moby: update to v20.10.21

Bumping moby to version v20.10.21, which comprises the following commits:

        f99cb8297b integration: download busybox-w32 from GitHub Release
        3f9dc25f5c update containerd binary to v1.6.9
        87ccd38cea vendor: moby/term, Azure/go-ansiterm for golang.org/x/sys/windows compatibility
        e83e465ae2 [20.10] vendor: github.com/moby/buildkit eeb7b65ab7d651770a5ec52a06ea7c96eb97a249 (v0.8 branch)
        9c84417c1b skip TestImagePullStoredfDigestForOtherRepo() on Windows and rootless
        5b5b5c6f13 builder: add missing doc comment
        05e25f7892 builder: fix running git commands on Windows
        2f3bf18014 [20.10] vendor moby/buildkit v0.8.3-31-gc0149372
        6699afa549 registry: allow "allow-nondistributable-artifacts" for Docker Hub
        4b9902bad4 Validate digest in repo for pull by digest
        c0d1188c14 builder: make git config isolation opt-in
        9f5f3abcee builder: isolate git from local system
        10db4c2db7 builder: explicitly set CWD for all git commands
        8816c3c2aa builder: modernize TestCheckoutGit
        11bdbf40b9 [20.10] Update to go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715
        66ddb7f91c Fix live-restore w/ restart policies + volume refs
        c003392582 contrib: make dockerd-rootless-setuptool.sh more robust
        53313be0f3 docker-rootless-setuptools.sh: use context after install
        9c486bd267 swagger: update links to logo
        fa17fab895 vendor: github.com/containerd/console v1.0.2
        481bee51b5 vendor: github.com/armon/go-metrics v0.4.1
        39ba2873e8 vendor: github.com/google/btree v1.1.2
        c2755f40cd vendor: github.com/hasicorp/memberlist v0.4.0
        5ba3208ec7 Dockerfile: Update Dockerfile syntax, switch to bullseye, add missing libseccomp-dev, remove build pack
        6d6a236286 [20.10] Update uses of Image platform fields in OCI image-spec
        2570784169 [20.10] vendor: github.com/moby/buildkit 3a1eeca59a9263613d996ead67d53a4b7d45723d (v0.8 branch)
        fcd4df906b Update some tests for supplementary group permissions
        6a0186b357 Wrap local calls to the content and lease service
        3d4616f943 Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190
        23c7d84b84 docs: api: adjust ContainerWaitResponse error as optional
        3e9e79d134 docs: api: document ImageSummary fields (api v1.39-v1.41)
        fdd438ae03 api: docs: improve documentation of ContainerConfig type (API v1.30-v1.41)
        97014a8db5 namesgenerator: remove Valentina Tereshkova
        e44d7f735e AdditionalGids must include effective group ID
        9e7662e4a7 [20.10] vendor: update containerd to latest of docker-20.10 branch
        7dac25a3a9 vendor: update tar-split to v0.11.2
        8bd86a0699 update containerd binary to v1.6.8
        6c8dd6a6f2 update runc to v1.1.4
        418c141e64 [20.10 backport] daemon: kill exec process on ctx cancel
        d127287d92 Allow different syscalls from kernels 5.12 -> 5.16
        57db169641 seccomp: add support for Landlock syscalls in default policy
reverted by patch: 7ba8ca042c Update golang to 1.18.5
reverted by patch: f2a3c3bcef update golang to 1.18.4
reverted by patch: a99c9cd852 update golang to 1.18.3
reverted by patch: 82939f536b update golang to 1.18.2
reverted by patch: ecd1aa081f update golang to 1.18.1
reverted by patch: 7ba67d05a8 [20.10] vendor: update archive/tar for go 1.18
reverted by patch: 0bc432241e update golang to 1.18.0
        bb95d09f9a staticcheck: ignore "SA1019: strings.Title is deprecated"
        a7299ae72c Dockerfile: update golangci-lint v1.44.0
        d97fd533cf integration-cli: SA5011: possible nil pointer dereference (staticcheck)
        e6aee04a88 client.NewClientWithOpts(): remove redundant type assertion (gosimple)
        0523323c28 daemon/logger/awslogs: suppress false positive on hardcoded creds (gosec)
        adeb29c64c client/request.go:157:8: SA1019: err.Temporary is deprecated (staticcheck)
        50361d91a6 registry: trimV1Address(): simplify trimming trailing slash
        ae3a9337dd golangci.yml: do not limit max reported issues
        9820255a1c golangci.yml: skip some tests
        d223f37300 golangci.yml: update regex for ignoring SA1019
        ec3bfba89d graphdriver: temporarily ignore unsafeptr: possible misuse of reflect.SliceHeader
        f2f387b131 daemon: var-declaration: should omit type bool (revive)
        2fb7c9fea7 daemon/config: error strings should not be capitalized
        fa6954cb98 reformat "nolint" comments
        45fa675a35 if-return: redundant if ...; err != nil check (revive)
        9e88f8435a daemon/splunk: ignore G402: TLS MinVersion too low for now
        2de90ebbe4 pkg/archive: RebaseArchiveEntries(): ignore G110
        14b475d091 daemon/stats: fix notRunningErr / notFoundErr detected as unused (false positive)
        db7b3f4737 unused: ignore false positives
        b6de0ca7c5 G601: Implicit memory aliasing in for loop
        e8b838e99f gosec: G601: Implicit memory aliasing in for loop
        2ddf6e598a gosimple: S1039: unnecessary use of fmt.Sprintf
        fadf8bbdff staticcheck: SA4001: &*x will be simplified to x. It will not copy x
        7573e32577 client: S1031: unnecessary nil check around range (gosimple)
        e738a57a6d daemon/logger/journald: fix linting errors
        34f6b94255 gosec: G404: Use of weak random number generator
        a6d7b61c8b update containerd binary to v1.6.7
        b4ba1ee22f update runc binary to v1.1.3
        da8828c4b3 api: swagger: fix invalid example value (API v1.39-v1.41)
        9501d91e19 api: swagger: document BuildCache fields (API v1.39-v1.41)
        61fdea902b api: swagger: document BuildCache fields.
        c77432c889 [20.10] Update golang to 1.17.13
        2833aa1e4b docs: api: add missing "platform" query-arg on create (v1.41)
        a8c28260ad api: swagger: add missing "platform" query-arg on create
        cfdc075b1c Fix file capabilities droping in Dockerfile
        2daa6bb6b3 Windows: Re-create custom NAT networks after restart if missing from HNS
        903cd53ce4 vendor: libnetwork 0dde5c895075df6e3630e76f750a447cf63f4789
        eccaf6d368 [20.10] update golang to 1.17.12
        ff7feeac37 vendor: github.com/containerd/continuity v0.3.0

    Bumping libnetwork to version v0.7.0-dev.3-1841-gdcdf8f17, which comprises the following commits:

        5e08bdb1 Revert: Added API to set ephemeral port allocator range
        563fe8e2 README.md: repo was moved to https://github.com/moby/moby/tree/master/libnetwork
        bea0bcf5 libnetwork: skip firewalld management for rootless
        af0c46d8 Apply peformance tuning to new sandboxes also

    Bumping docker-cli to version v20.10.21, which comprises the following commits:

        3e3677e47d docs: fix links to BuildKit backend
        20e3951aeb Remove "experimental" gates around "--platform" in bash completion
        75d7ce92a2 fixed the plugin command docker-runc
        a12c535f6e [20.10] vendor docker 03df974ae9e6c219862907efdd76ec2e77ec930b (v20.10.20)
        d18a3e9004 [20.10] vendor moby/buildkit v0.8.3-31-gc0149372
        932ca73874 [20.10] vendor: github.com/docker/docker v20.10.19
        7d51e65e72 [20.10] vendor: github.com/moby/buildkit 3a1eeca59a9263613d996ead67d53a4b7d45723d (v0.8 branch)
        1ea8d69d6f feat(docker): add context argument completion
        e82aa85741 [20.10] vendor: github.com/docker/docker v20.10.18
        e9176b36cc [20.10] vendor: github.com/containerd/continuity v0.3.0
        bc6ff39e42 docs/reference: run.md update confusing example name
        3fa7a8654f docs: update deprecation status for "overlay2.override_kernel_check"
        3e06ce8bfa [20.10] Update go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715
        93eead45ee Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190
        45075ea08c [20.10] vendor: github.com/docker/docker v20.10.17
        c2dcaecf19 make compose plugin detection in bash completion work on Mac OS
        613b9362d0 Detect compose plugin
        b30d250320 Add completion for docker-compose plugin
        6b25bc3003 fix race condition in TestRemoveForce
        bdac0b38d9 Update golang to 1.18.5
        c70b01ec1f update golang to 1.18.4
        0389090aeb update golang to 1.18.3
        c904936d69 update golang to 1.18.2
        386d50c2e9 update golang to 1.18.1
        990186f2f6 update go to 1.18.0
        86bf1966e2 staticcheck: ignore SA1019: strings.Title is deprecated
        b3022b91d1 [20.10] Dockerfile.lint: use go install
        f14ba9f5d7 [20.10] Dockerfile: use syntax=docker/dockerfile:1
        c189c4dbea [20.10] vendor: github.com/json-iterator/go v1.1.12 for Go 1.18 compatibility
        0c46ffc1f9 [20.10] vendor: github.com/modern-go/reflect2 v1.0.2 for Go 1.18 compatibility
        6be9ce798e [20.10] vendor: github.com/google/gofuzz v1.0.0
        779ed309a8 lint: update golangci-lint to v1.45.2
        2f7e84be65 linting: fix incorrectly formatted errors (revive)
        e628209d9b linting: ignore some "G101: Potential hardcoded credentials" warnings
        80a3add604 cli/command/container: unnecessary use of fmt.Sprintf (gosimple)
        80fb0d575e [20.10] Update golang to 1.17.13
        d72bef2088 [20.10] update golang to 1.17.12
        7502d7e560 Fix dead external link
        308624c3b1 fix: remove asterisk from docker command suggestions
        de7d866b6a [20.10] update golang to 1.17.11
        240e4b5501 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad
        5d4776bd90 [20.10] update golang to 1.17.10
        49e9c2ae3d vendor: golang.org/x/sys  63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17)
        87a3ce2699 vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456
        1d8abed17d vendor: update x/sys to 134d130e
        31dad66f9a [20.10] update golang to 1.17.9
        80f673bf9e gofmt with go1.17
        3d4cc8e699 [20.10] update remaining files to go1.17.8
        30277a8f80 update go to 1.17.8
        cfef3a7dc1 docs: deprecated: add entry for "fluent-async-connect" log-opt
        53426025c3 [20.10] docs: reformat table for compatibility
        573a664639 Describe privileged mode in terms of capabilities
        cf0ab7ac4c [20.10] vendor: github.com/docker/distribution v2.8.1
        d05fd4ffc8 [20.10] vendor: github.com/opencontainers/image-spec v1.0.2
        870f138250 [20.10] vendor: github.com/docker/docker v20.10.14
        198d6b8724 [20.10] circleci: update buildx to v0.8.2
        55a14ec851 [20.10] update remaining Dockerfiles to go 1.16.15
        1f9a0df05a e2e: update docker-compose to 1.29.2
        4ae338b33a docs: reference: remove trailing space to fix yaml formatting
        6380142dd4 docs: fix (table) formatting, fix some broken links
        82f422fcf3 docs: build: fix minor markdown and syntax issues
        80fd77903b Update the list of log drivers
        c3d4d623c8 Fix CMD --ignored-param1 example
        2e82d11def docs: dockerd: fix broken link in blockquote area
        738a6ee1cc improve cp documentation with some illustration examples
        246d96bb6c docs: unify "docker create" and "docker run" reference
        2fd0f17057 docs: add missing documentation for --pull flag
        5fa500000a Fix incorrect pointer inputs to `json.Unmarshal`
        1e6a8ce2b7 Dockerfile: update xx to 1.1
        6f7a931a2d [20.10] use GO_LDFLAGS instead of LDFLAGS to prevent inheriting unrelated options
        91bab605f7 [20.10] vendor.conf: don't use git:// protocol
        a282e0c5d2 [20.10] update to go 1.16.15 to address CVE-2022-24921
        700364e304 Fix mistake with env var example in docker run docs
        62d27c32ff Update WORKDIR command information
        c0e952cf04 Fix the (dead) link for docs for Dockerfile syntax reference
        04104a04d3 Update dockerd.md
        b721998b7b Fixing typo (his --> its)
        4065e1246e format create.md table
        f1002eb9fb Fix typo
        e97c7b240e added missing closing parenthese
        aa78937634 Update stats.md add example json output
        40fe0573aa Update Ubuntu version number references in push.md
        c9737e1c37 docs/daemon: replace deprecated '-g' option for '--data-root'
        5c6723d080 Correct device syntax to --gpus
        fd5fc61ecd [20.10] Update Go to 1.16.14
        3624019d83 [20.10] update Go to 1.16.13
        f3ff8e6ad6 [20.10] vendor: compose-on-kubernetes v0.5.0 to remove github.com/golang/glog
        ee1ac1b319 fix innocuous data-race when config.Load called in parallel
        38dd744a11 [20.10] Update Go to 1.16.12
        4de40a825e Update Go to 1.16.11
        03fa8f92c8 Update Go to 1.16.10
        9989fdbc40 Update most links in docs to use https by default
        0e20c1fd21 Update Go to 1.16.9
        1c0927a041 Dockerfile: update tonistiigi/xx to 1.0.0-rc.2, add XX_VERSION arg
        82f9d5921b info: skip client-side warning about seccomp profile on API >= 1.42
        adb01ca79d docs: some minor touch-ups in checkpoint reference
        8260476a06 docs: remove trailing space to fix generated YAML format
        bce2e1f953 docs: create.md: typo fix
        44064f51c8 Fix typo in documentation - build.md
        292779add5 Add doc for BUILDKIT_PROGRESS env var
        f2e79b826c docs: use "console" code-hint for shell examples
        fa46b92361 docs: rewrite reference docs for --stop-signal and --stop-timeout
        400f81089a experimental: fix broken link to "checkpoint and restore" page
        c72057c8db docs: move checkpoint/restore doc from experimental into reference
        77db97d595 Use private network address for default-address-pools setting in daemon.json example
        cbf0d2b7b7 docs: fix some broken anchors
        d0014a86bc docs: fix description of restart-delay to mention max (1 minute)
        6c1c8b55aa docs: fix search results by filterd is-official
        44fdac11f5 Update Go to 1.16.8
        061051c24d docs: add missing redirect, and remove /go/experimental redirect
        2012fbf111 Update Go to 1.16.7
        42d1c02750 registry: ensure default auth config has address
        0b924e51fc Update to go1.16.6
        6288e8b1ac change TestNewAPIClientFromFlagsWithHttpProxyEnv to an e2e test
        1e9575e81a cli/config/configfile: various test cleanups
        c98e9c47ca Use designated test domains (RFC2606) in tests
        8437cfefae context: deprecate support for encrypted TLS private keys
        68a5ca859f cli/context: ignore linting warnings about RFC 1423 encryption
        8a64739631 Update Dockerfiles to latest syntax, remove "experimental"
        1d37fb3027 Deprecate Kubernetes context support
        0793f96394 Deprecate Kubernetes stack support
        b639ea8b89 Deprecate Kubernetes stack support

Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>

recipes-containers/docker/docker-ce_git.bb

@@ -31,9 +31,9 @@ DESCRIPTION = "Linux container runtime \
 # so we get that tag, and make it our SRCREVS:
 #
 
-SRCREV_docker = "3949ff121ee486eb73484f6c4708d199f68c930e"
-SRCREV_libnetwork = "f6ccccb1c082a432c2a5814aaedaca56af33d9ea"
-SRCREV_cli = "100c70180fde3601def79a59cc3e996aa553c9b9"
+SRCREV_docker = "3056208812eb5e792fa99736c9167d1e10f4ab49"
+SRCREV_libnetwork = "dcdf8f176d1e13ad719e913e796fb698d846de98"
+SRCREV_cli = "baeda1f82a10204ec5708d5fbba130ad76cfee49"
 SRCREV_FORMAT = "docker_libnetwork"
 SRC_URI = "\
 	git://github.com/docker/docker.git;branch=20.10;name=docker;protocol=https \
@@ -43,6 +43,7 @@ SRC_URI = "\
 	file://docker.init \
         file://0001-dynbinary-use-go-cross-compiler.patch \
         file://0001-cli-use-external-GO111MODULE-and-cross-compiler.patch \
+    file://0001-revert-go-1.8-update.patch;patchdir=src/import \
 	"
 
 DOCKER_COMMIT = "${SRCREV_docker}"
@@ -53,7 +54,7 @@ require docker.inc
 LICENSE = "Apache-2.0"
 LIC_FILES_CHKSUM = "file://src/import/LICENSE;md5=4859e97a9c7780e77972d989f0823f28"
 
-DOCKER_VERSION = "20.10.17-ce"
+DOCKER_VERSION = "20.10.21-ce"
 PV = "${DOCKER_VERSION}+git${SRCREV_docker}"
 
 CVE_PRODUCT = "docker mobyproject:moby"

recipes-containers/docker/docker-moby_git.bb

@@ -34,9 +34,9 @@ DESCRIPTION = "Linux container runtime \
 #   - The common components of this recipe and docker-ce do need to be moved
 #     to a docker.inc recipe
 
-SRCREV_moby = "3949ff121ee486eb73484f6c4708d199f68c930e"
-SRCREV_libnetwork = "f6ccccb1c082a432c2a5814aaedaca56af33d9ea"
-SRCREV_cli = "100c70180fde3601def79a59cc3e996aa553c9b9"
+SRCREV_moby = "3056208812eb5e792fa99736c9167d1e10f4ab49"
+SRCREV_libnetwork = "dcdf8f176d1e13ad719e913e796fb698d846de98"
+SRCREV_cli = "baeda1f82a10204ec5708d5fbba130ad76cfee49"
 SRCREV_FORMAT = "moby_libnetwork"
 SRC_URI = "\
 	git://github.com/moby/moby.git;branch=20.10;name=moby;protocol=https \
@@ -46,6 +46,7 @@ SRC_URI = "\
 	file://0001-libnetwork-use-GO-instead-of-go.patch \
         file://0001-cli-use-external-GO111MODULE-and-cross-compiler.patch \
         file://0001-dynbinary-use-go-cross-compiler.patch \
+    file://0001-revert-go-1.8-update.patch;patchdir=src/import \
 	"
 
 DOCKER_COMMIT = "${SRCREV_moby}"
@@ -56,7 +57,7 @@ require docker.inc
 LICENSE = "Apache-2.0"
 LIC_FILES_CHKSUM = "file://src/import/LICENSE;md5=4859e97a9c7780e77972d989f0823f28"
 
-DOCKER_VERSION = "20.10.17"
+DOCKER_VERSION = "20.10.21"
 PV = "${DOCKER_VERSION}+git${SRCREV_moby}"
 
 CVE_PRODUCT = "docker mobyproject:moby"