope tests for ParseAuthHeader * Adding tests for GenerateTokenOptions * Generate token options with each scope as a separate string. * vendor: Updates go-cni ([#6167](https://github.com/containerd/containerd/pull/6167)) * vendor: Updates go-cni * commands: Enables task metrics for Windows ([#6159](https://github.com/containerd/containerd/pull/6159)) * commands: Enables task metrics for Windows * vendor: update moby/sys for darwin support ([#6149](https://github.com/containerd/containerd/pull/6149)) * vendor: update moby/sys for darwin support * Prepare v1.6.0-beta.1 ([#6144](https://github.com/containerd/containerd/pull/6144)) * Prepare release notes for v1.6.0-beta.1 * Update mailmap * Update api vendor * bump cni to spec v1.0.0 ([#6136](https://github.com/containerd/containerd/pull/6136)) * bump CNI to spec v1.0.0 * Inject otel traces to grpc client. ([#5992](https://github.com/containerd/containerd/pull/5992)) * Inject otel traces to grpc client. * client: expose (*image).platform ([#6142](https://github.com/containerd/containerd/pull/6142)) * client: expose (*image).platform * Adding documentation for Core Scheduling ([#6128](https://github.com/containerd/containerd/pull/6128)) * feat(doc): add Core Scheduling documentation * Ensure namespace is proxied to grpc/ttrpc plugins ([#6130](https://github.com/containerd/containerd/pull/6130)) * Ensure namespace is proxied to grpc/ttrpc plugins * fix #6054 MaxConcurrentDownloads is not effect when Unpack is true ([#6109](https://github.com/containerd/containerd/pull/6109)) * fix #6054 MaxConcurrentDownloads is not effect when Unpack is true * Output a warning for label image labels instead of erroring ([#6124](https://github.com/containerd/containerd/pull/6124)) * Output a warning for label image labels instead of erroring * Fix spelling mistake in Windows snapshotter ([#6132](https://github.com/containerd/containerd/pull/6132)) * Fix spelling mistake in Windows snapshotter * Windows: Cleanup rm- prefixed layers ([#6126](https://github.com/containerd/containerd/pull/6126)) * Windows: Cleanup rm- prefixed layers * cleanup deprecated package `io/ioutil ` ([#6118](https://github.com/containerd/containerd/pull/6118)) * io/ioutil package has been deprecated in Go 1.16 that replaces io/ioutil functions * close Writer after use which may memory leak ([#6115](https://github.com/containerd/containerd/pull/6115)) * close Writer after use which may leak mem * Adds Windows resource limits support ([#5778](https://github.com/containerd/containerd/pull/5778)) * Adds Windows resource limits support * Prepare release notes for v1.6.0-beta.0 ([#6098](https://github.com/containerd/containerd/pull/6098)) * Prepare release notes for v1.6.0-beta.0 * Add error message to in TestContainerdRestart integration test ([#6105](https://github.com/containerd/containerd/pull/6105)) * Add error message to in TestContainerdRestart integration test * Fix typo in the NewContainer function documentation ([#6110](https://github.com/containerd/containerd/pull/6110)) * Fix typo in the NewContainer function documentation * Update cgroups to v1.0.2 ([#6104](https://github.com/containerd/containerd/pull/6104)) * Update cgroups to v1.0.2 * btrfs: verify file content after mount ([#6100](https://github.com/containerd/containerd/pull/6100)) * test: check file content after mount * Update test timeout based on recent cancellations ([#6107](https://github.com/containerd/containerd/pull/6107)) * Update test timeout based on recent cancellations * Check the pid in cri test teardown ([#6106](https://github.com/containerd/containerd/pull/6106)) * Remove extra test_teardown * Check the pid in cri test teardown * add runc shim support for sched core ([#6011](https://github.com/containerd/containerd/pull/6011)) * fix integration client vendor * add runc shim support for sched core * integration: Enables Windows containerd restart test ([#5579](https://github.com/containerd/containerd/pull/5579)) * integration: Enables Windows containerd restart test * vendor: Bump hcsshim to 0.9.0 ([#6099](https://github.com/containerd/containerd/pull/6099)) * vendor: Bump hcsshim to 0.9.0 * [cri] Add CNI conf based on runtime class ([#4695](https://github.com/containerd/containerd/pull/4695)) * Add CNI conf based on runtime class * Update Go to 1.17.2 ([#6102](https://github.com/containerd/containerd/pull/6102)) * Update Go to 1.17.2 * integration: Adds test for multilayer image import ([#5933](https://github.com/containerd/containerd/pull/5933)) * integration: Adds test for multilayer image import * runtime: should fail fast if dial error on shim ([#6031](https://github.com/containerd/containerd/pull/6031)) * runtime: should fail fast if dial error on shim * Fixes Windows containers with image volumes ([#6034](https://github.com/containerd/containerd/pull/6034)) * Windows: Fixes Windows containers with image volumes * run `gofmt` with GO 1.17 ([#6094](https://github.com/containerd/containerd/pull/6094)) * run `gofmt` with Go 1.17 * pkg/cap: remove an outdated comment ([#6088](https://github.com/containerd/containerd/pull/6088)) * pkg/cap: remove an outdated comment * Update go otel 1.0.1 ([#6066](https://github.com/containerd/containerd/pull/6066)) * Update go otel 1.0.1 * Update ADOPTERS.md with additional uses ([#6086](https://github.com/containerd/containerd/pull/6086)) * Update ADOPTERS.md with additional uses * modify the way for checking cos ([#6082](https://github.com/containerd/containerd/pull/6082)) * modify the way for checking cos * Fuzzing: Add fuzzers + small modifications ([#5915](https://github.com/containerd/containerd/pull/5915)) * Fuzzing: Add 4 fuzzers + small modifications * Fixes for Windows CI ([#6081](https://github.com/containerd/containerd/pull/6081)) * Pin mingw to version 10.2.0 * Update to golang 1.17.1 * Install nssm * Github Security Advisory [GHSA-c2h3-6mxw-7mvq](https://github.com/containerd/containerd/security/advisories/GHSA-c2h3-6mxw-7mvq) * btrfs: reduce permissions on plugin directories * v1 runtime: reduce permissions for bundle dir * v2 runtime: reduce permissions for bundle dir * task service: return known error type ([#6079](https://github.com/containerd/containerd/pull/6079)) * task service: return known error type * refactor: move from io/ioutil to io and os package ([#5973](https://github.com/containerd/containerd/pull/5973)) * refactor: move from io/ioutil to io and os package * fix: import from k8s.io/utils/clock instead ([#6076](https://github.com/containerd/containerd/pull/6076)) * fix: update vendor * cleanup: import from k8s.io/utils/clock/testing instead * cleanup: import from k8s.io/utils/clock instead * feat: enable integration cri remote client to call with grpc calloptions ([#6069](https://github.com/containerd/containerd/pull/6069)) * feat: enable cri remote client to call with grpc calloptions * cleanup k8s ansible yaml (carry for #5713) ([#6074](https://github.com/containerd/containerd/pull/6074)) * cleanup k8s ansible yaml (carry for https://github.com/jayonlau <jayonlau@gmail.com>) * feat: support import image for specific platform ([#6070](https://github.com/containerd/containerd/pull/6070)) * fix: wrong flag type * feat: support import image for specific platform * Update mirror images to take target image name ([#6065](https://github.com/containerd/containerd/pull/6065)) * Update mirror images to take target image name * fix: make exec-id flag required in exec command ([#6059](https://github.com/containerd/containerd/pull/6059)) * fix: make exec-id flag required in exec command * images: enable converter to uncompress zstd ([#6052](https://github.com/containerd/containerd/pull/6052)) * images: enable converter to uncompress zstd * replace deprecated function with Domain and Path ([#5922](https://github.com/containerd/containerd/pull/5922)) * replace deprecated function * integration: Adds Windows HostProcess tests ([#5853](https://github.com/containerd/containerd/pull/5853)) * integration: Adds Windows HostProcess tests * Fix main branch build is broken ([#6047](https://github.com/containerd/containerd/pull/6047)) * Fix main branch build is broken * Add open telemetry logging hook for logrus ([#6003](https://github.com/containerd/containerd/pull/6003)) * Add open telemetry logging hook for logrus * Change `oci.WithUser` behavior for LCOW ([#6023](https://github.com/containerd/containerd/pull/6023)) * Change oci.WithUser behavior for LCOW * switch usage directly to errdefs.(ErrAlreadyExists and ErrNotFound) ([#5946](https://github.com/containerd/containerd/pull/5946)) * switch usage directly to errdefs.(ErrAlreadyExists and ErrNotFound) * import: Raise error if the imported image is filtered out ([#5926](https://github.com/containerd/containerd/pull/5926)) * import: Raise error if the imported image is filtered out * Fix panic in metadata content writer on copy error ([#6043](https://github.com/containerd/containerd/pull/6043)) * Fix panic in metadata content writer on copy error * Move tracing to plugin ([#6001](https://github.com/containerd/containerd/pull/6001)) * Move tracing to plugin * ctr: Fixes Windows image import ([#5916](https://github.com/containerd/containerd/pull/5916)) * ctr: Fixes Windows image import * update open go.opentelemetry.io v1.0.0 to fix import path ([#6017](https://github.com/containerd/containerd/pull/6017)) * go.mod: update opentelemetry modules to v1.0.0 * fix error string format ([#5979](https://github.com/containerd/containerd/pull/5979)) * fix error string format * Add github action to mirror image ([#6036](https://github.com/containerd/containerd/pull/6036)) * Add github action to mirror image * add current process state to the error message ([#6027](https://github.com/containerd/containerd/pull/6027)) * add current process state to the error message * FreeBSD: fix tar headers & the nil check on getxattr ([#5991](https://github.com/containerd/containerd/pull/5991)) * FreeBSD: fix tar headers & the nil check on getxattr * gha: collect VMs' IP addresses ([#6035](https://github.com/containerd/containerd/pull/6035)) * gha: collect Vagrant VMs' IP addresses * bump continuity and console version that remove pkg/errors ([#6033](https://github.com/containerd/containerd/pull/6033)) * bump continuity and console version that remove pkg/errors * import: Add option to prevent duplicated digest image ([#5997](https://github.com/containerd/containerd/pull/5997)) * import: Add option to skip creating digest image * ctr namespaces: improve usage string ([#5998](https://github.com/containerd/containerd/pull/5998)) * ctr namespaces: improve usage string * bump console version to v1.0.3 that remove pkg/errors ([#6028](https://github.com/containerd/containerd/pull/6028)) * bump console version to v1.0.3 that remove pkg/errors * Use github images for integration tests ([#6032](https://github.com/containerd/containerd/pull/6032)) * Use github images for integration tests * Fix typo ([#5995](https://github.com/containerd/containerd/pull/5995)) * Fix typo * Enable image config labels in ctr and CRI container creation ([#6012](https://github.com/containerd/containerd/pull/6012)) * Enable image config labels in ctr and CRI container creation * Make sure exit signals trigger an exit during init ([#5970](https://github.com/containerd/containerd/pull/5970)) * Make sure exit signals trigger an exit during init * task delete: Closes task IO before waiting ([#5974](https://github.com/containerd/containerd/pull/5974)) * task delete: Closes task IO before waiting * CI: bump up crun to 1.0 ([#5985](https://github.com/containerd/containerd/pull/5985)) * CI: bump up crun to 1.0 * seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted) ([#5982](https://github.com/containerd/containerd/pull/5982)) * seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted) * Update to Go 1.17.1 ([#5990](https://github.com/containerd/containerd/pull/5990)) * Update to Go 1.17.1 * CI: Switch to available latest images ([#5987](https://github.com/containerd/containerd/pull/5987)) * CI: Switch to available latest images * add xfs support to devicemapper snapshotter ([#5610](https://github.com/containerd/containerd/pull/5610)) * add xfs support to devicemapper snapshotter * Fixes task kill --force on Windows ([#5956](https://github.com/containerd/containerd/pull/5956)) * Fixes task kill --force on Windows * Add support for shim plugins ([#5817](https://github.com/containerd/containerd/pull/5817)) * Add support for shim plugins * vendor: update continuity for darwin support ([#5976](https://github.com/containerd/containerd/pull/5976)) * vendor: update continuity for darwin support * replace uses of os/exec with golang.org/x/sys/execabs ([#5906](https://github.com/containerd/containerd/pull/5906)) * replace uses of os/exec with golang.org/x/sys/execabs * complete integration test for pulling image with labels ([#5972](https://github.com/containerd/containerd/pull/5972)) * Additional integration tests for pulling image with labels * Fix content copy to not ignore unexpected EOF ([#5966](https://github.com/containerd/containerd/pull/5966)) * Fix content copy to not ignore unexpected EOF * add ip_pref CNI options for primary pod ip ([#5964](https://github.com/containerd/containerd/pull/5964)) * add ip_pref CNI options for primary pod ip * cri: add devices for privileged container ([#5939](https://github.com/containerd/containerd/pull/5939)) * cri: add devices for privileged container * sandbox: Allows the sandbox to be deleted in NotReady state ([#5954](https://github.com/containerd/containerd/pull/5954)) * sandbox: Allows the sandbox to be deleted in NotReady state * pin protobuild version to tag ([#5969](https://github.com/containerd/containerd/pull/5969)) * pin protobuild version to tag * Add metric exposing build version&revision ([#5965](https://github.com/containerd/containerd/pull/5965)) * use a const metric for build_info * Add metric exposing build version&revision * Feature: containerd-cri support LinuxContainerResources.Unified ([#5627](https://github.com/containerd/containerd/pull/5627)) * add cri test case * feature: add field LinuxContainerResources.Unified on cri * integration: investigate TestRestartMonitor's failure ([#5861](https://github.com/containerd/containerd/pull/5861)) * integration: investigate TestRestartMonitor's failure * Use issue forms for bug reporting ([#5917](https://github.com/containerd/containerd/pull/5917)) * Address issue forms feedback * Use issue forms for bug reporting * cri: patch update image labels ([#5945](https://github.com/containerd/containerd/pull/5945)) * cri: patch update image labels * darwin: runtime support ([#5936](https://github.com/containerd/containerd/pull/5936)) * darwin: runtime support * darwin: use the default values for socketRoot variable * Update RELEASES.md ([#5858](https://github.com/containerd/containerd/pull/5858)) * Update RELEASES.md * archive: Add WriteDiff error logs ([#5949](https://github.com/containerd/containerd/pull/5949)) * archive: Add WriteDiff error logs * replace deprecated Dialer with ContextDialer ([#5958](https://github.com/containerd/containerd/pull/5958)) * replace deprecated Dail with DailContext * Add WS2022 support in Windows Periodic tests ([#5951](https://github.com/containerd/containerd/pull/5951)) * Add WS2022 support in Windows Periodic tests * Content fuzzer: Clean up temp store dir ([#5943](https://github.com/containerd/containerd/pull/5943)) * content fuzzer: Clean up tempdir * using Hosts replace deprecated field ([#5944](https://github.com/containerd/containerd/pull/5944)) * using Hosts replace deprecated field * fix document non-synchronous ([#5947](https://github.com/containerd/containerd/pull/5947)) * fix document non-synchronous in crictl.md * go.mod: Update hcsshim to v0.8.21 ([#5929](https://github.com/containerd/containerd/pull/5929)) * go.mod: Update hcsshim to v0.8.21 * Makefile.linux: build on RISC-V with PIE ([#5937](https://github.com/containerd/containerd/pull/5937)) * Makefile.linux: build on riscv with PIE * Fix cwd flag for `ctr tasks exec` ([#5932](https://github.com/containerd/containerd/pull/5932)) * Fix cwd flag for `ctr tasks exec` * Update Pause image in tests & config ([#5927](https://github.com/containerd/containerd/pull/5927)) * Update Pause image in tests & config * cri: Devices ownership from SecurityContext ([#5122](https://github.com/containerd/containerd/pull/5122)) * cri: Devices ownership from SecurityContext * Fix pull fails on unexpected EOF ([#5921](https://github.com/containerd/containerd/pull/5921)) * Fix pull fails on unexpected EOF * Fix dir support for devices ([#5845](https://github.com/containerd/containerd/pull/5845)) * Adding testing of two devices * Fix dir support for devices V3 (#4847) * windows: The DefaultSpec platform should match the Default matcher ([#5914](https://github.com/containerd/containerd/pull/5914)) * windows: The DefaultSpec platform should match the Default matcher * Add RunAsUserName functionality for the Windows pod sandbox container ([#5865](https://github.com/containerd/containerd/pull/5865)) * Add RunAsUserName functionality for the Windows Pod Sandbox Container * bump up runc v1.0.2 ([#5899](https://github.com/containerd/containerd/pull/5899)) * go.mod: update runc to v1.0.2 * update runc binary to v1.0.2 * Run `go fmt` with Go 1.17 ([#5903](https://github.com/containerd/containerd/pull/5903)) * Run `go fmt` with Go 1.17 * go.mod: github.com/pelletier/go-toml v1.9.3 ([#5905](https://github.com/containerd/containerd/pull/5905)) * go.mod: github.com/pelletier/go-toml v1.9.3 * cri: filter selinux xattr for image volumes ([#5902](https://github.com/containerd/containerd/pull/5902)) * cri: filter selinux xattr for image volumes * Add Windows HostProcess Support ([#5131](https://github.com/containerd/containerd/pull/5131)) * Added windows hostProcess cni skip * script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0 ([#5897](https://github.com/containerd/containerd/pull/5897)) * script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0 * Update to Go 1.17 ([#5889](https://github.com/containerd/containerd/pull/5889)) * Bump integration timeout to 35 min * Update to Go 1.17 * integration: fix TestContainerPids ([#5896](https://github.com/containerd/containerd/pull/5896)) * integration: fix TestContainerPids * [ctr] add HOSTNAME env for host network ([#5891](https://github.com/containerd/containerd/pull/5891)) * [ctr] add HOSTNAME env for host network * Fuzzing: Add fuzzer ([#5886](https://github.com/containerd/containerd/pull/5886)) * Fuzzing: Add fuzzer * Make Cgroup driver configurable in gce configure script ([#5884](https://github.com/containerd/containerd/pull/5884)) * Add env for SystemdCgroup driver * Allow expanded DNS configuration ([#5878](https://github.com/containerd/containerd/pull/5878)) * Allow expanded DNS configuration * Fuzzing: Add 4 fuzzers ([#5863](https://github.com/containerd/containerd/pull/5863)) * Fuzzing: Add 4 fuzzers * Cleanup v2 shim ([#5813](https://github.com/containerd/containerd/pull/5813)) * Cleanup v2 shim * Fuzzing: Add experimental version of container fuzzer ([#5840](https://github.com/containerd/containerd/pull/5840)) * Use http.Get to download binaries instead of exec.Command * Fuzzing: Add experimental version of container fuzzer * add cpu-shares to ctr ([#5846](https://github.com/containerd/containerd/pull/5846)) * add cpu-shares to ctr * docs: rename master to main (it was opposite on the actual commit) ([#5847](https://github.com/containerd/containerd/pull/5847)) * docs: rename main to master * content: return the error with its timestamp ([#5849](https://github.com/containerd/containerd/pull/5849)) * content: return the error with its timestamp * Fix bad `make protos` failure ([#5857](https://github.com/containerd/containerd/pull/5857)) * Fix bad `make protos` failure * replace cri and point to new location ([#5851](https://github.com/containerd/containerd/pull/5851)) * archive docs and point to new location fix #https://github.com/containerd/cri/issues/1624 * docs: remove FOSSA's badge ([#5856](https://github.com/containerd/containerd/pull/5856)) * docs: remove FOSSA's badge * BUILDING.md: remove some bits about building runc ([#5850](https://github.com/containerd/containerd/pull/5850)) * BUILDING.md: remove some bits about building runc * BUILDING.md: markdown fixes * go.mod: update k8s deps to v1.22.0 ([#5836](https://github.com/containerd/containerd/pull/5836)) * go.mod: update kubernetes to v1.22.0 * [Scripts] Add trap to cri-integration test script ([#5852](https://github.com/containerd/containerd/pull/5852)) * Add trap to cri-integration test script * docs: list all snapshotter-related build flags ([#5848](https://github.com/containerd/containerd/pull/5848)) * docs: list all snapshotter-related build flags * Move plugin context events into separate plugin ([#5835](https://github.com/containerd/containerd/pull/5835)) * Move plugin context events into separate plugin * Fix Linux CI Linter using Go 1.15.14 ([#5839](https://github.com/containerd/containerd/pull/5839)) * Fix Linux CI Linter using go 1.15.14 * Update Go to 1.16.7 ([#5842](https://github.com/containerd/containerd/pull/5842)) * Update Go to 1.16.7 * Cleanup CI ([#5838](https://github.com/containerd/containerd/pull/5838)) * Cleanup CI * Remove redundant build tags ([#5834](https://github.com/containerd/containerd/pull/5834)) * Remove redundant build tags * Change default directories on Darwin ([#5830](https://github.com/containerd/containerd/pull/5830)) * Change default directories on Darwin * [otel-tracing] Initial opentelemetry support ([#5731](https://github.com/containerd/containerd/pull/5731)) * [otel-tracing] vendor and go modules changes * [otel-tracing] Initial opentelemetry support * remove go 1.13 from containerd * Fuzzing: Fix for OSS-fuzz issue 36825 ([#5829](https://github.com/containerd/containerd/pull/5829)) * Fuzzing: Fix for OSS-fuzz issue 36825 * Fuzzing: Add two fuzzers ([#5825](https://github.com/containerd/containerd/pull/5825)) * Fuzzing: Add two more fuzzers * scripts: linting fixes, and remove support for Debian Jessie (as it's EOL) ([#5760](https://github.com/containerd/containerd/pull/5760)) * scripts: declare ROOT closer to where it's used, and some DRY changes * scripts: add missing quotes, and minor linting issues * test/build-utils.sh: remove support for Debian Jessie * platforms: Format(): use path.Join() instead of joinNotEmpty() ([#5821](https://github.com/containerd/containerd/pull/5821)) * platforms: Format(): use path.Join() instead of joinNotEmpty() * Fuzzing: Remove panics of container_fuzzer ([#5823](https://github.com/containerd/containerd/pull/5823)) * Fuzzing: Remove panics of container_fuzzer * Fuzzing: Add container fuzzer ([#5785](https://github.com/containerd/containerd/pull/5785)) * Change protoc link * Split fuzzer to two fuzzers * Fuzzing: Add container fuzzer * runtime: fix the issue of create new socket with abstract address ([#5746](https://github.com/containerd/containerd/pull/5746)) * runtime: fix the issue of create new socket with abstract address * mergo: Upgrade to 0.3.12 to fix panic ([#5809](https://github.com/containerd/containerd/pull/5809)) * mergo: Upgrade to 0.3.12 to fix panic * ci: install criu from PPA ([#5802](https://github.com/containerd/containerd/pull/5802)) * ci: install criu from PPA * Update release workflow to upload binary without CNI ([#5144](https://github.com/containerd/containerd/pull/5144)) * Split release steps into multiple tasks * Update release workflow to upload binary without CNI * Enable critest on Windows Periodic Jobs ([#5725](https://github.com/containerd/containerd/pull/5725)) * Enable critest on Windows * Script to check if entries in go.mod files are in sync ([#5792](https://github.com/containerd/containerd/pull/5792)) * Script to check if entries in go.mod files are in sync * Add a sharedNamespace label ([#5043](https://github.com/containerd/containerd/pull/5043)) * Add shared content label to namespaces * platforms: add "ios" as known OS, "loong64" as known ARCH ([#5784](https://github.com/containerd/containerd/pull/5784)) * platforms: add "ios" as known OS, "loong64" as known ARCH * Updates the location of protobuf downloads ([#5804](https://github.com/containerd/containerd/pull/5804)) * Updates the location of protobuf downloads in docs * Update protobuf install to use correct repository ([#5803](https://github.com/containerd/containerd/pull/5803)) * Update protobuf install to use correct repository * overlay: expose upperdir location of each snapshot via an optional label ([#5624](https://github.com/containerd/containerd/pull/5624)) * overlay: add an optional label of upperdir location of each snapshot * Support SIGRTMIN+n signals ([#5693](https://github.com/containerd/containerd/pull/5693)) * Support SIGRTMIN+n signals * respect context timeout in shim binary call ([#5800](https://github.com/containerd/containerd/pull/5800)) * respect context timeout in shim binary call * Introduce a new go module - containerd/api for use in standalone clients ([#5716](https://github.com/containerd/containerd/pull/5716)) * Introduce a new go module - containerd/api for use in standalone clients * grpc config add options tcp_client_ca_cert ([#5606](https://github.com/containerd/containerd/pull/5606)) * grpc config add options tcp_tls_ca * integration: Windows volume-copy-up images ([#5162](https://github.com/containerd/containerd/pull/5162)) * integration: Windows volume-copy-up images * add CRI support matrix to RELEASES.md ([#5795](https://github.com/containerd/containerd/pull/5795)) * add CRI support matrix to RELEASES.md * adding a little more clarity ([#5794](https://github.com/containerd/containerd/pull/5794)) * adding a little more clarity * update gotestsum to v1.7.0 ([#5793](https://github.com/containerd/containerd/pull/5793)) * update gotestsum to v1.7.0 * Discard blocks when removing a thin device ([#5756](https://github.com/containerd/containerd/pull/5756)) * Discard blocks when removing a thin device * Makefile: fix passing build tags ([#5590](https://github.com/containerd/containerd/pull/5590)) * Makefile: pass build tags to manpage build process * Makefile: fix tags parameter computation * Add runtime label to metrics ([#5744](https://github.com/containerd/containerd/pull/5744)) * Add runtime label to metrics * interface about shim build check ([#5745](https://github.com/containerd/containerd/pull/5745)) * interface about shim build check * integration: log all processes to investigate the test failure ([#5775](https://github.com/containerd/containerd/pull/5775)) * integration: log all processes to investigate the test failure * Fuzzing: Add archive fuzzer ([#5779](https://github.com/containerd/containerd/pull/5779)) * Fuzzing: Add archive fuzzer * Add docker.Fetch fuzzer ([#5687](https://github.com/containerd/containerd/pull/5687)) * Add docker fetch fuzzer * Support custom compressor for walking differ ([#5735](https://github.com/containerd/containerd/pull/5735)) * Support custom compressor for walking differ * remotes/docker/pusher.go: Fix missing Close() on push to docker remote ([#5770](https://github.com/containerd/containerd/pull/5770)) * remotes/docker/pusher.go: Fix missing Close() * remotes/docker/fetcher.go: Fix missing Close() on fetch from docker remote ([#5769](https://github.com/containerd/containerd/pull/5769)) * remotes/docker/fetcher.go: Fix missing Close() * Update cpuguy83/go-md2man binary to v2.0.1 ([#5771](https://github.com/containerd/containerd/pull/5771)) * Update cpuguy83/go-md2man binary to v2.0.1 * Refactor / optimize contrib/Dockerfile.test ([#5750](https://github.com/containerd/containerd/pull/5750)) * Dockerfile.test: build containerd in separate stage * Dockerfile.test: add GOLANG_IMAGE build arg to allow overriding * Dockerfile.test: clean up apt indexes after installing * Dockerfile.test: build critools in a separate stage * Dockerfile.test: build cni in a separate stage * Dockerfile.test: standard directory to collect build aftifacts * Dockerfile.test: split dev stage, and optimize order * Dockerfile.test: skip curl, gcc, git and make install * install-critools: make sure DESTDIR exists * update gotestsum to current master ([#5754](https://github.com/containerd/containerd/pull/5754)) * update gotestsum to current master * Github Security Advisory [GHSA-c72p-9xmj-rx3w](https://github.com/containerd/containerd/security/advisories/GHSA-c72p-9xmj-rx3w) * Add test for archive breakout test for lchmod * Use systemd cgroup driver for Kubernetes e2e tests with cgroupsv2 ([#5755](https://github.com/containerd/containerd/pull/5755)) * Use systemd cgroup driver for cgroupv2 tests * update runc to v1.0.1 ([#5751](https://github.com/containerd/containerd/pull/5751)) * go.mod: runc v1.0.1 * update runc binary to v1.0.1 * runtime: runc v2: remove redundant validation ([#5737](https://github.com/containerd/containerd/pull/5737)) * runtime: runc v2: remove redundant validation * Add timestamp to flaky restart monitor test ([#5727](https://github.com/containerd/containerd/pull/5727)) * Move loop check to before sleep * Add timestamp to flaky restart monitor test * Update Go to 1.16.6 ([#5722](https://github.com/containerd/containerd/pull/5722)) * integration/client: go mod tidy * Update Go to 1.16.6 * client: surface a connection error more clearly ([#4447](https://github.com/containerd/containerd/pull/4447)) * client: surface a connection error more clearly * Fix missing Body.Close() calls on push to docker remote ([#5712](https://github.com/containerd/containerd/pull/5712)) * Fix missing Body.Close() calls on push to docker remote * remove pkg/cri/platforms package ([#5710](https://github.com/containerd/containerd/pull/5710)) * remove pkg/cri/platforms package * Allow WithServices to use custom implementations ([#5709](https://github.com/containerd/containerd/pull/5709)) * Allow WithServices to use custom implementations * [Vendor] Update hcsshim to 0.8.18 ([#5673](https://github.com/containerd/containerd/pull/5673)) * [Vendor] Update hcsshim to 0.8.18 * test integration: Adds a test that restarts a failed container ([#5578](https://github.com/containerd/containerd/pull/5578)) * test integration: Adds a test that restarts a failed container * [CRI] move up to CRI v1 and support v1alpha in parallel ([#5619](https://github.com/containerd/containerd/pull/5619)) * use fu wei's suggeted interface pick for marshaling * add alpha version * move up to CRI v1 and support v1alpha in parallel * gha: make release workflow work in forks ([#5682](https://github.com/containerd/containerd/pull/5682)) * gha: make release workflow work in forks * Add unit test for plugin ([#5666](https://github.com/containerd/containerd/pull/5666)) * Add unit test for plugin * Dockerfile.test: add "cri-in-userns" (aka rootless) test stage ([#5700](https://github.com/containerd/containerd/pull/5700)) * Dockerfile.test: add "cri-in-userns" (aka rootless) test stage * Update for distribution spec 1.0 ([#5676](https://github.com/containerd/containerd/pull/5676)) * Add support for registry host path override * Update documenation for OCI distribution 1.0 * archive: cleanup lchmod logic ([#5702](https://github.com/containerd/containerd/pull/5702)) * Cleanup lchmod logic in archive * Install specific golang version in Windows CI. ([#5571](https://github.com/containerd/containerd/pull/5571)) * Install specific golang version in Windows CI. * Add ctr command label in NewContainerOpts ([#5660](https://github.com/containerd/containerd/pull/5660)) * feat: Add snapshotter label to the new snapshot for container. * snapshot/devmapper: log exported methods correctly ([#5655](https://github.com/containerd/containerd/pull/5655)) * snapshot/devmapper: log exported methods correctly * Makefile: fix DESTDIR and PREFIX concatenation ([#5662](https://github.com/containerd/containerd/pull/5662)) * Makefile: fix DESTDIR and PREFIX concatenation * Cri integration cleanup ([#5287](https://github.com/containerd/containerd/pull/5287)) * tests: Use EnsureImageExists for image pulling * tests: Refactors PodSandbox creation * move sys.FMountat() into mount package and un-export ([#5641](https://github.com/containerd/containerd/pull/5641)) * un-export mount.FMountat * move sys.FMountat() into mount package * sandbox: send pod UID to CNI plugins as K8S_POD_UID ([#5640](https://github.com/containerd/containerd/pull/5640)) * sandbox: send pod UID to CNI plugins as K8S_POD_UID * sys: remove StatAtime(), StatCtime(), StatMtime() and StatATimeAsTime() utils ([#5639](https://github.com/containerd/containerd/pull/5639)) * sys: remove StatAtime(), StatCtime(), StatMtime() and StatATimeAsTime() utils * content/local: inline sys.StatATimeAsTime() ([#5633](https://github.com/containerd/containerd/pull/5633)) * content/local: inline sys.StatATimeAsTime() * allow multi gpu to be specified via ctr ([#5636](https://github.com/containerd/containerd/pull/5636)) * allow multi gpu to be specified via ctr * go.mod: runc v1.0.0 * update runc binary to v1.0.0 GA * fixing some doc links ([#5629](https://github.com/containerd/containerd/pull/5629)) * fixing some doc links * Sync integration/go.mod with root go.mod ([#5623](https://github.com/containerd/containerd/pull/5623)) * Sync integration/go.mod with root go.mod * archive: Expose ChangeWriter to allow customized diff computing ([#5615](https://github.com/containerd/containerd/pull/5615)) * archive: Expose ChangeWriter to allow customized diff computing * CI: Switch to the available latest images ([#5625](https://github.com/containerd/containerd/pull/5625)) * CI: Switch to available latest images * fix deprecation config for default runtime * Re-enable criu in main integration runs ([#5614](https://github.com/containerd/containerd/pull/5614)) * Re-enable criu in main integration runs * runtime,v2: Enable debug when containerd is on debug+ log level ([#5617](https://github.com/containerd/containerd/pull/5617)) * runtime,v2: Enable debug when containerd is on debug+ log level * github.com/golang/protobuf/proto is deprecated * Update github.com/golang/protobuf from v1.3.5 to v1.4.3 * Update google.golang.org/grpc from v1.27.1 to v1.38.0 * Increase golangci-lint timeout * ctr flags of container rootfs propagation ([#5611](https://github.com/containerd/containerd/pull/5611)) * command line flags of setting container rootfs propagation * add cgroupv2 setup for cos with a flag * Update gotestsum to add timestamps to junit output ([#5612](https://github.com/containerd/containerd/pull/5612)) * Update gotestsum to add timestamps to junit output * Allow to pass --no-cgroups option to nvidia-container-cli ([#5604](https://github.com/containerd/containerd/pull/5604)) * Allow to pass --no-cgroup option to nvidia-container-cli * Makefile: FHS conformant manpage installation pathes ([#5577](https://github.com/containerd/containerd/pull/5577)) * Makefile: FHS conformant manpage installation pathes * Add proper Go version before project checks ([#5594](https://github.com/containerd/containerd/pull/5594)) * Add proper Go version before project checks * Enable cri-integration in Windows Periodic Tests ([#5580](https://github.com/containerd/containerd/pull/5580)) * Enable cri-integration in Windows Periodic Tests * adds explanation for seccomp unset/unconfined default vs runtime default ([#5573](https://github.com/containerd/containerd/pull/5573)) * adds explanation for seccomp unset/unconfined default vs runtime default * Fix cleanup context of teardownPodNetwork ([#5569](https://github.com/containerd/containerd/pull/5569)) * Fix cleanup context of teardownPodNetwork * update integration/client go.sum ([#5572](https://github.com/containerd/containerd/pull/5572)) * update integration/client go.sum * Revert diff/walking error change ([#5566](https://github.com/containerd/containerd/pull/5566)) * Revert diff/walking error change * Update opencontainers/selinux to v1.8.2 ([#5562](https://github.com/containerd/containerd/pull/5562)) * Update opencontainers/selinux to v1.8.2 * fix invalid validation error checking ([#5565](https://github.com/containerd/containerd/pull/5565)) * fix invalid validation error checking * diff/walking: fix defer cleanup ([#5551](https://github.com/containerd/containerd/pull/5551)) * diff/walking: fix defer cleanup * Windows periodic job: Add creation timestamp to RG ([#5559](https://github.com/containerd/containerd/pull/5559)) * Add creation timestamp to RG * Fix error case in Windows layer cleanup ([#5328](https://github.com/containerd/containerd/pull/5328)) * Fix error case in Windows layer cleanup * Use DeactivateLayer to unlock layers that we cannot rename ([#5422](https://github.com/containerd/containerd/pull/5422)) * Small typo fix "reimporst" * Use DeactivateLayer to recover layers that we cannot rename * tests: Symlink volume tests ([#5284](https://github.com/containerd/containerd/pull/5284)) * tests: Symlink volume tests * Makefile: fix DESTDIR environment variable behaviour ([#5535](https://github.com/containerd/containerd/pull/5535)) * Makefile: fix DESTDIR environment variable behaviour * Change Wrapf of non-error to an actual error ([#5560](https://github.com/containerd/containerd/pull/5560)) * Change Wrapf of non-error to an actual error * Install apparmor parser for arm64 environment * scrub the stale TODO ([#5536](https://github.com/containerd/containerd/pull/5536)) * scrub the stale TODO * docs: explicitly mention containerd's Prometheus path ([#5554](https://github.com/containerd/containerd/pull/5554)) * docs: explicitly mention containerd's Prometheus path * integration: Cleanup containerd on test teardown ([#5553](https://github.com/containerd/containerd/pull/5553)) * integration: Cleanup containerd on test teardown * docs/cri: update links ([#5548](https://github.com/containerd/containerd/pull/5548)) * docs/cri: update ocicrypt link * docs/cri: fix broken links * Update Windows periodic tests ([#5544](https://github.com/containerd/containerd/pull/5544)) * Update Windows periodic tests * Add CI periodic Windows Jobs. ([#5165](https://github.com/containerd/containerd/pull/5165)) * Schedule Windows job daily after midnight. * Update windows-periodic.yml * Add CI periodic Windows Jobs. * Rename atomicWrite to writeToCompletion ([#5273](https://github.com/containerd/containerd/pull/5273)) * Rename atomicWrite to writeToCompletion * Do not run btrfs tests if btrfs kernel module is not loaded ([#5539](https://github.com/containerd/containerd/pull/5539)) * Do not run btrfs tests if btrfs kernel module is not loaded * Fix incorrect UA used for registry authentication ([#5533](https://github.com/containerd/containerd/pull/5533)) * Fix incorrect UA used for registry authentication * ctr: parse mount options with embedded = character ([#5531](https://github.com/containerd/containerd/pull/5531)) * ctr: parse mount options with embedded = character * Fix mounts for FreeBSD ([#5472](https://github.com/containerd/containerd/pull/5472)) * Add ruleset=4 option * Remove mountpoints not commonly mounted on FreeBSD * Add copyright header & make sure compilation succeeds on all platforms * Fix mounts for FreeBSD * ctr: make exec pty behavior consistent with run ([#5527](https://github.com/containerd/containerd/pull/5527)) * ctr: exec handle pty resize after Start * ctr: exec setup IO with console * Makefile: use $@ for target file names ([#5534](https://github.com/containerd/containerd/pull/5534)) * Makefile: use $@ for target file names * Fix small typo ([#5528](https://github.com/containerd/containerd/pull/5528)) * Fix small typo * Don't check for apparmor_parser to be present ([#5519](https://github.com/containerd/containerd/pull/5519)) * update the link * Don't check for apparmor_parser to be present * Remove useless lines ([#5520](https://github.com/containerd/containerd/pull/5520)) * Remove useless lines * Fixed typos in docs ([#5509](https://github.com/containerd/containerd/pull/5509)) * fixed typos * Try next mirror in case of non-404 errors, too ([#5275](https://github.com/containerd/containerd/pull/5275)) * Try next mirror in case of non-404 errors, too * bump runc version to v1.0.0-rc95 ([#5514](https://github.com/containerd/containerd/pull/5514)) * bump runc version to v1.0.0-rc95 * update runc binary to v1.0.0-rc95 ([#5511](https://github.com/containerd/containerd/pull/5511)) * update runc binary to v1.0.0-rc95 * Bump github.com/Microsoft/go-winio from 0.4.15 to 0.5.0 ([#5508](https://github.com/containerd/containerd/pull/5508)) * Bump github.com/Microsoft/go-winio from 0.4.15 to 0.5.0 * Bump github.com/opencontainers/selinux from 1.8.0 to 1.8.1 ([#5507](https://github.com/containerd/containerd/pull/5507)) * Bump github.com/opencontainers/selinux from 1.8.0 to 1.8.1 * Makefile: allow overriding install command via environment ([#5493](https://github.com/containerd/containerd/pull/5493)) * Makefile: allow overriding install command via environment * tests: Adds support for Windows cri-integration tests ([#5163](https://github.com/containerd/containerd/pull/5163)) * tests: Adds support for Windows cri-integration tests * Update docker resolver to authorize redirects ([#5504](https://github.com/containerd/containerd/pull/5504)) * Update docker resolver to authorize redirects * bump hcsshim version to v0.8.17 ([#5505](https://github.com/containerd/containerd/pull/5505)) * bump hcsshim version to v0.8.17 * Release binary update for imgcrypt ([#5498](https://github.com/containerd/containerd/pull/5498)) * just release ctd-decoder not ctr-enc * Merge remote-tracking branch 'upstream/master' * Pin integration test image for alpine * cri-integration tests: Pull images once ([#5313](https://github.com/containerd/containerd/pull/5313)) * tests: Prepull images used in tests * plugin: optimize the check for the last registration ([#5440](https://github.com/containerd/containerd/pull/5440)) * plugin: optimize the check for the last registration * metadata: modify NewLeaseManager to return leases.Manager ([#5465](https://github.com/containerd/containerd/pull/5465)) * metadata: modify NewLeaseManager to return leases.Manager * Skip TLS verification for localhost ([#5100](https://github.com/containerd/containerd/pull/5100)) * Skip TLS verification for localhost * Merge remote-tracking branch 'upstream/master' * Makefile: make sure manpages are built before install-man ([#5492](https://github.com/containerd/containerd/pull/5492)) * Makefile: make sure manpages are built before install-man * adds description for hosts.toml ([#5309](https://github.com/containerd/containerd/pull/5309)) * adds credentials description * adds description for hosts.toml * Prepare default branch rename ([#5459](https://github.com/containerd/containerd/pull/5459)) * Prepare default branch rename * Merge remote-tracking branch 'upstream/master' * Update runc to rc94 ([#5473](https://github.com/containerd/containerd/pull/5473)) * Update vendored runc to v1.0.0.0-rc94 * Update the runc binary used with containerd to runc v1.0.0-rc94 * Fix `content.ReaderAt` close ([#5468](https://github.com/containerd/containerd/pull/5468)) * Fix content.ReaderAt close * Update releases doc with updated support timeline ([#5466](https://github.com/containerd/containerd/pull/5466)) * Update releases doc with updated support timeline * tests: add test for adaptor ([#5452](https://github.com/containerd/containerd/pull/5452)) * tests: add test for adaptor * Makefile: allow overriding go command by environment ([#5450](https://github.com/containerd/containerd/pull/5450)) * Makefile: allow overriding go command by environment * update to new cri-tools make install ([#5462](https://github.com/containerd/containerd/pull/5462)) * update to new cri-tools make install * Update Go to 1.16.4 ([#5461](https://github.com/containerd/containerd/pull/5461)) * Update Go to 1.16.4 * Merge remote-tracking branch 'upstream/release/1.5' * [release/1.5] go.mod: cut circular dependency on github.com/containerd/containerd ([#5457](https://github.com/containerd/containerd/pull/5457)) * go.mod: cut circular dependency on github.com/containerd/containerd * integration/client: go mod tidy * oci: fix WithDevShmSize ([#5063](https://github.com/containerd/containerd/pull/5063)) * oci: fix WithDevShmSize * [release/1.5] cherry-pick: windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink ([#5454](https://github.com/containerd/containerd/pull/5454)) * windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink * windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink ([#5411](https://github.com/containerd/containerd/pull/5411)) * windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink * doc: add missing namespaces package ([#5448](https://github.com/containerd/containerd/pull/5448)) * doc: add missing namespaces package * update seccomp version ([#5445](https://github.com/containerd/containerd/pull/5445)) * update seccomp version * Update golang.org/x/sys to add linux/ppc support ([#5436](https://github.com/containerd/containerd/pull/5436)) * Update golang.org/x/sys to add linux/ppc support * go.mod: cut circular dependency on github.com/containerd/containerd ([#5441](https://github.com/containerd/containerd/pull/5441)) * go.mod: cut circular dependency on github.com/containerd/containerd * integration/client: go mod tidy * Fix different registry hosts referencing the same auth config. ([#5446](https://github.com/containerd/containerd/pull/5446)) * Fix different registry hosts referencing the same auth config. </p> </details> ### Changes from containerd/cgroups <details><summary>33 commits</summary> <p> * v2: Fix inotify fd leak when cgroup is deleted ([#212](https://github.com/containerd/cgroups/pull/212)) * v2: add test case for Manager.EventChan() behavior * v2: flip error handling for readKVStat("memory.events") to reduce indentation * v2: manager: factor out memory.events parsing * v2: Fix inotify leak when cgroup is deleted * fix Implicit memory aliasing in for loop ([#214](https://github.com/containerd/cgroups/pull/214)) * fix Implicit memory aliasing in for loop * Fix potential dirfd leak. ([#210](https://github.com/containerd/cgroups/pull/210)) * Fix potential dirfd leak. * cgroup: Optionally add process and task to a subsystems subset ([#203](https://github.com/containerd/cgroups/pull/203)) * cgroup: Optionally add process and task to a subsystems subset * replace pkg/errors from vendor ([#208](https://github.com/containerd/cgroups/pull/208)) * replace pkg/errors from vendor * cgroup.go: avoid panic on nil interface ([#207](https://github.com/containerd/cgroups/pull/207)) * cgroup.go: avoid panic on nil interface * Improvements on cgroup v2 support ([#204](https://github.com/containerd/cgroups/pull/204)) * cgroupv2: reset lastErr to nil when subtree control is successfully written * cgroupv2: enable controllers before setting resources in NewChild() * v2: remove unimplemented errors and ErrorHandler, IgnoreNotExist ([#201](https://github.com/containerd/cgroups/pull/201)) * v2: remove ErrorHandler and IgnoreNotExist as they are not implemented * v2: remove errors that are never returned * v1: reduce duplicated code ([#202](https://github.com/containerd/cgroups/pull/202)) * v1: reduce duplicated code * cgroup v1: implement AddProc() ([#200](https://github.com/containerd/cgroups/pull/200)) * cgroup v1: implement AddProc() * Rename branch from master to main ([#199](https://github.com/containerd/cgroups/pull/199)) * Rename branch from master to main * utils: export ParseCgroupFile() ([#197](https://github.com/containerd/cgroups/pull/197)) * utils: export ParseCgroupFile() * go.mod: coreos/go-systemd/v22 v22.3.2 to prepare for deprecations ([#194](https://github.com/containerd/cgroups/pull/194)) * go.mod: coreos/go-systemd/v22 v22.3.2 to prepare for deprecations * Use /proc/partitions to get device names ([#195](https://github.com/containerd/cgroups/pull/195)) * Use /proc/partitions to get device names </p> </details> ### Changes from containerd/console <details><summary>6 commits</summary> <p> * Fix CI ([#55](https://github.com/containerd/console/pull/55)) * Fix CI * Stop using pkg/errors * Add support for z/OS ([#46](https://github.com/containerd/console/pull/46)) * Console test on z/OS * Add support for z/OS </p> </details> ### Changes from containerd/continuity <details><summary>28 commits</summary> <p> * fs: use syscall.Timespec.Unix ([#193](https://github.com/containerd/continuity/pull/193)) * fs: use syscall.Timespec.Unix * Update CI Go version to 1.17 ([#192](https://github.com/containerd/continuity/pull/192)) * Update CI Go version to 1.17 * Build containerd/continuity on multiple Unix OSes ([#190](https://github.com/containerd/continuity/pull/190)) * Build containerd/continuity on multiple Unix OSes * Do not log errors before returning them ([#191](https://github.com/containerd/continuity/pull/191)) * Do not log errors before returning them * Copy Windows file metadata ([#188](https://github.com/containerd/continuity/pull/188)) * Copy Windows file metadata * fix fmt.Errorf("%w", err) on err == nil ([#187](https://github.com/containerd/continuity/pull/187)) * fix fmt.Errorf("%w", err) on err == nil * Remove direct dependency on github.com/pkg/errors ([#185](https://github.com/containerd/continuity/pull/185)) * run gofmt with Go 1.17 * remove direct dependency on github.com/pkg/errors * Fix darwin issues ([#186](https://github.com/containerd/continuity/pull/186)) * update AUTHORS * darwin: use utimensat syscall instead of utimes * fix darwin usage of du command * go.mod: bazil.org/fuse v0.0.0-20200407214033-5883e5a4b5125 ([#161](https://github.com/containerd/continuity/pull/161)) * go.mod: bazil.org/fuse v0.0.0-20200407214033-5883e5a4b5125 * fs/stat: add FreeBSD, and cleanup some nolint-comments ([#184](https://github.com/containerd/continuity/pull/184)) * reformat nolint comments * fs/stat: add FreeBSD * Rename branch from master to main ([#182](https://github.com/containerd/continuity/pull/182)) * Rename branch from master to main * testutil/loopback: print more debug info ([#180](https://github.com/containerd/continuity/pull/180)) * testutil/loopback: print more debug info </p> </details> ### Changes from containerd/go-cni <details><summary>18 commits</summary> <p> * run setup on networks in parallel ([#76](https://github.com/containerd/go-cni/pull/76)) * switch to direct index * run setup on networks in parallel * remove: Continue on "not found" errors ([#74](https://github.com/containerd/go-cni/pull/74)) * remove: Continue on "not found" errors * go.mod: github.com/containernetworking/cni v1.0.1 ([#72](https://github.com/containerd/go-cni/pull/72)) * go.mod: github.com/containernetworking/cni v1.0.1 * remove direct dependency on github.com/pkg/errors ([#71](https://github.com/containerd/go-cni/pull/71)) * remove direct dependency on github.com/pkg/errors * update CNI to v1.0.0 ([#70](https://github.com/containerd/go-cni/pull/70)) * test: add TestLibCNIType100 * update CNI to v1.0.0 * Rename branch from master to main ([#69](https://github.com/containerd/go-cni/pull/69)) * Rename branch from master to main * result: change Raw from a struct field to a method ([#68](https://github.com/containerd/go-cni/pull/68)) * result: change Raw from a struct field to a method * result: expose raw result ([#67](https://github.com/containerd/go-cni/pull/67)) * result: expose raw result </p> </details> ### Changes from containerd/imgcrypt <details><summary>32 commits</summary> <p> * CHANGES: Updated CHANGES document for 1.1.3 release ([#64](https://github.com/containerd/imgcrypt/pull/64)) * CHANGES: Updated CHANGES document for 1.1.3 release * docs: update project branch to main ([#63](https://github.com/containerd/imgcrypt/pull/63)) * docs: update project branch to main * Update linter to match containerd repo ([#61](https://github.com/containerd/imgcrypt/pull/61)) * Update linter to match containerd repo * update CI golang version * Bump github.com/containerd/containerd from 1.5.7 to 1.5.8 ([#59](https://github.com/containerd/imgcrypt/pull/59)) * Bump github.com/containerd/containerd from 1.5.7 to 1.5.8 * maint: Update to ocicrypt v1.1.2 ([#57](https://github.com/containerd/imgcrypt/pull/57)) * maint: Update to ocicrypt v1.1.2 * Decouple CreateCryptoConfig() from github.com/urfave/cli ([#56](https://github.com/containerd/imgcrypt/pull/56)) * Decouple CreateCryptoConfig() from github.com/urfave/cli * Bump github.com/containerd/containerd from 1.5.5 to 1.5.7 ([#55](https://github.com/containerd/imgcrypt/pull/55)) * Bump github.com/containerd/containerd from 1.5.5 to 1.5.7 * replace pkg/errors and bump related library * README: Fix CRI decryption document URL ([#53](https://github.com/containerd/imgcrypt/pull/53)) * README: Fix CRI decryption document URL * Bump github.com/containerd/containerd from 1.5.2 to 1.5.4 ([#52](https://github.com/containerd/imgcrypt/pull/52)) * Bump github.com/containerd/containerd from 1.5.2 to 1.5.4 * Bump containerd to 1.5.2 ([#51](https://github.com/containerd/imgcrypt/pull/51)) * Bump containerd to 1.5.2 * images: Implement ConvertFunc for image en- and decryption ([#49](https://github.com/containerd/imgcrypt/pull/49)) * images: Implement ConvertFunc for image en- and decryption * Add containerd-release to makefile ([#48](https://github.com/containerd/imgcrypt/pull/48)) * Remove ctr-enc from installation * vendor sync up with containerd 1.5 ga, and runc94 ([#47](https://github.com/containerd/imgcrypt/pull/47)) * sync up with containerd 1.5 ga, and runc94 * Sync ctr-enc with containerd's ctr v1.5.0-rc.3 ([#46](https://github.com/containerd/imgcrypt/pull/46)) * CICD: Run 'apt update' before pulling packages * ctr-enc: Set the version for ctr-enc when linking * Sync ctr-enc with containerd's ctr v1.5.0-rc.3 </p> </details> ### Changes from containerd/ttrpc <details><summary>34 commits</summary> <p> * Add protoc-gen-go-ttrpc ([#96](https://github.com/containerd/ttrpc/pull/96)) * Add protoc-gen-go-ttrpc * client: Handle sending/receiving in separate goroutines ([#94](https://github.com/containerd/ttrpc/pull/94)) * client: Handle sending/receiving in separate goroutines * Run Protobuild in GitHub Actions ([#95](https://github.com/containerd/ttrpc/pull/95)) * Run Protobuild in GitHub Actions * Re-generate example.pb.go * replace pkg/errors ([#93](https://github.com/containerd/ttrpc/pull/93)) * replace pkg/errors from vendor * Rename branch from master to main ([#86](https://github.com/containerd/ttrpc/pull/86)) * Rename branch from master to main * Make "go test" and "go build" work on macOS ([#85](https://github.com/containerd/ttrpc/pull/85)) * Make the example command buildable on macOS * Run GitHub Actions on macOS * Make "go test" work on macOS * Return Unimplemented when services or methods are not implemented ([#83](https://github.com/containerd/ttrpc/pull/83)) * Return Unimplemented when services or methods are not implemented * Remove "Very new" and checked TODO items ([#84](https://github.com/containerd/ttrpc/pull/84)) * Remove "Very new" and checked TODO items * removing glide from ignore ([#82](https://github.com/containerd/ttrpc/pull/82)) * removing glide from ignore * go.mod: update dependencies ([#79](https://github.com/containerd/ttrpc/pull/79)) * go.mod: github.com/prometheus/procfs v0.6.0 * go.mod: google.golang.org/genproto v0.0.0-20200224152610-e50cd9704f63 * go.mod: google.golang.org/grpc v1.27.1 * go.mod: github.com/gogo/protobuf v1.3.2 * remove travis, add codecov badge ([#78](https://github.com/containerd/ttrpc/pull/78)) * CI: add codecov badge to readme * CI: remove travis * Use GitHub Actions for CI ([#77](https://github.com/containerd/ttrpc/pull/77)) * Use GitHub Actions for CI * go.mod: sirupsen/logrus v1.7.0 ([#76](https://github.com/containerd/ttrpc/pull/76)) * go.mod: sirupsen/logrus v1.7.0 * go mod tidy </p> </details> ### Dependency Changes * **cloud.google.com/go** v0.81.0 **_new_** * **github.com/AdaLogics/go-fuzz-headers** 6c3934b029d8 **_new_** * **github.com/Microsoft/go-winio** v0.4.17 -> v0.5.1 * **github.com/Microsoft/hcsshim** v0.8.16 -> v0.9.2 * **github.com/blang/semver** v3.5.1 **_new_** * **github.com/cenkalti/backoff/v4** v4.1.2 **_new_** * **github.com/cespare/xxhash/v2** v2.1.1 -> v2.1.2 * **github.com/cilium/ebpf** v0.4.0 -> v0.7.0 * **github.com/containerd/cgroups** v1.0.1 -> v1.0.3 * **github.com/containerd/console** v1.0.2 -> v1.0.3 * **github.com/containerd/continuity** v0.1.0 -> v0.2.2 * **github.com/containerd/go-cni** v1.0.2 -> v1.1.1 * **github.com/containerd/imgcrypt** v1.1.1 -> v1.1.3 * **github.com/containerd/ttrpc** v1.0.2 -> v1.1.0 * **github.com/containernetworking/cni** v0.8.1 -> v1.0.1 * **github.com/containernetworking/plugins** v0.9.1 -> v1.0.1 * **github.com/containers/ocicrypt** v1.1.1 -> v1.1.2 * **github.com/coreos/go-systemd/v22** v22.1.0 -> v22.3.2 * **github.com/go-logr/logr** v0.2.0 -> v1.2.2 * **github.com/go-logr/stdr** v1.2.2 **_new_** * **github.com/godbus/dbus/v5** v5.0.3 -> v5.0.6 * **github.com/golang/groupcache** 8c9f03a8e57e -> 41bb18bfe9da * **github.com/golang/protobuf** v1.3.5 -> v1.5.2 * **github.com/google/go-cmp** v0.5.4 -> v0.5.6 * **github.com/google/gofuzz** v1.1.0 -> v1.2.0 * **github.com/grpc-ecosystem/go-grpc-middleware** v1.3.0 **_new_** * **github.com/grpc-ecosystem/grpc-gateway** v1.16.0 **_new_** * **github.com/hashicorp/errwrap** v1.0.0 -> v1.1.0 * **github.com/hashicorp/go-multierror** v1.0.0 -> v1.1.1 * **github.com/imdario/mergo** v0.3.11 -> v0.3.12 * **github.com/intel/goresctrl** v0.2.0 **_new_** * **github.com/json-iterator/go** v1.1.10 -> v1.1.12 * **github.com/moby/spdystream** v0.2.0 **_new_** * **github.com/moby/sys/mountinfo** v0.4.1 -> v0.5.0 * **github.com/moby/sys/signal** v0.6.0 **_new_** * **github.com/moby/sys/symlink** v0.1.0 -> v0.2.0 * **github.com/modern-go/reflect2** v1.0.1 -> v1.0.2 * **github.com/opencontainers/image-spec** v1.0.1 -> 693428a734f5 * **github.com/opencontainers/runc** v1.0.0-rc93 -> v1.1.0 * **github.com/opencontainers/runtime-spec** e6143ca7d51d -> 1c3f411f0417 * **github.com/opencontainers/selinux** v1.8.0 -> v1.10.0 * **github.com/pelletier/go-toml** v1.8.1 -> v1.9.3 * **github.com/prometheus/client_golang** v1.7.1 -> v1.11.0 * **github.com/prometheus/common** v0.10.0 -> v0.30.0 * **github.com/prometheus/procfs** v0.6.0 -> v0.7.3 * **github.com/satori/go.uuid** v1.2.0 **_new_** * **github.com/sirupsen/logrus** v1.7.0 -> v1.8.1 * **github.com/spf13/pflag** v1.0.5 **_new_** * **github.com/stretchr/testify** v1.6.1 -> v1.7.0 * **github.com/vishvananda/netlink** f5de75959ad5 **_new_** * **github.com/vishvananda/netns** 2eb08e3e575f **_new_** * **go.etcd.io/bbolt** v1.3.5 -> v1.3.6 * **go.opencensus.io** v0.22.3 -> v0.23.0 * **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc** v0.28.0 **_new_** * **go.opentelemetry.io/otel** v1.3.0 **_new_** * **go.opentelemetry.io/otel/exporters/otlp/internal/retry** v1.3.0 **_new_** * **go.opentelemetry.io/otel/exporters/otlp/otlptrace** v1.3.0 **_new_** * **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc** v1.3.0 **_new_** * **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp** v1.3.0 **_new_** * **go.opentelemetry.io/otel/sdk** v1.3.0 **_new_** * **go.opentelemetry.io/otel/trace** v1.3.0 **_new_** * **go.opentelemetry.io/proto/otlp** v0.11.0 **_new_** * **golang.org/x/crypto** 0c34fe9e7dc2 -> 32db794688a5 * **golang.org/x/net** e18ecbb05110 -> fe4d6282115f * **golang.org/x/oauth2** bf48bf16ab8d -> 2bc19b11175f * **golang.org/x/sync** 09787c993a3a -> 036812b2e83c * **golang.org/x/sys** 47abb6519492 -> 1d35b9e2eb4e * **golang.org/x/term** 7de9c90e9dd1 -> 6886f2dfbf5b * **golang.org/x/text** v0.3.4 -> v0.3.7 * **golang.org/x/time** 3af7569d3a1e -> 1f47c861a9ac * **google.golang.org/appengine** v1.6.5 -> v1.6.7 * **google.golang.org/grpc** v1.27.1 -> v1.43.0 * **google.golang.org/protobuf** v1.27.1 **_new_** * **gopkg.in/yaml.v3** 9f266ea9e77c -> 496545a6307b * **k8s.io/api** v0.20.6 -> v0.22.5 * **k8s.io/apimachinery** v0.20.6 -> v0.22.5 * **k8s.io/apiserver** v0.20.6 -> v0.22.5 * **k8s.io/client-go** v0.20.6 -> v0.22.5 * **k8s.io/component-base** v0.20.6 -> v0.22.5 * **k8s.io/cri-api** v0.20.6 -> v0.23.1 * **k8s.io/klog/v2** v2.4.0 -> v2.30.0 * **k8s.io/utils** 67b214c5f920 -> cb0fa318a74b * **sigs.k8s.io/structured-merge-diff/v4** v4.0.3 -> v4.1.2 Previous release can be found at [v1.5.0](https://github.com/containerd/containerd/releases/tag/v1.5.0)
-
v1.6.0-rc.3
containerd 1.6.0-rc.3 Welcome to the v1.6.0-rc.3 release of containerd! The seventh major release of containerd includes many improvements and added support to increase overall compatibility and stability. ### Highlights #### Runtime * **Add runtime label to metrics** ([#5744](https://github.com/containerd/containerd/pull/5744)) * **Cleanup task delete logic in v2 shim** ([#5813](https://github.com/containerd/containerd/pull/5813)) * **Add support for shim plugins** ([#5817](https://github.com/containerd/containerd/pull/5817)) * **Handle sigint and sigterm in shimv2** ([#5828](https://github.com/containerd/containerd/pull/5828)) * **Decouple shim and task manager** ([#5918](https://github.com/containerd/containerd/pull/5918)) * **Add runc shim support for core scheduling** ([#6011](https://github.com/containerd/containerd/pull/6011)) * **Update shim client connect attempt to fail fast when shim errors** ([#6031](https://github.com/containerd/containerd/pull/6031)) * **Add support for absolute path to shim binaries** ([#6206](https://github.com/containerd/containerd/pull/6206)) * **Update runc to v1.1.0** ([#6375](https://github.com/containerd/containerd/pull/6375)) #### Windows * **Add support for Windows HostProcess containers** ([#5131](https://github.com/containerd/containerd/pull/5131)) * **Add support for Windows resource limits** ([#5778](https://github.com/containerd/containerd/pull/5778)) #### CRI * **Add CNI configuration based on runtime class** ([#4695](https://github.com/containerd/containerd/pull/4695)) * **Add support for Intel RDT** ([#5439](https://github.com/containerd/containerd/pull/5439)) * **Add support for CRI v1 and v1alpha in parallel** ([#5619](https://github.com/containerd/containerd/pull/5619)) * **Add support for unified resources field for cgroups v2** ([#5627](https://github.com/containerd/containerd/pull/5627)) * **Add IP preference configuration for reporting pod IP** ([#5964](https://github.com/containerd/containerd/pull/5964)) * **Implement new CRI pod sandbox stats API** ([#6113](https://github.com/containerd/containerd/pull/6113)) * **Add sandbox and container latency metrics** ([#6111](https://github.com/containerd/containerd/pull/6111)) * **Add namespace to ttrpc and grpc plugin connections** ([#6130](https://github.com/containerd/containerd/pull/6130)) * **Add option to allow ping sockets and privileged ports with no capabilities** ([#6170](https://github.com/containerd/containerd/pull/6170)) * **Add support for configuring swap** ([#6320](https://github.com/containerd/containerd/pull/6320)) #### Other * **Add support for client TLS Auth for grpc** ([#5606](https://github.com/containerd/containerd/pull/5606)) * **Add xfs support for devicemapper snapshotter** ([#5610](https://github.com/containerd/containerd/pull/5610)) * **Add metric exposing build version and revision** ([#5965](https://github.com/containerd/containerd/pull/5965)) * **Add support for custom fs options in devmapper snapshotter** ([#6122](https://github.com/containerd/containerd/pull/6122)) * **Update introspection service to show GRPC plugins** ([#6432](https://github.com/containerd/containerd/pull/6432)) #### Client * **Allow WithServices to use custom implementations** ([#5709](https://github.com/containerd/containerd/pull/5709)) * **Support custom compressor for walking differ** ([#5735](https://github.com/containerd/containerd/pull/5735)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Derek McGowan * Phil Estes * Akihiro Suda * Wei Fu * Maksym Pavlenko * Sebastiaan van Stijn * Michael Crosby * Kazuyoshi Kato * Mike Brown * Claudiu Belu * Daniel Canter * haoyun * Brian Goff * Gabriel Adrian Samfira * Stefan Berger * zounengren * AdamKorcz * Adelina Tuvenie * Kohei Tokunaga * Davanum Srinivas * Nashwan Azhari * Samuel Karp * Shiming Zhang * Markus Lehtonen * Enrico Weigelt, metux IT consult * Alakesh Haloi * Hajime Tazaki * Iceber Gu * Kevin Parsons * Aditi Sharma * Jeremi Piotrowski * David Porter * Gijs Peskens * ningmingxiao * Brandon Lum * Cody Roseborough * Danielle Lancashire * Jacob MacElroy * Tõnis Tiigi * dependabot[bot] * wanglei * Alexandre Peixoto Ferreira * Eric Ernst * Fabiano Fidêncio * Furkan Türkal * Jiaming Xu * Kir Kolyshkin * Miao Wang * Neil Johnson * Paul "TBBle" Hampson * Priyanka Saggu * Romain Aviolat * Samuel Ortiz * Sunghoon Kang * Takumasa Sakao * Tobias Klauser * Zhiyu Li * ye.sijun * Alexander Minbaev * Alexey Ivanov * Andrey Smirnov * Artem Khramov * Aurelien Lun-Sin * Ben Hutchings * Cory Bennett * Da McGrady * Dan Williams * Eng Zer Jun * Ethan Chen * Fupan Li * Gaurav Gahlot * Gunju Kim * Henry Wang * Jacob Blain Christen * James Gordon * James Sturtevant * Jan Klippel * Jayme Howard * Jiajun Jiang * Jintao Zhang * Justin Terry * Kaijie Chen * Kante * Kern Walster * Kitt Hsu * Lantao Liu * Ma Xinjian * Manabu Sugimoto * Manuel Alejandro de Brito Fontes * Mark Rossetti * Markus Lippert * Mikko Ylinen * Ng Yang * Nicolas Chariglione * Ning Li * Olli Janatuinen * Peri Thompson * Quan Tian * Radostin Stoyanov * Rui Lopes * Sambhav Kothari * Sebastian Hasler * Sergey Kanzhelev * Sören Tempel * Yang Yang * Yifan Yuan * Zilong Wang * Zufar Dhiyaulhaq * botieking98 * chenxiaoyu * jayonlau * jerryzhuang * linrunlong * scuzhanglei * wangzhan * Étienne Guesnet ### Changes <details><summary>1038 commits</summary> <p> * Prepare release notes for v1.6.0-rc.3 ([#6524](https://github.com/containerd/containerd/pull/6524)) * Prepare release notes for v1.6.0-rc.3 * Use white logo in github dark mode ([#6529](https://github.com/containerd/containerd/pull/6529)) * Use white logo in github dark mode * cri: fix handling of ignore_rdt_not_enabled_errors config option ([#6514](https://github.com/containerd/containerd/pull/6514)) * cri: fix handling of ignore_rdt_not_enabled_errors config option * pkg/oom/v2: handle EventChan routine shutdown quietly ([#6504](https://github.com/containerd/containerd/pull/6504)) * pkg/oom/v2: handle EventChan routine shutdown quietly * fix: .dockerignore make git working tree dirty ([#6523](https://github.com/containerd/containerd/pull/6523)) * fix: .dockerignore makes git working tree dirty * containerd-stress: start task ctr before starting execs ([#6518](https://github.com/containerd/containerd/pull/6518)) * containerd-stress: start task ctr before starting execs * Document fs_type and fs_options in snapshots/devmapper/README.md ([#6501](https://github.com/containerd/containerd/pull/6501)) * Document fs_type and fs_options in snapshots/devmapper/README.md * docs: add Talos Linux to the list of adopters ([#6510](https://github.com/containerd/containerd/pull/6510)) * docs: add Talos Linux to the list of adopters * Prepare 1.6.0-rc.2 ([#6502](https://github.com/containerd/containerd/pull/6502)) * Prepare release notes for v1.6.0-rc.2 * Update releases document * platforms.Normalize(): do not reset OSVersion and OSFeatures ([#6497](https://github.com/containerd/containerd/pull/6497)) * platforms.Normalize(): do not reset OSVersion and OSFeatures * tracing: use OTLP/HTTP in addition to OTLP/gRPC ([#6457](https://github.com/containerd/containerd/pull/6457)) * tracing: return (ctx, span) from StartSpan * tracing: support OTLP/HTTP in addition to gRPC * Update cgroups to v1.0.3 ([#6498](https://github.com/containerd/containerd/pull/6498)) * Update cgroups to v1.0.3 * seccomp: kernel 5.11 -> 5.16 ([#6494](https://github.com/containerd/containerd/pull/6494)) * seccomp: kernel 5.16 (futex_waitv) * seccomp: kernel 5.15 (process_mrelease) * seccomp: kernel 5.14 (quotactl_fd, memfd_secret) * seccomp: kernel 5.13 (landlock_{add_rule,create_ruleset,restrict_self}) * seccomp: kernel 5.12 (mount_setattr) * remotes: fix dockerPusher to handle abort correctly ([#6243](https://github.com/containerd/containerd/pull/6243)) * remotes: fix dockerPusher to handle abort correctly * seccomp: add support for "swapcontext" syscall in default policy ([#6411](https://github.com/containerd/containerd/pull/6411)) * seccomp: add support for "swapcontext" syscall in default policy * oci: use readonly mount to read user/group info ([#6478](https://github.com/containerd/containerd/pull/6478)) * oci: use readonly mount to read user/group info * Fix possibly incorrect media type default on import ([#6475](https://github.com/containerd/containerd/pull/6475)) * Fix possibly incorrect media type default on import * shimv2: handle sigint/sigterm ([#5828](https://github.com/containerd/containerd/pull/5828)) * shimv2: handle sigint/sigterm * Fix acr fetch token 400 ([#6481](https://github.com/containerd/containerd/pull/6481)) * fix acr fetch token 400 * platforms: add support for matching amd64 variants ([#6455](https://github.com/containerd/containerd/pull/6455)) * platforms: add support for matching amd64 variants * Fix windows periodic workflow ([#6476](https://github.com/containerd/containerd/pull/6476)) * Fix windows periodic workflow * docs: add doc-comments on GC-related methods ([#6473](https://github.com/containerd/containerd/pull/6473)) * docs: add doc-comments on GC-related methods * fix: should not send 137 code event if cmd is notfound ([#6465](https://github.com/containerd/containerd/pull/6465)) * fix: should not send 137 code event if cmd is notfound * Fix empty scopes return ([#6463](https://github.com/containerd/containerd/pull/6463)) * fix empty scopes return * Prepare release notes for v1.6.0-rc.1 ([#6462](https://github.com/containerd/containerd/pull/6462)) * Prepare release notes for v1.6.0-rc.1 * Add support for skipping non-dist blob push ([#6424](https://github.com/containerd/containerd/pull/6424)) * ctr: flag to toggle non-distributable blob push * Add image handler to skip non-distributable blobs. * Compile binaries for go1.16 and go1.17 in CI ([#6461](https://github.com/containerd/containerd/pull/6461)) * Compile binaries for go1.16 and go1.17 in CI * services/introspection: fix plugin caching to show grpc plugins ([#6432](https://github.com/containerd/containerd/pull/6432)) * Update caching logic to avoid map access * services/introspection: support to show introspection grpc service * Integration: Change to Windows Server 2022 build number constant ([#6458](https://github.com/containerd/containerd/pull/6458)) * Integration: Change to Windows Server 2022 build number constant * Update kubernetes vendor to 0.22.5 ([#6460](https://github.com/containerd/containerd/pull/6460)) * Update kubernetes vendor to 0.22.5 * Fix rdt build tags for go 1.16 ([#6459](https://github.com/containerd/containerd/pull/6459)) * Fix rdt build tags for go 1.16 * Remove submodule go mod ([#6439](https://github.com/containerd/containerd/pull/6439)) * Remove api go submodule * Update makefile to remove API submodule * go.mod: Update hcsshim to v0.9.2 ([#6453](https://github.com/containerd/containerd/pull/6453)) * go.mod: Update hcsshim to v0.9.2 * update runc to v1.1.0 ([#6375](https://github.com/containerd/containerd/pull/6375)) * go.mod: github.com/opencontainers/runc v1.1.0 * update runc binary to v1.1.0 * tracing: fix OTLP tracer's initialization ([#6443](https://github.com/containerd/containerd/pull/6443)) * tracing: fix OTLP tracer's initialization * gha: run CodeQL scan on pull requests ([#6386](https://github.com/containerd/containerd/pull/6386)) * gha: run CodeQL scan on pull requests * Do not automatically inject client traces ([#6445](https://github.com/containerd/containerd/pull/6445)) * Do not automatically inject client traces * [containerd-stress] delete useless code ([#6451](https://github.com/containerd/containerd/pull/6451)) * delete useless code * Revert "Add shared content label to namespaces" ([#6440](https://github.com/containerd/containerd/pull/6440)) * Revert "Add shared content label to namespaces" * Add ppc64 support for test images ([#6435](https://github.com/containerd/containerd/pull/6435)) * Add ppc64 support for test images * ctr: Unify the delete subcommand alias ([#6427](https://github.com/containerd/containerd/pull/6427)) * ctr: Unify the delete subcommand alias * Prepare release notes for v1.6.0-rc.0 ([#6431](https://github.com/containerd/containerd/pull/6431)) * Prepare release notes for v1.6.0-rc.0 * Integration: Switch to using `auth` Gcloud action in Windows workflow. ([#6397](https://github.com/containerd/containerd/pull/6397)) * Integration: Switch to `upload-cloud-storage` Gcloud action. * Integration: Switch to using `auth` Gcloud action in Windows workflow. * remove io/ioutil ([#6426](https://github.com/containerd/containerd/pull/6426)) * remove io/ioutil * test: e2e node COS cgroupv2 script ([#6418](https://github.com/containerd/containerd/pull/6418)) * test: e2e node COS cgroupv2 script * Integration: Enable CRITest on Windows 2022. ([#6378](https://github.com/containerd/containerd/pull/6378)) * Enable critest tests on Windows Server 2022. * Parametrize CRITest test images in Windows Periodic workflow. * Update error message for apparmor parser ([#6415](https://github.com/containerd/containerd/pull/6415)) * Update error message for apparmor parser * Fix wrong log message ([#6419](https://github.com/containerd/containerd/pull/6419)) * Fix wrong log message * Followup errors change ([#6414](https://github.com/containerd/containerd/pull/6414)) * Fix incorrect error wrapped when closing ingest file * Fix seek error used without nil check * Fix followup items from errors replacement * Updates CRI API & Kubernetes to 1.23 ([#6351](https://github.com/containerd/containerd/pull/6351)) * Update k/k to 1.23.0 * Updating adoption of containerd for AKS ([#6416](https://github.com/containerd/containerd/pull/6416)) * Updating adoption of containerd for AKS * update the adoption status of containerd in GKE ([#6413](https://github.com/containerd/containerd/pull/6413)) * update the adoption status of containerd in GKE * go.mod: update github.com/containerd/{continuity,go-cni,imgcrypt} ([#6410](https://github.com/containerd/containerd/pull/6410)) * go.mod: update github.com/containerd/{continuity,go-cni,imgcrypt} * replace github.com/pkg/errors with native errors ([#6366](https://github.com/containerd/containerd/pull/6366)) * feat: replace github.com/pkg/errors to errors * corrected link in cri architecture documentation ([#6412](https://github.com/containerd/containerd/pull/6412)) * corrected link in cri architecture documentation * remotes/docker: allow fetching "refresh token" (aka "identity token", "offline token") ([#6396](https://github.com/containerd/containerd/pull/6396)) * remotes/docker: allow fetching "refresh token" (aka "identity token") * remotes/docker/config: allow setting custom AuthorizerOpts * Prepare release notes for v1.6.0-beta.5 ([#6407](https://github.com/containerd/containerd/pull/6407)) * Prepare release notes for v1.6.0-beta.5 * Integration: Check GCP secrets on Windows CI artifact upload. ([#6292](https://github.com/containerd/containerd/pull/6292)) * Integration: Check GCP secrets on Windows CI artifact upload. * Github Security Advisory [GHSA-mvff-h3cj-wj9c](https://github.com/containerd/containerd/security/advisories/GHSA-mvff-h3cj-wj9c) * only relabel cri managed host mounts * Add support for Intel RDT ([#5439](https://github.com/containerd/containerd/pull/5439)) * cri: add ignore_rdt_not_enabled_errors config option * Update dependencies * cri: annotations for controlling RDT class * tasks: add Linux rdt support * cmd: add --rdt-class command line option * oci: implement WithRdt * fix: use _ for consistency ([#6391](https://github.com/containerd/containerd/pull/6391)) * fix: use _ for consistency * content/local: use syscall.Timespec.Unix ([#6403](https://github.com/containerd/containerd/pull/6403)) * content/local: use syscall.Timespec.Unix * docs: improve plugin documentation ([#6207](https://github.com/containerd/containerd/pull/6207)) * docs: document the runtime shim plugin config options * docs: use proper markdown lists in containerd-config.toml.5.md * fix(ctr): enable networking for Windows containers ([#6304](https://github.com/containerd/containerd/pull/6304)) * fix(ctr): enable networking for Windows containers * Fix $(PWD) issue for Windows makefile ([#6394](https://github.com/containerd/containerd/pull/6394)) * Fix $(PWD) issue for Windows makefile * only test abstract uds on linux ([#6395](https://github.com/containerd/containerd/pull/6395)) * fix: only test abstract unix socket on linux * Fix restart container test ([#6390](https://github.com/containerd/containerd/pull/6390)) * Expect ErrorNotFound on Windows after Kill() * Replace tskill with taskkill * fix when kernel version < 4.13rc1 by using index=off cause test error ([#6291](https://github.com/containerd/containerd/pull/6291)) * fix when kernel version < 4.13rc1 by using index=off cause overlay test error * Fix no-daemon flag for integration/client tests ([#6384](https://github.com/containerd/containerd/pull/6384)) * Fix no-daemon flag for integration/client tests * Enable lazy init for ext4 with devicemapper ([#6122](https://github.com/containerd/containerd/pull/6122)) * Enable lazy init for ext4 with devicemapper * Fix flakiness on Windows for list stats ([#6385](https://github.com/containerd/containerd/pull/6385)) * Fix flakiness on Windows for list stats * cri-integration: Add Windows defaults and fix spaces issue ([#6347](https://github.com/containerd/containerd/pull/6347)) * cri-integration: Add Windows default paths * Upgrade OpenTelemetry dependencies ([#6383](https://github.com/containerd/containerd/pull/6383)) * Upgrade k8s.io/klog/v2 from 2.9.0 to 2.20.0 * Use insecure.NewCredentials instead of grpc.WithInsecure * Upgrade OpenTelemetry dependencies * Fix default makefile target for windows ([#6322](https://github.com/containerd/containerd/pull/6322)) * Fix default makefile target for windows * Disable TestContainerHook on Windows ([#6379](https://github.com/containerd/containerd/pull/6379)) * Disable TestContainerHook on Windows * seutil: Fix setting the "container_kvm_t" label ([#6372](https://github.com/containerd/containerd/pull/6372)) * seutil: Fix setting the "container_kvm_t" label * Remove Windows integration testing for 2004. ([#6350](https://github.com/containerd/containerd/pull/6350)) * Remove Windows integration testing for 2004. * OCI: Mount (accessible) host devices in privileged rootless containers ([#6308](https://github.com/containerd/containerd/pull/6308)) * OCI: Mount (accessible) host devices in privileged rootless containers * oci.getDevices(): move "non-dir, non '/dev/console'" case into switch * cri: add support for configuring swap ([#6320](https://github.com/containerd/containerd/pull/6320)) * fixup: check for swap accounting * fixup: handle diff between cgroupsv1 and v2 * cri: add support for configuring swap * Integration: Enable TestVolumeOwnership on Windows ([#6275](https://github.com/containerd/containerd/pull/6275)) * Replace find with native Go code * Enable TestVolumeOwnership on Windows * Prepare release notes for v1.6.0-beta.4 ([#6296](https://github.com/containerd/containerd/pull/6296)) * Prepare release notes for v1.6.0-beta.4 * refactor: functions for error log and error return ([#6358](https://github.com/containerd/containerd/pull/6358)) * feat: Errorf usage * Split apart runc shim into plugin components ([#6021](https://github.com/containerd/containerd/pull/6021)) * Use task plugin for runc shim * Seperate shim manager and task service * Split runc shim into plugin components * Add shutdown package * CRI update for sandbox sizing ([#6155](https://github.com/containerd/containerd/pull/6155)) * cri, sandbox: pass sandbox resource details if available, applicable * medatada: make namespaces' deletion error less cryptic ([#6354](https://github.com/containerd/containerd/pull/6354)) * medatada: make namespaces' deletion error less cryptic * ListContainerStats to return stats response if ContainerStatsFilter is nil ([#6373](https://github.com/containerd/containerd/pull/6373)) * add-list-stat: return container list if filter is nil * integration: deflake TestContainerdRestart ([#6369](https://github.com/containerd/containerd/pull/6369)) * integration: deflake TestContainerdRestart * feat: add timeout for bolt open ([#6225](https://github.com/containerd/containerd/pull/6225)) * feat: support custom timeout for blot open * Update Go to 1.17.5 ([#6333](https://github.com/containerd/containerd/pull/6333)) * Update Go to 1.17.5 * cri/server: use consistent alias for pkg/ioutil ([#6332](https://github.com/containerd/containerd/pull/6332)) * cri/server: use consistent alias for pkg/ioutil * Disable restart monitor test in Windows ([#6364](https://github.com/containerd/containerd/pull/6364)) * Disable restart monitor test in Windows * Don't fail-fast on Windows integration tests ([#6338](https://github.com/containerd/containerd/pull/6338)) * Don't fail-fast on Windows integration tests * Update restart monitor test to output daemon logs on failure ([#6355](https://github.com/containerd/containerd/pull/6355)) * Run windows parallel integration test as short * Update restart monitor test to output daemon logs on failure * go.mod: update image-spec to latest (v1.0.3-dev) ([#6263](https://github.com/containerd/containerd/pull/6263)) * images/converter: remove deprecated types * go.mod: update image-spec to latest (v1.0.3-dev) * Skip WithAdditionalGIDs on Darwin ([#6353](https://github.com/containerd/containerd/pull/6353)) * Skip WithAdditionalGIDs on Darwin * Use RFC3339 format on Windows periodic resource group creation so cleanup works ([#6303](https://github.com/containerd/containerd/pull/6303)) * Use RFC3339 format so rg cleanup works * update runc to v1.0.3 ([#6330](https://github.com/containerd/containerd/pull/6330)) * go.mod: github.com/opencontainers/runc v1.0.3 * update runc binary to v1.0.3 * Unblock native snapshotter on Darwin ([#6329](https://github.com/containerd/containerd/pull/6329)) * Allow native snapshotter on Darwin * Do not use `go get` to install executables ([#6328](https://github.com/containerd/containerd/pull/6328)) * Do not use `go get` to install executables * Include runtime v2 in default builtins ([#6326](https://github.com/containerd/containerd/pull/6326)) * Include runtime v2 in default builtins * Add Windows Server 2022 CI runs ([#6314](https://github.com/containerd/containerd/pull/6314)) * Add Windows Server 2022 CI runs * Set explicit ACL on test files ([#6324](https://github.com/containerd/containerd/pull/6324)) * Use a single RUN command * Set explicit ACL on test files * integration: align tags of test images ([#6311](https://github.com/containerd/containerd/pull/6311)) * integration: align tags of test images * Set CONTAINERD_ROOT in Windows cri-integration ([#6325](https://github.com/containerd/containerd/pull/6325)) * Set CONTAINERD_ROOT in Windows cri-integration * export oci.DeviceFromPath() ([#6312](https://github.com/containerd/containerd/pull/6312)) * export oci.DeviceFromPath() * Update volume test images ([#6321](https://github.com/containerd/containerd/pull/6321)) * Update continuity dependency * Update volume test images * Update TestRestartMonitor expected time check ([#6201](https://github.com/containerd/containerd/pull/6201)) * Add error logging on cleanup * Update TestRestartMonitor expected time check * Move test volume images from gcr to ghcr ([#6319](https://github.com/containerd/containerd/pull/6319)) * Move volume images from gcr to ghcr * Revert shim service plugin migration ([#6301](https://github.com/containerd/containerd/pull/6301)) * Revert shim plugin migration * Authenticate against ghcr.io ([#6317](https://github.com/containerd/containerd/pull/6317)) * Add permissions * Authenticate against ghcr.io * oci/deviceFromPath(): correctly check device types ([#6306](https://github.com/containerd/containerd/pull/6306)) * oci/deviceFromPath(): correctly check device types * Skip TestExportAndImportMultiLayer on Windows ([#6315](https://github.com/containerd/containerd/pull/6315)) * Skip TestExportAndImportMultiLayer on Windows * Integration: Add image build workflow ([#6290](https://github.com/containerd/containerd/pull/6290)) * Add image build workflow * Integration: Separate Windows Periodic Tests workflow trigger. ([#6286](https://github.com/containerd/containerd/pull/6286)) * Integration: Separate Windows Periodic Tests workflow trigger. * Build volume test images on Windows ([#6274](https://github.com/containerd/containerd/pull/6274)) * Build volume test images on Windows * Add VMware TKG & TCE to Containerd adopters ([#6297](https://github.com/containerd/containerd/pull/6297)) * Add VMware TKG & TCE to Containerd adopters * Vagrantfile: update to Fedora 35 ([#6293](https://github.com/containerd/containerd/pull/6293)) * Vagrantfile: update to Fedora 35 * Update README.md repo->org ([#6269](https://github.com/containerd/containerd/pull/6269)) * Update README.md repo->org * Fix executable file not found when restoring shims ([#6278](https://github.com/containerd/containerd/pull/6278)) * Fix executable file not found when restoring shims * ctr/snapshots/diff: show media-type in stderr ([#6271](https://github.com/containerd/containerd/pull/6271)) * ctr/snapshots/diff: don't show the media-type in output * ctr: Add Linux Capabilities control flags ([#6289](https://github.com/containerd/containerd/pull/6289)) * ctr: Add Linux Capabilities control flags * integration: add stats result in error message ([#6270](https://github.com/containerd/containerd/pull/6270)) * integration: add stats result in error message * releases: mark 1.4 as Extended ([#6287](https://github.com/containerd/containerd/pull/6287)) * docs: mark 1.4 as Extended * docs: fix RELEASES.md gRPC API anchor * feat: skip ci for fork ([#6284](https://github.com/containerd/containerd/pull/6284)) * feat: skip ci for fork * content/local: Close the file if Seek fails ([#6280](https://github.com/containerd/containerd/pull/6280)) * content/local: Close the file if Seek fails * Integration: Remove explicit version passing to `azure/CLI`. ([#6268](https://github.com/containerd/containerd/pull/6268)) * Integration: Remove explicit version passing to `azure/CLI`. * Fix wrong make target on documentation ([#6276](https://github.com/containerd/containerd/pull/6276)) * Fix wrong make target on documentation * fix: server error return ([#6272](https://github.com/containerd/containerd/pull/6272)) * fix: server error return * Prepare release notes for v1.6.0-beta.3 ([#6267](https://github.com/containerd/containerd/pull/6267)) * Prepare release notes for v1.6.0-beta.3 * Update API version in go.mod * Update release name to use consistent format * feat:support custom callopts on client side ([#6254](https://github.com/containerd/containerd/pull/6254)) * fix: make max recv/send msg size setting default * feat:support custom callopts on client side * [CRI] Fix panic when registry.mirrors use localhost ([#6258](https://github.com/containerd/containerd/pull/6258)) * [CRI] Fix panic when registry.mirrors use localhost * Add support for TMP override on toml ([#6241](https://github.com/containerd/containerd/pull/6241)) * Add support for TMP override on toml * CRI: Support enable_unprivileged_icmp and enable_unprivileged_ports options ([#6170](https://github.com/containerd/containerd/pull/6170)) * CRI: Support enable_unprivileged_icmp and enable_unprivileged_ports options * Github Security Advisory [GHSA-5j5w-g665-5m35](https://github.com/containerd/containerd/security/advisories/GHSA-5j5w-g665-5m35) * schema1: reject ambiguous documents * images: validate document type before unmarshal * [cri] add sandbox and container latency metrics ([#6111](https://github.com/containerd/containerd/pull/6111)) * [cri] add sandbox and container latency metrics * Integration: Generalize Windows CI setup scripts for any username. ([#6255](https://github.com/containerd/containerd/pull/6255)) * Generalize Windows CI setup script for any user. * Standardize cmdlet capitalization in Windows CI scripts. * feat: use rwmutex instead ([#6253](https://github.com/containerd/containerd/pull/6253)) * feat: use rwmutex instead * Allow absolute path to shim binaries ([#6206](https://github.com/containerd/containerd/pull/6206)) * Fix package alias * Support custom runtime path when launching tasks * Add runtime path in CreateTaskRequest * Close file if permission modification fails ([#6246](https://github.com/containerd/containerd/pull/6246)) * Close file if permission modification fails * release: change tar name to match prior releases ([#6250](https://github.com/containerd/containerd/pull/6250)) * release: change tar name to match prior releases * Fix wrong error returned for image index lookup ([#6237](https://github.com/containerd/containerd/pull/6237)) * Fix wrong error returned for image index lookup * Fix containerd fails to pull OCI image with non-`http(s)://` urls ([#6221](https://github.com/containerd/containerd/pull/6221)) * Fix containerd fails to pull OCI image with non-`http(s)://` urls * Prepare release notes for v1.6.0-beta.2 ([#6223](https://github.com/containerd/containerd/pull/6223)) * Prepare release notes for v1.6.0-beta.2 * Add arm64 to releases ([#6196](https://github.com/containerd/containerd/pull/6196)) * Rename release dockerfile to omit distro name * release: improve dockerfile * Add arm64 to releases * use write lock when updating container stats ([#6236](https://github.com/containerd/containerd/pull/6236)) * use write lock when updating container stats * go.mod: Bump hcsshim to v0.9.1 ([#6230](https://github.com/containerd/containerd/pull/6230)) * go.mod: Bump hcsshim to v0.9.1 * go.mod: Bump ttrpc to 1.1.0 ([#6228](https://github.com/containerd/containerd/pull/6228)) * go.mod: Bump ttrpc to 1.1.0 * go.mod: bump moby/sys/symlink v0.2.0, moby/sys/signal v0.6.0, moby/sys/mountinfo v0.5.0 ([#6213](https://github.com/containerd/containerd/pull/6213)) * go.mod: github.com/moby/sys/mountinfo v0.5.0 * go.mod: github.com/moby/sys/signal v0.6.0 * go.mod: github.com/moby/sys/symlink v0.2.0 * go.mod: golang.org/x/sys v0.0.0-20211025201205-69cdffdb9359 * cleanup: add more description on comment ([#6222](https://github.com/containerd/containerd/pull/6222)) * cleanup: add more description on comment * Update Go to 1.17.3 ([#6211](https://github.com/containerd/containerd/pull/6211)) * Update Go to 1.17.3 * CI: bump up crun: 1.0 -> 1.3 ([#6214](https://github.com/containerd/containerd/pull/6214)) * CI: bump up crun: 1.0 -> 1.3 * Pin az CLI version in windows-periodic workflow ([#6205](https://github.com/containerd/containerd/pull/6205)) * Pin az CLI version * Decouple task manager ([#5918](https://github.com/containerd/containerd/pull/5918)) * Address PR comments * Fix build after rebase * Migrate task directory * Expose shim process interface * Fix after rebase * Cleanup shim loading * Move shim restore to a separate file * Fix backward compatibility with old task shims * Add plugin dependency between shim and shim services * Rework task create and cleanup flow * Add task manager * Rename task manager to shim manager * [cri] Implement k8s 1.23 CRI Pod Sandbox and Container Stats ([#6113](https://github.com/containerd/containerd/pull/6113)) * Implement CRI container and pods stats * Vendor latest k8s.io/cri-api and netlink * test: Add grace period for restart monitor test ([#6200](https://github.com/containerd/containerd/pull/6200)) * test: Add grace period for restart monitor test * integration: Enables TestRuntimeHandler for Windows ([#6179](https://github.com/containerd/containerd/pull/6179)) * integration: Enables TestRuntimeHandler for Windows * Add mkdir on Dockerfile ([#6171](https://github.com/containerd/containerd/pull/6171)) * Add mkdir on Dockerfile * sys/reaper: avoid leaky goroutine when exec timeout ([#6189](https://github.com/containerd/containerd/pull/6189)) * sys/reaper: avoid leaky goroutine when exec timeout * adds additional debug out to timebox cni setup ([#6184](https://github.com/containerd/containerd/pull/6184)) * adds additional debug out to timebox cni setup * converter: Allow hooks during image conversion ([#6176](https://github.com/containerd/containerd/pull/6176)) * converter: Allow hooks during image conversion * compression: support zstd with skippable frame ([#6177](https://github.com/containerd/containerd/pull/6177)) * compression: support zstd with skippable frame * integration: Enables TestVolumeCopyUp for Windows ([#6182](https://github.com/containerd/containerd/pull/6182)) * integration: Enables TestVolumeCopyUp for Windows * integration: Enable some tests for Windows (part 2) ([#6121](https://github.com/containerd/containerd/pull/6121)) * integration: Enable some tests for Windows (part 2) * integration: Enable some tests for Windows ([#6085](https://github.com/containerd/containerd/pull/6085)) * integration: Enable some tests for Windows * Update doc to version 2 syntax ([#6125](https://github.com/containerd/containerd/pull/6125)) * feat(doc): update to version 2 syntax * fix shim reaper wait command execute blocked ([#6166](https://github.com/containerd/containerd/pull/6166)) * fix shim reaper wait command execute blocked * content: close stream after commit request ([#6145](https://github.com/containerd/containerd/pull/6145)) * content: close stream after commit request * Generating token options with each scope as a separate string. ([#6165](https://github.com/containerd/containerd/pull/6165)) * Adding scope tests for ParseAuthHeader * Adding tests for GenerateTokenOptions * Generate token options with each scope as a separate string. * vendor: Updates go-cni ([#6167](https://github.com/containerd/containerd/pull/6167)) * vendor: Updates go-cni * commands: Enables task metrics for Windows ([#6159](https://github.com/containerd/containerd/pull/6159)) * commands: Enables task metrics for Windows * vendor: update moby/sys for darwin support ([#6149](https://github.com/containerd/containerd/pull/6149)) * vendor: update moby/sys for darwin support * Prepare v1.6.0-beta.1 ([#6144](https://github.com/containerd/containerd/pull/6144)) * Prepare release notes for v1.6.0-beta.1 * Update mailmap * Update api vendor * bump cni to spec v1.0.0 ([#6136](https://github.com/containerd/containerd/pull/6136)) * bump CNI to spec v1.0.0 * Inject otel traces to grpc client. ([#5992](https://github.com/containerd/containerd/pull/5992)) * Inject otel traces to grpc client. * client: expose (*image).platform ([#6142](https://github.com/containerd/containerd/pull/6142)) * client: expose (*image).platform * Adding documentation for Core Scheduling ([#6128](https://github.com/containerd/containerd/pull/6128)) * feat(doc): add Core Scheduling documentation * Ensure namespace is proxied to grpc/ttrpc plugins ([#6130](https://github.com/containerd/containerd/pull/6130)) * Ensure namespace is proxied to grpc/ttrpc plugins * fix #6054 MaxConcurrentDownloads is not effect when Unpack is true ([#6109](https://github.com/containerd/containerd/pull/6109)) * fix #6054 MaxConcurrentDownloads is not effect when Unpack is true * Output a warning for label image labels instead of erroring ([#6124](https://github.com/containerd/containerd/pull/6124)) * Output a warning for label image labels instead of erroring * Fix spelling mistake in Windows snapshotter ([#6132](https://github.com/containerd/containerd/pull/6132)) * Fix spelling mistake in Windows snapshotter * Windows: Cleanup rm- prefixed layers ([#6126](https://github.com/containerd/containerd/pull/6126)) * Windows: Cleanup rm- prefixed layers * cleanup deprecated package `io/ioutil ` ([#6118](https://github.com/containerd/containerd/pull/6118)) * io/ioutil package has been deprecated in Go 1.16 that replaces io/ioutil functions * close Writer after use which may memory leak ([#6115](https://github.com/containerd/containerd/pull/6115)) * close Writer after use which may leak mem * Adds Windows resource limits support ([#5778](https://github.com/containerd/containerd/pull/5778)) * Adds Windows resource limits support * Prepare release notes for v1.6.0-beta.0 ([#6098](https://github.com/containerd/containerd/pull/6098)) * Prepare release notes for v1.6.0-beta.0 * Add error message to in TestContainerdRestart integration test ([#6105](https://github.com/containerd/containerd/pull/6105)) * Add error message to in TestContainerdRestart integration test * Fix typo in the NewContainer function documentation ([#6110](https://github.com/containerd/containerd/pull/6110)) * Fix typo in the NewContainer function documentation * Update cgroups to v1.0.2 ([#6104](https://github.com/containerd/containerd/pull/6104)) * Update cgroups to v1.0.2 * btrfs: verify file content after mount ([#6100](https://github.com/containerd/containerd/pull/6100)) * test: check file content after mount * Update test timeout based on recent cancellations ([#6107](https://github.com/containerd/containerd/pull/6107)) * Update test timeout based on recent cancellations * Check the pid in cri test teardown ([#6106](https://github.com/containerd/containerd/pull/6106)) * Remove extra test_teardown * Check the pid in cri test teardown * add runc shim support for sched core ([#6011](https://github.com/containerd/containerd/pull/6011)) * fix integration client vendor * add runc shim support for sched core * integration: Enables Windows containerd restart test ([#5579](https://github.com/containerd/containerd/pull/5579)) * integration: Enables Windows containerd restart test * vendor: Bump hcsshim to 0.9.0 ([#6099](https://github.com/containerd/containerd/pull/6099)) * vendor: Bump hcsshim to 0.9.0 * [cri] Add CNI conf based on runtime class ([#4695](https://github.com/containerd/containerd/pull/4695)) * Add CNI conf based on runtime class * Update Go to 1.17.2 ([#6102](https://github.com/containerd/containerd/pull/6102)) * Update Go to 1.17.2 * integration: Adds test for multilayer image import ([#5933](https://github.com/containerd/containerd/pull/5933)) * integration: Adds test for multilayer image import * runtime: should fail fast if dial error on shim ([#6031](https://github.com/containerd/containerd/pull/6031)) * runtime: should fail fast if dial error on shim * Fixes Windows containers with image volumes ([#6034](https://github.com/containerd/containerd/pull/6034)) * Windows: Fixes Windows containers with image volumes * run `gofmt` with GO 1.17 ([#6094](https://github.com/containerd/containerd/pull/6094)) * run `gofmt` with Go 1.17 * pkg/cap: remove an outdated comment ([#6088](https://github.com/containerd/containerd/pull/6088)) * pkg/cap: remove an outdated comment * Update go otel 1.0.1 ([#6066](https://github.com/containerd/containerd/pull/6066)) * Update go otel 1.0.1 * Update ADOPTERS.md with additional uses ([#6086](https://github.com/containerd/containerd/pull/6086)) * Update ADOPTERS.md with additional uses * modify the way for checking cos ([#6082](https://github.com/containerd/containerd/pull/6082)) * modify the way for checking cos * Fuzzing: Add fuzzers + small modifications ([#5915](https://github.com/containerd/containerd/pull/5915)) * Fuzzing: Add 4 fuzzers + small modifications * Fixes for Windows CI ([#6081](https://github.com/containerd/containerd/pull/6081)) * Pin mingw to version 10.2.0 * Update to golang 1.17.1 * Install nssm * Github Security Advisory [GHSA-c2h3-6mxw-7mvq](https://github.com/containerd/containerd/security/advisories/GHSA-c2h3-6mxw-7mvq) * btrfs: reduce permissions on plugin directories * v1 runtime: reduce permissions for bundle dir * v2 runtime: reduce permissions for bundle dir * task service: return known error type ([#6079](https://github.com/containerd/containerd/pull/6079)) * task service: return known error type * refactor: move from io/ioutil to io and os package ([#5973](https://github.com/containerd/containerd/pull/5973)) * refactor: move from io/ioutil to io and os package * fix: import from k8s.io/utils/clock instead ([#6076](https://github.com/containerd/containerd/pull/6076)) * fix: update vendor * cleanup: import from k8s.io/utils/clock/testing instead * cleanup: import from k8s.io/utils/clock instead * feat: enable integration cri remote client to call with grpc calloptions ([#6069](https://github.com/containerd/containerd/pull/6069)) * feat: enable cri remote client to call with grpc calloptions * cleanup k8s ansible yaml (carry for #5713) ([#6074](https://github.com/containerd/containerd/pull/6074)) * cleanup k8s ansible yaml (carry for https://github.com/jayonlau <jayonlau@gmail.com>) * feat: support import image for specific platform ([#6070](https://github.com/containerd/containerd/pull/6070)) * fix: wrong flag type * feat: support import image for specific platform * Update mirror images to take target image name ([#6065](https://github.com/containerd/containerd/pull/6065)) * Update mirror images to take target image name * fix: make exec-id flag required in exec command ([#6059](https://github.com/containerd/containerd/pull/6059)) * fix: make exec-id flag required in exec command * images: enable converter to uncompress zstd ([#6052](https://github.com/containerd/containerd/pull/6052)) * images: enable converter to uncompress zstd * replace deprecated function with Domain and Path ([#5922](https://github.com/containerd/containerd/pull/5922)) * replace deprecated function * integration: Adds Windows HostProcess tests ([#5853](https://github.com/containerd/containerd/pull/5853)) * integration: Adds Windows HostProcess tests * Fix main branch build is broken ([#6047](https://github.com/containerd/containerd/pull/6047)) * Fix main branch build is broken * Add open telemetry logging hook for logrus ([#6003](https://github.com/containerd/containerd/pull/6003)) * Add open telemetry logging hook for logrus * Change `oci.WithUser` behavior for LCOW ([#6023](https://github.com/containerd/containerd/pull/6023)) * Change oci.WithUser behavior for LCOW * switch usage directly to errdefs.(ErrAlreadyExists and ErrNotFound) ([#5946](https://github.com/containerd/containerd/pull/5946)) * switch usage directly to errdefs.(ErrAlreadyExists and ErrNotFound) * import: Raise error if the imported image is filtered out ([#5926](https://github.com/containerd/containerd/pull/5926)) * import: Raise error if the imported image is filtered out * Fix panic in metadata content writer on copy error ([#6043](https://github.com/containerd/containerd/pull/6043)) * Fix panic in metadata content writer on copy error * Move tracing to plugin ([#6001](https://github.com/containerd/containerd/pull/6001)) * Move tracing to plugin * ctr: Fixes Windows image import ([#5916](https://github.com/containerd/containerd/pull/5916)) * ctr: Fixes Windows image import * update open go.opentelemetry.io v1.0.0 to fix import path ([#6017](https://github.com/containerd/containerd/pull/6017)) * go.mod: update opentelemetry modules to v1.0.0 * fix error string format ([#5979](https://github.com/containerd/containerd/pull/5979)) * fix error string format * Add github action to mirror image ([#6036](https://github.com/containerd/containerd/pull/6036)) * Add github action to mirror image * add current process state to the error message ([#6027](https://github.com/containerd/containerd/pull/6027)) * add current process state to the error message * FreeBSD: fix tar headers & the nil check on getxattr ([#5991](https://github.com/containerd/containerd/pull/5991)) * FreeBSD: fix tar headers & the nil check on getxattr * gha: collect VMs' IP addresses ([#6035](https://github.com/containerd/containerd/pull/6035)) * gha: collect Vagrant VMs' IP addresses * bump continuity and console version that remove pkg/errors ([#6033](https://github.com/containerd/containerd/pull/6033)) * bump continuity and console version that remove pkg/errors * import: Add option to prevent duplicated digest image ([#5997](https://github.com/containerd/containerd/pull/5997)) * import: Add option to skip creating digest image * ctr namespaces: improve usage string ([#5998](https://github.com/containerd/containerd/pull/5998)) * ctr namespaces: improve usage string * bump console version to v1.0.3 that remove pkg/errors ([#6028](https://github.com/containerd/containerd/pull/6028)) * bump console version to v1.0.3 that remove pkg/errors * Use github images for integration tests ([#6032](https://github.com/containerd/containerd/pull/6032)) * Use github images for integration tests * Fix typo ([#5995](https://github.com/containerd/containerd/pull/5995)) * Fix typo * Enable image config labels in ctr and CRI container creation ([#6012](https://github.com/containerd/containerd/pull/6012)) * Enable image config labels in ctr and CRI container creation * Make sure exit signals trigger an exit during init ([#5970](https://github.com/containerd/containerd/pull/5970)) * Make sure exit signals trigger an exit during init * task delete: Closes task IO before waiting ([#5974](https://github.com/containerd/containerd/pull/5974)) * task delete: Closes task IO before waiting * CI: bump up crun to 1.0 ([#5985](https://github.com/containerd/containerd/pull/5985)) * CI: bump up crun to 1.0 * seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted) ([#5982](https://github.com/containerd/containerd/pull/5982)) * seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted) * Update to Go 1.17.1 ([#5990](https://github.com/containerd/containerd/pull/5990)) * Update to Go 1.17.1 * CI: Switch to available latest images ([#5987](https://github.com/containerd/containerd/pull/5987)) * CI: Switch to available latest images * add xfs support to devicemapper snapshotter ([#5610](https://github.com/containerd/containerd/pull/5610)) * add xfs support to devicemapper snapshotter * Fixes task kill --force on Windows ([#5956](https://github.com/containerd/containerd/pull/5956)) * Fixes task kill --force on Windows * Add support for shim plugins ([#5817](https://github.com/containerd/containerd/pull/5817)) * Add support for shim plugins * vendor: update continuity for darwin support ([#5976](https://github.com/containerd/containerd/pull/5976)) * vendor: update continuity for darwin support * replace uses of os/exec with golang.org/x/sys/execabs ([#5906](https://github.com/containerd/containerd/pull/5906)) * replace uses of os/exec with golang.org/x/sys/execabs * complete integration test for pulling image with labels ([#5972](https://github.com/containerd/containerd/pull/5972)) * Additional integration tests for pulling image with labels * Fix content copy to not ignore unexpected EOF ([#5966](https://github.com/containerd/containerd/pull/5966)) * Fix content copy to not ignore unexpected EOF * add ip_pref CNI options for primary pod ip ([#5964](https://github.com/containerd/containerd/pull/5964)) * add ip_pref CNI options for primary pod ip * cri: add devices for privileged container ([#5939](https://github.com/containerd/containerd/pull/5939)) * cri: add devices for privileged container * sandbox: Allows the sandbox to be deleted in NotReady state ([#5954](https://github.com/containerd/containerd/pull/5954)) * sandbox: Allows the sandbox to be deleted in NotReady state * pin protobuild version to tag ([#5969](https://github.com/containerd/containerd/pull/5969)) * pin protobuild version to tag * Add metric exposing build version&revision ([#5965](https://github.com/containerd/containerd/pull/5965)) * use a const metric for build_info * Add metric exposing build version&revision * Feature: containerd-cri support LinuxContainerResources.Unified ([#5627](https://github.com/containerd/containerd/pull/5627)) * add cri test case * feature: add field LinuxContainerResources.Unified on cri * integration: investigate TestRestartMonitor's failure ([#5861](https://github.com/containerd/containerd/pull/5861)) * integration: investigate TestRestartMonitor's failure * Use issue forms for bug reporting ([#5917](https://github.com/containerd/containerd/pull/5917)) * Address issue forms feedback * Use issue forms for bug reporting * cri: patch update image labels ([#5945](https://github.com/containerd/containerd/pull/5945)) * cri: patch update image labels * darwin: runtime support ([#5936](https://github.com/containerd/containerd/pull/5936)) * darwin: runtime support * darwin: use the default values for socketRoot variable * Update RELEASES.md ([#5858](https://github.com/containerd/containerd/pull/5858)) * Update RELEASES.md * archive: Add WriteDiff error logs ([#5949](https://github.com/containerd/containerd/pull/5949)) * archive: Add WriteDiff error logs * replace deprecated Dialer with ContextDialer ([#5958](https://github.com/containerd/containerd/pull/5958)) * replace deprecated Dail with DailContext * Add WS2022 support in Windows Periodic tests ([#5951](https://github.com/containerd/containerd/pull/5951)) * Add WS2022 support in Windows Periodic tests * Content fuzzer: Clean up temp store dir ([#5943](https://github.com/containerd/containerd/pull/5943)) * content fuzzer: Clean up tempdir * using Hosts replace deprecated field ([#5944](https://github.com/containerd/containerd/pull/5944)) * using Hosts replace deprecated field * fix document non-synchronous ([#5947](https://github.com/containerd/containerd/pull/5947)) * fix document non-synchronous in crictl.md * go.mod: Update hcsshim to v0.8.21 ([#5929](https://github.com/containerd/containerd/pull/5929)) * go.mod: Update hcsshim to v0.8.21 * Makefile.linux: build on RISC-V with PIE ([#5937](https://github.com/containerd/containerd/pull/5937)) * Makefile.linux: build on riscv with PIE * Fix cwd flag for `ctr tasks exec` ([#5932](https://github.com/containerd/containerd/pull/5932)) * Fix cwd flag for `ctr tasks exec` * Update Pause image in tests & config ([#5927](https://github.com/containerd/containerd/pull/5927)) * Update Pause image in tests & config * cri: Devices ownership from SecurityContext ([#5122](https://github.com/containerd/containerd/pull/5122)) * cri: Devices ownership from SecurityContext * Fix pull fails on unexpected EOF ([#5921](https://github.com/containerd/containerd/pull/5921)) * Fix pull fails on unexpected EOF * Fix dir support for devices ([#5845](https://github.com/containerd/containerd/pull/5845)) * Adding testing of two devices * Fix dir support for devices V3 (#4847) * windows: The DefaultSpec platform should match the Default matcher ([#5914](https://github.com/containerd/containerd/pull/5914)) * windows: The DefaultSpec platform should match the Default matcher * Add RunAsUserName functionality for the Windows pod sandbox container ([#5865](https://github.com/containerd/containerd/pull/5865)) * Add RunAsUserName functionality for the Windows Pod Sandbox Container * bump up runc v1.0.2 ([#5899](https://github.com/containerd/containerd/pull/5899)) * go.mod: update runc to v1.0.2 * update runc binary to v1.0.2 * Run `go fmt` with Go 1.17 ([#5903](https://github.com/containerd/containerd/pull/5903)) * Run `go fmt` with Go 1.17 * go.mod: github.com/pelletier/go-toml v1.9.3 ([#5905](https://github.com/containerd/containerd/pull/5905)) * go.mod: github.com/pelletier/go-toml v1.9.3 * cri: filter selinux xattr for image volumes ([#5902](https://github.com/containerd/containerd/pull/5902)) * cri: filter selinux xattr for image volumes * Add Windows HostProcess Support ([#5131](https://github.com/containerd/containerd/pull/5131)) * Added windows hostProcess cni skip * script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0 ([#5897](https://github.com/containerd/containerd/pull/5897)) * script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0 * Update to Go 1.17 ([#5889](https://github.com/containerd/containerd/pull/5889)) * Bump integration timeout to 35 min * Update to Go 1.17 * integration: fix TestContainerPids ([#5896](https://github.com/containerd/containerd/pull/5896)) * integration: fix TestContainerPids * [ctr] add HOSTNAME env for host network ([#5891](https://github.com/containerd/containerd/pull/5891)) * [ctr] add HOSTNAME env for host network * Fuzzing: Add fuzzer ([#5886](https://github.com/containerd/containerd/pull/5886)) * Fuzzing: Add fuzzer * Make Cgroup driver configurable in gce configure script ([#5884](https://github.com/containerd/containerd/pull/5884)) * Add env for SystemdCgroup driver * Allow expanded DNS configuration ([#5878](https://github.com/containerd/containerd/pull/5878)) * Allow expanded DNS configuration * Fuzzing: Add 4 fuzzers ([#5863](https://github.com/containerd/containerd/pull/5863)) * Fuzzing: Add 4 fuzzers * Cleanup v2 shim ([#5813](https://github.com/containerd/containerd/pull/5813)) * Cleanup v2 shim * Fuzzing: Add experimental version of container fuzzer ([#5840](https://github.com/containerd/containerd/pull/5840)) * Use http.Get to download binaries instead of exec.Command * Fuzzing: Add experimental version of container fuzzer * add cpu-shares to ctr ([#5846](https://github.com/containerd/containerd/pull/5846)) * add cpu-shares to ctr * docs: rename master to main (it was opposite on the actual commit) ([#5847](https://github.com/containerd/containerd/pull/5847)) * docs: rename main to master * content: return the error with its timestamp ([#5849](https://github.com/containerd/containerd/pull/5849)) * content: return the error with its timestamp * Fix bad `make protos` failure ([#5857](https://github.com/containerd/containerd/pull/5857)) * Fix bad `make protos` failure * replace cri and point to new location ([#5851](https://github.com/containerd/containerd/pull/5851)) * archive docs and point to new location fix #https://github.com/containerd/cri/issues/1624 * docs: remove FOSSA's badge ([#5856](https://github.com/containerd/containerd/pull/5856)) * docs: remove FOSSA's badge * BUILDING.md: remove some bits about building runc ([#5850](https://github.com/containerd/containerd/pull/5850)) * BUILDING.md: remove some bits about building runc * BUILDING.md: markdown fixes * go.mod: update k8s deps to v1.22.0 ([#5836](https://github.com/containerd/containerd/pull/5836)) * go.mod: update kubernetes to v1.22.0 * [Scripts] Add trap to cri-integration test script ([#5852](https://github.com/containerd/containerd/pull/5852)) * Add trap to cri-integration test script * docs: list all snapshotter-related build flags ([#5848](https://github.com/containerd/containerd/pull/5848)) * docs: list all snapshotter-related build flags * Move plugin context events into separate plugin ([#5835](https://github.com/containerd/containerd/pull/5835)) * Move plugin context events into separate plugin * Fix Linux CI Linter using Go 1.15.14 ([#5839](https://github.com/containerd/containerd/pull/5839)) * Fix Linux CI Linter using go 1.15.14 * Update Go to 1.16.7 ([#5842](https://github.com/containerd/containerd/pull/5842)) * Update Go to 1.16.7 * Cleanup CI ([#5838](https://github.com/containerd/containerd/pull/5838)) * Cleanup CI * Remove redundant build tags ([#5834](https://github.com/containerd/containerd/pull/5834)) * Remove redundant build tags * Change default directories on Darwin ([#5830](https://github.com/containerd/containerd/pull/5830)) * Change default directories on Darwin * [otel-tracing] Initial opentelemetry support ([#5731](https://github.com/containerd/containerd/pull/5731)) * [otel-tracing] vendor and go modules changes * [otel-tracing] Initial opentelemetry support * remove go 1.13 from containerd * Fuzzing: Fix for OSS-fuzz issue 36825 ([#5829](https://github.com/containerd/containerd/pull/5829)) * Fuzzing: Fix for OSS-fuzz issue 36825 * Fuzzing: Add two fuzzers ([#5825](https://github.com/containerd/containerd/pull/5825)) * Fuzzing: Add two more fuzzers * scripts: linting fixes, and remove support for Debian Jessie (as it's EOL) ([#5760](https://github.com/containerd/containerd/pull/5760)) * scripts: declare ROOT closer to where it's used, and some DRY changes * scripts: add missing quotes, and minor linting issues * test/build-utils.sh: remove support for Debian Jessie * platforms: Format(): use path.Join() instead of joinNotEmpty() ([#5821](https://github.com/containerd/containerd/pull/5821)) * platforms: Format(): use path.Join() instead of joinNotEmpty() * Fuzzing: Remove panics of container_fuzzer ([#5823](https://github.com/containerd/containerd/pull/5823)) * Fuzzing: Remove panics of container_fuzzer * Fuzzing: Add container fuzzer ([#5785](https://github.com/containerd/containerd/pull/5785)) * Change protoc link * Split fuzzer to two fuzzers * Fuzzing: Add container fuzzer * runtime: fix the issue of create new socket with abstract address ([#5746](https://github.com/containerd/containerd/pull/5746)) * runtime: fix the issue of create new socket with abstract address * mergo: Upgrade to 0.3.12 to fix panic ([#5809](https://github.com/containerd/containerd/pull/5809)) * mergo: Upgrade to 0.3.12 to fix panic * ci: install criu from PPA ([#5802](https://github.com/containerd/containerd/pull/5802)) * ci: install criu from PPA * Update release workflow to upload binary without CNI ([#5144](https://github.com/containerd/containerd/pull/5144)) * Split release steps into multiple tasks * Update release workflow to upload binary without CNI * Enable critest on Windows Periodic Jobs ([#5725](https://github.com/containerd/containerd/pull/5725)) * Enable critest on Windows * Script to check if entries in go.mod files are in sync ([#5792](https://github.com/containerd/containerd/pull/5792)) * Script to check if entries in go.mod files are in sync * Add a sharedNamespace label ([#5043](https://github.com/containerd/containerd/pull/5043)) * Add shared content label to namespaces * platforms: add "ios" as known OS, "loong64" as known ARCH ([#5784](https://github.com/containerd/containerd/pull/5784)) * platforms: add "ios" as known OS, "loong64" as known ARCH * Updates the location of protobuf downloads ([#5804](https://github.com/containerd/containerd/pull/5804)) * Updates the location of protobuf downloads in docs * Update protobuf install to use correct repository ([#5803](https://github.com/containerd/containerd/pull/5803)) * Update protobuf install to use correct repository * overlay: expose upperdir location of each snapshot via an optional label ([#5624](https://github.com/containerd/containerd/pull/5624)) * overlay: add an optional label of upperdir location of each snapshot * Support SIGRTMIN+n signals ([#5693](https://github.com/containerd/containerd/pull/5693)) * Support SIGRTMIN+n signals * respect context timeout in shim binary call ([#5800](https://github.com/containerd/containerd/pull/5800)) * respect context timeout in shim binary call * Introduce a new go module - containerd/api for use in standalone clients ([#5716](https://github.com/containerd/containerd/pull/5716)) * Introduce a new go module - containerd/api for use in standalone clients * grpc config add options tcp_client_ca_cert ([#5606](https://github.com/containerd/containerd/pull/5606)) * grpc config add options tcp_tls_ca * integration: Windows volume-copy-up images ([#5162](https://github.com/containerd/containerd/pull/5162)) * integration: Windows volume-copy-up images * add CRI support matrix to RELEASES.md ([#5795](https://github.com/containerd/containerd/pull/5795)) * add CRI support matrix to RELEASES.md * adding a little more clarity ([#5794](https://github.com/containerd/containerd/pull/5794)) * adding a little more clarity * update gotestsum to v1.7.0 ([#5793](https://github.com/containerd/containerd/pull/5793)) * update gotestsum to v1.7.0 * Discard blocks when removing a thin device ([#5756](https://github.com/containerd/containerd/pull/5756)) * Discard blocks when removing a thin device * Makefile: fix passing build tags ([#5590](https://github.com/containerd/containerd/pull/5590)) * Makefile: pass build tags to manpage build process * Makefile: fix tags parameter computation * Add runtime label to metrics ([#5744](https://github.com/containerd/containerd/pull/5744)) * Add runtime label to metrics * interface about shim build check ([#5745](https://github.com/containerd/containerd/pull/5745)) * interface about shim build check * integration: log all processes to investigate the test failure ([#5775](https://github.com/containerd/containerd/pull/5775)) * integration: log all processes to investigate the test failure * Fuzzing: Add archive fuzzer ([#5779](https://github.com/containerd/containerd/pull/5779)) * Fuzzing: Add archive fuzzer * Add docker.Fetch fuzzer ([#5687](https://github.com/containerd/containerd/pull/5687)) * Add docker fetch fuzzer * Support custom compressor for walking differ ([#5735](https://github.com/containerd/containerd/pull/5735)) * Support custom compressor for walking differ * remotes/docker/pusher.go: Fix missing Close() on push to docker remote ([#5770](https://github.com/containerd/containerd/pull/5770)) * remotes/docker/pusher.go: Fix missing Close() * remotes/docker/fetcher.go: Fix missing Close() on fetch from docker remote ([#5769](https://github.com/containerd/containerd/pull/5769)) * remotes/docker/fetcher.go: Fix missing Close() * Update cpuguy83/go-md2man binary to v2.0.1 ([#5771](https://github.com/containerd/containerd/pull/5771)) * Update cpuguy83/go-md2man binary to v2.0.1 * Refactor / optimize contrib/Dockerfile.test ([#5750](https://github.com/containerd/containerd/pull/5750)) * Dockerfile.test: build containerd in separate stage * Dockerfile.test: add GOLANG_IMAGE build arg to allow overriding * Dockerfile.test: clean up apt indexes after installing * Dockerfile.test: build critools in a separate stage * Dockerfile.test: build cni in a separate stage * Dockerfile.test: standard directory to collect build aftifacts * Dockerfile.test: split dev stage, and optimize order * Dockerfile.test: skip curl, gcc, git and make install * install-critools: make sure DESTDIR exists * update gotestsum to current master ([#5754](https://github.com/containerd/containerd/pull/5754)) * update gotestsum to current master * Github Security Advisory [GHSA-c72p-9xmj-rx3w](https://github.com/containerd/containerd/security/advisories/GHSA-c72p-9xmj-rx3w) * Add test for archive breakout test for lchmod * Use systemd cgroup driver for Kubernetes e2e tests with cgroupsv2 ([#5755](https://github.com/containerd/containerd/pull/5755)) * Use systemd cgroup driver for cgroupv2 tests * update runc to v1.0.1 ([#5751](https://github.com/containerd/containerd/pull/5751)) * go.mod: runc v1.0.1 * update runc binary to v1.0.1 * runtime: runc v2: remove redundant validation ([#5737](https://github.com/containerd/containerd/pull/5737)) * runtime: runc v2: remove redundant validation * Add timestamp to flaky restart monitor test ([#5727](https://github.com/containerd/containerd/pull/5727)) * Move loop check to before sleep * Add timestamp to flaky restart monitor test * Update Go to 1.16.6 ([#5722](https://github.com/containerd/containerd/pull/5722)) * integration/client: go mod tidy * Update Go to 1.16.6 * client: surface a connection error more clearly ([#4447](https://github.com/containerd/containerd/pull/4447)) * client: surface a connection error more clearly * Fix missing Body.Close() calls on push to docker remote ([#5712](https://github.com/containerd/containerd/pull/5712)) * Fix missing Body.Close() calls on push to docker remote * remove pkg/cri/platforms package ([#5710](https://github.com/containerd/containerd/pull/5710)) * remove pkg/cri/platforms package * Allow WithServices to use custom implementations ([#5709](https://github.com/containerd/containerd/pull/5709)) * Allow WithServices to use custom implementations * [Vendor] Update hcsshim to 0.8.18 ([#5673](https://github.com/containerd/containerd/pull/5673)) * [Vendor] Update hcsshim to 0.8.18 * test integration: Adds a test that restarts a failed container ([#5578](https://github.com/containerd/containerd/pull/5578)) * test integration: Adds a test that restarts a failed container * [CRI] move up to CRI v1 and support v1alpha in parallel ([#5619](https://github.com/containerd/containerd/pull/5619)) * use fu wei's suggeted interface pick for marshaling * add alpha version * move up to CRI v1 and support v1alpha in parallel * gha: make release workflow work in forks ([#5682](https://github.com/containerd/containerd/pull/5682)) * gha: make release workflow work in forks * Add unit test for plugin ([#5666](https://github.com/containerd/containerd/pull/5666)) * Add unit test for plugin * Dockerfile.test: add "cri-in-userns" (aka rootless) test stage ([#5700](https://github.com/containerd/containerd/pull/5700)) * Dockerfile.test: add "cri-in-userns" (aka rootless) test stage * Update for distribution spec 1.0 ([#5676](https://github.com/containerd/containerd/pull/5676)) * Add support for registry host path override * Update documenation for OCI distribution 1.0 * archive: cleanup lchmod logic ([#5702](https://github.com/containerd/containerd/pull/5702)) * Cleanup lchmod logic in archive * Install specific golang version in Windows CI. ([#5571](https://github.com/containerd/containerd/pull/5571)) * Install specific golang version in Windows CI. * Add ctr command label in NewContainerOpts ([#5660](https://github.com/containerd/containerd/pull/5660)) * feat: Add snapshotter label to the new snapshot for container. * snapshot/devmapper: log exported methods correctly ([#5655](https://github.com/containerd/containerd/pull/5655)) * snapshot/devmapper: log exported methods correctly * Makefile: fix DESTDIR and PREFIX concatenation ([#5662](https://github.com/containerd/containerd/pull/5662)) * Makefile: fix DESTDIR and PREFIX concatenation * Cri integration cleanup ([#5287](https://github.com/containerd/containerd/pull/5287)) * tests: Use EnsureImageExists for image pulling * tests: Refactors PodSandbox creation * move sys.FMountat() into mount package and un-export ([#5641](https://github.com/containerd/containerd/pull/5641)) * un-export mount.FMountat * move sys.FMountat() into mount package * sandbox: send pod UID to CNI plugins as K8S_POD_UID ([#5640](https://github.com/containerd/containerd/pull/5640)) * sandbox: send pod UID to CNI plugins as K8S_POD_UID * sys: remove StatAtime(), StatCtime(), StatMtime() and StatATimeAsTime() utils ([#5639](https://github.com/containerd/containerd/pull/5639)) * sys: remove StatAtime(), StatCtime(), StatMtime() and StatATimeAsTime() utils * content/local: inline sys.StatATimeAsTime() ([#5633](https://github.com/containerd/containerd/pull/5633)) * content/local: inline sys.StatATimeAsTime() * allow multi gpu to be specified via ctr ([#5636](https://github.com/containerd/containerd/pull/5636)) * allow multi gpu to be specified via ctr * go.mod: runc v1.0.0 * update runc binary to v1.0.0 GA * fixing some doc links ([#5629](https://github.com/containerd/containerd/pull/5629)) * fixing some doc links * Sync integration/go.mod with root go.mod ([#5623](https://github.com/containerd/containerd/pull/5623)) * Sync integration/go.mod with root go.mod * archive: Expose ChangeWriter to allow customized diff computing ([#5615](https://github.com/containerd/containerd/pull/5615)) * archive: Expose ChangeWriter to allow customized diff computing * CI: Switch to the available latest images ([#5625](https://github.com/containerd/containerd/pull/5625)) * CI: Switch to available latest images * fix deprecation config for default runtime * Re-enable criu in main integration runs ([#5614](https://github.com/containerd/containerd/pull/5614)) * Re-enable criu in main integration runs * runtime,v2: Enable debug when containerd is on debug+ log level ([#5617](https://github.com/containerd/containerd/pull/5617)) * runtime,v2: Enable debug when containerd is on debug+ log level * github.com/golang/protobuf/proto is deprecated * Update github.com/golang/protobuf from v1.3.5 to v1.4.3 * Update google.golang.org/grpc from v1.27.1 to v1.38.0 * Increase golangci-lint timeout * ctr flags of container rootfs propagation ([#5611](https://github.com/containerd/containerd/pull/5611)) * command line flags of setting container rootfs propagation * add cgroupv2 setup for cos with a flag * Update gotestsum to add timestamps to junit output ([#5612](https://github.com/containerd/containerd/pull/5612)) * Update gotestsum to add timestamps to junit output * Allow to pass --no-cgroups option to nvidia-container-cli ([#5604](https://github.com/containerd/containerd/pull/5604)) * Allow to pass --no-cgroup option to nvidia-container-cli * Makefile: FHS conformant manpage installation pathes ([#5577](https://github.com/containerd/containerd/pull/5577)) * Makefile: FHS conformant manpage installation pathes * Add proper Go version before project checks ([#5594](https://github.com/containerd/containerd/pull/5594)) * Add proper Go version before project checks * Enable cri-integration in Windows Periodic Tests ([#5580](https://github.com/containerd/containerd/pull/5580)) * Enable cri-integration in Windows Periodic Tests * adds explanation for seccomp unset/unconfined default vs runtime default ([#5573](https://github.com/containerd/containerd/pull/5573)) * adds explanation for seccomp unset/unconfined default vs runtime default * Fix cleanup context of teardownPodNetwork ([#5569](https://github.com/containerd/containerd/pull/5569)) * Fix cleanup context of teardownPodNetwork * update integration/client go.sum ([#5572](https://github.com/containerd/containerd/pull/5572)) * update integration/client go.sum * Revert diff/walking error change ([#5566](https://github.com/containerd/containerd/pull/5566)) * Revert diff/walking error change * Update opencontainers/selinux to v1.8.2 ([#5562](https://github.com/containerd/containerd/pull/5562)) * Update opencontainers/selinux to v1.8.2 * fix invalid validation error checking ([#5565](https://github.com/containerd/containerd/pull/5565)) * fix invalid validation error checking * diff/walking: fix defer cleanup ([#5551](https://github.com/containerd/containerd/pull/5551)) * diff/walking: fix defer cleanup * Windows periodic job: Add creation timestamp to RG ([#5559](https://github.com/containerd/containerd/pull/5559)) * Add creation timestamp to RG * Fix error case in Windows layer cleanup ([#5328](https://github.com/containerd/containerd/pull/5328)) * Fix error case in Windows layer cleanup * Use DeactivateLayer to unlock layers that we cannot rename ([#5422](https://github.com/containerd/containerd/pull/5422)) * Small typo fix "reimporst" * Use DeactivateLayer to recover layers that we cannot rename * tests: Symlink volume tests ([#5284](https://github.com/containerd/containerd/pull/5284)) * tests: Symlink volume tests * Makefile: fix DESTDIR environment variable behaviour ([#5535](https://github.com/containerd/containerd/pull/5535)) * Makefile: fix DESTDIR environment variable behaviour * Change Wrapf of non-error to an actual error ([#5560](https://github.com/containerd/containerd/pull/5560)) * Change Wrapf of non-error to an actual error * Install apparmor parser for arm64 environment * scrub the stale TODO ([#5536](https://github.com/containerd/containerd/pull/5536)) * scrub the stale TODO * docs: explicitly mention containerd's Prometheus path ([#5554](https://github.com/containerd/containerd/pull/5554)) * docs: explicitly mention containerd's Prometheus path * integration: Cleanup containerd on test teardown ([#5553](https://github.com/containerd/containerd/pull/5553)) * integration: Cleanup containerd on test teardown * docs/cri: update links ([#5548](https://github.com/containerd/containerd/pull/5548)) * docs/cri: update ocicrypt link * docs/cri: fix broken links * Update Windows periodic tests ([#5544](https://github.com/containerd/containerd/pull/5544)) * Update Windows periodic tests * Add CI periodic Windows Jobs. ([#5165](https://github.com/containerd/containerd/pull/5165)) * Schedule Windows job daily after midnight. * Update windows-periodic.yml * Add CI periodic Windows Jobs. * Rename atomicWrite to writeToCompletion ([#5273](https://github.com/containerd/containerd/pull/5273)) * Rename atomicWrite to writeToCompletion * Do not run btrfs tests if btrfs kernel module is not loaded ([#5539](https://github.com/containerd/containerd/pull/5539)) * Do not run btrfs tests if btrfs kernel module is not loaded * Fix incorrect UA used for registry authentication ([#5533](https://github.com/containerd/containerd/pull/5533)) * Fix incorrect UA used for registry authentication * ctr: parse mount options with embedded = character ([#5531](https://github.com/containerd/containerd/pull/5531)) * ctr: parse mount options with embedded = character * Fix mounts for FreeBSD ([#5472](https://github.com/containerd/containerd/pull/5472)) * Add ruleset=4 option * Remove mountpoints not commonly mounted on FreeBSD * Add copyright header & make sure compilation succeeds on all platforms * Fix mounts for FreeBSD * ctr: make exec pty behavior consistent with run ([#5527](https://github.com/containerd/containerd/pull/5527)) * ctr: exec handle pty resize after Start * ctr: exec setup IO with console * Makefile: use $@ for target file names ([#5534](https://github.com/containerd/containerd/pull/5534)) * Makefile: use $@ for target file names * Fix small typo ([#5528](https://github.com/containerd/containerd/pull/5528)) * Fix small typo * Don't check for apparmor_parser to be present ([#5519](https://github.com/containerd/containerd/pull/5519)) * update the link * Don't check for apparmor_parser to be present * Remove useless lines ([#5520](https://github.com/containerd/containerd/pull/5520)) * Remove useless lines * Fixed typos in docs ([#5509](https://github.com/containerd/containerd/pull/5509)) * fixed typos * Try next mirror in case of non-404 errors, too ([#5275](https://github.com/containerd/containerd/pull/5275)) * Try next mirror in case of non-404 errors, too * bump runc version to v1.0.0-rc95 ([#5514](https://github.com/containerd/containerd/pull/5514)) * bump runc version to v1.0.0-rc95 * update runc binary to v1.0.0-rc95 ([#5511](https://github.com/containerd/containerd/pull/5511)) * update runc binary to v1.0.0-rc95 * Bump github.com/Microsoft/go-winio from 0.4.15 to 0.5.0 ([#5508](https://github.com/containerd/containerd/pull/5508)) * Bump github.com/Microsoft/go-winio from 0.4.15 to 0.5.0 * Bump github.com/opencontainers/selinux from 1.8.0 to 1.8.1 ([#5507](https://github.com/containerd/containerd/pull/5507)) * Bump github.com/opencontainers/selinux from 1.8.0 to 1.8.1 * Makefile: allow overriding install command via environment ([#5493](https://github.com/containerd/containerd/pull/5493)) * Makefile: allow overriding install command via environment * tests: Adds support for Windows cri-integration tests ([#5163](https://github.com/containerd/containerd/pull/5163)) * tests: Adds support for Windows cri-integration tests * Update docker resolver to authorize redirects ([#5504](https://github.com/containerd/containerd/pull/5504)) * Update docker resolver to authorize redirects * bump hcsshim version to v0.8.17 ([#5505](https://github.com/containerd/containerd/pull/5505)) * bump hcsshim version to v0.8.17 * Release binary update for imgcrypt ([#5498](https://github.com/containerd/containerd/pull/5498)) * just release ctd-decoder not ctr-enc * Merge remote-tracking branch 'upstream/master' * Pin integration test image for alpine * cri-integration tests: Pull images once ([#5313](https://github.com/containerd/containerd/pull/5313)) * tests: Prepull images used in tests * plugin: optimize the check for the last registration ([#5440](https://github.com/containerd/containerd/pull/5440)) * plugin: optimize the check for the last registration * metadata: modify NewLeaseManager to return leases.Manager ([#5465](https://github.com/containerd/containerd/pull/5465)) * metadata: modify NewLeaseManager to return leases.Manager * Skip TLS verification for localhost ([#5100](https://github.com/containerd/containerd/pull/5100)) * Skip TLS verification for localhost * Merge remote-tracking branch 'upstream/master' * Makefile: make sure manpages are built before install-man ([#5492](https://github.com/containerd/containerd/pull/5492)) * Makefile: make sure manpages are built before install-man * adds description for hosts.toml ([#5309](https://github.com/containerd/containerd/pull/5309)) * adds credentials description * adds description for hosts.toml * Prepare default branch rename ([#5459](https://github.com/containerd/containerd/pull/5459)) * Prepare default branch rename * Merge remote-tracking branch 'upstream/master' * Update runc to rc94 ([#5473](https://github.com/containerd/containerd/pull/5473)) * Update vendored runc to v1.0.0.0-rc94 * Update the runc binary used with containerd to runc v1.0.0-rc94 * Fix `content.ReaderAt` close ([#5468](https://github.com/containerd/containerd/pull/5468)) * Fix content.ReaderAt close * Update releases doc with updated support timeline ([#5466](https://github.com/containerd/containerd/pull/5466)) * Update releases doc with updated support timeline * tests: add test for adaptor ([#5452](https://github.com/containerd/containerd/pull/5452)) * tests: add test for adaptor * Makefile: allow overriding go command by environment ([#5450](https://github.com/containerd/containerd/pull/5450)) * Makefile: allow overriding go command by environment * update to new cri-tools make install ([#5462](https://github.com/containerd/containerd/pull/5462)) * update to new cri-tools make install * Update Go to 1.16.4 ([#5461](https://github.com/containerd/containerd/pull/5461)) * Update Go to 1.16.4 * Merge remote-tracking branch 'upstream/release/1.5' * [release/1.5] go.mod: cut circular dependency on github.com/containerd/containerd ([#5457](https://github.com/containerd/containerd/pull/5457)) * go.mod: cut circular dependency on github.com/containerd/containerd * integration/client: go mod tidy * oci: fix WithDevShmSize ([#5063](https://github.com/containerd/containerd/pull/5063)) * oci: fix WithDevShmSize * [release/1.5] cherry-pick: windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink ([#5454](https://github.com/containerd/containerd/pull/5454)) * windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink * windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink ([#5411](https://github.com/containerd/containerd/pull/5411)) * windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink * doc: add missing namespaces package ([#5448](https://github.com/containerd/containerd/pull/5448)) * doc: add missing namespaces package * update seccomp version ([#5445](https://github.com/containerd/containerd/pull/5445)) * update seccomp version * Update golang.org/x/sys to add linux/ppc support ([#5436](https://github.com/containerd/containerd/pull/5436)) * Update golang.org/x/sys to add linux/ppc support * go.mod: cut circular dependency on github.com/containerd/containerd ([#5441](https://github.com/containerd/containerd/pull/5441)) * go.mod: cut circular dependency on github.com/containerd/containerd * integration/client: go mod tidy * Fix different registry hosts referencing the same auth config. ([#5446](https://github.com/containerd/containerd/pull/5446)) * Fix different registry hosts referencing the same auth config. </p> </details> ### Changes from containerd/cgroups <details><summary>33 commits</summary> <p> * v2: Fix inotify fd leak when cgroup is deleted ([#212](https://github.com/containerd/cgroups/pull/212)) * v2: add test case for Manager.EventChan() behavior * v2: flip error handling for readKVStat("memory.events") to reduce indentation * v2: manager: factor out memory.events parsing * v2: Fix inotify leak when cgroup is deleted * fix Implicit memory aliasing in for loop ([#214](https://github.com/containerd/cgroups/pull/214)) * fix Implicit memory aliasing in for loop * Fix potential dirfd leak. ([#210](https://github.com/containerd/cgroups/pull/210)) * Fix potential dirfd leak. * cgroup: Optionally add process and task to a subsystems subset ([#203](https://github.com/containerd/cgroups/pull/203)) * cgroup: Optionally add process and task to a subsystems subset * replace pkg/errors from vendor ([#208](https://github.com/containerd/cgroups/pull/208)) * replace pkg/errors from vendor * cgroup.go: avoid panic on nil interface ([#207](https://github.com/containerd/cgroups/pull/207)) * cgroup.go: avoid panic on nil interface * Improvements on cgroup v2 support ([#204](https://github.com/containerd/cgroups/pull/204)) * cgroupv2: reset lastErr to nil when subtree control is successfully written * cgroupv2: enable controllers before setting resources in NewChild() * v2: remove unimplemented errors and ErrorHandler, IgnoreNotExist ([#201](https://github.com/containerd/cgroups/pull/201)) * v2: remove ErrorHandler and IgnoreNotExist as they are not implemented * v2: remove errors that are never returned * v1: reduce duplicated code ([#202](https://github.com/containerd/cgroups/pull/202)) * v1: reduce duplicated code * cgroup v1: implement AddProc() ([#200](https://github.com/containerd/cgroups/pull/200)) * cgroup v1: implement AddProc() * Rename branch from master to main ([#199](https://github.com/containerd/cgroups/pull/199)) * Rename branch from master to main * utils: export ParseCgroupFile() ([#197](https://github.com/containerd/cgroups/pull/197)) * utils: export ParseCgroupFile() * go.mod: coreos/go-systemd/v22 v22.3.2 to prepare for deprecations ([#194](https://github.com/containerd/cgroups/pull/194)) * go.mod: coreos/go-systemd/v22 v22.3.2 to prepare for deprecations * Use /proc/partitions to get device names ([#195](https://github.com/containerd/cgroups/pull/195)) * Use /proc/partitions to get device names </p> </details> ### Changes from containerd/console <details><summary>6 commits</summary> <p> * Fix CI ([#55](https://github.com/containerd/console/pull/55)) * Fix CI * Stop using pkg/errors * Add support for z/OS ([#46](https://github.com/containerd/console/pull/46)) * Console test on z/OS * Add support for z/OS </p> </details> ### Changes from containerd/continuity <details><summary>28 commits</summary> <p> * fs: use syscall.Timespec.Unix ([#193](https://github.com/containerd/continuity/pull/193)) * fs: use syscall.Timespec.Unix * Update CI Go version to 1.17 ([#192](https://github.com/containerd/continuity/pull/192)) * Update CI Go version to 1.17 * Build containerd/continuity on multiple Unix OSes ([#190](https://github.com/containerd/continuity/pull/190)) * Build containerd/continuity on multiple Unix OSes * Do not log errors before returning them ([#191](https://github.com/containerd/continuity/pull/191)) * Do not log errors before returning them * Copy Windows file metadata ([#188](https://github.com/containerd/continuity/pull/188)) * Copy Windows file metadata * fix fmt.Errorf("%w", err) on err == nil ([#187](https://github.com/containerd/continuity/pull/187)) * fix fmt.Errorf("%w", err) on err == nil * Remove direct dependency on github.com/pkg/errors ([#185](https://github.com/containerd/continuity/pull/185)) * run gofmt with Go 1.17 * remove direct dependency on github.com/pkg/errors * Fix darwin issues ([#186](https://github.com/containerd/continuity/pull/186)) * update AUTHORS * darwin: use utimensat syscall instead of utimes * fix darwin usage of du command * go.mod: bazil.org/fuse v0.0.0-20200407214033-5883e5a4b5125 ([#161](https://github.com/containerd/continuity/pull/161)) * go.mod: bazil.org/fuse v0.0.0-20200407214033-5883e5a4b5125 * fs/stat: add FreeBSD, and cleanup some nolint-comments ([#184](https://github.com/containerd/continuity/pull/184)) * reformat nolint comments * fs/stat: add FreeBSD * Rename branch from master to main ([#182](https://github.com/containerd/continuity/pull/182)) * Rename branch from master to main * testutil/loopback: print more debug info ([#180](https://github.com/containerd/continuity/pull/180)) * testutil/loopback: print more debug info </p> </details> ### Changes from containerd/go-cni <details><summary>18 commits</summary> <p> * run setup on networks in parallel ([#76](https://github.com/containerd/go-cni/pull/76)) * switch to direct index * run setup on networks in parallel * remove: Continue on "not found" errors ([#74](https://github.com/containerd/go-cni/pull/74)) * remove: Continue on "not found" errors * go.mod: github.com/containernetworking/cni v1.0.1 ([#72](https://github.com/containerd/go-cni/pull/72)) * go.mod: github.com/containernetworking/cni v1.0.1 * remove direct dependency on github.com/pkg/errors ([#71](https://github.com/containerd/go-cni/pull/71)) * remove direct dependency on github.com/pkg/errors * update CNI to v1.0.0 ([#70](https://github.com/containerd/go-cni/pull/70)) * test: add TestLibCNIType100 * update CNI to v1.0.0 * Rename branch from master to main ([#69](https://github.com/containerd/go-cni/pull/69)) * Rename branch from master to main * result: change Raw from a struct field to a method ([#68](https://github.com/containerd/go-cni/pull/68)) * result: change Raw from a struct field to a method * result: expose raw result ([#67](https://github.com/containerd/go-cni/pull/67)) * result: expose raw result </p> </details> ### Changes from containerd/imgcrypt <details><summary>32 commits</summary> <p> * CHANGES: Updated CHANGES document for 1.1.3 release ([#64](https://github.com/containerd/imgcrypt/pull/64)) * CHANGES: Updated CHANGES document for 1.1.3 release * docs: update project branch to main ([#63](https://github.com/containerd/imgcrypt/pull/63)) * docs: update project branch to main * Update linter to match containerd repo ([#61](https://github.com/containerd/imgcrypt/pull/61)) * Update linter to match containerd repo * update CI golang version * Bump github.com/containerd/containerd from 1.5.7 to 1.5.8 ([#59](https://github.com/containerd/imgcrypt/pull/59)) * Bump github.com/containerd/containerd from 1.5.7 to 1.5.8 * maint: Update to ocicrypt v1.1.2 ([#57](https://github.com/containerd/imgcrypt/pull/57)) * maint: Update to ocicrypt v1.1.2 * Decouple CreateCryptoConfig() from github.com/urfave/cli ([#56](https://github.com/containerd/imgcrypt/pull/56)) * Decouple CreateCryptoConfig() from github.com/urfave/cli * Bump github.com/containerd/containerd from 1.5.5 to 1.5.7 ([#55](https://github.com/containerd/imgcrypt/pull/55)) * Bump github.com/containerd/containerd from 1.5.5 to 1.5.7 * replace pkg/errors and bump related library * README: Fix CRI decryption document URL ([#53](https://github.com/containerd/imgcrypt/pull/53)) * README: Fix CRI decryption document URL * Bump github.com/containerd/containerd from 1.5.2 to 1.5.4 ([#52](https://github.com/containerd/imgcrypt/pull/52)) * Bump github.com/containerd/containerd from 1.5.2 to 1.5.4 * Bump containerd to 1.5.2 ([#51](https://github.com/containerd/imgcrypt/pull/51)) * Bump containerd to 1.5.2 * images: Implement ConvertFunc for image en- and decryption ([#49](https://github.com/containerd/imgcrypt/pull/49)) * images: Implement ConvertFunc for image en- and decryption * Add containerd-release to makefile ([#48](https://github.com/containerd/imgcrypt/pull/48)) * Remove ctr-enc from installation * vendor sync up with containerd 1.5 ga, and runc94 ([#47](https://github.com/containerd/imgcrypt/pull/47)) * sync up with containerd 1.5 ga, and runc94 * Sync ctr-enc with containerd's ctr v1.5.0-rc.3 ([#46](https://github.com/containerd/imgcrypt/pull/46)) * CICD: Run 'apt update' before pulling packages * ctr-enc: Set the version for ctr-enc when linking * Sync ctr-enc with containerd's ctr v1.5.0-rc.3 </p> </details> ### Changes from containerd/ttrpc <details><summary>34 commits</summary> <p> * Add protoc-gen-go-ttrpc ([#96](https://github.com/containerd/ttrpc/pull/96)) * Add protoc-gen-go-ttrpc * client: Handle sending/receiving in separate goroutines ([#94](https://github.com/containerd/ttrpc/pull/94)) * client: Handle sending/receiving in separate goroutines * Run Protobuild in GitHub Actions ([#95](https://github.com/containerd/ttrpc/pull/95)) * Run Protobuild in GitHub Actions * Re-generate example.pb.go * replace pkg/errors ([#93](https://github.com/containerd/ttrpc/pull/93)) * replace pkg/errors from vendor * Rename branch from master to main ([#86](https://github.com/containerd/ttrpc/pull/86)) * Rename branch from master to main * Make "go test" and "go build" work on macOS ([#85](https://github.com/containerd/ttrpc/pull/85)) * Make the example command buildable on macOS * Run GitHub Actions on macOS * Make "go test" work on macOS * Return Unimplemented when services or methods are not implemented ([#83](https://github.com/containerd/ttrpc/pull/83)) * Return Unimplemented when services or methods are not implemented * Remove "Very new" and checked TODO items ([#84](https://github.com/containerd/ttrpc/pull/84)) * Remove "Very new" and checked TODO items * removing glide from ignore ([#82](https://github.com/containerd/ttrpc/pull/82)) * removing glide from ignore * go.mod: update dependencies ([#79](https://github.com/containerd/ttrpc/pull/79)) * go.mod: github.com/prometheus/procfs v0.6.0 * go.mod: google.golang.org/genproto v0.0.0-20200224152610-e50cd9704f63 * go.mod: google.golang.org/grpc v1.27.1 * go.mod: github.com/gogo/protobuf v1.3.2 * remove travis, add codecov badge ([#78](https://github.com/containerd/ttrpc/pull/78)) * CI: add codecov badge to readme * CI: remove travis * Use GitHub Actions for CI ([#77](https://github.com/containerd/ttrpc/pull/77)) * Use GitHub Actions for CI * go.mod: sirupsen/logrus v1.7.0 ([#76](https://github.com/containerd/ttrpc/pull/76)) * go.mod: sirupsen/logrus v1.7.0 * go mod tidy </p> </details> ### Dependency Changes * **cloud.google.com/go** v0.81.0 **_new_** * **github.com/AdaLogics/go-fuzz-headers** 6c3934b029d8 **_new_** * **github.com/Microsoft/go-winio** v0.4.17 -> v0.5.1 * **github.com/Microsoft/hcsshim** v0.8.16 -> v0.9.2 * **github.com/blang/semver** v3.5.1 **_new_** * **github.com/cenkalti/backoff/v4** v4.1.2 **_new_** * **github.com/cespare/xxhash/v2** v2.1.1 -> v2.1.2 * **github.com/cilium/ebpf** v0.4.0 -> v0.7.0 * **github.com/containerd/cgroups** v1.0.1 -> v1.0.3 * **github.com/containerd/console** v1.0.2 -> v1.0.3 * **github.com/containerd/continuity** v0.1.0 -> v0.2.2 * **github.com/containerd/go-cni** v1.0.2 -> v1.1.1 * **github.com/containerd/imgcrypt** v1.1.1 -> v1.1.3 * **github.com/containerd/ttrpc** v1.0.2 -> v1.1.0 * **github.com/containernetworking/cni** v0.8.1 -> v1.0.1 * **github.com/containernetworking/plugins** v0.9.1 -> v1.0.1 * **github.com/containers/ocicrypt** v1.1.1 -> v1.1.2 * **github.com/coreos/go-systemd/v22** v22.1.0 -> v22.3.2 * **github.com/go-logr/logr** v0.2.0 -> v1.2.2 * **github.com/go-logr/stdr** v1.2.2 **_new_** * **github.com/godbus/dbus/v5** v5.0.3 -> v5.0.6 * **github.com/golang/groupcache** 8c9f03a8e57e -> 41bb18bfe9da * **github.com/golang/protobuf** v1.3.5 -> v1.5.2 * **github.com/google/go-cmp** v0.5.4 -> v0.5.6 * **github.com/google/gofuzz** v1.1.0 -> v1.2.0 * **github.com/grpc-ecosystem/go-grpc-middleware** v1.3.0 **_new_** * **github.com/grpc-ecosystem/grpc-gateway** v1.16.0 **_new_** * **github.com/hashicorp/errwrap** v1.0.0 -> v1.1.0 * **github.com/hashicorp/go-multierror** v1.0.0 -> v1.1.1 * **github.com/imdario/mergo** v0.3.11 -> v0.3.12 * **github.com/intel/goresctrl** v0.2.0 **_new_** * **github.com/json-iterator/go** v1.1.10 -> v1.1.12 * **github.com/moby/spdystream** v0.2.0 **_new_** * **github.com/moby/sys/mountinfo** v0.4.1 -> v0.5.0 * **github.com/moby/sys/signal** v0.6.0 **_new_** * **github.com/moby/sys/symlink** v0.1.0 -> v0.2.0 * **github.com/modern-go/reflect2** v1.0.1 -> v1.0.2 * **github.com/opencontainers/image-spec** v1.0.1 -> 693428a734f5 * **github.com/opencontainers/runc** v1.0.0-rc93 -> v1.1.0 * **github.com/opencontainers/runtime-spec** e6143ca7d51d -> 1c3f411f0417 * **github.com/opencontainers/selinux** v1.8.0 -> v1.10.0 * **github.com/pelletier/go-toml** v1.8.1 -> v1.9.3 * **github.com/prometheus/client_golang** v1.7.1 -> v1.11.0 * **github.com/prometheus/common** v0.10.0 -> v0.30.0 * **github.com/prometheus/procfs** v0.6.0 -> v0.7.3 * **github.com/satori/go.uuid** v1.2.0 **_new_** * **github.com/sirupsen/logrus** v1.7.0 -> v1.8.1 * **github.com/spf13/pflag** v1.0.5 **_new_** * **github.com/stretchr/testify** v1.6.1 -> v1.7.0 * **github.com/vishvananda/netlink** f5de75959ad5 **_new_** * **github.com/vishvananda/netns** 2eb08e3e575f **_new_** * **go.etcd.io/bbolt** v1.3.5 -> v1.3.6 * **go.opencensus.io** v0.22.3 -> v0.23.0 * **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc** v0.28.0 **_new_** * **go.opentelemetry.io/otel** v1.3.0 **_new_** * **go.opentelemetry.io/otel/exporters/otlp/internal/retry** v1.3.0 **_new_** * **go.opentelemetry.io/otel/exporters/otlp/otlptrace** v1.3.0 **_new_** * **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc** v1.3.0 **_new_** * **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp** v1.3.0 **_new_** * **go.opentelemetry.io/otel/sdk** v1.3.0 **_new_** * **go.opentelemetry.io/otel/trace** v1.3.0 **_new_** * **go.opentelemetry.io/proto/otlp** v0.11.0 **_new_** * **golang.org/x/crypto** 0c34fe9e7dc2 -> 32db794688a5 * **golang.org/x/net** e18ecbb05110 -> fe4d6282115f * **golang.org/x/oauth2** bf48bf16ab8d -> 2bc19b11175f * **golang.org/x/sync** 09787c993a3a -> 036812b2e83c * **golang.org/x/sys** 47abb6519492 -> 1d35b9e2eb4e * **golang.org/x/term** 7de9c90e9dd1 -> 6886f2dfbf5b * **golang.org/x/text** v0.3.4 -> v0.3.7 * **golang.org/x/time** 3af7569d3a1e -> 1f47c861a9ac * **google.golang.org/appengine** v1.6.5 -> v1.6.7 * **google.golang.org/grpc** v1.27.1 -> v1.43.0 * **google.golang.org/protobuf** v1.27.1 **_new_** * **gopkg.in/yaml.v3** 9f266ea9e77c -> 496545a6307b * **k8s.io/api** v0.20.6 -> v0.22.5 * **k8s.io/apimachinery** v0.20.6 -> v0.22.5 * **k8s.io/apiserver** v0.20.6 -> v0.22.5 * **k8s.io/client-go** v0.20.6 -> v0.22.5 * **k8s.io/component-base** v0.20.6 -> v0.22.5 * **k8s.io/cri-api** v0.20.6 -> v0.23.1 * **k8s.io/klog/v2** v2.4.0 -> v2.30.0 * **k8s.io/utils** 67b214c5f920 -> cb0fa318a74b * **sigs.k8s.io/structured-merge-diff/v4** v4.0.3 -> v4.1.2 Previous release can be found at [v1.5.0](https://github.com/containerd/containerd/releases/tag/v1.5.0)
-
v1.6.0-rc.2
containerd 1.6.0-rc.1 Welcome to the v1.6.0-rc.1 release of containerd! The seventh major release of containerd includes many improvements and added support to increase overall compatibility and stability. ### Highlights #### Runtime * **Add runtime label to metrics** ([#5744](https://github.com/containerd/containerd/pull/5744)) * **Cleanup task delete logic in v2 shim** ([#5813](https://github.com/containerd/containerd/pull/5813)) * **Add support for shim plugins** ([#5817](https://github.com/containerd/containerd/pull/5817)) * **Handle sigint and sigterm in shimv2** ([#5828](https://github.com/containerd/containerd/pull/5828)) * **Decouple shim and task manager** ([#5918](https://github.com/containerd/containerd/pull/5918)) * **Add runc shim support for core scheduling** ([#6011](https://github.com/containerd/containerd/pull/6011)) * **Update shim client connect attempt to fail fast when shim errors** ([#6031](https://github.com/containerd/containerd/pull/6031)) * **Add support for absolute path to shim binaries** ([#6206](https://github.com/containerd/containerd/pull/6206)) * **Update runc to v1.1.0** ([#6375](https://github.com/containerd/containerd/pull/6375)) #### Windows * **Add support for Windows HostProcess containers** ([#5131](https://github.com/containerd/containerd/pull/5131)) * **Add support for Windows resource limits** ([#5778](https://github.com/containerd/containerd/pull/5778)) #### CRI * **Add CNI configuration based on runtime class** ([#4695](https://github.com/containerd/containerd/pull/4695)) * **Add support for Intel RDT** ([#5439](https://github.com/containerd/containerd/pull/5439)) * **Add support for CRI v1 and v1alpha in parallel** ([#5619](https://github.com/containerd/containerd/pull/5619)) * **Add support for unified resources field for cgroups v2** ([#5627](https://github.com/containerd/containerd/pull/5627)) * **Add IP preference configuration for reporting pod IP** ([#5964](https://github.com/containerd/containerd/pull/5964)) * **Implement new CRI pod sandbox stats API** ([#6113](https://github.com/containerd/containerd/pull/6113)) * **Add sandbox and container latency metrics** ([#6111](https://github.com/containerd/containerd/pull/6111)) * **Add namespace to ttrpc and grpc plugin connections** ([#6130](https://github.com/containerd/containerd/pull/6130)) * **Add option to allow ping sockets and privileged ports with no capabilities** ([#6170](https://github.com/containerd/containerd/pull/6170)) * **Add support for configuring swap** ([#6320](https://github.com/containerd/containerd/pull/6320)) #### Other * **Add support for client TLS Auth for grpc** ([#5606](https://github.com/containerd/containerd/pull/5606)) * **Add xfs support for devicemapper snapshotter** ([#5610](https://github.com/containerd/containerd/pull/5610)) * **Add metric exposing build version and revision** ([#5965](https://github.com/containerd/containerd/pull/5965)) * **Add support for custom fs options in devmapper snapshotter** ([#6122](https://github.com/containerd/containerd/pull/6122)) * **Update introspection service to show GRPC plugins** ([#6432](https://github.com/containerd/containerd/pull/6432)) #### Client * **Allow WithServices to use custom implementations** ([#5709](https://github.com/containerd/containerd/pull/5709)) * **Support custom compressor for walking differ** ([#5735](https://github.com/containerd/containerd/pull/5735)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Derek McGowan * Phil Estes * Akihiro Suda * Wei Fu * Maksym Pavlenko * Sebastiaan van Stijn * Michael Crosby * Kazuyoshi Kato * Mike Brown * Claudiu Belu * Daniel Canter * haoyun * Brian Goff * Gabriel Adrian Samfira * Stefan Berger * zounengren * AdamKorcz * Adelina Tuvenie * Kohei Tokunaga * Davanum Srinivas * Nashwan Azhari * Samuel Karp * Shiming Zhang * Enrico Weigelt, metux IT consult * Markus Lehtonen * Alakesh Haloi * Hajime Tazaki * Iceber Gu * Kevin Parsons * Aditi Sharma * David Porter * Gijs Peskens * Jeremi Piotrowski * ningmingxiao * Brandon Lum * Cody Roseborough * Danielle Lancashire * Jacob MacElroy * Tõnis Tiigi * dependabot[bot] * wanglei * Alexandre Peixoto Ferreira * Fabiano Fidêncio * Furkan Türkal * Jiaming Xu * Kir Kolyshkin * Miao Wang * Neil Johnson * Paul "TBBle" Hampson * Priyanka Saggu * Romain Aviolat * Samuel Ortiz * Sunghoon Kang * Takumasa Sakao * Tobias Klauser * Zhiyu Li * ye.sijun * Alexander Minbaev * Alexey Ivanov * Artem Khramov * Aurelien Lun-Sin * Ben Hutchings * Cory Bennett * Da McGrady * Dan Williams * Eng Zer Jun * Eric Ernst * Ethan Chen * Fupan Li * Gaurav Gahlot * Gunju Kim * Jacob Blain Christen * James Sturtevant * Jan Klippel * Jayme Howard * Jiajun Jiang * Jintao Zhang * Justin Terry * Kaijie Chen * Kante * Kern Walster * Kitt Hsu * Lantao Liu * Ma Xinjian * Manabu Sugimoto * Manuel Alejandro de Brito Fontes * Mark Rossetti * Markus Lippert * Mikko Ylinen * Ng Yang * Nicolas Chariglione * Ning Li * Olli Janatuinen * Peri Thompson * Quan Tian * Radostin Stoyanov * Rui Lopes * Sambhav Kothari * Sebastian Hasler * Sergey Kanzhelev * Sören Tempel * Yang Yang * Yifan Yuan * Zilong Wang * Zufar Dhiyaulhaq * botieking98 * chenxiaoyu * jayonlau * jerryzhuang * linrunlong * scuzhanglei * wangzhan * Étienne Guesnet ### Changes <details><summary>1022 commits</summary> <p> * Prepare 1.6.0-rc.2 ([#6502](https://github.com/containerd/containerd/pull/6502)) * Prepare release notes for v1.6.0-rc.2 * Update releases document * platforms.Normalize(): do not reset OSVersion and OSFeatures ([#6497](https://github.com/containerd/containerd/pull/6497)) * platforms.Normalize(): do not reset OSVersion and OSFeatures * tracing: use OTLP/HTTP in addition to OTLP/gRPC ([#6457](https://github.com/containerd/containerd/pull/6457)) * tracing: return (ctx, span) from StartSpan * tracing: support OTLP/HTTP in addition to gRPC * Update cgroups to v1.0.3 ([#6498](https://github.com/containerd/containerd/pull/6498)) * Update cgroups to v1.0.3 * seccomp: kernel 5.11 -> 5.16 ([#6494](https://github.com/containerd/containerd/pull/6494)) * seccomp: kernel 5.16 (futex_waitv) * seccomp: kernel 5.15 (process_mrelease) * seccomp: kernel 5.14 (quotactl_fd, memfd_secret) * seccomp: kernel 5.13 (landlock_{add_rule,create_ruleset,restrict_self}) * seccomp: kernel 5.12 (mount_setattr) * remotes: fix dockerPusher to handle abort correctly ([#6243](https://github.com/containerd/containerd/pull/6243)) * remotes: fix dockerPusher to handle abort correctly * seccomp: add support for "swapcontext" syscall in default policy ([#6411](https://github.com/containerd/containerd/pull/6411)) * seccomp: add support for "swapcontext" syscall in default policy * oci: use readonly mount to read user/group info ([#6478](https://github.com/containerd/containerd/pull/6478)) * oci: use readonly mount to read user/group info * Fix possibly incorrect media type default on import ([#6475](https://github.com/containerd/containerd/pull/6475)) * Fix possibly incorrect media type default on import * shimv2: handle sigint/sigterm ([#5828](https://github.com/containerd/containerd/pull/5828)) * shimv2: handle sigint/sigterm * Fix acr fetch token 400 ([#6481](https://github.com/containerd/containerd/pull/6481)) * fix acr fetch token 400 * platforms: add support for matching amd64 variants ([#6455](https://github.com/containerd/containerd/pull/6455)) * platforms: add support for matching amd64 variants * Fix windows periodic workflow ([#6476](https://github.com/containerd/containerd/pull/6476)) * Fix windows periodic workflow * docs: add doc-comments on GC-related methods ([#6473](https://github.com/containerd/containerd/pull/6473)) * docs: add doc-comments on GC-related methods * fix: should not send 137 code event if cmd is notfound ([#6465](https://github.com/containerd/containerd/pull/6465)) * fix: should not send 137 code event if cmd is notfound * Fix empty scopes return ([#6463](https://github.com/containerd/containerd/pull/6463)) * fix empty scopes return * Prepare release notes for v1.6.0-rc.1 ([#6462](https://github.com/containerd/containerd/pull/6462)) * Prepare release notes for v1.6.0-rc.1 * Add support for skipping non-dist blob push ([#6424](https://github.com/containerd/containerd/pull/6424)) * ctr: flag to toggle non-distributable blob push * Add image handler to skip non-distributable blobs. * Compile binaries for go1.16 and go1.17 in CI ([#6461](https://github.com/containerd/containerd/pull/6461)) * Compile binaries for go1.16 and go1.17 in CI * services/introspection: fix plugin caching to show grpc plugins ([#6432](https://github.com/containerd/containerd/pull/6432)) * Update caching logic to avoid map access * services/introspection: support to show introspection grpc service * Integration: Change to Windows Server 2022 build number constant ([#6458](https://github.com/containerd/containerd/pull/6458)) * Integration: Change to Windows Server 2022 build number constant * Update kubernetes vendor to 0.22.5 ([#6460](https://github.com/containerd/containerd/pull/6460)) * Update kubernetes vendor to 0.22.5 * Fix rdt build tags for go 1.16 ([#6459](https://github.com/containerd/containerd/pull/6459)) * Fix rdt build tags for go 1.16 * Remove submodule go mod ([#6439](https://github.com/containerd/containerd/pull/6439)) * Remove api go submodule * Update makefile to remove API submodule * go.mod: Update hcsshim to v0.9.2 ([#6453](https://github.com/containerd/containerd/pull/6453)) * go.mod: Update hcsshim to v0.9.2 * update runc to v1.1.0 ([#6375](https://github.com/containerd/containerd/pull/6375)) * go.mod: github.com/opencontainers/runc v1.1.0 * update runc binary to v1.1.0 * tracing: fix OTLP tracer's initialization ([#6443](https://github.com/containerd/containerd/pull/6443)) * tracing: fix OTLP tracer's initialization * gha: run CodeQL scan on pull requests ([#6386](https://github.com/containerd/containerd/pull/6386)) * gha: run CodeQL scan on pull requests * Do not automatically inject client traces ([#6445](https://github.com/containerd/containerd/pull/6445)) * Do not automatically inject client traces * [containerd-stress] delete useless code ([#6451](https://github.com/containerd/containerd/pull/6451)) * delete useless code * Revert "Add shared content label to namespaces" ([#6440](https://github.com/containerd/containerd/pull/6440)) * Revert "Add shared content label to namespaces" * Add ppc64 support for test images ([#6435](https://github.com/containerd/containerd/pull/6435)) * Add ppc64 support for test images * ctr: Unify the delete subcommand alias ([#6427](https://github.com/containerd/containerd/pull/6427)) * ctr: Unify the delete subcommand alias * Prepare release notes for v1.6.0-rc.0 ([#6431](https://github.com/containerd/containerd/pull/6431)) * Prepare release notes for v1.6.0-rc.0 * Integration: Switch to using `auth` Gcloud action in Windows workflow. ([#6397](https://github.com/containerd/containerd/pull/6397)) * Integration: Switch to `upload-cloud-storage` Gcloud action. * Integration: Switch to using `auth` Gcloud action in Windows workflow. * remove io/ioutil ([#6426](https://github.com/containerd/containerd/pull/6426)) * remove io/ioutil * test: e2e node COS cgroupv2 script ([#6418](https://github.com/containerd/containerd/pull/6418)) * test: e2e node COS cgroupv2 script * Integration: Enable CRITest on Windows 2022. ([#6378](https://github.com/containerd/containerd/pull/6378)) * Enable critest tests on Windows Server 2022. * Parametrize CRITest test images in Windows Periodic workflow. * Update error message for apparmor parser ([#6415](https://github.com/containerd/containerd/pull/6415)) * Update error message for apparmor parser * Fix wrong log message ([#6419](https://github.com/containerd/containerd/pull/6419)) * Fix wrong log message * Followup errors change ([#6414](https://github.com/containerd/containerd/pull/6414)) * Fix incorrect error wrapped when closing ingest file * Fix seek error used without nil check * Fix followup items from errors replacement * Updates CRI API & Kubernetes to 1.23 ([#6351](https://github.com/containerd/containerd/pull/6351)) * Update k/k to 1.23.0 * Updating adoption of containerd for AKS ([#6416](https://github.com/containerd/containerd/pull/6416)) * Updating adoption of containerd for AKS * update the adoption status of containerd in GKE ([#6413](https://github.com/containerd/containerd/pull/6413)) * update the adoption status of containerd in GKE * go.mod: update github.com/containerd/{continuity,go-cni,imgcrypt} ([#6410](https://github.com/containerd/containerd/pull/6410)) * go.mod: update github.com/containerd/{continuity,go-cni,imgcrypt} * replace github.com/pkg/errors with native errors ([#6366](https://github.com/containerd/containerd/pull/6366)) * feat: replace github.com/pkg/errors to errors * corrected link in cri architecture documentation ([#6412](https://github.com/containerd/containerd/pull/6412)) * corrected link in cri architecture documentation * remotes/docker: allow fetching "refresh token" (aka "identity token", "offline token") ([#6396](https://github.com/containerd/containerd/pull/6396)) * remotes/docker: allow fetching "refresh token" (aka "identity token") * remotes/docker/config: allow setting custom AuthorizerOpts * Prepare release notes for v1.6.0-beta.5 ([#6407](https://github.com/containerd/containerd/pull/6407)) * Prepare release notes for v1.6.0-beta.5 * Integration: Check GCP secrets on Windows CI artifact upload. ([#6292](https://github.com/containerd/containerd/pull/6292)) * Integration: Check GCP secrets on Windows CI artifact upload. * Github Security Advisory [GHSA-mvff-h3cj-wj9c](https://github.com/containerd/containerd/security/advisories/GHSA-mvff-h3cj-wj9c) * only relabel cri managed host mounts * Add support for Intel RDT ([#5439](https://github.com/containerd/containerd/pull/5439)) * cri: add ignore_rdt_not_enabled_errors config option * Update dependencies * cri: annotations for controlling RDT class * tasks: add Linux rdt support * cmd: add --rdt-class command line option * oci: implement WithRdt * fix: use _ for consistency ([#6391](https://github.com/containerd/containerd/pull/6391)) * fix: use _ for consistency * content/local: use syscall.Timespec.Unix ([#6403](https://github.com/containerd/containerd/pull/6403)) * content/local: use syscall.Timespec.Unix * docs: improve plugin documentation ([#6207](https://github.com/containerd/containerd/pull/6207)) * docs: document the runtime shim plugin config options * docs: use proper markdown lists in containerd-config.toml.5.md * fix(ctr): enable networking for Windows containers ([#6304](https://github.com/containerd/containerd/pull/6304)) * fix(ctr): enable networking for Windows containers * Fix $(PWD) issue for Windows makefile ([#6394](https://github.com/containerd/containerd/pull/6394)) * Fix $(PWD) issue for Windows makefile * only test abstract uds on linux ([#6395](https://github.com/containerd/containerd/pull/6395)) * fix: only test abstract unix socket on linux * Fix restart container test ([#6390](https://github.com/containerd/containerd/pull/6390)) * Expect ErrorNotFound on Windows after Kill() * Replace tskill with taskkill * fix when kernel version < 4.13rc1 by using index=off cause test error ([#6291](https://github.com/containerd/containerd/pull/6291)) * fix when kernel version < 4.13rc1 by using index=off cause overlay test error * Fix no-daemon flag for integration/client tests ([#6384](https://github.com/containerd/containerd/pull/6384)) * Fix no-daemon flag for integration/client tests * Enable lazy init for ext4 with devicemapper ([#6122](https://github.com/containerd/containerd/pull/6122)) * Enable lazy init for ext4 with devicemapper * Fix flakiness on Windows for list stats ([#6385](https://github.com/containerd/containerd/pull/6385)) * Fix flakiness on Windows for list stats * cri-integration: Add Windows defaults and fix spaces issue ([#6347](https://github.com/containerd/containerd/pull/6347)) * cri-integration: Add Windows default paths * Upgrade OpenTelemetry dependencies ([#6383](https://github.com/containerd/containerd/pull/6383)) * Upgrade k8s.io/klog/v2 from 2.9.0 to 2.20.0 * Use insecure.NewCredentials instead of grpc.WithInsecure * Upgrade OpenTelemetry dependencies * Fix default makefile target for windows ([#6322](https://github.com/containerd/containerd/pull/6322)) * Fix default makefile target for windows * Disable TestContainerHook on Windows ([#6379](https://github.com/containerd/containerd/pull/6379)) * Disable TestContainerHook on Windows * seutil: Fix setting the "container_kvm_t" label ([#6372](https://github.com/containerd/containerd/pull/6372)) * seutil: Fix setting the "container_kvm_t" label * Remove Windows integration testing for 2004. ([#6350](https://github.com/containerd/containerd/pull/6350)) * Remove Windows integration testing for 2004. * OCI: Mount (accessible) host devices in privileged rootless containers ([#6308](https://github.com/containerd/containerd/pull/6308)) * OCI: Mount (accessible) host devices in privileged rootless containers * oci.getDevices(): move "non-dir, non '/dev/console'" case into switch * cri: add support for configuring swap ([#6320](https://github.com/containerd/containerd/pull/6320)) * fixup: check for swap accounting * fixup: handle diff between cgroupsv1 and v2 * cri: add support for configuring swap * Integration: Enable TestVolumeOwnership on Windows ([#6275](https://github.com/containerd/containerd/pull/6275)) * Replace find with native Go code * Enable TestVolumeOwnership on Windows * Prepare release notes for v1.6.0-beta.4 ([#6296](https://github.com/containerd/containerd/pull/6296)) * Prepare release notes for v1.6.0-beta.4 * refactor: functions for error log and error return ([#6358](https://github.com/containerd/containerd/pull/6358)) * feat: Errorf usage * Split apart runc shim into plugin components ([#6021](https://github.com/containerd/containerd/pull/6021)) * Use task plugin for runc shim * Seperate shim manager and task service * Split runc shim into plugin components * Add shutdown package * CRI update for sandbox sizing ([#6155](https://github.com/containerd/containerd/pull/6155)) * cri, sandbox: pass sandbox resource details if available, applicable * medatada: make namespaces' deletion error less cryptic ([#6354](https://github.com/containerd/containerd/pull/6354)) * medatada: make namespaces' deletion error less cryptic * ListContainerStats to return stats response if ContainerStatsFilter is nil ([#6373](https://github.com/containerd/containerd/pull/6373)) * add-list-stat: return container list if filter is nil * integration: deflake TestContainerdRestart ([#6369](https://github.com/containerd/containerd/pull/6369)) * integration: deflake TestContainerdRestart * feat: add timeout for bolt open ([#6225](https://github.com/containerd/containerd/pull/6225)) * feat: support custom timeout for blot open * Update Go to 1.17.5 ([#6333](https://github.com/containerd/containerd/pull/6333)) * Update Go to 1.17.5 * cri/server: use consistent alias for pkg/ioutil ([#6332](https://github.com/containerd/containerd/pull/6332)) * cri/server: use consistent alias for pkg/ioutil * Disable restart monitor test in Windows ([#6364](https://github.com/containerd/containerd/pull/6364)) * Disable restart monitor test in Windows * Don't fail-fast on Windows integration tests ([#6338](https://github.com/containerd/containerd/pull/6338)) * Don't fail-fast on Windows integration tests * Update restart monitor test to output daemon logs on failure ([#6355](https://github.com/containerd/containerd/pull/6355)) * Run windows parallel integration test as short * Update restart monitor test to output daemon logs on failure * go.mod: update image-spec to latest (v1.0.3-dev) ([#6263](https://github.com/containerd/containerd/pull/6263)) * images/converter: remove deprecated types * go.mod: update image-spec to latest (v1.0.3-dev) * Skip WithAdditionalGIDs on Darwin ([#6353](https://github.com/containerd/containerd/pull/6353)) * Skip WithAdditionalGIDs on Darwin * Use RFC3339 format on Windows periodic resource group creation so cleanup works ([#6303](https://github.com/containerd/containerd/pull/6303)) * Use RFC3339 format so rg cleanup works * update runc to v1.0.3 ([#6330](https://github.com/containerd/containerd/pull/6330)) * go.mod: github.com/opencontainers/runc v1.0.3 * update runc binary to v1.0.3 * Unblock native snapshotter on Darwin ([#6329](https://github.com/containerd/containerd/pull/6329)) * Allow native snapshotter on Darwin * Do not use `go get` to install executables ([#6328](https://github.com/containerd/containerd/pull/6328)) * Do not use `go get` to install executables * Include runtime v2 in default builtins ([#6326](https://github.com/containerd/containerd/pull/6326)) * Include runtime v2 in default builtins * Add Windows Server 2022 CI runs ([#6314](https://github.com/containerd/containerd/pull/6314)) * Add Windows Server 2022 CI runs * Set explicit ACL on test files ([#6324](https://github.com/containerd/containerd/pull/6324)) * Use a single RUN command * Set explicit ACL on test files * integration: align tags of test images ([#6311](https://github.com/containerd/containerd/pull/6311)) * integration: align tags of test images * Set CONTAINERD_ROOT in Windows cri-integration ([#6325](https://github.com/containerd/containerd/pull/6325)) * Set CONTAINERD_ROOT in Windows cri-integration * export oci.DeviceFromPath() ([#6312](https://github.com/containerd/containerd/pull/6312)) * export oci.DeviceFromPath() * Update volume test images ([#6321](https://github.com/containerd/containerd/pull/6321)) * Update continuity dependency * Update volume test images * Update TestRestartMonitor expected time check ([#6201](https://github.com/containerd/containerd/pull/6201)) * Add error logging on cleanup * Update TestRestartMonitor expected time check * Move test volume images from gcr to ghcr ([#6319](https://github.com/containerd/containerd/pull/6319)) * Move volume images from gcr to ghcr * Revert shim service plugin migration ([#6301](https://github.com/containerd/containerd/pull/6301)) * Revert shim plugin migration * Authenticate against ghcr.io ([#6317](https://github.com/containerd/containerd/pull/6317)) * Add permissions * Authenticate against ghcr.io * oci/deviceFromPath(): correctly check device types ([#6306](https://github.com/containerd/containerd/pull/6306)) * oci/deviceFromPath(): correctly check device types * Skip TestExportAndImportMultiLayer on Windows ([#6315](https://github.com/containerd/containerd/pull/6315)) * Skip TestExportAndImportMultiLayer on Windows * Integration: Add image build workflow ([#6290](https://github.com/containerd/containerd/pull/6290)) * Add image build workflow * Integration: Separate Windows Periodic Tests workflow trigger. ([#6286](https://github.com/containerd/containerd/pull/6286)) * Integration: Separate Windows Periodic Tests workflow trigger. * Build volume test images on Windows ([#6274](https://github.com/containerd/containerd/pull/6274)) * Build volume test images on Windows * Add VMware TKG & TCE to Containerd adopters ([#6297](https://github.com/containerd/containerd/pull/6297)) * Add VMware TKG & TCE to Containerd adopters * Vagrantfile: update to Fedora 35 ([#6293](https://github.com/containerd/containerd/pull/6293)) * Vagrantfile: update to Fedora 35 * Update README.md repo->org ([#6269](https://github.com/containerd/containerd/pull/6269)) * Update README.md repo->org * Fix executable file not found when restoring shims ([#6278](https://github.com/containerd/containerd/pull/6278)) * Fix executable file not found when restoring shims * ctr/snapshots/diff: show media-type in stderr ([#6271](https://github.com/containerd/containerd/pull/6271)) * ctr/snapshots/diff: don't show the media-type in output * ctr: Add Linux Capabilities control flags ([#6289](https://github.com/containerd/containerd/pull/6289)) * ctr: Add Linux Capabilities control flags * integration: add stats result in error message ([#6270](https://github.com/containerd/containerd/pull/6270)) * integration: add stats result in error message * releases: mark 1.4 as Extended ([#6287](https://github.com/containerd/containerd/pull/6287)) * docs: mark 1.4 as Extended * docs: fix RELEASES.md gRPC API anchor * feat: skip ci for fork ([#6284](https://github.com/containerd/containerd/pull/6284)) * feat: skip ci for fork * content/local: Close the file if Seek fails ([#6280](https://github.com/containerd/containerd/pull/6280)) * content/local: Close the file if Seek fails * Integration: Remove explicit version passing to `azure/CLI`. ([#6268](https://github.com/containerd/containerd/pull/6268)) * Integration: Remove explicit version passing to `azure/CLI`. * Fix wrong make target on documentation ([#6276](https://github.com/containerd/containerd/pull/6276)) * Fix wrong make target on documentation * fix: server error return ([#6272](https://github.com/containerd/containerd/pull/6272)) * fix: server error return * Prepare release notes for v1.6.0-beta.3 ([#6267](https://github.com/containerd/containerd/pull/6267)) * Prepare release notes for v1.6.0-beta.3 * Update API version in go.mod * Update release name to use consistent format * feat:support custom callopts on client side ([#6254](https://github.com/containerd/containerd/pull/6254)) * fix: make max recv/send msg size setting default * feat:support custom callopts on client side * [CRI] Fix panic when registry.mirrors use localhost ([#6258](https://github.com/containerd/containerd/pull/6258)) * [CRI] Fix panic when registry.mirrors use localhost * Add support for TMP override on toml ([#6241](https://github.com/containerd/containerd/pull/6241)) * Add support for TMP override on toml * CRI: Support enable_unprivileged_icmp and enable_unprivileged_ports options ([#6170](https://github.com/containerd/containerd/pull/6170)) * CRI: Support enable_unprivileged_icmp and enable_unprivileged_ports options * Github Security Advisory [GHSA-5j5w-g665-5m35](https://github.com/containerd/containerd/security/advisories/GHSA-5j5w-g665-5m35) * schema1: reject ambiguous documents * images: validate document type before unmarshal * [cri] add sandbox and container latency metrics ([#6111](https://github.com/containerd/containerd/pull/6111)) * [cri] add sandbox and container latency metrics * Integration: Generalize Windows CI setup scripts for any username. ([#6255](https://github.com/containerd/containerd/pull/6255)) * Generalize Windows CI setup script for any user. * Standardize cmdlet capitalization in Windows CI scripts. * feat: use rwmutex instead ([#6253](https://github.com/containerd/containerd/pull/6253)) * feat: use rwmutex instead * Allow absolute path to shim binaries ([#6206](https://github.com/containerd/containerd/pull/6206)) * Fix package alias * Support custom runtime path when launching tasks * Add runtime path in CreateTaskRequest * Close file if permission modification fails ([#6246](https://github.com/containerd/containerd/pull/6246)) * Close file if permission modification fails * release: change tar name to match prior releases ([#6250](https://github.com/containerd/containerd/pull/6250)) * release: change tar name to match prior releases * Fix wrong error returned for image index lookup ([#6237](https://github.com/containerd/containerd/pull/6237)) * Fix wrong error returned for image index lookup * Fix containerd fails to pull OCI image with non-`http(s)://` urls ([#6221](https://github.com/containerd/containerd/pull/6221)) * Fix containerd fails to pull OCI image with non-`http(s)://` urls * Prepare release notes for v1.6.0-beta.2 ([#6223](https://github.com/containerd/containerd/pull/6223)) * Prepare release notes for v1.6.0-beta.2 * Add arm64 to releases ([#6196](https://github.com/containerd/containerd/pull/6196)) * Rename release dockerfile to omit distro name * release: improve dockerfile * Add arm64 to releases * use write lock when updating container stats ([#6236](https://github.com/containerd/containerd/pull/6236)) * use write lock when updating container stats * go.mod: Bump hcsshim to v0.9.1 ([#6230](https://github.com/containerd/containerd/pull/6230)) * go.mod: Bump hcsshim to v0.9.1 * go.mod: Bump ttrpc to 1.1.0 ([#6228](https://github.com/containerd/containerd/pull/6228)) * go.mod: Bump ttrpc to 1.1.0 * go.mod: bump moby/sys/symlink v0.2.0, moby/sys/signal v0.6.0, moby/sys/mountinfo v0.5.0 ([#6213](https://github.com/containerd/containerd/pull/6213)) * go.mod: github.com/moby/sys/mountinfo v0.5.0 * go.mod: github.com/moby/sys/signal v0.6.0 * go.mod: github.com/moby/sys/symlink v0.2.0 * go.mod: golang.org/x/sys v0.0.0-20211025201205-69cdffdb9359 * cleanup: add more description on comment ([#6222](https://github.com/containerd/containerd/pull/6222)) * cleanup: add more description on comment * Update Go to 1.17.3 ([#6211](https://github.com/containerd/containerd/pull/6211)) * Update Go to 1.17.3 * CI: bump up crun: 1.0 -> 1.3 ([#6214](https://github.com/containerd/containerd/pull/6214)) * CI: bump up crun: 1.0 -> 1.3 * Pin az CLI version in windows-periodic workflow ([#6205](https://github.com/containerd/containerd/pull/6205)) * Pin az CLI version * Decouple task manager ([#5918](https://github.com/containerd/containerd/pull/5918)) * Address PR comments * Fix build after rebase * Migrate task directory * Expose shim process interface * Fix after rebase * Cleanup shim loading * Move shim restore to a separate file * Fix backward compatibility with old task shims * Add plugin dependency between shim and shim services * Rework task create and cleanup flow * Add task manager * Rename task manager to shim manager * [cri] Implement k8s 1.23 CRI Pod Sandbox and Container Stats ([#6113](https://github.com/containerd/containerd/pull/6113)) * Implement CRI container and pods stats * Vendor latest k8s.io/cri-api and netlink * test: Add grace period for restart monitor test ([#6200](https://github.com/containerd/containerd/pull/6200)) * test: Add grace period for restart monitor test * integration: Enables TestRuntimeHandler for Windows ([#6179](https://github.com/containerd/containerd/pull/6179)) * integration: Enables TestRuntimeHandler for Windows * Add mkdir on Dockerfile ([#6171](https://github.com/containerd/containerd/pull/6171)) * Add mkdir on Dockerfile * sys/reaper: avoid leaky goroutine when exec timeout ([#6189](https://github.com/containerd/containerd/pull/6189)) * sys/reaper: avoid leaky goroutine when exec timeout * adds additional debug out to timebox cni setup ([#6184](https://github.com/containerd/containerd/pull/6184)) * adds additional debug out to timebox cni setup * converter: Allow hooks during image conversion ([#6176](https://github.com/containerd/containerd/pull/6176)) * converter: Allow hooks during image conversion * compression: support zstd with skippable frame ([#6177](https://github.com/containerd/containerd/pull/6177)) * compression: support zstd with skippable frame * integration: Enables TestVolumeCopyUp for Windows ([#6182](https://github.com/containerd/containerd/pull/6182)) * integration: Enables TestVolumeCopyUp for Windows * integration: Enable some tests for Windows (part 2) ([#6121](https://github.com/containerd/containerd/pull/6121)) * integration: Enable some tests for Windows (part 2) * integration: Enable some tests for Windows ([#6085](https://github.com/containerd/containerd/pull/6085)) * integration: Enable some tests for Windows * Update doc to version 2 syntax ([#6125](https://github.com/containerd/containerd/pull/6125)) * feat(doc): update to version 2 syntax * fix shim reaper wait command execute blocked ([#6166](https://github.com/containerd/containerd/pull/6166)) * fix shim reaper wait command execute blocked * content: close stream after commit request ([#6145](https://github.com/containerd/containerd/pull/6145)) * content: close stream after commit request * Generating token options with each scope as a separate string. ([#6165](https://github.com/containerd/containerd/pull/6165)) * Adding scope tests for ParseAuthHeader * Adding tests for GenerateTokenOptions * Generate token options with each scope as a separate string. * vendor: Updates go-cni ([#6167](https://github.com/containerd/containerd/pull/6167)) * vendor: Updates go-cni * commands: Enables task metrics for Windows ([#6159](https://github.com/containerd/containerd/pull/6159)) * commands: Enables task metrics for Windows * vendor: update moby/sys for darwin support ([#6149](https://github.com/containerd/containerd/pull/6149)) * vendor: update moby/sys for darwin support * Prepare v1.6.0-beta.1 ([#6144](https://github.com/containerd/containerd/pull/6144)) * Prepare release notes for v1.6.0-beta.1 * Update mailmap * Update api vendor * bump cni to spec v1.0.0 ([#6136](https://github.com/containerd/containerd/pull/6136)) * bump CNI to spec v1.0.0 * Inject otel traces to grpc client. ([#5992](https://github.com/containerd/containerd/pull/5992)) * Inject otel traces to grpc client. * client: expose (*image).platform ([#6142](https://github.com/containerd/containerd/pull/6142)) * client: expose (*image).platform * Adding documentation for Core Scheduling ([#6128](https://github.com/containerd/containerd/pull/6128)) * feat(doc): add Core Scheduling documentation * Ensure namespace is proxied to grpc/ttrpc plugins ([#6130](https://github.com/containerd/containerd/pull/6130)) * Ensure namespace is proxied to grpc/ttrpc plugins * fix #6054 MaxConcurrentDownloads is not effect when Unpack is true ([#6109](https://github.com/containerd/containerd/pull/6109)) * fix #6054 MaxConcurrentDownloads is not effect when Unpack is true * Output a warning for label image labels instead of erroring ([#6124](https://github.com/containerd/containerd/pull/6124)) * Output a warning for label image labels instead of erroring * Fix spelling mistake in Windows snapshotter ([#6132](https://github.com/containerd/containerd/pull/6132)) * Fix spelling mistake in Windows snapshotter * Windows: Cleanup rm- prefixed layers ([#6126](https://github.com/containerd/containerd/pull/6126)) * Windows: Cleanup rm- prefixed layers * cleanup deprecated package `io/ioutil ` ([#6118](https://github.com/containerd/containerd/pull/6118)) * io/ioutil package has been deprecated in Go 1.16 that replaces io/ioutil functions * close Writer after use which may memory leak ([#6115](https://github.com/containerd/containerd/pull/6115)) * close Writer after use which may leak mem * Adds Windows resource limits support ([#5778](https://github.com/containerd/containerd/pull/5778)) * Adds Windows resource limits support * Prepare release notes for v1.6.0-beta.0 ([#6098](https://github.com/containerd/containerd/pull/6098)) * Prepare release notes for v1.6.0-beta.0 * Add error message to in TestContainerdRestart integration test ([#6105](https://github.com/containerd/containerd/pull/6105)) * Add error message to in TestContainerdRestart integration test * Fix typo in the NewContainer function documentation ([#6110](https://github.com/containerd/containerd/pull/6110)) * Fix typo in the NewContainer function documentation * Update cgroups to v1.0.2 ([#6104](https://github.com/containerd/containerd/pull/6104)) * Update cgroups to v1.0.2 * btrfs: verify file content after mount ([#6100](https://github.com/containerd/containerd/pull/6100)) * test: check file content after mount * Update test timeout based on recent cancellations ([#6107](https://github.com/containerd/containerd/pull/6107)) * Update test timeout based on recent cancellations * Check the pid in cri test teardown ([#6106](https://github.com/containerd/containerd/pull/6106)) * Remove extra test_teardown * Check the pid in cri test teardown * add runc shim support for sched core ([#6011](https://github.com/containerd/containerd/pull/6011)) * fix integration client vendor * add runc shim support for sched core * integration: Enables Windows containerd restart test ([#5579](https://github.com/containerd/containerd/pull/5579)) * integration: Enables Windows containerd restart test * vendor: Bump hcsshim to 0.9.0 ([#6099](https://github.com/containerd/containerd/pull/6099)) * vendor: Bump hcsshim to 0.9.0 * [cri] Add CNI conf based on runtime class ([#4695](https://github.com/containerd/containerd/pull/4695)) * Add CNI conf based on runtime class * Update Go to 1.17.2 ([#6102](https://github.com/containerd/containerd/pull/6102)) * Update Go to 1.17.2 * integration: Adds test for multilayer image import ([#5933](https://github.com/containerd/containerd/pull/5933)) * integration: Adds test for multilayer image import * runtime: should fail fast if dial error on shim ([#6031](https://github.com/containerd/containerd/pull/6031)) * runtime: should fail fast if dial error on shim * Fixes Windows containers with image volumes ([#6034](https://github.com/containerd/containerd/pull/6034)) * Windows: Fixes Windows containers with image volumes * run `gofmt` with GO 1.17 ([#6094](https://github.com/containerd/containerd/pull/6094)) * run `gofmt` with Go 1.17 * pkg/cap: remove an outdated comment ([#6088](https://github.com/containerd/containerd/pull/6088)) * pkg/cap: remove an outdated comment * Update go otel 1.0.1 ([#6066](https://github.com/containerd/containerd/pull/6066)) * Update go otel 1.0.1 * Update ADOPTERS.md with additional uses ([#6086](https://github.com/containerd/containerd/pull/6086)) * Update ADOPTERS.md with additional uses * modify the way for checking cos ([#6082](https://github.com/containerd/containerd/pull/6082)) * modify the way for checking cos * Fuzzing: Add fuzzers + small modifications ([#5915](https://github.com/containerd/containerd/pull/5915)) * Fuzzing: Add 4 fuzzers + small modifications * Fixes for Windows CI ([#6081](https://github.com/containerd/containerd/pull/6081)) * Pin mingw to version 10.2.0 * Update to golang 1.17.1 * Install nssm * Github Security Advisory [GHSA-c2h3-6mxw-7mvq](https://github.com/containerd/containerd/security/advisories/GHSA-c2h3-6mxw-7mvq) * btrfs: reduce permissions on plugin directories * v1 runtime: reduce permissions for bundle dir * v2 runtime: reduce permissions for bundle dir * task service: return known error type ([#6079](https://github.com/containerd/containerd/pull/6079)) * task service: return known error type * refactor: move from io/ioutil to io and os package ([#5973](https://github.com/containerd/containerd/pull/5973)) * refactor: move from io/ioutil to io and os package * fix: import from k8s.io/utils/clock instead ([#6076](https://github.com/containerd/containerd/pull/6076)) * fix: update vendor * cleanup: import from k8s.io/utils/clock/testing instead * cleanup: import from k8s.io/utils/clock instead * feat: enable integration cri remote client to call with grpc calloptions ([#6069](https://github.com/containerd/containerd/pull/6069)) * feat: enable cri remote client to call with grpc calloptions * cleanup k8s ansible yaml (carry for #5713) ([#6074](https://github.com/containerd/containerd/pull/6074)) * cleanup k8s ansible yaml (carry for https://github.com/jayonlau <jayonlau@gmail.com>) * feat: support import image for specific platform ([#6070](https://github.com/containerd/containerd/pull/6070)) * fix: wrong flag type * feat: support import image for specific platform * Update mirror images to take target image name ([#6065](https://github.com/containerd/containerd/pull/6065)) * Update mirror images to take target image name * fix: make exec-id flag required in exec command ([#6059](https://github.com/containerd/containerd/pull/6059)) * fix: make exec-id flag required in exec command * images: enable converter to uncompress zstd ([#6052](https://github.com/containerd/containerd/pull/6052)) * images: enable converter to uncompress zstd * replace deprecated function with Domain and Path ([#5922](https://github.com/containerd/containerd/pull/5922)) * replace deprecated function * integration: Adds Windows HostProcess tests ([#5853](https://github.com/containerd/containerd/pull/5853)) * integration: Adds Windows HostProcess tests * Fix main branch build is broken ([#6047](https://github.com/containerd/containerd/pull/6047)) * Fix main branch build is broken * Add open telemetry logging hook for logrus ([#6003](https://github.com/containerd/containerd/pull/6003)) * Add open telemetry logging hook for logrus * Change `oci.WithUser` behavior for LCOW ([#6023](https://github.com/containerd/containerd/pull/6023)) * Change oci.WithUser behavior for LCOW * switch usage directly to errdefs.(ErrAlreadyExists and ErrNotFound) ([#5946](https://github.com/containerd/containerd/pull/5946)) * switch usage directly to errdefs.(ErrAlreadyExists and ErrNotFound) * import: Raise error if the imported image is filtered out ([#5926](https://github.com/containerd/containerd/pull/5926)) * import: Raise error if the imported image is filtered out * Fix panic in metadata content writer on copy error ([#6043](https://github.com/containerd/containerd/pull/6043)) * Fix panic in metadata content writer on copy error * Move tracing to plugin ([#6001](https://github.com/containerd/containerd/pull/6001)) * Move tracing to plugin * ctr: Fixes Windows image import ([#5916](https://github.com/containerd/containerd/pull/5916)) * ctr: Fixes Windows image import * update open go.opentelemetry.io v1.0.0 to fix import path ([#6017](https://github.com/containerd/containerd/pull/6017)) * go.mod: update opentelemetry modules to v1.0.0 * fix error string format ([#5979](https://github.com/containerd/containerd/pull/5979)) * fix error string format * Add github action to mirror image ([#6036](https://github.com/containerd/containerd/pull/6036)) * Add github action to mirror image * add current process state to the error message ([#6027](https://github.com/containerd/containerd/pull/6027)) * add current process state to the error message * FreeBSD: fix tar headers & the nil check on getxattr ([#5991](https://github.com/containerd/containerd/pull/5991)) * FreeBSD: fix tar headers & the nil check on getxattr * gha: collect VMs' IP addresses ([#6035](https://github.com/containerd/containerd/pull/6035)) * gha: collect Vagrant VMs' IP addresses * bump continuity and console version that remove pkg/errors ([#6033](https://github.com/containerd/containerd/pull/6033)) * bump continuity and console version that remove pkg/errors * import: Add option to prevent duplicated digest image ([#5997](https://github.com/containerd/containerd/pull/5997)) * import: Add option to skip creating digest image * ctr namespaces: improve usage string ([#5998](https://github.com/containerd/containerd/pull/5998)) * ctr namespaces: improve usage string * bump console version to v1.0.3 that remove pkg/errors ([#6028](https://github.com/containerd/containerd/pull/6028)) * bump console version to v1.0.3 that remove pkg/errors * Use github images for integration tests ([#6032](https://github.com/containerd/containerd/pull/6032)) * Use github images for integration tests * Fix typo ([#5995](https://github.com/containerd/containerd/pull/5995)) * Fix typo * Enable image config labels in ctr and CRI container creation ([#6012](https://github.com/containerd/containerd/pull/6012)) * Enable image config labels in ctr and CRI container creation * Make sure exit signals trigger an exit during init ([#5970](https://github.com/containerd/containerd/pull/5970)) * Make sure exit signals trigger an exit during init * task delete: Closes task IO before waiting ([#5974](https://github.com/containerd/containerd/pull/5974)) * task delete: Closes task IO before waiting * CI: bump up crun to 1.0 ([#5985](https://github.com/containerd/containerd/pull/5985)) * CI: bump up crun to 1.0 * seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted) ([#5982](https://github.com/containerd/containerd/pull/5982)) * seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted) * Update to Go 1.17.1 ([#5990](https://github.com/containerd/containerd/pull/5990)) * Update to Go 1.17.1 * CI: Switch to available latest images ([#5987](https://github.com/containerd/containerd/pull/5987)) * CI: Switch to available latest images * add xfs support to devicemapper snapshotter ([#5610](https://github.com/containerd/containerd/pull/5610)) * add xfs support to devicemapper snapshotter * Fixes task kill --force on Windows ([#5956](https://github.com/containerd/containerd/pull/5956)) * Fixes task kill --force on Windows * Add support for shim plugins ([#5817](https://github.com/containerd/containerd/pull/5817)) * Add support for shim plugins * vendor: update continuity for darwin support ([#5976](https://github.com/containerd/containerd/pull/5976)) * vendor: update continuity for darwin support * replace uses of os/exec with golang.org/x/sys/execabs ([#5906](https://github.com/containerd/containerd/pull/5906)) * replace uses of os/exec with golang.org/x/sys/execabs * complete integration test for pulling image with labels ([#5972](https://github.com/containerd/containerd/pull/5972)) * Additional integration tests for pulling image with labels * Fix content copy to not ignore unexpected EOF ([#5966](https://github.com/containerd/containerd/pull/5966)) * Fix content copy to not ignore unexpected EOF * add ip_pref CNI options for primary pod ip ([#5964](https://github.com/containerd/containerd/pull/5964)) * add ip_pref CNI options for primary pod ip * cri: add devices for privileged container ([#5939](https://github.com/containerd/containerd/pull/5939)) * cri: add devices for privileged container * sandbox: Allows the sandbox to be deleted in NotReady state ([#5954](https://github.com/containerd/containerd/pull/5954)) * sandbox: Allows the sandbox to be deleted in NotReady state * pin protobuild version to tag ([#5969](https://github.com/containerd/containerd/pull/5969)) * pin protobuild version to tag * Add metric exposing build version&revision ([#5965](https://github.com/containerd/containerd/pull/5965)) * use a const metric for build_info * Add metric exposing build version&revision * Feature: containerd-cri support LinuxContainerResources.Unified ([#5627](https://github.com/containerd/containerd/pull/5627)) * add cri test case * feature: add field LinuxContainerResources.Unified on cri * integration: investigate TestRestartMonitor's failure ([#5861](https://github.com/containerd/containerd/pull/5861)) * integration: investigate TestRestartMonitor's failure * Use issue forms for bug reporting ([#5917](https://github.com/containerd/containerd/pull/5917)) * Address issue forms feedback * Use issue forms for bug reporting * cri: patch update image labels ([#5945](https://github.com/containerd/containerd/pull/5945)) * cri: patch update image labels * darwin: runtime support ([#5936](https://github.com/containerd/containerd/pull/5936)) * darwin: runtime support * darwin: use the default values for socketRoot variable * Update RELEASES.md ([#5858](https://github.com/containerd/containerd/pull/5858)) * Update RELEASES.md * archive: Add WriteDiff error logs ([#5949](https://github.com/containerd/containerd/pull/5949)) * archive: Add WriteDiff error logs * replace deprecated Dialer with ContextDialer ([#5958](https://github.com/containerd/containerd/pull/5958)) * replace deprecated Dail with DailContext * Add WS2022 support in Windows Periodic tests ([#5951](https://github.com/containerd/containerd/pull/5951)) * Add WS2022 support in Windows Periodic tests * Content fuzzer: Clean up temp store dir ([#5943](https://github.com/containerd/containerd/pull/5943)) * content fuzzer: Clean up tempdir * using Hosts replace deprecated field ([#5944](https://github.com/containerd/containerd/pull/5944)) * using Hosts replace deprecated field * fix document non-synchronous ([#5947](https://github.com/containerd/containerd/pull/5947)) * fix document non-synchronous in crictl.md * go.mod: Update hcsshim to v0.8.21 ([#5929](https://github.com/containerd/containerd/pull/5929)) * go.mod: Update hcsshim to v0.8.21 * Makefile.linux: build on RISC-V with PIE ([#5937](https://github.com/containerd/containerd/pull/5937)) * Makefile.linux: build on riscv with PIE * Fix cwd flag for `ctr tasks exec` ([#5932](https://github.com/containerd/containerd/pull/5932)) * Fix cwd flag for `ctr tasks exec` * Update Pause image in tests & config ([#5927](https://github.com/containerd/containerd/pull/5927)) * Update Pause image in tests & config * cri: Devices ownership from SecurityContext ([#5122](https://github.com/containerd/containerd/pull/5122)) * cri: Devices ownership from SecurityContext * Fix pull fails on unexpected EOF ([#5921](https://github.com/containerd/containerd/pull/5921)) * Fix pull fails on unexpected EOF * Fix dir support for devices ([#5845](https://github.com/containerd/containerd/pull/5845)) * Adding testing of two devices * Fix dir support for devices V3 (#4847) * windows: The DefaultSpec platform should match the Default matcher ([#5914](https://github.com/containerd/containerd/pull/5914)) * windows: The DefaultSpec platform should match the Default matcher * Add RunAsUserName functionality for the Windows pod sandbox container ([#5865](https://github.com/containerd/containerd/pull/5865)) * Add RunAsUserName functionality for the Windows Pod Sandbox Container * bump up runc v1.0.2 ([#5899](https://github.com/containerd/containerd/pull/5899)) * go.mod: update runc to v1.0.2 * update runc binary to v1.0.2 * Run `go fmt` with Go 1.17 ([#5903](https://github.com/containerd/containerd/pull/5903)) * Run `go fmt` with Go 1.17 * go.mod: github.com/pelletier/go-toml v1.9.3 ([#5905](https://github.com/containerd/containerd/pull/5905)) * go.mod: github.com/pelletier/go-toml v1.9.3 * cri: filter selinux xattr for image volumes ([#5902](https://github.com/containerd/containerd/pull/5902)) * cri: filter selinux xattr for image volumes * Add Windows HostProcess Support ([#5131](https://github.com/containerd/containerd/pull/5131)) * Added windows hostProcess cni skip * script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0 ([#5897](https://github.com/containerd/containerd/pull/5897)) * script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0 * Update to Go 1.17 ([#5889](https://github.com/containerd/containerd/pull/5889)) * Bump integration timeout to 35 min * Update to Go 1.17 * integration: fix TestContainerPids ([#5896](https://github.com/containerd/containerd/pull/5896)) * integration: fix TestContainerPids * [ctr] add HOSTNAME env for host network ([#5891](https://github.com/containerd/containerd/pull/5891)) * [ctr] add HOSTNAME env for host network * Fuzzing: Add fuzzer ([#5886](https://github.com/containerd/containerd/pull/5886)) * Fuzzing: Add fuzzer * Make Cgroup driver configurable in gce configure script ([#5884](https://github.com/containerd/containerd/pull/5884)) * Add env for SystemdCgroup driver * Allow expanded DNS configuration ([#5878](https://github.com/containerd/containerd/pull/5878)) * Allow expanded DNS configuration * Fuzzing: Add 4 fuzzers ([#5863](https://github.com/containerd/containerd/pull/5863)) * Fuzzing: Add 4 fuzzers * Cleanup v2 shim ([#5813](https://github.com/containerd/containerd/pull/5813)) * Cleanup v2 shim * Fuzzing: Add experimental version of container fuzzer ([#5840](https://github.com/containerd/containerd/pull/5840)) * Use http.Get to download binaries instead of exec.Command * Fuzzing: Add experimental version of container fuzzer * add cpu-shares to ctr ([#5846](https://github.com/containerd/containerd/pull/5846)) * add cpu-shares to ctr * docs: rename master to main (it was opposite on the actual commit) ([#5847](https://github.com/containerd/containerd/pull/5847)) * docs: rename main to master * content: return the error with its timestamp ([#5849](https://github.com/containerd/containerd/pull/5849)) * content: return the error with its timestamp * Fix bad `make protos` failure ([#5857](https://github.com/containerd/containerd/pull/5857)) * Fix bad `make protos` failure * replace cri and point to new location ([#5851](https://github.com/containerd/containerd/pull/5851)) * archive docs and point to new location fix #https://github.com/containerd/cri/issues/1624 * docs: remove FOSSA's badge ([#5856](https://github.com/containerd/containerd/pull/5856)) * docs: remove FOSSA's badge * BUILDING.md: remove some bits about building runc ([#5850](https://github.com/containerd/containerd/pull/5850)) * BUILDING.md: remove some bits about building runc * BUILDING.md: markdown fixes * go.mod: update k8s deps to v1.22.0 ([#5836](https://github.com/containerd/containerd/pull/5836)) * go.mod: update kubernetes to v1.22.0 * [Scripts] Add trap to cri-integration test script ([#5852](https://github.com/containerd/containerd/pull/5852)) * Add trap to cri-integration test script * docs: list all snapshotter-related build flags ([#5848](https://github.com/containerd/containerd/pull/5848)) * docs: list all snapshotter-related build flags * Move plugin context events into separate plugin ([#5835](https://github.com/containerd/containerd/pull/5835)) * Move plugin context events into separate plugin * Fix Linux CI Linter using Go 1.15.14 ([#5839](https://github.com/containerd/containerd/pull/5839)) * Fix Linux CI Linter using go 1.15.14 * Update Go to 1.16.7 ([#5842](https://github.com/containerd/containerd/pull/5842)) * Update Go to 1.16.7 * Cleanup CI ([#5838](https://github.com/containerd/containerd/pull/5838)) * Cleanup CI * Remove redundant build tags ([#5834](https://github.com/containerd/containerd/pull/5834)) * Remove redundant build tags * Change default directories on Darwin ([#5830](https://github.com/containerd/containerd/pull/5830)) * Change default directories on Darwin * [otel-tracing] Initial opentelemetry support ([#5731](https://github.com/containerd/containerd/pull/5731)) * [otel-tracing] vendor and go modules changes * [otel-tracing] Initial opentelemetry support * remove go 1.13 from containerd * Fuzzing: Fix for OSS-fuzz issue 36825 ([#5829](https://github.com/containerd/containerd/pull/5829)) * Fuzzing: Fix for OSS-fuzz issue 36825 * Fuzzing: Add two fuzzers ([#5825](https://github.com/containerd/containerd/pull/5825)) * Fuzzing: Add two more fuzzers * scripts: linting fixes, and remove support for Debian Jessie (as it's EOL) ([#5760](https://github.com/containerd/containerd/pull/5760)) * scripts: declare ROOT closer to where it's used, and some DRY changes * scripts: add missing quotes, and minor linting issues * test/build-utils.sh: remove support for Debian Jessie * platforms: Format(): use path.Join() instead of joinNotEmpty() ([#5821](https://github.com/containerd/containerd/pull/5821)) * platforms: Format(): use path.Join() instead of joinNotEmpty() * Fuzzing: Remove panics of container_fuzzer ([#5823](https://github.com/containerd/containerd/pull/5823)) * Fuzzing: Remove panics of container_fuzzer * Fuzzing: Add container fuzzer ([#5785](https://github.com/containerd/containerd/pull/5785)) * Change protoc link * Split fuzzer to two fuzzers * Fuzzing: Add container fuzzer * runtime: fix the issue of create new socket with abstract address ([#5746](https://github.com/containerd/containerd/pull/5746)) * runtime: fix the issue of create new socket with abstract address * mergo: Upgrade to 0.3.12 to fix panic ([#5809](https://github.com/containerd/containerd/pull/5809)) * mergo: Upgrade to 0.3.12 to fix panic * ci: install criu from PPA ([#5802](https://github.com/containerd/containerd/pull/5802)) * ci: install criu from PPA * Update release workflow to upload binary without CNI ([#5144](https://github.com/containerd/containerd/pull/5144)) * Split release steps into multiple tasks * Update release workflow to upload binary without CNI * Enable critest on Windows Periodic Jobs ([#5725](https://github.com/containerd/containerd/pull/5725)) * Enable critest on Windows * Script to check if entries in go.mod files are in sync ([#5792](https://github.com/containerd/containerd/pull/5792)) * Script to check if entries in go.mod files are in sync * Add a sharedNamespace label ([#5043](https://github.com/containerd/containerd/pull/5043)) * Add shared content label to namespaces * platforms: add "ios" as known OS, "loong64" as known ARCH ([#5784](https://github.com/containerd/containerd/pull/5784)) * platforms: add "ios" as known OS, "loong64" as known ARCH * Updates the location of protobuf downloads ([#5804](https://github.com/containerd/containerd/pull/5804)) * Updates the location of protobuf downloads in docs * Update protobuf install to use correct repository ([#5803](https://github.com/containerd/containerd/pull/5803)) * Update protobuf install to use correct repository * overlay: expose upperdir location of each snapshot via an optional label ([#5624](https://github.com/containerd/containerd/pull/5624)) * overlay: add an optional label of upperdir location of each snapshot * Support SIGRTMIN+n signals ([#5693](https://github.com/containerd/containerd/pull/5693)) * Support SIGRTMIN+n signals * respect context timeout in shim binary call ([#5800](https://github.com/containerd/containerd/pull/5800)) * respect context timeout in shim binary call * Introduce a new go module - containerd/api for use in standalone clients ([#5716](https://github.com/containerd/containerd/pull/5716)) * Introduce a new go module - containerd/api for use in standalone clients * grpc config add options tcp_client_ca_cert ([#5606](https://github.com/containerd/containerd/pull/5606)) * grpc config add options tcp_tls_ca * integration: Windows volume-copy-up images ([#5162](https://github.com/containerd/containerd/pull/5162)) * integration: Windows volume-copy-up images * add CRI support matrix to RELEASES.md ([#5795](https://github.com/containerd/containerd/pull/5795)) * add CRI support matrix to RELEASES.md * adding a little more clarity ([#5794](https://github.com/containerd/containerd/pull/5794)) * adding a little more clarity * update gotestsum to v1.7.0 ([#5793](https://github.com/containerd/containerd/pull/5793)) * update gotestsum to v1.7.0 * Discard blocks when removing a thin device ([#5756](https://github.com/containerd/containerd/pull/5756)) * Discard blocks when removing a thin device * Makefile: fix passing build tags ([#5590](https://github.com/containerd/containerd/pull/5590)) * Makefile: pass build tags to manpage build process * Makefile: fix tags parameter computation * Add runtime label to metrics ([#5744](https://github.com/containerd/containerd/pull/5744)) * Add runtime label to metrics * interface about shim build check ([#5745](https://github.com/containerd/containerd/pull/5745)) * interface about shim build check * integration: log all processes to investigate the test failure ([#5775](https://github.com/containerd/containerd/pull/5775)) * integration: log all processes to investigate the test failure * Fuzzing: Add archive fuzzer ([#5779](https://github.com/containerd/containerd/pull/5779)) * Fuzzing: Add archive fuzzer * Add docker.Fetch fuzzer ([#5687](https://github.com/containerd/containerd/pull/5687)) * Add docker fetch fuzzer * Support custom compressor for walking differ ([#5735](https://github.com/containerd/containerd/pull/5735)) * Support custom compressor for walking differ * remotes/docker/pusher.go: Fix missing Close() on push to docker remote ([#5770](https://github.com/containerd/containerd/pull/5770)) * remotes/docker/pusher.go: Fix missing Close() * remotes/docker/fetcher.go: Fix missing Close() on fetch from docker remote ([#5769](https://github.com/containerd/containerd/pull/5769)) * remotes/docker/fetcher.go: Fix missing Close() * Update cpuguy83/go-md2man binary to v2.0.1 ([#5771](https://github.com/containerd/containerd/pull/5771)) * Update cpuguy83/go-md2man binary to v2.0.1 * Refactor / optimize contrib/Dockerfile.test ([#5750](https://github.com/containerd/containerd/pull/5750)) * Dockerfile.test: build containerd in separate stage * Dockerfile.test: add GOLANG_IMAGE build arg to allow overriding * Dockerfile.test: clean up apt indexes after installing * Dockerfile.test: build critools in a separate stage * Dockerfile.test: build cni in a separate stage * Dockerfile.test: standard directory to collect build aftifacts * Dockerfile.test: split dev stage, and optimize order * Dockerfile.test: skip curl, gcc, git and make install * install-critools: make sure DESTDIR exists * update gotestsum to current master ([#5754](https://github.com/containerd/containerd/pull/5754)) * update gotestsum to current master * Github Security Advisory [GHSA-c72p-9xmj-rx3w](https://github.com/containerd/containerd/security/advisories/GHSA-c72p-9xmj-rx3w) * Add test for archive breakout test for lchmod * Use systemd cgroup driver for Kubernetes e2e tests with cgroupsv2 ([#5755](https://github.com/containerd/containerd/pull/5755)) * Use systemd cgroup driver for cgroupv2 tests * update runc to v1.0.1 ([#5751](https://github.com/containerd/containerd/pull/5751)) * go.mod: runc v1.0.1 * update runc binary to v1.0.1 * runtime: runc v2: remove redundant validation ([#5737](https://github.com/containerd/containerd/pull/5737)) * runtime: runc v2: remove redundant validation * Add timestamp to flaky restart monitor test ([#5727](https://github.com/containerd/containerd/pull/5727)) * Move loop check to before sleep * Add timestamp to flaky restart monitor test * Update Go to 1.16.6 ([#5722](https://github.com/containerd/containerd/pull/5722)) * integration/client: go mod tidy * Update Go to 1.16.6 * client: surface a connection error more clearly ([#4447](https://github.com/containerd/containerd/pull/4447)) * client: surface a connection error more clearly * Fix missing Body.Close() calls on push to docker remote ([#5712](https://github.com/containerd/containerd/pull/5712)) * Fix missing Body.Close() calls on push to docker remote * remove pkg/cri/platforms package ([#5710](https://github.com/containerd/containerd/pull/5710)) * remove pkg/cri/platforms package * Allow WithServices to use custom implementations ([#5709](https://github.com/containerd/containerd/pull/5709)) * Allow WithServices to use custom implementations * [Vendor] Update hcsshim to 0.8.18 ([#5673](https://github.com/containerd/containerd/pull/5673)) * [Vendor] Update hcsshim to 0.8.18 * test integration: Adds a test that restarts a failed container ([#5578](https://github.com/containerd/containerd/pull/5578)) * test integration: Adds a test that restarts a failed container * [CRI] move up to CRI v1 and support v1alpha in parallel ([#5619](https://github.com/containerd/containerd/pull/5619)) * use fu wei's suggeted interface pick for marshaling * add alpha version * move up to CRI v1 and support v1alpha in parallel * gha: make release workflow work in forks ([#5682](https://github.com/containerd/containerd/pull/5682)) * gha: make release workflow work in forks * Add unit test for plugin ([#5666](https://github.com/containerd/containerd/pull/5666)) * Add unit test for plugin * Dockerfile.test: add "cri-in-userns" (aka rootless) test stage ([#5700](https://github.com/containerd/containerd/pull/5700)) * Dockerfile.test: add "cri-in-userns" (aka rootless) test stage * Update for distribution spec 1.0 ([#5676](https://github.com/containerd/containerd/pull/5676)) * Add support for registry host path override * Update documenation for OCI distribution 1.0 * archive: cleanup lchmod logic ([#5702](https://github.com/containerd/containerd/pull/5702)) * Cleanup lchmod logic in archive * Install specific golang version in Windows CI. ([#5571](https://github.com/containerd/containerd/pull/5571)) * Install specific golang version in Windows CI. * Add ctr command label in NewContainerOpts ([#5660](https://github.com/containerd/containerd/pull/5660)) * feat: Add snapshotter label to the new snapshot for container. * snapshot/devmapper: log exported methods correctly ([#5655](https://github.com/containerd/containerd/pull/5655)) * snapshot/devmapper: log exported methods correctly * Makefile: fix DESTDIR and PREFIX concatenation ([#5662](https://github.com/containerd/containerd/pull/5662)) * Makefile: fix DESTDIR and PREFIX concatenation * Cri integration cleanup ([#5287](https://github.com/containerd/containerd/pull/5287)) * tests: Use EnsureImageExists for image pulling * tests: Refactors PodSandbox creation * move sys.FMountat() into mount package and un-export ([#5641](https://github.com/containerd/containerd/pull/5641)) * un-export mount.FMountat * move sys.FMountat() into mount package * sandbox: send pod UID to CNI plugins as K8S_POD_UID ([#5640](https://github.com/containerd/containerd/pull/5640)) * sandbox: send pod UID to CNI plugins as K8S_POD_UID * sys: remove StatAtime(), StatCtime(), StatMtime() and StatATimeAsTime() utils ([#5639](https://github.com/containerd/containerd/pull/5639)) * sys: remove StatAtime(), StatCtime(), StatMtime() and StatATimeAsTime() utils * content/local: inline sys.StatATimeAsTime() ([#5633](https://github.com/containerd/containerd/pull/5633)) * content/local: inline sys.StatATimeAsTime() * allow multi gpu to be specified via ctr ([#5636](https://github.com/containerd/containerd/pull/5636)) * allow multi gpu to be specified via ctr * go.mod: runc v1.0.0 * update runc binary to v1.0.0 GA * fixing some doc links ([#5629](https://github.com/containerd/containerd/pull/5629)) * fixing some doc links * Sync integration/go.mod with root go.mod ([#5623](https://github.com/containerd/containerd/pull/5623)) * Sync integration/go.mod with root go.mod * archive: Expose ChangeWriter to allow customized diff computing ([#5615](https://github.com/containerd/containerd/pull/5615)) * archive: Expose ChangeWriter to allow customized diff computing * CI: Switch to the available latest images ([#5625](https://github.com/containerd/containerd/pull/5625)) * CI: Switch to available latest images * fix deprecation config for default runtime * Re-enable criu in main integration runs ([#5614](https://github.com/containerd/containerd/pull/5614)) * Re-enable criu in main integration runs * runtime,v2: Enable debug when containerd is on debug+ log level ([#5617](https://github.com/containerd/containerd/pull/5617)) * runtime,v2: Enable debug when containerd is on debug+ log level * github.com/golang/protobuf/proto is deprecated * Update github.com/golang/protobuf from v1.3.5 to v1.4.3 * Update google.golang.org/grpc from v1.27.1 to v1.38.0 * Increase golangci-lint timeout * ctr flags of container rootfs propagation ([#5611](https://github.com/containerd/containerd/pull/5611)) * command line flags of setting container rootfs propagation * add cgroupv2 setup for cos with a flag * Update gotestsum to add timestamps to junit output ([#5612](https://github.com/containerd/containerd/pull/5612)) * Update gotestsum to add timestamps to junit output * Allow to pass --no-cgroups option to nvidia-container-cli ([#5604](https://github.com/containerd/containerd/pull/5604)) * Allow to pass --no-cgroup option to nvidia-container-cli * Makefile: FHS conformant manpage installation pathes ([#5577](https://github.com/containerd/containerd/pull/5577)) * Makefile: FHS conformant manpage installation pathes * Add proper Go version before project checks ([#5594](https://github.com/containerd/containerd/pull/5594)) * Add proper Go version before project checks * Enable cri-integration in Windows Periodic Tests ([#5580](https://github.com/containerd/containerd/pull/5580)) * Enable cri-integration in Windows Periodic Tests * adds explanation for seccomp unset/unconfined default vs runtime default ([#5573](https://github.com/containerd/containerd/pull/5573)) * adds explanation for seccomp unset/unconfined default vs runtime default * Fix cleanup context of teardownPodNetwork ([#5569](https://github.com/containerd/containerd/pull/5569)) * Fix cleanup context of teardownPodNetwork * update integration/client go.sum ([#5572](https://github.com/containerd/containerd/pull/5572)) * update integration/client go.sum * Revert diff/walking error change ([#5566](https://github.com/containerd/containerd/pull/5566)) * Revert diff/walking error change * Update opencontainers/selinux to v1.8.2 ([#5562](https://github.com/containerd/containerd/pull/5562)) * Update opencontainers/selinux to v1.8.2 * fix invalid validation error checking ([#5565](https://github.com/containerd/containerd/pull/5565)) * fix invalid validation error checking * diff/walking: fix defer cleanup ([#5551](https://github.com/containerd/containerd/pull/5551)) * diff/walking: fix defer cleanup * Windows periodic job: Add creation timestamp to RG ([#5559](https://github.com/containerd/containerd/pull/5559)) * Add creation timestamp to RG * Fix error case in Windows layer cleanup ([#5328](https://github.com/containerd/containerd/pull/5328)) * Fix error case in Windows layer cleanup * Use DeactivateLayer to unlock layers that we cannot rename ([#5422](https://github.com/containerd/containerd/pull/5422)) * Small typo fix "reimporst" * Use DeactivateLayer to recover layers that we cannot rename * tests: Symlink volume tests ([#5284](https://github.com/containerd/containerd/pull/5284)) * tests: Symlink volume tests * Makefile: fix DESTDIR environment variable behaviour ([#5535](https://github.com/containerd/containerd/pull/5535)) * Makefile: fix DESTDIR environment variable behaviour * Change Wrapf of non-error to an actual error ([#5560](https://github.com/containerd/containerd/pull/5560)) * Change Wrapf of non-error to an actual error * Install apparmor parser for arm64 environment * scrub the stale TODO ([#5536](https://github.com/containerd/containerd/pull/5536)) * scrub the stale TODO * docs: explicitly mention containerd's Prometheus path ([#5554](https://github.com/containerd/containerd/pull/5554)) * docs: explicitly mention containerd's Prometheus path * integration: Cleanup containerd on test teardown ([#5553](https://github.com/containerd/containerd/pull/5553)) * integration: Cleanup containerd on test teardown * docs/cri: update links ([#5548](https://github.com/containerd/containerd/pull/5548)) * docs/cri: update ocicrypt link * docs/cri: fix broken links * Update Windows periodic tests ([#5544](https://github.com/containerd/containerd/pull/5544)) * Update Windows periodic tests * Add CI periodic Windows Jobs. ([#5165](https://github.com/containerd/containerd/pull/5165)) * Schedule Windows job daily after midnight. * Update windows-periodic.yml * Add CI periodic Windows Jobs. * Rename atomicWrite to writeToCompletion ([#5273](https://github.com/containerd/containerd/pull/5273)) * Rename atomicWrite to writeToCompletion * Do not run btrfs tests if btrfs kernel module is not loaded ([#5539](https://github.com/containerd/containerd/pull/5539)) * Do not run btrfs tests if btrfs kernel module is not loaded * Fix incorrect UA used for registry authentication ([#5533](https://github.com/containerd/containerd/pull/5533)) * Fix incorrect UA used for registry authentication * ctr: parse mount options with embedded = character ([#5531](https://github.com/containerd/containerd/pull/5531)) * ctr: parse mount options with embedded = character * Fix mounts for FreeBSD ([#5472](https://github.com/containerd/containerd/pull/5472)) * Add ruleset=4 option * Remove mountpoints not commonly mounted on FreeBSD * Add copyright header & make sure compilation succeeds on all platforms * Fix mounts for FreeBSD * ctr: make exec pty behavior consistent with run ([#5527](https://github.com/containerd/containerd/pull/5527)) * ctr: exec handle pty resize after Start * ctr: exec setup IO with console * Makefile: use $@ for target file names ([#5534](https://github.com/containerd/containerd/pull/5534)) * Makefile: use $@ for target file names * Fix small typo ([#5528](https://github.com/containerd/containerd/pull/5528)) * Fix small typo * Don't check for apparmor_parser to be present ([#5519](https://github.com/containerd/containerd/pull/5519)) * update the link * Don't check for apparmor_parser to be present * Remove useless lines ([#5520](https://github.com/containerd/containerd/pull/5520)) * Remove useless lines * Fixed typos in docs ([#5509](https://github.com/containerd/containerd/pull/5509)) * fixed typos * Try next mirror in case of non-404 errors, too ([#5275](https://github.com/containerd/containerd/pull/5275)) * Try next mirror in case of non-404 errors, too * bump runc version to v1.0.0-rc95 ([#5514](https://github.com/containerd/containerd/pull/5514)) * bump runc version to v1.0.0-rc95 * update runc binary to v1.0.0-rc95 ([#5511](https://github.com/containerd/containerd/pull/5511)) * update runc binary to v1.0.0-rc95 * Bump github.com/Microsoft/go-winio from 0.4.15 to 0.5.0 ([#5508](https://github.com/containerd/containerd/pull/5508)) * Bump github.com/Microsoft/go-winio from 0.4.15 to 0.5.0 * Bump github.com/opencontainers/selinux from 1.8.0 to 1.8.1 ([#5507](https://github.com/containerd/containerd/pull/5507)) * Bump github.com/opencontainers/selinux from 1.8.0 to 1.8.1 * Makefile: allow overriding install command via environment ([#5493](https://github.com/containerd/containerd/pull/5493)) * Makefile: allow overriding install command via environment * tests: Adds support for Windows cri-integration tests ([#5163](https://github.com/containerd/containerd/pull/5163)) * tests: Adds support for Windows cri-integration tests * Update docker resolver to authorize redirects ([#5504](https://github.com/containerd/containerd/pull/5504)) * Update docker resolver to authorize redirects * bump hcsshim version to v0.8.17 ([#5505](https://github.com/containerd/containerd/pull/5505)) * bump hcsshim version to v0.8.17 * Release binary update for imgcrypt ([#5498](https://github.com/containerd/containerd/pull/5498)) * just release ctd-decoder not ctr-enc * Merge remote-tracking branch 'upstream/master' * Pin integration test image for alpine * cri-integration tests: Pull images once ([#5313](https://github.com/containerd/containerd/pull/5313)) * tests: Prepull images used in tests * plugin: optimize the check for the last registration ([#5440](https://github.com/containerd/containerd/pull/5440)) * plugin: optimize the check for the last registration * metadata: modify NewLeaseManager to return leases.Manager ([#5465](https://github.com/containerd/containerd/pull/5465)) * metadata: modify NewLeaseManager to return leases.Manager * Skip TLS verification for localhost ([#5100](https://github.com/containerd/containerd/pull/5100)) * Skip TLS verification for localhost * Merge remote-tracking branch 'upstream/master' * Makefile: make sure manpages are built before install-man ([#5492](https://github.com/containerd/containerd/pull/5492)) * Makefile: make sure manpages are built before install-man * adds description for hosts.toml ([#5309](https://github.com/containerd/containerd/pull/5309)) * adds credentials description * adds description for hosts.toml * Prepare default branch rename ([#5459](https://github.com/containerd/containerd/pull/5459)) * Prepare default branch rename * Merge remote-tracking branch 'upstream/master' * Update runc to rc94 ([#5473](https://github.com/containerd/containerd/pull/5473)) * Update vendored runc to v1.0.0.0-rc94 * Update the runc binary used with containerd to runc v1.0.0-rc94 * Fix `content.ReaderAt` close ([#5468](https://github.com/containerd/containerd/pull/5468)) * Fix content.ReaderAt close * Update releases doc with updated support timeline ([#5466](https://github.com/containerd/containerd/pull/5466)) * Update releases doc with updated support timeline * tests: add test for adaptor ([#5452](https://github.com/containerd/containerd/pull/5452)) * tests: add test for adaptor * Makefile: allow overriding go command by environment ([#5450](https://github.com/containerd/containerd/pull/5450)) * Makefile: allow overriding go command by environment * update to new cri-tools make install ([#5462](https://github.com/containerd/containerd/pull/5462)) * update to new cri-tools make install * Update Go to 1.16.4 ([#5461](https://github.com/containerd/containerd/pull/5461)) * Update Go to 1.16.4 * Merge remote-tracking branch 'upstream/release/1.5' * [release/1.5] go.mod: cut circular dependency on github.com/containerd/containerd ([#5457](https://github.com/containerd/containerd/pull/5457)) * go.mod: cut circular dependency on github.com/containerd/containerd * integration/client: go mod tidy * oci: fix WithDevShmSize ([#5063](https://github.com/containerd/containerd/pull/5063)) * oci: fix WithDevShmSize * [release/1.5] cherry-pick: windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink ([#5454](https://github.com/containerd/containerd/pull/5454)) * windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink * windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink ([#5411](https://github.com/containerd/containerd/pull/5411)) * windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink * doc: add missing namespaces package ([#5448](https://github.com/containerd/containerd/pull/5448)) * doc: add missing namespaces package * update seccomp version ([#5445](https://github.com/containerd/containerd/pull/5445)) * update seccomp version * Update golang.org/x/sys to add linux/ppc support ([#5436](https://github.com/containerd/containerd/pull/5436)) * Update golang.org/x/sys to add linux/ppc support * go.mod: cut circular dependency on github.com/containerd/containerd ([#5441](https://github.com/containerd/containerd/pull/5441)) * go.mod: cut circular dependency on github.com/containerd/containerd * integration/client: go mod tidy * Fix different registry hosts referencing the same auth config. ([#5446](https://github.com/containerd/containerd/pull/5446)) * Fix different registry hosts referencing the same auth config. </p> </details> ### Changes from containerd/cgroups <details><summary>33 commits</summary> <p> * v2: Fix inotify fd leak when cgroup is deleted ([#212](https://github.com/containerd/cgroups/pull/212)) * v2: add test case for Manager.EventChan() behavior * v2: flip error handling for readKVStat("memory.events") to reduce indentation * v2: manager: factor out memory.events parsing * v2: Fix inotify leak when cgroup is deleted * fix Implicit memory aliasing in for loop ([#214](https://github.com/containerd/cgroups/pull/214)) * fix Implicit memory aliasing in for loop * Fix potential dirfd leak. ([#210](https://github.com/containerd/cgroups/pull/210)) * Fix potential dirfd leak. * cgroup: Optionally add process and task to a subsystems subset ([#203](https://github.com/containerd/cgroups/pull/203)) * cgroup: Optionally add process and task to a subsystems subset * replace pkg/errors from vendor ([#208](https://github.com/containerd/cgroups/pull/208)) * replace pkg/errors from vendor * cgroup.go: avoid panic on nil interface ([#207](https://github.com/containerd/cgroups/pull/207)) * cgroup.go: avoid panic on nil interface * Improvements on cgroup v2 support ([#204](https://github.com/containerd/cgroups/pull/204)) * cgroupv2: reset lastErr to nil when subtree control is successfully written * cgroupv2: enable controllers before setting resources in NewChild() * v2: remove unimplemented errors and ErrorHandler, IgnoreNotExist ([#201](https://github.com/containerd/cgroups/pull/201)) * v2: remove ErrorHandler and IgnoreNotExist as they are not implemented * v2: remove errors that are never returned * v1: reduce duplicated code ([#202](https://github.com/containerd/cgroups/pull/202)) * v1: reduce duplicated code * cgroup v1: implement AddProc() ([#200](https://github.com/containerd/cgroups/pull/200)) * cgroup v1: implement AddProc() * Rename branch from master to main ([#199](https://github.com/containerd/cgroups/pull/199)) * Rename branch from master to main * utils: export ParseCgroupFile() ([#197](https://github.com/containerd/cgroups/pull/197)) * utils: export ParseCgroupFile() * go.mod: coreos/go-systemd/v22 v22.3.2 to prepare for deprecations ([#194](https://github.com/containerd/cgroups/pull/194)) * go.mod: coreos/go-systemd/v22 v22.3.2 to prepare for deprecations * Use /proc/partitions to get device names ([#195](https://github.com/containerd/cgroups/pull/195)) * Use /proc/partitions to get device names </p> </details> ### Changes from containerd/console <details><summary>6 commits</summary> <p> * Fix CI ([#55](https://github.com/containerd/console/pull/55)) * Fix CI * Stop using pkg/errors * Add support for z/OS ([#46](https://github.com/containerd/console/pull/46)) * Console test on z/OS * Add support for z/OS </p> </details> ### Changes from containerd/continuity <details><summary>28 commits</summary> <p> * fs: use syscall.Timespec.Unix ([#193](https://github.com/containerd/continuity/pull/193)) * fs: use syscall.Timespec.Unix * Update CI Go version to 1.17 ([#192](https://github.com/containerd/continuity/pull/192)) * Update CI Go version to 1.17 * Build containerd/continuity on multiple Unix OSes ([#190](https://github.com/containerd/continuity/pull/190)) * Build containerd/continuity on multiple Unix OSes * Do not log errors before returning them ([#191](https://github.com/containerd/continuity/pull/191)) * Do not log errors before returning them * Copy Windows file metadata ([#188](https://github.com/containerd/continuity/pull/188)) * Copy Windows file metadata * fix fmt.Errorf("%w", err) on err == nil ([#187](https://github.com/containerd/continuity/pull/187)) * fix fmt.Errorf("%w", err) on err == nil * Remove direct dependency on github.com/pkg/errors ([#185](https://github.com/containerd/continuity/pull/185)) * run gofmt with Go 1.17 * remove direct dependency on github.com/pkg/errors * Fix darwin issues ([#186](https://github.com/containerd/continuity/pull/186)) * update AUTHORS * darwin: use utimensat syscall instead of utimes * fix darwin usage of du command * go.mod: bazil.org/fuse v0.0.0-20200407214033-5883e5a4b5125 ([#161](https://github.com/containerd/continuity/pull/161)) * go.mod: bazil.org/fuse v0.0.0-20200407214033-5883e5a4b5125 * fs/stat: add FreeBSD, and cleanup some nolint-comments ([#184](https://github.com/containerd/continuity/pull/184)) * reformat nolint comments * fs/stat: add FreeBSD * Rename branch from master to main ([#182](https://github.com/containerd/continuity/pull/182)) * Rename branch from master to main * testutil/loopback: print more debug info ([#180](https://github.com/containerd/continuity/pull/180)) * testutil/loopback: print more debug info </p> </details> ### Changes from containerd/go-cni <details><summary>18 commits</summary> <p> * run setup on networks in parallel ([#76](https://github.com/containerd/go-cni/pull/76)) * switch to direct index * run setup on networks in parallel * remove: Continue on "not found" errors ([#74](https://github.com/containerd/go-cni/pull/74)) * remove: Continue on "not found" errors * go.mod: github.com/containernetworking/cni v1.0.1 ([#72](https://github.com/containerd/go-cni/pull/72)) * go.mod: github.com/containernetworking/cni v1.0.1 * remove direct dependency on github.com/pkg/errors ([#71](https://github.com/containerd/go-cni/pull/71)) * remove direct dependency on github.com/pkg/errors * update CNI to v1.0.0 ([#70](https://github.com/containerd/go-cni/pull/70)) * test: add TestLibCNIType100 * update CNI to v1.0.0 * Rename branch from master to main ([#69](https://github.com/containerd/go-cni/pull/69)) * Rename branch from master to main * result: change Raw from a struct field to a method ([#68](https://github.com/containerd/go-cni/pull/68)) * result: change Raw from a struct field to a method * result: expose raw result ([#67](https://github.com/containerd/go-cni/pull/67)) * result: expose raw result </p> </details> ### Changes from containerd/imgcrypt <details><summary>32 commits</summary> <p> * CHANGES: Updated CHANGES document for 1.1.3 release ([#64](https://github.com/containerd/imgcrypt/pull/64)) * CHANGES: Updated CHANGES document for 1.1.3 release * docs: update project branch to main ([#63](https://github.com/containerd/imgcrypt/pull/63)) * docs: update project branch to main * Update linter to match containerd repo ([#61](https://github.com/containerd/imgcrypt/pull/61)) * Update linter to match containerd repo * update CI golang version * Bump github.com/containerd/containerd from 1.5.7 to 1.5.8 ([#59](https://github.com/containerd/imgcrypt/pull/59)) * Bump github.com/containerd/containerd from 1.5.7 to 1.5.8 * maint: Update to ocicrypt v1.1.2 ([#57](https://github.com/containerd/imgcrypt/pull/57)) * maint: Update to ocicrypt v1.1.2 * Decouple CreateCryptoConfig() from github.com/urfave/cli ([#56](https://github.com/containerd/imgcrypt/pull/56)) * Decouple CreateCryptoConfig() from github.com/urfave/cli * Bump github.com/containerd/containerd from 1.5.5 to 1.5.7 ([#55](https://github.com/containerd/imgcrypt/pull/55)) * Bump github.com/containerd/containerd from 1.5.5 to 1.5.7 * replace pkg/errors and bump related library * README: Fix CRI decryption document URL ([#53](https://github.com/containerd/imgcrypt/pull/53)) * README: Fix CRI decryption document URL * Bump github.com/containerd/containerd from 1.5.2 to 1.5.4 ([#52](https://github.com/containerd/imgcrypt/pull/52)) * Bump github.com/containerd/containerd from 1.5.2 to 1.5.4 * Bump containerd to 1.5.2 ([#51](https://github.com/containerd/imgcrypt/pull/51)) * Bump containerd to 1.5.2 * images: Implement ConvertFunc for image en- and decryption ([#49](https://github.com/containerd/imgcrypt/pull/49)) * images: Implement ConvertFunc for image en- and decryption * Add containerd-release to makefile ([#48](https://github.com/containerd/imgcrypt/pull/48)) * Remove ctr-enc from installation * vendor sync up with containerd 1.5 ga, and runc94 ([#47](https://github.com/containerd/imgcrypt/pull/47)) * sync up with containerd 1.5 ga, and runc94 * Sync ctr-enc with containerd's ctr v1.5.0-rc.3 ([#46](https://github.com/containerd/imgcrypt/pull/46)) * CICD: Run 'apt update' before pulling packages * ctr-enc: Set the version for ctr-enc when linking * Sync ctr-enc with containerd's ctr v1.5.0-rc.3 </p> </details> ### Changes from containerd/ttrpc <details><summary>34 commits</summary> <p> * Add protoc-gen-go-ttrpc ([#96](https://github.com/containerd/ttrpc/pull/96)) * Add protoc-gen-go-ttrpc * client: Handle sending/receiving in separate goroutines ([#94](https://github.com/containerd/ttrpc/pull/94)) * client: Handle sending/receiving in separate goroutines * Run Protobuild in GitHub Actions ([#95](https://github.com/containerd/ttrpc/pull/95)) * Run Protobuild in GitHub Actions * Re-generate example.pb.go * replace pkg/errors ([#93](https://github.com/containerd/ttrpc/pull/93)) * replace pkg/errors from vendor * Rename branch from master to main ([#86](https://github.com/containerd/ttrpc/pull/86)) * Rename branch from master to main * Make "go test" and "go build" work on macOS ([#85](https://github.com/containerd/ttrpc/pull/85)) * Make the example command buildable on macOS * Run GitHub Actions on macOS * Make "go test" work on macOS * Return Unimplemented when services or methods are not implemented ([#83](https://github.com/containerd/ttrpc/pull/83)) * Return Unimplemented when services or methods are not implemented * Remove "Very new" and checked TODO items ([#84](https://github.com/containerd/ttrpc/pull/84)) * Remove "Very new" and checked TODO items * removing glide from ignore ([#82](https://github.com/containerd/ttrpc/pull/82)) * removing glide from ignore * go.mod: update dependencies ([#79](https://github.com/containerd/ttrpc/pull/79)) * go.mod: github.com/prometheus/procfs v0.6.0 * go.mod: google.golang.org/genproto v0.0.0-20200224152610-e50cd9704f63 * go.mod: google.golang.org/grpc v1.27.1 * go.mod: github.com/gogo/protobuf v1.3.2 * remove travis, add codecov badge ([#78](https://github.com/containerd/ttrpc/pull/78)) * CI: add codecov badge to readme * CI: remove travis * Use GitHub Actions for CI ([#77](https://github.com/containerd/ttrpc/pull/77)) * Use GitHub Actions for CI * go.mod: sirupsen/logrus v1.7.0 ([#76](https://github.com/containerd/ttrpc/pull/76)) * go.mod: sirupsen/logrus v1.7.0 * go mod tidy </p> </details> ### Dependency Changes * **cloud.google.com/go** v0.81.0 **_new_** * **github.com/AdaLogics/go-fuzz-headers** 6c3934b029d8 **_new_** * **github.com/Microsoft/go-winio** v0.4.17 -> v0.5.1 * **github.com/Microsoft/hcsshim** v0.8.16 -> v0.9.2 * **github.com/blang/semver** v3.5.1 **_new_** * **github.com/cenkalti/backoff/v4** v4.1.2 **_new_** * **github.com/cespare/xxhash/v2** v2.1.1 -> v2.1.2 * **github.com/cilium/ebpf** v0.4.0 -> v0.7.0 * **github.com/containerd/cgroups** v1.0.1 -> v1.0.3 * **github.com/containerd/console** v1.0.2 -> v1.0.3 * **github.com/containerd/continuity** v0.1.0 -> v0.2.2 * **github.com/containerd/go-cni** v1.0.2 -> v1.1.1 * **github.com/containerd/imgcrypt** v1.1.1 -> v1.1.3 * **github.com/containerd/ttrpc** v1.0.2 -> v1.1.0 * **github.com/containernetworking/cni** v0.8.1 -> v1.0.1 * **github.com/containernetworking/plugins** v0.9.1 -> v1.0.1 * **github.com/containers/ocicrypt** v1.1.1 -> v1.1.2 * **github.com/coreos/go-systemd/v22** v22.1.0 -> v22.3.2 * **github.com/go-logr/logr** v0.2.0 -> v1.2.2 * **github.com/go-logr/stdr** v1.2.2 **_new_** * **github.com/godbus/dbus/v5** v5.0.3 -> v5.0.6 * **github.com/golang/groupcache** 8c9f03a8e57e -> 41bb18bfe9da * **github.com/golang/protobuf** v1.3.5 -> v1.5.2 * **github.com/google/go-cmp** v0.5.4 -> v0.5.6 * **github.com/google/gofuzz** v1.1.0 -> v1.2.0 * **github.com/grpc-ecosystem/go-grpc-middleware** v1.3.0 **_new_** * **github.com/grpc-ecosystem/grpc-gateway** v1.16.0 **_new_** * **github.com/hashicorp/errwrap** v1.0.0 -> v1.1.0 * **github.com/hashicorp/go-multierror** v1.0.0 -> v1.1.1 * **github.com/imdario/mergo** v0.3.11 -> v0.3.12 * **github.com/intel/goresctrl** v0.2.0 **_new_** * **github.com/json-iterator/go** v1.1.10 -> v1.1.12 * **github.com/moby/spdystream** v0.2.0 **_new_** * **github.com/moby/sys/mountinfo** v0.4.1 -> v0.5.0 * **github.com/moby/sys/signal** v0.6.0 **_new_** * **github.com/moby/sys/symlink** v0.1.0 -> v0.2.0 * **github.com/modern-go/reflect2** v1.0.1 -> v1.0.2 * **github.com/opencontainers/image-spec** v1.0.1 -> 693428a734f5 * **github.com/opencontainers/runc** v1.0.0-rc93 -> v1.1.0 * **github.com/opencontainers/runtime-spec** e6143ca7d51d -> 1c3f411f0417 * **github.com/opencontainers/selinux** v1.8.0 -> v1.10.0 * **github.com/pelletier/go-toml** v1.8.1 -> v1.9.3 * **github.com/prometheus/client_golang** v1.7.1 -> v1.11.0 * **github.com/prometheus/common** v0.10.0 -> v0.30.0 * **github.com/prometheus/procfs** v0.6.0 -> v0.7.3 * **github.com/satori/go.uuid** v1.2.0 **_new_** * **github.com/sirupsen/logrus** v1.7.0 -> v1.8.1 * **github.com/spf13/pflag** v1.0.5 **_new_** * **github.com/stretchr/testify** v1.6.1 -> v1.7.0 * **github.com/vishvananda/netlink** f5de75959ad5 **_new_** * **github.com/vishvananda/netns** 2eb08e3e575f **_new_** * **go.etcd.io/bbolt** v1.3.5 -> v1.3.6 * **go.opencensus.io** v0.22.3 -> v0.23.0 * **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc** v0.28.0 **_new_** * **go.opentelemetry.io/otel** v1.3.0 **_new_** * **go.opentelemetry.io/otel/exporters/otlp/internal/retry** v1.3.0 **_new_** * **go.opentelemetry.io/otel/exporters/otlp/otlptrace** v1.3.0 **_new_** * **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc** v1.3.0 **_new_** * **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp** v1.3.0 **_new_** * **go.opentelemetry.io/otel/sdk** v1.3.0 **_new_** * **go.opentelemetry.io/otel/trace** v1.3.0 **_new_** * **go.opentelemetry.io/proto/otlp** v0.11.0 **_new_** * **golang.org/x/crypto** 0c34fe9e7dc2 -> 32db794688a5 * **golang.org/x/net** e18ecbb05110 -> fe4d6282115f * **golang.org/x/oauth2** bf48bf16ab8d -> 2bc19b11175f * **golang.org/x/sync** 09787c993a3a -> 036812b2e83c * **golang.org/x/sys** 47abb6519492 -> 1d35b9e2eb4e * **golang.org/x/term** 7de9c90e9dd1 -> 6886f2dfbf5b * **golang.org/x/text** v0.3.4 -> v0.3.7 * **golang.org/x/time** 3af7569d3a1e -> 1f47c861a9ac * **google.golang.org/appengine** v1.6.5 -> v1.6.7 * **google.golang.org/grpc** v1.27.1 -> v1.43.0 * **google.golang.org/protobuf** v1.27.1 **_new_** * **gopkg.in/yaml.v3** 9f266ea9e77c -> 496545a6307b * **k8s.io/api** v0.20.6 -> v0.22.5 * **k8s.io/apimachinery** v0.20.6 -> v0.22.5 * **k8s.io/apiserver** v0.20.6 -> v0.22.5 * **k8s.io/client-go** v0.20.6 -> v0.22.5 * **k8s.io/component-base** v0.20.6 -> v0.22.5 * **k8s.io/cri-api** v0.20.6 -> v0.23.1 * **k8s.io/klog/v2** v2.4.0 -> v2.30.0 * **k8s.io/utils** 67b214c5f920 -> cb0fa318a74b * **sigs.k8s.io/structured-merge-diff/v4** v4.0.3 -> v4.1.2 Previous release can be found at [v1.5.0](https://github.com/containerd/containerd/releases/tag/v1.5.0)
-
v1.6.0-rc.1
containerd 1.6.0-rc.1 Welcome to the v1.6.0-rc.1 release of containerd! The seventh major release of containerd includes many improvements and added support to increase overall compatibility and stability. ### Highlights #### Runtime * **Add runtime label to metrics** ([#5744](https://github.com/containerd/containerd/pull/5744)) * **Cleanup task delete logic in v2 shim** ([#5813](https://github.com/containerd/containerd/pull/5813)) * **Add support for shim plugins** ([#5817](https://github.com/containerd/containerd/pull/5817)) * **Decouple shim and task manager** ([#5918](https://github.com/containerd/containerd/pull/5918)) * **Add runc shim support for core scheduling** ([#6011](https://github.com/containerd/containerd/pull/6011)) * **Update shim client connect attempt to fail fast when shim errors** ([#6031](https://github.com/containerd/containerd/pull/6031)) * **Add support for absolute path to shim binaries** ([#6206](https://github.com/containerd/containerd/pull/6206)) * **Update runc to v1.1.0** ([#6375](https://github.com/containerd/containerd/pull/6375)) #### Windows * **Add support for Windows HostProcess containers** ([#5131](https://github.com/containerd/containerd/pull/5131)) * **Add support for Windows resource limits** ([#5778](https://github.com/containerd/containerd/pull/5778)) #### CRI * **Add CNI configuration based on runtime class** ([#4695](https://github.com/containerd/containerd/pull/4695)) * **Add support for Intel RDT** ([#5439](https://github.com/containerd/containerd/pull/5439)) * **Add support for CRI v1 and v1alpha in parallel** ([#5619](https://github.com/containerd/containerd/pull/5619)) * **Add support for unified resources field for cgroups v2** ([#5627](https://github.com/containerd/containerd/pull/5627)) * **Add IP preference configuration for reporting pod IP** ([#5964](https://github.com/containerd/containerd/pull/5964)) * **Implement new CRI pod sandbox stats API** ([#6113](https://github.com/containerd/containerd/pull/6113)) * **Add sandbox and container latency metrics** ([#6111](https://github.com/containerd/containerd/pull/6111)) * **Add namespace to ttrpc and grpc plugin connections** ([#6130](https://github.com/containerd/containerd/pull/6130)) * **Add option to allow ping sockets and privileged ports with no capabilities** ([#6170](https://github.com/containerd/containerd/pull/6170)) * **Add support for configuring swap** ([#6320](https://github.com/containerd/containerd/pull/6320)) #### Other * **Add support for client TLS Auth for grpc** ([#5606](https://github.com/containerd/containerd/pull/5606)) * **Add xfs support for devicemapper snapshotter** ([#5610](https://github.com/containerd/containerd/pull/5610)) * **Add metric exposing build version and revision** ([#5965](https://github.com/containerd/containerd/pull/5965)) * **Add support for custom fs options in devmapper snapshotter** ([#6122](https://github.com/containerd/containerd/pull/6122)) * **Update introspection service to show GRPC plugins** ([#6432](https://github.com/containerd/containerd/pull/6432)) #### Client * **Allow WithServices to use custom implementations** ([#5709](https://github.com/containerd/containerd/pull/5709)) * **Support custom compressor for walking differ** ([#5735](https://github.com/containerd/containerd/pull/5735)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Derek McGowan * Phil Estes * Akihiro Suda * Wei Fu * Maksym Pavlenko * Sebastiaan van Stijn * Kazuyoshi Kato * Mike Brown * Michael Crosby * Claudiu Belu * Daniel Canter * haoyun * Stefan Berger * Gabriel Adrian Samfira * Brian Goff * zounengren * AdamKorcz * Adelina Tuvenie * Kohei Tokunaga * Davanum Srinivas * Nashwan Azhari * Samuel Karp * Shiming Zhang * Enrico Weigelt, metux IT consult * Markus Lehtonen * Alakesh Haloi * Hajime Tazaki * Iceber Gu * Kevin Parsons * Aditi Sharma * David Porter * Gijs Peskens * Brandon Lum * Cody Roseborough * Danielle Lancashire * Jacob MacElroy * dependabot[bot] * ningmingxiao * wanglei * Alexandre Peixoto Ferreira * Fabiano Fidêncio * Furkan Türkal * Jiaming Xu * Kir Kolyshkin * Miao Wang * Neil Johnson * Paul "TBBle" Hampson * Priyanka Saggu * Romain Aviolat * Samuel Ortiz * Sunghoon Kang * Takumasa Sakao * Tobias Klauser * Tõnis Tiigi * Zhiyu Li * Alexander Minbaev * Alexey Ivanov * Artem Khramov * Aurelien Lun-Sin * Ben Hutchings * Cory Bennett * Da McGrady * Dan Williams * Eng Zer Jun * Eric Ernst * Ethan Chen * Fupan Li * Gaurav Gahlot * Gunju Kim * Jacob Blain Christen * James Sturtevant * Jan Klippel * Jayme Howard * Jiajun Jiang * Jintao Zhang * Justin Terry * Kaijie Chen * Kante * Kern Walster * Kitt Hsu * Lantao Liu * Ma Xinjian * Manabu Sugimoto * Manuel Alejandro de Brito Fontes * Mark Rossetti * Markus Lippert * Mikko Ylinen * Ng Yang * Nicolas Chariglione * Ning Li * Olli Janatuinen * Peri Thompson * Quan Tian * Radostin Stoyanov * Rui Lopes * Sambhav Kothari * Sebastian Hasler * Sergey Kanzhelev * Yang Yang * Yifan Yuan * Zilong Wang * Zufar Dhiyaulhaq * botieking98 * chenxiaoyu * jayonlau * jerryzhuang * linrunlong * scuzhanglei * wangzhan * Étienne Guesnet ### Changes <details><summary>984 commits</summary> <p> * Prepare release notes for v1.6.0-rc.1 ([#6462](https://github.com/containerd/containerd/pull/6462)) * Prepare release notes for v1.6.0-rc.1 * Add support for skipping non-dist blob push ([#6424](https://github.com/containerd/containerd/pull/6424)) * ctr: flag to toggle non-distributable blob push * Add image handler to skip non-distributable blobs. * Compile binaries for go1.16 and go1.17 in CI ([#6461](https://github.com/containerd/containerd/pull/6461)) * Compile binaries for go1.16 and go1.17 in CI * services/introspection: fix plugin caching to show grpc plugins ([#6432](https://github.com/containerd/containerd/pull/6432)) * Update caching logic to avoid map access * services/introspection: support to show introspection grpc service * Integration: Change to Windows Server 2022 build number constant ([#6458](https://github.com/containerd/containerd/pull/6458)) * Integration: Change to Windows Server 2022 build number constant * Update kubernetes vendor to 0.22.5 ([#6460](https://github.com/containerd/containerd/pull/6460)) * Update kubernetes vendor to 0.22.5 * Fix rdt build tags for go 1.16 ([#6459](https://github.com/containerd/containerd/pull/6459)) * Fix rdt build tags for go 1.16 * Remove submodule go mod ([#6439](https://github.com/containerd/containerd/pull/6439)) * Remove api go submodule * Update makefile to remove API submodule * go.mod: Update hcsshim to v0.9.2 ([#6453](https://github.com/containerd/containerd/pull/6453)) * go.mod: Update hcsshim to v0.9.2 * update runc to v1.1.0 ([#6375](https://github.com/containerd/containerd/pull/6375)) * go.mod: github.com/opencontainers/runc v1.1.0 * update runc binary to v1.1.0 * tracing: fix OTLP tracer's initialization ([#6443](https://github.com/containerd/containerd/pull/6443)) * tracing: fix OTLP tracer's initialization * gha: run CodeQL scan on pull requests ([#6386](https://github.com/containerd/containerd/pull/6386)) * gha: run CodeQL scan on pull requests * Do not automatically inject client traces ([#6445](https://github.com/containerd/containerd/pull/6445)) * Do not automatically inject client traces * [containerd-stress] delete useless code ([#6451](https://github.com/containerd/containerd/pull/6451)) * delete useless code * Revert "Add shared content label to namespaces" ([#6440](https://github.com/containerd/containerd/pull/6440)) * Revert "Add shared content label to namespaces" * Add ppc64 support for test images ([#6435](https://github.com/containerd/containerd/pull/6435)) * Add ppc64 support for test images * ctr: Unify the delete subcommand alias ([#6427](https://github.com/containerd/containerd/pull/6427)) * ctr: Unify the delete subcommand alias * Prepare release notes for v1.6.0-rc.0 ([#6431](https://github.com/containerd/containerd/pull/6431)) * Prepare release notes for v1.6.0-rc.0 * Integration: Switch to using `auth` Gcloud action in Windows workflow. ([#6397](https://github.com/containerd/containerd/pull/6397)) * Integration: Switch to `upload-cloud-storage` Gcloud action. * Integration: Switch to using `auth` Gcloud action in Windows workflow. * remove io/ioutil ([#6426](https://github.com/containerd/containerd/pull/6426)) * remove io/ioutil * test: e2e node COS cgroupv2 script ([#6418](https://github.com/containerd/containerd/pull/6418)) * test: e2e node COS cgroupv2 script * Integration: Enable CRITest on Windows 2022. ([#6378](https://github.com/containerd/containerd/pull/6378)) * Enable critest tests on Windows Server 2022. * Parametrize CRITest test images in Windows Periodic workflow. * Update error message for apparmor parser ([#6415](https://github.com/containerd/containerd/pull/6415)) * Update error message for apparmor parser * Fix wrong log message ([#6419](https://github.com/containerd/containerd/pull/6419)) * Fix wrong log message * Followup errors change ([#6414](https://github.com/containerd/containerd/pull/6414)) * Fix incorrect error wrapped when closing ingest file * Fix seek error used without nil check * Fix followup items from errors replacement * Updates CRI API & Kubernetes to 1.23 ([#6351](https://github.com/containerd/containerd/pull/6351)) * Update k/k to 1.23.0 * Updating adoption of containerd for AKS ([#6416](https://github.com/containerd/containerd/pull/6416)) * Updating adoption of containerd for AKS * update the adoption status of containerd in GKE ([#6413](https://github.com/containerd/containerd/pull/6413)) * update the adoption status of containerd in GKE * go.mod: update github.com/containerd/{continuity,go-cni,imgcrypt} ([#6410](https://github.com/containerd/containerd/pull/6410)) * go.mod: update github.com/containerd/{continuity,go-cni,imgcrypt} * replace github.com/pkg/errors with native errors ([#6366](https://github.com/containerd/containerd/pull/6366)) * feat: replace github.com/pkg/errors to errors * corrected link in cri architecture documentation ([#6412](https://github.com/containerd/containerd/pull/6412)) * corrected link in cri architecture documentation * remotes/docker: allow fetching "refresh token" (aka "identity token", "offline token") ([#6396](https://github.com/containerd/containerd/pull/6396)) * remotes/docker: allow fetching "refresh token" (aka "identity token") * remotes/docker/config: allow setting custom AuthorizerOpts * Prepare release notes for v1.6.0-beta.5 ([#6407](https://github.com/containerd/containerd/pull/6407)) * Prepare release notes for v1.6.0-beta.5 * Integration: Check GCP secrets on Windows CI artifact upload. ([#6292](https://github.com/containerd/containerd/pull/6292)) * Integration: Check GCP secrets on Windows CI artifact upload. * Github Security Advisory [GHSA-mvff-h3cj-wj9c](https://github.com/containerd/containerd/security/advisories/GHSA-mvff-h3cj-wj9c) * only relabel cri managed host mounts * Add support for Intel RDT ([#5439](https://github.com/containerd/containerd/pull/5439)) * cri: add ignore_rdt_not_enabled_errors config option * Update dependencies * cri: annotations for controlling RDT class * tasks: add Linux rdt support * cmd: add --rdt-class command line option * oci: implement WithRdt * fix: use _ for consistency ([#6391](https://github.com/containerd/containerd/pull/6391)) * fix: use _ for consistency * content/local: use syscall.Timespec.Unix ([#6403](https://github.com/containerd/containerd/pull/6403)) * content/local: use syscall.Timespec.Unix * docs: improve plugin documentation ([#6207](https://github.com/containerd/containerd/pull/6207)) * docs: document the runtime shim plugin config options * docs: use proper markdown lists in containerd-config.toml.5.md * fix(ctr): enable networking for Windows containers ([#6304](https://github.com/containerd/containerd/pull/6304)) * fix(ctr): enable networking for Windows containers * Fix $(PWD) issue for Windows makefile ([#6394](https://github.com/containerd/containerd/pull/6394)) * Fix $(PWD) issue for Windows makefile * only test abstract uds on linux ([#6395](https://github.com/containerd/containerd/pull/6395)) * fix: only test abstract unix socket on linux * Fix restart container test ([#6390](https://github.com/containerd/containerd/pull/6390)) * Expect ErrorNotFound on Windows after Kill() * Replace tskill with taskkill * fix when kernel version < 4.13rc1 by using index=off cause test error ([#6291](https://github.com/containerd/containerd/pull/6291)) * fix when kernel version < 4.13rc1 by using index=off cause overlay test error * Fix no-daemon flag for integration/client tests ([#6384](https://github.com/containerd/containerd/pull/6384)) * Fix no-daemon flag for integration/client tests * Enable lazy init for ext4 with devicemapper ([#6122](https://github.com/containerd/containerd/pull/6122)) * Enable lazy init for ext4 with devicemapper * Fix flakiness on Windows for list stats ([#6385](https://github.com/containerd/containerd/pull/6385)) * Fix flakiness on Windows for list stats * cri-integration: Add Windows defaults and fix spaces issue ([#6347](https://github.com/containerd/containerd/pull/6347)) * cri-integration: Add Windows default paths * Upgrade OpenTelemetry dependencies ([#6383](https://github.com/containerd/containerd/pull/6383)) * Upgrade k8s.io/klog/v2 from 2.9.0 to 2.20.0 * Use insecure.NewCredentials instead of grpc.WithInsecure * Upgrade OpenTelemetry dependencies * Fix default makefile target for windows ([#6322](https://github.com/containerd/containerd/pull/6322)) * Fix default makefile target for windows * Disable TestContainerHook on Windows ([#6379](https://github.com/containerd/containerd/pull/6379)) * Disable TestContainerHook on Windows * seutil: Fix setting the "container_kvm_t" label ([#6372](https://github.com/containerd/containerd/pull/6372)) * seutil: Fix setting the "container_kvm_t" label * Remove Windows integration testing for 2004. ([#6350](https://github.com/containerd/containerd/pull/6350)) * Remove Windows integration testing for 2004. * OCI: Mount (accessible) host devices in privileged rootless containers ([#6308](https://github.com/containerd/containerd/pull/6308)) * OCI: Mount (accessible) host devices in privileged rootless containers * oci.getDevices(): move "non-dir, non '/dev/console'" case into switch * cri: add support for configuring swap ([#6320](https://github.com/containerd/containerd/pull/6320)) * fixup: check for swap accounting * fixup: handle diff between cgroupsv1 and v2 * cri: add support for configuring swap * Integration: Enable TestVolumeOwnership on Windows ([#6275](https://github.com/containerd/containerd/pull/6275)) * Replace find with native Go code * Enable TestVolumeOwnership on Windows * Prepare release notes for v1.6.0-beta.4 ([#6296](https://github.com/containerd/containerd/pull/6296)) * Prepare release notes for v1.6.0-beta.4 * refactor: functions for error log and error return ([#6358](https://github.com/containerd/containerd/pull/6358)) * feat: Errorf usage * Split apart runc shim into plugin components ([#6021](https://github.com/containerd/containerd/pull/6021)) * Use task plugin for runc shim * Seperate shim manager and task service * Split runc shim into plugin components * Add shutdown package * CRI update for sandbox sizing ([#6155](https://github.com/containerd/containerd/pull/6155)) * cri, sandbox: pass sandbox resource details if available, applicable * medatada: make namespaces' deletion error less cryptic ([#6354](https://github.com/containerd/containerd/pull/6354)) * medatada: make namespaces' deletion error less cryptic * ListContainerStats to return stats response if ContainerStatsFilter is nil ([#6373](https://github.com/containerd/containerd/pull/6373)) * add-list-stat: return container list if filter is nil * integration: deflake TestContainerdRestart ([#6369](https://github.com/containerd/containerd/pull/6369)) * integration: deflake TestContainerdRestart * feat: add timeout for bolt open ([#6225](https://github.com/containerd/containerd/pull/6225)) * feat: support custom timeout for blot open * Update Go to 1.17.5 ([#6333](https://github.com/containerd/containerd/pull/6333)) * Update Go to 1.17.5 * cri/server: use consistent alias for pkg/ioutil ([#6332](https://github.com/containerd/containerd/pull/6332)) * cri/server: use consistent alias for pkg/ioutil * Disable restart monitor test in Windows ([#6364](https://github.com/containerd/containerd/pull/6364)) * Disable restart monitor test in Windows * Don't fail-fast on Windows integration tests ([#6338](https://github.com/containerd/containerd/pull/6338)) * Don't fail-fast on Windows integration tests * Update restart monitor test to output daemon logs on failure ([#6355](https://github.com/containerd/containerd/pull/6355)) * Run windows parallel integration test as short * Update restart monitor test to output daemon logs on failure * go.mod: update image-spec to latest (v1.0.3-dev) ([#6263](https://github.com/containerd/containerd/pull/6263)) * images/converter: remove deprecated types * go.mod: update image-spec to latest (v1.0.3-dev) * Skip WithAdditionalGIDs on Darwin ([#6353](https://github.com/containerd/containerd/pull/6353)) * Skip WithAdditionalGIDs on Darwin * Use RFC3339 format on Windows periodic resource group creation so cleanup works ([#6303](https://github.com/containerd/containerd/pull/6303)) * Use RFC3339 format so rg cleanup works * update runc to v1.0.3 ([#6330](https://github.com/containerd/containerd/pull/6330)) * go.mod: github.com/opencontainers/runc v1.0.3 * update runc binary to v1.0.3 * Unblock native snapshotter on Darwin ([#6329](https://github.com/containerd/containerd/pull/6329)) * Allow native snapshotter on Darwin * Do not use `go get` to install executables ([#6328](https://github.com/containerd/containerd/pull/6328)) * Do not use `go get` to install executables * Include runtime v2 in default builtins ([#6326](https://github.com/containerd/containerd/pull/6326)) * Include runtime v2 in default builtins * Add Windows Server 2022 CI runs ([#6314](https://github.com/containerd/containerd/pull/6314)) * Add Windows Server 2022 CI runs * Set explicit ACL on test files ([#6324](https://github.com/containerd/containerd/pull/6324)) * Use a single RUN command * Set explicit ACL on test files * integration: align tags of test images ([#6311](https://github.com/containerd/containerd/pull/6311)) * integration: align tags of test images * Set CONTAINERD_ROOT in Windows cri-integration ([#6325](https://github.com/containerd/containerd/pull/6325)) * Set CONTAINERD_ROOT in Windows cri-integration * export oci.DeviceFromPath() ([#6312](https://github.com/containerd/containerd/pull/6312)) * export oci.DeviceFromPath() * Update volume test images ([#6321](https://github.com/containerd/containerd/pull/6321)) * Update continuity dependency * Update volume test images * Update TestRestartMonitor expected time check ([#6201](https://github.com/containerd/containerd/pull/6201)) * Add error logging on cleanup * Update TestRestartMonitor expected time check * Move test volume images from gcr to ghcr ([#6319](https://github.com/containerd/containerd/pull/6319)) * Move volume images from gcr to ghcr * Revert shim service plugin migration ([#6301](https://github.com/containerd/containerd/pull/6301)) * Revert shim plugin migration * Authenticate against ghcr.io ([#6317](https://github.com/containerd/containerd/pull/6317)) * Add permissions * Authenticate against ghcr.io * oci/deviceFromPath(): correctly check device types ([#6306](https://github.com/containerd/containerd/pull/6306)) * oci/deviceFromPath(): correctly check device types * Skip TestExportAndImportMultiLayer on Windows ([#6315](https://github.com/containerd/containerd/pull/6315)) * Skip TestExportAndImportMultiLayer on Windows * Integration: Add image build workflow ([#6290](https://github.com/containerd/containerd/pull/6290)) * Add image build workflow * Integration: Separate Windows Periodic Tests workflow trigger. ([#6286](https://github.com/containerd/containerd/pull/6286)) * Integration: Separate Windows Periodic Tests workflow trigger. * Build volume test images on Windows ([#6274](https://github.com/containerd/containerd/pull/6274)) * Build volume test images on Windows * Add VMware TKG & TCE to Containerd adopters ([#6297](https://github.com/containerd/containerd/pull/6297)) * Add VMware TKG & TCE to Containerd adopters * Vagrantfile: update to Fedora 35 ([#6293](https://github.com/containerd/containerd/pull/6293)) * Vagrantfile: update to Fedora 35 * Update README.md repo->org ([#6269](https://github.com/containerd/containerd/pull/6269)) * Update README.md repo->org * Fix executable file not found when restoring shims ([#6278](https://github.com/containerd/containerd/pull/6278)) * Fix executable file not found when restoring shims * ctr/snapshots/diff: show media-type in stderr ([#6271](https://github.com/containerd/containerd/pull/6271)) * ctr/snapshots/diff: don't show the media-type in output * ctr: Add Linux Capabilities control flags ([#6289](https://github.com/containerd/containerd/pull/6289)) * ctr: Add Linux Capabilities control flags * integration: add stats result in error message ([#6270](https://github.com/containerd/containerd/pull/6270)) * integration: add stats result in error message * releases: mark 1.4 as Extended ([#6287](https://github.com/containerd/containerd/pull/6287)) * docs: mark 1.4 as Extended * docs: fix RELEASES.md gRPC API anchor * feat: skip ci for fork ([#6284](https://github.com/containerd/containerd/pull/6284)) * feat: skip ci for fork * content/local: Close the file if Seek fails ([#6280](https://github.com/containerd/containerd/pull/6280)) * content/local: Close the file if Seek fails * Integration: Remove explicit version passing to `azure/CLI`. ([#6268](https://github.com/containerd/containerd/pull/6268)) * Integration: Remove explicit version passing to `azure/CLI`. * Fix wrong make target on documentation ([#6276](https://github.com/containerd/containerd/pull/6276)) * Fix wrong make target on documentation * fix: server error return ([#6272](https://github.com/containerd/containerd/pull/6272)) * fix: server error return * Prepare release notes for v1.6.0-beta.3 ([#6267](https://github.com/containerd/containerd/pull/6267)) * Prepare release notes for v1.6.0-beta.3 * Update API version in go.mod * Update release name to use consistent format * feat:support custom callopts on client side ([#6254](https://github.com/containerd/containerd/pull/6254)) * fix: make max recv/send msg size setting default * feat:support custom callopts on client side * [CRI] Fix panic when registry.mirrors use localhost ([#6258](https://github.com/containerd/containerd/pull/6258)) * [CRI] Fix panic when registry.mirrors use localhost * Add support for TMP override on toml ([#6241](https://github.com/containerd/containerd/pull/6241)) * Add support for TMP override on toml * CRI: Support enable_unprivileged_icmp and enable_unprivileged_ports options ([#6170](https://github.com/containerd/containerd/pull/6170)) * CRI: Support enable_unprivileged_icmp and enable_unprivileged_ports options * Github Security Advisory [GHSA-5j5w-g665-5m35](https://github.com/containerd/containerd/security/advisories/GHSA-5j5w-g665-5m35) * schema1: reject ambiguous documents * images: validate document type before unmarshal * [cri] add sandbox and container latency metrics ([#6111](https://github.com/containerd/containerd/pull/6111)) * [cri] add sandbox and container latency metrics * Integration: Generalize Windows CI setup scripts for any username. ([#6255](https://github.com/containerd/containerd/pull/6255)) * Generalize Windows CI setup script for any user. * Standardize cmdlet capitalization in Windows CI scripts. * feat: use rwmutex instead ([#6253](https://github.com/containerd/containerd/pull/6253)) * feat: use rwmutex instead * Allow absolute path to shim binaries ([#6206](https://github.com/containerd/containerd/pull/6206)) * Fix package alias * Support custom runtime path when launching tasks * Add runtime path in CreateTaskRequest * Close file if permission modification fails ([#6246](https://github.com/containerd/containerd/pull/6246)) * Close file if permission modification fails * release: change tar name to match prior releases ([#6250](https://github.com/containerd/containerd/pull/6250)) * release: change tar name to match prior releases * Fix wrong error returned for image index lookup ([#6237](https://github.com/containerd/containerd/pull/6237)) * Fix wrong error returned for image index lookup * Fix containerd fails to pull OCI image with non-`http(s)://` urls ([#6221](https://github.com/containerd/containerd/pull/6221)) * Fix containerd fails to pull OCI image with non-`http(s)://` urls * Prepare release notes for v1.6.0-beta.2 ([#6223](https://github.com/containerd/containerd/pull/6223)) * Prepare release notes for v1.6.0-beta.2 * Add arm64 to releases ([#6196](https://github.com/containerd/containerd/pull/6196)) * Rename release dockerfile to omit distro name * release: improve dockerfile * Add arm64 to releases * use write lock when updating container stats ([#6236](https://github.com/containerd/containerd/pull/6236)) * use write lock when updating container stats * go.mod: Bump hcsshim to v0.9.1 ([#6230](https://github.com/containerd/containerd/pull/6230)) * go.mod: Bump hcsshim to v0.9.1 * go.mod: Bump ttrpc to 1.1.0 ([#6228](https://github.com/containerd/containerd/pull/6228)) * go.mod: Bump ttrpc to 1.1.0 * go.mod: bump moby/sys/symlink v0.2.0, moby/sys/signal v0.6.0, moby/sys/mountinfo v0.5.0 ([#6213](https://github.com/containerd/containerd/pull/6213)) * go.mod: github.com/moby/sys/mountinfo v0.5.0 * go.mod: github.com/moby/sys/signal v0.6.0 * go.mod: github.com/moby/sys/symlink v0.2.0 * go.mod: golang.org/x/sys v0.0.0-20211025201205-69cdffdb9359 * cleanup: add more description on comment ([#6222](https://github.com/containerd/containerd/pull/6222)) * cleanup: add more description on comment * Update Go to 1.17.3 ([#6211](https://github.com/containerd/containerd/pull/6211)) * Update Go to 1.17.3 * CI: bump up crun: 1.0 -> 1.3 ([#6214](https://github.com/containerd/containerd/pull/6214)) * CI: bump up crun: 1.0 -> 1.3 * Pin az CLI version in windows-periodic workflow ([#6205](https://github.com/containerd/containerd/pull/6205)) * Pin az CLI version * Decouple task manager ([#5918](https://github.com/containerd/containerd/pull/5918)) * Address PR comments * Fix build after rebase * Migrate task directory * Expose shim process interface * Fix after rebase * Cleanup shim loading * Move shim restore to a separate file * Fix backward compatibility with old task shims * Add plugin dependency between shim and shim services * Rework task create and cleanup flow * Add task manager * Rename task manager to shim manager * [cri] Implement k8s 1.23 CRI Pod Sandbox and Container Stats ([#6113](https://github.com/containerd/containerd/pull/6113)) * Implement CRI container and pods stats * Vendor latest k8s.io/cri-api and netlink * test: Add grace period for restart monitor test ([#6200](https://github.com/containerd/containerd/pull/6200)) * test: Add grace period for restart monitor test * integration: Enables TestRuntimeHandler for Windows ([#6179](https://github.com/containerd/containerd/pull/6179)) * integration: Enables TestRuntimeHandler for Windows * Add mkdir on Dockerfile ([#6171](https://github.com/containerd/containerd/pull/6171)) * Add mkdir on Dockerfile * sys/reaper: avoid leaky goroutine when exec timeout ([#6189](https://github.com/containerd/containerd/pull/6189)) * sys/reaper: avoid leaky goroutine when exec timeout * adds additional debug out to timebox cni setup ([#6184](https://github.com/containerd/containerd/pull/6184)) * adds additional debug out to timebox cni setup * converter: Allow hooks during image conversion ([#6176](https://github.com/containerd/containerd/pull/6176)) * converter: Allow hooks during image conversion * compression: support zstd with skippable frame ([#6177](https://github.com/containerd/containerd/pull/6177)) * compression: support zstd with skippable frame * integration: Enables TestVolumeCopyUp for Windows ([#6182](https://github.com/containerd/containerd/pull/6182)) * integration: Enables TestVolumeCopyUp for Windows * integration: Enable some tests for Windows (part 2) ([#6121](https://github.com/containerd/containerd/pull/6121)) * integration: Enable some tests for Windows (part 2) * integration: Enable some tests for Windows ([#6085](https://github.com/containerd/containerd/pull/6085)) * integration: Enable some tests for Windows * Update doc to version 2 syntax ([#6125](https://github.com/containerd/containerd/pull/6125)) * feat(doc): update to version 2 syntax * fix shim reaper wait command execute blocked ([#6166](https://github.com/containerd/containerd/pull/6166)) * fix shim reaper wait command execute blocked * content: close stream after commit request ([#6145](https://github.com/containerd/containerd/pull/6145)) * content: close stream after commit request * Generating token options with each scope as a separate string. ([#6165](https://github.com/containerd/containerd/pull/6165)) * Adding scope tests for ParseAuthHeader * Adding tests for GenerateTokenOptions * Generate token options with each scope as a separate string. * vendor: Updates go-cni ([#6167](https://github.com/containerd/containerd/pull/6167)) * vendor: Updates go-cni * commands: Enables task metrics for Windows ([#6159](https://github.com/containerd/containerd/pull/6159)) * commands: Enables task metrics for Windows * vendor: update moby/sys for darwin support ([#6149](https://github.com/containerd/containerd/pull/6149)) * vendor: update moby/sys for darwin support * Prepare v1.6.0-beta.1 ([#6144](https://github.com/containerd/containerd/pull/6144)) * Prepare release notes for v1.6.0-beta.1 * Update mailmap * Update api vendor * bump cni to spec v1.0.0 ([#6136](https://github.com/containerd/containerd/pull/6136)) * bump CNI to spec v1.0.0 * Inject otel traces to grpc client. ([#5992](https://github.com/containerd/containerd/pull/5992)) * Inject otel traces to grpc client. * client: expose (*image).platform ([#6142](https://github.com/containerd/containerd/pull/6142)) * client: expose (*image).platform * Adding documentation for Core Scheduling ([#6128](https://github.com/containerd/containerd/pull/6128)) * feat(doc): add Core Scheduling documentation * Ensure namespace is proxied to grpc/ttrpc plugins ([#6130](https://github.com/containerd/containerd/pull/6130)) * Ensure namespace is proxied to grpc/ttrpc plugins * fix #6054 MaxConcurrentDownloads is not effect when Unpack is true ([#6109](https://github.com/containerd/containerd/pull/6109)) * fix #6054 MaxConcurrentDownloads is not effect when Unpack is true * Output a warning for label image labels instead of erroring ([#6124](https://github.com/containerd/containerd/pull/6124)) * Output a warning for label image labels instead of erroring * Fix spelling mistake in Windows snapshotter ([#6132](https://github.com/containerd/containerd/pull/6132)) * Fix spelling mistake in Windows snapshotter * Windows: Cleanup rm- prefixed layers ([#6126](https://github.com/containerd/containerd/pull/6126)) * Windows: Cleanup rm- prefixed layers * cleanup deprecated package `io/ioutil ` ([#6118](https://github.com/containerd/containerd/pull/6118)) * io/ioutil package has been deprecated in Go 1.16 that replaces io/ioutil functions * close Writer after use which may memory leak ([#6115](https://github.com/containerd/containerd/pull/6115)) * close Writer after use which may leak mem * Adds Windows resource limits support ([#5778](https://github.com/containerd/containerd/pull/5778)) * Adds Windows resource limits support * Prepare release notes for v1.6.0-beta.0 ([#6098](https://github.com/containerd/containerd/pull/6098)) * Prepare release notes for v1.6.0-beta.0 * Add error message to in TestContainerdRestart integration test ([#6105](https://github.com/containerd/containerd/pull/6105)) * Add error message to in TestContainerdRestart integration test * Fix typo in the NewContainer function documentation ([#6110](https://github.com/containerd/containerd/pull/6110)) * Fix typo in the NewContainer function documentation * Update cgroups to v1.0.2 ([#6104](https://github.com/containerd/containerd/pull/6104)) * Update cgroups to v1.0.2 * btrfs: verify file content after mount ([#6100](https://github.com/containerd/containerd/pull/6100)) * test: check file content after mount * Update test timeout based on recent cancellations ([#6107](https://github.com/containerd/containerd/pull/6107)) * Update test timeout based on recent cancellations * Check the pid in cri test teardown ([#6106](https://github.com/containerd/containerd/pull/6106)) * Remove extra test_teardown * Check the pid in cri test teardown * add runc shim support for sched core ([#6011](https://github.com/containerd/containerd/pull/6011)) * fix integration client vendor * add runc shim support for sched core * integration: Enables Windows containerd restart test ([#5579](https://github.com/containerd/containerd/pull/5579)) * integration: Enables Windows containerd restart test * vendor: Bump hcsshim to 0.9.0 ([#6099](https://github.com/containerd/containerd/pull/6099)) * vendor: Bump hcsshim to 0.9.0 * [cri] Add CNI conf based on runtime class ([#4695](https://github.com/containerd/containerd/pull/4695)) * Add CNI conf based on runtime class * Update Go to 1.17.2 ([#6102](https://github.com/containerd/containerd/pull/6102)) * Update Go to 1.17.2 * integration: Adds test for multilayer image import ([#5933](https://github.com/containerd/containerd/pull/5933)) * integration: Adds test for multilayer image import * runtime: should fail fast if dial error on shim ([#6031](https://github.com/containerd/containerd/pull/6031)) * runtime: should fail fast if dial error on shim * Fixes Windows containers with image volumes ([#6034](https://github.com/containerd/containerd/pull/6034)) * Windows: Fixes Windows containers with image volumes * run `gofmt` with GO 1.17 ([#6094](https://github.com/containerd/containerd/pull/6094)) * run `gofmt` with Go 1.17 * pkg/cap: remove an outdated comment ([#6088](https://github.com/containerd/containerd/pull/6088)) * pkg/cap: remove an outdated comment * Update go otel 1.0.1 ([#6066](https://github.com/containerd/containerd/pull/6066)) * Update go otel 1.0.1 * Update ADOPTERS.md with additional uses ([#6086](https://github.com/containerd/containerd/pull/6086)) * Update ADOPTERS.md with additional uses * modify the way for checking cos ([#6082](https://github.com/containerd/containerd/pull/6082)) * modify the way for checking cos * Fuzzing: Add fuzzers + small modifications ([#5915](https://github.com/containerd/containerd/pull/5915)) * Fuzzing: Add 4 fuzzers + small modifications * Fixes for Windows CI ([#6081](https://github.com/containerd/containerd/pull/6081)) * Pin mingw to version 10.2.0 * Update to golang 1.17.1 * Install nssm * Github Security Advisory [GHSA-c2h3-6mxw-7mvq](https://github.com/containerd/containerd/security/advisories/GHSA-c2h3-6mxw-7mvq) * btrfs: reduce permissions on plugin directories * v1 runtime: reduce permissions for bundle dir * v2 runtime: reduce permissions for bundle dir * task service: return known error type ([#6079](https://github.com/containerd/containerd/pull/6079)) * task service: return known error type * refactor: move from io/ioutil to io and os package ([#5973](https://github.com/containerd/containerd/pull/5973)) * refactor: move from io/ioutil to io and os package * fix: import from k8s.io/utils/clock instead ([#6076](https://github.com/containerd/containerd/pull/6076)) * fix: update vendor * cleanup: import from k8s.io/utils/clock/testing instead * cleanup: import from k8s.io/utils/clock instead * feat: enable integration cri remote client to call with grpc calloptions ([#6069](https://github.com/containerd/containerd/pull/6069)) * feat: enable cri remote client to call with grpc calloptions * cleanup k8s ansible yaml (carry for #5713) ([#6074](https://github.com/containerd/containerd/pull/6074)) * cleanup k8s ansible yaml (carry for https://github.com/jayonlau <jayonlau@gmail.com>) * feat: support import image for specific platform ([#6070](https://github.com/containerd/containerd/pull/6070)) * fix: wrong flag type * feat: support import image for specific platform * Update mirror images to take target image name ([#6065](https://github.com/containerd/containerd/pull/6065)) * Update mirror images to take target image name * fix: make exec-id flag required in exec command ([#6059](https://github.com/containerd/containerd/pull/6059)) * fix: make exec-id flag required in exec command * images: enable converter to uncompress zstd ([#6052](https://github.com/containerd/containerd/pull/6052)) * images: enable converter to uncompress zstd * replace deprecated function with Domain and Path ([#5922](https://github.com/containerd/containerd/pull/5922)) * replace deprecated function * integration: Adds Windows HostProcess tests ([#5853](https://github.com/containerd/containerd/pull/5853)) * integration: Adds Windows HostProcess tests * Fix main branch build is broken ([#6047](https://github.com/containerd/containerd/pull/6047)) * Fix main branch build is broken * Add open telemetry logging hook for logrus ([#6003](https://github.com/containerd/containerd/pull/6003)) * Add open telemetry logging hook for logrus * Change `oci.WithUser` behavior for LCOW ([#6023](https://github.com/containerd/containerd/pull/6023)) * Change oci.WithUser behavior for LCOW * switch usage directly to errdefs.(ErrAlreadyExists and ErrNotFound) ([#5946](https://github.com/containerd/containerd/pull/5946)) * switch usage directly to errdefs.(ErrAlreadyExists and ErrNotFound) * import: Raise error if the imported image is filtered out ([#5926](https://github.com/containerd/containerd/pull/5926)) * import: Raise error if the imported image is filtered out * Fix panic in metadata content writer on copy error ([#6043](https://github.com/containerd/containerd/pull/6043)) * Fix panic in metadata content writer on copy error * Move tracing to plugin ([#6001](https://github.com/containerd/containerd/pull/6001)) * Move tracing to plugin * ctr: Fixes Windows image import ([#5916](https://github.com/containerd/containerd/pull/5916)) * ctr: Fixes Windows image import * update open go.opentelemetry.io v1.0.0 to fix import path ([#6017](https://github.com/containerd/containerd/pull/6017)) * go.mod: update opentelemetry modules to v1.0.0 * fix error string format ([#5979](https://github.com/containerd/containerd/pull/5979)) * fix error string format * Add github action to mirror image ([#6036](https://github.com/containerd/containerd/pull/6036)) * Add github action to mirror image * add current process state to the error message ([#6027](https://github.com/containerd/containerd/pull/6027)) * add current process state to the error message * FreeBSD: fix tar headers & the nil check on getxattr ([#5991](https://github.com/containerd/containerd/pull/5991)) * FreeBSD: fix tar headers & the nil check on getxattr * gha: collect VMs' IP addresses ([#6035](https://github.com/containerd/containerd/pull/6035)) * gha: collect Vagrant VMs' IP addresses * bump continuity and console version that remove pkg/errors ([#6033](https://github.com/containerd/containerd/pull/6033)) * bump continuity and console version that remove pkg/errors * import: Add option to prevent duplicated digest image ([#5997](https://github.com/containerd/containerd/pull/5997)) * import: Add option to skip creating digest image * ctr namespaces: improve usage string ([#5998](https://github.com/containerd/containerd/pull/5998)) * ctr namespaces: improve usage string * bump console version to v1.0.3 that remove pkg/errors ([#6028](https://github.com/containerd/containerd/pull/6028)) * bump console version to v1.0.3 that remove pkg/errors * Use github images for integration tests ([#6032](https://github.com/containerd/containerd/pull/6032)) * Use github images for integration tests * Fix typo ([#5995](https://github.com/containerd/containerd/pull/5995)) * Fix typo * Enable image config labels in ctr and CRI container creation ([#6012](https://github.com/containerd/containerd/pull/6012)) * Enable image config labels in ctr and CRI container creation * Make sure exit signals trigger an exit during init ([#5970](https://github.com/containerd/containerd/pull/5970)) * Make sure exit signals trigger an exit during init * task delete: Closes task IO before waiting ([#5974](https://github.com/containerd/containerd/pull/5974)) * task delete: Closes task IO before waiting * CI: bump up crun to 1.0 ([#5985](https://github.com/containerd/containerd/pull/5985)) * CI: bump up crun to 1.0 * seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted) ([#5982](https://github.com/containerd/containerd/pull/5982)) * seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted) * Update to Go 1.17.1 ([#5990](https://github.com/containerd/containerd/pull/5990)) * Update to Go 1.17.1 * CI: Switch to available latest images ([#5987](https://github.com/containerd/containerd/pull/5987)) * CI: Switch to available latest images * add xfs support to devicemapper snapshotter ([#5610](https://github.com/containerd/containerd/pull/5610)) * add xfs support to devicemapper snapshotter * Fixes task kill --force on Windows ([#5956](https://github.com/containerd/containerd/pull/5956)) * Fixes task kill --force on Windows * Add support for shim plugins ([#5817](https://github.com/containerd/containerd/pull/5817)) * Add support for shim plugins * vendor: update continuity for darwin support ([#5976](https://github.com/containerd/containerd/pull/5976)) * vendor: update continuity for darwin support * replace uses of os/exec with golang.org/x/sys/execabs ([#5906](https://github.com/containerd/containerd/pull/5906)) * replace uses of os/exec with golang.org/x/sys/execabs * complete integration test for pulling image with labels ([#5972](https://github.com/containerd/containerd/pull/5972)) * Additional integration tests for pulling image with labels * Fix content copy to not ignore unexpected EOF ([#5966](https://github.com/containerd/containerd/pull/5966)) * Fix content copy to not ignore unexpected EOF * add ip_pref CNI options for primary pod ip ([#5964](https://github.com/containerd/containerd/pull/5964)) * add ip_pref CNI options for primary pod ip * cri: add devices for privileged container ([#5939](https://github.com/containerd/containerd/pull/5939)) * cri: add devices for privileged container * sandbox: Allows the sandbox to be deleted in NotReady state ([#5954](https://github.com/containerd/containerd/pull/5954)) * sandbox: Allows the sandbox to be deleted in NotReady state * pin protobuild version to tag ([#5969](https://github.com/containerd/containerd/pull/5969)) * pin protobuild version to tag * Add metric exposing build version&revision ([#5965](https://github.com/containerd/containerd/pull/5965)) * use a const metric for build_info * Add metric exposing build version&revision * Feature: containerd-cri support LinuxContainerResources.Unified ([#5627](https://github.com/containerd/containerd/pull/5627)) * add cri test case * feature: add field LinuxContainerResources.Unified on cri * integration: investigate TestRestartMonitor's failure ([#5861](https://github.com/containerd/containerd/pull/5861)) * integration: investigate TestRestartMonitor's failure * Use issue forms for bug reporting ([#5917](https://github.com/containerd/containerd/pull/5917)) * Address issue forms feedback * Use issue forms for bug reporting * cri: patch update image labels ([#5945](https://github.com/containerd/containerd/pull/5945)) * cri: patch update image labels * darwin: runtime support ([#5936](https://github.com/containerd/containerd/pull/5936)) * darwin: runtime support * darwin: use the default values for socketRoot variable * Update RELEASES.md ([#5858](https://github.com/containerd/containerd/pull/5858)) * Update RELEASES.md * archive: Add WriteDiff error logs ([#5949](https://github.com/containerd/containerd/pull/5949)) * archive: Add WriteDiff error logs * replace deprecated Dialer with ContextDialer ([#5958](https://github.com/containerd/containerd/pull/5958)) * replace deprecated Dail with DailContext * Add WS2022 support in Windows Periodic tests ([#5951](https://github.com/containerd/containerd/pull/5951)) * Add WS2022 support in Windows Periodic tests * Content fuzzer: Clean up temp store dir ([#5943](https://github.com/containerd/containerd/pull/5943)) * content fuzzer: Clean up tempdir * using Hosts replace deprecated field ([#5944](https://github.com/containerd/containerd/pull/5944)) * using Hosts replace deprecated field * fix document non-synchronous ([#5947](https://github.com/containerd/containerd/pull/5947)) * fix document non-synchronous in crictl.md * go.mod: Update hcsshim to v0.8.21 ([#5929](https://github.com/containerd/containerd/pull/5929)) * go.mod: Update hcsshim to v0.8.21 * Makefile.linux: build on RISC-V with PIE ([#5937](https://github.com/containerd/containerd/pull/5937)) * Makefile.linux: build on riscv with PIE * Fix cwd flag for `ctr tasks exec` ([#5932](https://github.com/containerd/containerd/pull/5932)) * Fix cwd flag for `ctr tasks exec` * Update Pause image in tests & config ([#5927](https://github.com/containerd/containerd/pull/5927)) * Update Pause image in tests & config * cri: Devices ownership from SecurityContext ([#5122](https://github.com/containerd/containerd/pull/5122)) * cri: Devices ownership from SecurityContext * Fix pull fails on unexpected EOF ([#5921](https://github.com/containerd/containerd/pull/5921)) * Fix pull fails on unexpected EOF * Fix dir support for devices ([#5845](https://github.com/containerd/containerd/pull/5845)) * Adding testing of two devices * Fix dir support for devices V3 (#4847) * windows: The DefaultSpec platform should match the Default matcher ([#5914](https://github.com/containerd/containerd/pull/5914)) * windows: The DefaultSpec platform should match the Default matcher * Add RunAsUserName functionality for the Windows pod sandbox container ([#5865](https://github.com/containerd/containerd/pull/5865)) * Add RunAsUserName functionality for the Windows Pod Sandbox Container * bump up runc v1.0.2 ([#5899](https://github.com/containerd/containerd/pull/5899)) * go.mod: update runc to v1.0.2 * update runc binary to v1.0.2 * Run `go fmt` with Go 1.17 ([#5903](https://github.com/containerd/containerd/pull/5903)) * Run `go fmt` with Go 1.17 * go.mod: github.com/pelletier/go-toml v1.9.3 ([#5905](https://github.com/containerd/containerd/pull/5905)) * go.mod: github.com/pelletier/go-toml v1.9.3 * cri: filter selinux xattr for image volumes ([#5902](https://github.com/containerd/containerd/pull/5902)) * cri: filter selinux xattr for image volumes * Add Windows HostProcess Support ([#5131](https://github.com/containerd/containerd/pull/5131)) * Added windows hostProcess cni skip * script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0 ([#5897](https://github.com/containerd/containerd/pull/5897)) * script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0 * Update to Go 1.17 ([#5889](https://github.com/containerd/containerd/pull/5889)) * Bump integration timeout to 35 min * Update to Go 1.17 * integration: fix TestContainerPids ([#5896](https://github.com/containerd/containerd/pull/5896)) * integration: fix TestContainerPids * [ctr] add HOSTNAME env for host network ([#5891](https://github.com/containerd/containerd/pull/5891)) * [ctr] add HOSTNAME env for host network * Fuzzing: Add fuzzer ([#5886](https://github.com/containerd/containerd/pull/5886)) * Fuzzing: Add fuzzer * Make Cgroup driver configurable in gce configure script ([#5884](https://github.com/containerd/containerd/pull/5884)) * Add env for SystemdCgroup driver * Allow expanded DNS configuration ([#5878](https://github.com/containerd/containerd/pull/5878)) * Allow expanded DNS configuration * Fuzzing: Add 4 fuzzers ([#5863](https://github.com/containerd/containerd/pull/5863)) * Fuzzing: Add 4 fuzzers * Cleanup v2 shim ([#5813](https://github.com/containerd/containerd/pull/5813)) * Cleanup v2 shim * Fuzzing: Add experimental version of container fuzzer ([#5840](https://github.com/containerd/containerd/pull/5840)) * Use http.Get to download binaries instead of exec.Command * Fuzzing: Add experimental version of container fuzzer * add cpu-shares to ctr ([#5846](https://github.com/containerd/containerd/pull/5846)) * add cpu-shares to ctr * docs: rename master to main (it was opposite on the actual commit) ([#5847](https://github.com/containerd/containerd/pull/5847)) * docs: rename main to master * content: return the error with its timestamp ([#5849](https://github.com/containerd/containerd/pull/5849)) * content: return the error with its timestamp * Fix bad `make protos` failure ([#5857](https://github.com/containerd/containerd/pull/5857)) * Fix bad `make protos` failure * replace cri and point to new location ([#5851](https://github.com/containerd/containerd/pull/5851)) * archive docs and point to new location fix #https://github.com/containerd/cri/issues/1624 * docs: remove FOSSA's badge ([#5856](https://github.com/containerd/containerd/pull/5856)) * docs: remove FOSSA's badge * BUILDING.md: remove some bits about building runc ([#5850](https://github.com/containerd/containerd/pull/5850)) * BUILDING.md: remove some bits about building runc * BUILDING.md: markdown fixes * go.mod: update k8s deps to v1.22.0 ([#5836](https://github.com/containerd/containerd/pull/5836)) * go.mod: update kubernetes to v1.22.0 * [Scripts] Add trap to cri-integration test script ([#5852](https://github.com/containerd/containerd/pull/5852)) * Add trap to cri-integration test script * docs: list all snapshotter-related build flags ([#5848](https://github.com/containerd/containerd/pull/5848)) * docs: list all snapshotter-related build flags * Move plugin context events into separate plugin ([#5835](https://github.com/containerd/containerd/pull/5835)) * Move plugin context events into separate plugin * Fix Linux CI Linter using Go 1.15.14 ([#5839](https://github.com/containerd/containerd/pull/5839)) * Fix Linux CI Linter using go 1.15.14 * Update Go to 1.16.7 ([#5842](https://github.com/containerd/containerd/pull/5842)) * Update Go to 1.16.7 * Cleanup CI ([#5838](https://github.com/containerd/containerd/pull/5838)) * Cleanup CI * Remove redundant build tags ([#5834](https://github.com/containerd/containerd/pull/5834)) * Remove redundant build tags * Change default directories on Darwin ([#5830](https://github.com/containerd/containerd/pull/5830)) * Change default directories on Darwin * [otel-tracing] Initial opentelemetry support ([#5731](https://github.com/containerd/containerd/pull/5731)) * [otel-tracing] vendor and go modules changes * [otel-tracing] Initial opentelemetry support * remove go 1.13 from containerd * Fuzzing: Fix for OSS-fuzz issue 36825 ([#5829](https://github.com/containerd/containerd/pull/5829)) * Fuzzing: Fix for OSS-fuzz issue 36825 * Fuzzing: Add two fuzzers ([#5825](https://github.com/containerd/containerd/pull/5825)) * Fuzzing: Add two more fuzzers * scripts: linting fixes, and remove support for Debian Jessie (as it's EOL) ([#5760](https://github.com/containerd/containerd/pull/5760)) * scripts: declare ROOT closer to where it's used, and some DRY changes * scripts: add missing quotes, and minor linting issues * test/build-utils.sh: remove support for Debian Jessie * platforms: Format(): use path.Join() instead of joinNotEmpty() ([#5821](https://github.com/containerd/containerd/pull/5821)) * platforms: Format(): use path.Join() instead of joinNotEmpty() * Fuzzing: Remove panics of container_fuzzer ([#5823](https://github.com/containerd/containerd/pull/5823)) * Fuzzing: Remove panics of container_fuzzer * Fuzzing: Add container fuzzer ([#5785](https://github.com/containerd/containerd/pull/5785)) * Change protoc link * Split fuzzer to two fuzzers * Fuzzing: Add container fuzzer * runtime: fix the issue of create new socket with abstract address ([#5746](https://github.com/containerd/containerd/pull/5746)) * runtime: fix the issue of create new socket with abstract address * mergo: Upgrade to 0.3.12 to fix panic ([#5809](https://github.com/containerd/containerd/pull/5809)) * mergo: Upgrade to 0.3.12 to fix panic * ci: install criu from PPA ([#5802](https://github.com/containerd/containerd/pull/5802)) * ci: install criu from PPA * Update release workflow to upload binary without CNI ([#5144](https://github.com/containerd/containerd/pull/5144)) * Split release steps into multiple tasks * Update release workflow to upload binary without CNI * Enable critest on Windows Periodic Jobs ([#5725](https://github.com/containerd/containerd/pull/5725)) * Enable critest on Windows * Script to check if entries in go.mod files are in sync ([#5792](https://github.com/containerd/containerd/pull/5792)) * Script to check if entries in go.mod files are in sync * Add a sharedNamespace label ([#5043](https://github.com/containerd/containerd/pull/5043)) * Add shared content label to namespaces * platforms: add "ios" as known OS, "loong64" as known ARCH ([#5784](https://github.com/containerd/containerd/pull/5784)) * platforms: add "ios" as known OS, "loong64" as known ARCH * Updates the location of protobuf downloads ([#5804](https://github.com/containerd/containerd/pull/5804)) * Updates the location of protobuf downloads in docs * Update protobuf install to use correct repository ([#5803](https://github.com/containerd/containerd/pull/5803)) * Update protobuf install to use correct repository * overlay: expose upperdir location of each snapshot via an optional label ([#5624](https://github.com/containerd/containerd/pull/5624)) * overlay: add an optional label of upperdir location of each snapshot * Support SIGRTMIN+n signals ([#5693](https://github.com/containerd/containerd/pull/5693)) * Support SIGRTMIN+n signals * respect context timeout in shim binary call ([#5800](https://github.com/containerd/containerd/pull/5800)) * respect context timeout in shim binary call * Introduce a new go module - containerd/api for use in standalone clients ([#5716](https://github.com/containerd/containerd/pull/5716)) * Introduce a new go module - containerd/api for use in standalone clients * grpc config add options tcp_client_ca_cert ([#5606](https://github.com/containerd/containerd/pull/5606)) * grpc config add options tcp_tls_ca * integration: Windows volume-copy-up images ([#5162](https://github.com/containerd/containerd/pull/5162)) * integration: Windows volume-copy-up images * add CRI support matrix to RELEASES.md ([#5795](https://github.com/containerd/containerd/pull/5795)) * add CRI support matrix to RELEASES.md * adding a little more clarity ([#5794](https://github.com/containerd/containerd/pull/5794)) * adding a little more clarity * update gotestsum to v1.7.0 ([#5793](https://github.com/containerd/containerd/pull/5793)) * update gotestsum to v1.7.0 * Discard blocks when removing a thin device ([#5756](https://github.com/containerd/containerd/pull/5756)) * Discard blocks when removing a thin device * Makefile: fix passing build tags ([#5590](https://github.com/containerd/containerd/pull/5590)) * Makefile: pass build tags to manpage build process * Makefile: fix tags parameter computation * Add runtime label to metrics ([#5744](https://github.com/containerd/containerd/pull/5744)) * Add runtime label to metrics * interface about shim build check ([#5745](https://github.com/containerd/containerd/pull/5745)) * interface about shim build check * integration: log all processes to investigate the test failure ([#5775](https://github.com/containerd/containerd/pull/5775)) * integration: log all processes to investigate the test failure * Fuzzing: Add archive fuzzer ([#5779](https://github.com/containerd/containerd/pull/5779)) * Fuzzing: Add archive fuzzer * Add docker.Fetch fuzzer ([#5687](https://github.com/containerd/containerd/pull/5687)) * Add docker fetch fuzzer * Support custom compressor for walking differ ([#5735](https://github.com/containerd/containerd/pull/5735)) * Support custom compressor for walking differ * remotes/docker/pusher.go: Fix missing Close() on push to docker remote ([#5770](https://github.com/containerd/containerd/pull/5770)) * remotes/docker/pusher.go: Fix missing Close() * remotes/docker/fetcher.go: Fix missing Close() on fetch from docker remote ([#5769](https://github.com/containerd/containerd/pull/5769)) * remotes/docker/fetcher.go: Fix missing Close() * Update cpuguy83/go-md2man binary to v2.0.1 ([#5771](https://github.com/containerd/containerd/pull/5771)) * Update cpuguy83/go-md2man binary to v2.0.1 * Refactor / optimize contrib/Dockerfile.test ([#5750](https://github.com/containerd/containerd/pull/5750)) * Dockerfile.test: build containerd in separate stage * Dockerfile.test: add GOLANG_IMAGE build arg to allow overriding * Dockerfile.test: clean up apt indexes after installing * Dockerfile.test: build critools in a separate stage * Dockerfile.test: build cni in a separate stage * Dockerfile.test: standard directory to collect build aftifacts * Dockerfile.test: split dev stage, and optimize order * Dockerfile.test: skip curl, gcc, git and make install * install-critools: make sure DESTDIR exists * update gotestsum to current master ([#5754](https://github.com/containerd/containerd/pull/5754)) * update gotestsum to current master * Github Security Advisory [GHSA-c72p-9xmj-rx3w](https://github.com/containerd/containerd/security/advisories/GHSA-c72p-9xmj-rx3w) * Add test for archive breakout test for lchmod * Use systemd cgroup driver for Kubernetes e2e tests with cgroupsv2 ([#5755](https://github.com/containerd/containerd/pull/5755)) * Use systemd cgroup driver for cgroupv2 tests * update runc to v1.0.1 ([#5751](https://github.com/containerd/containerd/pull/5751)) * go.mod: runc v1.0.1 * update runc binary to v1.0.1 * runtime: runc v2: remove redundant validation ([#5737](https://github.com/containerd/containerd/pull/5737)) * runtime: runc v2: remove redundant validation * Add timestamp to flaky restart monitor test ([#5727](https://github.com/containerd/containerd/pull/5727)) * Move loop check to before sleep * Add timestamp to flaky restart monitor test * Update Go to 1.16.6 ([#5722](https://github.com/containerd/containerd/pull/5722)) * integration/client: go mod tidy * Update Go to 1.16.6 * client: surface a connection error more clearly ([#4447](https://github.com/containerd/containerd/pull/4447)) * client: surface a connection error more clearly * Fix missing Body.Close() calls on push to docker remote ([#5712](https://github.com/containerd/containerd/pull/5712)) * Fix missing Body.Close() calls on push to docker remote * remove pkg/cri/platforms package ([#5710](https://github.com/containerd/containerd/pull/5710)) * remove pkg/cri/platforms package * Allow WithServices to use custom implementations ([#5709](https://github.com/containerd/containerd/pull/5709)) * Allow WithServices to use custom implementations * [Vendor] Update hcsshim to 0.8.18 ([#5673](https://github.com/containerd/containerd/pull/5673)) * [Vendor] Update hcsshim to 0.8.18 * test integration: Adds a test that restarts a failed container ([#5578](https://github.com/containerd/containerd/pull/5578)) * test integration: Adds a test that restarts a failed container * [CRI] move up to CRI v1 and support v1alpha in parallel ([#5619](https://github.com/containerd/containerd/pull/5619)) * use fu wei's suggeted interface pick for marshaling * add alpha version * move up to CRI v1 and support v1alpha in parallel * gha: make release workflow work in forks ([#5682](https://github.com/containerd/containerd/pull/5682)) * gha: make release workflow work in forks * Add unit test for plugin ([#5666](https://github.com/containerd/containerd/pull/5666)) * Add unit test for plugin * Dockerfile.test: add "cri-in-userns" (aka rootless) test stage ([#5700](https://github.com/containerd/containerd/pull/5700)) * Dockerfile.test: add "cri-in-userns" (aka rootless) test stage * Update for distribution spec 1.0 ([#5676](https://github.com/containerd/containerd/pull/5676)) * Add support for registry host path override * Update documenation for OCI distribution 1.0 * archive: cleanup lchmod logic ([#5702](https://github.com/containerd/containerd/pull/5702)) * Cleanup lchmod logic in archive * Install specific golang version in Windows CI. ([#5571](https://github.com/containerd/containerd/pull/5571)) * Install specific golang version in Windows CI. * Add ctr command label in NewContainerOpts ([#5660](https://github.com/containerd/containerd/pull/5660)) * feat: Add snapshotter label to the new snapshot for container. * snapshot/devmapper: log exported methods correctly ([#5655](https://github.com/containerd/containerd/pull/5655)) * snapshot/devmapper: log exported methods correctly * Makefile: fix DESTDIR and PREFIX concatenation ([#5662](https://github.com/containerd/containerd/pull/5662)) * Makefile: fix DESTDIR and PREFIX concatenation * Cri integration cleanup ([#5287](https://github.com/containerd/containerd/pull/5287)) * tests: Use EnsureImageExists for image pulling * tests: Refactors PodSandbox creation * move sys.FMountat() into mount package and un-export ([#5641](https://github.com/containerd/containerd/pull/5641)) * un-export mount.FMountat * move sys.FMountat() into mount package * sandbox: send pod UID to CNI plugins as K8S_POD_UID ([#5640](https://github.com/containerd/containerd/pull/5640)) * sandbox: send pod UID to CNI plugins as K8S_POD_UID * sys: remove StatAtime(), StatCtime(), StatMtime() and StatATimeAsTime() utils ([#5639](https://github.com/containerd/containerd/pull/5639)) * sys: remove StatAtime(), StatCtime(), StatMtime() and StatATimeAsTime() utils * content/local: inline sys.StatATimeAsTime() ([#5633](https://github.com/containerd/containerd/pull/5633)) * content/local: inline sys.StatATimeAsTime() * allow multi gpu to be specified via ctr ([#5636](https://github.com/containerd/containerd/pull/5636)) * allow multi gpu to be specified via ctr * go.mod: runc v1.0.0 * update runc binary to v1.0.0 GA * fixing some doc links ([#5629](https://github.com/containerd/containerd/pull/5629)) * fixing some doc links * Sync integration/go.mod with root go.mod ([#5623](https://github.com/containerd/containerd/pull/5623)) * Sync integration/go.mod with root go.mod * archive: Expose ChangeWriter to allow customized diff computing ([#5615](https://github.com/containerd/containerd/pull/5615)) * archive: Expose ChangeWriter to allow customized diff computing * CI: Switch to the available latest images ([#5625](https://github.com/containerd/containerd/pull/5625)) * CI: Switch to available latest images * fix deprecation config for default runtime * Re-enable criu in main integration runs ([#5614](https://github.com/containerd/containerd/pull/5614)) * Re-enable criu in main integration runs * runtime,v2: Enable debug when containerd is on debug+ log level ([#5617](https://github.com/containerd/containerd/pull/5617)) * runtime,v2: Enable debug when containerd is on debug+ log level * github.com/golang/protobuf/proto is deprecated * Update github.com/golang/protobuf from v1.3.5 to v1.4.3 * Update google.golang.org/grpc from v1.27.1 to v1.38.0 * Increase golangci-lint timeout * ctr flags of container rootfs propagation ([#5611](https://github.com/containerd/containerd/pull/5611)) * command line flags of setting container rootfs propagation * add cgroupv2 setup for cos with a flag * Update gotestsum to add timestamps to junit output ([#5612](https://github.com/containerd/containerd/pull/5612)) * Update gotestsum to add timestamps to junit output * Allow to pass --no-cgroups option to nvidia-container-cli ([#5604](https://github.com/containerd/containerd/pull/5604)) * Allow to pass --no-cgroup option to nvidia-container-cli * Makefile: FHS conformant manpage installation pathes ([#5577](https://github.com/containerd/containerd/pull/5577)) * Makefile: FHS conformant manpage installation pathes * Add proper Go version before project checks ([#5594](https://github.com/containerd/containerd/pull/5594)) * Add proper Go version before project checks * Enable cri-integration in Windows Periodic Tests ([#5580](https://github.com/containerd/containerd/pull/5580)) * Enable cri-integration in Windows Periodic Tests * adds explanation for seccomp unset/unconfined default vs runtime default ([#5573](https://github.com/containerd/containerd/pull/5573)) * adds explanation for seccomp unset/unconfined default vs runtime default * Fix cleanup context of teardownPodNetwork ([#5569](https://github.com/containerd/containerd/pull/5569)) * Fix cleanup context of teardownPodNetwork * update integration/client go.sum ([#5572](https://github.com/containerd/containerd/pull/5572)) * update integration/client go.sum * Revert diff/walking error change ([#5566](https://github.com/containerd/containerd/pull/5566)) * Revert diff/walking error change * Update opencontainers/selinux to v1.8.2 ([#5562](https://github.com/containerd/containerd/pull/5562)) * Update opencontainers/selinux to v1.8.2 * fix invalid validation error checking ([#5565](https://github.com/containerd/containerd/pull/5565)) * fix invalid validation error checking * diff/walking: fix defer cleanup ([#5551](https://github.com/containerd/containerd/pull/5551)) * diff/walking: fix defer cleanup * Windows periodic job: Add creation timestamp to RG ([#5559](https://github.com/containerd/containerd/pull/5559)) * Add creation timestamp to RG * Fix error case in Windows layer cleanup ([#5328](https://github.com/containerd/containerd/pull/5328)) * Fix error case in Windows layer cleanup * Use DeactivateLayer to unlock layers that we cannot rename ([#5422](https://github.com/containerd/containerd/pull/5422)) * Small typo fix "reimporst" * Use DeactivateLayer to recover layers that we cannot rename * tests: Symlink volume tests ([#5284](https://github.com/containerd/containerd/pull/5284)) * tests: Symlink volume tests * Makefile: fix DESTDIR environment variable behaviour ([#5535](https://github.com/containerd/containerd/pull/5535)) * Makefile: fix DESTDIR environment variable behaviour * Change Wrapf of non-error to an actual error ([#5560](https://github.com/containerd/containerd/pull/5560)) * Change Wrapf of non-error to an actual error * Install apparmor parser for arm64 environment * scrub the stale TODO ([#5536](https://github.com/containerd/containerd/pull/5536)) * scrub the stale TODO * docs: explicitly mention containerd's Prometheus path ([#5554](https://github.com/containerd/containerd/pull/5554)) * docs: explicitly mention containerd's Prometheus path * integration: Cleanup containerd on test teardown ([#5553](https://github.com/containerd/containerd/pull/5553)) * integration: Cleanup containerd on test teardown * docs/cri: update links ([#5548](https://github.com/containerd/containerd/pull/5548)) * docs/cri: update ocicrypt link * docs/cri: fix broken links * Update Windows periodic tests ([#5544](https://github.com/containerd/containerd/pull/5544)) * Update Windows periodic tests * Add CI periodic Windows Jobs. ([#5165](https://github.com/containerd/containerd/pull/5165)) * Schedule Windows job daily after midnight. * Update windows-periodic.yml * Add CI periodic Windows Jobs. * Rename atomicWrite to writeToCompletion ([#5273](https://github.com/containerd/containerd/pull/5273)) * Rename atomicWrite to writeToCompletion * Do not run btrfs tests if btrfs kernel module is not loaded ([#5539](https://github.com/containerd/containerd/pull/5539)) * Do not run btrfs tests if btrfs kernel module is not loaded * Fix incorrect UA used for registry authentication ([#5533](https://github.com/containerd/containerd/pull/5533)) * Fix incorrect UA used for registry authentication * ctr: parse mount options with embedded = character ([#5531](https://github.com/containerd/containerd/pull/5531)) * ctr: parse mount options with embedded = character * Fix mounts for FreeBSD ([#5472](https://github.com/containerd/containerd/pull/5472)) * Add ruleset=4 option * Remove mountpoints not commonly mounted on FreeBSD * Add copyright header & make sure compilation succeeds on all platforms * Fix mounts for FreeBSD * ctr: make exec pty behavior consistent with run ([#5527](https://github.com/containerd/containerd/pull/5527)) * ctr: exec handle pty resize after Start * ctr: exec setup IO with console * Makefile: use $@ for target file names ([#5534](https://github.com/containerd/containerd/pull/5534)) * Makefile: use $@ for target file names * Fix small typo ([#5528](https://github.com/containerd/containerd/pull/5528)) * Fix small typo * Don't check for apparmor_parser to be present ([#5519](https://github.com/containerd/containerd/pull/5519)) * update the link * Don't check for apparmor_parser to be present * Remove useless lines ([#5520](https://github.com/containerd/containerd/pull/5520)) * Remove useless lines * Fixed typos in docs ([#5509](https://github.com/containerd/containerd/pull/5509)) * fixed typos * Try next mirror in case of non-404 errors, too ([#5275](https://github.com/containerd/containerd/pull/5275)) * Try next mirror in case of non-404 errors, too * bump runc version to v1.0.0-rc95 ([#5514](https://github.com/containerd/containerd/pull/5514)) * bump runc version to v1.0.0-rc95 * update runc binary to v1.0.0-rc95 ([#5511](https://github.com/containerd/containerd/pull/5511)) * update runc binary to v1.0.0-rc95 * Bump github.com/Microsoft/go-winio from 0.4.15 to 0.5.0 ([#5508](https://github.com/containerd/containerd/pull/5508)) * Bump github.com/Microsoft/go-winio from 0.4.15 to 0.5.0 * Bump github.com/opencontainers/selinux from 1.8.0 to 1.8.1 ([#5507](https://github.com/containerd/containerd/pull/5507)) * Bump github.com/opencontainers/selinux from 1.8.0 to 1.8.1 * Makefile: allow overriding install command via environment ([#5493](https://github.com/containerd/containerd/pull/5493)) * Makefile: allow overriding install command via environment * tests: Adds support for Windows cri-integration tests ([#5163](https://github.com/containerd/containerd/pull/5163)) * tests: Adds support for Windows cri-integration tests * Update docker resolver to authorize redirects ([#5504](https://github.com/containerd/containerd/pull/5504)) * Update docker resolver to authorize redirects * bump hcsshim version to v0.8.17 ([#5505](https://github.com/containerd/containerd/pull/5505)) * bump hcsshim version to v0.8.17 * Release binary update for imgcrypt ([#5498](https://github.com/containerd/containerd/pull/5498)) * just release ctd-decoder not ctr-enc * Merge remote-tracking branch 'upstream/master' * Pin integration test image for alpine * cri-integration tests: Pull images once ([#5313](https://github.com/containerd/containerd/pull/5313)) * tests: Prepull images used in tests * plugin: optimize the check for the last registration ([#5440](https://github.com/containerd/containerd/pull/5440)) * plugin: optimize the check for the last registration * metadata: modify NewLeaseManager to return leases.Manager ([#5465](https://github.com/containerd/containerd/pull/5465)) * metadata: modify NewLeaseManager to return leases.Manager * Skip TLS verification for localhost ([#5100](https://github.com/containerd/containerd/pull/5100)) * Skip TLS verification for localhost * Merge remote-tracking branch 'upstream/master' * Makefile: make sure manpages are built before install-man ([#5492](https://github.com/containerd/containerd/pull/5492)) * Makefile: make sure manpages are built before install-man * adds description for hosts.toml ([#5309](https://github.com/containerd/containerd/pull/5309)) * adds credentials description * adds description for hosts.toml * Prepare default branch rename ([#5459](https://github.com/containerd/containerd/pull/5459)) * Prepare default branch rename * Merge remote-tracking branch 'upstream/master' * Update runc to rc94 ([#5473](https://github.com/containerd/containerd/pull/5473)) * Update vendored runc to v1.0.0.0-rc94 * Update the runc binary used with containerd to runc v1.0.0-rc94 * Fix `content.ReaderAt` close ([#5468](https://github.com/containerd/containerd/pull/5468)) * Fix content.ReaderAt close * Update releases doc with updated support timeline ([#5466](https://github.com/containerd/containerd/pull/5466)) * Update releases doc with updated support timeline * tests: add test for adaptor ([#5452](https://github.com/containerd/containerd/pull/5452)) * tests: add test for adaptor * Makefile: allow overriding go command by environment ([#5450](https://github.com/containerd/containerd/pull/5450)) * Makefile: allow overriding go command by environment * update to new cri-tools make install ([#5462](https://github.com/containerd/containerd/pull/5462)) * update to new cri-tools make install * Update Go to 1.16.4 ([#5461](https://github.com/containerd/containerd/pull/5461)) * Update Go to 1.16.4 * Merge remote-tracking branch 'upstream/release/1.5' * [release/1.5] go.mod: cut circular dependency on github.com/containerd/containerd ([#5457](https://github.com/containerd/containerd/pull/5457)) * go.mod: cut circular dependency on github.com/containerd/containerd * integration/client: go mod tidy * oci: fix WithDevShmSize ([#5063](https://github.com/containerd/containerd/pull/5063)) * oci: fix WithDevShmSize * [release/1.5] cherry-pick: windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink ([#5454](https://github.com/containerd/containerd/pull/5454)) * windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink * windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink ([#5411](https://github.com/containerd/containerd/pull/5411)) * windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink * doc: add missing namespaces package ([#5448](https://github.com/containerd/containerd/pull/5448)) * doc: add missing namespaces package * update seccomp version ([#5445](https://github.com/containerd/containerd/pull/5445)) * update seccomp version * Update golang.org/x/sys to add linux/ppc support ([#5436](https://github.com/containerd/containerd/pull/5436)) * Update golang.org/x/sys to add linux/ppc support * go.mod: cut circular dependency on github.com/containerd/containerd ([#5441](https://github.com/containerd/containerd/pull/5441)) * go.mod: cut circular dependency on github.com/containerd/containerd * integration/client: go mod tidy * Fix different registry hosts referencing the same auth config. ([#5446](https://github.com/containerd/containerd/pull/5446)) * Fix different registry hosts referencing the same auth config. </p> </details> ### Changes from containerd/cgroups <details><summary>24 commits</summary> <p> * cgroup: Optionally add process and task to a subsystems subset ([#203](https://github.com/containerd/cgroups/pull/203)) * cgroup: Optionally add process and task to a subsystems subset * replace pkg/errors from vendor ([#208](https://github.com/containerd/cgroups/pull/208)) * replace pkg/errors from vendor * cgroup.go: avoid panic on nil interface ([#207](https://github.com/containerd/cgroups/pull/207)) * cgroup.go: avoid panic on nil interface * Improvements on cgroup v2 support ([#204](https://github.com/containerd/cgroups/pull/204)) * cgroupv2: reset lastErr to nil when subtree control is successfully written * cgroupv2: enable controllers before setting resources in NewChild() * v2: remove unimplemented errors and ErrorHandler, IgnoreNotExist ([#201](https://github.com/containerd/cgroups/pull/201)) * v2: remove ErrorHandler and IgnoreNotExist as they are not implemented * v2: remove errors that are never returned * v1: reduce duplicated code ([#202](https://github.com/containerd/cgroups/pull/202)) * v1: reduce duplicated code * cgroup v1: implement AddProc() ([#200](https://github.com/containerd/cgroups/pull/200)) * cgroup v1: implement AddProc() * Rename branch from master to main ([#199](https://github.com/containerd/cgroups/pull/199)) * Rename branch from master to main * utils: export ParseCgroupFile() ([#197](https://github.com/containerd/cgroups/pull/197)) * utils: export ParseCgroupFile() * go.mod: coreos/go-systemd/v22 v22.3.2 to prepare for deprecations ([#194](https://github.com/containerd/cgroups/pull/194)) * go.mod: coreos/go-systemd/v22 v22.3.2 to prepare for deprecations * Use /proc/partitions to get device names ([#195](https://github.com/containerd/cgroups/pull/195)) * Use /proc/partitions to get device names </p> </details> ### Changes from containerd/console <details><summary>6 commits</summary> <p> * Fix CI ([#55](https://github.com/containerd/console/pull/55)) * Fix CI * Stop using pkg/errors * Add support for z/OS ([#46](https://github.com/containerd/console/pull/46)) * Console test on z/OS * Add support for z/OS </p> </details> ### Changes from containerd/continuity <details><summary>28 commits</summary> <p> * fs: use syscall.Timespec.Unix ([#193](https://github.com/containerd/continuity/pull/193)) * fs: use syscall.Timespec.Unix * Update CI Go version to 1.17 ([#192](https://github.com/containerd/continuity/pull/192)) * Update CI Go version to 1.17 * Build containerd/continuity on multiple Unix OSes ([#190](https://github.com/containerd/continuity/pull/190)) * Build containerd/continuity on multiple Unix OSes * Do not log errors before returning them ([#191](https://github.com/containerd/continuity/pull/191)) * Do not log errors before returning them * Copy Windows file metadata ([#188](https://github.com/containerd/continuity/pull/188)) * Copy Windows file metadata * fix fmt.Errorf("%w", err) on err == nil ([#187](https://github.com/containerd/continuity/pull/187)) * fix fmt.Errorf("%w", err) on err == nil * Remove direct dependency on github.com/pkg/errors ([#185](https://github.com/containerd/continuity/pull/185)) * run gofmt with Go 1.17 * remove direct dependency on github.com/pkg/errors * Fix darwin issues ([#186](https://github.com/containerd/continuity/pull/186)) * update AUTHORS * darwin: use utimensat syscall instead of utimes * fix darwin usage of du command * go.mod: bazil.org/fuse v0.0.0-20200407214033-5883e5a4b5125 ([#161](https://github.com/containerd/continuity/pull/161)) * go.mod: bazil.org/fuse v0.0.0-20200407214033-5883e5a4b5125 * fs/stat: add FreeBSD, and cleanup some nolint-comments ([#184](https://github.com/containerd/continuity/pull/184)) * reformat nolint comments * fs/stat: add FreeBSD * Rename branch from master to main ([#182](https://github.com/containerd/continuity/pull/182)) * Rename branch from master to main * testutil/loopback: print more debug info ([#180](https://github.com/containerd/continuity/pull/180)) * testutil/loopback: print more debug info </p> </details> ### Changes from containerd/go-cni <details><summary>18 commits</summary> <p> * run setup on networks in parallel ([#76](https://github.com/containerd/go-cni/pull/76)) * switch to direct index * run setup on networks in parallel * remove: Continue on "not found" errors ([#74](https://github.com/containerd/go-cni/pull/74)) * remove: Continue on "not found" errors * go.mod: github.com/containernetworking/cni v1.0.1 ([#72](https://github.com/containerd/go-cni/pull/72)) * go.mod: github.com/containernetworking/cni v1.0.1 * remove direct dependency on github.com/pkg/errors ([#71](https://github.com/containerd/go-cni/pull/71)) * remove direct dependency on github.com/pkg/errors * update CNI to v1.0.0 ([#70](https://github.com/containerd/go-cni/pull/70)) * test: add TestLibCNIType100 * update CNI to v1.0.0 * Rename branch from master to main ([#69](https://github.com/containerd/go-cni/pull/69)) * Rename branch from master to main * result: change Raw from a struct field to a method ([#68](https://github.com/containerd/go-cni/pull/68)) * result: change Raw from a struct field to a method * result: expose raw result ([#67](https://github.com/containerd/go-cni/pull/67)) * result: expose raw result </p> </details> ### Changes from containerd/imgcrypt <details><summary>32 commits</summary> <p> * CHANGES: Updated CHANGES document for 1.1.3 release ([#64](https://github.com/containerd/imgcrypt/pull/64)) * CHANGES: Updated CHANGES document for 1.1.3 release * docs: update project branch to main ([#63](https://github.com/containerd/imgcrypt/pull/63)) * docs: update project branch to main * Update linter to match containerd repo ([#61](https://github.com/containerd/imgcrypt/pull/61)) * Update linter to match containerd repo * update CI golang version * Bump github.com/containerd/containerd from 1.5.7 to 1.5.8 ([#59](https://github.com/containerd/imgcrypt/pull/59)) * Bump github.com/containerd/containerd from 1.5.7 to 1.5.8 * maint: Update to ocicrypt v1.1.2 ([#57](https://github.com/containerd/imgcrypt/pull/57)) * maint: Update to ocicrypt v1.1.2 * Decouple CreateCryptoConfig() from github.com/urfave/cli ([#56](https://github.com/containerd/imgcrypt/pull/56)) * Decouple CreateCryptoConfig() from github.com/urfave/cli * Bump github.com/containerd/containerd from 1.5.5 to 1.5.7 ([#55](https://github.com/containerd/imgcrypt/pull/55)) * Bump github.com/containerd/containerd from 1.5.5 to 1.5.7 * replace pkg/errors and bump related library * README: Fix CRI decryption document URL ([#53](https://github.com/containerd/imgcrypt/pull/53)) * README: Fix CRI decryption document URL * Bump github.com/containerd/containerd from 1.5.2 to 1.5.4 ([#52](https://github.com/containerd/imgcrypt/pull/52)) * Bump github.com/containerd/containerd from 1.5.2 to 1.5.4 * Bump containerd to 1.5.2 ([#51](https://github.com/containerd/imgcrypt/pull/51)) * Bump containerd to 1.5.2 * images: Implement ConvertFunc for image en- and decryption ([#49](https://github.com/containerd/imgcrypt/pull/49)) * images: Implement ConvertFunc for image en- and decryption * Add containerd-release to makefile ([#48](https://github.com/containerd/imgcrypt/pull/48)) * Remove ctr-enc from installation * vendor sync up with containerd 1.5 ga, and runc94 ([#47](https://github.com/containerd/imgcrypt/pull/47)) * sync up with containerd 1.5 ga, and runc94 * Sync ctr-enc with containerd's ctr v1.5.0-rc.3 ([#46](https://github.com/containerd/imgcrypt/pull/46)) * CICD: Run 'apt update' before pulling packages * ctr-enc: Set the version for ctr-enc when linking * Sync ctr-enc with containerd's ctr v1.5.0-rc.3 </p> </details> ### Changes from containerd/ttrpc <details><summary>34 commits</summary> <p> * Add protoc-gen-go-ttrpc ([#96](https://github.com/containerd/ttrpc/pull/96)) * Add protoc-gen-go-ttrpc * client: Handle sending/receiving in separate goroutines ([#94](https://github.com/containerd/ttrpc/pull/94)) * client: Handle sending/receiving in separate goroutines * Run Protobuild in GitHub Actions ([#95](https://github.com/containerd/ttrpc/pull/95)) * Run Protobuild in GitHub Actions * Re-generate example.pb.go * replace pkg/errors ([#93](https://github.com/containerd/ttrpc/pull/93)) * replace pkg/errors from vendor * Rename branch from master to main ([#86](https://github.com/containerd/ttrpc/pull/86)) * Rename branch from master to main * Make "go test" and "go build" work on macOS ([#85](https://github.com/containerd/ttrpc/pull/85)) * Make the example command buildable on macOS * Run GitHub Actions on macOS * Make "go test" work on macOS * Return Unimplemented when services or methods are not implemented ([#83](https://github.com/containerd/ttrpc/pull/83)) * Return Unimplemented when services or methods are not implemented * Remove "Very new" and checked TODO items ([#84](https://github.com/containerd/ttrpc/pull/84)) * Remove "Very new" and checked TODO items * removing glide from ignore ([#82](https://github.com/containerd/ttrpc/pull/82)) * removing glide from ignore * go.mod: update dependencies ([#79](https://github.com/containerd/ttrpc/pull/79)) * go.mod: github.com/prometheus/procfs v0.6.0 * go.mod: google.golang.org/genproto v0.0.0-20200224152610-e50cd9704f63 * go.mod: google.golang.org/grpc v1.27.1 * go.mod: github.com/gogo/protobuf v1.3.2 * remove travis, add codecov badge ([#78](https://github.com/containerd/ttrpc/pull/78)) * CI: add codecov badge to readme * CI: remove travis * Use GitHub Actions for CI ([#77](https://github.com/containerd/ttrpc/pull/77)) * Use GitHub Actions for CI * go.mod: sirupsen/logrus v1.7.0 ([#76](https://github.com/containerd/ttrpc/pull/76)) * go.mod: sirupsen/logrus v1.7.0 * go mod tidy </p> </details> ### Dependency Changes * **cloud.google.com/go** v0.81.0 **_new_** * **github.com/AdaLogics/go-fuzz-headers** 6c3934b029d8 **_new_** * **github.com/Microsoft/go-winio** v0.4.17 -> v0.5.1 * **github.com/Microsoft/hcsshim** v0.8.16 -> v0.9.2 * **github.com/blang/semver** v3.5.1 **_new_** * **github.com/cenkalti/backoff/v4** v4.1.2 **_new_** * **github.com/cespare/xxhash/v2** v2.1.1 -> v2.1.2 * **github.com/cilium/ebpf** v0.4.0 -> v0.7.0 * **github.com/containerd/cgroups** v1.0.1 -> v1.0.2 * **github.com/containerd/console** v1.0.2 -> v1.0.3 * **github.com/containerd/continuity** v0.1.0 -> v0.2.2 * **github.com/containerd/go-cni** v1.0.2 -> v1.1.1 * **github.com/containerd/imgcrypt** v1.1.1 -> v1.1.3 * **github.com/containerd/ttrpc** v1.0.2 -> v1.1.0 * **github.com/containernetworking/cni** v0.8.1 -> v1.0.1 * **github.com/containernetworking/plugins** v0.9.1 -> v1.0.1 * **github.com/containers/ocicrypt** v1.1.1 -> v1.1.2 * **github.com/coreos/go-systemd/v22** v22.1.0 -> v22.3.2 * **github.com/go-logr/logr** v0.2.0 -> v1.2.2 * **github.com/go-logr/stdr** v1.2.2 **_new_** * **github.com/godbus/dbus/v5** v5.0.3 -> v5.0.6 * **github.com/golang/groupcache** 8c9f03a8e57e -> 41bb18bfe9da * **github.com/golang/protobuf** v1.3.5 -> v1.5.2 * **github.com/google/go-cmp** v0.5.4 -> v0.5.6 * **github.com/google/gofuzz** v1.1.0 -> v1.2.0 * **github.com/grpc-ecosystem/go-grpc-middleware** v1.3.0 **_new_** * **github.com/grpc-ecosystem/grpc-gateway** v1.16.0 **_new_** * **github.com/hashicorp/errwrap** v1.0.0 -> v1.1.0 * **github.com/hashicorp/go-multierror** v1.0.0 -> v1.1.1 * **github.com/imdario/mergo** v0.3.11 -> v0.3.12 * **github.com/intel/goresctrl** v0.2.0 **_new_** * **github.com/json-iterator/go** v1.1.10 -> v1.1.12 * **github.com/moby/spdystream** v0.2.0 **_new_** * **github.com/moby/sys/mountinfo** v0.4.1 -> v0.5.0 * **github.com/moby/sys/signal** v0.6.0 **_new_** * **github.com/moby/sys/symlink** v0.1.0 -> v0.2.0 * **github.com/modern-go/reflect2** v1.0.1 -> v1.0.2 * **github.com/opencontainers/image-spec** v1.0.1 -> 693428a734f5 * **github.com/opencontainers/runc** v1.0.0-rc93 -> v1.1.0 * **github.com/opencontainers/runtime-spec** e6143ca7d51d -> 1c3f411f0417 * **github.com/opencontainers/selinux** v1.8.0 -> v1.10.0 * **github.com/pelletier/go-toml** v1.8.1 -> v1.9.3 * **github.com/prometheus/client_golang** v1.7.1 -> v1.11.0 * **github.com/prometheus/common** v0.10.0 -> v0.30.0 * **github.com/prometheus/procfs** v0.6.0 -> v0.7.3 * **github.com/satori/go.uuid** v1.2.0 **_new_** * **github.com/sirupsen/logrus** v1.7.0 -> v1.8.1 * **github.com/spf13/pflag** v1.0.5 **_new_** * **github.com/stretchr/testify** v1.6.1 -> v1.7.0 * **github.com/vishvananda/netlink** f5de75959ad5 **_new_** * **github.com/vishvananda/netns** 2eb08e3e575f **_new_** * **go.etcd.io/bbolt** v1.3.5 -> v1.3.6 * **go.opencensus.io** v0.22.3 -> v0.23.0 * **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc** v0.28.0 **_new_** * **go.opentelemetry.io/otel** v1.3.0 **_new_** * **go.opentelemetry.io/otel/exporters/otlp/internal/retry** v1.3.0 **_new_** * **go.opentelemetry.io/otel/exporters/otlp/otlptrace** v1.3.0 **_new_** * **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc** v1.3.0 **_new_** * **go.opentelemetry.io/otel/sdk** v1.3.0 **_new_** * **go.opentelemetry.io/otel/trace** v1.3.0 **_new_** * **go.opentelemetry.io/proto/otlp** v0.11.0 **_new_** * **golang.org/x/crypto** 0c34fe9e7dc2 -> 32db794688a5 * **golang.org/x/net** e18ecbb05110 -> fe4d6282115f * **golang.org/x/oauth2** bf48bf16ab8d -> 2bc19b11175f * **golang.org/x/sync** 09787c993a3a -> 036812b2e83c * **golang.org/x/sys** 47abb6519492 -> 1d35b9e2eb4e * **golang.org/x/term** 7de9c90e9dd1 -> 6886f2dfbf5b * **golang.org/x/text** v0.3.4 -> v0.3.7 * **golang.org/x/time** 3af7569d3a1e -> 1f47c861a9ac * **google.golang.org/appengine** v1.6.5 -> v1.6.7 * **google.golang.org/grpc** v1.27.1 -> v1.43.0 * **google.golang.org/protobuf** v1.27.1 **_new_** * **gopkg.in/yaml.v3** 9f266ea9e77c -> 496545a6307b * **k8s.io/api** v0.20.6 -> v0.22.5 * **k8s.io/apimachinery** v0.20.6 -> v0.22.5 * **k8s.io/apiserver** v0.20.6 -> v0.22.5 * **k8s.io/client-go** v0.20.6 -> v0.22.5 * **k8s.io/component-base** v0.20.6 -> v0.22.5 * **k8s.io/cri-api** v0.20.6 -> v0.23.1 * **k8s.io/klog/v2** v2.4.0 -> v2.30.0 * **k8s.io/utils** 67b214c5f920 -> cb0fa318a74b * **sigs.k8s.io/structured-merge-diff/v4** v4.0.3 -> v4.1.2 Previous release can be found at [v1.5.0](https://github.com/containerd/containerd/releases/tag/v1.5.0)
-
v1.6.0-rc.0
containerd 1.6.0-rc.0 Welcome to the v1.6.0-rc.0 release of containerd! The seventh major release of containerd includes many improvements and added support to increase overall compatibility and stability. ### Highlights #### Runtime * **Add runtime label to metrics** ([#5744](https://github.com/containerd/containerd/pull/5744)) * **Cleanup task delete logic in v2 shim** ([#5813](https://github.com/containerd/containerd/pull/5813)) * **Add support for shim plugins** ([#5817](https://github.com/containerd/containerd/pull/5817)) * **Decouple shim and task manager** ([#5918](https://github.com/containerd/containerd/pull/5918)) * **Add runc shim support for core scheduling** ([#6011](https://github.com/containerd/containerd/pull/6011)) * **Update shim client connect attempt to fail fast when shim errors** ([#6031](https://github.com/containerd/containerd/pull/6031)) * **Add support for absolute path to shim binaries** ([#6206](https://github.com/containerd/containerd/pull/6206)) #### Windows * **Add support for Windows HostProcess containers** ([#5131](https://github.com/containerd/containerd/pull/5131)) * **Add support for Windows resource limits** ([#5778](https://github.com/containerd/containerd/pull/5778)) #### CRI * **Add CNI configuration based on runtime class** ([#4695](https://github.com/containerd/containerd/pull/4695)) * **Add support for Intel RDT** ([#5439](https://github.com/containerd/containerd/pull/5439)) * **Add support for CRI v1 and v1alpha in parallel** ([#5619](https://github.com/containerd/containerd/pull/5619)) * **Add support for unified resources field for cgroups v2** ([#5627](https://github.com/containerd/containerd/pull/5627)) * **Add IP preference configuration for reporting pod IP** ([#5964](https://github.com/containerd/containerd/pull/5964)) * **Implement new CRI pod sandbox stats API** ([#6113](https://github.com/containerd/containerd/pull/6113)) * **Add sandbox and container latency metrics** ([#6111](https://github.com/containerd/containerd/pull/6111)) * **Add namespace to ttrpc and grpc plugin connections** ([#6130](https://github.com/containerd/containerd/pull/6130)) * **Add option to allow ping sockets and privileged ports with no capabilities** ([#6170](https://github.com/containerd/containerd/pull/6170)) * **Add support for configuring swap** ([#6320](https://github.com/containerd/containerd/pull/6320)) #### Other * **Add a shared namespace label for cross-namespace content sharing** ([#5043](https://github.com/containerd/containerd/pull/5043)) * **Add support for client TLS Auth for grpc** ([#5606](https://github.com/containerd/containerd/pull/5606)) * **Add xfs support for devicemapper snapshotter** ([#5610](https://github.com/containerd/containerd/pull/5610)) * **Add metric exposing build version and revision** ([#5965](https://github.com/containerd/containerd/pull/5965)) * **Add OpenTelemetry trace injection to grpc client** ([#5992](https://github.com/containerd/containerd/pull/5992)) * **Add support for custom fs options in devmapper snapshotter** ([#6122](https://github.com/containerd/containerd/pull/6122)) #### Client * **Allow WithServices to use custom implementations** ([#5709](https://github.com/containerd/containerd/pull/5709)) * **Support custom compressor for walking differ** ([#5735](https://github.com/containerd/containerd/pull/5735)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Derek McGowan * Phil Estes * Wei Fu * Akihiro Suda * Maksym Pavlenko * Sebastiaan van Stijn * Mike Brown * Kazuyoshi Kato * Michael Crosby * Claudiu Belu * haoyun * Stefan Berger * Daniel Canter * Gabriel Adrian Samfira * zounengren * AdamKorcz * Adelina Tuvenie * Brian Goff * Kohei Tokunaga * Davanum Srinivas * Nashwan Azhari * Samuel Karp * Shiming Zhang * Enrico Weigelt, metux IT consult * Markus Lehtonen * Alakesh Haloi * Hajime Tazaki * Kevin Parsons * Iceber Gu * Aditi Sharma * David Porter * Gijs Peskens * Brandon Lum * Danielle Lancashire * Jacob MacElroy * dependabot[bot] * wanglei * Alexandre Peixoto Ferreira * Cody Roseborough * Fabiano Fidêncio * Furkan Türkal * Jiaming Xu * Kir Kolyshkin * Miao Wang * Neil Johnson * Paul "TBBle" Hampson * Priyanka Saggu * Romain Aviolat * Samuel Ortiz * Sunghoon Kang * Takumasa Sakao * Tobias Klauser * Tõnis Tiigi * Zhiyu Li * ningmingxiao * Alexander Minbaev * Alexey Ivanov * Artem Khramov * Ben Hutchings * Cory Bennett * Da McGrady * Dan Williams * Eng Zer Jun * Eric Ernst * Ethan Chen * Fupan Li * Gaurav Gahlot * Gunju Kim * Jacob Blain Christen * James Sturtevant * Jan Klippel * Jayme Howard * Jiajun Jiang * Jintao Zhang * Justin Terry * Kaijie Chen * Kante * Kern Walster * Kitt Hsu * Lantao Liu * Ma Xinjian * Manabu Sugimoto * Manuel Alejandro de Brito Fontes * Mark Rossetti * Markus Lippert * Mikko Ylinen * Ng Yang * Nicolas Chariglione * Olli Janatuinen * Peri Thompson * Quan Tian * Radostin Stoyanov * Rui Lopes * Sambhav Kothari * Sebastian Hasler * Sergey Kanzhelev * Yang Yang * Yifan Yuan * Zilong Wang * Zufar Dhiyaulhaq * botieking98 * chenxiaoyu * jayonlau * jerryzhuang * linrunlong * scuzhanglei * wangzhan * Étienne Guesnet ### Changes <details><summary>946 commits</summary> <p> * Prepare release notes for v1.6.0-rc.0 ([#6431](https://github.com/containerd/containerd/pull/6431)) * Prepare release notes for v1.6.0-rc.0 * Integration: Switch to using `auth` Gcloud action in Windows workflow. ([#6397](https://github.com/containerd/containerd/pull/6397)) * Integration: Switch to `upload-cloud-storage` Gcloud action. * Integration: Switch to using `auth` Gcloud action in Windows workflow. * remove io/ioutil ([#6426](https://github.com/containerd/containerd/pull/6426)) * remove io/ioutil * test: e2e node COS cgroupv2 script ([#6418](https://github.com/containerd/containerd/pull/6418)) * test: e2e node COS cgroupv2 script * Integration: Enable CRITest on Windows 2022. ([#6378](https://github.com/containerd/containerd/pull/6378)) * Enable critest tests on Windows Server 2022. * Parametrize CRITest test images in Windows Periodic workflow. * Update error message for apparmor parser ([#6415](https://github.com/containerd/containerd/pull/6415)) * Update error message for apparmor parser * Fix wrong log message ([#6419](https://github.com/containerd/containerd/pull/6419)) * Fix wrong log message * Followup errors change ([#6414](https://github.com/containerd/containerd/pull/6414)) * Fix incorrect error wrapped when closing ingest file * Fix seek error used without nil check * Fix followup items from errors replacement * Updates CRI API & Kubernetes to 1.23 ([#6351](https://github.com/containerd/containerd/pull/6351)) * Update k/k to 1.23.0 * Updating adoption of containerd for AKS ([#6416](https://github.com/containerd/containerd/pull/6416)) * Updating adoption of containerd for AKS * update the adoption status of containerd in GKE ([#6413](https://github.com/containerd/containerd/pull/6413)) * update the adoption status of containerd in GKE * go.mod: update github.com/containerd/{continuity,go-cni,imgcrypt} ([#6410](https://github.com/containerd/containerd/pull/6410)) * go.mod: update github.com/containerd/{continuity,go-cni,imgcrypt} * replace github.com/pkg/errors with native errors ([#6366](https://github.com/containerd/containerd/pull/6366)) * feat: replace github.com/pkg/errors to errors * corrected link in cri architecture documentation ([#6412](https://github.com/containerd/containerd/pull/6412)) * corrected link in cri architecture documentation * remotes/docker: allow fetching "refresh token" (aka "identity token", "offline token") ([#6396](https://github.com/containerd/containerd/pull/6396)) * remotes/docker: allow fetching "refresh token" (aka "identity token") * remotes/docker/config: allow setting custom AuthorizerOpts * Prepare release notes for v1.6.0-beta.5 ([#6407](https://github.com/containerd/containerd/pull/6407)) * Prepare release notes for v1.6.0-beta.5 * Integration: Check GCP secrets on Windows CI artifact upload. ([#6292](https://github.com/containerd/containerd/pull/6292)) * Integration: Check GCP secrets on Windows CI artifact upload. * Github Security Advisory [GHSA-mvff-h3cj-wj9c](https://github.com/containerd/containerd/security/advisories/GHSA-mvff-h3cj-wj9c) * only relabel cri managed host mounts * Add support for Intel RDT ([#5439](https://github.com/containerd/containerd/pull/5439)) * cri: add ignore_rdt_not_enabled_errors config option * Update dependencies * cri: annotations for controlling RDT class * tasks: add Linux rdt support * cmd: add --rdt-class command line option * oci: implement WithRdt * fix: use _ for consistency ([#6391](https://github.com/containerd/containerd/pull/6391)) * fix: use _ for consistency * content/local: use syscall.Timespec.Unix ([#6403](https://github.com/containerd/containerd/pull/6403)) * content/local: use syscall.Timespec.Unix * docs: improve plugin documentation ([#6207](https://github.com/containerd/containerd/pull/6207)) * docs: document the runtime shim plugin config options * docs: use proper markdown lists in containerd-config.toml.5.md * fix(ctr): enable networking for Windows containers ([#6304](https://github.com/containerd/containerd/pull/6304)) * fix(ctr): enable networking for Windows containers * Fix $(PWD) issue for Windows makefile ([#6394](https://github.com/containerd/containerd/pull/6394)) * Fix $(PWD) issue for Windows makefile * only test abstract uds on linux ([#6395](https://github.com/containerd/containerd/pull/6395)) * fix: only test abstract unix socket on linux * Fix restart container test ([#6390](https://github.com/containerd/containerd/pull/6390)) * Expect ErrorNotFound on Windows after Kill() * Replace tskill with taskkill * fix when kernel version < 4.13rc1 by using index=off cause test error ([#6291](https://github.com/containerd/containerd/pull/6291)) * fix when kernel version < 4.13rc1 by using index=off cause overlay test error * Fix no-daemon flag for integration/client tests ([#6384](https://github.com/containerd/containerd/pull/6384)) * Fix no-daemon flag for integration/client tests * Enable lazy init for ext4 with devicemapper ([#6122](https://github.com/containerd/containerd/pull/6122)) * Enable lazy init for ext4 with devicemapper * Fix flakiness on Windows for list stats ([#6385](https://github.com/containerd/containerd/pull/6385)) * Fix flakiness on Windows for list stats * cri-integration: Add Windows defaults and fix spaces issue ([#6347](https://github.com/containerd/containerd/pull/6347)) * cri-integration: Add Windows default paths * Upgrade OpenTelemetry dependencies ([#6383](https://github.com/containerd/containerd/pull/6383)) * Upgrade k8s.io/klog/v2 from 2.9.0 to 2.20.0 * Use insecure.NewCredentials instead of grpc.WithInsecure * Upgrade OpenTelemetry dependencies * Fix default makefile target for windows ([#6322](https://github.com/containerd/containerd/pull/6322)) * Fix default makefile target for windows * Disable TestContainerHook on Windows ([#6379](https://github.com/containerd/containerd/pull/6379)) * Disable TestContainerHook on Windows * seutil: Fix setting the "container_kvm_t" label ([#6372](https://github.com/containerd/containerd/pull/6372)) * seutil: Fix setting the "container_kvm_t" label * Remove Windows integration testing for 2004. ([#6350](https://github.com/containerd/containerd/pull/6350)) * Remove Windows integration testing for 2004. * OCI: Mount (accessible) host devices in privileged rootless containers ([#6308](https://github.com/containerd/containerd/pull/6308)) * OCI: Mount (accessible) host devices in privileged rootless containers * oci.getDevices(): move "non-dir, non '/dev/console'" case into switch * cri: add support for configuring swap ([#6320](https://github.com/containerd/containerd/pull/6320)) * fixup: check for swap accounting * fixup: handle diff between cgroupsv1 and v2 * cri: add support for configuring swap * Integration: Enable TestVolumeOwnership on Windows ([#6275](https://github.com/containerd/containerd/pull/6275)) * Replace find with native Go code * Enable TestVolumeOwnership on Windows * Prepare release notes for v1.6.0-beta.4 ([#6296](https://github.com/containerd/containerd/pull/6296)) * Prepare release notes for v1.6.0-beta.4 * refactor: functions for error log and error return ([#6358](https://github.com/containerd/containerd/pull/6358)) * feat: Errorf usage * Split apart runc shim into plugin components ([#6021](https://github.com/containerd/containerd/pull/6021)) * Use task plugin for runc shim * Seperate shim manager and task service * Split runc shim into plugin components * Add shutdown package * CRI update for sandbox sizing ([#6155](https://github.com/containerd/containerd/pull/6155)) * cri, sandbox: pass sandbox resource details if available, applicable * medatada: make namespaces' deletion error less cryptic ([#6354](https://github.com/containerd/containerd/pull/6354)) * medatada: make namespaces' deletion error less cryptic * ListContainerStats to return stats response if ContainerStatsFilter is nil ([#6373](https://github.com/containerd/containerd/pull/6373)) * add-list-stat: return container list if filter is nil * integration: deflake TestContainerdRestart ([#6369](https://github.com/containerd/containerd/pull/6369)) * integration: deflake TestContainerdRestart * feat: add timeout for bolt open ([#6225](https://github.com/containerd/containerd/pull/6225)) * feat: support custom timeout for blot open * Update Go to 1.17.5 ([#6333](https://github.com/containerd/containerd/pull/6333)) * Update Go to 1.17.5 * cri/server: use consistent alias for pkg/ioutil ([#6332](https://github.com/containerd/containerd/pull/6332)) * cri/server: use consistent alias for pkg/ioutil * Disable restart monitor test in Windows ([#6364](https://github.com/containerd/containerd/pull/6364)) * Disable restart monitor test in Windows * Don't fail-fast on Windows integration tests ([#6338](https://github.com/containerd/containerd/pull/6338)) * Don't fail-fast on Windows integration tests * Update restart monitor test to output daemon logs on failure ([#6355](https://github.com/containerd/containerd/pull/6355)) * Run windows parallel integration test as short * Update restart monitor test to output daemon logs on failure * go.mod: update image-spec to latest (v1.0.3-dev) ([#6263](https://github.com/containerd/containerd/pull/6263)) * images/converter: remove deprecated types * go.mod: update image-spec to latest (v1.0.3-dev) * Skip WithAdditionalGIDs on Darwin ([#6353](https://github.com/containerd/containerd/pull/6353)) * Skip WithAdditionalGIDs on Darwin * Use RFC3339 format on Windows periodic resource group creation so cleanup works ([#6303](https://github.com/containerd/containerd/pull/6303)) * Use RFC3339 format so rg cleanup works * update runc to v1.0.3 ([#6330](https://github.com/containerd/containerd/pull/6330)) * go.mod: github.com/opencontainers/runc v1.0.3 * update runc binary to v1.0.3 * Unblock native snapshotter on Darwin ([#6329](https://github.com/containerd/containerd/pull/6329)) * Allow native snapshotter on Darwin * Do not use `go get` to install executables ([#6328](https://github.com/containerd/containerd/pull/6328)) * Do not use `go get` to install executables * Include runtime v2 in default builtins ([#6326](https://github.com/containerd/containerd/pull/6326)) * Include runtime v2 in default builtins * Add Windows Server 2022 CI runs ([#6314](https://github.com/containerd/containerd/pull/6314)) * Add Windows Server 2022 CI runs * Set explicit ACL on test files ([#6324](https://github.com/containerd/containerd/pull/6324)) * Use a single RUN command * Set explicit ACL on test files * integration: align tags of test images ([#6311](https://github.com/containerd/containerd/pull/6311)) * integration: align tags of test images * Set CONTAINERD_ROOT in Windows cri-integration ([#6325](https://github.com/containerd/containerd/pull/6325)) * Set CONTAINERD_ROOT in Windows cri-integration * export oci.DeviceFromPath() ([#6312](https://github.com/containerd/containerd/pull/6312)) * export oci.DeviceFromPath() * Update volume test images ([#6321](https://github.com/containerd/containerd/pull/6321)) * Update continuity dependency * Update volume test images * Update TestRestartMonitor expected time check ([#6201](https://github.com/containerd/containerd/pull/6201)) * Add error logging on cleanup * Update TestRestartMonitor expected time check * Move test volume images from gcr to ghcr ([#6319](https://github.com/containerd/containerd/pull/6319)) * Move volume images from gcr to ghcr * Revert shim service plugin migration ([#6301](https://github.com/containerd/containerd/pull/6301)) * Revert shim plugin migration * Authenticate against ghcr.io ([#6317](https://github.com/containerd/containerd/pull/6317)) * Add permissions * Authenticate against ghcr.io * oci/deviceFromPath(): correctly check device types ([#6306](https://github.com/containerd/containerd/pull/6306)) * oci/deviceFromPath(): correctly check device types * Skip TestExportAndImportMultiLayer on Windows ([#6315](https://github.com/containerd/containerd/pull/6315)) * Skip TestExportAndImportMultiLayer on Windows * Integration: Add image build workflow ([#6290](https://github.com/containerd/containerd/pull/6290)) * Add image build workflow * Integration: Separate Windows Periodic Tests workflow trigger. ([#6286](https://github.com/containerd/containerd/pull/6286)) * Integration: Separate Windows Periodic Tests workflow trigger. * Build volume test images on Windows ([#6274](https://github.com/containerd/containerd/pull/6274)) * Build volume test images on Windows * Add VMware TKG & TCE to Containerd adopters ([#6297](https://github.com/containerd/containerd/pull/6297)) * Add VMware TKG & TCE to Containerd adopters * Vagrantfile: update to Fedora 35 ([#6293](https://github.com/containerd/containerd/pull/6293)) * Vagrantfile: update to Fedora 35 * Update README.md repo->org ([#6269](https://github.com/containerd/containerd/pull/6269)) * Update README.md repo->org * Fix executable file not found when restoring shims ([#6278](https://github.com/containerd/containerd/pull/6278)) * Fix executable file not found when restoring shims * ctr/snapshots/diff: show media-type in stderr ([#6271](https://github.com/containerd/containerd/pull/6271)) * ctr/snapshots/diff: don't show the media-type in output * ctr: Add Linux Capabilities control flags ([#6289](https://github.com/containerd/containerd/pull/6289)) * ctr: Add Linux Capabilities control flags * integration: add stats result in error message ([#6270](https://github.com/containerd/containerd/pull/6270)) * integration: add stats result in error message * releases: mark 1.4 as Extended ([#6287](https://github.com/containerd/containerd/pull/6287)) * docs: mark 1.4 as Extended * docs: fix RELEASES.md gRPC API anchor * feat: skip ci for fork ([#6284](https://github.com/containerd/containerd/pull/6284)) * feat: skip ci for fork * content/local: Close the file if Seek fails ([#6280](https://github.com/containerd/containerd/pull/6280)) * content/local: Close the file if Seek fails * Integration: Remove explicit version passing to `azure/CLI`. ([#6268](https://github.com/containerd/containerd/pull/6268)) * Integration: Remove explicit version passing to `azure/CLI`. * Fix wrong make target on documentation ([#6276](https://github.com/containerd/containerd/pull/6276)) * Fix wrong make target on documentation * fix: server error return ([#6272](https://github.com/containerd/containerd/pull/6272)) * fix: server error return * Prepare release notes for v1.6.0-beta.3 ([#6267](https://github.com/containerd/containerd/pull/6267)) * Prepare release notes for v1.6.0-beta.3 * Update API version in go.mod * Update release name to use consistent format * feat:support custom callopts on client side ([#6254](https://github.com/containerd/containerd/pull/6254)) * fix: make max recv/send msg size setting default * feat:support custom callopts on client side * [CRI] Fix panic when registry.mirrors use localhost ([#6258](https://github.com/containerd/containerd/pull/6258)) * [CRI] Fix panic when registry.mirrors use localhost * Add support for TMP override on toml ([#6241](https://github.com/containerd/containerd/pull/6241)) * Add support for TMP override on toml * CRI: Support enable_unprivileged_icmp and enable_unprivileged_ports options ([#6170](https://github.com/containerd/containerd/pull/6170)) * CRI: Support enable_unprivileged_icmp and enable_unprivileged_ports options * Github Security Advisory [GHSA-5j5w-g665-5m35](https://github.com/containerd/containerd/security/advisories/GHSA-5j5w-g665-5m35) * schema1: reject ambiguous documents * images: validate document type before unmarshal * [cri] add sandbox and container latency metrics ([#6111](https://github.com/containerd/containerd/pull/6111)) * [cri] add sandbox and container latency metrics * Integration: Generalize Windows CI setup scripts for any username. ([#6255](https://github.com/containerd/containerd/pull/6255)) * Generalize Windows CI setup script for any user. * Standardize cmdlet capitalization in Windows CI scripts. * feat: use rwmutex instead ([#6253](https://github.com/containerd/containerd/pull/6253)) * feat: use rwmutex instead * Allow absolute path to shim binaries ([#6206](https://github.com/containerd/containerd/pull/6206)) * Fix package alias * Support custom runtime path when launching tasks * Add runtime path in CreateTaskRequest * Close file if permission modification fails ([#6246](https://github.com/containerd/containerd/pull/6246)) * Close file if permission modification fails * release: change tar name to match prior releases ([#6250](https://github.com/containerd/containerd/pull/6250)) * release: change tar name to match prior releases * Fix wrong error returned for image index lookup ([#6237](https://github.com/containerd/containerd/pull/6237)) * Fix wrong error returned for image index lookup * Fix containerd fails to pull OCI image with non-`http(s)://` urls ([#6221](https://github.com/containerd/containerd/pull/6221)) * Fix containerd fails to pull OCI image with non-`http(s)://` urls * Prepare release notes for v1.6.0-beta.2 ([#6223](https://github.com/containerd/containerd/pull/6223)) * Prepare release notes for v1.6.0-beta.2 * Add arm64 to releases ([#6196](https://github.com/containerd/containerd/pull/6196)) * Rename release dockerfile to omit distro name * release: improve dockerfile * Add arm64 to releases * use write lock when updating container stats ([#6236](https://github.com/containerd/containerd/pull/6236)) * use write lock when updating container stats * go.mod: Bump hcsshim to v0.9.1 ([#6230](https://github.com/containerd/containerd/pull/6230)) * go.mod: Bump hcsshim to v0.9.1 * go.mod: Bump ttrpc to 1.1.0 ([#6228](https://github.com/containerd/containerd/pull/6228)) * go.mod: Bump ttrpc to 1.1.0 * go.mod: bump moby/sys/symlink v0.2.0, moby/sys/signal v0.6.0, moby/sys/mountinfo v0.5.0 ([#6213](https://github.com/containerd/containerd/pull/6213)) * go.mod: github.com/moby/sys/mountinfo v0.5.0 * go.mod: github.com/moby/sys/signal v0.6.0 * go.mod: github.com/moby/sys/symlink v0.2.0 * go.mod: golang.org/x/sys v0.0.0-20211025201205-69cdffdb9359 * cleanup: add more description on comment ([#6222](https://github.com/containerd/containerd/pull/6222)) * cleanup: add more description on comment * Update Go to 1.17.3 ([#6211](https://github.com/containerd/containerd/pull/6211)) * Update Go to 1.17.3 * CI: bump up crun: 1.0 -> 1.3 ([#6214](https://github.com/containerd/containerd/pull/6214)) * CI: bump up crun: 1.0 -> 1.3 * Pin az CLI version in windows-periodic workflow ([#6205](https://github.com/containerd/containerd/pull/6205)) * Pin az CLI version * Decouple task manager ([#5918](https://github.com/containerd/containerd/pull/5918)) * Address PR comments * Fix build after rebase * Migrate task directory * Expose shim process interface * Fix after rebase * Cleanup shim loading * Move shim restore to a separate file * Fix backward compatibility with old task shims * Add plugin dependency between shim and shim services * Rework task create and cleanup flow * Add task manager * Rename task manager to shim manager * [cri] Implement k8s 1.23 CRI Pod Sandbox and Container Stats ([#6113](https://github.com/containerd/containerd/pull/6113)) * Implement CRI container and pods stats * Vendor latest k8s.io/cri-api and netlink * test: Add grace period for restart monitor test ([#6200](https://github.com/containerd/containerd/pull/6200)) * test: Add grace period for restart monitor test * integration: Enables TestRuntimeHandler for Windows ([#6179](https://github.com/containerd/containerd/pull/6179)) * integration: Enables TestRuntimeHandler for Windows * Add mkdir on Dockerfile ([#6171](https://github.com/containerd/containerd/pull/6171)) * Add mkdir on Dockerfile * sys/reaper: avoid leaky goroutine when exec timeout ([#6189](https://github.com/containerd/containerd/pull/6189)) * sys/reaper: avoid leaky goroutine when exec timeout * adds additional debug out to timebox cni setup ([#6184](https://github.com/containerd/containerd/pull/6184)) * adds additional debug out to timebox cni setup * converter: Allow hooks during image conversion ([#6176](https://github.com/containerd/containerd/pull/6176)) * converter: Allow hooks during image conversion * compression: support zstd with skippable frame ([#6177](https://github.com/containerd/containerd/pull/6177)) * compression: support zstd with skippable frame * integration: Enables TestVolumeCopyUp for Windows ([#6182](https://github.com/containerd/containerd/pull/6182)) * integration: Enables TestVolumeCopyUp for Windows * integration: Enable some tests for Windows (part 2) ([#6121](https://github.com/containerd/containerd/pull/6121)) * integration: Enable some tests for Windows (part 2) * integration: Enable some tests for Windows ([#6085](https://github.com/containerd/containerd/pull/6085)) * integration: Enable some tests for Windows * Update doc to version 2 syntax ([#6125](https://github.com/containerd/containerd/pull/6125)) * feat(doc): update to version 2 syntax * fix shim reaper wait command execute blocked ([#6166](https://github.com/containerd/containerd/pull/6166)) * fix shim reaper wait command execute blocked * content: close stream after commit request ([#6145](https://github.com/containerd/containerd/pull/6145)) * content: close stream after commit request * Generating token options with each scope as a separate string. ([#6165](https://github.com/containerd/containerd/pull/6165)) * Adding scope tests for ParseAuthHeader * Adding tests for GenerateTokenOptions * Generate token options with each scope as a separate string. * vendor: Updates go-cni ([#6167](https://github.com/containerd/containerd/pull/6167)) * vendor: Updates go-cni * commands: Enables task metrics for Windows ([#6159](https://github.com/containerd/containerd/pull/6159)) * commands: Enables task metrics for Windows * vendor: update moby/sys for darwin support ([#6149](https://github.com/containerd/containerd/pull/6149)) * vendor: update moby/sys for darwin support * Prepare v1.6.0-beta.1 ([#6144](https://github.com/containerd/containerd/pull/6144)) * Prepare release notes for v1.6.0-beta.1 * Update mailmap * Update api vendor * bump cni to spec v1.0.0 ([#6136](https://github.com/containerd/containerd/pull/6136)) * bump CNI to spec v1.0.0 * Inject otel traces to grpc client. ([#5992](https://github.com/containerd/containerd/pull/5992)) * Inject otel traces to grpc client. * client: expose (*image).platform ([#6142](https://github.com/containerd/containerd/pull/6142)) * client: expose (*image).platform * Adding documentation for Core Scheduling ([#6128](https://github.com/containerd/containerd/pull/6128)) * feat(doc): add Core Scheduling documentation * Ensure namespace is proxied to grpc/ttrpc plugins ([#6130](https://github.com/containerd/containerd/pull/6130)) * Ensure namespace is proxied to grpc/ttrpc plugins * fix #6054 MaxConcurrentDownloads is not effect when Unpack is true ([#6109](https://github.com/containerd/containerd/pull/6109)) * fix #6054 MaxConcurrentDownloads is not effect when Unpack is true * Output a warning for label image labels instead of erroring ([#6124](https://github.com/containerd/containerd/pull/6124)) * Output a warning for label image labels instead of erroring * Fix spelling mistake in Windows snapshotter ([#6132](https://github.com/containerd/containerd/pull/6132)) * Fix spelling mistake in Windows snapshotter * Windows: Cleanup rm- prefixed layers ([#6126](https://github.com/containerd/containerd/pull/6126)) * Windows: Cleanup rm- prefixed layers * cleanup deprecated package `io/ioutil ` ([#6118](https://github.com/containerd/containerd/pull/6118)) * io/ioutil package has been deprecated in Go 1.16 that replaces io/ioutil functions * close Writer after use which may memory leak ([#6115](https://github.com/containerd/containerd/pull/6115)) * close Writer after use which may leak mem * Adds Windows resource limits support ([#5778](https://github.com/containerd/containerd/pull/5778)) * Adds Windows resource limits support * Prepare release notes for v1.6.0-beta.0 ([#6098](https://github.com/containerd/containerd/pull/6098)) * Prepare release notes for v1.6.0-beta.0 * Add error message to in TestContainerdRestart integration test ([#6105](https://github.com/containerd/containerd/pull/6105)) * Add error message to in TestContainerdRestart integration test * Fix typo in the NewContainer function documentation ([#6110](https://github.com/containerd/containerd/pull/6110)) * Fix typo in the NewContainer function documentation * Update cgroups to v1.0.2 ([#6104](https://github.com/containerd/containerd/pull/6104)) * Update cgroups to v1.0.2 * btrfs: verify file content after mount ([#6100](https://github.com/containerd/containerd/pull/6100)) * test: check file content after mount * Update test timeout based on recent cancellations ([#6107](https://github.com/containerd/containerd/pull/6107)) * Update test timeout based on recent cancellations * Check the pid in cri test teardown ([#6106](https://github.com/containerd/containerd/pull/6106)) * Remove extra test_teardown * Check the pid in cri test teardown * add runc shim support for sched core ([#6011](https://github.com/containerd/containerd/pull/6011)) * fix integration client vendor * add runc shim support for sched core * integration: Enables Windows containerd restart test ([#5579](https://github.com/containerd/containerd/pull/5579)) * integration: Enables Windows containerd restart test * vendor: Bump hcsshim to 0.9.0 ([#6099](https://github.com/containerd/containerd/pull/6099)) * vendor: Bump hcsshim to 0.9.0 * [cri] Add CNI conf based on runtime class ([#4695](https://github.com/containerd/containerd/pull/4695)) * Add CNI conf based on runtime class * Update Go to 1.17.2 ([#6102](https://github.com/containerd/containerd/pull/6102)) * Update Go to 1.17.2 * integration: Adds test for multilayer image import ([#5933](https://github.com/containerd/containerd/pull/5933)) * integration: Adds test for multilayer image import * runtime: should fail fast if dial error on shim ([#6031](https://github.com/containerd/containerd/pull/6031)) * runtime: should fail fast if dial error on shim * Fixes Windows containers with image volumes ([#6034](https://github.com/containerd/containerd/pull/6034)) * Windows: Fixes Windows containers with image volumes * run `gofmt` with GO 1.17 ([#6094](https://github.com/containerd/containerd/pull/6094)) * run `gofmt` with Go 1.17 * pkg/cap: remove an outdated comment ([#6088](https://github.com/containerd/containerd/pull/6088)) * pkg/cap: remove an outdated comment * Update go otel 1.0.1 ([#6066](https://github.com/containerd/containerd/pull/6066)) * Update go otel 1.0.1 * Update ADOPTERS.md with additional uses ([#6086](https://github.com/containerd/containerd/pull/6086)) * Update ADOPTERS.md with additional uses * modify the way for checking cos ([#6082](https://github.com/containerd/containerd/pull/6082)) * modify the way for checking cos * Fuzzing: Add fuzzers + small modifications ([#5915](https://github.com/containerd/containerd/pull/5915)) * Fuzzing: Add 4 fuzzers + small modifications * Fixes for Windows CI ([#6081](https://github.com/containerd/containerd/pull/6081)) * Pin mingw to version 10.2.0 * Update to golang 1.17.1 * Install nssm * Github Security Advisory [GHSA-c2h3-6mxw-7mvq](https://github.com/containerd/containerd/security/advisories/GHSA-c2h3-6mxw-7mvq) * btrfs: reduce permissions on plugin directories * v1 runtime: reduce permissions for bundle dir * v2 runtime: reduce permissions for bundle dir * task service: return known error type ([#6079](https://github.com/containerd/containerd/pull/6079)) * task service: return known error type * refactor: move from io/ioutil to io and os package ([#5973](https://github.com/containerd/containerd/pull/5973)) * refactor: move from io/ioutil to io and os package * fix: import from k8s.io/utils/clock instead ([#6076](https://github.com/containerd/containerd/pull/6076)) * fix: update vendor * cleanup: import from k8s.io/utils/clock/testing instead * cleanup: import from k8s.io/utils/clock instead * feat: enable integration cri remote client to call with grpc calloptions ([#6069](https://github.com/containerd/containerd/pull/6069)) * feat: enable cri remote client to call with grpc calloptions * cleanup k8s ansible yaml (carry for #5713) ([#6074](https://github.com/containerd/containerd/pull/6074)) * cleanup k8s ansible yaml (carry for https://github.com/jayonlau <jayonlau@gmail.com>) * feat: support import image for specific platform ([#6070](https://github.com/containerd/containerd/pull/6070)) * fix: wrong flag type * feat: support import image for specific platform * Update mirror images to take target image name ([#6065](https://github.com/containerd/containerd/pull/6065)) * Update mirror images to take target image name * fix: make exec-id flag required in exec command ([#6059](https://github.com/containerd/containerd/pull/6059)) * fix: make exec-id flag required in exec command * images: enable converter to uncompress zstd ([#6052](https://github.com/containerd/containerd/pull/6052)) * images: enable converter to uncompress zstd * replace deprecated function with Domain and Path ([#5922](https://github.com/containerd/containerd/pull/5922)) * replace deprecated function * integration: Adds Windows HostProcess tests ([#5853](https://github.com/containerd/containerd/pull/5853)) * integration: Adds Windows HostProcess tests * Fix main branch build is broken ([#6047](https://github.com/containerd/containerd/pull/6047)) * Fix main branch build is broken * Add open telemetry logging hook for logrus ([#6003](https://github.com/containerd/containerd/pull/6003)) * Add open telemetry logging hook for logrus * Change `oci.WithUser` behavior for LCOW ([#6023](https://github.com/containerd/containerd/pull/6023)) * Change oci.WithUser behavior for LCOW * switch usage directly to errdefs.(ErrAlreadyExists and ErrNotFound) ([#5946](https://github.com/containerd/containerd/pull/5946)) * switch usage directly to errdefs.(ErrAlreadyExists and ErrNotFound) * import: Raise error if the imported image is filtered out ([#5926](https://github.com/containerd/containerd/pull/5926)) * import: Raise error if the imported image is filtered out * Fix panic in metadata content writer on copy error ([#6043](https://github.com/containerd/containerd/pull/6043)) * Fix panic in metadata content writer on copy error * Move tracing to plugin ([#6001](https://github.com/containerd/containerd/pull/6001)) * Move tracing to plugin * ctr: Fixes Windows image import ([#5916](https://github.com/containerd/containerd/pull/5916)) * ctr: Fixes Windows image import * update open go.opentelemetry.io v1.0.0 to fix import path ([#6017](https://github.com/containerd/containerd/pull/6017)) * go.mod: update opentelemetry modules to v1.0.0 * fix error string format ([#5979](https://github.com/containerd/containerd/pull/5979)) * fix error string format * Add github action to mirror image ([#6036](https://github.com/containerd/containerd/pull/6036)) * Add github action to mirror image * add current process state to the error message ([#6027](https://github.com/containerd/containerd/pull/6027)) * add current process state to the error message * FreeBSD: fix tar headers & the nil check on getxattr ([#5991](https://github.com/containerd/containerd/pull/5991)) * FreeBSD: fix tar headers & the nil check on getxattr * gha: collect VMs' IP addresses ([#6035](https://github.com/containerd/containerd/pull/6035)) * gha: collect Vagrant VMs' IP addresses * bump continuity and console version that remove pkg/errors ([#6033](https://github.com/containerd/containerd/pull/6033)) * bump continuity and console version that remove pkg/errors * import: Add option to prevent duplicated digest image ([#5997](https://github.com/containerd/containerd/pull/5997)) * import: Add option to skip creating digest image * ctr namespaces: improve usage string ([#5998](https://github.com/containerd/containerd/pull/5998)) * ctr namespaces: improve usage string * bump console version to v1.0.3 that remove pkg/errors ([#6028](https://github.com/containerd/containerd/pull/6028)) * bump console version to v1.0.3 that remove pkg/errors * Use github images for integration tests ([#6032](https://github.com/containerd/containerd/pull/6032)) * Use github images for integration tests * Fix typo ([#5995](https://github.com/containerd/containerd/pull/5995)) * Fix typo * Enable image config labels in ctr and CRI container creation ([#6012](https://github.com/containerd/containerd/pull/6012)) * Enable image config labels in ctr and CRI container creation * Make sure exit signals trigger an exit during init ([#5970](https://github.com/containerd/containerd/pull/5970)) * Make sure exit signals trigger an exit during init * task delete: Closes task IO before waiting ([#5974](https://github.com/containerd/containerd/pull/5974)) * task delete: Closes task IO before waiting * CI: bump up crun to 1.0 ([#5985](https://github.com/containerd/containerd/pull/5985)) * CI: bump up crun to 1.0 * seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted) ([#5982](https://github.com/containerd/containerd/pull/5982)) * seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted) * Update to Go 1.17.1 ([#5990](https://github.com/containerd/containerd/pull/5990)) * Update to Go 1.17.1 * CI: Switch to available latest images ([#5987](https://github.com/containerd/containerd/pull/5987)) * CI: Switch to available latest images * add xfs support to devicemapper snapshotter ([#5610](https://github.com/containerd/containerd/pull/5610)) * add xfs support to devicemapper snapshotter * Fixes task kill --force on Windows ([#5956](https://github.com/containerd/containerd/pull/5956)) * Fixes task kill --force on Windows * Add support for shim plugins ([#5817](https://github.com/containerd/containerd/pull/5817)) * Add support for shim plugins * vendor: update continuity for darwin support ([#5976](https://github.com/containerd/containerd/pull/5976)) * vendor: update continuity for darwin support * replace uses of os/exec with golang.org/x/sys/execabs ([#5906](https://github.com/containerd/containerd/pull/5906)) * replace uses of os/exec with golang.org/x/sys/execabs * complete integration test for pulling image with labels ([#5972](https://github.com/containerd/containerd/pull/5972)) * Additional integration tests for pulling image with labels * Fix content copy to not ignore unexpected EOF ([#5966](https://github.com/containerd/containerd/pull/5966)) * Fix content copy to not ignore unexpected EOF * add ip_pref CNI options for primary pod ip ([#5964](https://github.com/containerd/containerd/pull/5964)) * add ip_pref CNI options for primary pod ip * cri: add devices for privileged container ([#5939](https://github.com/containerd/containerd/pull/5939)) * cri: add devices for privileged container * sandbox: Allows the sandbox to be deleted in NotReady state ([#5954](https://github.com/containerd/containerd/pull/5954)) * sandbox: Allows the sandbox to be deleted in NotReady state * pin protobuild version to tag ([#5969](https://github.com/containerd/containerd/pull/5969)) * pin protobuild version to tag * Add metric exposing build version&revision ([#5965](https://github.com/containerd/containerd/pull/5965)) * use a const metric for build_info * Add metric exposing build version&revision * Feature: containerd-cri support LinuxContainerResources.Unified ([#5627](https://github.com/containerd/containerd/pull/5627)) * add cri test case * feature: add field LinuxContainerResources.Unified on cri * integration: investigate TestRestartMonitor's failure ([#5861](https://github.com/containerd/containerd/pull/5861)) * integration: investigate TestRestartMonitor's failure * Use issue forms for bug reporting ([#5917](https://github.com/containerd/containerd/pull/5917)) * Address issue forms feedback * Use issue forms for bug reporting * cri: patch update image labels ([#5945](https://github.com/containerd/containerd/pull/5945)) * cri: patch update image labels * darwin: runtime support ([#5936](https://github.com/containerd/containerd/pull/5936)) * darwin: runtime support * darwin: use the default values for socketRoot variable * Update RELEASES.md ([#5858](https://github.com/containerd/containerd/pull/5858)) * Update RELEASES.md * archive: Add WriteDiff error logs ([#5949](https://github.com/containerd/containerd/pull/5949)) * archive: Add WriteDiff error logs * replace deprecated Dialer with ContextDialer ([#5958](https://github.com/containerd/containerd/pull/5958)) * replace deprecated Dail with DailContext * Add WS2022 support in Windows Periodic tests ([#5951](https://github.com/containerd/containerd/pull/5951)) * Add WS2022 support in Windows Periodic tests * Content fuzzer: Clean up temp store dir ([#5943](https://github.com/containerd/containerd/pull/5943)) * content fuzzer: Clean up tempdir * using Hosts replace deprecated field ([#5944](https://github.com/containerd/containerd/pull/5944)) * using Hosts replace deprecated field * fix document non-synchronous ([#5947](https://github.com/containerd/containerd/pull/5947)) * fix document non-synchronous in crictl.md * go.mod: Update hcsshim to v0.8.21 ([#5929](https://github.com/containerd/containerd/pull/5929)) * go.mod: Update hcsshim to v0.8.21 * Makefile.linux: build on RISC-V with PIE ([#5937](https://github.com/containerd/containerd/pull/5937)) * Makefile.linux: build on riscv with PIE * Fix cwd flag for `ctr tasks exec` ([#5932](https://github.com/containerd/containerd/pull/5932)) * Fix cwd flag for `ctr tasks exec` * Update Pause image in tests & config ([#5927](https://github.com/containerd/containerd/pull/5927)) * Update Pause image in tests & config * cri: Devices ownership from SecurityContext ([#5122](https://github.com/containerd/containerd/pull/5122)) * cri: Devices ownership from SecurityContext * Fix pull fails on unexpected EOF ([#5921](https://github.com/containerd/containerd/pull/5921)) * Fix pull fails on unexpected EOF * Fix dir support for devices ([#5845](https://github.com/containerd/containerd/pull/5845)) * Adding testing of two devices * Fix dir support for devices V3 (#4847) * windows: The DefaultSpec platform should match the Default matcher ([#5914](https://github.com/containerd/containerd/pull/5914)) * windows: The DefaultSpec platform should match the Default matcher * Add RunAsUserName functionality for the Windows pod sandbox container ([#5865](https://github.com/containerd/containerd/pull/5865)) * Add RunAsUserName functionality for the Windows Pod Sandbox Container * bump up runc v1.0.2 ([#5899](https://github.com/containerd/containerd/pull/5899)) * go.mod: update runc to v1.0.2 * update runc binary to v1.0.2 * Run `go fmt` with Go 1.17 ([#5903](https://github.com/containerd/containerd/pull/5903)) * Run `go fmt` with Go 1.17 * go.mod: github.com/pelletier/go-toml v1.9.3 ([#5905](https://github.com/containerd/containerd/pull/5905)) * go.mod: github.com/pelletier/go-toml v1.9.3 * cri: filter selinux xattr for image volumes ([#5902](https://github.com/containerd/containerd/pull/5902)) * cri: filter selinux xattr for image volumes * Add Windows HostProcess Support ([#5131](https://github.com/containerd/containerd/pull/5131)) * Added windows hostProcess cni skip * script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0 ([#5897](https://github.com/containerd/containerd/pull/5897)) * script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0 * Update to Go 1.17 ([#5889](https://github.com/containerd/containerd/pull/5889)) * Bump integration timeout to 35 min * Update to Go 1.17 * integration: fix TestContainerPids ([#5896](https://github.com/containerd/containerd/pull/5896)) * integration: fix TestContainerPids * [ctr] add HOSTNAME env for host network ([#5891](https://github.com/containerd/containerd/pull/5891)) * [ctr] add HOSTNAME env for host network * Fuzzing: Add fuzzer ([#5886](https://github.com/containerd/containerd/pull/5886)) * Fuzzing: Add fuzzer * Make Cgroup driver configurable in gce configure script ([#5884](https://github.com/containerd/containerd/pull/5884)) * Add env for SystemdCgroup driver * Allow expanded DNS configuration ([#5878](https://github.com/containerd/containerd/pull/5878)) * Allow expanded DNS configuration * Fuzzing: Add 4 fuzzers ([#5863](https://github.com/containerd/containerd/pull/5863)) * Fuzzing: Add 4 fuzzers * Cleanup v2 shim ([#5813](https://github.com/containerd/containerd/pull/5813)) * Cleanup v2 shim * Fuzzing: Add experimental version of container fuzzer ([#5840](https://github.com/containerd/containerd/pull/5840)) * Use http.Get to download binaries instead of exec.Command * Fuzzing: Add experimental version of container fuzzer * add cpu-shares to ctr ([#5846](https://github.com/containerd/containerd/pull/5846)) * add cpu-shares to ctr * docs: rename master to main (it was opposite on the actual commit) ([#5847](https://github.com/containerd/containerd/pull/5847)) * docs: rename main to master * content: return the error with its timestamp ([#5849](https://github.com/containerd/containerd/pull/5849)) * content: return the error with its timestamp * Fix bad `make protos` failure ([#5857](https://github.com/containerd/containerd/pull/5857)) * Fix bad `make protos` failure * replace cri and point to new location ([#5851](https://github.com/containerd/containerd/pull/5851)) * archive docs and point to new location fix #https://github.com/containerd/cri/issues/1624 * docs: remove FOSSA's badge ([#5856](https://github.com/containerd/containerd/pull/5856)) * docs: remove FOSSA's badge * BUILDING.md: remove some bits about building runc ([#5850](https://github.com/containerd/containerd/pull/5850)) * BUILDING.md: remove some bits about building runc * BUILDING.md: markdown fixes * go.mod: update k8s deps to v1.22.0 ([#5836](https://github.com/containerd/containerd/pull/5836)) * go.mod: update kubernetes to v1.22.0 * [Scripts] Add trap to cri-integration test script ([#5852](https://github.com/containerd/containerd/pull/5852)) * Add trap to cri-integration test script * docs: list all snapshotter-related build flags ([#5848](https://github.com/containerd/containerd/pull/5848)) * docs: list all snapshotter-related build flags * Move plugin context events into separate plugin ([#5835](https://github.com/containerd/containerd/pull/5835)) * Move plugin context events into separate plugin * Fix Linux CI Linter using Go 1.15.14 ([#5839](https://github.com/containerd/containerd/pull/5839)) * Fix Linux CI Linter using go 1.15.14 * Update Go to 1.16.7 ([#5842](https://github.com/containerd/containerd/pull/5842)) * Update Go to 1.16.7 * Cleanup CI ([#5838](https://github.com/containerd/containerd/pull/5838)) * Cleanup CI * Remove redundant build tags ([#5834](https://github.com/containerd/containerd/pull/5834)) * Remove redundant build tags * Change default directories on Darwin ([#5830](https://github.com/containerd/containerd/pull/5830)) * Change default directories on Darwin * [otel-tracing] Initial opentelemetry support ([#5731](https://github.com/containerd/containerd/pull/5731)) * [otel-tracing] vendor and go modules changes * [otel-tracing] Initial opentelemetry support * remove go 1.13 from containerd * Fuzzing: Fix for OSS-fuzz issue 36825 ([#5829](https://github.com/containerd/containerd/pull/5829)) * Fuzzing: Fix for OSS-fuzz issue 36825 * Fuzzing: Add two fuzzers ([#5825](https://github.com/containerd/containerd/pull/5825)) * Fuzzing: Add two more fuzzers * scripts: linting fixes, and remove support for Debian Jessie (as it's EOL) ([#5760](https://github.com/containerd/containerd/pull/5760)) * scripts: declare ROOT closer to where it's used, and some DRY changes * scripts: add missing quotes, and minor linting issues * test/build-utils.sh: remove support for Debian Jessie * platforms: Format(): use path.Join() instead of joinNotEmpty() ([#5821](https://github.com/containerd/containerd/pull/5821)) * platforms: Format(): use path.Join() instead of joinNotEmpty() * Fuzzing: Remove panics of container_fuzzer ([#5823](https://github.com/containerd/containerd/pull/5823)) * Fuzzing: Remove panics of container_fuzzer * Fuzzing: Add container fuzzer ([#5785](https://github.com/containerd/containerd/pull/5785)) * Change protoc link * Split fuzzer to two fuzzers * Fuzzing: Add container fuzzer * runtime: fix the issue of create new socket with abstract address ([#5746](https://github.com/containerd/containerd/pull/5746)) * runtime: fix the issue of create new socket with abstract address * mergo: Upgrade to 0.3.12 to fix panic ([#5809](https://github.com/containerd/containerd/pull/5809)) * mergo: Upgrade to 0.3.12 to fix panic * ci: install criu from PPA ([#5802](https://github.com/containerd/containerd/pull/5802)) * ci: install criu from PPA * Update release workflow to upload binary without CNI ([#5144](https://github.com/containerd/containerd/pull/5144)) * Split release steps into multiple tasks * Update release workflow to upload binary without CNI * Enable critest on Windows Periodic Jobs ([#5725](https://github.com/containerd/containerd/pull/5725)) * Enable critest on Windows * Script to check if entries in go.mod files are in sync ([#5792](https://github.com/containerd/containerd/pull/5792)) * Script to check if entries in go.mod files are in sync * Add a sharedNamespace label ([#5043](https://github.com/containerd/containerd/pull/5043)) * Add shared content label to namespaces * platforms: add "ios" as known OS, "loong64" as known ARCH ([#5784](https://github.com/containerd/containerd/pull/5784)) * platforms: add "ios" as known OS, "loong64" as known ARCH * Updates the location of protobuf downloads ([#5804](https://github.com/containerd/containerd/pull/5804)) * Updates the location of protobuf downloads in docs * Update protobuf install to use correct repository ([#5803](https://github.com/containerd/containerd/pull/5803)) * Update protobuf install to use correct repository * overlay: expose upperdir location of each snapshot via an optional label ([#5624](https://github.com/containerd/containerd/pull/5624)) * overlay: add an optional label of upperdir location of each snapshot * Support SIGRTMIN+n signals ([#5693](https://github.com/containerd/containerd/pull/5693)) * Support SIGRTMIN+n signals * respect context timeout in shim binary call ([#5800](https://github.com/containerd/containerd/pull/5800)) * respect context timeout in shim binary call * Introduce a new go module - containerd/api for use in standalone clients ([#5716](https://github.com/containerd/containerd/pull/5716)) * Introduce a new go module - containerd/api for use in standalone clients * grpc config add options tcp_client_ca_cert ([#5606](https://github.com/containerd/containerd/pull/5606)) * grpc config add options tcp_tls_ca * integration: Windows volume-copy-up images ([#5162](https://github.com/containerd/containerd/pull/5162)) * integration: Windows volume-copy-up images * add CRI support matrix to RELEASES.md ([#5795](https://github.com/containerd/containerd/pull/5795)) * add CRI support matrix to RELEASES.md * adding a little more clarity ([#5794](https://github.com/containerd/containerd/pull/5794)) * adding a little more clarity * update gotestsum to v1.7.0 ([#5793](https://github.com/containerd/containerd/pull/5793)) * update gotestsum to v1.7.0 * Discard blocks when removing a thin device ([#5756](https://github.com/containerd/containerd/pull/5756)) * Discard blocks when removing a thin device * Makefile: fix passing build tags ([#5590](https://github.com/containerd/containerd/pull/5590)) * Makefile: pass build tags to manpage build process * Makefile: fix tags parameter computation * Add runtime label to metrics ([#5744](https://github.com/containerd/containerd/pull/5744)) * Add runtime label to metrics * interface about shim build check ([#5745](https://github.com/containerd/containerd/pull/5745)) * interface about shim build check * integration: log all processes to investigate the test failure ([#5775](https://github.com/containerd/containerd/pull/5775)) * integration: log all processes to investigate the test failure * Fuzzing: Add archive fuzzer ([#5779](https://github.com/containerd/containerd/pull/5779)) * Fuzzing: Add archive fuzzer * Add docker.Fetch fuzzer ([#5687](https://github.com/containerd/containerd/pull/5687)) * Add docker fetch fuzzer * Support custom compressor for walking differ ([#5735](https://github.com/containerd/containerd/pull/5735)) * Support custom compressor for walking differ * remotes/docker/pusher.go: Fix missing Close() on push to docker remote ([#5770](https://github.com/containerd/containerd/pull/5770)) * remotes/docker/pusher.go: Fix missing Close() * remotes/docker/fetcher.go: Fix missing Close() on fetch from docker remote ([#5769](https://github.com/containerd/containerd/pull/5769)) * remotes/docker/fetcher.go: Fix missing Close() * Update cpuguy83/go-md2man binary to v2.0.1 ([#5771](https://github.com/containerd/containerd/pull/5771)) * Update cpuguy83/go-md2man binary to v2.0.1 * Refactor / optimize contrib/Dockerfile.test ([#5750](https://github.com/containerd/containerd/pull/5750)) * Dockerfile.test: build containerd in separate stage * Dockerfile.test: add GOLANG_IMAGE build arg to allow overriding * Dockerfile.test: clean up apt indexes after installing * Dockerfile.test: build critools in a separate stage * Dockerfile.test: build cni in a separate stage * Dockerfile.test: standard directory to collect build aftifacts * Dockerfile.test: split dev stage, and optimize order * Dockerfile.test: skip curl, gcc, git and make install * install-critools: make sure DESTDIR exists * update gotestsum to current master ([#5754](https://github.com/containerd/containerd/pull/5754)) * update gotestsum to current master * Github Security Advisory [GHSA-c72p-9xmj-rx3w](https://github.com/containerd/containerd/security/advisories/GHSA-c72p-9xmj-rx3w) * Add test for archive breakout test for lchmod * Use systemd cgroup driver for Kubernetes e2e tests with cgroupsv2 ([#5755](https://github.com/containerd/containerd/pull/5755)) * Use systemd cgroup driver for cgroupv2 tests * update runc to v1.0.1 ([#5751](https://github.com/containerd/containerd/pull/5751)) * go.mod: runc v1.0.1 * update runc binary to v1.0.1 * runtime: runc v2: remove redundant validation ([#5737](https://github.com/containerd/containerd/pull/5737)) * runtime: runc v2: remove redundant validation * Add timestamp to flaky restart monitor test ([#5727](https://github.com/containerd/containerd/pull/5727)) * Move loop check to before sleep * Add timestamp to flaky restart monitor test * Update Go to 1.16.6 ([#5722](https://github.com/containerd/containerd/pull/5722)) * integration/client: go mod tidy * Update Go to 1.16.6 * client: surface a connection error more clearly ([#4447](https://github.com/containerd/containerd/pull/4447)) * client: surface a connection error more clearly * Fix missing Body.Close() calls on push to docker remote ([#5712](https://github.com/containerd/containerd/pull/5712)) * Fix missing Body.Close() calls on push to docker remote * remove pkg/cri/platforms package ([#5710](https://github.com/containerd/containerd/pull/5710)) * remove pkg/cri/platforms package * Allow WithServices to use custom implementations ([#5709](https://github.com/containerd/containerd/pull/5709)) * Allow WithServices to use custom implementations * [Vendor] Update hcsshim to 0.8.18 ([#5673](https://github.com/containerd/containerd/pull/5673)) * [Vendor] Update hcsshim to 0.8.18 * test integration: Adds a test that restarts a failed container ([#5578](https://github.com/containerd/containerd/pull/5578)) * test integration: Adds a test that restarts a failed container * [CRI] move up to CRI v1 and support v1alpha in parallel ([#5619](https://github.com/containerd/containerd/pull/5619)) * use fu wei's suggeted interface pick for marshaling * add alpha version * move up to CRI v1 and support v1alpha in parallel * gha: make release workflow work in forks ([#5682](https://github.com/containerd/containerd/pull/5682)) * gha: make release workflow work in forks * Add unit test for plugin ([#5666](https://github.com/containerd/containerd/pull/5666)) * Add unit test for plugin * Dockerfile.test: add "cri-in-userns" (aka rootless) test stage ([#5700](https://github.com/containerd/containerd/pull/5700)) * Dockerfile.test: add "cri-in-userns" (aka rootless) test stage * Update for distribution spec 1.0 ([#5676](https://github.com/containerd/containerd/pull/5676)) * Add support for registry host path override * Update documenation for OCI distribution 1.0 * archive: cleanup lchmod logic ([#5702](https://github.com/containerd/containerd/pull/5702)) * Cleanup lchmod logic in archive * Install specific golang version in Windows CI. ([#5571](https://github.com/containerd/containerd/pull/5571)) * Install specific golang version in Windows CI. * Add ctr command label in NewContainerOpts ([#5660](https://github.com/containerd/containerd/pull/5660)) * feat: Add snapshotter label to the new snapshot for container. * snapshot/devmapper: log exported methods correctly ([#5655](https://github.com/containerd/containerd/pull/5655)) * snapshot/devmapper: log exported methods correctly * Makefile: fix DESTDIR and PREFIX concatenation ([#5662](https://github.com/containerd/containerd/pull/5662)) * Makefile: fix DESTDIR and PREFIX concatenation * Cri integration cleanup ([#5287](https://github.com/containerd/containerd/pull/5287)) * tests: Use EnsureImageExists for image pulling * tests: Refactors PodSandbox creation * move sys.FMountat() into mount package and un-export ([#5641](https://github.com/containerd/containerd/pull/5641)) * un-export mount.FMountat * move sys.FMountat() into mount package * sandbox: send pod UID to CNI plugins as K8S_POD_UID ([#5640](https://github.com/containerd/containerd/pull/5640)) * sandbox: send pod UID to CNI plugins as K8S_POD_UID * sys: remove StatAtime(), StatCtime(), StatMtime() and StatATimeAsTime() utils ([#5639](https://github.com/containerd/containerd/pull/5639)) * sys: remove StatAtime(), StatCtime(), StatMtime() and StatATimeAsTime() utils * content/local: inline sys.StatATimeAsTime() ([#5633](https://github.com/containerd/containerd/pull/5633)) * content/local: inline sys.StatATimeAsTime() * allow multi gpu to be specified via ctr ([#5636](https://github.com/containerd/containerd/pull/5636)) * allow multi gpu to be specified via ctr * go.mod: runc v1.0.0 * update runc binary to v1.0.0 GA * fixing some doc links ([#5629](https://github.com/containerd/containerd/pull/5629)) * fixing some doc links * Sync integration/go.mod with root go.mod ([#5623](https://github.com/containerd/containerd/pull/5623)) * Sync integration/go.mod with root go.mod * archive: Expose ChangeWriter to allow customized diff computing ([#5615](https://github.com/containerd/containerd/pull/5615)) * archive: Expose ChangeWriter to allow customized diff computing * CI: Switch to the available latest images ([#5625](https://github.com/containerd/containerd/pull/5625)) * CI: Switch to available latest images * fix deprecation config for default runtime * Re-enable criu in main integration runs ([#5614](https://github.com/containerd/containerd/pull/5614)) * Re-enable criu in main integration runs * runtime,v2: Enable debug when containerd is on debug+ log level ([#5617](https://github.com/containerd/containerd/pull/5617)) * runtime,v2: Enable debug when containerd is on debug+ log level * github.com/golang/protobuf/proto is deprecated * Update github.com/golang/protobuf from v1.3.5 to v1.4.3 * Update google.golang.org/grpc from v1.27.1 to v1.38.0 * Increase golangci-lint timeout * ctr flags of container rootfs propagation ([#5611](https://github.com/containerd/containerd/pull/5611)) * command line flags of setting container rootfs propagation * add cgroupv2 setup for cos with a flag * Update gotestsum to add timestamps to junit output ([#5612](https://github.com/containerd/containerd/pull/5612)) * Update gotestsum to add timestamps to junit output * Allow to pass --no-cgroups option to nvidia-container-cli ([#5604](https://github.com/containerd/containerd/pull/5604)) * Allow to pass --no-cgroup option to nvidia-container-cli * Makefile: FHS conformant manpage installation pathes ([#5577](https://github.com/containerd/containerd/pull/5577)) * Makefile: FHS conformant manpage installation pathes * Add proper Go version before project checks ([#5594](https://github.com/containerd/containerd/pull/5594)) * Add proper Go version before project checks * Enable cri-integration in Windows Periodic Tests ([#5580](https://github.com/containerd/containerd/pull/5580)) * Enable cri-integration in Windows Periodic Tests * adds explanation for seccomp unset/unconfined default vs runtime default ([#5573](https://github.com/containerd/containerd/pull/5573)) * adds explanation for seccomp unset/unconfined default vs runtime default * Fix cleanup context of teardownPodNetwork ([#5569](https://github.com/containerd/containerd/pull/5569)) * Fix cleanup context of teardownPodNetwork * update integration/client go.sum ([#5572](https://github.com/containerd/containerd/pull/5572)) * update integration/client go.sum * Revert diff/walking error change ([#5566](https://github.com/containerd/containerd/pull/5566)) * Revert diff/walking error change * Update opencontainers/selinux to v1.8.2 ([#5562](https://github.com/containerd/containerd/pull/5562)) * Update opencontainers/selinux to v1.8.2 * fix invalid validation error checking ([#5565](https://github.com/containerd/containerd/pull/5565)) * fix invalid validation error checking * diff/walking: fix defer cleanup ([#5551](https://github.com/containerd/containerd/pull/5551)) * diff/walking: fix defer cleanup * Windows periodic job: Add creation timestamp to RG ([#5559](https://github.com/containerd/containerd/pull/5559)) * Add creation timestamp to RG * Fix error case in Windows layer cleanup ([#5328](https://github.com/containerd/containerd/pull/5328)) * Fix error case in Windows layer cleanup * Use DeactivateLayer to unlock layers that we cannot rename ([#5422](https://github.com/containerd/containerd/pull/5422)) * Small typo fix "reimporst" * Use DeactivateLayer to recover layers that we cannot rename * tests: Symlink volume tests ([#5284](https://github.com/containerd/containerd/pull/5284)) * tests: Symlink volume tests * Makefile: fix DESTDIR environment variable behaviour ([#5535](https://github.com/containerd/containerd/pull/5535)) * Makefile: fix DESTDIR environment variable behaviour * Change Wrapf of non-error to an actual error ([#5560](https://github.com/containerd/containerd/pull/5560)) * Change Wrapf of non-error to an actual error * Install apparmor parser for arm64 environment * scrub the stale TODO ([#5536](https://github.com/containerd/containerd/pull/5536)) * scrub the stale TODO * docs: explicitly mention containerd's Prometheus path ([#5554](https://github.com/containerd/containerd/pull/5554)) * docs: explicitly mention containerd's Prometheus path * integration: Cleanup containerd on test teardown ([#5553](https://github.com/containerd/containerd/pull/5553)) * integration: Cleanup containerd on test teardown * docs/cri: update links ([#5548](https://github.com/containerd/containerd/pull/5548)) * docs/cri: update ocicrypt link * docs/cri: fix broken links * Update Windows periodic tests ([#5544](https://github.com/containerd/containerd/pull/5544)) * Update Windows periodic tests * Add CI periodic Windows Jobs. ([#5165](https://github.com/containerd/containerd/pull/5165)) * Schedule Windows job daily after midnight. * Update windows-periodic.yml * Add CI periodic Windows Jobs. * Rename atomicWrite to writeToCompletion ([#5273](https://github.com/containerd/containerd/pull/5273)) * Rename atomicWrite to writeToCompletion * Do not run btrfs tests if btrfs kernel module is not loaded ([#5539](https://github.com/containerd/containerd/pull/5539)) * Do not run btrfs tests if btrfs kernel module is not loaded * Fix incorrect UA used for registry authentication ([#5533](https://github.com/containerd/containerd/pull/5533)) * Fix incorrect UA used for registry authentication * ctr: parse mount options with embedded = character ([#5531](https://github.com/containerd/containerd/pull/5531)) * ctr: parse mount options with embedded = character * Fix mounts for FreeBSD ([#5472](https://github.com/containerd/containerd/pull/5472)) * Add ruleset=4 option * Remove mountpoints not commonly mounted on FreeBSD * Add copyright header & make sure compilation succeeds on all platforms * Fix mounts for FreeBSD * ctr: make exec pty behavior consistent with run ([#5527](https://github.com/containerd/containerd/pull/5527)) * ctr: exec handle pty resize after Start * ctr: exec setup IO with console * Makefile: use $@ for target file names ([#5534](https://github.com/containerd/containerd/pull/5534)) * Makefile: use $@ for target file names * Fix small typo ([#5528](https://github.com/containerd/containerd/pull/5528)) * Fix small typo * Don't check for apparmor_parser to be present ([#5519](https://github.com/containerd/containerd/pull/5519)) * update the link * Don't check for apparmor_parser to be present * Remove useless lines ([#5520](https://github.com/containerd/containerd/pull/5520)) * Remove useless lines * Fixed typos in docs ([#5509](https://github.com/containerd/containerd/pull/5509)) * fixed typos * Try next mirror in case of non-404 errors, too ([#5275](https://github.com/containerd/containerd/pull/5275)) * Try next mirror in case of non-404 errors, too * bump runc version to v1.0.0-rc95 ([#5514](https://github.com/containerd/containerd/pull/5514)) * bump runc version to v1.0.0-rc95 * update runc binary to v1.0.0-rc95 ([#5511](https://github.com/containerd/containerd/pull/5511)) * update runc binary to v1.0.0-rc95 * Bump github.com/Microsoft/go-winio from 0.4.15 to 0.5.0 ([#5508](https://github.com/containerd/containerd/pull/5508)) * Bump github.com/Microsoft/go-winio from 0.4.15 to 0.5.0 * Bump github.com/opencontainers/selinux from 1.8.0 to 1.8.1 ([#5507](https://github.com/containerd/containerd/pull/5507)) * Bump github.com/opencontainers/selinux from 1.8.0 to 1.8.1 * Makefile: allow overriding install command via environment ([#5493](https://github.com/containerd/containerd/pull/5493)) * Makefile: allow overriding install command via environment * tests: Adds support for Windows cri-integration tests ([#5163](https://github.com/containerd/containerd/pull/5163)) * tests: Adds support for Windows cri-integration tests * Update docker resolver to authorize redirects ([#5504](https://github.com/containerd/containerd/pull/5504)) * Update docker resolver to authorize redirects * bump hcsshim version to v0.8.17 ([#5505](https://github.com/containerd/containerd/pull/5505)) * bump hcsshim version to v0.8.17 * Release binary update for imgcrypt ([#5498](https://github.com/containerd/containerd/pull/5498)) * just release ctd-decoder not ctr-enc * Merge remote-tracking branch 'upstream/master' * Pin integration test image for alpine * cri-integration tests: Pull images once ([#5313](https://github.com/containerd/containerd/pull/5313)) * tests: Prepull images used in tests * plugin: optimize the check for the last registration ([#5440](https://github.com/containerd/containerd/pull/5440)) * plugin: optimize the check for the last registration * metadata: modify NewLeaseManager to return leases.Manager ([#5465](https://github.com/containerd/containerd/pull/5465)) * metadata: modify NewLeaseManager to return leases.Manager * Skip TLS verification for localhost ([#5100](https://github.com/containerd/containerd/pull/5100)) * Skip TLS verification for localhost * Merge remote-tracking branch 'upstream/master' * Makefile: make sure manpages are built before install-man ([#5492](https://github.com/containerd/containerd/pull/5492)) * Makefile: make sure manpages are built before install-man * adds description for hosts.toml ([#5309](https://github.com/containerd/containerd/pull/5309)) * adds credentials description * adds description for hosts.toml * Prepare default branch rename ([#5459](https://github.com/containerd/containerd/pull/5459)) * Prepare default branch rename * Merge remote-tracking branch 'upstream/master' * Update runc to rc94 ([#5473](https://github.com/containerd/containerd/pull/5473)) * Update vendored runc to v1.0.0.0-rc94 * Update the runc binary used with containerd to runc v1.0.0-rc94 * Fix `content.ReaderAt` close ([#5468](https://github.com/containerd/containerd/pull/5468)) * Fix content.ReaderAt close * Update releases doc with updated support timeline ([#5466](https://github.com/containerd/containerd/pull/5466)) * Update releases doc with updated support timeline * tests: add test for adaptor ([#5452](https://github.com/containerd/containerd/pull/5452)) * tests: add test for adaptor * Makefile: allow overriding go command by environment ([#5450](https://github.com/containerd/containerd/pull/5450)) * Makefile: allow overriding go command by environment * update to new cri-tools make install ([#5462](https://github.com/containerd/containerd/pull/5462)) * update to new cri-tools make install * Update Go to 1.16.4 ([#5461](https://github.com/containerd/containerd/pull/5461)) * Update Go to 1.16.4 * Merge remote-tracking branch 'upstream/release/1.5' * [release/1.5] go.mod: cut circular dependency on github.com/containerd/containerd ([#5457](https://github.com/containerd/containerd/pull/5457)) * go.mod: cut circular dependency on github.com/containerd/containerd * integration/client: go mod tidy * oci: fix WithDevShmSize ([#5063](https://github.com/containerd/containerd/pull/5063)) * oci: fix WithDevShmSize * [release/1.5] cherry-pick: windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink ([#5454](https://github.com/containerd/containerd/pull/5454)) * windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink * windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink ([#5411](https://github.com/containerd/containerd/pull/5411)) * windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink * doc: add missing namespaces package ([#5448](https://github.com/containerd/containerd/pull/5448)) * doc: add missing namespaces package * update seccomp version ([#5445](https://github.com/containerd/containerd/pull/5445)) * update seccomp version * Update golang.org/x/sys to add linux/ppc support ([#5436](https://github.com/containerd/containerd/pull/5436)) * Update golang.org/x/sys to add linux/ppc support * go.mod: cut circular dependency on github.com/containerd/containerd ([#5441](https://github.com/containerd/containerd/pull/5441)) * go.mod: cut circular dependency on github.com/containerd/containerd * integration/client: go mod tidy * Fix different registry hosts referencing the same auth config. ([#5446](https://github.com/containerd/containerd/pull/5446)) * Fix different registry hosts referencing the same auth config. </p> </details> ### Changes from containerd/cgroups <details><summary>24 commits</summary> <p> * cgroup: Optionally add process and task to a subsystems subset ([#203](https://github.com/containerd/cgroups/pull/203)) * cgroup: Optionally add process and task to a subsystems subset * replace pkg/errors from vendor ([#208](https://github.com/containerd/cgroups/pull/208)) * replace pkg/errors from vendor * cgroup.go: avoid panic on nil interface ([#207](https://github.com/containerd/cgroups/pull/207)) * cgroup.go: avoid panic on nil interface * Improvements on cgroup v2 support ([#204](https://github.com/containerd/cgroups/pull/204)) * cgroupv2: reset lastErr to nil when subtree control is successfully written * cgroupv2: enable controllers before setting resources in NewChild() * v2: remove unimplemented errors and ErrorHandler, IgnoreNotExist ([#201](https://github.com/containerd/cgroups/pull/201)) * v2: remove ErrorHandler and IgnoreNotExist as they are not implemented * v2: remove errors that are never returned * v1: reduce duplicated code ([#202](https://github.com/containerd/cgroups/pull/202)) * v1: reduce duplicated code * cgroup v1: implement AddProc() ([#200](https://github.com/containerd/cgroups/pull/200)) * cgroup v1: implement AddProc() * Rename branch from master to main ([#199](https://github.com/containerd/cgroups/pull/199)) * Rename branch from master to main * utils: export ParseCgroupFile() ([#197](https://github.com/containerd/cgroups/pull/197)) * utils: export ParseCgroupFile() * go.mod: coreos/go-systemd/v22 v22.3.2 to prepare for deprecations ([#194](https://github.com/containerd/cgroups/pull/194)) * go.mod: coreos/go-systemd/v22 v22.3.2 to prepare for deprecations * Use /proc/partitions to get device names ([#195](https://github.com/containerd/cgroups/pull/195)) * Use /proc/partitions to get device names </p> </details> ### Changes from containerd/console <details><summary>6 commits</summary> <p> * Fix CI ([#55](https://github.com/containerd/console/pull/55)) * Fix CI * Stop using pkg/errors * Add support for z/OS ([#46](https://github.com/containerd/console/pull/46)) * Console test on z/OS * Add support for z/OS </p> </details> ### Changes from containerd/continuity <details><summary>28 commits</summary> <p> * fs: use syscall.Timespec.Unix ([#193](https://github.com/containerd/continuity/pull/193)) * fs: use syscall.Timespec.Unix * Update CI Go version to 1.17 ([#192](https://github.com/containerd/continuity/pull/192)) * Update CI Go version to 1.17 * Build containerd/continuity on multiple Unix OSes ([#190](https://github.com/containerd/continuity/pull/190)) * Build containerd/continuity on multiple Unix OSes * Do not log errors before returning them ([#191](https://github.com/containerd/continuity/pull/191)) * Do not log errors before returning them * Copy Windows file metadata ([#188](https://github.com/containerd/continuity/pull/188)) * Copy Windows file metadata * fix fmt.Errorf("%w", err) on err == nil ([#187](https://github.com/containerd/continuity/pull/187)) * fix fmt.Errorf("%w", err) on err == nil * Remove direct dependency on github.com/pkg/errors ([#185](https://github.com/containerd/continuity/pull/185)) * run gofmt with Go 1.17 * remove direct dependency on github.com/pkg/errors * Fix darwin issues ([#186](https://github.com/containerd/continuity/pull/186)) * update AUTHORS * darwin: use utimensat syscall instead of utimes * fix darwin usage of du command * go.mod: bazil.org/fuse v0.0.0-20200407214033-5883e5a4b5125 ([#161](https://github.com/containerd/continuity/pull/161)) * go.mod: bazil.org/fuse v0.0.0-20200407214033-5883e5a4b5125 * fs/stat: add FreeBSD, and cleanup some nolint-comments ([#184](https://github.com/containerd/continuity/pull/184)) * reformat nolint comments * fs/stat: add FreeBSD * Rename branch from master to main ([#182](https://github.com/containerd/continuity/pull/182)) * Rename branch from master to main * testutil/loopback: print more debug info ([#180](https://github.com/containerd/continuity/pull/180)) * testutil/loopback: print more debug info </p> </details> ### Changes from containerd/go-cni <details><summary>18 commits</summary> <p> * run setup on networks in parallel ([#76](https://github.com/containerd/go-cni/pull/76)) * switch to direct index * run setup on networks in parallel * remove: Continue on "not found" errors ([#74](https://github.com/containerd/go-cni/pull/74)) * remove: Continue on "not found" errors * go.mod: github.com/containernetworking/cni v1.0.1 ([#72](https://github.com/containerd/go-cni/pull/72)) * go.mod: github.com/containernetworking/cni v1.0.1 * remove direct dependency on github.com/pkg/errors ([#71](https://github.com/containerd/go-cni/pull/71)) * remove direct dependency on github.com/pkg/errors * update CNI to v1.0.0 ([#70](https://github.com/containerd/go-cni/pull/70)) * test: add TestLibCNIType100 * update CNI to v1.0.0 * Rename branch from master to main ([#69](https://github.com/containerd/go-cni/pull/69)) * Rename branch from master to main * result: change Raw from a struct field to a method ([#68](https://github.com/containerd/go-cni/pull/68)) * result: change Raw from a struct field to a method * result: expose raw result ([#67](https://github.com/containerd/go-cni/pull/67)) * result: expose raw result </p> </details> ### Changes from containerd/imgcrypt <details><summary>32 commits</summary> <p> * CHANGES: Updated CHANGES document for 1.1.3 release ([#64](https://github.com/containerd/imgcrypt/pull/64)) * CHANGES: Updated CHANGES document for 1.1.3 release * docs: update project branch to main ([#63](https://github.com/containerd/imgcrypt/pull/63)) * docs: update project branch to main * Update linter to match containerd repo ([#61](https://github.com/containerd/imgcrypt/pull/61)) * Update linter to match containerd repo * update CI golang version * Bump github.com/containerd/containerd from 1.5.7 to 1.5.8 ([#59](https://github.com/containerd/imgcrypt/pull/59)) * Bump github.com/containerd/containerd from 1.5.7 to 1.5.8 * maint: Update to ocicrypt v1.1.2 ([#57](https://github.com/containerd/imgcrypt/pull/57)) * maint: Update to ocicrypt v1.1.2 * Decouple CreateCryptoConfig() from github.com/urfave/cli ([#56](https://github.com/containerd/imgcrypt/pull/56)) * Decouple CreateCryptoConfig() from github.com/urfave/cli * Bump github.com/containerd/containerd from 1.5.5 to 1.5.7 ([#55](https://github.com/containerd/imgcrypt/pull/55)) * Bump github.com/containerd/containerd from 1.5.5 to 1.5.7 * replace pkg/errors and bump related library * README: Fix CRI decryption document URL ([#53](https://github.com/containerd/imgcrypt/pull/53)) * README: Fix CRI decryption document URL * Bump github.com/containerd/containerd from 1.5.2 to 1.5.4 ([#52](https://github.com/containerd/imgcrypt/pull/52)) * Bump github.com/containerd/containerd from 1.5.2 to 1.5.4 * Bump containerd to 1.5.2 ([#51](https://github.com/containerd/imgcrypt/pull/51)) * Bump containerd to 1.5.2 * images: Implement ConvertFunc for image en- and decryption ([#49](https://github.com/containerd/imgcrypt/pull/49)) * images: Implement ConvertFunc for image en- and decryption * Add containerd-release to makefile ([#48](https://github.com/containerd/imgcrypt/pull/48)) * Remove ctr-enc from installation * vendor sync up with containerd 1.5 ga, and runc94 ([#47](https://github.com/containerd/imgcrypt/pull/47)) * sync up with containerd 1.5 ga, and runc94 * Sync ctr-enc with containerd's ctr v1.5.0-rc.3 ([#46](https://github.com/containerd/imgcrypt/pull/46)) * CICD: Run 'apt update' before pulling packages * ctr-enc: Set the version for ctr-enc when linking * Sync ctr-enc with containerd's ctr v1.5.0-rc.3 </p> </details> ### Changes from containerd/ttrpc <details><summary>34 commits</summary> <p> * Add protoc-gen-go-ttrpc ([#96](https://github.com/containerd/ttrpc/pull/96)) * Add protoc-gen-go-ttrpc * client: Handle sending/receiving in separate goroutines ([#94](https://github.com/containerd/ttrpc/pull/94)) * client: Handle sending/receiving in separate goroutines * Run Protobuild in GitHub Actions ([#95](https://github.com/containerd/ttrpc/pull/95)) * Run Protobuild in GitHub Actions * Re-generate example.pb.go * replace pkg/errors ([#93](https://github.com/containerd/ttrpc/pull/93)) * replace pkg/errors from vendor * Rename branch from master to main ([#86](https://github.com/containerd/ttrpc/pull/86)) * Rename branch from master to main * Make "go test" and "go build" work on macOS ([#85](https://github.com/containerd/ttrpc/pull/85)) * Make the example command buildable on macOS * Run GitHub Actions on macOS * Make "go test" work on macOS * Return Unimplemented when services or methods are not implemented ([#83](https://github.com/containerd/ttrpc/pull/83)) * Return Unimplemented when services or methods are not implemented * Remove "Very new" and checked TODO items ([#84](https://github.com/containerd/ttrpc/pull/84)) * Remove "Very new" and checked TODO items * removing glide from ignore ([#82](https://github.com/containerd/ttrpc/pull/82)) * removing glide from ignore * go.mod: update dependencies ([#79](https://github.com/containerd/ttrpc/pull/79)) * go.mod: github.com/prometheus/procfs v0.6.0 * go.mod: google.golang.org/genproto v0.0.0-20200224152610-e50cd9704f63 * go.mod: google.golang.org/grpc v1.27.1 * go.mod: github.com/gogo/protobuf v1.3.2 * remove travis, add codecov badge ([#78](https://github.com/containerd/ttrpc/pull/78)) * CI: add codecov badge to readme * CI: remove travis * Use GitHub Actions for CI ([#77](https://github.com/containerd/ttrpc/pull/77)) * Use GitHub Actions for CI * go.mod: sirupsen/logrus v1.7.0 ([#76](https://github.com/containerd/ttrpc/pull/76)) * go.mod: sirupsen/logrus v1.7.0 * go mod tidy </p> </details> ### Dependency Changes * **github.com/AdaLogics/go-fuzz-headers** 6c3934b029d8 **_new_** * **github.com/Microsoft/go-winio** v0.4.17 -> v0.5.1 * **github.com/Microsoft/hcsshim** v0.8.16 -> v0.9.1 * **github.com/bits-and-blooms/bitset** v1.2.0 **_new_** * **github.com/blang/semver** v3.5.1 **_new_** * **github.com/cenkalti/backoff/v4** v4.1.2 **_new_** * **github.com/cilium/ebpf** v0.4.0 -> v0.6.2 * **github.com/containerd/cgroups** v1.0.1 -> v1.0.2 * **github.com/containerd/console** v1.0.2 -> v1.0.3 * **github.com/containerd/continuity** v0.1.0 -> v0.2.2 * **github.com/containerd/go-cni** v1.0.2 -> v1.1.1 * **github.com/containerd/imgcrypt** v1.1.1 -> v1.1.3 * **github.com/containerd/ttrpc** v1.0.2 -> v1.1.0 * **github.com/containernetworking/cni** v0.8.1 -> v1.0.1 * **github.com/containernetworking/plugins** v0.9.1 -> v1.0.1 * **github.com/containers/ocicrypt** v1.1.1 -> v1.1.2 * **github.com/go-logr/logr** v0.2.0 -> v1.2.2 * **github.com/go-logr/stdr** v1.2.2 **_new_** * **github.com/golang/groupcache** 8c9f03a8e57e -> 41bb18bfe9da * **github.com/golang/protobuf** v1.3.5 -> v1.5.2 * **github.com/google/go-cmp** v0.5.4 -> v0.5.6 * **github.com/google/gofuzz** v1.1.0 -> v1.2.0 * **github.com/grpc-ecosystem/go-grpc-middleware** v1.3.0 **_new_** * **github.com/grpc-ecosystem/grpc-gateway** v1.16.0 **_new_** * **github.com/hashicorp/errwrap** v1.0.0 -> v1.1.0 * **github.com/hashicorp/go-multierror** v1.0.0 -> v1.1.1 * **github.com/imdario/mergo** v0.3.11 -> v0.3.12 * **github.com/intel/goresctrl** v0.2.0 **_new_** * **github.com/json-iterator/go** v1.1.10 -> v1.1.12 * **github.com/moby/spdystream** v0.2.0 **_new_** * **github.com/moby/sys/signal** v0.6.0 **_new_** * **github.com/modern-go/reflect2** v1.0.1 -> v1.0.2 * **github.com/opencontainers/image-spec** v1.0.1 -> 693428a734f5 * **github.com/opencontainers/runc** v1.0.0-rc93 -> v1.0.3 * **github.com/opencontainers/runtime-spec** e6143ca7d51d -> 1c3f411f0417 * **github.com/opencontainers/selinux** v1.8.0 -> v1.8.2 * **github.com/pelletier/go-toml** v1.8.1 -> v1.9.3 * **github.com/prometheus/client_golang** v1.7.1 -> v1.11.0 * **github.com/prometheus/common** v0.10.0 -> v0.30.0 * **github.com/prometheus/procfs** v0.6.0 -> v0.7.3 * **github.com/satori/go.uuid** v1.2.0 **_new_** * **github.com/sirupsen/logrus** v1.7.0 -> v1.8.1 * **github.com/spf13/pflag** v1.0.5 **_new_** * **github.com/stretchr/testify** v1.6.1 -> v1.7.0 * **github.com/vishvananda/netlink** f5de75959ad5 **_new_** * **github.com/vishvananda/netns** 2eb08e3e575f **_new_** * **go.etcd.io/bbolt** v1.3.5 -> v1.3.6 * **go.opencensus.io** v0.22.3 -> v0.23.0 * **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc** v0.28.0 **_new_** * **go.opentelemetry.io/otel** v1.3.0 **_new_** * **go.opentelemetry.io/otel/exporters/otlp/internal/retry** v1.3.0 **_new_** * **go.opentelemetry.io/otel/exporters/otlp/otlptrace** v1.3.0 **_new_** * **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc** v1.3.0 **_new_** * **go.opentelemetry.io/otel/sdk** v1.3.0 **_new_** * **go.opentelemetry.io/otel/trace** v1.3.0 **_new_** * **go.opentelemetry.io/proto/otlp** v0.11.0 **_new_** * **golang.org/x/crypto** 0c34fe9e7dc2 -> 32db794688a5 * **golang.org/x/net** e18ecbb05110 -> fe4d6282115f * **golang.org/x/oauth2** bf48bf16ab8d -> 2bc19b11175f * **golang.org/x/sync** 09787c993a3a -> 036812b2e83c * **golang.org/x/sys** 47abb6519492 -> 1d35b9e2eb4e * **golang.org/x/term** 7de9c90e9dd1 -> 6886f2dfbf5b * **golang.org/x/text** v0.3.4 -> v0.3.7 * **golang.org/x/time** 3af7569d3a1e -> 1f47c861a9ac * **google.golang.org/appengine** v1.6.5 -> v1.6.7 * **google.golang.org/grpc** v1.27.1 -> v1.43.0 * **google.golang.org/protobuf** v1.27.1 **_new_** * **gopkg.in/yaml.v3** 9f266ea9e77c -> 496545a6307b * **k8s.io/api** v0.20.6 -> v0.23.0 * **k8s.io/apimachinery** v0.20.6 -> v0.23.0 * **k8s.io/apiserver** v0.20.6 -> v0.23.0 * **k8s.io/client-go** v0.20.6 -> v0.23.0 * **k8s.io/component-base** v0.20.6 -> v0.23.0 * **k8s.io/cri-api** v0.20.6 -> v0.23.0 * **k8s.io/utils** 67b214c5f920 -> cb0fa318a74b * **sigs.k8s.io/json** c049b76a60c6 **_new_** Previous release can be found at [v1.5.0](https://github.com/containerd/containerd/releases/tag/v1.5.0)
-
v1.6.0-beta.5
containerd 1.6.0-beta.5 Welcome to the v1.6.0-beta.5 release of containerd! The seventh major release of containerd includes many improvements and added support to increase overall compatibility and stability. ### Highlights #### Runtime * **Add runtime label to metrics** ([#5744](https://github.com/containerd/containerd/pull/5744)) * **Cleanup task delete logic in v2 shim** ([#5813](https://github.com/containerd/containerd/pull/5813)) * **Add support for shim plugins** ([#5817](https://github.com/containerd/containerd/pull/5817)) * **Decouple shim and task manager** ([#5918](https://github.com/containerd/containerd/pull/5918)) * **Add runc shim support for core scheduling** ([#6011](https://github.com/containerd/containerd/pull/6011)) * **Update shim client connect attempt to fail fast when shim errors** ([#6031](https://github.com/containerd/containerd/pull/6031)) * **Add support for absolute path to shim binaries** ([#6206](https://github.com/containerd/containerd/pull/6206)) #### Windows * **Add support for Windows HostProcess containers** ([#5131](https://github.com/containerd/containerd/pull/5131)) * **Add support for Windows resource limits** ([#5778](https://github.com/containerd/containerd/pull/5778)) #### CRI * **Add CNI configuration based on runtime class** ([#4695](https://github.com/containerd/containerd/pull/4695)) * **Add support for Intel RDT** ([#5439](https://github.com/containerd/containerd/pull/5439)) * **Add support for CRI v1 and v1alpha in parallel** ([#5619](https://github.com/containerd/containerd/pull/5619)) * **Add support for unified resources field for cgroups v2** ([#5627](https://github.com/containerd/containerd/pull/5627)) * **Add IP preference configuration for reporting pod IP** ([#5964](https://github.com/containerd/containerd/pull/5964)) * **Implement new CRI pod sandbox stats API** ([#6113](https://github.com/containerd/containerd/pull/6113)) * **Add sandbox and container latency metrics** ([#6111](https://github.com/containerd/containerd/pull/6111)) * **Add namespace to ttrpc and grpc plugin connections** ([#6130](https://github.com/containerd/containerd/pull/6130)) * **Add option to allow ping sockets and privileged ports with no capabilities** ([#6170](https://github.com/containerd/containerd/pull/6170)) * **Add support for configuring swap** ([#6320](https://github.com/containerd/containerd/pull/6320)) #### Other * **Add a shared namespace label for cross-namespace content sharing** ([#5043](https://github.com/containerd/containerd/pull/5043)) * **Add support for client TLS Auth for grpc** ([#5606](https://github.com/containerd/containerd/pull/5606)) * **Add xfs support for devicemapper snapshotter** ([#5610](https://github.com/containerd/containerd/pull/5610)) * **Add metric exposing build version and revision** ([#5965](https://github.com/containerd/containerd/pull/5965)) * **Add OpenTelemetry trace injection to grpc client** ([#5992](https://github.com/containerd/containerd/pull/5992)) * **Add support for custom fs options in devmapper snapshotter** ([#6122](https://github.com/containerd/containerd/pull/6122)) #### Client * **Allow WithServices to use custom implementations** ([#5709](https://github.com/containerd/containerd/pull/5709)) * **Support custom compressor for walking differ** ([#5735](https://github.com/containerd/containerd/pull/5735)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Derek McGowan * Phil Estes * Wei Fu * Akihiro Suda * Maksym Pavlenko * Sebastiaan van Stijn * Kazuyoshi Kato * Michael Crosby * Mike Brown * Claudiu Belu * haoyun * Daniel Canter * Gabriel Adrian Samfira * zounengren * AdamKorcz * Adelina Tuvenie * Brian Goff * Kohei Tokunaga * Davanum Srinivas * Shiming Zhang * Samuel Karp * Enrico Weigelt, metux IT consult * Markus Lehtonen * Alakesh Haloi * Hajime Tazaki * Kevin Parsons * Iceber Gu * Nashwan Azhari * Aditi Sharma * Gijs Peskens * Danielle Lancashire * David Porter * Jacob MacElroy * wanglei * Alexandre Peixoto Ferreira * Cody Roseborough * Furkan * Jiaming Xu * Kir Kolyshkin * Miao Wang * Neil Johnson * Paul "TBBle" Hampson * Priyanka Saggu * Romain Aviolat * Sunghoon Kang * Tõnis Tiigi * Zhiyu Li * Alexander Minbaev * Alexey Ivanov * Artem Khramov * Ben Hutchings * Cory Bennett * Da McGrady * Dan Williams * Eng Zer Jun * Eric Ernst * Ethan Chen * Fabiano Fidêncio * Fabiano Fidêncio * Fupan Li * Gaurav Gahlot * Gunju Kim * Jacob Blain Christen * James Sturtevant * Jayme Howard * Jintao Zhang * Justin Terry * Kaijie Chen * Kern Walster * Kitt Hsu * Lantao Liu * Ma Xinjian * Manabu Sugimoto * Markus Lippert * Mikko Ylinen * Ng Yang * Nicolas Chariglione * Olli Janatuinen * Peri Thompson * Quan Tian * Radostin Stoyanov * Rui Lopes * Sambhav Kothari * Samuel Ortiz * Sebastian Hasler * Takumasa Sakao * Tobias Klauser * Yang Yang * Yifan Yuan * Zilong Wang * Zufar Dhiyaulhaq * botieking98 * chenxiaoyu * jayonlau * jerryzhuang * kerthcet * levinxo * linrunlong * ningmingxiao * scuzhanglei * wangzhan * Étienne Guesnet ### Changes <details><summary>911 commits</summary> <p> * Prepare release notes for v1.6.0-beta.5 ([#6407](https://github.com/containerd/containerd/pull/6407)) * Prepare release notes for v1.6.0-beta.5 * Integration: Check GCP secrets on Windows CI artifact upload. ([#6292](https://github.com/containerd/containerd/pull/6292)) * Integration: Check GCP secrets on Windows CI artifact upload. * Github Security Advisory [GHSA-mvff-h3cj-wj9c](https://github.com/containerd/containerd/security/advisories/GHSA-mvff-h3cj-wj9c) * only relabel cri managed host mounts * Add support for Intel RDT ([#5439](https://github.com/containerd/containerd/pull/5439)) * cri: add ignore_rdt_not_enabled_errors config option * Update dependencies * cri: annotations for controlling RDT class * tasks: add Linux rdt support * cmd: add --rdt-class command line option * oci: implement WithRdt * fix: use _ for consistency ([#6391](https://github.com/containerd/containerd/pull/6391)) * fix: use _ for consistency * content/local: use syscall.Timespec.Unix ([#6403](https://github.com/containerd/containerd/pull/6403)) * content/local: use syscall.Timespec.Unix * docs: improve plugin documentation ([#6207](https://github.com/containerd/containerd/pull/6207)) * docs: document the runtime shim plugin config options * docs: use proper markdown lists in containerd-config.toml.5.md * fix(ctr): enable networking for Windows containers ([#6304](https://github.com/containerd/containerd/pull/6304)) * fix(ctr): enable networking for Windows containers * Fix $(PWD) issue for Windows makefile ([#6394](https://github.com/containerd/containerd/pull/6394)) * Fix $(PWD) issue for Windows makefile * only test abstract uds on linux ([#6395](https://github.com/containerd/containerd/pull/6395)) * fix: only test abstract unix socket on linux * Fix restart container test ([#6390](https://github.com/containerd/containerd/pull/6390)) * Expect ErrorNotFound on Windows after Kill() * Replace tskill with taskkill * fix when kernel version < 4.13rc1 by using index=off cause test error ([#6291](https://github.com/containerd/containerd/pull/6291)) * fix when kernel version < 4.13rc1 by using index=off cause overlay test error * Fix no-daemon flag for integration/client tests ([#6384](https://github.com/containerd/containerd/pull/6384)) * Fix no-daemon flag for integration/client tests * Enable lazy init for ext4 with devicemapper ([#6122](https://github.com/containerd/containerd/pull/6122)) * Enable lazy init for ext4 with devicemapper * Fix flakiness on Windows for list stats ([#6385](https://github.com/containerd/containerd/pull/6385)) * Fix flakiness on Windows for list stats * cri-integration: Add Windows defaults and fix spaces issue ([#6347](https://github.com/containerd/containerd/pull/6347)) * cri-integration: Add Windows default paths * Upgrade OpenTelemetry dependencies ([#6383](https://github.com/containerd/containerd/pull/6383)) * Upgrade k8s.io/klog/v2 from 2.9.0 to 2.20.0 * Use insecure.NewCredentials instead of grpc.WithInsecure * Upgrade OpenTelemetry dependencies * Fix default makefile target for windows ([#6322](https://github.com/containerd/containerd/pull/6322)) * Fix default makefile target for windows * Disable TestContainerHook on Windows ([#6379](https://github.com/containerd/containerd/pull/6379)) * Disable TestContainerHook on Windows * seutil: Fix setting the "container_kvm_t" label ([#6372](https://github.com/containerd/containerd/pull/6372)) * seutil: Fix setting the "container_kvm_t" label * Remove Windows integration testing for 2004. ([#6350](https://github.com/containerd/containerd/pull/6350)) * Remove Windows integration testing for 2004. * OCI: Mount (accessible) host devices in privileged rootless containers ([#6308](https://github.com/containerd/containerd/pull/6308)) * OCI: Mount (accessible) host devices in privileged rootless containers * oci.getDevices(): move "non-dir, non '/dev/console'" case into switch * cri: add support for configuring swap ([#6320](https://github.com/containerd/containerd/pull/6320)) * fixup: check for swap accounting * fixup: handle diff between cgroupsv1 and v2 * cri: add support for configuring swap * Integration: Enable TestVolumeOwnership on Windows ([#6275](https://github.com/containerd/containerd/pull/6275)) * Replace find with native Go code * Enable TestVolumeOwnership on Windows * Prepare release notes for v1.6.0-beta.4 ([#6296](https://github.com/containerd/containerd/pull/6296)) * Prepare release notes for v1.6.0-beta.4 * refactor: functions for error log and error return ([#6358](https://github.com/containerd/containerd/pull/6358)) * feat: Errorf usage * Split apart runc shim into plugin components ([#6021](https://github.com/containerd/containerd/pull/6021)) * Use task plugin for runc shim * Seperate shim manager and task service * Split runc shim into plugin components * Add shutdown package * CRI update for sandbox sizing ([#6155](https://github.com/containerd/containerd/pull/6155)) * cri, sandbox: pass sandbox resource details if available, applicable * medatada: make namespaces' deletion error less cryptic ([#6354](https://github.com/containerd/containerd/pull/6354)) * medatada: make namespaces' deletion error less cryptic * ListContainerStats to return stats response if ContainerStatsFilter is nil ([#6373](https://github.com/containerd/containerd/pull/6373)) * add-list-stat: return container list if filter is nil * integration: deflake TestContainerdRestart ([#6369](https://github.com/containerd/containerd/pull/6369)) * integration: deflake TestContainerdRestart * feat: add timeout for bolt open ([#6225](https://github.com/containerd/containerd/pull/6225)) * feat: support custom timeout for blot open * Update Go to 1.17.5 ([#6333](https://github.com/containerd/containerd/pull/6333)) * Update Go to 1.17.5 * cri/server: use consistent alias for pkg/ioutil ([#6332](https://github.com/containerd/containerd/pull/6332)) * cri/server: use consistent alias for pkg/ioutil * Disable restart monitor test in Windows ([#6364](https://github.com/containerd/containerd/pull/6364)) * Disable restart monitor test in Windows * Don't fail-fast on Windows integration tests ([#6338](https://github.com/containerd/containerd/pull/6338)) * Don't fail-fast on Windows integration tests * Update restart monitor test to output daemon logs on failure ([#6355](https://github.com/containerd/containerd/pull/6355)) * Run windows parallel integration test as short * Update restart monitor test to output daemon logs on failure * go.mod: update image-spec to latest (v1.0.3-dev) ([#6263](https://github.com/containerd/containerd/pull/6263)) * images/converter: remove deprecated types * go.mod: update image-spec to latest (v1.0.3-dev) * Skip WithAdditionalGIDs on Darwin ([#6353](https://github.com/containerd/containerd/pull/6353)) * Skip WithAdditionalGIDs on Darwin * Use RFC3339 format on Windows periodic resource group creation so cleanup works ([#6303](https://github.com/containerd/containerd/pull/6303)) * Use RFC3339 format so rg cleanup works * update runc to v1.0.3 ([#6330](https://github.com/containerd/containerd/pull/6330)) * go.mod: github.com/opencontainers/runc v1.0.3 * update runc binary to v1.0.3 * Unblock native snapshotter on Darwin ([#6329](https://github.com/containerd/containerd/pull/6329)) * Allow native snapshotter on Darwin * Do not use `go get` to install executables ([#6328](https://github.com/containerd/containerd/pull/6328)) * Do not use `go get` to install executables * Include runtime v2 in default builtins ([#6326](https://github.com/containerd/containerd/pull/6326)) * Include runtime v2 in default builtins * Add Windows Server 2022 CI runs ([#6314](https://github.com/containerd/containerd/pull/6314)) * Add Windows Server 2022 CI runs * Set explicit ACL on test files ([#6324](https://github.com/containerd/containerd/pull/6324)) * Use a single RUN command * Set explicit ACL on test files * integration: align tags of test images ([#6311](https://github.com/containerd/containerd/pull/6311)) * integration: align tags of test images * Set CONTAINERD_ROOT in Windows cri-integration ([#6325](https://github.com/containerd/containerd/pull/6325)) * Set CONTAINERD_ROOT in Windows cri-integration * export oci.DeviceFromPath() ([#6312](https://github.com/containerd/containerd/pull/6312)) * export oci.DeviceFromPath() * Update volume test images ([#6321](https://github.com/containerd/containerd/pull/6321)) * Update continuity dependency * Update volume test images * Update TestRestartMonitor expected time check ([#6201](https://github.com/containerd/containerd/pull/6201)) * Add error logging on cleanup * Update TestRestartMonitor expected time check * Move test volume images from gcr to ghcr ([#6319](https://github.com/containerd/containerd/pull/6319)) * Move volume images from gcr to ghcr * Revert shim service plugin migration ([#6301](https://github.com/containerd/containerd/pull/6301)) * Revert shim plugin migration * Authenticate against ghcr.io ([#6317](https://github.com/containerd/containerd/pull/6317)) * Add permissions * Authenticate against ghcr.io * oci/deviceFromPath(): correctly check device types ([#6306](https://github.com/containerd/containerd/pull/6306)) * oci/deviceFromPath(): correctly check device types * Skip TestExportAndImportMultiLayer on Windows ([#6315](https://github.com/containerd/containerd/pull/6315)) * Skip TestExportAndImportMultiLayer on Windows * Integration: Add image build workflow ([#6290](https://github.com/containerd/containerd/pull/6290)) * Add image build workflow * Integration: Separate Windows Periodic Tests workflow trigger. ([#6286](https://github.com/containerd/containerd/pull/6286)) * Integration: Separate Windows Periodic Tests workflow trigger. * Build volume test images on Windows ([#6274](https://github.com/containerd/containerd/pull/6274)) * Build volume test images on Windows * Add VMware TKG & TCE to Containerd adopters ([#6297](https://github.com/containerd/containerd/pull/6297)) * Add VMware TKG & TCE to Containerd adopters * Vagrantfile: update to Fedora 35 ([#6293](https://github.com/containerd/containerd/pull/6293)) * Vagrantfile: update to Fedora 35 * Update README.md repo->org ([#6269](https://github.com/containerd/containerd/pull/6269)) * Update README.md repo->org * Fix executable file not found when restoring shims ([#6278](https://github.com/containerd/containerd/pull/6278)) * Fix executable file not found when restoring shims * ctr/snapshots/diff: show media-type in stderr ([#6271](https://github.com/containerd/containerd/pull/6271)) * ctr/snapshots/diff: don't show the media-type in output * ctr: Add Linux Capabilities control flags ([#6289](https://github.com/containerd/containerd/pull/6289)) * ctr: Add Linux Capabilities control flags * integration: add stats result in error message ([#6270](https://github.com/containerd/containerd/pull/6270)) * integration: add stats result in error message * releases: mark 1.4 as Extended ([#6287](https://github.com/containerd/containerd/pull/6287)) * docs: mark 1.4 as Extended * docs: fix RELEASES.md gRPC API anchor * feat: skip ci for fork ([#6284](https://github.com/containerd/containerd/pull/6284)) * feat: skip ci for fork * content/local: Close the file if Seek fails ([#6280](https://github.com/containerd/containerd/pull/6280)) * content/local: Close the file if Seek fails * Integration: Remove explicit version passing to `azure/CLI`. ([#6268](https://github.com/containerd/containerd/pull/6268)) * Integration: Remove explicit version passing to `azure/CLI`. * Fix wrong make target on documentation ([#6276](https://github.com/containerd/containerd/pull/6276)) * Fix wrong make target on documentation * fix: server error return ([#6272](https://github.com/containerd/containerd/pull/6272)) * fix: server error return * Prepare release notes for v1.6.0-beta.3 ([#6267](https://github.com/containerd/containerd/pull/6267)) * Prepare release notes for v1.6.0-beta.3 * Update API version in go.mod * Update release name to use consistent format * feat:support custom callopts on client side ([#6254](https://github.com/containerd/containerd/pull/6254)) * fix: make max recv/send msg size setting default * feat:support custom callopts on client side * [CRI] Fix panic when registry.mirrors use localhost ([#6258](https://github.com/containerd/containerd/pull/6258)) * [CRI] Fix panic when registry.mirrors use localhost * Add support for TMP override on toml ([#6241](https://github.com/containerd/containerd/pull/6241)) * Add support for TMP override on toml * CRI: Support enable_unprivileged_icmp and enable_unprivileged_ports options ([#6170](https://github.com/containerd/containerd/pull/6170)) * CRI: Support enable_unprivileged_icmp and enable_unprivileged_ports options * Github Security Advisory [GHSA-5j5w-g665-5m35](https://github.com/containerd/containerd/security/advisories/GHSA-5j5w-g665-5m35) * schema1: reject ambiguous documents * images: validate document type before unmarshal * [cri] add sandbox and container latency metrics ([#6111](https://github.com/containerd/containerd/pull/6111)) * [cri] add sandbox and container latency metrics * Integration: Generalize Windows CI setup scripts for any username. ([#6255](https://github.com/containerd/containerd/pull/6255)) * Generalize Windows CI setup script for any user. * Standardize cmdlet capitalization in Windows CI scripts. * feat: use rwmutex instead ([#6253](https://github.com/containerd/containerd/pull/6253)) * feat: use rwmutex instead * Allow absolute path to shim binaries ([#6206](https://github.com/containerd/containerd/pull/6206)) * Fix package alias * Support custom runtime path when launching tasks * Add runtime path in CreateTaskRequest * Close file if permission modification fails ([#6246](https://github.com/containerd/containerd/pull/6246)) * Close file if permission modification fails * release: change tar name to match prior releases ([#6250](https://github.com/containerd/containerd/pull/6250)) * release: change tar name to match prior releases * Fix wrong error returned for image index lookup ([#6237](https://github.com/containerd/containerd/pull/6237)) * Fix wrong error returned for image index lookup * Fix containerd fails to pull OCI image with non-`http(s)://` urls ([#6221](https://github.com/containerd/containerd/pull/6221)) * Fix containerd fails to pull OCI image with non-`http(s)://` urls * Prepare release notes for v1.6.0-beta.2 ([#6223](https://github.com/containerd/containerd/pull/6223)) * Prepare release notes for v1.6.0-beta.2 * Add arm64 to releases ([#6196](https://github.com/containerd/containerd/pull/6196)) * Rename release dockerfile to omit distro name * release: improve dockerfile * Add arm64 to releases * use write lock when updating container stats ([#6236](https://github.com/containerd/containerd/pull/6236)) * use write lock when updating container stats * go.mod: Bump hcsshim to v0.9.1 ([#6230](https://github.com/containerd/containerd/pull/6230)) * go.mod: Bump hcsshim to v0.9.1 * go.mod: Bump ttrpc to 1.1.0 ([#6228](https://github.com/containerd/containerd/pull/6228)) * go.mod: Bump ttrpc to 1.1.0 * go.mod: bump moby/sys/symlink v0.2.0, moby/sys/signal v0.6.0, moby/sys/mountinfo v0.5.0 ([#6213](https://github.com/containerd/containerd/pull/6213)) * go.mod: github.com/moby/sys/mountinfo v0.5.0 * go.mod: github.com/moby/sys/signal v0.6.0 * go.mod: github.com/moby/sys/symlink v0.2.0 * go.mod: golang.org/x/sys v0.0.0-20211025201205-69cdffdb9359 * cleanup: add more description on comment ([#6222](https://github.com/containerd/containerd/pull/6222)) * cleanup: add more description on comment * Update Go to 1.17.3 ([#6211](https://github.com/containerd/containerd/pull/6211)) * Update Go to 1.17.3 * CI: bump up crun: 1.0 -> 1.3 ([#6214](https://github.com/containerd/containerd/pull/6214)) * CI: bump up crun: 1.0 -> 1.3 * Pin az CLI version in windows-periodic workflow ([#6205](https://github.com/containerd/containerd/pull/6205)) * Pin az CLI version * Decouple task manager ([#5918](https://github.com/containerd/containerd/pull/5918)) * Address PR comments * Fix build after rebase * Migrate task directory * Expose shim process interface * Fix after rebase * Cleanup shim loading * Move shim restore to a separate file * Fix backward compatibility with old task shims * Add plugin dependency between shim and shim services * Rework task create and cleanup flow * Add task manager * Rename task manager to shim manager * [cri] Implement k8s 1.23 CRI Pod Sandbox and Container Stats ([#6113](https://github.com/containerd/containerd/pull/6113)) * Implement CRI container and pods stats * Vendor latest k8s.io/cri-api and netlink * test: Add grace period for restart monitor test ([#6200](https://github.com/containerd/containerd/pull/6200)) * test: Add grace period for restart monitor test * integration: Enables TestRuntimeHandler for Windows ([#6179](https://github.com/containerd/containerd/pull/6179)) * integration: Enables TestRuntimeHandler for Windows * Add mkdir on Dockerfile ([#6171](https://github.com/containerd/containerd/pull/6171)) * Add mkdir on Dockerfile * sys/reaper: avoid leaky goroutine when exec timeout ([#6189](https://github.com/containerd/containerd/pull/6189)) * sys/reaper: avoid leaky goroutine when exec timeout * adds additional debug out to timebox cni setup ([#6184](https://github.com/containerd/containerd/pull/6184)) * adds additional debug out to timebox cni setup * converter: Allow hooks during image conversion ([#6176](https://github.com/containerd/containerd/pull/6176)) * converter: Allow hooks during image conversion * compression: support zstd with skippable frame ([#6177](https://github.com/containerd/containerd/pull/6177)) * compression: support zstd with skippable frame * integration: Enables TestVolumeCopyUp for Windows ([#6182](https://github.com/containerd/containerd/pull/6182)) * integration: Enables TestVolumeCopyUp for Windows * integration: Enable some tests for Windows (part 2) ([#6121](https://github.com/containerd/containerd/pull/6121)) * integration: Enable some tests for Windows (part 2) * integration: Enable some tests for Windows ([#6085](https://github.com/containerd/containerd/pull/6085)) * integration: Enable some tests for Windows * Update doc to version 2 syntax ([#6125](https://github.com/containerd/containerd/pull/6125)) * feat(doc): update to version 2 syntax * fix shim reaper wait command execute blocked ([#6166](https://github.com/containerd/containerd/pull/6166)) * fix shim reaper wait command execute blocked * content: close stream after commit request ([#6145](https://github.com/containerd/containerd/pull/6145)) * content: close stream after commit request * Generating token options with each scope as a separate string. ([#6165](https://github.com/containerd/containerd/pull/6165)) * Adding scope tests for ParseAuthHeader * Adding tests for GenerateTokenOptions * Generate token options with each scope as a separate string. * vendor: Updates go-cni ([#6167](https://github.com/containerd/containerd/pull/6167)) * vendor: Updates go-cni * commands: Enables task metrics for Windows ([#6159](https://github.com/containerd/containerd/pull/6159)) * commands: Enables task metrics for Windows * vendor: update moby/sys for darwin support ([#6149](https://github.com/containerd/containerd/pull/6149)) * vendor: update moby/sys for darwin support * Prepare v1.6.0-beta.1 ([#6144](https://github.com/containerd/containerd/pull/6144)) * Prepare release notes for v1.6.0-beta.1 * Update mailmap * Update api vendor * bump cni to spec v1.0.0 ([#6136](https://github.com/containerd/containerd/pull/6136)) * bump CNI to spec v1.0.0 * Inject otel traces to grpc client. ([#5992](https://github.com/containerd/containerd/pull/5992)) * Inject otel traces to grpc client. * client: expose (*image).platform ([#6142](https://github.com/containerd/containerd/pull/6142)) * client: expose (*image).platform * Adding documentation for Core Scheduling ([#6128](https://github.com/containerd/containerd/pull/6128)) * feat(doc): add Core Scheduling documentation * Ensure namespace is proxied to grpc/ttrpc plugins ([#6130](https://github.com/containerd/containerd/pull/6130)) * Ensure namespace is proxied to grpc/ttrpc plugins * fix #6054 MaxConcurrentDownloads is not effect when Unpack is true ([#6109](https://github.com/containerd/containerd/pull/6109)) * fix #6054 MaxConcurrentDownloads is not effect when Unpack is true * Output a warning for label image labels instead of erroring ([#6124](https://github.com/containerd/containerd/pull/6124)) * Output a warning for label image labels instead of erroring * Fix spelling mistake in Windows snapshotter ([#6132](https://github.com/containerd/containerd/pull/6132)) * Fix spelling mistake in Windows snapshotter * Windows: Cleanup rm- prefixed layers ([#6126](https://github.com/containerd/containerd/pull/6126)) * Windows: Cleanup rm- prefixed layers * cleanup deprecated package `io/ioutil ` ([#6118](https://github.com/containerd/containerd/pull/6118)) * io/ioutil package has been deprecated in Go 1.16 that replaces io/ioutil functions * close Writer after use which may memory leak ([#6115](https://github.com/containerd/containerd/pull/6115)) * close Writer after use which may leak mem * Adds Windows resource limits support ([#5778](https://github.com/containerd/containerd/pull/5778)) * Adds Windows resource limits support * Prepare release notes for v1.6.0-beta.0 ([#6098](https://github.com/containerd/containerd/pull/6098)) * Prepare release notes for v1.6.0-beta.0 * Add error message to in TestContainerdRestart integration test ([#6105](https://github.com/containerd/containerd/pull/6105)) * Add error message to in TestContainerdRestart integration test * Fix typo in the NewContainer function documentation ([#6110](https://github.com/containerd/containerd/pull/6110)) * Fix typo in the NewContainer function documentation * Update cgroups to v1.0.2 ([#6104](https://github.com/containerd/containerd/pull/6104)) * Update cgroups to v1.0.2 * btrfs: verify file content after mount ([#6100](https://github.com/containerd/containerd/pull/6100)) * test: check file content after mount * Update test timeout based on recent cancellations ([#6107](https://github.com/containerd/containerd/pull/6107)) * Update test timeout based on recent cancellations * Check the pid in cri test teardown ([#6106](https://github.com/containerd/containerd/pull/6106)) * Remove extra test_teardown * Check the pid in cri test teardown * add runc shim support for sched core ([#6011](https://github.com/containerd/containerd/pull/6011)) * fix integration client vendor * add runc shim support for sched core * integration: Enables Windows containerd restart test ([#5579](https://github.com/containerd/containerd/pull/5579)) * integration: Enables Windows containerd restart test * vendor: Bump hcsshim to 0.9.0 ([#6099](https://github.com/containerd/containerd/pull/6099)) * vendor: Bump hcsshim to 0.9.0 * [cri] Add CNI conf based on runtime class ([#4695](https://github.com/containerd/containerd/pull/4695)) * Add CNI conf based on runtime class * Update Go to 1.17.2 ([#6102](https://github.com/containerd/containerd/pull/6102)) * Update Go to 1.17.2 * integration: Adds test for multilayer image import ([#5933](https://github.com/containerd/containerd/pull/5933)) * integration: Adds test for multilayer image import * runtime: should fail fast if dial error on shim ([#6031](https://github.com/containerd/containerd/pull/6031)) * runtime: should fail fast if dial error on shim * Fixes Windows containers with image volumes ([#6034](https://github.com/containerd/containerd/pull/6034)) * Windows: Fixes Windows containers with image volumes * run `gofmt` with GO 1.17 ([#6094](https://github.com/containerd/containerd/pull/6094)) * run `gofmt` with Go 1.17 * pkg/cap: remove an outdated comment ([#6088](https://github.com/containerd/containerd/pull/6088)) * pkg/cap: remove an outdated comment * Update go otel 1.0.1 ([#6066](https://github.com/containerd/containerd/pull/6066)) * Update go otel 1.0.1 * Update ADOPTERS.md with additional uses ([#6086](https://github.com/containerd/containerd/pull/6086)) * Update ADOPTERS.md with additional uses * modify the way for checking cos ([#6082](https://github.com/containerd/containerd/pull/6082)) * modify the way for checking cos * Fuzzing: Add fuzzers + small modifications ([#5915](https://github.com/containerd/containerd/pull/5915)) * Fuzzing: Add 4 fuzzers + small modifications * Fixes for Windows CI ([#6081](https://github.com/containerd/containerd/pull/6081)) * Pin mingw to version 10.2.0 * Update to golang 1.17.1 * Install nssm * Github Security Advisory [GHSA-c2h3-6mxw-7mvq](https://github.com/containerd/containerd/security/advisories/GHSA-c2h3-6mxw-7mvq) * btrfs: reduce permissions on plugin directories * v1 runtime: reduce permissions for bundle dir * v2 runtime: reduce permissions for bundle dir * task service: return known error type ([#6079](https://github.com/containerd/containerd/pull/6079)) * task service: return known error type * refactor: move from io/ioutil to io and os package ([#5973](https://github.com/containerd/containerd/pull/5973)) * refactor: move from io/ioutil to io and os package * fix: import from k8s.io/utils/clock instead ([#6076](https://github.com/containerd/containerd/pull/6076)) * fix: update vendor * cleanup: import from k8s.io/utils/clock/testing instead * cleanup: import from k8s.io/utils/clock instead * feat: enable integration cri remote client to call with grpc calloptions ([#6069](https://github.com/containerd/containerd/pull/6069)) * feat: enable cri remote client to call with grpc calloptions * cleanup k8s ansible yaml (carry for #5713) ([#6074](https://github.com/containerd/containerd/pull/6074)) * cleanup k8s ansible yaml (carry for https://github.com/jayonlau <jayonlau@gmail.com>) * feat: support import image for specific platform ([#6070](https://github.com/containerd/containerd/pull/6070)) * fix: wrong flag type * feat: support import image for specific platform * Update mirror images to take target image name ([#6065](https://github.com/containerd/containerd/pull/6065)) * Update mirror images to take target image name * fix: make exec-id flag required in exec command ([#6059](https://github.com/containerd/containerd/pull/6059)) * fix: make exec-id flag required in exec command * images: enable converter to uncompress zstd ([#6052](https://github.com/containerd/containerd/pull/6052)) * images: enable converter to uncompress zstd * replace deprecated function with Domain and Path ([#5922](https://github.com/containerd/containerd/pull/5922)) * replace deprecated function * integration: Adds Windows HostProcess tests ([#5853](https://github.com/containerd/containerd/pull/5853)) * integration: Adds Windows HostProcess tests * Fix main branch build is broken ([#6047](https://github.com/containerd/containerd/pull/6047)) * Fix main branch build is broken * Add open telemetry logging hook for logrus ([#6003](https://github.com/containerd/containerd/pull/6003)) * Add open telemetry logging hook for logrus * Change `oci.WithUser` behavior for LCOW ([#6023](https://github.com/containerd/containerd/pull/6023)) * Change oci.WithUser behavior for LCOW * switch usage directly to errdefs.(ErrAlreadyExists and ErrNotFound) ([#5946](https://github.com/containerd/containerd/pull/5946)) * switch usage directly to errdefs.(ErrAlreadyExists and ErrNotFound) * import: Raise error if the imported image is filtered out ([#5926](https://github.com/containerd/containerd/pull/5926)) * import: Raise error if the imported image is filtered out * Fix panic in metadata content writer on copy error ([#6043](https://github.com/containerd/containerd/pull/6043)) * Fix panic in metadata content writer on copy error * Move tracing to plugin ([#6001](https://github.com/containerd/containerd/pull/6001)) * Move tracing to plugin * ctr: Fixes Windows image import ([#5916](https://github.com/containerd/containerd/pull/5916)) * ctr: Fixes Windows image import * update open go.opentelemetry.io v1.0.0 to fix import path ([#6017](https://github.com/containerd/containerd/pull/6017)) * go.mod: update opentelemetry modules to v1.0.0 * fix error string format ([#5979](https://github.com/containerd/containerd/pull/5979)) * fix error string format * Add github action to mirror image ([#6036](https://github.com/containerd/containerd/pull/6036)) * Add github action to mirror image * add current process state to the error message ([#6027](https://github.com/containerd/containerd/pull/6027)) * add current process state to the error message * FreeBSD: fix tar headers & the nil check on getxattr ([#5991](https://github.com/containerd/containerd/pull/5991)) * FreeBSD: fix tar headers & the nil check on getxattr * gha: collect VMs' IP addresses ([#6035](https://github.com/containerd/containerd/pull/6035)) * gha: collect Vagrant VMs' IP addresses * bump continuity and console version that remove pkg/errors ([#6033](https://github.com/containerd/containerd/pull/6033)) * bump continuity and console version that remove pkg/errors * import: Add option to prevent duplicated digest image ([#5997](https://github.com/containerd/containerd/pull/5997)) * import: Add option to skip creating digest image * ctr namespaces: improve usage string ([#5998](https://github.com/containerd/containerd/pull/5998)) * ctr namespaces: improve usage string * bump console version to v1.0.3 that remove pkg/errors ([#6028](https://github.com/containerd/containerd/pull/6028)) * bump console version to v1.0.3 that remove pkg/errors * Use github images for integration tests ([#6032](https://github.com/containerd/containerd/pull/6032)) * Use github images for integration tests * Fix typo ([#5995](https://github.com/containerd/containerd/pull/5995)) * Fix typo * Enable image config labels in ctr and CRI container creation ([#6012](https://github.com/containerd/containerd/pull/6012)) * Enable image config labels in ctr and CRI container creation * Make sure exit signals trigger an exit during init ([#5970](https://github.com/containerd/containerd/pull/5970)) * Make sure exit signals trigger an exit during init * task delete: Closes task IO before waiting ([#5974](https://github.com/containerd/containerd/pull/5974)) * task delete: Closes task IO before waiting * CI: bump up crun to 1.0 ([#5985](https://github.com/containerd/containerd/pull/5985)) * CI: bump up crun to 1.0 * seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted) ([#5982](https://github.com/containerd/containerd/pull/5982)) * seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted) * Update to Go 1.17.1 ([#5990](https://github.com/containerd/containerd/pull/5990)) * Update to Go 1.17.1 * CI: Switch to available latest images ([#5987](https://github.com/containerd/containerd/pull/5987)) * CI: Switch to available latest images * add xfs support to devicemapper snapshotter ([#5610](https://github.com/containerd/containerd/pull/5610)) * add xfs support to devicemapper snapshotter * Fixes task kill --force on Windows ([#5956](https://github.com/containerd/containerd/pull/5956)) * Fixes task kill --force on Windows * Add support for shim plugins ([#5817](https://github.com/containerd/containerd/pull/5817)) * Add support for shim plugins * vendor: update continuity for darwin support ([#5976](https://github.com/containerd/containerd/pull/5976)) * vendor: update continuity for darwin support * replace uses of os/exec with golang.org/x/sys/execabs ([#5906](https://github.com/containerd/containerd/pull/5906)) * replace uses of os/exec with golang.org/x/sys/execabs * complete integration test for pulling image with labels ([#5972](https://github.com/containerd/containerd/pull/5972)) * Additional integration tests for pulling image with labels * Fix content copy to not ignore unexpected EOF ([#5966](https://github.com/containerd/containerd/pull/5966)) * Fix content copy to not ignore unexpected EOF * add ip_pref CNI options for primary pod ip ([#5964](https://github.com/containerd/containerd/pull/5964)) * add ip_pref CNI options for primary pod ip * cri: add devices for privileged container ([#5939](https://github.com/containerd/containerd/pull/5939)) * cri: add devices for privileged container * sandbox: Allows the sandbox to be deleted in NotReady state ([#5954](https://github.com/containerd/containerd/pull/5954)) * sandbox: Allows the sandbox to be deleted in NotReady state * pin protobuild version to tag ([#5969](https://github.com/containerd/containerd/pull/5969)) * pin protobuild version to tag * Add metric exposing build version&revision ([#5965](https://github.com/containerd/containerd/pull/5965)) * use a const metric for build_info * Add metric exposing build version&revision * Feature: containerd-cri support LinuxContainerResources.Unified ([#5627](https://github.com/containerd/containerd/pull/5627)) * add cri test case * feature: add field LinuxContainerResources.Unified on cri * integration: investigate TestRestartMonitor's failure ([#5861](https://github.com/containerd/containerd/pull/5861)) * integration: investigate TestRestartMonitor's failure * Use issue forms for bug reporting ([#5917](https://github.com/containerd/containerd/pull/5917)) * Address issue forms feedback * Use issue forms for bug reporting * cri: patch update image labels ([#5945](https://github.com/containerd/containerd/pull/5945)) * cri: patch update image labels * darwin: runtime support ([#5936](https://github.com/containerd/containerd/pull/5936)) * darwin: runtime support * darwin: use the default values for socketRoot variable * Update RELEASES.md ([#5858](https://github.com/containerd/containerd/pull/5858)) * Update RELEASES.md * archive: Add WriteDiff error logs ([#5949](https://github.com/containerd/containerd/pull/5949)) * archive: Add WriteDiff error logs * replace deprecated Dialer with ContextDialer ([#5958](https://github.com/containerd/containerd/pull/5958)) * replace deprecated Dail with DailContext * Add WS2022 support in Windows Periodic tests ([#5951](https://github.com/containerd/containerd/pull/5951)) * Add WS2022 support in Windows Periodic tests * Content fuzzer: Clean up temp store dir ([#5943](https://github.com/containerd/containerd/pull/5943)) * content fuzzer: Clean up tempdir * using Hosts replace deprecated field ([#5944](https://github.com/containerd/containerd/pull/5944)) * using Hosts replace deprecated field * fix document non-synchronous ([#5947](https://github.com/containerd/containerd/pull/5947)) * fix document non-synchronous in crictl.md * go.mod: Update hcsshim to v0.8.21 ([#5929](https://github.com/containerd/containerd/pull/5929)) * go.mod: Update hcsshim to v0.8.21 * Makefile.linux: build on RISC-V with PIE ([#5937](https://github.com/containerd/containerd/pull/5937)) * Makefile.linux: build on riscv with PIE * Fix cwd flag for `ctr tasks exec` ([#5932](https://github.com/containerd/containerd/pull/5932)) * Fix cwd flag for `ctr tasks exec` * Update Pause image in tests & config ([#5927](https://github.com/containerd/containerd/pull/5927)) * Update Pause image in tests & config * cri: Devices ownership from SecurityContext ([#5122](https://github.com/containerd/containerd/pull/5122)) * cri: Devices ownership from SecurityContext * Fix pull fails on unexpected EOF ([#5921](https://github.com/containerd/containerd/pull/5921)) * Fix pull fails on unexpected EOF * Fix dir support for devices ([#5845](https://github.com/containerd/containerd/pull/5845)) * Adding testing of two devices * Fix dir support for devices V3 (#4847) * windows: The DefaultSpec platform should match the Default matcher ([#5914](https://github.com/containerd/containerd/pull/5914)) * windows: The DefaultSpec platform should match the Default matcher * Add RunAsUserName functionality for the Windows pod sandbox container ([#5865](https://github.com/containerd/containerd/pull/5865)) * Add RunAsUserName functionality for the Windows Pod Sandbox Container * bump up runc v1.0.2 ([#5899](https://github.com/containerd/containerd/pull/5899)) * go.mod: update runc to v1.0.2 * update runc binary to v1.0.2 * Run `go fmt` with Go 1.17 ([#5903](https://github.com/containerd/containerd/pull/5903)) * Run `go fmt` with Go 1.17 * go.mod: github.com/pelletier/go-toml v1.9.3 ([#5905](https://github.com/containerd/containerd/pull/5905)) * go.mod: github.com/pelletier/go-toml v1.9.3 * cri: filter selinux xattr for image volumes ([#5902](https://github.com/containerd/containerd/pull/5902)) * cri: filter selinux xattr for image volumes * Add Windows HostProcess Support ([#5131](https://github.com/containerd/containerd/pull/5131)) * Added windows hostProcess cni skip * script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0 ([#5897](https://github.com/containerd/containerd/pull/5897)) * script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0 * Update to Go 1.17 ([#5889](https://github.com/containerd/containerd/pull/5889)) * Bump integration timeout to 35 min * Update to Go 1.17 * integration: fix TestContainerPids ([#5896](https://github.com/containerd/containerd/pull/5896)) * integration: fix TestContainerPids * [ctr] add HOSTNAME env for host network ([#5891](https://github.com/containerd/containerd/pull/5891)) * [ctr] add HOSTNAME env for host network * Fuzzing: Add fuzzer ([#5886](https://github.com/containerd/containerd/pull/5886)) * Fuzzing: Add fuzzer * Make Cgroup driver configurable in gce configure script ([#5884](https://github.com/containerd/containerd/pull/5884)) * Add env for SystemdCgroup driver * Allow expanded DNS configuration ([#5878](https://github.com/containerd/containerd/pull/5878)) * Allow expanded DNS configuration * Fuzzing: Add 4 fuzzers ([#5863](https://github.com/containerd/containerd/pull/5863)) * Fuzzing: Add 4 fuzzers * Cleanup v2 shim ([#5813](https://github.com/containerd/containerd/pull/5813)) * Cleanup v2 shim * Fuzzing: Add experimental version of container fuzzer ([#5840](https://github.com/containerd/containerd/pull/5840)) * Use http.Get to download binaries instead of exec.Command * Fuzzing: Add experimental version of container fuzzer * add cpu-shares to ctr ([#5846](https://github.com/containerd/containerd/pull/5846)) * add cpu-shares to ctr * docs: rename master to main (it was opposite on the actual commit) ([#5847](https://github.com/containerd/containerd/pull/5847)) * docs: rename main to master * content: return the error with its timestamp ([#5849](https://github.com/containerd/containerd/pull/5849)) * content: return the error with its timestamp * Fix bad `make protos` failure ([#5857](https://github.com/containerd/containerd/pull/5857)) * Fix bad `make protos` failure * replace cri and point to new location ([#5851](https://github.com/containerd/containerd/pull/5851)) * archive docs and point to new location fix #https://github.com/containerd/cri/issues/1624 * docs: remove FOSSA's badge ([#5856](https://github.com/containerd/containerd/pull/5856)) * docs: remove FOSSA's badge * BUILDING.md: remove some bits about building runc ([#5850](https://github.com/containerd/containerd/pull/5850)) * BUILDING.md: remove some bits about building runc * BUILDING.md: markdown fixes * go.mod: update k8s deps to v1.22.0 ([#5836](https://github.com/containerd/containerd/pull/5836)) * go.mod: update kubernetes to v1.22.0 * [Scripts] Add trap to cri-integration test script ([#5852](https://github.com/containerd/containerd/pull/5852)) * Add trap to cri-integration test script * docs: list all snapshotter-related build flags ([#5848](https://github.com/containerd/containerd/pull/5848)) * docs: list all snapshotter-related build flags * Move plugin context events into separate plugin ([#5835](https://github.com/containerd/containerd/pull/5835)) * Move plugin context events into separate plugin * Fix Linux CI Linter using Go 1.15.14 ([#5839](https://github.com/containerd/containerd/pull/5839)) * Fix Linux CI Linter using go 1.15.14 * Update Go to 1.16.7 ([#5842](https://github.com/containerd/containerd/pull/5842)) * Update Go to 1.16.7 * Cleanup CI ([#5838](https://github.com/containerd/containerd/pull/5838)) * Cleanup CI * Remove redundant build tags ([#5834](https://github.com/containerd/containerd/pull/5834)) * Remove redundant build tags * Change default directories on Darwin ([#5830](https://github.com/containerd/containerd/pull/5830)) * Change default directories on Darwin * [otel-tracing] Initial opentelemetry support ([#5731](https://github.com/containerd/containerd/pull/5731)) * [otel-tracing] vendor and go modules changes * [otel-tracing] Initial opentelemetry support * remove go 1.13 from containerd * Fuzzing: Fix for OSS-fuzz issue 36825 ([#5829](https://github.com/containerd/containerd/pull/5829)) * Fuzzing: Fix for OSS-fuzz issue 36825 * Fuzzing: Add two fuzzers ([#5825](https://github.com/containerd/containerd/pull/5825)) * Fuzzing: Add two more fuzzers * scripts: linting fixes, and remove support for Debian Jessie (as it's EOL) ([#5760](https://github.com/containerd/containerd/pull/5760)) * scripts: declare ROOT closer to where it's used, and some DRY changes * scripts: add missing quotes, and minor linting issues * test/build-utils.sh: remove support for Debian Jessie * platforms: Format(): use path.Join() instead of joinNotEmpty() ([#5821](https://github.com/containerd/containerd/pull/5821)) * platforms: Format(): use path.Join() instead of joinNotEmpty() * Fuzzing: Remove panics of container_fuzzer ([#5823](https://github.com/containerd/containerd/pull/5823)) * Fuzzing: Remove panics of container_fuzzer * Fuzzing: Add container fuzzer ([#5785](https://github.com/containerd/containerd/pull/5785)) * Change protoc link * Split fuzzer to two fuzzers * Fuzzing: Add container fuzzer * runtime: fix the issue of create new socket with abstract address ([#5746](https://github.com/containerd/containerd/pull/5746)) * runtime: fix the issue of create new socket with abstract address * mergo: Upgrade to 0.3.12 to fix panic ([#5809](https://github.com/containerd/containerd/pull/5809)) * mergo: Upgrade to 0.3.12 to fix panic * ci: install criu from PPA ([#5802](https://github.com/containerd/containerd/pull/5802)) * ci: install criu from PPA * Update release workflow to upload binary without CNI ([#5144](https://github.com/containerd/containerd/pull/5144)) * Split release steps into multiple tasks * Update release workflow to upload binary without CNI * Enable critest on Windows Periodic Jobs ([#5725](https://github.com/containerd/containerd/pull/5725)) * Enable critest on Windows * Script to check if entries in go.mod files are in sync ([#5792](https://github.com/containerd/containerd/pull/5792)) * Script to check if entries in go.mod files are in sync * Add a sharedNamespace label ([#5043](https://github.com/containerd/containerd/pull/5043)) * Add shared content label to namespaces * platforms: add "ios" as known OS, "loong64" as known ARCH ([#5784](https://github.com/containerd/containerd/pull/5784)) * platforms: add "ios" as known OS, "loong64" as known ARCH * Updates the location of protobuf downloads ([#5804](https://github.com/containerd/containerd/pull/5804)) * Updates the location of protobuf downloads in docs * Update protobuf install to use correct repository ([#5803](https://github.com/containerd/containerd/pull/5803)) * Update protobuf install to use correct repository * overlay: expose upperdir location of each snapshot via an optional label ([#5624](https://github.com/containerd/containerd/pull/5624)) * overlay: add an optional label of upperdir location of each snapshot * Support SIGRTMIN+n signals ([#5693](https://github.com/containerd/containerd/pull/5693)) * Support SIGRTMIN+n signals * respect context timeout in shim binary call ([#5800](https://github.com/containerd/containerd/pull/5800)) * respect context timeout in shim binary call * Introduce a new go module - containerd/api for use in standalone clients ([#5716](https://github.com/containerd/containerd/pull/5716)) * Introduce a new go module - containerd/api for use in standalone clients * grpc config add options tcp_client_ca_cert ([#5606](https://github.com/containerd/containerd/pull/5606)) * grpc config add options tcp_tls_ca * integration: Windows volume-copy-up images ([#5162](https://github.com/containerd/containerd/pull/5162)) * integration: Windows volume-copy-up images * add CRI support matrix to RELEASES.md ([#5795](https://github.com/containerd/containerd/pull/5795)) * add CRI support matrix to RELEASES.md * adding a little more clarity ([#5794](https://github.com/containerd/containerd/pull/5794)) * adding a little more clarity * update gotestsum to v1.7.0 ([#5793](https://github.com/containerd/containerd/pull/5793)) * update gotestsum to v1.7.0 * Discard blocks when removing a thin device ([#5756](https://github.com/containerd/containerd/pull/5756)) * Discard blocks when removing a thin device * Makefile: fix passing build tags ([#5590](https://github.com/containerd/containerd/pull/5590)) * Makefile: pass build tags to manpage build process * Makefile: fix tags parameter computation * Add runtime label to metrics ([#5744](https://github.com/containerd/containerd/pull/5744)) * Add runtime label to metrics * interface about shim build check ([#5745](https://github.com/containerd/containerd/pull/5745)) * interface about shim build check * integration: log all processes to investigate the test failure ([#5775](https://github.com/containerd/containerd/pull/5775)) * integration: log all processes to investigate the test failure * Fuzzing: Add archive fuzzer ([#5779](https://github.com/containerd/containerd/pull/5779)) * Fuzzing: Add archive fuzzer * Add docker.Fetch fuzzer ([#5687](https://github.com/containerd/containerd/pull/5687)) * Add docker fetch fuzzer * Support custom compressor for walking differ ([#5735](https://github.com/containerd/containerd/pull/5735)) * Support custom compressor for walking differ * remotes/docker/pusher.go: Fix missing Close() on push to docker remote ([#5770](https://github.com/containerd/containerd/pull/5770)) * remotes/docker/pusher.go: Fix missing Close() * remotes/docker/fetcher.go: Fix missing Close() on fetch from docker remote ([#5769](https://github.com/containerd/containerd/pull/5769)) * remotes/docker/fetcher.go: Fix missing Close() * Update cpuguy83/go-md2man binary to v2.0.1 ([#5771](https://github.com/containerd/containerd/pull/5771)) * Update cpuguy83/go-md2man binary to v2.0.1 * Refactor / optimize contrib/Dockerfile.test ([#5750](https://github.com/containerd/containerd/pull/5750)) * Dockerfile.test: build containerd in separate stage * Dockerfile.test: add GOLANG_IMAGE build arg to allow overriding * Dockerfile.test: clean up apt indexes after installing * Dockerfile.test: build critools in a separate stage * Dockerfile.test: build cni in a separate stage * Dockerfile.test: standard directory to collect build aftifacts * Dockerfile.test: split dev stage, and optimize order * Dockerfile.test: skip curl, gcc, git and make install * install-critools: make sure DESTDIR exists * update gotestsum to current master ([#5754](https://github.com/containerd/containerd/pull/5754)) * update gotestsum to current master * Github Security Advisory [GHSA-c72p-9xmj-rx3w](https://github.com/containerd/containerd/security/advisories/GHSA-c72p-9xmj-rx3w) * Add test for archive breakout test for lchmod * Use systemd cgroup driver for Kubernetes e2e tests with cgroupsv2 ([#5755](https://github.com/containerd/containerd/pull/5755)) * Use systemd cgroup driver for cgroupv2 tests * update runc to v1.0.1 ([#5751](https://github.com/containerd/containerd/pull/5751)) * go.mod: runc v1.0.1 * update runc binary to v1.0.1 * runtime: runc v2: remove redundant validation ([#5737](https://github.com/containerd/containerd/pull/5737)) * runtime: runc v2: remove redundant validation * Add timestamp to flaky restart monitor test ([#5727](https://github.com/containerd/containerd/pull/5727)) * Move loop check to before sleep * Add timestamp to flaky restart monitor test * Update Go to 1.16.6 ([#5722](https://github.com/containerd/containerd/pull/5722)) * integration/client: go mod tidy * Update Go to 1.16.6 * client: surface a connection error more clearly ([#4447](https://github.com/containerd/containerd/pull/4447)) * client: surface a connection error more clearly * Fix missing Body.Close() calls on push to docker remote ([#5712](https://github.com/containerd/containerd/pull/5712)) * Fix missing Body.Close() calls on push to docker remote * remove pkg/cri/platforms package ([#5710](https://github.com/containerd/containerd/pull/5710)) * remove pkg/cri/platforms package * Allow WithServices to use custom implementations ([#5709](https://github.com/containerd/containerd/pull/5709)) * Allow WithServices to use custom implementations * [Vendor] Update hcsshim to 0.8.18 ([#5673](https://github.com/containerd/containerd/pull/5673)) * [Vendor] Update hcsshim to 0.8.18 * test integration: Adds a test that restarts a failed container ([#5578](https://github.com/containerd/containerd/pull/5578)) * test integration: Adds a test that restarts a failed container * [CRI] move up to CRI v1 and support v1alpha in parallel ([#5619](https://github.com/containerd/containerd/pull/5619)) * use fu wei's suggeted interface pick for marshaling * add alpha version * move up to CRI v1 and support v1alpha in parallel * gha: make release workflow work in forks ([#5682](https://github.com/containerd/containerd/pull/5682)) * gha: make release workflow work in forks * Add unit test for plugin ([#5666](https://github.com/containerd/containerd/pull/5666)) * Add unit test for plugin * Dockerfile.test: add "cri-in-userns" (aka rootless) test stage ([#5700](https://github.com/containerd/containerd/pull/5700)) * Dockerfile.test: add "cri-in-userns" (aka rootless) test stage * Update for distribution spec 1.0 ([#5676](https://github.com/containerd/containerd/pull/5676)) * Add support for registry host path override * Update documenation for OCI distribution 1.0 * archive: cleanup lchmod logic ([#5702](https://github.com/containerd/containerd/pull/5702)) * Cleanup lchmod logic in archive * Install specific golang version in Windows CI. ([#5571](https://github.com/containerd/containerd/pull/5571)) * Install specific golang version in Windows CI. * Add ctr command label in NewContainerOpts ([#5660](https://github.com/containerd/containerd/pull/5660)) * feat: Add snapshotter label to the new snapshot for container. * snapshot/devmapper: log exported methods correctly ([#5655](https://github.com/containerd/containerd/pull/5655)) * snapshot/devmapper: log exported methods correctly * Makefile: fix DESTDIR and PREFIX concatenation ([#5662](https://github.com/containerd/containerd/pull/5662)) * Makefile: fix DESTDIR and PREFIX concatenation * Cri integration cleanup ([#5287](https://github.com/containerd/containerd/pull/5287)) * tests: Use EnsureImageExists for image pulling * tests: Refactors PodSandbox creation * move sys.FMountat() into mount package and un-export ([#5641](https://github.com/containerd/containerd/pull/5641)) * un-export mount.FMountat * move sys.FMountat() into mount package * sandbox: send pod UID to CNI plugins as K8S_POD_UID ([#5640](https://github.com/containerd/containerd/pull/5640)) * sandbox: send pod UID to CNI plugins as K8S_POD_UID * sys: remove StatAtime(), StatCtime(), StatMtime() and StatATimeAsTime() utils ([#5639](https://github.com/containerd/containerd/pull/5639)) * sys: remove StatAtime(), StatCtime(), StatMtime() and StatATimeAsTime() utils * content/local: inline sys.StatATimeAsTime() ([#5633](https://github.com/containerd/containerd/pull/5633)) * content/local: inline sys.StatATimeAsTime() * allow multi gpu to be specified via ctr ([#5636](https://github.com/containerd/containerd/pull/5636)) * allow multi gpu to be specified via ctr * go.mod: runc v1.0.0 * update runc binary to v1.0.0 GA * fixing some doc links ([#5629](https://github.com/containerd/containerd/pull/5629)) * fixing some doc links * Sync integration/go.mod with root go.mod ([#5623](https://github.com/containerd/containerd/pull/5623)) * Sync integration/go.mod with root go.mod * archive: Expose ChangeWriter to allow customized diff computing ([#5615](https://github.com/containerd/containerd/pull/5615)) * archive: Expose ChangeWriter to allow customized diff computing * CI: Switch to the available latest images ([#5625](https://github.com/containerd/containerd/pull/5625)) * CI: Switch to available latest images * fix deprecation config for default runtime * Re-enable criu in main integration runs ([#5614](https://github.com/containerd/containerd/pull/5614)) * Re-enable criu in main integration runs * runtime,v2: Enable debug when containerd is on debug+ log level ([#5617](https://github.com/containerd/containerd/pull/5617)) * runtime,v2: Enable debug when containerd is on debug+ log level * github.com/golang/protobuf/proto is deprecated * Update github.com/golang/protobuf from v1.3.5 to v1.4.3 * Update google.golang.org/grpc from v1.27.1 to v1.38.0 * Increase golangci-lint timeout * ctr flags of container rootfs propagation ([#5611](https://github.com/containerd/containerd/pull/5611)) * command line flags of setting container rootfs propagation * add cgroupv2 setup for cos with a flag * Update gotestsum to add timestamps to junit output ([#5612](https://github.com/containerd/containerd/pull/5612)) * Update gotestsum to add timestamps to junit output * Allow to pass --no-cgroups option to nvidia-container-cli ([#5604](https://github.com/containerd/containerd/pull/5604)) * Allow to pass --no-cgroup option to nvidia-container-cli * Makefile: FHS conformant manpage installation pathes ([#5577](https://github.com/containerd/containerd/pull/5577)) * Makefile: FHS conformant manpage installation pathes * Add proper Go version before project checks ([#5594](https://github.com/containerd/containerd/pull/5594)) * Add proper Go version before project checks * Enable cri-integration in Windows Periodic Tests ([#5580](https://github.com/containerd/containerd/pull/5580)) * Enable cri-integration in Windows Periodic Tests * adds explanation for seccomp unset/unconfined default vs runtime default ([#5573](https://github.com/containerd/containerd/pull/5573)) * adds explanation for seccomp unset/unconfined default vs runtime default * Fix cleanup context of teardownPodNetwork ([#5569](https://github.com/containerd/containerd/pull/5569)) * Fix cleanup context of teardownPodNetwork * update integration/client go.sum ([#5572](https://github.com/containerd/containerd/pull/5572)) * update integration/client go.sum * Revert diff/walking error change ([#5566](https://github.com/containerd/containerd/pull/5566)) * Revert diff/walking error change * Update opencontainers/selinux to v1.8.2 ([#5562](https://github.com/containerd/containerd/pull/5562)) * Update opencontainers/selinux to v1.8.2 * fix invalid validation error checking ([#5565](https://github.com/containerd/containerd/pull/5565)) * fix invalid validation error checking * diff/walking: fix defer cleanup ([#5551](https://github.com/containerd/containerd/pull/5551)) * diff/walking: fix defer cleanup * Windows periodic job: Add creation timestamp to RG ([#5559](https://github.com/containerd/containerd/pull/5559)) * Add creation timestamp to RG * Fix error case in Windows layer cleanup ([#5328](https://github.com/containerd/containerd/pull/5328)) * Fix error case in Windows layer cleanup * Use DeactivateLayer to unlock layers that we cannot rename ([#5422](https://github.com/containerd/containerd/pull/5422)) * Small typo fix "reimporst" * Use DeactivateLayer to recover layers that we cannot rename * tests: Symlink volume tests ([#5284](https://github.com/containerd/containerd/pull/5284)) * tests: Symlink volume tests * Makefile: fix DESTDIR environment variable behaviour ([#5535](https://github.com/containerd/containerd/pull/5535)) * Makefile: fix DESTDIR environment variable behaviour * Change Wrapf of non-error to an actual error ([#5560](https://github.com/containerd/containerd/pull/5560)) * Change Wrapf of non-error to an actual error * Install apparmor parser for arm64 environment * scrub the stale TODO ([#5536](https://github.com/containerd/containerd/pull/5536)) * scrub the stale TODO * docs: explicitly mention containerd's Prometheus path ([#5554](https://github.com/containerd/containerd/pull/5554)) * docs: explicitly mention containerd's Prometheus path * integration: Cleanup containerd on test teardown ([#5553](https://github.com/containerd/containerd/pull/5553)) * integration: Cleanup containerd on test teardown * docs/cri: update links ([#5548](https://github.com/containerd/containerd/pull/5548)) * docs/cri: update ocicrypt link * docs/cri: fix broken links * Update Windows periodic tests ([#5544](https://github.com/containerd/containerd/pull/5544)) * Update Windows periodic tests * Add CI periodic Windows Jobs. ([#5165](https://github.com/containerd/containerd/pull/5165)) * Schedule Windows job daily after midnight. * Update windows-periodic.yml * Add CI periodic Windows Jobs. * Rename atomicWrite to writeToCompletion ([#5273](https://github.com/containerd/containerd/pull/5273)) * Rename atomicWrite to writeToCompletion * Do not run btrfs tests if btrfs kernel module is not loaded ([#5539](https://github.com/containerd/containerd/pull/5539)) * Do not run btrfs tests if btrfs kernel module is not loaded * Fix incorrect UA used for registry authentication ([#5533](https://github.com/containerd/containerd/pull/5533)) * Fix incorrect UA used for registry authentication * ctr: parse mount options with embedded = character ([#5531](https://github.com/containerd/containerd/pull/5531)) * ctr: parse mount options with embedded = character * Fix mounts for FreeBSD ([#5472](https://github.com/containerd/containerd/pull/5472)) * Add ruleset=4 option * Remove mountpoints not commonly mounted on FreeBSD * Add copyright header & make sure compilation succeeds on all platforms * Fix mounts for FreeBSD * ctr: make exec pty behavior consistent with run ([#5527](https://github.com/containerd/containerd/pull/5527)) * ctr: exec handle pty resize after Start * ctr: exec setup IO with console * Makefile: use $@ for target file names ([#5534](https://github.com/containerd/containerd/pull/5534)) * Makefile: use $@ for target file names * Fix small typo ([#5528](https://github.com/containerd/containerd/pull/5528)) * Fix small typo * Don't check for apparmor_parser to be present ([#5519](https://github.com/containerd/containerd/pull/5519)) * update the link * Don't check for apparmor_parser to be present * Remove useless lines ([#5520](https://github.com/containerd/containerd/pull/5520)) * Remove useless lines * Fixed typos in docs ([#5509](https://github.com/containerd/containerd/pull/5509)) * fixed typos * Try next mirror in case of non-404 errors, too ([#5275](https://github.com/containerd/containerd/pull/5275)) * Try next mirror in case of non-404 errors, too * bump runc version to v1.0.0-rc95 ([#5514](https://github.com/containerd/containerd/pull/5514)) * bump runc version to v1.0.0-rc95 * update runc binary to v1.0.0-rc95 ([#5511](https://github.com/containerd/containerd/pull/5511)) * update runc binary to v1.0.0-rc95 * Bump github.com/Microsoft/go-winio from 0.4.15 to 0.5.0 ([#5508](https://github.com/containerd/containerd/pull/5508)) * Bump github.com/Microsoft/go-winio from 0.4.15 to 0.5.0 * Bump github.com/opencontainers/selinux from 1.8.0 to 1.8.1 ([#5507](https://github.com/containerd/containerd/pull/5507)) * Bump github.com/opencontainers/selinux from 1.8.0 to 1.8.1 * Makefile: allow overriding install command via environment ([#5493](https://github.com/containerd/containerd/pull/5493)) * Makefile: allow overriding install command via environment * tests: Adds support for Windows cri-integration tests ([#5163](https://github.com/containerd/containerd/pull/5163)) * tests: Adds support for Windows cri-integration tests * Update docker resolver to authorize redirects ([#5504](https://github.com/containerd/containerd/pull/5504)) * Update docker resolver to authorize redirects * bump hcsshim version to v0.8.17 ([#5505](https://github.com/containerd/containerd/pull/5505)) * bump hcsshim version to v0.8.17 * Release binary update for imgcrypt ([#5498](https://github.com/containerd/containerd/pull/5498)) * just release ctd-decoder not ctr-enc * Merge remote-tracking branch 'upstream/master' * Pin integration test image for alpine * cri-integration tests: Pull images once ([#5313](https://github.com/containerd/containerd/pull/5313)) * tests: Prepull images used in tests * plugin: optimize the check for the last registration ([#5440](https://github.com/containerd/containerd/pull/5440)) * plugin: optimize the check for the last registration * metadata: modify NewLeaseManager to return leases.Manager ([#5465](https://github.com/containerd/containerd/pull/5465)) * metadata: modify NewLeaseManager to return leases.Manager * Skip TLS verification for localhost ([#5100](https://github.com/containerd/containerd/pull/5100)) * Skip TLS verification for localhost * Merge remote-tracking branch 'upstream/master' * Makefile: make sure manpages are built before install-man ([#5492](https://github.com/containerd/containerd/pull/5492)) * Makefile: make sure manpages are built before install-man * adds description for hosts.toml ([#5309](https://github.com/containerd/containerd/pull/5309)) * adds credentials description * adds description for hosts.toml * Prepare default branch rename ([#5459](https://github.com/containerd/containerd/pull/5459)) * Prepare default branch rename * Merge remote-tracking branch 'upstream/master' * Update runc to rc94 ([#5473](https://github.com/containerd/containerd/pull/5473)) * Update vendored runc to v1.0.0.0-rc94 * Update the runc binary used with containerd to runc v1.0.0-rc94 * Fix `content.ReaderAt` close ([#5468](https://github.com/containerd/containerd/pull/5468)) * Fix content.ReaderAt close * Update releases doc with updated support timeline ([#5466](https://github.com/containerd/containerd/pull/5466)) * Update releases doc with updated support timeline * tests: add test for adaptor ([#5452](https://github.com/containerd/containerd/pull/5452)) * tests: add test for adaptor * Makefile: allow overriding go command by environment ([#5450](https://github.com/containerd/containerd/pull/5450)) * Makefile: allow overriding go command by environment * update to new cri-tools make install ([#5462](https://github.com/containerd/containerd/pull/5462)) * update to new cri-tools make install * Update Go to 1.16.4 ([#5461](https://github.com/containerd/containerd/pull/5461)) * Update Go to 1.16.4 * Merge remote-tracking branch 'upstream/release/1.5' * [release/1.5] go.mod: cut circular dependency on github.com/containerd/containerd ([#5457](https://github.com/containerd/containerd/pull/5457)) * go.mod: cut circular dependency on github.com/containerd/containerd * integration/client: go mod tidy * oci: fix WithDevShmSize ([#5063](https://github.com/containerd/containerd/pull/5063)) * oci: fix WithDevShmSize * [release/1.5] cherry-pick: windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink ([#5454](https://github.com/containerd/containerd/pull/5454)) * windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink * windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink ([#5411](https://github.com/containerd/containerd/pull/5411)) * windows: Use GetFinalPathNameByHandle for ResolveSymbolicLink * doc: add missing namespaces package ([#5448](https://github.com/containerd/containerd/pull/5448)) * doc: add missing namespaces package * update seccomp version ([#5445](https://github.com/containerd/containerd/pull/5445)) * update seccomp version * Update golang.org/x/sys to add linux/ppc support ([#5436](https://github.com/containerd/containerd/pull/5436)) * Update golang.org/x/sys to add linux/ppc support * go.mod: cut circular dependency on github.com/containerd/containerd ([#5441](https://github.com/containerd/containerd/pull/5441)) * go.mod: cut circular dependency on github.com/containerd/containerd * integration/client: go mod tidy * Fix different registry hosts referencing the same auth config. ([#5446](https://github.com/containerd/containerd/pull/5446)) * Fix different registry hosts referencing the same auth config. </p> </details> ### Changes from containerd/cgroups <details><summary>24 commits</summary> <p> * cgroup: Optionally add process and task to a subsystems subset ([#203](https://github.com/containerd/cgroups/pull/203)) * cgroup: Optionally add process and task to a subsystems subset * replace pkg/errors from vendor ([#208](https://github.com/containerd/cgroups/pull/208)) * replace pkg/errors from vendor * cgroup.go: avoid panic on nil interface ([#207](https://github.com/containerd/cgroups/pull/207)) * cgroup.go: avoid panic on nil interface * Improvements on cgroup v2 support ([#204](https://github.com/containerd/cgroups/pull/204)) * cgroupv2: reset lastErr to nil when subtree control is successfully written * cgroupv2: enable controllers before setting resources in NewChild() * v2: remove unimplemented errors and ErrorHandler, IgnoreNotExist ([#201](https://github.com/containerd/cgroups/pull/201)) * v2: remove ErrorHandler and IgnoreNotExist as they are not implemented * v2: remove errors that are never returned * v1: reduce duplicated code ([#202](https://github.com/containerd/cgroups/pull/202)) * v1: reduce duplicated code * cgroup v1: implement AddProc() ([#200](https://github.com/containerd/cgroups/pull/200)) * cgroup v1: implement AddProc() * Rename branch from master to main ([#199](https://github.com/containerd/cgroups/pull/199)) * Rename branch from master to main * utils: export ParseCgroupFile() ([#197](https://github.com/containerd/cgroups/pull/197)) * utils: export ParseCgroupFile() * go.mod: coreos/go-systemd/v22 v22.3.2 to prepare for deprecations ([#194](https://github.com/containerd/cgroups/pull/194)) * go.mod: coreos/go-systemd/v22 v22.3.2 to prepare for deprecations * Use /proc/partitions to get device names ([#195](https://github.com/containerd/cgroups/pull/195)) * Use /proc/partitions to get device names </p> </details> ### Changes from containerd/console <details><summary>6 commits</summary> <p> * Fix CI ([#55](https://github.com/containerd/console/pull/55)) * Fix CI * Stop using pkg/errors * Add support for z/OS ([#46](https://github.com/containerd/console/pull/46)) * Console test on z/OS * Add support for z/OS </p> </details> ### Changes from containerd/continuity <details><summary>20 commits</summary> <p> * Copy Windows file metadata ([#188](https://github.com/containerd/continuity/pull/188)) * Copy Windows file metadata * fix fmt.Errorf("%w", err) on err == nil ([#187](https://github.com/containerd/continuity/pull/187)) * fix fmt.Errorf("%w", err) on err == nil * Remove direct dependency on github.com/pkg/errors ([#185](https://github.com/containerd/continuity/pull/185)) * run gofmt with Go 1.17 * remove direct dependency on github.com/pkg/errors * Fix darwin issues ([#186](https://github.com/containerd/continuity/pull/186)) * update AUTHORS * darwin: use utimensat syscall instead of utimes * fix darwin usage of du command * go.mod: bazil.org/fuse v0.0.0-20200407214033-5883e5a4b5125 ([#161](https://github.com/containerd/continuity/pull/161)) * go.mod: bazil.org/fuse v0.0.0-20200407214033-5883e5a4b5125 * fs/stat: add FreeBSD, and cleanup some nolint-comments ([#184](https://github.com/containerd/continuity/pull/184)) * reformat nolint comments * fs/stat: add FreeBSD * Rename branch from master to main ([#182](https://github.com/containerd/continuity/pull/182)) * Rename branch from master to main * testutil/loopback: print more debug info ([#180](https://github.com/containerd/continuity/pull/180)) * testutil/loopback: print more debug info </p> </details> ### Changes from containerd/go-cni <details><summary>15 commits</summary> <p> * remove: Continue on "not found" errors ([#74](https://github.com/containerd/go-cni/pull/74)) * remove: Continue on "not found" errors * go.mod: github.com/containernetworking/cni v1.0.1 ([#72](https://github.com/containerd/go-cni/pull/72)) * go.mod: github.com/containernetworking/cni v1.0.1 * remove direct dependency on github.com/pkg/errors ([#71](https://github.com/containerd/go-cni/pull/71)) * remove direct dependency on github.com/pkg/errors * update CNI to v1.0.0 ([#70](https://github.com/containerd/go-cni/pull/70)) * test: add TestLibCNIType100 * update CNI to v1.0.0 * Rename branch from master to main ([#69](https://github.com/containerd/go-cni/pull/69)) * Rename branch from master to main * result: change Raw from a struct field to a method ([#68](https://github.com/containerd/go-cni/pull/68)) * result: change Raw from a struct field to a method * result: expose raw result ([#67](https://github.com/containerd/go-cni/pull/67)) * result: expose raw result </p> </details> ### Changes from containerd/ttrpc <details><summary>34 commits</summary> <p> * Add protoc-gen-go-ttrpc ([#96](https://github.com/containerd/ttrpc/pull/96)) * Add protoc-gen-go-ttrpc * client: Handle sending/receiving in separate goroutines ([#94](https://github.com/containerd/ttrpc/pull/94)) * client: Handle sending/receiving in separate goroutines * Run Protobuild in GitHub Actions ([#95](https://github.com/containerd/ttrpc/pull/95)) * Run Protobuild in GitHub Actions * Re-generate example.pb.go * replace pkg/errors ([#93](https://github.com/containerd/ttrpc/pull/93)) * replace pkg/errors from vendor * Rename branch from master to main ([#86](https://github.com/containerd/ttrpc/pull/86)) * Rename branch from master to main * Make "go test" and "go build" work on macOS ([#85](https://github.com/containerd/ttrpc/pull/85)) * Make the example command buildable on macOS * Run GitHub Actions on macOS * Make "go test" work on macOS * Return Unimplemented when services or methods are not implemented ([#83](https://github.com/containerd/ttrpc/pull/83)) * Return Unimplemented when services or methods are not implemented * Remove "Very new" and checked TODO items ([#84](https://github.com/containerd/ttrpc/pull/84)) * Remove "Very new" and checked TODO items * removing glide from ignore ([#82](https://github.com/containerd/ttrpc/pull/82)) * removing glide from ignore * go.mod: update dependencies ([#79](https://github.com/containerd/ttrpc/pull/79)) * go.mod: github.com/prometheus/procfs v0.6.0 * go.mod: google.golang.org/genproto v0.0.0-20200224152610-e50cd9704f63 * go.mod: google.golang.org/grpc v1.27.1 * go.mod: github.com/gogo/protobuf v1.3.2 * remove travis, add codecov badge ([#78](https://github.com/containerd/ttrpc/pull/78)) * CI: add codecov badge to readme * CI: remove travis * Use GitHub Actions for CI ([#77](https://github.com/containerd/ttrpc/pull/77)) * Use GitHub Actions for CI * go.mod: sirupsen/logrus v1.7.0 ([#76](https://github.com/containerd/ttrpc/pull/76)) * go.mod: sirupsen/logrus v1.7.0 * go mod tidy </p> </details> ### Dependency Changes * **github.com/AdaLogics/go-fuzz-headers** 6c3934b029d8 **_new_** * **github.com/Microsoft/go-winio** v0.4.17 -> v0.5.1 * **github.com/Microsoft/hcsshim** v0.8.16 -> v0.9.1 * **github.com/bits-and-blooms/bitset** v1.2.0 **_new_** * **github.com/blang/semver** v3.5.1 **_new_** * **github.com/cenkalti/backoff/v4** v4.1.2 **_new_** * **github.com/cilium/ebpf** v0.4.0 -> v0.6.2 * **github.com/containerd/cgroups** v1.0.1 -> v1.0.2 * **github.com/containerd/console** v1.0.2 -> v1.0.3 * **github.com/containerd/continuity** v0.1.0 -> 8e53e7cac79d * **github.com/containerd/go-cni** v1.0.2 -> aa8bf14323a5 * **github.com/containerd/ttrpc** v1.0.2 -> v1.1.0 * **github.com/containernetworking/cni** v0.8.1 -> v1.0.1 * **github.com/containernetworking/plugins** v0.9.1 -> v1.0.1 * **github.com/go-logr/logr** v0.2.0 -> v1.2.2 * **github.com/go-logr/stdr** v1.2.2 **_new_** * **github.com/golang/groupcache** 8c9f03a8e57e -> 41bb18bfe9da * **github.com/golang/protobuf** v1.3.5 -> v1.5.2 * **github.com/google/go-cmp** v0.5.4 -> v0.5.6 * **github.com/google/gofuzz** v1.1.0 -> v1.2.0 * **github.com/grpc-ecosystem/go-grpc-middleware** v1.3.0 **_new_** * **github.com/grpc-ecosystem/grpc-gateway** v1.16.0 **_new_** * **github.com/hashicorp/errwrap** v1.0.0 -> v1.1.0 * **github.com/hashicorp/go-multierror** v1.0.0 -> v1.1.1 * **github.com/imdario/mergo** v0.3.11 -> v0.3.12 * **github.com/intel/goresctrl** v0.2.0 **_new_** * **github.com/json-iterator/go** v1.1.10 -> v1.1.11 * **github.com/moby/spdystream** v0.2.0 **_new_** * **github.com/moby/sys/signal** v0.6.0 **_new_** * **github.com/opencontainers/image-spec** v1.0.1 -> 693428a734f5 * **github.com/opencontainers/runc** v1.0.0-rc93 -> v1.0.3 * **github.com/opencontainers/runtime-spec** e6143ca7d51d -> 1c3f411f0417 * **github.com/opencontainers/selinux** v1.8.0 -> v1.8.2 * **github.com/pelletier/go-toml** v1.8.1 -> v1.9.3 * **github.com/prometheus/client_golang** v1.7.1 -> v1.11.0 * **github.com/prometheus/common** v0.10.0 -> v0.30.0 * **github.com/prometheus/procfs** v0.6.0 -> v0.7.3 * **github.com/satori/go.uuid** v1.2.0 **_new_** * **github.com/sirupsen/logrus** v1.7.0 -> v1.8.1 * **github.com/spf13/pflag** v1.0.5 **_new_** * **github.com/stretchr/testify** v1.6.1 -> v1.7.0 * **github.com/vishvananda/netlink** f5de75959ad5 **_new_** * **github.com/vishvananda/netns** 2eb08e3e575f **_new_** * **go.etcd.io/bbolt** v1.3.5 -> v1.3.6 * **go.opencensus.io** v0.22.3 -> v0.22.4 * **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc** v0.28.0 **_new_** * **go.opentelemetry.io/otel** v1.3.0 **_new_** * **go.opentelemetry.io/otel/exporters/otlp/internal/retry** v1.3.0 **_new_** * **go.opentelemetry.io/otel/exporters/otlp/otlptrace** v1.3.0 **_new_** * **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc** v1.3.0 **_new_** * **go.opentelemetry.io/otel/sdk** v1.3.0 **_new_** * **go.opentelemetry.io/otel/trace** v1.3.0 **_new_** * **go.opentelemetry.io/proto/otlp** v0.11.0 **_new_** * **golang.org/x/net** e18ecbb05110 -> fe4d6282115f * **golang.org/x/oauth2** bf48bf16ab8d -> f6687ab2804c * **golang.org/x/sync** 09787c993a3a -> 036812b2e83c * **golang.org/x/sys** 47abb6519492 -> 1d35b9e2eb4e * **golang.org/x/term** 7de9c90e9dd1 -> 6a3ed077a48d * **golang.org/x/text** v0.3.4 -> v0.3.7 * **golang.org/x/time** 3af7569d3a1e -> 1f47c861a9ac * **google.golang.org/appengine** v1.6.5 -> v1.6.6 * **google.golang.org/grpc** v1.27.1 -> v1.43.0 * **google.golang.org/protobuf** v1.27.1 **_new_** * **gopkg.in/yaml.v3** 9f266ea9e77c -> 496545a6307b * **k8s.io/api** v0.20.6 -> v0.22.0 * **k8s.io/apimachinery** v0.20.6 -> v0.22.1 * **k8s.io/apiserver** v0.20.6 -> v0.22.0 * **k8s.io/client-go** v0.20.6 -> v0.22.0 * **k8s.io/component-base** v0.20.6 -> v0.22.0 * **k8s.io/cri-api** v0.20.6 -> v0.23.0-alpha.4 * **k8s.io/utils** 67b214c5f920 -> cb0fa318a74b Previous release can be found at [v1.5.0](https://github.com/containerd/containerd/releases/tag/v1.5.0)
-
v1.5.9
containerd 1.5.9 Welcome to the v1.5.9 release of containerd! The ninth patch release for containerd 1.5 is a security release to fix CVE-2021-43816. ### Notable Updates * **Fix unprivileged pod using 'hostPath' bypassing SELinux labels** ([GHSA-mvff-h3cj-wj9c](https://github.com/containerd/containerd/security/advisories/GHSA-mvff-h3cj-wj9c)) * **Fix setting the "container_kvm_t" SELinux label** ([#6381](https://github.com/containerd/containerd/pull/6381)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Derek McGowan * Sebastiaan van Stijn * Michael Crosby * Phil Estes * Akihiro Suda * Fabiano Fidêncio * Samuel Karp * Wei Fu ### Changes <details><summary>13 commits</summary> <p> * Github Security Advisory [GHSA-mvff-h3cj-wj9c](https://github.com/containerd/containerd/security/advisories/GHSA-mvff-h3cj-wj9c) * [`e4b62aaa5`](https://github.com/containerd/containerd/commit/e4b62aaa50d95213c5ea11be1fae24ede7077dcc) Prepare release notes for v1.5.9 * [`a41213fed`](https://github.com/containerd/containerd/commit/a41213fedbbf6436e8c2b647e72b3c2fc33f53b7) only relabel cri managed host mounts * [release/1.5] seutil: Fix setting the "container_kvm_t" label ([#6381](https://github.com/containerd/containerd/pull/6381)) * [`da5749b67`](https://github.com/containerd/containerd/commit/da5749b670823abd3fa03298c2e89cd22c8bfb6d) seutil: Fix setting the "container_kvm_t" label * [release/1.5] Update Go to 1.16.12 ([#6367](https://github.com/containerd/containerd/pull/6367)) * [`8c24a6199`](https://github.com/containerd/containerd/commit/8c24a619938d0060e1e64d5c7258ac2765e7d384) [release/1.5] Update Go to 1.16.12 * [release/1.5] go.mod github.com/opencontainers/image-spec v1.0.2 ([#6264](https://github.com/containerd/containerd/pull/6264)) * [`7ab52528b`](https://github.com/containerd/containerd/commit/7ab52528b41e57e7f1f2b3a69f599cb13d566a5e) [release/1.5] go.mod github.com/opencontainers/image-spec v1.0.2 * [release/1.5] update runc binary to v1.0.3 ([#6343](https://github.com/containerd/containerd/pull/6343)) * [`16b5aa2c8`](https://github.com/containerd/containerd/commit/16b5aa2c812208af1db6115b9a84482f0ab7a5ae) update runc binary to v1.0.3 * [release/1.5] Update Go to 1.16.11 ([#6334](https://github.com/containerd/containerd/pull/6334)) * [`3ff8be2d9`](https://github.com/containerd/containerd/commit/3ff8be2d9875d5bae92a98beabc909e833d619f8) [release/1.5] Update Go to 1.16.11 </p> </details> ### Dependency Changes * **github.com/opencontainers/image-spec** v1.0.1 -> v1.0.2 Previous release can be found at [v1.5.8](https://github.com/containerd/containerd/releases/tag/v1.5.8)